last executing test programs: 6.39011853s ago: executing program 0 (id=9): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) r0 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x6) ftruncate(r0, 0x2000000) 6.292195612s ago: executing program 0 (id=11): rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = getpid() r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x7, &(0x7f0000000280)={0x17, 0x0, 0x8}) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffffffff5]}, 0x8, 0x80000) readv(r2, &(0x7f0000000240)=[{&(0x7f0000000000)=""/162, 0xa2}], 0x1) 6.291197012s ago: executing program 0 (id=13): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r3) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') mount(&(0x7f0000000000), &(0x7f00000000c0)='./cgroup\x00', 0x0, 0x1001, 0x0) mount$bind(0x0, &(0x7f0000000180)='./cgroup\x00', 0x0, 0x2108cff, 0x0) 4.560829613s ago: executing program 4 (id=20): syz_emit_ethernet(0x36, &(0x7f0000000680)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x9, 0x28, 0x68, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x4, 0x2}}}}}}, 0x0) 4.546750813s ago: executing program 0 (id=21): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r0, 0x1003, 0x1, 0x0, 0x0) 4.522771674s ago: executing program 4 (id=22): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0) readv(r1, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/15, 0xf}], 0x1) 4.455947976s ago: executing program 0 (id=24): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x9) r1 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, 0x0, 0x0}, 0x94) socket$packet(0x11, 0x2, 0x300) read$alg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r2}, &(0x7f0000000380), &(0x7f0000000480)=r3}, 0x20) sendmsg$netlink(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="20000000110001000000000000000000100000e60b"], 0x20}], 0x1}, 0x0) 4.394719227s ago: executing program 4 (id=25): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') lseek(r0, 0x1, 0x0) 4.084338674s ago: executing program 4 (id=27): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="010000030000000000000100000004000480080002000100000008000100000000000400088018000c8014000b8008000a008fee00000800090000c4e3cfe9"], 0x44}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) 4.049194475s ago: executing program 4 (id=31): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x20040084) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x42400, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) close(r4) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r7, &(0x7f0000000200)={&(0x7f0000000540)=@xdp={0x2c, 0x8, r6, 0x42}, 0x80, &(0x7f0000000980)=[{&(0x7f00000001c0)='\x00', 0x1}], 0x1}, 0x2000600d) 2.352200645s ago: executing program 2 (id=47): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000680)='syzkaller\x00'}, 0x6b) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.351890645s ago: executing program 2 (id=48): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x2481, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r3) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="440000004ec6"}) 2.293628147s ago: executing program 3 (id=49): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000100)="6164642073797a30205b32372f30e75b2fac53f11450a5c29c7daefeca500623084a288273bd34065d4cb230e2c2a67f35896e8b2c", 0x35) 2.277275367s ago: executing program 2 (id=50): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xec90}, {0x0}], 0x2) unshare(0x100000) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x44}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000840)={r3, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x0, 0x2, 0x5, 0x8, 0x4}, 0x9c) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20044190}, 0x40000) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8) 2.228109718s ago: executing program 3 (id=51): r0 = syz_open_dev$dvb_dvr(&(0x7f0000000000), 0x0, 0x0) ioctl$DVB_DVR_DMX_SET_BUFFER_SIZE(r0, 0x6f2d, 0x7fffffffffffffff) ioctl$DVB_DVR_DMX_SET_BUFFER_SIZE(r0, 0x6f2d, 0xcb) 2.227040458s ago: executing program 3 (id=52): r0 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000030000000000000100000004000480080002000100000008000100000000000400088018000c8014000b8008000a008fee00000800090000c4e3cfe9"], 0x44}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) 2.14410566s ago: executing program 3 (id=53): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYRESHEX=0x0, @ANYRES8=0x0, @ANYRES8], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0) socket$kcm(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) bind$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) syz_emit_ethernet(0x7e, &(0x7f00000001c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @empty, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, '\x00', 0x48, 0x11, 0xe562b48021685062, @local, @mcast2, {[], {0x4e1d, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "dc521c259b538a2bf2a113dc2eeec0a072edf20b6d59027f", "d646c098cfc27eb8549d66e7b219c2c3b85e4508546e551af9e59631718ba089"}}}}}}}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) sendto(r3, &(0x7f0000000180)='%', 0x300000, 0x840, 0x0, 0x60) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) socket$inet6(0xa, 0x80002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) 1.416249357s ago: executing program 1 (id=56): syz_open_procfs(0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000680)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x9, 0x28, 0x265, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x4}}}}}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000680)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x9, 0x28, 0x68, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x4, 0x2}}}}}}, 0x0) 1.395028597s ago: executing program 1 (id=57): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x6, 0x4, 0x4, 0x6, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc) 1.373537718s ago: executing program 2 (id=58): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x68, r1, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0xa5, @media='udp\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x24000040}, 0x20000000) 1.328598059s ago: executing program 1 (id=59): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000680)='syzkaller\x00'}, 0x6b) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.328233029s ago: executing program 1 (id=60): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x1000000000000f, &(0x7f0000000180)=0x57bb, 0x3c) setsockopt$sock_attach_bpf(r0, 0x1, 0x34, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x44, &(0x7f0000000040)={0x0, 0x0}, 0x10) 1.327783719s ago: executing program 2 (id=61): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000100)="6164642073797a30205b32372f30e75b2fac53f11450a5c29c7daefeca500623084a288273bd34065d4cb230e2c2a67f35896e8b2c", 0x35) 1.2802771s ago: executing program 1 (id=62): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, 0x0, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8004) 1.124590334s ago: executing program 3 (id=63): r0 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000030000000000000100000004000480080002000100000008000100000000000400088018000c8014000b8008000a008fee00000800090000c4e3cfe9"], 0x44}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) 1.113730454s ago: executing program 2 (id=64): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = syz_open_dev$usbmon(&(0x7f0000000240), 0x8, 0x0) ioctl$MON_IOCT_RING_SIZE(r4, 0x9204, 0x49cdee) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2}}, 0x20) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000240)=@pppol2tpv3in6={0x18, 0x1, {0x0, r5, 0x0, 0x0, 0x4, 0x0, {0xa, 0x4e23, 0x80, @empty, 0xbb25}}}, 0x3a) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r7, 0x89f4, &(0x7f0000000a00)={'sit0\x00', 0x0}) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)={0x30, r8, 0x801, 0x70bd29, 0x0, {0x7}, [@L2TP_ATTR_IFNAME={0x14}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x7}]}, 0x30}}, 0x0) 1.057970386s ago: executing program 3 (id=65): bpf$MAP_CREATE(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x7, 0x10c062) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0xc8901, 0x196) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x0, {0x0, 0x0, 0x0, 0x5a, 0x6010000000000ffd, 0x0, 0x0, 0x19, 0x19, "faf98317e5a1149989fc8dbe43ee6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60b534464c516bdd8a0f3500", "42d8cc26f7061a74df2cfc1fc89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd0c7f3f800b2f7b6aa54cc50c1fcaed1e831fa79a00", "141802c4daf4162e43ac61b7ad3300", [0xbffffffffffffce8, 0x100]}}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) fsopen(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/platform/devices/snd_aloop.0/driver/unbind\x00', 0x1, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f0000000120), 0x1, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r3, 0xc2604111, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000120), 0x1, 0x2) write(r2, &(0x7f00000002c0)='snd_aloop.0', 0xb) 56.370269ms ago: executing program 0 (id=66): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8080, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x4, 0x0, 0x1}}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=@newqdisc={0x6c, 0x24, 0x41f, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x1000, 0xa, 0x64, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xff, 0x1, 0x1}}]}}]}, 0x6c}}, 0x0) 352.8µs ago: executing program 4 (id=67): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newnexthop={0x40, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_ID={0x8, 0x1, 0x3}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}, @NHA_GROUP={0x14, 0x2, [{0x1, 0x1}, {0x2, 0x1}]}, @NHA_RES_GROUP={0x4}]}, 0x40}}, 0x0) 0s ago: executing program 1 (id=68): r0 = syz_open_dev$video(&(0x7f0000000080), 0x7, 0x40000) ioctl$VIDIOC_LOG_STATUS(r0, 0x5646, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x4000000008b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$packet(0x11, 0x2, 0x300) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', &(0x7f00000000c0)={0x0, 0x0, 0x3}, 0x65) socket$packet(0x11, 0x3, 0x300) setsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000180)={r1, 0xffffffffffffffff}, 0xc) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x15c, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffffb}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @lifetime_val={0x24, 0x9, {0xf, 0x3ff, 0x9, 0x100}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=@newsa={0x140, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@multicast2, @in=@dev={0xac, 0x14, 0x14, 0x6}, 0x4e20, 0x4, 0x4e23, 0x4000, 0xa, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@mcast1, {0x300, 0x5, 0xeb, 0xffff, 0x3, 0x5, 0x7}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffc}, {0xfffffffb, 0x3fc}, 0x80, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_SET_MARK={0x8, 0x1d, 0xfffffeff}]}, 0x140}}, 0x844) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.32' (ED25519) to the list of known hosts. [ 29.431314][ T4316] cgroup: Unknown subsys name 'net' [ 29.654588][ T4316] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 29.896891][ T4316] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 30.639776][ T4332] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 30.641458][ T4330] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 30.643317][ T4335] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 30.645293][ T4335] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 30.650486][ T4330] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 30.651724][ T4330] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 30.653531][ T4330] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 30.654704][ T4330] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 30.655976][ T4330] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 30.657791][ T4337] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 30.658980][ T4337] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 30.660230][ T4337] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 30.660466][ T4341] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 30.663263][ T4337] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 30.665080][ T4337] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 30.666420][ T4337] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 30.667797][ T4342] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 30.668570][ T4337] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 30.670122][ T4342] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 30.684472][ T4342] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 30.686377][ T4342] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 30.690348][ T4342] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 30.691814][ T4332] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 30.691879][ T4342] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 30.693366][ T4332] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 30.695617][ T4342] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 30.695699][ T4332] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 30.698275][ T4342] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 30.717289][ T4330] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 30.718682][ T4330] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 30.804478][ T4334] chnl_net:caif_netlink_parms(): no params data found [ 30.814855][ T4328] chnl_net:caif_netlink_parms(): no params data found [ 30.820857][ T4329] chnl_net:caif_netlink_parms(): no params data found [ 30.856489][ T4334] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.857638][ T4334] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.859093][ T4334] device bridge_slave_0 entered promiscuous mode [ 30.869636][ T4334] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.870818][ T4334] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.873054][ T4334] device bridge_slave_1 entered promiscuous mode [ 30.874565][ T4328] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.875733][ T4328] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.877160][ T4328] device bridge_slave_0 entered promiscuous mode [ 30.879632][ T4328] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.880750][ T4328] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.882633][ T4328] device bridge_slave_1 entered promiscuous mode [ 30.885171][ T4329] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.886295][ T4329] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.887798][ T4329] device bridge_slave_0 entered promiscuous mode [ 30.889567][ T4329] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.890640][ T4329] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.892734][ T4329] device bridge_slave_1 entered promiscuous mode [ 30.911797][ T4329] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.924359][ T4328] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.926844][ T4334] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.930818][ T4329] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.935706][ T4334] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.939912][ T4328] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.953294][ T4329] team0: Port device team_slave_0 added [ 30.956226][ T4338] chnl_net:caif_netlink_parms(): no params data found [ 30.961177][ T4334] team0: Port device team_slave_0 added [ 30.963760][ T4329] team0: Port device team_slave_1 added [ 30.964826][ T4339] chnl_net:caif_netlink_parms(): no params data found [ 30.972847][ T4328] team0: Port device team_slave_0 added [ 30.974702][ T4328] team0: Port device team_slave_1 added [ 30.976333][ T4334] team0: Port device team_slave_1 added [ 30.984458][ T4329] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.985510][ T4329] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.989490][ T4329] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.003896][ T4329] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.005034][ T4329] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.009111][ T4329] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.011231][ T4328] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.013294][ T4328] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.017105][ T4328] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.028381][ T4338] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.029555][ T4338] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.031002][ T4338] device bridge_slave_0 entered promiscuous mode [ 31.035353][ T4328] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.036387][ T4328] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.040328][ T4328] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.043804][ T4334] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.044928][ T4334] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.048982][ T4334] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.055403][ T4338] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.056517][ T4338] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.057928][ T4338] device bridge_slave_1 entered promiscuous mode [ 31.094057][ T4329] device hsr_slave_0 entered promiscuous mode [ 31.152223][ T4329] device hsr_slave_1 entered promiscuous mode [ 31.196198][ T4334] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.197316][ T4334] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.201282][ T4334] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.210237][ T4338] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.213764][ T4339] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.214878][ T4339] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.216222][ T4339] device bridge_slave_0 entered promiscuous mode [ 31.219284][ T4338] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.253133][ T4328] device hsr_slave_0 entered promiscuous mode [ 31.292333][ T4328] device hsr_slave_1 entered promiscuous mode [ 31.332152][ T4328] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.333433][ T4328] Cannot create hsr debugfs directory [ 31.334415][ T4339] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.335563][ T4339] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.336945][ T4339] device bridge_slave_1 entered promiscuous mode [ 31.353367][ T4338] team0: Port device team_slave_0 added [ 31.360319][ T4338] team0: Port device team_slave_1 added [ 31.371776][ T4339] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.423852][ T4334] device hsr_slave_0 entered promiscuous mode [ 31.462230][ T4334] device hsr_slave_1 entered promiscuous mode [ 31.502127][ T4334] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.503231][ T4334] Cannot create hsr debugfs directory [ 31.510249][ T4339] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.513566][ T4338] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.514688][ T4338] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.518508][ T4338] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.526812][ T4338] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.527853][ T4338] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.531738][ T4338] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.545509][ T4339] team0: Port device team_slave_0 added [ 31.556751][ T4339] team0: Port device team_slave_1 added [ 31.593562][ T4338] device hsr_slave_0 entered promiscuous mode [ 31.632230][ T4338] device hsr_slave_1 entered promiscuous mode [ 31.672202][ T4338] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.673360][ T4338] Cannot create hsr debugfs directory [ 31.675213][ T4339] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.676239][ T4339] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.680022][ T4339] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.695290][ T4339] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.696347][ T4339] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.700371][ T4339] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.753320][ T4339] device hsr_slave_0 entered promiscuous mode [ 31.792343][ T4339] device hsr_slave_1 entered promiscuous mode [ 31.832133][ T4339] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.833253][ T4339] Cannot create hsr debugfs directory [ 31.851666][ T4329] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 31.925903][ T4329] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 31.973415][ T4329] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 32.014726][ T4329] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 32.053880][ T4328] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 32.094167][ T4328] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 32.141759][ T4334] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 32.194899][ T4328] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 32.233125][ T4328] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 32.277076][ T4334] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 32.303005][ T4334] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 32.339262][ T4334] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 32.402902][ T4338] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 32.434018][ T4338] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 32.483673][ T4338] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 32.533913][ T4338] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 32.589244][ T4339] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 32.623945][ T4339] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 32.667289][ T4339] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 32.693767][ T4339] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 32.732444][ T4330] Bluetooth: hci4: command 0x0409 tx timeout [ 32.733447][ T4330] Bluetooth: hci1: command 0x0409 tx timeout [ 32.734378][ T4330] Bluetooth: hci2: command 0x0409 tx timeout [ 32.735323][ T4330] Bluetooth: hci0: command 0x0409 tx timeout [ 32.742165][ T4335] Bluetooth: hci3: command 0x0409 tx timeout [ 32.764065][ T4329] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.766443][ T4328] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.777402][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.779447][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.781721][ T4329] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.791787][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.794016][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.795540][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.796683][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.798123][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.799501][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.800905][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.809791][ T4328] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.811765][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.813621][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.815070][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.816179][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.817520][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.824956][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.830373][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.834738][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.836202][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.837393][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.839055][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.845599][ T4339] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.848709][ T4334] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.849894][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.851483][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.856814][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.858308][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.860153][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.861195][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.864201][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.868732][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.878962][ T4338] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.885287][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.886862][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.888601][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.890220][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.891738][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.901702][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.906208][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.907638][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.909269][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.910815][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.912349][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.914372][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.917448][ T4334] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.921294][ T4339] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.926483][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.927999][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.929828][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.931316][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.933120][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.934535][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.936012][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.937138][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.938505][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.940004][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.941339][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.942464][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.944165][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.945685][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.949850][ T4338] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.952934][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.954386][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.955931][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.957442][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.958900][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.960390][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.961528][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.965795][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.969004][ T4328] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.970955][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.975342][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.979597][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.981161][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.983940][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.985360][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.986830][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.987942][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.989198][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.990798][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.992984][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.994409][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.995515][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.996760][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 33.011219][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 33.013226][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 33.014731][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 33.016353][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.017493][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.018709][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 33.020286][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 33.021890][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 33.024198][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 33.025607][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 33.032462][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 33.038625][ T4334] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 33.040077][ T4334] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 33.045401][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 33.046945][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 33.052822][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 33.054367][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 33.055767][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 33.057153][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 33.058720][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.060284][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 33.061699][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.070421][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 33.071946][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 33.073906][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 33.075413][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.076980][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 33.078436][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.079821][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 33.081430][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 33.086312][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 33.094495][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 33.096206][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 33.097770][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 33.099351][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 33.100873][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 33.106877][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.111420][ T4338] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 33.116425][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 33.118097][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 33.119459][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 33.123180][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.138597][ T1619] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.139910][ T1619] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.145167][ T4328] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.158945][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.160212][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.170878][ T4329] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.172600][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.174092][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.197055][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.198615][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.200342][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.201688][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.214793][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.216153][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.219012][ T4339] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.221167][ T4328] device veth0_vlan entered promiscuous mode [ 33.224735][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.226329][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.234322][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.235849][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.237954][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.239350][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.241021][ T4328] device veth1_vlan entered promiscuous mode [ 33.258776][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.260352][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.261623][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.263504][ T4329] device veth0_vlan entered promiscuous mode [ 33.270053][ T4334] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.271815][ T4329] device veth1_vlan entered promiscuous mode [ 33.287648][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.289165][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.290525][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.291921][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.293842][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.303245][ T4328] device veth0_macvtap entered promiscuous mode [ 33.305016][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.306408][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.307981][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.311859][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.313232][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.318622][ T4338] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.324041][ T4328] device veth1_macvtap entered promiscuous mode [ 33.331696][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.333703][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.335189][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.336569][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.338006][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.340731][ T4329] device veth0_macvtap entered promiscuous mode [ 33.343408][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.345159][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.346690][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.358511][ T4328] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.360091][ T4329] device veth1_macvtap entered promiscuous mode [ 33.371234][ T4334] device veth0_vlan entered promiscuous mode [ 33.373265][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.374785][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.376263][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.377677][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.379221][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.380666][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.385606][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.393509][ T4328] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.394732][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.396169][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.398130][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.399648][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.401161][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.405586][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.413869][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.415524][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.417404][ T4329] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.419062][ T4334] device veth1_vlan entered promiscuous mode [ 33.421196][ T4328] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.423161][ T4328] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.424470][ T4328] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.425789][ T4328] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.428170][ T4338] device veth0_vlan entered promiscuous mode [ 33.429394][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.430803][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.433955][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.436573][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.438129][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.440064][ T4329] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.445483][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.446918][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.448484][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.449922][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.451438][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.454553][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.461162][ T4339] device veth0_vlan entered promiscuous mode [ 33.464180][ T4338] device veth1_vlan entered promiscuous mode [ 33.473864][ T4329] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.475283][ T4329] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.476699][ T4329] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.478061][ T4329] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.498651][ T4338] device veth0_macvtap entered promiscuous mode [ 33.504697][ T4334] device veth0_macvtap entered promiscuous mode [ 33.506810][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.508248][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.509584][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.511012][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.513966][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.515647][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.517208][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.518837][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.520350][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.523222][ T4338] device veth1_macvtap entered promiscuous mode [ 33.524754][ T4339] device veth1_vlan entered promiscuous mode [ 33.541332][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.542670][ T4334] device veth1_macvtap entered promiscuous mode [ 33.543982][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.546136][ T4334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.547781][ T4334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.549329][ T4334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.550828][ T4334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.554606][ T4334] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.559388][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.560859][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.562700][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.564149][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.565625][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.566991][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.568562][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.570565][ T4334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.573235][ T4334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.574715][ T4334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.576250][ T4334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.579117][ T4334] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.589980][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.591583][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.597233][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.598515][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.601339][ T4338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.603901][ T4338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.605391][ T4338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.606917][ T4338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.608358][ T4338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.609888][ T4338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.611855][ T4338] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.618772][ T4334] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.620076][ T4334] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.621388][ T4334] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.623653][ T4334] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.626155][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.627582][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.629093][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.634008][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.634242][ T4338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.635234][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.636886][ T4338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.648088][ T4338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.649781][ T4338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.651202][ T4338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.653332][ T4338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.655595][ T4338] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.659482][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.660828][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.663553][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.676348][ T4339] device veth0_macvtap entered promiscuous mode [ 33.678309][ T4338] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.679669][ T4338] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.681092][ T4338] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.685203][ T4338] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.689241][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.690802][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.692442][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.693961][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.700396][ T4339] device veth1_macvtap entered promiscuous mode [ 33.705718][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.707152][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.708677][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.734356][ T4339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.736006][ T4339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.737686][ T4339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.739343][ T4339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.740876][ T4339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.746225][ T4339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.747992][ T4339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.749686][ T4339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.751917][ T4339] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.754396][ T4339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.755960][ T4339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.757480][ T4339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.759102][ T4339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.760672][ T4339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.764809][ T4339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.766136][ T4339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.767737][ T4339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.769686][ T4339] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.772002][ T4339] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.775615][ T4339] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.776915][ T4339] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.778267][ T4339] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.804852][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.820409][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.843021][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.844584][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.846147][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.847604][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.849046][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.858015][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.859296][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.860586][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.863563][ T4413] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 33.864913][ T4413] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.964475][ T4330] Bluetooth: hci3: command 0x041b tx timeout [ 34.965447][ T4330] Bluetooth: hci0: command 0x041b tx timeout [ 34.966314][ T4330] Bluetooth: hci2: command 0x041b tx timeout [ 34.967211][ T4330] Bluetooth: hci1: command 0x041b tx timeout [ 34.968101][ T4330] Bluetooth: hci4: command 0x041b tx timeout [ 35.044150][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.045410][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.060106][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 35.070349][ T4421] futex_wake_op: syz.1.7 tries to shift op by 144; fix this program [ 35.071704][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.072904][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.074806][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 35.086646][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.087956][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.089220][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 35.095586][ T4419] syz.4.5: vmalloc error: size 9223372036854775807, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz4,mems_allowed=0 [ 35.106561][ T4419] CPU: 0 PID: 4419 Comm: syz.4.5 Not tainted syzkaller #0 [ 35.107681][ T4419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 35.109199][ T4419] Call trace: [ 35.109752][ T4419] dump_backtrace+0x1c4/0x1f0 [ 35.110477][ T4419] show_stack+0x2c/0x3c [ 35.111109][ T4419] __dump_stack+0x30/0x40 [ 35.111829][ T4419] dump_stack_lvl+0xf4/0x15c [ 35.112587][ T4419] dump_stack+0x1c/0x5c [ 35.113219][ T4419] warn_alloc+0x214/0x324 [ 35.113899][ T4419] __vmalloc_node_range+0x118/0xe70 [ 35.114694][ T4419] vmalloc+0x9c/0xd4 [ 35.115295][ T4419] dvb_dvr_do_ioctl+0x120/0x1f8 [ 35.116058][ T4419] dvb_usercopy+0x248/0x45c [ 35.116805][ T4419] dvb_dvr_ioctl+0x3c/0x54 [ 35.117475][ T4419] __arm64_sys_ioctl+0x14c/0x1c8 [ 35.118239][ T4419] invoke_syscall+0x98/0x290 [ 35.118974][ T4419] el0_svc_common+0x13c/0x258 [ 35.119835][ T4419] do_el0_svc+0x5c/0x134 [ 35.120588][ T4419] el0_svc+0x58/0x128 [ 35.121246][ T4419] el0t_64_sync_handler+0x84/0xf0 [ 35.122033][ T4419] el0t_64_sync+0x18c/0x190 [ 35.139020][ T4419] Mem-Info: [ 35.139578][ T4419] active_anon:4805 inactive_anon:0 isolated_anon:0 [ 35.139578][ T4419] active_file:4528 inactive_file:2072 isolated_file:0 [ 35.139578][ T4419] unevictable:768 dirty:1703 writeback:0 [ 35.139578][ T4419] slab_reclaimable:18781 slab_unreclaimable:87012 [ 35.139578][ T4419] mapped:28941 shmem:953 pagetables:563 [ 35.139578][ T4419] sec_pagetables:0 bounce:0 [ 35.139578][ T4419] kernel_misc_reclaimable:0 [ 35.139578][ T4419] free:1455080 free_pcp:5086 free_cma:7360 [ 35.158313][ T4419] Node 0 active_anon:19320kB inactive_anon:0kB active_file:18112kB inactive_file:8288kB unevictable:3072kB isolated(anon):0kB isolated(file):0kB mapped:115764kB dirty:6812kB writeback:0kB shmem:3812kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:7880kB pagetables:2252kB sec_pagetables:0kB all_unreclaimable? no [ 35.159384][ T4426] tmpfs: Bad value for 'huge' [ 35.163671][ T4419] Node 0 DMA free:3076864kB boost:0kB min:20660kB low:25824kB high:30988kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145728kB managed:3080192kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:29440kB [ 35.169505][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.170807][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.184387][ T4419] lowmem_reserve[]: 0 0 3550 3550 3550 [ 35.185371][ T4419] Node 0 Normal free:2739992kB boost:0kB min:24392kB low:30488kB high:36584kB reserved_highatomic:0KB active_anon:19220kB inactive_anon:0kB active_file:18112kB inactive_file:8288kB unevictable:3072kB writepending:6812kB present:5242880kB managed:3639740kB mlocked:0kB bounce:0kB free_pcp:20824kB local_pcp:11196kB free_cma:0kB [ 35.201375][ T4419] lowmem_reserve[]: 0 0 0 0 0 [ 35.202630][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 35.229306][ T4419] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 1*256kB (C) 1*512kB (C) 0*1024kB 0*2048kB 751*4096kB (MC) = 3076864kB [ 35.234907][ T4430] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1'. [ 35.250367][ T4419] Node 0 Normal: 10*4kB (E) 1*8kB (M) 1*16kB (U) 1*32kB (U) 3*64kB (UME) 6*128kB (UM) 4*256kB (M) 15*512kB (ME) 7*1024kB (UME) 3*2048kB (M) 663*4096kB (M) = 2738720kB [ 35.259283][ T4419] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 35.267580][ T4419] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=32768kB [ 35.268901][ T4419] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 35.286589][ T4437] jffs2: notice: (4437) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 35.294714][ T4419] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=64kB [ 35.296074][ T4419] 7792 total pagecache pages [ 35.296716][ T4419] 0 pages in swap cache [ 35.297265][ T4419] Free swap = 124996kB [ 35.297908][ T4419] Total swap = 124996kB [ 35.298509][ T4419] 2097152 pages RAM [ 35.299084][ T4419] 0 pages HighMem/MovableOnly [ 35.299790][ T4419] 417169 pages reserved [ 35.300392][ T4419] 8192 pages cma reserved [ 35.321717][ T4419] 0 pages hwpoisoned [ 35.758134][ T4455] ======================================================= [ 35.758134][ T4455] WARNING: The mand mount option has been deprecated and [ 35.758134][ T4455] and is ignored by this kernel. Remove the mand [ 35.758134][ T4455] option from the mount to silence this warning. [ 35.758134][ T4455] ======================================================= [ 36.461932][ T4463] kAFS: bad VL server IP address [ 36.731170][ T4466] sched: RT throttling activated [ 36.972209][ T4335] Bluetooth: hci4: command 0x040f tx timeout [ 36.974406][ T4330] Bluetooth: hci1: command 0x040f tx timeout [ 36.975677][ T4342] Bluetooth: hci2: command 0x040f tx timeout [ 36.976890][ T4342] Bluetooth: hci0: command 0x040f tx timeout [ 36.977786][ T4342] Bluetooth: hci3: command 0x040f tx timeout [ 36.993306][ T4473] ieee802154 phy0 wpan0: encryption failed: -22 [ 37.138652][ T4475] usb usb8: usbfs: process 4475 (syz.2.19) did not claim interface 0 before use [ 37.322829][ T4488] process 'syz.2.23' launched './file0' with NULL argv: empty string added [ 37.645155][ T4504] device syzkaller0 entered promiscuous mode [ 37.670938][ T4508] syz.2.34 uses obsolete (PF_INET,SOCK_PACKET) [ 39.052491][ T4335] Bluetooth: hci4: command 0x0419 tx timeout [ 39.053925][ T4332] Bluetooth: hci1: command 0x0419 tx timeout [ 39.054906][ T4330] Bluetooth: hci3: command 0x0419 tx timeout [ 39.054924][ T4342] Bluetooth: hci0: command 0x0419 tx timeout [ 39.055780][ T4330] Bluetooth: hci2: command 0x0419 tx timeout [ 39.289229][ T4553] tipc: Started in network mode [ 39.290098][ T4553] tipc: Node identity 5a196d41053e, cluster identity 4711 [ 39.291240][ T4553] tipc: Enabled bearer , priority 0 [ 39.297983][ T4553] syzkaller0: MTU too low for tipc bearer [ 39.299037][ T4553] tipc: Disabling bearer [ 39.585302][ T4562] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 39.594672][ T4562] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 39.607001][ T4562] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 39.618899][ T4562] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 39.627983][ T4562] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 40.006565][ T4562] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 40.008787][ T4562] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 40.015977][ T4569] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 40.018015][ T4569] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 40.025551][ T4569] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 40.072816][ T4569] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 40.119394][ T4569] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 40.121167][ T4569] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 40.127349][ T4569] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 40.129359][ T4569] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 40.131234][ T4569] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 40.136454][ T4569] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 40.573608][ T4595] netlink: 'syz.1.62': attribute type 1 has an invalid length. [ 40.585262][ T4595] 8021q: adding VLAN 0 to HW filter on device bond1 [ 41.667921][ T4592] ================================================================== [ 41.669223][ T4592] BUG: KASAN: use-after-free in release_card_device+0x188/0x198 [ 41.670462][ T4592] Read of size 1 at addr ffff0000d526cd99 by task syz.3.65/4592 [ 41.671677][ T4592] [ 41.672032][ T4592] CPU: 1 PID: 4592 Comm: syz.3.65 Not tainted syzkaller #0 [ 41.673075][ T4592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 41.674555][ T4592] Call trace: [ 41.675051][ T4592] dump_backtrace+0x1c4/0x1f0 [ 41.675749][ T4592] show_stack+0x2c/0x3c [ 41.676404][ T4592] __dump_stack+0x30/0x40 [ 41.677060][ T4592] dump_stack_lvl+0xf4/0x15c [ 41.677742][ T4592] print_address_description+0x88/0x218 [ 41.678525][ T4592] print_report+0x50/0x68 [ 41.679170][ T4592] kasan_report+0xa8/0xfc [ 41.679835][ T4592] __asan_report_load1_noabort+0x2c/0x38 [ 41.680688][ T4592] release_card_device+0x188/0x198 [ 41.681452][ T4592] device_release+0x94/0x1b4 [ 41.682113][ T4592] kobject_put+0x2a8/0x41c [ 41.682724][ T4592] put_device+0x28/0x40 [ 41.683355][ T4592] snd_card_file_remove+0x2e4/0x340 [ 41.684152][ T4592] snd_pcm_release+0x120/0x14c [ 41.684842][ T4592] snd_disconnect_release+0x224/0x298 [ 41.685680][ T4592] __fput+0x1b4/0x7b0 [ 41.686259][ T4592] ____fput+0x20/0x30 [ 41.686890][ T4592] task_work_run+0x1f4/0x280 [ 41.687556][ T4592] do_notify_resume+0x20f8/0x2c84 [ 41.688371][ T4592] el0_svc+0x98/0x128 [ 41.688966][ T4592] el0t_64_sync_handler+0x84/0xf0 [ 41.689748][ T4592] el0t_64_sync+0x18c/0x190 [ 41.690427][ T4592] [ 41.690792][ T4592] The buggy address belongs to the physical page: [ 41.691769][ T4592] page:000000005143f5eb refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x11526c [ 41.693422][ T4592] flags: 0x5ffc00000000000(node=0|zone=2|lastcpupid=0x7ff) [ 41.694479][ T4592] raw: 05ffc00000000000 fffffc00036d8f08 ffff00019f3aa0b0 0000000000000000 [ 41.695792][ T4592] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 41.697110][ T4592] page dumped because: kasan: bad access detected [ 41.698074][ T4592] [ 41.698405][ T4592] Memory state around the buggy address: [ 41.699248][ T4592] ffff0000d526cc80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 41.700339][ T4592] ffff0000d526cd00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 41.701471][ T4592] >ffff0000d526cd80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 41.702603][ T4592] ^ [ 41.703268][ T4592] ffff0000d526ce00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 41.704501][ T4592] ffff0000d526ce80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 41.705708][ T4592] ================================================================== [ 41.714721][ T4605] vivid-000: ================= START STATUS ================= [ 41.720690][ T4592] Disabling lock debugging due to kernel taint [ 41.721105][ T4605] vivid-000: Test Pattern: [ 41.721679][ T4592] ------------[ cut here ]------------ [ 41.721714][ T4605] 75% Colorbar [ 41.722585][ T4592] ODEBUG: free active (active state 0) object type: timer_list hint: tun_flow_cleanup+0x0/0x400 [ 41.725552][ T4605] [ 41.725958][ T4605] vivid-000: Fill Percentage of Frame: 100 [ 41.727111][ T4592] WARNING: CPU: 0 PID: 4592 at lib/debugobjects.c:518 debug_check_no_obj_freed+0x2d4/0x454 [ 41.727603][ T4605] vivid-000: Horizontal Movement: [ 41.728664][ T4592] Modules linked in: [ 41.728677][ T4592] CPU: 0 PID: 4592 Comm: syz.3.65 Tainted: G B syzkaller #0 [ 41.729621][ T4605] No Movement [ 41.730164][ T4592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 41.731690][ T4605] [ 41.732135][ T4592] pstate: 62400005 (nZCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 41.732154][ T4592] pc : debug_check_no_obj_freed+0x2d4/0x454 [ 41.732164][ T4592] lr : debug_check_no_obj_freed+0x2d4/0x454 [ 41.732169][ T4592] sp : ffff800021607670 [ 41.732172][ T4592] x29: ffff8000216076a0 x28: ffff0000d229ad40 x27: 0000000000000000 [ 41.732183][ T4592] x26: ffff800011d1b280 x25: ffff0000d526f540 x24: ffff80000c8ea820 [ 41.732194][ T4592] x23: 1ffff0000391055c x22: ffff0000d5270000 x21: dfff800000000000 [ 41.732205][ T4592] x20: ffff800011d1b288 x19: ffff0000d526c000 x18: 1fffe00033e6df7e [ 41.732215][ T4592] x17: ffff80001539d000 x16: ffff800008043b30 x15: 0000000040000000 [ 41.732223][ T4592] x14: 0000000000000001 x13: 1fffe00033e70670 x12: 0000000000000000 [ 41.732230][ T4592] x11: ff00800008048e14 x10: 0000000040000000 x9 : 6f4d917883a45900 [ 41.734501][ T4605] vivid-000: Vertical Movement: [ 41.735247][ T4592] [ 41.735252][ T4592] x8 : 6f4d917883a45900 x7 : ffff800011cfc160 [ 41.736203][ T4605] No Movement [ 41.736996][ T4592] x6 : ffff80000825ab50 [ 41.737617][ T4605] [ 41.738664][ T4592] [ 41.738669][ T4592] x5 : 0000000000000000 x4 : 0000000000000001 [ 41.740085][ T4605] vivid-000: OSD Text Mode: [ 41.741102][ T4592] x3 : 0000000000000000 [ 41.741117][ T4592] x2 : ffff800021607220 [ 41.742785][ T4605] All [ 41.743527][ T4592] x1 : 0000000000000000 x0 : ffff80000825abe4 [ 41.743549][ T4592] Call trace: [ 41.744857][ T4605] [ 41.745891][ T4592] debug_check_no_obj_freed+0x2d4/0x454 [ 41.745907][ T4592] free_unref_page_prepare+0x740/0xb24 [ 41.746677][ T4605] vivid-000: Show Border: [ 41.746998][ T4592] free_unref_page+0x7c/0x3a0 [ 41.747836][ T4605] false [ 41.748202][ T4592] __free_pages+0x1a0/0x1cc [ 41.748763][ T4605] [ 41.749076][ T4592] free_large_kmalloc+0xc8/0x158 [ 41.749443][ T4605] vivid-000: Show Square: [ 41.750177][ T4592] kfree+0xf4/0x1a8 [ 41.750904][ T4605] false [ 41.751344][ T4592] release_card_device+0x130/0x198 [ 41.751901][ T4605] [ 41.752239][ T4592] device_release+0x94/0x1b4 [ 41.753616][ T4605] vivid-000: Sensor Flipped Horizontally: [ 41.753782][ T4592] kobject_put+0x2a8/0x41c [ 41.754713][ T4605] false [ 41.755413][ T4592] put_device+0x28/0x40 [ 41.756126][ T4605] [ 41.756697][ T4592] snd_card_file_remove+0x2e4/0x340 [ 41.757081][ T4605] vivid-000: Sensor Flipped Vertically: [ 41.757778][ T4592] snd_pcm_release+0x120/0x14c [ 41.758220][ T4605] false [ 41.758948][ T4592] snd_disconnect_release+0x224/0x298 [ 41.759672][ T4605] [ 41.760152][ T4592] __fput+0x1b4/0x7b0 [ 41.760554][ T4605] vivid-000: Insert SAV Code in Image: [ 41.761303][ T4592] ____fput+0x20/0x30 [ 41.761778][ T4605] false [ 41.762334][ T4592] task_work_run+0x1f4/0x280 [ 41.763747][ T4605] [ 41.763859][ T4592] do_notify_resume+0x20f8/0x2c84 [ 41.764218][ T4605] vivid-000: Insert EAV Code in Image: [ 41.764849][ T4592] el0_svc+0x98/0x128 [ 41.765602][ T4605] false [ 41.765874][ T4592] el0t_64_sync_handler+0x84/0xf0 [ 41.766917][ T4605] [ 41.767602][ T4592] el0t_64_sync+0x18c/0x190 [ 41.768658][ T4605] vivid-000: Insert Video Guard Band: [ 41.768795][ T4592] irq event stamp: 12063 [ 41.769269][ T4605] false [ 41.769779][ T4592] hardirqs last enabled at (12063): [] finish_lock_switch+0xb0/0x1c8 [ 41.770564][ T4605] [ 41.771076][ T4592] hardirqs last disabled at (12062): [] __schedule+0x294/0x1a6c [ 41.771438][ T4605] vivid-000: Reduced Framerate: [ 41.772129][ T4592] softirqs last enabled at (11732): [] handle_softirqs+0xb1c/0xc90 [ 41.772157][ T4592] softirqs last disabled at (11561): [] __do_softirq+0x14/0x20 [ 41.772165][ T4592] ---[ end trace 0000000000000000 ]--- [ 41.786614][ T4605] false [ 41.787066][ T4605] vivid-000: Enable Capture Cropping: true [ 41.788085][ T4605] vivid-000: Enable Capture Composing: true [ 41.788928][ T4605] vivid-000: Enable Capture Scaler: true [ 41.789906][ T4605] vivid-000: Timestamp Source: End of Frame [ 41.790764][ T4605] vivid-000: Colorspace: Rec. 709 [ 41.791859][ T4605] vivid-000: Transfer Function: Default [ 41.792796][ T4605] vivid-000: Y'CbCr Encoding: Default [ 41.793703][ T4605] vivid-000: HSV Encoding: Hue 0-179 [ 41.794540][ T4605] vivid-000: Quantization: Default [ 41.795388][ T4605] vivid-000: Apply Alpha To Red Only: false [ 41.796230][ T4605] vivid-000: Standard Aspect Ratio: 4x3 [ 41.797249][ T4605] vivid-000: DV Timings Signal Mode: Current DV Timings [ 41.798352][ T4605] vivid-000: DV Timings: 640x480p59 inactive [ 41.799489][ T4605] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 41.800738][ T4605] vivid-000: Maximum EDID Blocks: 2 [ 41.801576][ T4605] vivid-000: Limited RGB Range (16-235): true [ 41.822019][ T4605] vivid-000: Rx RGB Quantization Range: Automatic [ 41.823350][ T4605] vivid-000: Power Present: 0x00000001 [ 41.824174][ T4605] tpg source WxH: 1280x720 (Y'CbCr) [ 41.825077][ T4605] tpg field: 1 [ 41.825565][ T4605] tpg crop: 1280x64@0x0 [ 41.826217][ T4605] tpg compose: 1024x16@0x704 [ 41.826968][ T4605] tpg colorspace: 3 [ 41.827664][ T4605] tpg transfer function: 0/0 [ 41.828316][ T4605] tpg Y'CbCr encoding: 0/0 [ 41.829002][ T4605] tpg quantization: 0/0 [ 41.829655][ T4605] tpg RGB range: 0/1 [ 41.830386][ T4605] vivid-000: ================== END STATUS ================== [ 41.902255][ T4600] ------------[ cut here ]------------ [ 41.903162][ T4600] ODEBUG: assert_init not available (active state 0) object type: timer_list hint: tun_flow_cleanup+0x0/0x400 [ 41.905268][ T4600] WARNING: CPU: 1 PID: 4600 at lib/debugobjects.c:518 debug_print_object+0x140/0x1c8 [ 41.906671][ T4600] Modules linked in: [ 41.907383][ T4600] CPU: 1 PID: 4600 Comm: syz.0.66 Tainted: G B W syzkaller #0 [ 41.908914][ T4600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 41.910639][ T4600] pstate: 62400005 (nZCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 41.911927][ T4600] pc : debug_print_object+0x140/0x1c8 [ 41.912888][ T4600] lr : debug_print_object+0x140/0x1c8 [ 41.913800][ T4600] sp : ffff8000218e76c0 [ 41.914499][ T4600] x29: ffff8000218e76c0 x28: dfff800000000000 x27: ffff0000c6ba2c58 [ 41.915843][ T4600] x26: ffff8000153a0000 x25: ffff8000218e7728 x24: dfff800000000000 [ 41.917184][ T4600] x23: 0000000000000000 x22: ffff80000c8ea820 x21: ffff8000121f2bc0 [ 41.918499][ T4600] x20: ffff800011d1b280 x19: ffff8000121f26a0 x18: 1fffe00033e7217e [ 41.919945][ T4600] x17: ffff80001539d000 x16: ffff800008043b30 x15: 0000000040000000 [ 41.921320][ T4600] x14: 0000000000000001 x13: 1fffe00033e74870 x12: 0000000000000000 [ 41.922664][ T4600] x11: ff00800008048e14 x10: 0000000040000000 x9 : d25423bcbd2dea00 [ 41.923943][ T4600] x8 : d25423bcbd2dea00 x7 : ffff800011cfc160 x6 : ffff80000825ab50 [ 41.925241][ T4600] x5 : 0000000000000000 x4 : 0000000000000001 x3 : 0000000000000000 [ 41.926562][ T4600] x2 : ffff8000218e7280 x1 : 0000000000000000 x0 : ffff80000825abe4 [ 41.927757][ T4600] Call trace: [ 41.928268][ T4600] debug_print_object+0x140/0x1c8 [ 41.929022][ T4600] debug_object_assert_init+0x258/0x2d0 [ 41.929857][ T4600] __try_to_del_timer_sync+0x54/0x21c [ 41.930703][ T4600] __timer_delete_sync+0x168/0x21c [ 41.931461][ T4600] timer_delete_sync+0x24/0x34 [ 41.932204][ T4600] tun_flow_uninit+0x40/0x2f8 [ 41.932894][ T4600] tun_free_netdev+0x78/0xdc [ 41.933574][ T4600] netdev_run_todo+0xb80/0xd60 [ 41.934256][ T4600] rtnl_unlock+0x14/0x20 [ 41.934944][ T4600] tun_chr_close+0x148/0x1f4 [ 41.935657][ T4600] __fput+0x1b4/0x7b0 [ 41.936279][ T4600] ____fput+0x20/0x30 [ 41.936888][ T4600] task_work_run+0x1f4/0x280 [ 41.937599][ T4600] do_notify_resume+0x20f8/0x2c84 [ 41.938373][ T4600] el0_svc+0x98/0x128 [ 41.939005][ T4600] el0t_64_sync_handler+0x84/0xf0 [ 41.939747][ T4600] el0t_64_sync+0x18c/0x190 [ 41.940394][ T4600] irq event stamp: 2720 [ 41.941001][ T4600] hardirqs last enabled at (2719): [] _raw_spin_unlock_irqrestore+0x48/0xac [ 41.942729][ T4600] hardirqs last disabled at (2720): [] __schedule+0x294/0x1a6c [ 41.944053][ T4600] softirqs last enabled at (2700): [] local_bh_enable+0x10/0x34 [ 41.945439][ T4600] softirqs last disabled at (2698): [] local_bh_disable+0x10/0x34 [ 41.946822][ T4600] ---[ end trace 0000000000000000 ]--- [ 41.951826][ T4600] ------------[ cut here ]------------ [ 41.952699][ T4600] WARNING: CPU: 1 PID: 4600 at mm/slab_common.c:904 free_large_kmalloc+0x30/0x158 [ 41.954175][ T4600] Modules linked in: [ 41.954790][ T4600] CPU: 1 PID: 4600 Comm: syz.0.66 Tainted: G B W syzkaller #0 [ 41.956248][ T4600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 41.957697][ T4600] pstate: 42400005 (nZcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 41.958874][ T4600] pc : free_large_kmalloc+0x30/0x158 [ 41.959693][ T4600] lr : kfree+0xf4/0x1a8 [ 41.960313][ T4600] sp : ffff8000218e77c0 [ 41.960977][ T4600] x29: ffff8000218e77c0 x28: dfff800000000000 x27: 1ffff00002d3b3a4 [ 41.962214][ T4600] x26: 1fffe0001aa4d8d0 x25: 1fffe0001aa4d8d7 x24: 000000000000000d [ 41.963482][ T4600] x23: dfff800000000000 x22: dfff800000000000 x21: 0000000000040000 [ 41.964676][ T4600] x20: ffff0000d526c000 x19: fffffc0003549b00 x18: 1fffe00033e7217e [ 41.966045][ T4600] x17: ffff80001539d000 x16: ffff800011b9ccb8 x15: 0000000000000000 [ 41.967434][ T4600] x14: ffff60001aa4d8d7 x13: 1fffe0001aa4d8d7 x12: 00000000000000ff [ 41.968697][ T4600] x11: ff0080000808d058 x10: fffffc00036d8f07 x9 : fffffc00036d8f08 [ 41.969973][ T4600] x8 : ffff800017d7e000 x7 : 0000000000000000 x6 : ffff8000082b57b0 [ 41.971253][ T4600] x5 : ffff8000218e7860 x4 : 0000000000000000 x3 : ffff80000ff1d2f0 [ 41.972471][ T4600] x2 : 0000000000000000 x1 : ffff0000d526c000 x0 : fffffc0003549b00 [ 41.973720][ T4600] Call trace: [ 41.974208][ T4600] free_large_kmalloc+0x30/0x158 [ 41.974990][ T4600] kfree+0xf4/0x1a8 [ 41.975601][ T4600] kvfree+0x40/0x50 [ 41.976209][ T4600] netdev_freemem+0x4c/0x68 [ 41.976912][ T4600] netdev_release+0x88/0xb0 [ 41.977640][ T4600] device_release+0x94/0x1b4 [ 41.978378][ T4600] kobject_put+0x2a8/0x41c [ 41.979065][ T4600] netdev_run_todo+0xc34/0xd60 [ 41.979823][ T4600] rtnl_unlock+0x14/0x20 [ 41.980515][ T4600] tun_chr_close+0x148/0x1f4 [ 41.981253][ T4600] __fput+0x1b4/0x7b0 [ 41.981864][ T4600] ____fput+0x20/0x30 [ 41.982465][ T4600] task_work_run+0x1f4/0x280 [ 41.983188][ T4600] do_notify_resume+0x20f8/0x2c84 [ 41.983927][ T4600] el0_svc+0x98/0x128 [ 41.984580][ T4600] el0t_64_sync_handler+0x84/0xf0 [ 41.985337][ T4600] el0t_64_sync+0x18c/0x190 [ 41.986001][ T4600] irq event stamp: 2720 [ 41.986649][ T4600] hardirqs last enabled at (2719): [] _raw_spin_unlock_irqrestore+0x48/0xac [ 41.988204][ T4600] hardirqs last disabled at (2720): [] __schedule+0x294/0x1a6c [ 41.989612][ T4600] softirqs last enabled at (2700): [] local_bh_enable+0x10/0x34 [ 41.990999][ T4600] softirqs last disabled at (2698): [] local_bh_disable+0x10/0x34 [ 41.992380][ T4600] ---[ end trace 0000000000000000 ]--- [ 41.994512][ T4600] object pointer: 0x000000004143300f [ 41.995384][ T4600] page:000000005143f5eb refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x11526c [ 41.997254][ T4600] flags: 0x5ffc00000000000(node=0|zone=2|lastcpupid=0x7ff) [ 41.998397][ T4600] raw: 05ffc00000000000 fffffc00036d8f08 fffffc000344f408 0000000000000000 [ 41.999680][ T4600] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 42.000898][ T4600] page dumped because: VM_BUG_ON_PAGE(page_ref_count(page) == 0) [ 42.002050][ T4600] ------------[ cut here ]------------ [ 42.002864][ T4600] kernel BUG at include/linux/mm.h:780! [ 42.003680][ T4600] Internal error: Oops - BUG: 00000000f2000800 [#1] PREEMPT SMP [ 42.004828][ T4600] Modules linked in: [ 42.005425][ T4600] CPU: 0 PID: 4600 Comm: syz.0.66 Tainted: G B W syzkaller #0 [ 42.006686][ T4600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 42.008229][ T4600] pstate: 82400005 (Nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 42.009393][ T4600] pc : __free_pages+0x160/0x1cc [ 42.010145][ T4600] lr : __free_pages+0x160/0x1cc [ 42.010885][ T4600] sp : ffff8000218e7780 [ 42.011578][ T4600] x29: ffff8000218e7780 x28: dfff800000000000 x27: 1ffff00002d3b3a4 [ 42.012891][ T4600] x26: 1fffe0001aa4d8d0 x25: 1fffe0001aa4d8d7 x24: 000000000000000d [ 42.014098][ T4600] x23: dfff800000000000 x22: 05ffc00000000000 x21: fffffc0003549b34 [ 42.015272][ T4600] x20: 0000000000000000 x19: fffffc0003549b00 x18: 1fffe00033e7217e [ 42.016498][ T4600] x17: 0000000000000000 x16: ffff800011b9ccb8 x15: 0000000000000000 [ 42.017701][ T4600] x14: 0000000000000001 x13: 1fffe00033e6dfa3 x12: 0000000000000000 [ 42.018969][ T4600] x11: ff008000087c9bac x10: 0000000000000000 x9 : ffff8000087c9bac [ 42.020157][ T4600] x8 : ffff0000d165d400 x7 : 0000000000000001 x6 : 0000000000000001 [ 42.021394][ T4600] x5 : ffff8000218e71b8 x4 : ffff800015484e80 x3 : ffff800008540a1c [ 42.022616][ T4600] x2 : 0000000000000001 x1 : 0000000100000000 x0 : 000000000000003e [ 42.023932][ T4600] Call trace: [ 42.024412][ T4600] __free_pages+0x160/0x1cc [ 42.025115][ T4600] free_large_kmalloc+0xc8/0x158 [ 42.025847][ T4600] kfree+0xf4/0x1a8 [ 42.026473][ T4600] kvfree+0x40/0x50 [ 42.027072][ T4600] netdev_freemem+0x4c/0x68 [ 42.027732][ T4600] netdev_release+0x88/0xb0 [ 42.028415][ T4600] device_release+0x94/0x1b4 [ 42.029109][ T4600] kobject_put+0x2a8/0x41c [ 42.029781][ T4600] netdev_run_todo+0xc34/0xd60 [ 42.030505][ T4600] rtnl_unlock+0x14/0x20 [ 42.031173][ T4600] tun_chr_close+0x148/0x1f4 [ 42.031828][ T4600] __fput+0x1b4/0x7b0 [ 42.032443][ T4600] ____fput+0x20/0x30 [ 42.032987][ T4600] task_work_run+0x1f4/0x280 [ 42.033656][ T4600] do_notify_resume+0x20f8/0x2c84 [ 42.034375][ T4600] el0_svc+0x98/0x128 [ 42.034989][ T4600] el0t_64_sync_handler+0x84/0xf0 [ 42.035714][ T4600] el0t_64_sync+0x18c/0x190 [ 42.036439][ T4600] Code: d004aa41 91348021 aa1303e0 97fdfec8 (d4210000) [ 42.037443][ T4600] ---[ end trace 0000000000000000 ]--- [ 42.319908][ T4600] Kernel panic - not syncing: Oops - BUG: Fatal exception [ 42.320966][ T4600] SMP: stopping secondary CPUs [ 42.321614][ T4600] Kernel Offset: disabled [ 42.322306][ T4600] CPU features: 0x0a0000,000f0097,a65bfea7 [ 42.323238][ T4600] Memory Limit: none [ 42.619123][ T4600] Rebooting in 86400 seconds..