last executing test programs: 3.377508111s ago: executing program 2 (id=379): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x20004, r1, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x3, 0x5, 0x4}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000140)={0x0, 0x0, r3}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 3.332441276s ago: executing program 2 (id=382): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/block2mtd/parameters/block2mtd\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0)='/dev/zram0', 0xa) 472.304832ms ago: executing program 1 (id=495): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000040)={0x6, "152a44e3112c0000f5a82d86c200000000000000000000000000000800"}) socket$nl_route(0x10, 0x3, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, &(0x7f0000000380)}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000080), 0x8100, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x4, r1}) ioctl$DMA_BUF_SET_NAME_A(r3, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') write$uinput_user_dev(r3, &(0x7f0000000400)={'syz0\x00', {0x8, 0x4, 0x8b, 0xfffa}, 0x1d, [0x7ffe, 0xc95a, 0x1, 0x9, 0x80, 0x4, 0x3, 0x7f, 0x6, 0x4d, 0x9, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x6, 0x4, 0x8, 0x4, 0x3c5b, 0x1, 0x3, 0x9, 0x1, 0x1f461e2c, 0x0, 0xe660, 0x4, 0x7, 0x101, 0x7fff, 0x1, 0x80000000, 0x4, 0x3, 0x0, 0xfffffffb, 0x71, 0xfffffff8, 0x7, 0x0, 0x0, 0x4, 0x80003e, 0x8f, 0x6, 0x10000006, 0x0, 0x5, 0x4, 0x8, 0x0, 0x2, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x1, 0xffff, 0x134, 0x7ffe, 0x9, 0xfffffff3, 0x129432e6, 0xcb, 0x6, 0xd, 0x2bf, 0x6c9, 0x9, 0x6, 0x3, 0x0, 0x7, 0x5, 0x0, 0xe, 0x312, 0x74, 0xea4, 0x0, 0x4, 0x4, 0x8000, 0x3, 0x400, 0x5, 0x6, 0x7, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x100002, 0xa, 0x4, 0x9, 0x8, 0x803, 0x6, 0x7, 0x8002, 0x1, 0xfe000000, 0xff7f, 0x2, 0x7f, 0x9, 0x2, 0xffffffff, 0x9, 0x1, 0x7, 0x80000003, 0x9, 0x48c93690, 0x42, 0x7], [0x400, 0x4, 0x0, 0x5, 0xfffffffe, 0xfffff76b, 0x9, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x83, 0x80000003, 0x200009, 0x100003e7, 0x9, 0x5, 0x3, 0x2, 0xf38, 0x8, 0x4, 0x6d81, 0x5, 0x38, 0x800003, 0x200, 0x80, 0xf, 0xd, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x4, 0x6, 0xac8, 0x7, 0x2, 0x3, 0x7ff, 0xfffffffc, 0x2, 0x4, 0xffff, 0x0, 0x1a, 0x1c, 0x120000, 0x3, 0x8, 0x8aaed, 0x4, 0x65], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0x20000ce7, 0x1ff, 0x2, 0xf58, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7ffe, 0x80000000, 0x200a620, 0x2, 0xc, 0x1, 0x4, 0x14c, 0x60a7, 0xe, 0x6, 0xffffffff, 0xa, 0x5, 0x8, 0x5, 0xee1, 0xfffff000, 0xffff, 0xbe, 0x7f, 0x104, 0x9606, 0x7, 0x2, 0x4, 0x8006, 0x1, 0x0, 0x4, 0x8, 0x30b1d693, 0xa1f, 0x8, 0x7, 0x1, 0x6c1b, 0x2, 0x4, 0xb0b2748, 0x1, 0x1, 0x200, 0xffbf2441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 419.870597ms ago: executing program 1 (id=498): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000100)={0x20004, r2, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000180)={0x3, 0x5, 0x4}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000140)={0x0, 0x0, r4}) close_range(r0, 0xffffffffffffffff, 0x0) 386.08541ms ago: executing program 1 (id=501): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000001280), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001340)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="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"], 0x1c8}}, 0x0) 345.746474ms ago: executing program 3 (id=502): r0 = socket$inet_icmp(0x2, 0x2, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000814) close(r0) 326.980627ms ago: executing program 1 (id=505): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000340)={'syzkaller0\x00', 0x4001}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000380)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000003c0)={'syzkaller0\x00', 0x1}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) bind(r2, &(0x7f0000000400)=@in={0x2, 0x3210, @rand_addr=0xac140001}, 0x10) listen(r2, 0x5) write$tun(r0, 0x0, 0x4a) 297.98517ms ago: executing program 4 (id=506): mkdirat(0xffffffffffffff9c, &(0x7f0000002e40)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000002e80)='./config\x00', &(0x7f0000002ec0)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000002f40)='./config/usb_gadget/g1/idProduct\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write(r0, &(0x7f00000031c0)='0x5', 0x3) 297.87812ms ago: executing program 3 (id=507): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000340)={'syzkaller0\x00', 0x4001}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000380)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000003c0)={'syzkaller0\x00', 0x1}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) bind(r2, &(0x7f0000000400)=@in={0x2, 0x3210, @rand_addr=0xac140001}, 0x10) listen(r2, 0x5) write$tun(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac14000104d23210"], 0x4a) 264.468273ms ago: executing program 4 (id=509): ioctl$sock_ifreq(0xffffffffffffffff, 0x8990, &(0x7f00000007c0)={'bond0\x00', @ifru_names='bond0\x00'}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) socket$tipc(0x1e, 0x4, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001180)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 264.085573ms ago: executing program 0 (id=510): r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f00000001c0)=0x0, &(0x7f0000000240)=0x0) r5 = syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000280)={0x2e, 0x42, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000300)=@any_dev={0x1, 0xc68, 0x0, 0x0, 0x1000, 0x2, 0x0, 0x0, 0x4}}}, &(0x7f0000000340)) syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000380)=@ublk_get_queue_affinity_sqe={0x2e, 0x40, 0x0, r6, 0x80207501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, '\x00', {r5, 0xffff, 0x0, 0x0}}) io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0) 263.545723ms ago: executing program 4 (id=511): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, &(0x7f0000000080)}) r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000100)={0x20004, r2, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000180)={0x3, 0x5, 0x4}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000140)={0x0, 0x0, r4}) close_range(r0, 0xffffffffffffffff, 0x0) 225.609247ms ago: executing program 0 (id=512): sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x4000040) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001540)='net/ip_mr_cache\x00') pread64(r0, &(0x7f00000015c0)=""/253, 0xfd, 0x1) 225.153807ms ago: executing program 4 (id=513): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f00000001c0)=@in4={0x21, 0x1234, 0x2, 0x10, {0x2, 0x5678, @empty}}, 0x24) listen(r0, 0x1) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000100100000100000002000000000000001000000000000000100100000e"], 0x28}, 0x0) recvmmsg(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}, 0xffffffff}], 0x1, 0x2, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x2) sendmsg(r1, &(0x7f0000000500)={&(0x7f0000000540)=@rxrpc=@in4={0x21, 0x1234, 0x2, 0x10, {0x2, 0x5678, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000640)=[{0x18, 0x110, 0x1, "01000000"}], 0x18}, 0x0) 217.431848ms ago: executing program 0 (id=514): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000200), 0x48000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./proc\x00', &(0x7f0000000340)='proc\x00', 0x4000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/thread-self/fail-nth\x00', 0x802, 0x165) write(r1, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000440), 0x77, 0x101301) close_range(r0, 0xffffffffffffffff, 0x0) 194.29315ms ago: executing program 0 (id=515): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000001280), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001340)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="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"], 0x1c8}}, 0x0) 172.932692ms ago: executing program 0 (id=516): bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000140)=0x8a1, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f00000001c0), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000240)=[{0x6, 0x7, 0x0, 0x8001}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000340)='veno', 0x4) recvfrom$inet(0xffffffffffffffff, &(0x7f00000002c0)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 163.964553ms ago: executing program 1 (id=517): mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000800)='100', 0x3) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r1 = syz_open_dev$vim2m(&(0x7f0000000c80), 0x6, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000cc0)={0x3c2aab0, 0x1, 0x1}) 161.631964ms ago: executing program 2 (id=518): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3d}, 0x21) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r0, 0x0, r1, 0x0, 0x7f, 0x8) 106.889949ms ago: executing program 4 (id=519): r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000002280)={0x7f, 0x4d, 0x2ba8, 0x0, 0x0}) r2 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000002300)={0x200, 0x4f, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000002340)={0x1, 0x3, 0x9}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000002380)={r3}) r4 = syz_open_dev$dri(&(0x7f00000023c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x2, 0x4d, 0x2ba8}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000002440)={0x1, 0x3, 0x9}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000002580)={r1}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002600)={0x1, &(0x7f0000002640)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000002680)={0x1, 0x4, 0xe608}) close_range(r5, 0xffffffffffffffff, 0x0) 106.743509ms ago: executing program 0 (id=520): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x1}) r1 = socket(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000140)={'syzkaller0\x00', 0x1}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x8001}, {0xffff, 0xffff}, {0xb, 0x2}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newtfilter={0x40, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0x8001}, {0x3, 0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x1, 0x8001}}]}}]}, 0x40}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r5, &(0x7f0000000480)="b1", 0x1, 0x0, &(0x7f0000000440)={0x11, 0x300, r4, 0x1, 0x20}, 0x14) 106.375549ms ago: executing program 3 (id=521): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000040)={0x6, "152a44e3112c0000f5a82d86c200000000000000000000000000000800"}) socket$nl_route(0x10, 0x3, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, &(0x7f0000000380)}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000080), 0x8100, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x4, r1}) ioctl$DMA_BUF_SET_NAME_A(r3, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') write$uinput_user_dev(r3, &(0x7f0000000400)={'syz0\x00', {0x8, 0x4, 0x8b, 0xfffa}, 0x1d, [0x7ffe, 0xc95a, 0x1, 0x9, 0x80, 0x4, 0x3, 0x7f, 0x6, 0x4d, 0x9, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x6, 0x4, 0x8, 0x4, 0x3c5b, 0x1, 0x3, 0x9, 0x1, 0x1f461e2c, 0x0, 0xe660, 0x4, 0x7, 0x101, 0x7fff, 0x1, 0x80000000, 0x4, 0x3, 0x0, 0xfffffffb, 0x71, 0xfffffff8, 0x7, 0x0, 0x0, 0x4, 0x80003e, 0x8f, 0x6, 0x10000006, 0x0, 0x5, 0x4, 0x8, 0x0, 0x2, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x1, 0xffff, 0x134, 0x7ffe, 0x9, 0xfffffff3, 0x129432e6, 0xcb, 0x6, 0xd, 0x2bf, 0x6c9, 0x9, 0x6, 0x3, 0x0, 0x7, 0x5, 0x0, 0xe, 0x312, 0x74, 0xea4, 0x0, 0x4, 0x4, 0x8000, 0x3, 0x400, 0x5, 0x6, 0x7, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x100002, 0xa, 0x4, 0x9, 0x8, 0x803, 0x6, 0x7, 0x8002, 0x1, 0xfe000000, 0xff7f, 0x2, 0x7f, 0x9, 0x2, 0xffffffff, 0x9, 0x1, 0x7, 0x80000003, 0x9, 0x48c93690, 0x42, 0x7], [0x400, 0x4, 0x0, 0x5, 0xfffffffe, 0xfffff76b, 0x9, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x83, 0x80000003, 0x200009, 0x100003e7, 0x9, 0x5, 0x3, 0x2, 0xf38, 0x8, 0x4, 0x6d81, 0x5, 0x38, 0x800003, 0x200, 0x80, 0xf, 0xd, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x4, 0x6, 0xac8, 0x7, 0x2, 0x3, 0x7ff, 0xfffffffc, 0x2, 0x4, 0xffff, 0x0, 0x1a, 0x1c, 0x120000, 0x3, 0x8, 0x8aaed, 0x4, 0x65], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0x20000ce7, 0x1ff, 0x2, 0xf58, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7ffe, 0x80000000, 0x200a620, 0x2, 0xc, 0x1, 0x4, 0x14c, 0x60a7, 0xe, 0x6, 0xffffffff, 0xa, 0x5, 0x8, 0x5, 0xee1, 0xfffff000, 0xffff, 0xbe, 0x7f, 0x104, 0x9606, 0x7, 0x2, 0x4, 0x8006, 0x1, 0x0, 0x4, 0x8, 0x30b1d693, 0xa1f, 0x8, 0x7, 0x1, 0x6c1b, 0x2, 0x4, 0xb0b2748, 0x1, 0x1, 0x200, 0xffbf2441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 72.753413ms ago: executing program 2 (id=522): ioctl$sock_ifreq(0xffffffffffffffff, 0x8990, &(0x7f00000007c0)={'bond0\x00', @ifru_names='bond0\x00'}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) socket$tipc(0x1e, 0x4, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001180)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 70.392643ms ago: executing program 4 (id=523): syz_open_dev$dri(0x0, 0x0, 0x0) setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f00000005c0)={0x1f, 0xe9, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x19}, 0x9, 0x2}, 0xa) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r1, &(0x7f0000000600)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0xe}, 0x3}, 0xa) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) shutdown(r2, 0x0) connect$bt_rfcomm(r2, &(0x7f0000000b40)={0x1f, @none, 0x11}, 0xa) 61.366604ms ago: executing program 3 (id=524): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, &(0x7f0000000080)}) r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000100)={0x20004, r2, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000180)={0x3, 0x5, 0x4}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000140)={0x0, 0x0, r4}) close_range(r0, 0xffffffffffffffff, 0x0) 55.697155ms ago: executing program 2 (id=525): sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x4000040) r0 = syz_open_procfs(0x0, &(0x7f0000001540)='net/ip_mr_cache\x00') pread64(r0, &(0x7f00000015c0)=""/253, 0xfd, 0x1) 36.141477ms ago: executing program 3 (id=526): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000001280), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001340)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="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"], 0x1c8}}, 0x0) 33.336207ms ago: executing program 2 (id=527): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000340)={'syzkaller0\x00', 0x4001}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000380)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000003c0)={'syzkaller0\x00', 0x1}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) bind(r2, &(0x7f0000000400)=@in={0x2, 0x3210, @rand_addr=0xac140001}, 0x10) listen(r2, 0x5) write$tun(r0, &(0x7f0000000480)=ANY=[], 0x4a) 12.741079ms ago: executing program 1 (id=528): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000200), 0x48000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./proc\x00', &(0x7f0000000340)='proc\x00', 0x4000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/thread-self/fail-nth\x00', 0x802, 0x165) write(r1, &(0x7f00000003c0), 0x0) syz_open_dev$usbfs(&(0x7f0000000440), 0x77, 0x101301) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 3 (id=529): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/block2mtd/parameters/block2mtd\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0)='/dev/zram0', 0xa) kernel console output (not intermixed with test programs): [ 9.649788][ T3996] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: [ 9.678862][ T428] gvnic 0000:00:00.0 enp0s0: Device link is up. [ 9.683513][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): enp0s0: link becomes ready OK Starting sshd: OK syzkaller Warning: Permanently added '10.128.1.110' (ED25519) to the list of known hosts. syzkaller login: [ 28.640176][ T4318] cgroup: Unknown subsys name 'net' [ 28.849323][ T4318] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 29.113786][ T4318] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 29.837399][ T4334] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 29.839158][ T4334] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 29.840793][ T4334] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 29.841402][ T4337] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 29.842379][ T4334] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 29.843729][ T4337] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 29.844830][ T4334] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 29.845956][ T4337] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 29.848751][ T4334] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 29.849251][ T4337] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 29.854755][ T4334] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 29.863267][ T4337] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 29.865156][ T4337] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 29.867359][ T4337] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 29.867394][ T4339] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 29.870150][ T4337] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 29.870531][ T4339] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 29.872063][ T4337] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 29.872956][ T4339] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 29.875604][ T4339] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 29.891053][ T4342] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 29.895808][ T4342] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 29.897671][ T4342] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 29.899111][ T4342] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 29.902702][ T4342] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 29.904808][ T4342] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 29.906392][ T4342] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 29.908485][ T4342] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 29.910255][ T4342] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 29.912302][ T4339] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 29.936514][ T4336] rxe_eth0 speed is unknown, defaulting to 1000 [ 29.938661][ T4336] rxe_eth0 speed is unknown, defaulting to 1000 [ 29.940044][ T4336] rxe_eth0 speed is unknown, defaulting to 1000 [ 29.950913][ T4335] rdma_rxe: rxe_register_device failed with error -23 [ 29.952386][ T4335] rdma_rxe: failed to add rxe_eth0 [ 29.953835][ T4331] rdma_rxe: rxe_register_device failed with error -23 [ 29.957860][ T4331] rdma_rxe: failed to add rxe_eth0 [ 29.960885][ T4330] rdma_rxe: rxe_register_device failed with error -23 [ 29.962285][ T4330] rdma_rxe: failed to add rxe_eth0 [ 30.011683][ T4336] infiniband rxe0: set active [ 30.013381][ T111] rxe_eth0 speed is unknown, defaulting to 1000 [ 30.015495][ T4336] infiniband rxe0: added rxe_eth0 [ 30.030858][ T4336] RDS/IB: rxe0: added [ 30.031744][ T4336] smc: adding ib device rxe0 with port count 1 [ 30.032942][ T4336] smc: ib device rxe0 port 1 has pnetid [ 30.034202][ T111] rxe_eth0 speed is unknown, defaulting to 1000 [ 30.035871][ T4336] rxe_eth0 speed is unknown, defaulting to 1000 [ 30.092242][ T4343] rxe_eth0 speed is unknown, defaulting to 1000 [ 30.115940][ T4336] rxe_eth0 speed is unknown, defaulting to 1000 [ 30.139375][ T4335] chnl_net:caif_netlink_parms(): no params data found [ 30.163062][ T4331] chnl_net:caif_netlink_parms(): no params data found [ 30.174755][ T4330] chnl_net:caif_netlink_parms(): no params data found [ 30.185942][ T4336] rxe_eth0 speed is unknown, defaulting to 1000 [ 30.207343][ T4335] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.208615][ T4335] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.210335][ T4335] device bridge_slave_0 entered promiscuous mode [ 30.243566][ T4335] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.245055][ T4335] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.248590][ T4335] device bridge_slave_1 entered promiscuous mode [ 30.253626][ T4336] rxe_eth0 speed is unknown, defaulting to 1000 [ 30.282540][ T4330] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.284015][ T4330] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.285839][ T4330] device bridge_slave_0 entered promiscuous mode [ 30.294520][ T4335] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.299446][ T4335] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.305647][ T4330] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.307672][ T4330] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.309364][ T4330] device bridge_slave_1 entered promiscuous mode [ 30.310773][ T4331] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.311937][ T4331] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.313626][ T4331] device bridge_slave_0 entered promiscuous mode [ 30.320785][ T4335] team0: Port device team_slave_0 added [ 30.326510][ T4343] chnl_net:caif_netlink_parms(): no params data found [ 30.331778][ T4331] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.333290][ T4331] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.334876][ T4331] device bridge_slave_1 entered promiscuous mode [ 30.341420][ T4335] team0: Port device team_slave_1 added [ 30.350596][ T4330] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.354660][ T4330] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.364743][ T4335] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.366044][ T4335] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.371022][ T4335] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.385335][ T4331] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.389628][ T4335] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.390740][ T4335] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.395145][ T4335] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.405337][ T4343] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.406609][ T4343] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.409189][ T4343] device bridge_slave_0 entered promiscuous mode [ 30.411739][ T4331] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.413527][ T4343] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.414867][ T4343] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.417035][ T4343] device bridge_slave_1 entered promiscuous mode [ 30.421195][ T4330] team0: Port device team_slave_0 added [ 30.435570][ T3996] infiniband rxe0: set active [ 30.437937][ T4330] team0: Port device team_slave_1 added [ 30.446605][ T4331] team0: Port device team_slave_0 added [ 30.488249][ T4335] device hsr_slave_0 entered promiscuous mode [ 30.556924][ T4335] device hsr_slave_1 entered promiscuous mode [ 30.609823][ T4343] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.614469][ T4343] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.618186][ T3437] rxe_eth0 speed is unknown, defaulting to 1000 [ 30.621680][ T4330] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.623019][ T4330] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.627895][ T4330] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.630869][ T4331] team0: Port device team_slave_1 added [ 30.633061][ T4336] chnl_net:caif_netlink_parms(): no params data found [ 30.641911][ T4330] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.643143][ T4330] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.647870][ T4330] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.657165][ T4343] team0: Port device team_slave_0 added [ 30.676610][ T4343] team0: Port device team_slave_1 added [ 30.682614][ T4331] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.683846][ T4331] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.688733][ T4331] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.691152][ T4331] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.692397][ T4331] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.696400][ T4331] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.737762][ T4330] device hsr_slave_0 entered promiscuous mode [ 30.786929][ T4330] device hsr_slave_1 entered promiscuous mode [ 30.826748][ T4330] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.828339][ T4330] Cannot create hsr debugfs directory [ 30.838212][ T4343] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.839544][ T4343] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.844265][ T4343] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.846969][ T4336] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.848544][ T4336] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.850230][ T4336] device bridge_slave_0 entered promiscuous mode [ 30.857191][ T4343] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.858385][ T4343] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.862450][ T4343] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.864974][ T4336] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.866440][ T4336] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.869308][ T4336] device bridge_slave_1 entered promiscuous mode [ 30.907821][ T4331] device hsr_slave_0 entered promiscuous mode [ 30.946909][ T4331] device hsr_slave_1 entered promiscuous mode [ 30.986786][ T4331] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.988100][ T4331] Cannot create hsr debugfs directory [ 31.014219][ T4336] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.022548][ T4336] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.077865][ T4343] device hsr_slave_0 entered promiscuous mode [ 31.116917][ T4343] device hsr_slave_1 entered promiscuous mode [ 31.156795][ T4343] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.158254][ T4343] Cannot create hsr debugfs directory [ 31.191308][ T4336] team0: Port device team_slave_0 added [ 31.206952][ T4336] team0: Port device team_slave_1 added [ 31.223722][ T4336] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.224881][ T4336] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.229750][ T4336] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.232484][ T4336] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.233881][ T4336] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.238989][ T4336] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.252876][ T4335] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 31.291955][ T4335] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 31.344216][ T4335] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 31.427725][ T4336] device hsr_slave_0 entered promiscuous mode [ 31.466994][ T4336] device hsr_slave_1 entered promiscuous mode [ 31.506727][ T4336] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.508194][ T4336] Cannot create hsr debugfs directory [ 31.513211][ T4335] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 31.569487][ T4330] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 31.597836][ T4330] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 31.643291][ T4330] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 31.687860][ T4330] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 31.762089][ T4343] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 31.797828][ T4343] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 31.841882][ T4343] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 31.877849][ T4343] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 31.917049][ T4339] Bluetooth: hci2: command 0x0409 tx timeout [ 31.917055][ T48] Bluetooth: hci1: command 0x0409 tx timeout [ 31.918157][ T4339] Bluetooth: hci0: command 0x0409 tx timeout [ 31.926908][ T4342] Bluetooth: hci3: command 0x0409 tx timeout [ 31.961117][ T4331] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 31.996735][ T4339] Bluetooth: hci4: command 0x0409 tx timeout [ 32.017070][ T4331] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 32.081805][ T4331] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 32.118783][ T4331] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 32.169107][ T4330] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.180709][ T4335] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.190131][ T4336] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 32.211674][ T4336] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 32.251176][ T4336] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 32.291131][ T191] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.293177][ T191] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.296441][ T4330] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.298888][ T4336] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 32.343334][ T4335] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.344954][ T428] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.346470][ T428] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.351373][ T428] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.353270][ T428] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.355386][ T428] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.356619][ T428] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.358862][ T428] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.371758][ T191] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.373814][ T191] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.375569][ T191] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.376927][ T191] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.378771][ T191] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.380705][ T191] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.382650][ T191] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.384142][ T191] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.385894][ T191] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.389801][ T191] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.391407][ T191] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.392780][ T191] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.394410][ T191] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.396323][ T191] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.399827][ T191] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.408339][ T4343] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.412040][ T428] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.417667][ T428] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.419632][ T428] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.421378][ T428] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.425413][ T428] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.430189][ T428] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.431926][ T428] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.445022][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.446644][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.448652][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.451201][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.454497][ T191] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.455965][ T191] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.460992][ T191] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.463941][ T428] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.465777][ T428] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.470796][ T4343] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.477338][ T4331] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.478749][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.480852][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.482463][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.484319][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.486018][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.492266][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.495392][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.505256][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.509862][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.511855][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.513671][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.514884][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.516296][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.519045][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.520725][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.521991][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.530345][ T4331] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.531621][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.533594][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.535614][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.537866][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.540294][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.546497][ T4336] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.554738][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.559195][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.561115][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.562655][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.564330][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.566520][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.569799][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.571077][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.575666][ T4336] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.580496][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.583030][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.584889][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.586391][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.593341][ T4343] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 32.595449][ T4343] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.602932][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.605125][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.608302][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.610414][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.612181][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.614024][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.615743][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.618632][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.620431][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.622547][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.624489][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.626216][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.631566][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.635554][ T4331] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 32.639284][ T4331] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.648708][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.650456][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.652150][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.654055][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.655684][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.658238][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.659884][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.661484][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.663364][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.665223][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.666620][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.669762][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.671697][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.673258][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.674688][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.676409][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.678629][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.690545][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.692653][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.694445][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.696434][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.699295][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 32.700739][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 32.702301][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.704366][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.706155][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.712207][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.715863][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.719602][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 32.721216][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 32.723613][ T4330] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.728033][ T4336] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.730104][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.735256][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.740378][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.743964][ T4335] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.767300][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 32.769182][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.777661][ T191] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 32.779531][ T191] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.791708][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 32.793132][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 32.798728][ T4343] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.807863][ T191] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 32.809751][ T191] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.811696][ T191] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.813268][ T191] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.818217][ T428] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 32.820091][ T428] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.822020][ T428] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.823660][ T428] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.825480][ T4330] device veth0_vlan entered promiscuous mode [ 32.842494][ T4335] device veth0_vlan entered promiscuous mode [ 32.848838][ T4330] device veth1_vlan entered promiscuous mode [ 32.852941][ T4335] device veth1_vlan entered promiscuous mode [ 32.860443][ T4336] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.863868][ T191] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 32.865778][ T191] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 32.869567][ T191] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 32.871150][ T191] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 32.881602][ T4331] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.887904][ T428] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 32.889786][ T428] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 32.891670][ T428] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 32.893223][ T428] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 32.916125][ T428] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 32.918196][ T428] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.919876][ T428] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 32.921798][ T428] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 32.928187][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 32.929925][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 32.931736][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 32.933670][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.943422][ T4335] device veth0_macvtap entered promiscuous mode [ 32.950357][ T4330] device veth0_macvtap entered promiscuous mode [ 32.955099][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 32.962286][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 32.963935][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 32.965498][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.968443][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.969889][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.972505][ T4330] device veth1_macvtap entered promiscuous mode [ 32.975561][ T4335] device veth1_macvtap entered promiscuous mode [ 32.978514][ T4336] device veth0_vlan entered promiscuous mode [ 32.980196][ T191] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 32.981874][ T191] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 32.983631][ T191] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 32.985349][ T191] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.987519][ T191] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.989324][ T191] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.995464][ T4331] device veth0_vlan entered promiscuous mode [ 33.011014][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.013018][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.018304][ T4330] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.019968][ T4335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.022023][ T4335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.024474][ T4335] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.030489][ T4331] device veth1_vlan entered promiscuous mode [ 33.032390][ T4336] device veth1_vlan entered promiscuous mode [ 33.034602][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.036405][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.039309][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.040947][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.042685][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.044643][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.046545][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.048927][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.050771][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.052435][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.058078][ T4335] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.060575][ T4335] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.062158][ T4335] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.063779][ T4335] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.065536][ T4335] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.070326][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.072054][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.074166][ T4330] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.077224][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.078861][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.080573][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.082351][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.090857][ T4343] device veth0_vlan entered promiscuous mode [ 33.092586][ T4330] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.094471][ T4330] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.096277][ T4330] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.098990][ T4330] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.134691][ T4343] device veth1_vlan entered promiscuous mode [ 33.137359][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.138889][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.140384][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.141998][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.143709][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.145629][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.150731][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.156097][ T4331] device veth0_macvtap entered promiscuous mode [ 33.166338][ T4331] device veth1_macvtap entered promiscuous mode [ 33.177469][ T4336] device veth0_macvtap entered promiscuous mode [ 33.180421][ T4336] device veth1_macvtap entered promiscuous mode [ 33.184863][ T4428] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.186271][ T4428] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.200495][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.202425][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.204128][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.205718][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.210075][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.211853][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.224467][ T4336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.226252][ T4336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.228991][ T4336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.230854][ T4336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.233450][ T4336] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.240440][ T191] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.242279][ T191] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.243925][ T191] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.245645][ T191] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.249455][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.250932][ T4336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.251185][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.252991][ T4336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.256118][ T4336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.259119][ T4336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.261717][ T4336] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.264095][ T191] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.265766][ T191] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.268899][ T428] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.270780][ T428] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.272470][ T428] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.274358][ T428] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.280771][ T4343] device veth0_macvtap entered promiscuous mode [ 33.284923][ T4331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.289015][ T4331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.290744][ T4331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.292548][ T4331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.294204][ T4331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.295933][ T4331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.299710][ T4331] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.302165][ T4343] device veth1_macvtap entered promiscuous mode [ 33.306233][ T4336] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.309266][ T4336] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.310979][ T4336] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.312691][ T4336] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.315774][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.317751][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.319287][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.320929][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.326182][ T4331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.328526][ T4331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.330493][ T4331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.332474][ T4331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.334131][ T4331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.336024][ T4331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.339236][ T4331] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.343884][ T4343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.345679][ T4343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.348206][ T4343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.350245][ T4343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.351912][ T4343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.353989][ T4343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.356060][ T4343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.359029][ T4343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.361464][ T4343] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.363170][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.365183][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.369731][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.371516][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.390107][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.391820][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.395843][ T4331] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.401481][ T4331] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.403159][ T4331] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.404688][ T4331] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.411919][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.414902][ T4343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.417273][ T4343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.419347][ T4343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.421791][ T4343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.423605][ T4343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.425514][ T4343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.427560][ T4343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.429193][ T4343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.431790][ T4343] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.444876][ T4442] device syzkaller0 entered promiscuous mode [ 33.449686][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.451733][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.455894][ T4343] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.458339][ T4343] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.460120][ T4343] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.461982][ T4343] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.475085][ T4428] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.476904][ T4428] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.482786][ T428] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.645610][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.647864][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.649926][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.663049][ T4428] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.664721][ T4428] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.666271][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.681962][ T4428] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.683373][ T4428] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.684894][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.693652][ T4428] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.695017][ T4428] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.702203][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.722982][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.724687][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.726133][ T428] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.773226][ T4448] ufs: ufs_fill_super(): bad magic number [ 33.832216][ T4461] syz.4.7 uses obsolete (PF_INET,SOCK_PACKET) [ 33.870366][ T4461] device virt_wifi0 entered promiscuous mode [ 33.898452][ T4467] random: crng reseeded on system resumption [ 33.905908][ T4457] device-mapper: table: 248:0: crypt: Error allocating crypto tfm (-ENOENT) [ 33.910528][ T4457] device-mapper: ioctl: error adding target to table [ 33.969812][ T4470] dlm: Unknown command passed to DLM device : 205 [ 33.969812][ T4470] [ 33.973943][ T4474] FAULT_INJECTION: forcing a failure. [ 33.973943][ T4474] name failslab, interval 1, probability 0, space 0, times 1 [ 33.976415][ T4474] CPU: 0 PID: 4474 Comm: syz.0.11 Not tainted syzkaller #0 [ 33.977907][ T4474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 33.980086][ T4474] Call trace: [ 33.980742][ T4474] dump_backtrace+0x1c4/0x1f0 [ 33.981747][ T4474] show_stack+0x2c/0x3c [ 33.982678][ T4474] __dump_stack+0x30/0x40 [ 33.983675][ T4474] dump_stack_lvl+0xf4/0x15c [ 33.984695][ T4474] dump_stack+0x1c/0x5c [ 33.985574][ T4474] should_fail_ex+0x3cc/0x524 [ 33.986539][ T4474] __should_failslab+0xc0/0x11c [ 33.987562][ T4474] should_failslab+0x10/0x28 [ 33.988545][ T4474] __kmem_cache_alloc_node+0x7c/0x318 [ 33.989588][ T4474] kmalloc_trace+0x48/0x94 [ 33.990406][ T4474] call_usermodehelper_setup+0xa4/0x26c [ 33.991571][ T4474] __request_module+0x454/0xae8 [ 33.992679][ T4474] crypto_alg_mod_lookup+0xd0/0x500 [ 33.993796][ T4474] crypto_alloc_tfm_node+0x120/0x304 [ 33.994919][ T4474] crypto_alloc_aead+0x40/0x54 [ 33.995951][ T4474] esp_init_state+0x4e4/0xe24 [ 33.997002][ T4474] __xfrm_init_state+0xb2c/0xde0 [ 33.998092][ T4474] xfrm_add_sa+0x1a70/0x27b4 [ 33.998977][ T4474] xfrm_user_rcv_msg+0x500/0x7b8 [ 33.999998][ T4474] netlink_rcv_skb+0x220/0x3ec [ 34.000982][ T4474] xfrm_netlink_rcv+0x80/0x9c [ 34.001933][ T4474] netlink_unicast+0x5fc/0x80c [ 34.002904][ T4474] netlink_sendmsg+0x6f0/0x9d8 [ 34.003766][ T4474] ____sys_sendmsg+0x588/0x90c [ 34.004761][ T4474] __sys_sendmsg+0x288/0x374 [ 34.005741][ T4474] __arm64_sys_sendmsg+0x80/0x94 [ 34.006775][ T4474] invoke_syscall+0x98/0x290 [ 34.007653][ T4474] el0_svc_common+0x13c/0x258 [ 34.008588][ T4474] do_el0_svc+0x5c/0x134 [ 34.009450][ T4474] el0_svc+0x58/0x12c [ 34.010278][ T4474] el0t_64_sync_handler+0x84/0xf0 [ 34.011317][ T4474] el0t_64_sync+0x18c/0x190 [ 34.012325][ C0] vkms_vblank_simulate: vblank timer overrun [ 34.013895][ T4342] Bluetooth: hci1: command 0x041b tx timeout [ 34.015293][ T4342] Bluetooth: hci2: command 0x041b tx timeout [ 34.017038][ T4342] Bluetooth: hci3: command 0x041b tx timeout [ 34.018111][ T4342] Bluetooth: hci0: command 0x041b tx timeout [ 34.026034][ T4339] Bluetooth: hci4: Invalid handle: 0xed88 > 0x0eff [ 34.034544][ T4478] batman_adv: batadv0: Adding interface: syzkaller0 [ 34.036109][ T4478] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 34.044350][ T4478] batman_adv: batadv0: Interface activated: syzkaller0 [ 34.080561][ T4342] Bluetooth: hci4: command 0x041b tx timeout [ 34.103626][ T4476] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 34.137940][ T4476] batman_adv: batadv0: Removing interface: syzkaller0 [ 34.193902][ T4489] device syzkaller0 entered promiscuous mode [ 34.516257][ T4494] bridge0: port 3(vxlan0) entered blocking state [ 34.517880][ T4494] bridge0: port 3(vxlan0) entered disabled state [ 34.519657][ T4494] device vxlan0 entered promiscuous mode [ 34.784315][ T4509] device-mapper: table: 248:1: crypt: Error allocating crypto tfm (-ENOENT) [ 34.785825][ T4509] device-mapper: ioctl: error adding target to table [ 34.822497][ T4517] tc action pedit offset 0 out of bounds [ 34.823779][ T4517] tc action pedit offset 0 out of bounds [ 34.824694][ T4517] tc action pedit offset 0 out of bounds [ 34.825612][ T4517] tc action pedit offset 0 out of bounds [ 34.826496][ T4517] tc action pedit offset 0 out of bounds [ 34.827577][ T4517] tc action pedit offset 0 out of bounds [ 34.828592][ T4517] tc action pedit offset 0 out of bounds [ 34.829547][ T4517] tc action pedit offset 0 out of bounds [ 34.830571][ T4517] tc action pedit offset 0 out of bounds [ 34.831497][ T4517] tc action pedit offset 0 out of bounds [ 34.832622][ T4517] 0: reclassify loop, rule prio 0, protocol 800 [ 35.419560][ T4523] Bluetooth: MGMT ver 1.22 [ 35.478640][ T4339] Bluetooth: hci1: Invalid handle: 0xed88 > 0x0eff [ 35.486988][ T4529] batman_adv: batadv0: Adding interface: syzkaller0 [ 35.490128][ T4529] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.494585][ T4529] batman_adv: batadv0: Interface activated: syzkaller0 [ 35.542910][ T4528] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 35.598577][ T4528] batman_adv: batadv0: Removing interface: syzkaller0 [ 36.077001][ T4342] Bluetooth: hci0: command 0x040f tx timeout [ 36.077033][ T4339] Bluetooth: hci3: command 0x040f tx timeout [ 36.078168][ T4342] Bluetooth: hci2: command 0x040f tx timeout [ 36.079369][ T4339] Bluetooth: hci1: command 0x040f tx timeout [ 36.157903][ T48] Bluetooth: hci4: command 0x040f tx timeout [ 36.868730][ T4547] device syzkaller0 entered promiscuous mode [ 36.901536][ T4551] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.136497][ T4576] device syzkaller0 entered promiscuous mode [ 38.157059][ T4339] Bluetooth: hci1: command 0x0419 tx timeout [ 38.167479][ T48] Bluetooth: hci2: command 0x0419 tx timeout [ 38.168631][ T48] Bluetooth: hci3: command 0x0419 tx timeout [ 38.169864][ T48] Bluetooth: hci0: command 0x0419 tx timeout [ 38.237180][ T4339] Bluetooth: hci4: command 0x0419 tx timeout [ 38.642086][ T4591] FAULT_INJECTION: forcing a failure. [ 38.642086][ T4591] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 38.644747][ T4591] CPU: 1 PID: 4591 Comm: syz.4.56 Not tainted syzkaller #0 [ 38.646054][ T4591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 38.647905][ T4591] Call trace: [ 38.648593][ T4591] dump_backtrace+0x1c4/0x1f0 [ 38.649469][ T4591] show_stack+0x2c/0x3c [ 38.650337][ T4591] __dump_stack+0x30/0x40 [ 38.651212][ T4591] dump_stack_lvl+0xf4/0x15c [ 38.652263][ T4591] dump_stack+0x1c/0x5c [ 38.653117][ T4591] should_fail_ex+0x3cc/0x524 [ 38.654068][ T4591] should_fail_alloc_page+0x74/0xb8 [ 38.655142][ T4591] prepare_alloc_pages+0x1b8/0x4f0 [ 38.656225][ T4591] __alloc_pages+0x134/0x544 [ 38.657164][ T4591] alloc_pages+0x434/0x6fc [ 38.657905][ T4591] __get_free_pages+0x18/0x84 [ 38.658763][ T4591] kasan_populate_vmalloc_pte+0x40/0xe8 [ 38.659815][ T4591] __apply_to_page_range+0x83c/0xbf4 [ 38.660841][ T4591] apply_to_page_range+0x4c/0x64 [ 38.661832][ T4591] kasan_populate_vmalloc+0x5c/0x6c [ 38.662847][ T4591] alloc_vmap_area+0x155c/0x169c [ 38.663776][ T4591] __get_vm_area_node+0x178/0x31c [ 38.664736][ T4591] __vmalloc_node_range+0x1d4/0xe70 [ 38.666025][ T4591] vmalloc+0x9c/0xd4 [ 38.666957][ T4591] snd_dma_vmalloc_alloc+0x20/0x30 [ 38.668090][ T4591] snd_dma_alloc_dir_pages+0x154/0x228 [ 38.669318][ T4591] do_alloc_pages+0x10c/0x238 [ 38.670408][ T4591] snd_pcm_lib_malloc_pages+0x27c/0x5f0 [ 38.671726][ T4591] snd_pcm_hw_params+0x6cc/0x1804 [ 38.672831][ T4591] snd_pcm_kernel_ioctl+0x218/0x278 [ 38.674016][ T4591] snd_pcm_oss_change_params_locked+0x1984/0x31c8 [ 38.675374][ T4591] snd_pcm_oss_make_ready+0x104/0x2d0 [ 38.676381][ T4591] snd_pcm_oss_sync+0x14c/0x934 [ 38.677288][ T4591] snd_pcm_oss_release+0xf8/0x230 [ 38.678175][ T4591] __fput+0x1b4/0x7b0 [ 38.678860][ T4591] ____fput+0x20/0x30 [ 38.679537][ T4591] task_work_run+0x1f4/0x280 [ 38.680346][ T4591] do_notify_resume+0x20f8/0x2c84 [ 38.681227][ T4591] el0_svc+0x9c/0x12c [ 38.681995][ T4591] el0t_64_sync_handler+0x84/0xf0 [ 38.682923][ T4591] el0t_64_sync+0x18c/0x190 [ 38.685891][ T4591] syz.4.56: vmalloc error: size 2097152, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz4,mems_allowed=0 [ 38.688979][ T4591] CPU: 1 PID: 4591 Comm: syz.4.56 Not tainted syzkaller #0 [ 38.690248][ T4591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 38.692057][ T4591] Call trace: [ 38.692661][ T4591] dump_backtrace+0x1c4/0x1f0 [ 38.693415][ T4591] show_stack+0x2c/0x3c [ 38.694153][ T4591] __dump_stack+0x30/0x40 [ 38.694893][ T4591] dump_stack_lvl+0xf4/0x15c [ 38.695778][ T4591] dump_stack+0x1c/0x5c [ 38.696577][ T4591] warn_alloc+0x214/0x324 [ 38.697475][ T4591] __vmalloc_node_range+0x24c/0xe70 [ 38.698555][ T4591] vmalloc+0x9c/0xd4 [ 38.699363][ T4591] snd_dma_vmalloc_alloc+0x20/0x30 [ 38.700430][ T4591] snd_dma_alloc_dir_pages+0x154/0x228 [ 38.701567][ T4591] do_alloc_pages+0x10c/0x238 [ 38.702495][ T4591] snd_pcm_lib_malloc_pages+0x27c/0x5f0 [ 38.703667][ T4591] snd_pcm_hw_params+0x6cc/0x1804 [ 38.704713][ T4591] snd_pcm_kernel_ioctl+0x218/0x278 [ 38.705767][ T4591] snd_pcm_oss_change_params_locked+0x1984/0x31c8 [ 38.707026][ T4591] snd_pcm_oss_make_ready+0x104/0x2d0 [ 38.708127][ T4591] snd_pcm_oss_sync+0x14c/0x934 [ 38.709103][ T4591] snd_pcm_oss_release+0xf8/0x230 [ 38.710125][ T4591] __fput+0x1b4/0x7b0 [ 38.710905][ T4591] ____fput+0x20/0x30 [ 38.711722][ T4591] task_work_run+0x1f4/0x280 [ 38.712629][ T4591] do_notify_resume+0x20f8/0x2c84 [ 38.713688][ T4591] el0_svc+0x9c/0x12c [ 38.714423][ T4591] el0t_64_sync_handler+0x84/0xf0 [ 38.715304][ T4591] el0t_64_sync+0x18c/0x190 [ 38.717172][ T4591] Mem-Info: [ 38.717796][ T4591] active_anon:4899 inactive_anon:0 isolated_anon:0 [ 38.717796][ T4591] active_file:4953 inactive_file:2076 isolated_file:0 [ 38.717796][ T4591] unevictable:768 dirty:1808 writeback:0 [ 38.717796][ T4591] slab_reclaimable:19022 slab_unreclaimable:91466 [ 38.717796][ T4591] mapped:29054 shmem:953 pagetables:633 [ 38.717796][ T4591] sec_pagetables:0 bounce:0 [ 38.717796][ T4591] kernel_misc_reclaimable:0 [ 38.717796][ T4591] free:1448913 free_pcp:3300 free_cma:7360 [ 38.726040][ T4591] Node 0 active_anon:19596kB inactive_anon:0kB active_file:19812kB inactive_file:8304kB unevictable:3072kB isolated(anon):0kB isolated(file):0kB mapped:116216kB dirty:7232kB writeback:0kB shmem:3812kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:8116kB pagetables:2532kB sec_pagetables:0kB all_unreclaimable? no [ 38.737583][ T4591] Node 0 DMA free:3076864kB boost:0kB min:20720kB low:25900kB high:31080kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145728kB managed:3080192kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:29440kB [ 38.742972][ T4591] lowmem_reserve[]: 0 0 3532 3532 3532 [ 38.743959][ T4591] Node 0 Normal free:2718788kB boost:0kB min:24332kB low:30412kB high:36492kB reserved_highatomic:0KB active_anon:19496kB inactive_anon:0kB active_file:19812kB inactive_file:8304kB unevictable:3072kB writepending:7232kB present:5242880kB managed:3620620kB mlocked:0kB bounce:0kB free_pcp:13840kB local_pcp:11788kB free_cma:0kB [ 38.749761][ T4591] lowmem_reserve[]: 0 0 0 0 0 [ 38.750731][ T4591] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 1*256kB (C) 1*512kB (C) 0*1024kB 0*2048kB 751*4096kB (MC) = 3076864kB [ 38.753295][ T4591] Node 0 Normal: 70*4kB (ME) 714*8kB (UM) 370*16kB (UM) 20*32kB (UME) 34*64kB (UME) 4*128kB (UM) 4*256kB (M) 4*512kB (UME) 5*1024kB (M) 0*2048kB 658*4096kB (UM) = 2718600kB [ 38.756779][ T4591] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 38.758593][ T4591] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=32768kB [ 38.760214][ T4591] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 38.761827][ T4591] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=64kB [ 38.763261][ T4591] 7982 total pagecache pages [ 38.764122][ T4591] 0 pages in swap cache [ 38.764793][ T4591] Free swap = 124996kB [ 38.765411][ T4591] Total swap = 124996kB [ 38.766164][ T4591] 2097152 pages RAM [ 38.767366][ T4591] 0 pages HighMem/MovableOnly [ 38.768394][ T4591] 421949 pages reserved [ 38.769341][ T4591] 8192 pages cma reserved [ 38.770126][ T4591] 0 pages hwpoisoned [ 38.844250][ T7] hid-generic 0005:4C4A:4955.0001: unknown main item tag 0x0 [ 38.851478][ T7] hid-generic 0005:4C4A:4955.0001: hidraw0: BLUETOOTH HID v0.09 Device [syz0] on aa:aa:aa:aa:aa:aa [ 39.181735][ T4533] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 39.400223][ T4634] netlink: 8 bytes leftover after parsing attributes in process `syz.1.72'. [ 39.489581][ T4654] ======================================================= [ 39.489581][ T4654] WARNING: The mand mount option has been deprecated and [ 39.489581][ T4654] and is ignored by this kernel. Remove the mand [ 39.489581][ T4654] option from the mount to silence this warning. [ 39.489581][ T4654] ======================================================= [ 39.525426][ T4654] jffs2: notice: (4654) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 39.612976][ T4668] FAULT_INJECTION: forcing a failure. [ 39.612976][ T4668] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 39.615279][ T4668] CPU: 1 PID: 4668 Comm: syz.1.79 Not tainted syzkaller #0 [ 39.616849][ T4668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 39.619140][ T4668] Call trace: [ 39.619867][ T4668] dump_backtrace+0x1c4/0x1f0 [ 39.620797][ T4668] show_stack+0x2c/0x3c [ 39.621615][ T4668] __dump_stack+0x30/0x40 [ 39.622452][ T4668] dump_stack_lvl+0xf4/0x15c [ 39.623421][ T4668] dump_stack+0x1c/0x5c [ 39.624304][ T4668] should_fail_ex+0x3cc/0x524 [ 39.625282][ T4668] should_fail_alloc_page+0x74/0xb8 [ 39.626356][ T4668] prepare_alloc_pages+0x1b8/0x4f0 [ 39.627440][ T4668] __alloc_pages+0x134/0x544 [ 39.628373][ T4668] alloc_pages+0x434/0x6fc [ 39.629293][ T4668] __get_free_pages+0x18/0x84 [ 39.630276][ T4668] kasan_populate_vmalloc_pte+0x40/0xe8 [ 39.631433][ T4668] __apply_to_page_range+0x83c/0xbf4 [ 39.632539][ T4668] apply_to_page_range+0x4c/0x64 [ 39.633626][ T4668] kasan_populate_vmalloc+0x5c/0x6c [ 39.634747][ T4668] alloc_vmap_area+0x155c/0x169c [ 39.635779][ T4668] __get_vm_area_node+0x178/0x31c [ 39.636801][ T4668] __vmalloc_node_range+0x1d4/0xe70 [ 39.637882][ T4668] kvmalloc_node+0x160/0x1d4 [ 39.638826][ T4668] dm_ctl_ioctl+0x5f8/0xf1c [ 39.639643][ T4668] __arm64_sys_ioctl+0x14c/0x1c8 [ 39.640564][ T4668] invoke_syscall+0x98/0x290 [ 39.641488][ T4668] el0_svc_common+0x13c/0x258 [ 39.642412][ T4668] do_el0_svc+0x5c/0x134 [ 39.643157][ T4668] el0_svc+0x58/0x12c [ 39.643979][ T4668] el0t_64_sync_handler+0x84/0xf0 [ 39.644988][ T4668] el0t_64_sync+0x18c/0x190 [ 39.744518][ T4691] ip_tables: iptables: counters copy to user failed while replacing table [ 40.142763][ T4743] device syzkaller0 entered promiscuous mode [ 40.176622][ T4407] input: syz0 as /devices/virtual/misc/uhid/0003:1B1E:0C13.0002/input/input2 [ 40.183432][ T4407] hid-generic 0003:1B1E:0C13.0002: input,hidraw0: USB HID v0.07 Device [syz0] on syz0 [ 40.235851][ T4747] hid-generic 0003:1B1E:0C13.0002: Event data for report 0 was too short (16 vs 2) [ 40.337559][ T4407] rxe_eth0 speed is unknown, defaulting to 1000 [ 40.485486][ T4781] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.488338][ T4781] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.207372][ T4790] device syzkaller0 entered promiscuous mode [ 41.254421][ T4794] CacheFiles: Empty directory specified [ 41.370843][ T4799] ip_tables: iptables: counters copy to user failed while replacing table [ 41.603744][ T4811] svc: failed to register nfsdv3 RPC service (errno 111). [ 41.607108][ T4811] svc: failed to register nfsaclv3 RPC service (errno 111). [ 41.685107][ T4822] FAULT_INJECTION: forcing a failure. [ 41.685107][ T4822] name failslab, interval 1, probability 0, space 0, times 0 [ 41.688477][ T4822] CPU: 0 PID: 4822 Comm: syz.3.119 Not tainted syzkaller #0 [ 41.690067][ T4822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 41.692069][ T4822] Call trace: [ 41.692757][ T4822] dump_backtrace+0x1c4/0x1f0 [ 41.693737][ T4822] show_stack+0x2c/0x3c [ 41.694610][ T4822] __dump_stack+0x30/0x40 [ 41.695490][ T4822] dump_stack_lvl+0xf4/0x15c [ 41.696343][ T4822] dump_stack+0x1c/0x5c [ 41.697053][ T4822] should_fail_ex+0x3cc/0x524 [ 41.697932][ T4822] __should_failslab+0xc0/0x11c [ 41.698822][ T4822] should_failslab+0x10/0x28 [ 41.699678][ T4822] kmem_cache_alloc+0x88/0x310 [ 41.700608][ T4822] __proc_create+0x30c/0x718 [ 41.701409][ T4822] proc_create_data+0xa0/0x16c [ 41.702225][ T4822] cache_register_net+0x2a0/0x48c [ 41.703308][ T4822] nfsd_idmap_init+0x164/0x1d4 [ 41.704169][ T4822] nfsd_init_net+0x60/0x1f4 [ 41.705010][ T4822] ops_init+0x2b0/0x53c [ 41.705764][ T4822] setup_net+0x494/0xb6c [ 41.706493][ T4822] copy_net_ns+0x2b8/0x578 [ 41.707298][ T4822] create_new_namespaces+0x30c/0x604 [ 41.708370][ T4822] unshare_nsproxy_namespaces+0x108/0x160 [ 41.709502][ T4822] ksys_unshare+0x3f0/0x70c [ 41.710403][ T4822] __arm64_sys_unshare+0x3c/0x50 [ 41.711311][ T4822] invoke_syscall+0x98/0x290 [ 41.712115][ T4822] el0_svc_common+0x13c/0x258 [ 41.713000][ T4822] do_el0_svc+0x5c/0x134 [ 41.713761][ T4822] el0_svc+0x58/0x12c [ 41.714437][ T4822] el0t_64_sync_handler+0x84/0xf0 [ 41.715333][ T4822] el0t_64_sync+0x18c/0x190 [ 41.716179][ C0] vkms_vblank_simulate: vblank timer overrun [ 41.863794][ T4826] device syzkaller0 entered promiscuous mode [ 42.281318][ T4833] ip_tables: iptables: counters copy to user failed while replacing table [ 42.407944][ T4639] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 42.486507][ T4849] netlink: 8 bytes leftover after parsing attributes in process `syz.1.128'. [ 42.492709][ T4843] fido_id[4843]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 42.568908][ T4859] device syzkaller0 entered promiscuous mode [ 42.681601][ T4882] netlink: 28 bytes leftover after parsing attributes in process `syz.2.137'. [ 42.734210][ T4889] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 42.751936][ T4889] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.753690][ T4889] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.772997][ T4898] ip_tables: iptables: counters copy to user failed while replacing table [ 43.480953][ T4964] ip_tables: iptables: counters copy to user failed while replacing table [ 44.660557][ T4977] svc: failed to register lockdv1 RPC service (errno 111). [ 44.662139][ T4977] lockd_up: makesock failed, error=-111 [ 45.386645][ T4983] device syzkaller0 entered promiscuous mode [ 45.742237][ T4891] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 45.819233][ T4990] ip_tables: iptables: counters copy to user failed while replacing table [ 45.842683][ T4999] Set syz1 is full, maxelem 2 reached [ 45.861401][ T5003] xt_hashlimit: size too large, truncated to 1048576 [ 45.957454][ T5009] netlink: 28 bytes leftover after parsing attributes in process `syz.0.183'. [ 46.765798][ T5033] device syzkaller0 entered promiscuous mode [ 46.805949][ T5037] netlink: 28 bytes leftover after parsing attributes in process `syz.3.195'. [ 46.865450][ T5043] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1303 [ 46.962930][ T5045] device syzkaller0 entered promiscuous mode [ 46.984907][ T5051] Set syz1 is full, maxelem 2 reached [ 47.034666][ T5057] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.038182][ T5057] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.141901][ T5058] netlink: 64 bytes leftover after parsing attributes in process `syz.1.204'. [ 47.184353][ T5060] device syzkaller1 entered promiscuous mode [ 47.212730][ T5065] netlink: 28 bytes leftover after parsing attributes in process `syz.3.207'. [ 47.263272][ T5074] IPv6: ADDRCONF(NETDEV_CHANGE): eql: link becomes ready [ 47.267159][ T5074] IPv6: ADDRCONF(NETDEV_CHANGE): wpan0: link becomes ready [ 47.269148][ T5074] IPv6: ADDRCONF(NETDEV_CHANGE): wpan1: link becomes ready [ 47.270746][ T5074] IPv6: ADDRCONF(NETDEV_CHANGE): nr0: link becomes ready [ 47.272270][ T5074] IPv6: ADDRCONF(NETDEV_CHANGE): nr1: link becomes ready [ 47.273626][ T5074] IPv6: ADDRCONF(NETDEV_CHANGE): nr2: link becomes ready [ 47.277190][ T5074] IPv6: ADDRCONF(NETDEV_CHANGE): nr3: link becomes ready [ 47.278854][ T5074] IPv6: ADDRCONF(NETDEV_CHANGE): lapb0: link becomes ready [ 47.288369][ T5074] IPv6: ADDRCONF(NETDEV_CHANGE): lapb1: link becomes ready [ 47.289983][ T5074] IPv6: ADDRCONF(NETDEV_CHANGE): lapb2: link becomes ready [ 47.291483][ T5074] IPv6: ADDRCONF(NETDEV_CHANGE): lapb3: link becomes ready [ 47.293056][ T5074] IPv6: ADDRCONF(NETDEV_CHANGE): lapb4: link becomes ready [ 47.294584][ T5074] IPv6: ADDRCONF(NETDEV_CHANGE): lapb5: link becomes ready [ 47.296323][ T5074] infiniband rxe0: set active [ 47.300439][ T5074] IPv6: ADDRCONF(NETDEV_CHANGE): lapb6: link becomes ready [ 47.304291][ T14] rxe_eth0 speed is unknown, defaulting to 1000 [ 47.306336][ T5076] device syzkaller0 entered promiscuous mode [ 47.738975][ T5124] device syzkaller0 entered promiscuous mode [ 47.741482][ T5122] device syzkaller0 entered promiscuous mode [ 47.830217][ T191] nci: nci_ntf_packet: unknown ntf opcode 0x905 [ 47.988403][ T5147] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 48.050522][ T5149] FAULT_INJECTION: forcing a failure. [ 48.050522][ T5149] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 48.053034][ T5149] CPU: 0 PID: 5149 Comm: syz.0.239 Not tainted syzkaller #0 [ 48.054517][ T5149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 48.056540][ T5149] Call trace: [ 48.057262][ T5149] dump_backtrace+0x1c4/0x1f0 [ 48.058296][ T5149] show_stack+0x2c/0x3c [ 48.059243][ T5149] __dump_stack+0x30/0x40 [ 48.060157][ T5149] dump_stack_lvl+0xf4/0x15c [ 48.061090][ T5149] dump_stack+0x1c/0x5c [ 48.061964][ T5149] should_fail_ex+0x3cc/0x524 [ 48.062895][ T5149] should_fail_alloc_page+0x74/0xb8 [ 48.063833][ T5149] prepare_alloc_pages+0x1b8/0x4f0 [ 48.064760][ T5149] __alloc_pages+0x134/0x544 [ 48.065579][ T5149] alloc_pages+0x434/0x6fc [ 48.066378][ T5149] __get_free_pages+0x18/0x84 [ 48.067396][ T5149] kasan_populate_vmalloc_pte+0x40/0xe8 [ 48.068572][ T5149] __apply_to_page_range+0x83c/0xbf4 [ 48.069569][ T5149] apply_to_page_range+0x4c/0x64 [ 48.070638][ T5149] kasan_populate_vmalloc+0x5c/0x6c [ 48.071721][ T5149] alloc_vmap_area+0x155c/0x169c [ 48.072675][ T5149] __get_vm_area_node+0x178/0x31c [ 48.073565][ T5149] __vmalloc_node_range+0x1d4/0xe70 [ 48.074461][ T5149] vmalloc+0x9c/0xd4 [ 48.075162][ T5149] snd_dma_vmalloc_alloc+0x20/0x30 [ 48.076047][ T5149] snd_dma_alloc_dir_pages+0x154/0x228 [ 48.077093][ T5149] do_alloc_pages+0x10c/0x238 [ 48.077935][ T5149] snd_pcm_lib_malloc_pages+0x27c/0x5f0 [ 48.079023][ T5149] snd_pcm_hw_params+0x6cc/0x1804 [ 48.079971][ T5149] snd_pcm_kernel_ioctl+0x218/0x278 [ 48.080938][ T5149] snd_pcm_oss_change_params_locked+0x1984/0x31c8 [ 48.082062][ T5149] snd_pcm_oss_make_ready+0x104/0x2d0 [ 48.083141][ T5149] snd_pcm_oss_sync+0x14c/0x934 [ 48.084137][ T5149] snd_pcm_oss_release+0xf8/0x230 [ 48.085171][ T5149] __fput+0x1b4/0x7b0 [ 48.086006][ T5149] ____fput+0x20/0x30 [ 48.086843][ T5149] task_work_run+0x1f4/0x280 [ 48.087779][ T5149] do_notify_resume+0x20f8/0x2c84 [ 48.088766][ T5149] el0_svc+0x9c/0x12c [ 48.089569][ T5149] el0t_64_sync_handler+0x84/0xf0 [ 48.090560][ T5149] el0t_64_sync+0x18c/0x190 [ 48.422379][ T5175] device syzkaller1 entered promiscuous mode [ 48.536118][ T27] audit: type=1400 audit(48.520:2): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=5176 comm="syz.0.250" [ 48.581680][ T5181] ip_tables: iptables: counters copy to user failed while replacing table [ 49.555441][ T5222] device syzkaller1 entered promiscuous mode [ 49.594446][ T27] audit: type=1400 audit(49.580:3): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=5225 comm="syz.0.272" [ 49.638354][ T5228] netlink: 'syz.0.273': attribute type 6 has an invalid length. [ 50.599190][ T5246] ip_tables: iptables: counters copy to user failed while replacing table [ 50.623949][ T5248] netlink: 24 bytes leftover after parsing attributes in process `syz.3.283'. [ 50.774359][ T5127] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 50.872696][ T5261] device syzkaller1 entered promiscuous mode [ 50.936061][ T5268] device syzkaller0 entered promiscuous mode [ 50.974319][ T5278] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.975829][ T5278] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.062783][ T5292] usb usb2: usbfs: process 5292 (syz.3.303) did not claim interface 0 before use [ 51.215848][ T4406] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 51.220189][ T4406] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 51.221779][ T4406] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 51.223186][ T4406] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 51.231444][ T4406] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 51.232757][ T4406] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 51.234130][ T4406] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 51.244041][ T4406] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 51.245617][ T4406] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 51.249262][ T4406] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 51.250452][ T4406] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 51.251566][ T4406] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 51.252872][ T4406] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 51.254127][ T4406] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 51.255528][ T4406] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 51.257924][ T4406] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 51.259672][ T4406] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 51.261325][ T4406] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 51.262895][ T4406] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 51.266334][ T4406] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 51.269310][ T4406] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 51.271149][ T4406] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 51.272291][ T4406] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 51.273730][ T4406] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 51.275103][ T4406] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 51.276477][ T4406] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 51.279493][ T4406] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 51.281169][ T4406] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 51.282733][ T4406] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 51.284242][ T4406] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 51.285773][ T4406] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 51.287499][ T4406] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 51.289230][ T4406] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 51.290466][ T4406] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 51.291794][ T4406] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 51.293196][ T4406] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 51.294773][ T4406] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 51.296012][ T4406] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 51.298929][ T4406] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 51.300678][ T4406] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 51.308775][ T4406] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz0] on syz0 [ 51.332454][ T5331] fido_id[5331]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 51.436537][ T5343] device syzkaller0 entered promiscuous mode [ 51.456965][ T5349] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.459607][ T5349] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.623783][ T5367] ip_tables: iptables: counters copy to user failed while replacing table [ 51.630505][ T5369] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 51.667093][ T5369] xt_CT: You must specify a L4 protocol and not use inversions on it [ 51.710210][ T5374] FAULT_INJECTION: forcing a failure. [ 51.710210][ T5374] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 51.712517][ T5374] CPU: 0 PID: 5374 Comm: syz.0.339 Not tainted syzkaller #0 [ 51.713991][ T5374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 51.715837][ T5374] Call trace: [ 51.716421][ T5374] dump_backtrace+0x1c4/0x1f0 [ 51.717300][ T5374] show_stack+0x2c/0x3c [ 51.718109][ T5374] __dump_stack+0x30/0x40 [ 51.719018][ T5374] dump_stack_lvl+0xf4/0x15c [ 51.719910][ T5374] dump_stack+0x1c/0x5c [ 51.720718][ T5374] should_fail_ex+0x3cc/0x524 [ 51.721652][ T5374] should_fail_alloc_page+0x74/0xb8 [ 51.722532][ T5374] prepare_alloc_pages+0x1b8/0x4f0 [ 51.723548][ T5374] __alloc_pages+0x134/0x544 [ 51.724329][ T5374] alloc_pages+0x434/0x6fc [ 51.725308][ T5374] __get_free_pages+0x18/0x84 [ 51.726284][ T5374] kasan_populate_vmalloc_pte+0x40/0xe8 [ 51.727386][ T5374] __apply_to_page_range+0x83c/0xbf4 [ 51.728478][ T5374] apply_to_page_range+0x4c/0x64 [ 51.729532][ T5374] kasan_populate_vmalloc+0x5c/0x6c [ 51.730557][ T5374] alloc_vmap_area+0x155c/0x169c [ 51.731390][ T5374] __get_vm_area_node+0x178/0x31c [ 51.732209][ T5374] __vmalloc_node_range+0x1d4/0xe70 [ 51.733073][ T5374] vmalloc_user+0xa0/0xdc [ 51.733829][ T5374] vb2_vmalloc_alloc+0xf8/0x2e0 [ 51.734809][ T5374] __vb2_queue_alloc+0x65c/0x1174 [ 51.735771][ T5374] vb2_core_reqbufs+0x8b8/0xeb8 [ 51.736722][ T5374] vb2_ioctl_reqbufs+0x3ac/0x67c [ 51.737589][ T5374] v4l_reqbufs+0xbc/0xe8 [ 51.738328][ T5374] __video_do_ioctl+0x9b0/0xaec [ 51.739293][ T5374] video_usercopy+0x940/0xfc8 [ 51.740273][ T5374] video_ioctl2+0x3c/0x50 [ 51.741146][ T5374] v4l2_ioctl+0x148/0x18c [ 51.741993][ T5374] __arm64_sys_ioctl+0x14c/0x1c8 [ 51.743004][ T5374] invoke_syscall+0x98/0x290 [ 51.743962][ T5374] el0_svc_common+0x13c/0x258 [ 51.744798][ T5374] do_el0_svc+0x5c/0x134 [ 51.745633][ T5374] el0_svc+0x58/0x12c [ 51.746352][ T5374] el0t_64_sync_handler+0x84/0xf0 [ 51.747362][ T5374] el0t_64_sync+0x18c/0x190 [ 51.751844][ T5374] warn_alloc: 3 callbacks suppressed [ 51.751857][ T5374] syz.0.339: vmalloc error: size 921600, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0 [ 51.756483][ T5374] CPU: 1 PID: 5374 Comm: syz.0.339 Not tainted syzkaller #0 [ 51.757770][ T5374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 51.759603][ T5374] Call trace: [ 51.760226][ T5374] dump_backtrace+0x1c4/0x1f0 [ 51.761014][ T5374] show_stack+0x2c/0x3c [ 51.761770][ T5374] __dump_stack+0x30/0x40 [ 51.762635][ T5374] dump_stack_lvl+0xf4/0x15c [ 51.763549][ T5374] dump_stack+0x1c/0x5c [ 51.764316][ T5374] warn_alloc+0x214/0x324 [ 51.765085][ T5374] __vmalloc_node_range+0x24c/0xe70 [ 51.766073][ T5374] vmalloc_user+0xa0/0xdc [ 51.766875][ T5374] vb2_vmalloc_alloc+0xf8/0x2e0 [ 51.767804][ T5374] __vb2_queue_alloc+0x65c/0x1174 [ 51.768783][ T5374] vb2_core_reqbufs+0x8b8/0xeb8 [ 51.769650][ T5374] vb2_ioctl_reqbufs+0x3ac/0x67c [ 51.770508][ T5374] v4l_reqbufs+0xbc/0xe8 [ 51.771298][ T5374] __video_do_ioctl+0x9b0/0xaec [ 51.772358][ T5374] video_usercopy+0x940/0xfc8 [ 51.773313][ T5374] video_ioctl2+0x3c/0x50 [ 51.774261][ T5374] v4l2_ioctl+0x148/0x18c [ 51.775233][ T5374] __arm64_sys_ioctl+0x14c/0x1c8 [ 51.776280][ T5374] invoke_syscall+0x98/0x290 [ 51.777267][ T5374] el0_svc_common+0x13c/0x258 [ 51.778188][ T5374] do_el0_svc+0x5c/0x134 [ 51.778934][ T5374] el0_svc+0x58/0x12c [ 51.779676][ T5374] el0t_64_sync_handler+0x84/0xf0 [ 51.780750][ T5374] el0t_64_sync+0x18c/0x190 [ 51.784458][ T5374] Mem-Info: [ 51.786847][ T5374] active_anon:4924 inactive_anon:0 isolated_anon:0 [ 51.786847][ T5374] active_file:4979 inactive_file:2086 isolated_file:0 [ 51.786847][ T5374] unevictable:768 dirty:1787 writeback:0 [ 51.786847][ T5374] slab_reclaimable:19162 slab_unreclaimable:93824 [ 51.786847][ T5374] mapped:29176 shmem:955 pagetables:616 [ 51.786847][ T5374] sec_pagetables:0 bounce:0 [ 51.786847][ T5374] kernel_misc_reclaimable:0 [ 51.786847][ T5374] free:1443453 free_pcp:4490 free_cma:7360 [ 51.795626][ T5374] Node 0 active_anon:19696kB inactive_anon:0kB active_file:19916kB inactive_file:8344kB unevictable:3072kB isolated(anon):0kB isolated(file):0kB mapped:116704kB dirty:7148kB writeback:0kB shmem:3820kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:8036kB pagetables:2464kB sec_pagetables:0kB all_unreclaimable? no [ 51.802568][ T5374] Node 0 DMA free:3076864kB boost:0kB min:20720kB low:25900kB high:31080kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145728kB managed:3080192kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:29440kB [ 51.811023][ T5374] lowmem_reserve[]: 0 0 3532 3532 3532 [ 51.816968][ T5374] Node 0 Normal free:2696948kB boost:0kB min:24332kB low:30412kB high:36492kB reserved_highatomic:0KB active_anon:19796kB inactive_anon:0kB active_file:19916kB inactive_file:8344kB unevictable:3072kB writepending:7148kB present:5242880kB managed:3620620kB mlocked:0kB bounce:0kB free_pcp:17872kB local_pcp:14472kB free_cma:0kB [ 51.824423][ T5374] lowmem_reserve[]: 0 0 0 0 0 [ 51.825630][ T5374] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 1*256kB (C) 1*512kB (C) 0*1024kB 0*2048kB 751*4096kB (MC) = 3076864kB [ 51.831344][ T5374] Node 0 Normal: 653*4kB (UME) 838*8kB (UM) 445*16kB (UM) 110*32kB (UME) 60*64kB (UME) 18*128kB (UM) 15*256kB (UME) 9*512kB (UME) 12*1024kB (UME) 2*2048kB (ME) 646*4096kB (UM) = 2696948kB [ 51.838011][ T5374] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 51.840015][ T5374] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=32768kB [ 51.841879][ T5374] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 51.843816][ T5374] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=64kB [ 51.846330][ T5374] 8020 total pagecache pages [ 51.847621][ T5374] 0 pages in swap cache [ 51.848583][ T5374] Free swap = 124740kB [ 51.849322][ T5374] Total swap = 124996kB [ 51.850126][ T5374] 2097152 pages RAM [ 51.850796][ T5374] 0 pages HighMem/MovableOnly [ 51.851611][ T5374] 421949 pages reserved [ 51.852269][ T5374] 8192 pages cma reserved [ 51.853013][ T5374] 0 pages hwpoisoned [ 51.889858][ T5382] FAULT_INJECTION: forcing a failure. [ 51.889858][ T5382] name failslab, interval 1, probability 0, space 0, times 0 [ 51.892372][ T5382] CPU: 1 PID: 5382 Comm: syz.0.343 Not tainted syzkaller #0 [ 51.893678][ T5382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 51.895639][ T5382] Call trace: [ 51.896273][ T5382] dump_backtrace+0x1c4/0x1f0 [ 51.897156][ T5382] show_stack+0x2c/0x3c [ 51.897994][ T5382] __dump_stack+0x30/0x40 [ 51.898856][ T5382] dump_stack_lvl+0xf4/0x15c [ 51.899798][ T5382] dump_stack+0x1c/0x5c [ 51.900571][ T5382] should_fail_ex+0x3cc/0x524 [ 51.901504][ T5382] __should_failslab+0xc0/0x11c [ 51.902448][ T5382] should_failslab+0x10/0x28 [ 51.903350][ T5382] __kmem_cache_alloc_node+0x7c/0x318 [ 51.904267][ T5382] kmalloc_trace+0x48/0x94 [ 51.905149][ T5382] percpu_ref_init+0xc8/0x2f0 [ 51.906108][ T5382] io_rsrc_node_switch_start+0xa8/0x1c0 [ 51.907227][ T5382] io_uring_create+0x494/0xb34 [ 51.908236][ T5382] __arm64_sys_io_uring_setup+0x2a4/0x2e8 [ 51.909233][ T5382] invoke_syscall+0x98/0x290 [ 51.910256][ T5382] el0_svc_common+0x13c/0x258 [ 51.911301][ T5382] do_el0_svc+0x5c/0x134 [ 51.912221][ T5382] el0_svc+0x58/0x12c [ 51.913083][ T5382] el0t_64_sync_handler+0x84/0xf0 [ 51.914180][ T5382] el0t_64_sync+0x18c/0x190 [ 52.041685][ T5408] ip_tables: iptables: counters copy to user failed while replacing table [ 52.122275][ T5416] FAULT_INJECTION: forcing a failure. [ 52.122275][ T5416] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 52.124772][ T5416] CPU: 0 PID: 5416 Comm: syz.4.354 Not tainted syzkaller #0 [ 52.126142][ T5416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 52.128020][ T5416] Call trace: [ 52.128660][ T5416] dump_backtrace+0x1c4/0x1f0 [ 52.129552][ T5416] show_stack+0x2c/0x3c [ 52.130280][ T5416] __dump_stack+0x30/0x40 [ 52.131061][ T5416] dump_stack_lvl+0xf4/0x15c [ 52.131934][ T5416] dump_stack+0x1c/0x5c [ 52.132689][ T5416] should_fail_ex+0x3cc/0x524 [ 52.133594][ T5416] should_fail_alloc_page+0x74/0xb8 [ 52.134547][ T5416] prepare_alloc_pages+0x1b8/0x4f0 [ 52.135553][ T5416] __alloc_pages+0x134/0x544 [ 52.136444][ T5416] alloc_pages+0x434/0x6fc [ 52.137322][ T5416] __get_free_pages+0x18/0x84 [ 52.138215][ T5416] kasan_populate_vmalloc_pte+0x40/0xe8 [ 52.139333][ T5416] __apply_to_page_range+0x83c/0xbf4 [ 52.140411][ T5416] apply_to_page_range+0x4c/0x64 [ 52.141260][ T5416] kasan_populate_vmalloc+0x5c/0x6c [ 52.142402][ T5416] alloc_vmap_area+0x155c/0x169c [ 52.143401][ T5416] __get_vm_area_node+0x178/0x31c [ 52.144298][ T5416] __vmalloc_node_range+0x1d4/0xe70 [ 52.145325][ T5416] vmalloc_user+0xa0/0xdc [ 52.146249][ T5416] vb2_vmalloc_alloc+0xf8/0x2e0 [ 52.147110][ T5416] __vb2_queue_alloc+0x65c/0x1174 [ 52.147960][ T5416] vb2_core_reqbufs+0x8b8/0xeb8 [ 52.148791][ T5416] vb2_ioctl_reqbufs+0x3ac/0x67c [ 52.149721][ T5416] v4l_reqbufs+0xbc/0xe8 [ 52.150455][ T5416] __video_do_ioctl+0x9b0/0xaec [ 52.151314][ T5416] video_usercopy+0x940/0xfc8 [ 52.152245][ T5416] video_ioctl2+0x3c/0x50 [ 52.153029][ T5416] v4l2_ioctl+0x148/0x18c [ 52.153839][ T5416] __arm64_sys_ioctl+0x14c/0x1c8 [ 52.154676][ T5416] invoke_syscall+0x98/0x290 [ 52.155464][ T5416] el0_svc_common+0x13c/0x258 [ 52.156278][ T5416] do_el0_svc+0x5c/0x134 [ 52.156796][ T48] Bluetooth: hci1: command 0x0406 tx timeout [ 52.157110][ T5416] el0_svc+0x58/0x12c [ 52.158972][ T5416] el0t_64_sync_handler+0x84/0xf0 [ 52.159954][ T5416] el0t_64_sync+0x18c/0x190 [ 52.204216][ T5431] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.356'. [ 52.205858][ T5431] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.356'. [ 52.212090][ T5431] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.356'. [ 52.214770][ T5431] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.356'. [ 52.405026][ T5462] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.414175][ T5462] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.422491][ T5465] Set syz1 is full, maxelem 2 reached [ 52.484741][ T5470] ftl_cs: FTL header not found. [ 52.495164][ T5470] block2mtd: mtd1: [/dev/zram0] erase_size = 4KiB [4096] [ 52.535458][ T5476] FAULT_INJECTION: forcing a failure. [ 52.535458][ T5476] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 52.540422][ T5476] CPU: 1 PID: 5476 Comm: syz.0.370 Not tainted syzkaller #0 [ 52.541853][ T5476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 52.544002][ T5476] Call trace: [ 52.544746][ T5476] dump_backtrace+0x1c4/0x1f0 [ 52.545836][ T5476] show_stack+0x2c/0x3c [ 52.546770][ T5476] __dump_stack+0x30/0x40 [ 52.547752][ T5476] dump_stack_lvl+0xf4/0x15c [ 52.548626][ T5476] dump_stack+0x1c/0x5c [ 52.549526][ T5476] should_fail_ex+0x3cc/0x524 [ 52.550521][ T5476] should_fail_alloc_page+0x74/0xb8 [ 52.551632][ T5476] prepare_alloc_pages+0x1b8/0x4f0 [ 52.552765][ T5476] __alloc_pages+0x134/0x544 [ 52.553718][ T5476] alloc_pages+0x434/0x6fc [ 52.554631][ T5476] __get_free_pages+0x18/0x84 [ 52.555516][ T5476] kasan_populate_vmalloc_pte+0x40/0xe8 [ 52.556616][ T5476] __apply_to_page_range+0x83c/0xbf4 [ 52.557518][ T5476] apply_to_page_range+0x4c/0x64 [ 52.558486][ T5476] kasan_populate_vmalloc+0x5c/0x6c [ 52.559559][ T5476] alloc_vmap_area+0x155c/0x169c [ 52.560555][ T5476] __get_vm_area_node+0x178/0x31c [ 52.561574][ T5476] __vmalloc_node_range+0x1d4/0xe70 [ 52.562594][ T5476] vmalloc_user+0xa0/0xdc [ 52.563458][ T5476] vb2_vmalloc_alloc+0xf8/0x2e0 [ 52.564405][ T5476] __vb2_queue_alloc+0x65c/0x1174 [ 52.565388][ T5476] vb2_core_reqbufs+0x8b8/0xeb8 [ 52.566274][ T5476] vb2_ioctl_reqbufs+0x3ac/0x67c [ 52.567157][ T5476] v4l_reqbufs+0xbc/0xe8 [ 52.568052][ T5476] __video_do_ioctl+0x9b0/0xaec [ 52.569103][ T5476] video_usercopy+0x940/0xfc8 [ 52.570133][ T5476] video_ioctl2+0x3c/0x50 [ 52.571029][ T5476] v4l2_ioctl+0x148/0x18c [ 52.571935][ T5476] __arm64_sys_ioctl+0x14c/0x1c8 [ 52.572952][ T5476] invoke_syscall+0x98/0x290 [ 52.573760][ T5476] el0_svc_common+0x13c/0x258 [ 52.574658][ T5476] do_el0_svc+0x5c/0x134 [ 52.575554][ T5476] el0_svc+0x58/0x12c [ 52.576325][ T5476] el0t_64_sync_handler+0x84/0xf0 [ 52.577280][ T5476] el0t_64_sync+0x18c/0x190 [ 52.578161][ C1] vkms_vblank_simulate: vblank timer overrun [ 54.478925][ T5713] Set syz1 is full, maxelem 2 reached [ 54.694787][ T5737] Set syz1 is full, maxelem 2 reached [ 54.718106][ T5738] process 'syz.3.456' launched './file0' with NULL argv: empty string added [ 55.917731][ T5509] block2mtd: error: cannot open device /dev/zram0 [ 56.093785][ T5884] [ 56.094324][ T5884] ====================================================== [ 56.095487][ T5884] WARNING: possible circular locking dependency detected [ 56.096572][ T5884] syzkaller #0 Not tainted [ 56.097465][ T5884] ------------------------------------------------------ [ 56.098775][ T5884] syz.4.523/5884 is trying to acquire lock: [ 56.099903][ T5884] ffff0000daea0428 (&hdev->lock){+.+.}-{3:3}, at: l2cap_chan_connect+0xd0/0xba0 [ 56.101760][ T5884] [ 56.101760][ T5884] but task is already holding lock: [ 56.103165][ T5884] ffff800018c1a0a8 (rfcomm_mutex){+.+.}-{3:3}, at: rfcomm_dlc_open+0xa8/0xcf4 [ 56.105084][ T5884] [ 56.105084][ T5884] which lock already depends on the new lock. [ 56.105084][ T5884] [ 56.107198][ T5884] [ 56.107198][ T5884] the existing dependency chain (in reverse order) is: [ 56.108815][ T5884] [ 56.108815][ T5884] -> #2 (rfcomm_mutex){+.+.}-{3:3}: [ 56.110232][ T5884] __mutex_lock_common+0x1a0/0x1f3c [ 56.111395][ T5884] mutex_lock_nested+0x38/0x44 [ 56.112353][ T5884] rfcomm_security_cfm+0x9c/0x674 [ 56.113493][ T5884] hci_auth_complete_evt+0x2e4/0xa68 [ 56.114609][ T5884] hci_event_packet+0x698/0xe60 [ 56.115662][ T5884] hci_rx_work+0x310/0xa70 [ 56.116718][ T5884] process_one_work+0x7e4/0x13bc [ 56.117891][ T5884] worker_thread+0x8cc/0xfe8 [ 56.118876][ T5884] kthread+0x254/0x2e0 [ 56.119735][ T5884] ret_from_fork+0x10/0x20 [ 56.120638][ T5884] [ 56.120638][ T5884] -> #1 (hci_cb_list_lock){+.+.}-{3:3}: [ 56.122101][ T5884] __mutex_lock_common+0x1a0/0x1f3c [ 56.123114][ T5884] mutex_lock_nested+0x38/0x44 [ 56.124084][ T5884] hci_remote_features_evt+0x410/0x840 [ 56.125291][ T5884] hci_event_packet+0x698/0xe60 [ 56.126371][ T5884] hci_rx_work+0x310/0xa70 [ 56.127425][ T5884] process_one_work+0x7e4/0x13bc [ 56.128556][ T5884] worker_thread+0x8cc/0xfe8 [ 56.129628][ T5884] kthread+0x254/0x2e0 [ 56.130592][ T5884] ret_from_fork+0x10/0x20 [ 56.131573][ T5884] [ 56.131573][ T5884] -> #0 (&hdev->lock){+.+.}-{3:3}: [ 56.132973][ T5884] __lock_acquire+0x3504/0x7280 [ 56.134015][ T5884] lock_acquire+0x210/0x63c [ 56.134998][ T5884] __mutex_lock_common+0x1a0/0x1f3c [ 56.136153][ T5884] mutex_lock_nested+0x38/0x44 [ 56.137107][ T5884] l2cap_chan_connect+0xd0/0xba0 [ 56.138079][ T5884] l2cap_sock_connect+0x414/0x600 [ 56.139062][ T5884] kernel_connect+0x124/0x190 [ 56.139971][ T5884] rfcomm_dlc_open+0x4f4/0xcf4 [ 56.140885][ T5884] rfcomm_sock_connect+0x25c/0x57c [ 56.141927][ T5884] __sys_connect+0x28c/0x2b4 [ 56.142929][ T5884] __arm64_sys_connect+0x7c/0x94 [ 56.144087][ T5884] invoke_syscall+0x98/0x290 [ 56.145044][ T5884] el0_svc_common+0x13c/0x258 [ 56.145994][ T5884] do_el0_svc+0x5c/0x134 [ 56.146899][ T5884] el0_svc+0x58/0x12c [ 56.147702][ T5884] el0t_64_sync_handler+0x84/0xf0 [ 56.148694][ T5884] el0t_64_sync+0x18c/0x190 [ 56.149561][ T5884] [ 56.149561][ T5884] other info that might help us debug this: [ 56.149561][ T5884] [ 56.151316][ T5884] Chain exists of: [ 56.151316][ T5884] &hdev->lock --> hci_cb_list_lock --> rfcomm_mutex [ 56.151316][ T5884] [ 56.153790][ T5884] Possible unsafe locking scenario: [ 56.153790][ T5884] [ 56.155048][ T5884] CPU0 CPU1 [ 56.155960][ T5884] ---- ---- [ 56.156875][ T5884] lock(rfcomm_mutex); [ 56.157728][ T5884] lock(hci_cb_list_lock); [ 56.159032][ T5884] lock(rfcomm_mutex); [ 56.160216][ T5884] lock(&hdev->lock); [ 56.160990][ T5884] [ 56.160990][ T5884] *** DEADLOCK *** [ 56.160990][ T5884] [ 56.162347][ T5884] 1 lock held by syz.4.523/5884: [ 56.163217][ T5884] #0: ffff800018c1a0a8 (rfcomm_mutex){+.+.}-{3:3}, at: rfcomm_dlc_open+0xa8/0xcf4 [ 56.165090][ T5884] [ 56.165090][ T5884] stack backtrace: [ 56.166248][ T5884] CPU: 1 PID: 5884 Comm: syz.4.523 Not tainted syzkaller #0 [ 56.167710][ T5884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 56.169822][ T5884] Call trace: [ 56.170451][ T5884] dump_backtrace+0x1c4/0x1f0 [ 56.171309][ T5884] show_stack+0x2c/0x3c [ 56.172153][ T5884] __dump_stack+0x30/0x40 [ 56.172984][ T5884] dump_stack_lvl+0xf4/0x15c [ 56.173828][ T5884] dump_stack+0x1c/0x5c [ 56.174624][ T5884] print_circular_bug+0x148/0x1b0 [ 56.175722][ T5884] check_noncircular+0x290/0x370 [ 56.176789][ T5884] __lock_acquire+0x3504/0x7280 [ 56.177842][ T5884] lock_acquire+0x210/0x63c [ 56.178846][ T5884] __mutex_lock_common+0x1a0/0x1f3c [ 56.179967][ T5884] mutex_lock_nested+0x38/0x44 [ 56.180962][ T5884] l2cap_chan_connect+0xd0/0xba0 [ 56.181924][ T5884] l2cap_sock_connect+0x414/0x600 [ 56.182898][ T5884] kernel_connect+0x124/0x190 [ 56.183865][ T5884] rfcomm_dlc_open+0x4f4/0xcf4 [ 56.184852][ T5884] rfcomm_sock_connect+0x25c/0x57c [ 56.185887][ T5884] __sys_connect+0x28c/0x2b4 [ 56.186833][ T5884] __arm64_sys_connect+0x7c/0x94 [ 56.187871][ T5884] invoke_syscall+0x98/0x290 [ 56.188837][ T5884] el0_svc_common+0x13c/0x258 [ 56.189816][ T5884] do_el0_svc+0x5c/0x134 [ 56.190601][ T5884] el0_svc+0x58/0x12c [ 56.191314][ T5884] el0t_64_sync_handler+0x84/0xf0 [ 56.192339][ T5884] el0t_64_sync+0x18c/0x190 [ 56.193329][ C1] vkms_vblank_simulate: vblank timer overrun [ 58.076980][ T48] Bluetooth: hci4: command 0x0405 tx timeout [ 59.206860][ T5886] block2mtd: error: cannot open device /dev/zram0 [ 60.156767][ T48] Bluetooth: hci4: command 0x0405 tx timeout [ 62.236753][ T4339] Bluetooth: hci4: command 0x0405 tx timeout [ 64.477870][ T2065] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.479135][ T2065] ieee802154 phy1 wpan1: encryption failed: -22