last executing test programs: 1.659517378s ago: executing program 1 (id=2): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r8, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x4890) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.403777625s ago: executing program 0 (id=1): socket$alg(0x26, 0x5, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x10000003}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xf, 0xb}, {0xffff, 0x2}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0xdf0}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f0000000240)="800000800000210ee7decd7a0003", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 1.365135995s ago: executing program 1 (id=6): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) bind$can_raw(r0, &(0x7f00000001c0), 0x10) sendmsg$alg(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) r1 = socket(0x15, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x271e, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9) 1.315621437s ago: executing program 1 (id=7): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=@newtfilter={0x74, 0x2c, 0xf3f, 0x70bd28, 0x25dddbbd, {0x0, 0x0, 0x0, r4, {0xc, 0x3da48c8682330ab8}, {}, {0x7, 0xfffa}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_EMATCHES={0x40, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x34, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x2, 0x3, 0x2}, {0x9, 0xfffffff9, 0x0, 0x3}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0xc50, 0x7, 0x2}, {{0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}}}]}]}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x20045080}, 0x4880) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r1, &(0x7f0000000240)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r4, 0x3e}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000200)="03", 0x1}, {&(0x7f00000005c0)="21920152b5aba5c23f7cf374e3cc4c", 0xf}], 0x2}, 0x20004014) 1.039200023s ago: executing program 0 (id=8): r0 = syz_open_dev$swradio(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f00000000c0)={0x30, 0xb, 0x4, 0x10, 0x0, {}, {0x7, 0x0, 0xa1, 0x7, 0x4, 0x2, "a094574b"}, 0x2, 0x4, {}, 0xfe7}) 1.018937204s ago: executing program 0 (id=9): socket(0x2b, 0x1, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) connect$inet6(r3, &(0x7f0000000300)={0xa, 0x4e1d, 0x6, @dev={0xfe, 0x80, '\x00', 0x3b}, 0x40000006}, 0x1c) syz_emit_ethernet(0x2e, &(0x7f0000000700)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000000800450000200000000000119078000000000000000000084e20000c9078819c0000"], 0x0) r4 = dup(r2) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000000)={0x3, 0x0, 0x0, 0x8, 0x13, "8e0a110800"}) write$UHID_INPUT(r4, &(0x7f0000001040)={0xd, {"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", 0x1010}}, 0x1b7) read$FUSE(r4, &(0x7f0000002080)={0x2020}, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r5, 0x0, 0x4, 0x0, 0x0) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) sched_setattr(r6, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0x52, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mlock2(&(0x7f00000cd000/0x4000)=nil, 0x4000, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0xa1001) ioctl$SNDRV_TIMER_IOCTL_SELECT(r7, 0x40345410, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newqdisc={0x24, 0x24, 0x402, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r8, {0x6}, {0xfff1, 0xffff}, {0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x803}, 0x10004005) 861.198588ms ago: executing program 4 (id=5): r0 = syz_open_dev$dvb_frontend(&(0x7f00000000c0), 0x0, 0x882) unshare(0x6020400) r1 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c0000001a000100000000000000cf0080202000000000000000000008001f"], 0x2c}}, 0x0) r4 = openat$cgroup_ro(r2, &(0x7f0000001100)='cgroup.events\x00', 0x5000000, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r8, {0xa, 0x9}, {}, {0xc, 0x8}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x1, 0xd}}, @TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0x4}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x60000080}, 0x20000000) readv(r4, &(0x7f00000012c0)=[{&(0x7f0000000100)=""/4080, 0xff0}], 0x1) ioctl$FE_SET_FRONTEND(r0, 0x40246f4c, &(0x7f0000000080)={0x30a32c0, 0x2, @ofdm={0x4, 0x0, 0x18, 0x2, 0x3, 0xa}}) 844.365159ms ago: executing program 2 (id=3): openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x20042000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x1, 0x0, 0x8}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x5}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x9}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0xc0d1}, 0x8800) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$IPSET_CMD_FLUSH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x4, 0x6, 0x5, 0x0, 0x0, {0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x58010}, 0x800) 785.42436ms ago: executing program 2 (id=10): syz_open_dev$tty1(0xc, 0x4, 0x1) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, 0x0, 0x80, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x30, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="24000000190001000000000000c3b2000a0000000003c8000000000008000600ffffffff"], 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) read$rfkill(r0, &(0x7f0000000040), 0x8) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r1, r0, 0x0, 0x11e) 750.362431ms ago: executing program 2 (id=11): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000020c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000002100)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0xfd94, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) ioctl$VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f0000000300)={0x4, @win={{0x8662, 0x3ff, 0x8}, 0x7, 0x10, 0x0, 0x6, 0x0, 0xfc}}) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4ea4, 0x9, @mcast1, 0x8}, r1, 0x8001}}, 0x48) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 709.474832ms ago: executing program 2 (id=12): r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) r1 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x800, 0x0, 0x3, 0x1, 0x8}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x2005, 0x4) sendmsg$inet6(r1, &(0x7f0000000140)={&(0x7f0000000100)={0xa, 0x4e60, 0x80000, @dev={0xfe, 0x80, '\x00', 0x3d}, 0xffffbffb}, 0x1c, 0x0, 0x0, &(0x7f0000000180)=[@dstopts_2292={{0x18, 0x29, 0x4, {0x33}}}, @hopopts={{0x18, 0x29, 0x36, {0xa2}}}], 0x30}, 0x3400c8d4) 653.191213ms ago: executing program 2 (id=13): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100), 0x22c82, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0305710, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000040)={{}, {0x18}, 0x10003, 0x2}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000d00)={0x4d5, 0x2, {0x1, 0x2, 0x8, 0x2, 0xfffffffe}, 0x2}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r1, 0x40505331, &(0x7f0000000540)={{}, {0x18}, 0x0, 0x6}) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)=0x0) syz_open_procfs(r2, &(0x7f00000002c0)='maps\x00') r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x148}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x58) accept4(r4, 0x0, 0x0, 0x0) io_uring_setup(0x664b, &(0x7f0000000500)) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x0) syz_usb_connect(0x5, 0x24, 0x0, 0x0) r5 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r5, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0x9}) open(&(0x7f0000000280)='.\x00', 0x0, 0x109) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 556.647076ms ago: executing program 3 (id=15): r0 = socket(0xa, 0x3, 0x3a) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syz_tun\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000000c0)={0x1, 0x0, 0x6, r2, 0x1}, 0xc) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000380)={0x0, 0x1, 0x43, r2, 0x2}, 0xc) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000740)=0x8, 0x4) 496.856268ms ago: executing program 4 (id=16): unshare(0x6020400) r0 = socket(0x11, 0x3, 0x0) setsockopt(r0, 0x107, 0x18, &(0x7f0000000000)="10000000", 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x17d) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) r2 = syz_create_resource$binfmt(&(0x7f00000003c0)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff) open_tree(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x902) r3 = socket$inet(0x2, 0x1, 0x0) r4 = socket$inet(0x2, 0x1, 0x6) bind(r4, &(0x7f0000000300)=@in={0x2, 0x4908, @loopback}, 0x10) listen(r4, 0x5) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000000)={0x6, @loopback, 0x15, 0x0, 'sh\x00', 0x10}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000100)={{0x6, @loopback, 0x15, 0x0, 'rr\x00', 0xe}, {@loopback, 0x4908, 0x0, 0x1}}, 0x44) r5 = socket$inet(0x2, 0x1, 0x6) connect(r5, &(0x7f0000000200)=@in={0x2, 0x15, @loopback}, 0x10) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c0300001000010400000000000000d0ffb6338e98d019c02ad700000000000000000010000000ddff030101000000060000000000000064353c0000000112341200a4f3e341bede4c09b989acb0c953c62ea657df34178adf2ad41246b03efa988db4b6ad573f19d71d4c", @ANYRES16=r1, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000001000004d23300000000000000000000000000000000000001ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c001400686d616328736861312900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000"], 0x13c}}, 0x0) sendmsg$nl_xfrm(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001300000400008ca9b3f3995251360160c003b12dae1b0000000000000000000000000000000082000000000100000000000000000000ffffffffffff4e241234000000000a0000cf5d000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100003c000000004400050000000000000000000000000000000001000004d2330000000a0000000000000000000000000000000000000100"/180], 0xfc}}, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r7, &(0x7f0000000200)={&(0x7f0000000400)={0xa, 0x1234, 0x0, @loopback}, 0x1c, 0x0}, 0x0) write(r5, &(0x7f0000000400)='PASV\r\n\x00', 0x6) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000002c0)={'veth1_to_batadv\x00', &(0x7f0000000000)=@ethtool_cmd={0x4c, 0xb, 0x76e, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x3f}}) syz_open_dev$ttys(0xc, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000340)=@generic={&(0x7f0000000300)='./file0\x00', 0x0, 0x10}, 0x18) socket(0x10, 0x3, 0x0) 416.069079ms ago: executing program 4 (id=17): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) preadv(0xffffffffffffffff, 0x0, 0x0, 0x8000000000000000, 0x0) 401.136239ms ago: executing program 3 (id=18): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x48, 0x10, 0x1, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x2b28d, 0x11a21}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_SPOOFCHK={0xc, 0x4, {0xfffffffe, 0xfffffff9}}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0xc1}, 0x48880) 293.403693ms ago: executing program 3 (id=19): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000007c0)={'vxcan0\x00', 0x0}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r1, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) sendmmsg$sock(r2, &(0x7f0000004980)=[{{&(0x7f0000000280)=@can={0x1d, r1, 0xc8}, 0x80, &(0x7f0000001fc0)=[{&(0x7f0000000840)="f31824d1", 0x4}, {0x0}], 0x2}}], 0x1, 0x40050) 292.689902ms ago: executing program 3 (id=20): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000090400"/20, @ANYRES32=r2, @ANYBLOB="020000000000000024001280110001006272696467655f736c617665000000000c00058005002b"], 0x44}}, 0x0) 237.157934ms ago: executing program 4 (id=21): r0 = syz_open_dev$swradio(&(0x7f00000046c0), 0x1, 0x2) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f0000000000)={0x20000, 0x2, 0x400001}) 230.546364ms ago: executing program 3 (id=22): r0 = io_uring_setup(0x76b0, &(0x7f00000000c0)={0x0, 0x1947c, 0x80, 0x1}) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) io_uring_enter(r0, 0x0, 0x2, 0xf, &(0x7f0000000000), 0x18) 157.413116ms ago: executing program 3 (id=23): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) close(0x3) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff1000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff3000/0x1000)=nil, &(0x7f0000ff1000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1c6c, &(0x7f0000000040)={0x0, 0xaebb, 0xd000, 0x20000a, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xfff2}, {0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 157.203446ms ago: executing program 4 (id=24): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x5}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x800}, @TCA_TBF_PARMS={0x28, 0x1, {{0x81, 0x0, 0xe, 0x7f, 0x800, 0x5}, {0x7, 0x2, 0x7, 0x1003, 0x5, 0x20000007}, 0x6db6312a, 0x7, 0x1257}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40008c1}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0x3}, {0xfff2, 0xb}, {0x0, 0x1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0xc0c0}, 0x44850) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r9, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r10, {0xb, 0xd}, {}, {0x8}}}, 0x24}}, 0x41814) 69.998378ms ago: executing program 0 (id=25): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) unshare(0x64000600) syz_usb_connect(0x3, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="120100009b23fd406d04c1088dee000000410902"], 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000), 0xc) 0s ago: executing program 2 (id=26): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1, 0x200000005c832, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000001080)={'veth0_to_batadv\x00', 0x1}) vmsplice(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f00000001c0)}], 0x1, 0xf) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}, 0x1, 0x0, 0x0, 0x40088c1}, 0x20000000) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001400)=@gettaction={0x138, 0x32, 0x8, 0x70bd2b, 0x25dfdbfd, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x4}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}, @action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x1}, @action_gd=@TCA_ACT_TAB={0x30, 0x1, [{0xc, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0x10, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x78, 0x1, [{0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xe4a2}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x10, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x14, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x3c, 0x1, [{0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0x14, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x20007}]}, 0x138}}, 0x4890) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'ipvlan0\x00', @random}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f00000005c0)="bad330fbc93f8b78040000ea0756a85d88a8", 0x16, 0x4041, &(0x7f00000001c0)={0x11, 0x8100, r5, 0x1, 0xd8, 0x6, @multicast}, 0x14) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xa, 0x204031, 0xffffffffffffffff, 0xc9751000) r7 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r7, 0x84, 0x70, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r7, 0xf502, 0x0) r8 = userfaultfd(0x801) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) r9 = userfaultfd(0x801) r10 = socket(0x29, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_clone3(&(0x7f0000000380)={0x20000000, 0x0, 0x0, 0x0, {0x37}, 0x0, 0x0, 0x0, 0x0}, 0x58) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r10, 0x6, 0x1d, 0x0, &(0x7f00000005c0)) ioctl$UFFDIO_API(r9, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_CONTINUE(r9, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.142' (ED25519) to the list of known hosts. [ 28.727745][ T4317] cgroup: Unknown subsys name 'net' [ 29.012881][ T4317] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 29.271643][ T4317] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 29.974912][ T4336] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 29.976774][ T4336] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 29.979143][ T4338] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 29.981052][ T4338] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 29.985039][ T4338] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 29.987213][ T4341] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 29.988549][ T4341] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 29.989884][ T4341] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 29.990425][ T4344] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 29.991861][ T4341] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 29.992906][ T4344] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 29.994110][ T4341] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 29.995248][ T4344] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 29.996144][ T4341] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 29.998085][ T4344] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 29.999807][ T4344] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 30.000656][ T4341] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 30.001332][ T4344] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 30.002787][ T4341] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 30.003602][ T4344] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 30.004834][ T4341] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 30.006344][ T4345] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 30.006788][ T4341] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 30.008213][ T4345] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 30.009140][ T4341] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 30.012289][ T4341] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 30.037231][ T4346] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 30.038974][ T4346] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 30.049519][ T4345] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 30.051147][ T4345] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 30.152384][ T4330] chnl_net:caif_netlink_parms(): no params data found [ 30.165602][ T4335] chnl_net:caif_netlink_parms(): no params data found [ 30.223412][ T4335] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.224789][ T4335] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.226355][ T4335] device bridge_slave_0 entered promiscuous mode [ 30.231541][ T4335] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.232829][ T4335] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.234396][ T4335] device bridge_slave_1 entered promiscuous mode [ 30.238142][ T4339] chnl_net:caif_netlink_parms(): no params data found [ 30.243867][ T4329] chnl_net:caif_netlink_parms(): no params data found [ 30.252586][ T4330] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.253909][ T4330] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.255465][ T4330] device bridge_slave_0 entered promiscuous mode [ 30.261685][ T4330] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.262970][ T4330] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.264571][ T4330] device bridge_slave_1 entered promiscuous mode [ 30.272448][ T4335] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.275822][ T4335] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.284641][ T4342] chnl_net:caif_netlink_parms(): no params data found [ 30.301679][ T4330] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.305689][ T4330] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.310382][ T4335] team0: Port device team_slave_0 added [ 30.313592][ T4339] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.314868][ T4339] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.316399][ T4339] device bridge_slave_0 entered promiscuous mode [ 30.327664][ T4330] team0: Port device team_slave_0 added [ 30.329549][ T4330] team0: Port device team_slave_1 added [ 30.332314][ T4335] team0: Port device team_slave_1 added [ 30.338372][ T4339] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.339652][ T4339] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.341410][ T4339] device bridge_slave_1 entered promiscuous mode [ 30.349726][ T4329] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.353318][ T4329] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.354894][ T4329] device bridge_slave_0 entered promiscuous mode [ 30.363311][ T4335] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.364525][ T4335] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.368759][ T4335] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.373463][ T4329] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.374863][ T4329] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.376388][ T4329] device bridge_slave_1 entered promiscuous mode [ 30.380086][ T4330] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.381183][ T4330] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.385262][ T4330] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.387986][ T4339] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.389919][ T4335] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.393622][ T4335] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.397744][ T4335] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.404012][ T4330] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.405148][ T4330] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.409252][ T4330] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.414521][ T4339] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.422304][ T4329] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.424946][ T4329] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.433122][ T4342] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.434436][ T4342] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.435976][ T4342] device bridge_slave_0 entered promiscuous mode [ 30.437819][ T4342] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.438943][ T4342] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.440643][ T4342] device bridge_slave_1 entered promiscuous mode [ 30.448595][ T4339] team0: Port device team_slave_0 added [ 30.501310][ T4330] device hsr_slave_0 entered promiscuous mode [ 30.540220][ T4330] device hsr_slave_1 entered promiscuous mode [ 30.585199][ T4339] team0: Port device team_slave_1 added [ 30.591881][ T4329] team0: Port device team_slave_0 added [ 30.593840][ T4342] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.641187][ T4335] device hsr_slave_0 entered promiscuous mode [ 30.690283][ T4335] device hsr_slave_1 entered promiscuous mode [ 30.750086][ T4335] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.751512][ T4335] Cannot create hsr debugfs directory [ 30.753219][ T4329] team0: Port device team_slave_1 added [ 30.755349][ T4342] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.767237][ T4339] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.768505][ T4339] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.773257][ T4339] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.784881][ T4339] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.786166][ T4339] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.793123][ T4339] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.795475][ T4329] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.796729][ T4329] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.801405][ T4329] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.804322][ T4342] team0: Port device team_slave_0 added [ 30.812604][ T4329] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.813781][ T4329] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.817820][ T4329] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.820881][ T4342] team0: Port device team_slave_1 added [ 30.841407][ T4342] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.842605][ T4342] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.846891][ T4342] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.857945][ T4342] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.859195][ T4342] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.864087][ T4342] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.891395][ T4339] device hsr_slave_0 entered promiscuous mode [ 30.930168][ T4339] device hsr_slave_1 entered promiscuous mode [ 30.980072][ T4339] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.981439][ T4339] Cannot create hsr debugfs directory [ 31.051161][ T4329] device hsr_slave_0 entered promiscuous mode [ 31.110217][ T4329] device hsr_slave_1 entered promiscuous mode [ 31.150040][ T4329] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.151427][ T4329] Cannot create hsr debugfs directory [ 31.251070][ T4342] device hsr_slave_0 entered promiscuous mode [ 31.292474][ T4342] device hsr_slave_1 entered promiscuous mode [ 31.340069][ T4342] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.341314][ T4342] Cannot create hsr debugfs directory [ 31.383324][ T4330] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 31.417953][ T4330] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 31.452054][ T4330] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 31.503317][ T4330] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 31.557896][ T4335] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 31.610486][ T4335] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 31.652326][ T4335] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 31.711404][ T4335] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 31.757630][ T4339] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 31.805286][ T4339] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 31.841087][ T4339] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 31.900339][ T4339] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 31.982758][ T4330] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.984994][ T4342] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 32.011434][ T4342] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 32.080203][ T48] Bluetooth: hci1: command 0x0409 tx timeout [ 32.082430][ T4342] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 32.090225][ T4338] Bluetooth: hci4: command 0x0409 tx timeout [ 32.091266][ T4338] Bluetooth: hci0: command 0x0409 tx timeout [ 32.092216][ T4338] Bluetooth: hci3: command 0x0409 tx timeout [ 32.093260][ T4338] Bluetooth: hci2: command 0x0409 tx timeout [ 32.125886][ T4342] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 32.184943][ T4329] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 32.212566][ T1772] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.214795][ T1772] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.218649][ T4329] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 32.272004][ T4330] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.273352][ T4329] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 32.315676][ T4335] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.321392][ T4329] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 32.362635][ T1806] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.364422][ T1806] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.366499][ T1806] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.367630][ T1806] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.369373][ T1806] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.375727][ T1806] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.377670][ T1806] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.379243][ T1806] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.380539][ T1806] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.386515][ T1772] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.388545][ T1772] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.391776][ T1772] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.393392][ T1772] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.404358][ T4335] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.411209][ T1772] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.413528][ T1772] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.415294][ T1772] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.423790][ T1806] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.425642][ T1806] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.427416][ T1806] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.429079][ T1806] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.432299][ T1806] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.433503][ T1806] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.436213][ T1806] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.446456][ T1806] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.448147][ T1806] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.450704][ T1806] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.451963][ T1806] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.453491][ T1806] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.455156][ T1806] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.456819][ T1806] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.458976][ T1806] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.461535][ T1806] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.463152][ T1806] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.465807][ T1806] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.471595][ T1806] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.473459][ T1806] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.476091][ T1806] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.477812][ T1806] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.483303][ T4339] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.493614][ T1772] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.495383][ T1772] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.496983][ T1772] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.498587][ T1772] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.505734][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.517523][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.523644][ T1772] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.525260][ T1772] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.532320][ T4339] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.535818][ T4342] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.550641][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.552441][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.554020][ T400] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.555332][ T400] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.556844][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.567829][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.569554][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.573107][ T400] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.574273][ T400] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.575691][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.577416][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.581542][ T1772] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.583245][ T1772] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.589380][ T4342] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.598158][ T4329] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.599383][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.601431][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.602928][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.604499][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.605878][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.607256][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.618917][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.621398][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.622944][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.624734][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.626405][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.628004][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.629614][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.630958][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.633394][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.637720][ T4339] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 32.639320][ T4339] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.646761][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.648720][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.651181][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.652618][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.654204][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.660876][ T4329] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.662848][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.664428][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.665841][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.667248][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.669558][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.675543][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.677356][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 32.678777][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 32.689354][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.691485][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.692926][ T400] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.694084][ T400] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.695441][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.697677][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.704636][ T1772] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.706344][ T1772] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.707988][ T1772] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.709452][ T1772] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.710730][ T1772] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.714358][ T4330] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.717639][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 32.718921][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 32.725342][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.727196][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.728965][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.731230][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.743074][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.744949][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.746541][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.748276][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.752996][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.755256][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.766652][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.768519][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.770471][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.772059][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.773719][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.775443][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.778553][ T4335] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.784957][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.787609][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 32.789431][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.801395][ T4330] device veth0_vlan entered promiscuous mode [ 32.803863][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 32.805239][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 32.806632][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 32.808646][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.812593][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.814250][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.827199][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 32.828821][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.832898][ T4339] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.836336][ T4330] device veth1_vlan entered promiscuous mode [ 32.852123][ T4335] device veth0_vlan entered promiscuous mode [ 32.854730][ T1806] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 32.856437][ T1806] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 32.858069][ T1806] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.862884][ T1806] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.865028][ T1806] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.876796][ T4330] device veth0_macvtap entered promiscuous mode [ 32.885314][ T4335] device veth1_vlan entered promiscuous mode [ 32.886933][ T1806] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 32.888530][ T1806] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 32.890769][ T1806] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 32.892587][ T1806] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 32.904228][ T1806] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 32.908787][ T4330] device veth1_macvtap entered promiscuous mode [ 32.933931][ T4330] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.941707][ T4329] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.944759][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 32.946474][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 32.948027][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 32.949653][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 32.954560][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 32.955948][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 32.961486][ T4330] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.963144][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 32.965005][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 32.966616][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 32.970648][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 32.983072][ T4335] device veth0_macvtap entered promiscuous mode [ 32.985760][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 32.987247][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 32.988519][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 32.992957][ T4330] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.994548][ T4330] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.996104][ T4330] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.997653][ T4330] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.005653][ T4342] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.007650][ T4335] device veth1_macvtap entered promiscuous mode [ 33.023768][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.025468][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.027006][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.028631][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.031250][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.042879][ T4335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.044668][ T4335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.047264][ T4335] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.048782][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.050769][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.052377][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.053950][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.071848][ T4335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.073652][ T4335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.075962][ T4335] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.083271][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.085121][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.101142][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.102523][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.106924][ T4335] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.108587][ T4335] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.111217][ T4335] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.112731][ T4335] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.115303][ T1806] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.116961][ T1806] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.118683][ T1806] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.122012][ T1806] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.124072][ T1806] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.125805][ T1806] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.127427][ T1806] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.129048][ T1806] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.131208][ T1806] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.134719][ T4329] device veth0_vlan entered promiscuous mode [ 33.138841][ T4339] device veth0_vlan entered promiscuous mode [ 33.140925][ T1806] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.142452][ T1806] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.144266][ T1806] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.145640][ T1806] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.152799][ T4342] device veth0_vlan entered promiscuous mode [ 33.159170][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.160937][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.161684][ T4342] device veth1_vlan entered promiscuous mode [ 33.167061][ T4329] device veth1_vlan entered promiscuous mode [ 33.168506][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.170345][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.172030][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.174692][ T4339] device veth1_vlan entered promiscuous mode [ 33.212431][ T4329] device veth0_macvtap entered promiscuous mode [ 33.217624][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.219446][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.224068][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.225750][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.227163][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.228976][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.232625][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.234248][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.236916][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.240843][ T4339] device veth0_macvtap entered promiscuous mode [ 33.256233][ T4339] device veth1_macvtap entered promiscuous mode [ 33.259531][ T4329] device veth1_macvtap entered promiscuous mode [ 33.268515][ T1806] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.269920][ T1806] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.274897][ T400] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.276245][ T400] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.279821][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.284944][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.286459][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.288015][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.289654][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.297446][ T4412] device syzkaller0 entered promiscuous mode [ 33.306993][ T4412] tipc: Started in network mode [ 33.307910][ T4412] tipc: Node identity 8631827c84e7, cluster identity 4711 [ 33.309546][ T4412] tipc: Enabled bearer , priority 0 [ 33.313302][ T4342] device veth0_macvtap entered promiscuous mode [ 33.324574][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.326332][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.327908][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.329576][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.332447][ T4329] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.335680][ T4412] tipc: Resetting bearer [ 33.343920][ T4339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.346371][ T4339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.347909][ T4339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.349700][ T4339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.351782][ T4339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.353967][ T4339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.356687][ T4339] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.357908][ T1806] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.359655][ T1806] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.364944][ T1806] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.366537][ T1806] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.368127][ T1806] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.371640][ T4342] device veth1_macvtap entered promiscuous mode [ 33.373531][ T4411] tipc: Resetting bearer [ 33.460818][ T4411] tipc: Disabling bearer [ 33.473465][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.475380][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.477123][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.478769][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.481928][ T4329] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.483226][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.484896][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.486580][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.488411][ T4339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.490443][ T4339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.492432][ T4339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.494417][ T4339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.496576][ T4339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.498137][ T4339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.500898][ T4339] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.503648][ T4342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.505958][ T4342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.507704][ T4342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.509740][ T4342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.512174][ T4342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.513960][ T4342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.515556][ T4342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.517088][ T4342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.524475][ T4342] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.553651][ T4339] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.555259][ T4339] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.556782][ T4339] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.558280][ T4339] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.562698][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.564557][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.566242][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.568259][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.578426][ T4329] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.580720][ T4329] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.582174][ T4329] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.583581][ T4329] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.594531][ T4414] device syzkaller0 entered promiscuous mode [ 33.604888][ T4342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.606815][ T4342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.608412][ T4342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.613097][ T4342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.614811][ T4342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.616542][ T4342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.621373][ T4342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.623217][ T4342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.626001][ T4342] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.663382][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.665393][ T400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.685739][ T4418] device syzkaller0 entered promiscuous mode [ 33.822613][ T1806] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.823971][ T1806] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.825939][ T1806] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.916870][ T1806] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.917607][ T4342] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.918297][ T1806] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.925232][ T4342] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.926882][ T4342] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.928523][ T4342] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.936139][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.951564][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.953000][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.955022][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.987199][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.988688][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.994212][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.020839][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.022295][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.027864][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.038944][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.038958][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.039066][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.074473][ T4427] HTB: quantum of class FFF10001 is small. Consider r2q change. [ 34.160198][ T48] Bluetooth: hci2: command 0x041b tx timeout [ 34.161374][ T48] Bluetooth: hci3: command 0x041b tx timeout [ 34.164961][ T4338] Bluetooth: hci0: command 0x041b tx timeout [ 34.166120][ T4338] Bluetooth: hci4: command 0x041b tx timeout [ 34.167184][ T4338] Bluetooth: hci1: command 0x041b tx timeout [ 34.233666][ T4431] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 34.336234][ T4442] netlink: 92 bytes leftover after parsing attributes in process `syz.2.13'. [ 34.593387][ T4454] vxcan0: tx drop: invalid da for name 0x00000000000000c8 [ 34.646327][ T4457] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.734357][ T4465] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.741391][ T4465] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.745401][ T4464] device syzkaller0 entered promiscuous mode [ 34.936757][ T4470] ------------[ cut here ]------------ [ 34.937875][ T4470] WARNING: CPU: 1 PID: 4470 at include/linux/fs.h:503 hugetlb_split+0x234/0x29c [ 34.939361][ T4470] Modules linked in: [ 34.940047][ T4470] CPU: 1 PID: 4470 Comm: syz.2.26 Not tainted syzkaller #0 [ 34.941343][ T4470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 34.943219][ T4470] pstate: 82400005 (Nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 34.944534][ T4470] pc : hugetlb_split+0x234/0x29c [ 34.945358][ T4470] lr : hugetlb_split+0x234/0x29c [ 34.946176][ T4470] sp : ffff800020fb73d0 [ 34.946846][ T4470] x29: ffff800020fb73d0 x28: ffff800020fb7500 x27: dfff800000000000 [ 34.948184][ T4470] x26: 0000000000000000 x25: ffff800015380000 x24: 1ffff00002a70070 [ 34.949577][ T4470] x23: dfff800000000000 x22: 0000000000000001 x21: 0000000000000000 [ 34.950971][ T4470] x20: 0000000020200000 x19: ffff0000d596c360 x18: 0000000000000000 [ 34.952364][ T4470] x17: 0000000000000000 x16: ffff8000082dbd3c x15: 0000000000000000 [ 34.953703][ T4470] x14: 0000000000000001 x13: 1fffe0001bccf85b x12: 0000000000080000 [ 34.955059][ T4470] x11: 0000000000002881 x10: ffff800029e6f000 x9 : ffff8000088a4c48 [ 34.956376][ T4470] x8 : 0000000000002882 x7 : 0000000000000000 x6 : 000000000000003f [ 34.957727][ T4470] x5 : 0000000000000040 x4 : 0000000000000000 x3 : ffff8000088a4ac8 [ 34.959025][ T4470] x2 : 0000000000000000 x1 : 0000000000000000 x0 : 0000000000000000 [ 34.960398][ T4470] Call trace: [ 34.960958][ T4470] hugetlb_split+0x234/0x29c [ 34.961771][ T4470] __vma_adjust+0x458/0x16fc [ 34.962638][ T4470] __split_vma+0x328/0x44c [ 34.963363][ T4470] do_mas_align_munmap+0x5f4/0xf28 [ 34.964265][ T4470] mmap_region+0x6a0/0x1860 [ 34.965104][ T4470] do_mmap+0xa64/0x1210 [ 34.965874][ T4470] vm_mmap_pgoff+0x194/0x298 [ 34.966674][ T4470] ksys_mmap_pgoff+0xd0/0x5a0 [ 34.967470][ T4470] __arm64_sys_mmap+0x108/0x120 [ 34.968236][ T4470] invoke_syscall+0x98/0x290 [ 34.969147][ T4470] el0_svc_common+0x13c/0x258 [ 34.970110][ T4470] do_el0_svc+0x5c/0x134 [ 34.970986][ T4470] el0_svc+0x58/0x128 [ 34.971765][ T4470] el0t_64_sync_handler+0x84/0xf0 [ 34.972670][ T4470] el0t_64_sync+0x18c/0x190 [ 34.973438][ T4470] irq event stamp: 1040 [ 34.974157][ T4470] hardirqs last enabled at (1039): [] kmem_cache_alloc_bulk+0x3c0/0x4e8 [ 34.975849][ T4470] hardirqs last disabled at (1040): [] el1_dbg+0x24/0x80 [ 34.977316][ T4470] softirqs last enabled at (800): [] local_bh_enable+0x10/0x34 [ 34.978921][ T4470] softirqs last disabled at (798): [] local_bh_disable+0x10/0x34 [ 34.980549][ T4470] ---[ end trace 0000000000000000 ]--- [ 34.986166][ T4470] ------------[ cut here ]------------ [ 34.987217][ T4470] WARNING: CPU: 0 PID: 4470 at include/linux/fs.h:503 hugetlb_split+0x234/0x29c [ 34.988922][ T4470] Modules linked in: [ 34.989597][ T4470] CPU: 0 PID: 4470 Comm: syz.2.26 Tainted: G W syzkaller #0 [ 34.991113][ T4470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 34.992780][ T4470] pstate: 82400005 (Nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 34.994124][ T4470] pc : hugetlb_split+0x234/0x29c [ 34.994962][ T4470] lr : hugetlb_split+0x234/0x29c [ 34.995769][ T4470] sp : ffff800020fb73d0 [ 34.996451][ T4470] x29: ffff800020fb73d0 x28: ffff800020fb7500 x27: dfff800000000000 [ 34.997784][ T4470] x26: 0000000000000000 x25: ffff800015380000 x24: 1ffff00002a70070 [ 34.999193][ T4470] x23: dfff800000000000 x22: 0000000000000001 x21: 0000000000000000 [ 35.000548][ T4470] x20: 0000000021000000 x19: ffff0000d596c360 x18: 0000000000000000 [ 35.001911][ T4470] x17: 0000000000000000 x16: ffff8000082dbd3c x15: 0000000000000000 [ 35.003264][ T4470] x14: 0000000000000001 x13: 1fffe0001bccf85b x12: 0000000000080000 [ 35.004649][ T4470] x11: 000000000001c11c x10: ffff800029e6f000 x9 : ffff8000088a4c48 [ 35.006031][ T4470] x8 : 000000000001c11d x7 : 0000000000000000 x6 : 000000000000003f [ 35.007409][ T4470] x5 : 0000000000000040 x4 : 0000000000000000 x3 : ffff8000088a4ac8 [ 35.008783][ T4470] x2 : 0000000000000000 x1 : 0000000000000000 x0 : 0000000000000000 [ 35.010077][ T4470] Call trace: [ 35.010651][ T4470] hugetlb_split+0x234/0x29c [ 35.011421][ T4470] __vma_adjust+0x464/0x16fc [ 35.012241][ T4470] __split_vma+0x328/0x44c [ 35.013008][ T4470] do_mas_align_munmap+0x5f4/0xf28 [ 35.013891][ T4470] mmap_region+0x6a0/0x1860 [ 35.014648][ T4470] do_mmap+0xa64/0x1210 [ 35.015355][ T4470] vm_mmap_pgoff+0x194/0x298 [ 35.016159][ T4470] ksys_mmap_pgoff+0xd0/0x5a0 [ 35.016929][ T4470] __arm64_sys_mmap+0x108/0x120 [ 35.017732][ T4470] invoke_syscall+0x98/0x290 [ 35.018518][ T4470] el0_svc_common+0x13c/0x258 [ 35.019295][ T4470] do_el0_svc+0x5c/0x134 [ 35.019985][ T4470] el0_svc+0x58/0x128 [ 35.020676][ T4470] el0t_64_sync_handler+0x84/0xf0 [ 35.021541][ T4470] el0t_64_sync+0x18c/0x190 [ 35.022286][ T4470] irq event stamp: 1524 [ 35.022985][ T4470] hardirqs last enabled at (1523): [] exit_to_kernel_mode+0xcc/0xfc [ 35.024603][ T4470] hardirqs last disabled at (1524): [] el1_dbg+0x24/0x80 [ 35.026057][ T4470] softirqs last enabled at (1518): [] handle_softirqs+0xb1c/0xc90 [ 35.027718][ T4470] softirqs last disabled at (1043): [] __do_softirq+0x14/0x20 [ 35.029187][ T4470] ---[ end trace 0000000000000000 ]--- [ 35.036543][ T4470] ------------[ cut here ]------------ [ 35.037560][ T4470] WARNING: CPU: 1 PID: 4470 at include/linux/fs.h:503 hugetlb_split+0x234/0x29c [ 35.039251][ T4470] Modules linked in: [ 35.039981][ T4470] CPU: 1 PID: 4470 Comm: syz.2.26 Tainted: G W syzkaller #0 [ 35.041489][ T4470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 35.043217][ T4470] pstate: 82400005 (Nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 35.044583][ T4470] pc : hugetlb_split+0x234/0x29c [ 35.045419][ T4470] lr : hugetlb_split+0x234/0x29c [ 35.046292][ T4470] sp : ffff800020fb75d0 [ 35.047008][ T4470] x29: ffff800020fb75d0 x28: ffff800020fb7700 x27: dfff800000000000 [ 35.048479][ T4470] x26: 0000000000000000 x25: ffff800015380000 x24: 1ffff00002a70070 [ 35.049923][ T4470] x23: dfff800000000000 x22: 0000000000000001 x21: 0000000000000000 [ 35.051296][ T4470] x20: 0000000020400000 x19: ffff0000d596c360 x18: 0000000000000000 [ 35.052674][ T4470] x17: ffff80000880d6b8 x16: ffff8000082dbd3c x15: 0000000000000000 [ 35.054064][ T4470] x14: 0000000000000001 x13: 1fffe0001bccf85b x12: 0000000000080000 [ 35.055516][ T4470] x11: 0000000000001f2e x10: ffff800029e6f000 x9 : ffff8000088a4c48 [ 35.056824][ T4470] x8 : 0000000000001f2f x7 : 0000000000000000 x6 : 000000000000003f [ 35.058199][ T4470] x5 : 0000000000000040 x4 : 0000000000000000 x3 : ffff8000088a4ac8 [ 35.059517][ T4470] x2 : 0000000000000000 x1 : 0000000000000000 x0 : 0000000000000000 [ 35.060903][ T4470] Call trace: [ 35.061504][ T4470] hugetlb_split+0x234/0x29c [ 35.062293][ T4470] __vma_adjust+0x458/0x16fc [ 35.063090][ T4470] __split_vma+0x328/0x44c [ 35.063820][ T4470] split_vma+0xa0/0xf8 [ 35.064527][ T4470] userfaultfd_ioctl+0x32f4/0x43ac [ 35.065391][ T4470] __arm64_sys_ioctl+0x14c/0x1c8 [ 35.066217][ T4470] invoke_syscall+0x98/0x290 [ 35.066990][ T4470] el0_svc_common+0x13c/0x258 [ 35.067777][ T4470] do_el0_svc+0x5c/0x134 [ 35.068498][ T4470] el0_svc+0x58/0x128 [ 35.069175][ T4470] el0t_64_sync_handler+0x84/0xf0 [ 35.070045][ T4470] el0t_64_sync+0x18c/0x190 [ 35.070821][ T4470] irq event stamp: 2186 [ 35.071528][ T4470] hardirqs last enabled at (2185): [] _raw_spin_unlock_irqrestore+0x48/0xac [ 35.073311][ T4470] hardirqs last disabled at (2186): [] el1_dbg+0x24/0x80 [ 35.074759][ T4470] softirqs last enabled at (2154): [] local_bh_enable+0x10/0x34 [ 35.076282][ T4470] softirqs last disabled at (2152): [] local_bh_disable+0x10/0x34 [ 35.077805][ T4470] ---[ end trace 0000000000000000 ]--- [ 35.082358][ T4470] ------------[ cut here ]------------ [ 35.083349][ T4470] WARNING: CPU: 1 PID: 4470 at include/linux/fs.h:503 hugetlb_split+0x234/0x29c [ 35.084921][ T4470] Modules linked in: [ 35.085589][ T4470] CPU: 1 PID: 4470 Comm: syz.2.26 Tainted: G W syzkaller #0 [ 35.087025][ T4470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 35.088872][ T4470] pstate: 82400005 (Nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 35.090267][ T4470] pc : hugetlb_split+0x234/0x29c [ 35.091128][ T4470] lr : hugetlb_split+0x234/0x29c [ 35.091948][ T4470] sp : ffff800020fb75d0 [ 35.092756][ T4470] x29: ffff800020fb75d0 x28: ffff800020fb7700 x27: dfff800000000000 [ 35.094306][ T4470] x26: 0000000000000000 x25: ffff800015380000 x24: 1ffff00002a70070 [ 35.095768][ T4470] x23: dfff800000000000 x22: 0000000000000001 x21: 0000000000000000 [ 35.097132][ T4470] x20: 0000000021000000 x19: ffff0000d596c360 x18: 0000000000000000 [ 35.098496][ T4470] x17: ffff80000880d6b8 x16: ffff8000082dbd3c x15: 0000000000000000 [ 35.099891][ T4470] x14: 0000000000000001 x13: 1fffe0001bccf85b x12: 0000000000080000 [ 35.101215][ T4470] x11: 0000000000019257 x10: ffff800029e6f000 x9 : ffff8000088a4c48 [ 35.102534][ T4470] x8 : 0000000000019258 x7 : 0000000000000000 x6 : 000000000000003f [ 35.103976][ T4470] x5 : 0000000000000040 x4 : 0000000000000000 x3 : ffff8000088a4ac8 [ 35.105392][ T4470] x2 : 0000000000000000 x1 : 0000000000000000 x0 : 0000000000000000 [ 35.106738][ T4470] Call trace: [ 35.107307][ T4470] hugetlb_split+0x234/0x29c [ 35.108142][ T4470] __vma_adjust+0x464/0x16fc [ 35.108961][ T4470] __split_vma+0x328/0x44c [ 35.109745][ T4470] split_vma+0xa0/0xf8 [ 35.110446][ T4470] userfaultfd_ioctl+0x32f4/0x43ac [ 35.111315][ T4470] __arm64_sys_ioctl+0x14c/0x1c8 [ 35.112184][ T4470] invoke_syscall+0x98/0x290 [ 35.112974][ T4470] el0_svc_common+0x13c/0x258 [ 35.113749][ T4470] do_el0_svc+0x5c/0x134 [ 35.114447][ T4470] el0_svc+0x58/0x128 [ 35.115147][ T4470] el0t_64_sync_handler+0x84/0xf0 [ 35.115974][ T4470] el0t_64_sync+0x18c/0x190 [ 35.116724][ T4470] irq event stamp: 2454 [ 35.117404][ T4470] hardirqs last enabled at (2453): [] exit_to_kernel_mode+0xcc/0xfc [ 35.118998][ T4470] hardirqs last disabled at (2454): [] el1_dbg+0x24/0x80 [ 35.120514][ T4470] softirqs last enabled at (2448): [] handle_softirqs+0xb1c/0xc90 [ 35.122162][ T4470] softirqs last disabled at (2189): [] __do_softirq+0x14/0x20 [ 35.123711][ T4470] ---[ end trace 0000000000000000 ]--- [ 35.129316][ T4470] ------------[ cut here ]------------ [ 35.130288][ T4470] WARNING: CPU: 1 PID: 4470 at include/linux/fs.h:503 hugetlb_split+0x234/0x29c [ 35.131863][ T4470] Modules linked in: [ 35.132559][ T4470] CPU: 1 PID: 4470 Comm: syz.2.26 Tainted: G W syzkaller #0 [ 35.134080][ T4470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 35.135798][ T4470] pstate: 82400005 (Nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 35.137075][ T4470] pc : hugetlb_split+0x234/0x29c [ 35.137917][ T4470] lr : hugetlb_split+0x234/0x29c [ 35.138824][ T4470] sp : ffff800020fb7830 [ 35.139526][ T4470] x29: ffff800020fb7830 x28: ffff800020fb7960 x27: dfff800000000000 [ 35.140871][ T4470] x26: 0000000000000000 x25: ffff800015380000 x24: 1ffff00002a70070 [ 35.142175][ T4470] x23: dfff800000000000 x22: 0000000000000001 x21: 0000000000000000 [ 35.143555][ T4470] x20: 0000000020400000 x19: ffff0000d596c360 x18: 0000000000000000 [ 35.144878][ T4470] x17: 0000000000000000 x16: ffff8000082dbd3c x15: 0000000000000000 [ 35.146237][ T4470] x14: 0000000000000001 x13: 1fffe0001bccf85b x12: 0000000000080000 [ 35.147659][ T4470] x11: 0000000000002188 x10: ffff800029e6f000 x9 : ffff8000088a4c48 [ 35.149011][ T4470] x8 : 0000000000002189 x7 : 0000000000000000 x6 : 000000000000003f [ 35.150381][ T4470] x5 : 0000000000000040 x4 : 0000000000000000 x3 : ffff8000088a4ac8 [ 35.151754][ T4470] x2 : 0000000000000000 x1 : 0000000000000000 x0 : 0000000000000000 [ 35.153119][ T4470] Call trace: [ 35.153678][ T4470] hugetlb_split+0x234/0x29c [ 35.154465][ T4470] __vma_adjust+0x458/0x16fc [ 35.155270][ T4470] __split_vma+0x328/0x44c [ 35.156054][ T4470] split_vma+0xa0/0xf8 [ 35.156748][ T4470] mprotect_fixup+0x3e4/0x610 [ 35.157550][ T4470] __arm64_sys_mprotect+0x5f0/0xa10 [ 35.158436][ T4470] invoke_syscall+0x98/0x290 [ 35.159193][ T4470] el0_svc_common+0x13c/0x258 [ 35.159942][ T4470] do_el0_svc+0x5c/0x134 [ 35.160663][ T4470] el0_svc+0x58/0x128 [ 35.161326][ T4470] el0t_64_sync_handler+0x84/0xf0 [ 35.162157][ T4470] el0t_64_sync+0x18c/0x190 [ 35.162906][ T4470] irq event stamp: 2838 [ 35.163594][ T4470] hardirqs last enabled at (2837): [] kmem_cache_alloc_bulk+0x3c0/0x4e8 [ 35.165230][ T4470] hardirqs last disabled at (2838): [] el1_dbg+0x24/0x80 [ 35.166656][ T4470] softirqs last enabled at (2812): [] local_bh_enable+0x10/0x34 [ 35.168149][ T4470] softirqs last disabled at (2810): [] local_bh_disable+0x10/0x34 [ 35.169668][ T4470] ---[ end trace 0000000000000000 ]--- [ 35.172018][ T4470] ------------[ cut here ]------------ [ 35.172922][ T4470] WARNING: CPU: 1 PID: 4470 at include/linux/fs.h:503 hugetlb_split+0x234/0x29c [ 35.174438][ T4470] Modules linked in: [ 35.175225][ T4470] CPU: 1 PID: 4470 Comm: syz.2.26 Tainted: G W syzkaller #0 [ 35.176790][ T4470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 35.178665][ T4470] pstate: 82400005 (Nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 35.179995][ T4470] pc : hugetlb_split+0x234/0x29c [ 35.180780][ T4470] lr : hugetlb_split+0x234/0x29c [ 35.181621][ T4470] sp : ffff800020fb7830 [ 35.182285][ T4470] x29: ffff800020fb7830 x28: ffff800020fb7960 x27: dfff800000000000 [ 35.183641][ T4470] x26: 0000000000000000 x25: ffff800015380000 x24: 1ffff00002a70070 [ 35.185027][ T4470] x23: dfff800000000000 x22: 0000000000000001 x21: 0000000000000000 [ 35.186438][ T4470] x20: 0000000020800000 x19: ffff0000d596c360 x18: 0000000000000000 [ 35.187741][ T4470] x17: 0000000000000000 x16: ffff8000082dbd3c x15: 0000000000000000 [ 35.189107][ T4470] x14: 0000000000000001 x13: 1fffe0001bccf85b x12: 0000000000080000 [ 35.190442][ T4470] x11: 0000000000018f43 x10: ffff800029e6f000 x9 : ffff8000088a4c48 [ 35.191792][ T4470] x8 : 0000000000018f44 x7 : 0000000000000000 x6 : 000000000000003f [ 35.193148][ T4470] x5 : 0000000000000040 x4 : 0000000000000000 x3 : ffff8000088a4ac8 [ 35.194450][ T4470] x2 : 0000000000000000 x1 : 0000000000000000 x0 : 0000000000000000 [ 35.195752][ T4470] Call trace: [ 35.196285][ T4470] hugetlb_split+0x234/0x29c [ 35.197082][ T4470] __vma_adjust+0x464/0x16fc [ 35.197863][ T4470] __split_vma+0x328/0x44c [ 35.198623][ T4470] split_vma+0xa0/0xf8 [ 35.199310][ T4470] mprotect_fixup+0x3e4/0x610 [ 35.200191][ T4470] __arm64_sys_mprotect+0x5f0/0xa10 [ 35.201071][ T4470] invoke_syscall+0x98/0x290 [ 35.201850][ T4470] el0_svc_common+0x13c/0x258 [ 35.202654][ T4470] do_el0_svc+0x5c/0x134 [ 35.203357][ T4470] el0_svc+0x58/0x128 [ 35.204041][ T4470] el0t_64_sync_handler+0x84/0xf0 [ 35.204948][ T4470] el0t_64_sync+0x18c/0x190 [ 35.205748][ T4470] irq event stamp: 3162 [ 35.206440][ T4470] hardirqs last enabled at (3161): [] exit_to_kernel_mode+0xcc/0xfc [ 35.208094][ T4470] hardirqs last disabled at (3162): [] el1_dbg+0x24/0x80 [ 35.209580][ T4470] softirqs last enabled at (3156): [] handle_softirqs+0xb1c/0xc90 [ 35.211199][ T4470] softirqs last disabled at (2841): [] __do_softirq+0x14/0x20 [ 35.212737][ T4470] ---[ end trace 0000000000000000 ]--- [ 35.214824][ T22] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 35.391221][ T22] usb 1-1: too many configurations: 65, using maximum allowed: 8 [ 35.393891][ T22] usb 1-1: config 0 has no interfaces? [ 35.395555][ T22] usb 1-1: config 0 has no interfaces? [ 35.397528][ T22] usb 1-1: config 0 has no interfaces? [ 35.399264][ T22] usb 1-1: config 0 has no interfaces? [ 35.401153][ T22] usb 1-1: config 0 has no interfaces? [ 35.402765][ T22] usb 1-1: config 0 has no interfaces? [ 35.404342][ T22] usb 1-1: config 0 has no interfaces? [ 35.406051][ T22] usb 1-1: config 0 has no interfaces? [ 35.406931][ T22] usb 1-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 35.408617][ T22] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.412191][ T22] usb 1-1: config 0 descriptor?? [ 35.620550][ T4380] usb 1-1: USB disconnect, device number 2 [ 36.250303][ T48] Bluetooth: hci3: command 0x040f tx timeout [ 36.250521][ T4345] Bluetooth: hci1: command 0x040f tx timeout [ 36.251515][ T48] Bluetooth: hci4: command 0x040f tx timeout [ 36.252475][ T4345] Bluetooth: hci0: command 0x040f tx timeout [ 36.253427][ T48] Bluetooth: hci2: command 0x040f tx timeout [ 38.320003][ T48] Bluetooth: hci2: command 0x0419 tx timeout [ 38.331255][ T4338] Bluetooth: hci0: command 0x0419 tx timeout [ 38.332316][ T4338] Bluetooth: hci4: command 0x0419 tx timeout [ 38.333351][ T4338] Bluetooth: hci1: command 0x0419 tx timeout [ 38.334520][ T4338] Bluetooth: hci3: command 0x0419 tx timeout