last executing test programs: 1m3.84437052s ago: executing program 2 (id=12): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0xf9) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f00000001c0)='27', 0x2) r1 = syz_open_dev$vim2m(&(0x7f0000000800), 0x7, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000e80)={0x0, 0x2000bb22, 0x2, {0x1, @raw_data="3d924b827139e8a4ec01eb92492ff84715d1a004d08b012a7cafe27a5f313d31bbdae5b411ca5be6bfe92437ed0d21b5180e375be56b3b9306d7dbb26bf9f22de7ac7681cca450055250217bdf1113b4258293ba4efed32147bda8454dd115bd5ba066ba06f2854cc96db9a98055cbde9fd084a1223ada91ed2e832907a01ab5ee65f997b617f73d1aa5a6dfc47acdc5eb834f8e448469d235e4380cbcc331c96177b67caa0656f9664277cadb8597e7d911ad1da457ef9744b0993c57a700"}}) 1m3.292975954s ago: executing program 2 (id=16): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) init_module(&(0x7f0000000d40)=ANY=[], 0xa99, &(0x7f0000001800)='GPL\x00') socket$inet6_sctp(0xa, 0x801, 0x84) r3 = socket(0x40000000015, 0x805, 0x0) getsockopt(r3, 0x114, 0x271d, 0x0, &(0x7f0000000280)) 1m2.116633721s ago: executing program 2 (id=21): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000300)={0x73622a85, 0x100b, 0x4}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000340)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x8, 0x0, &(0x7f00000003c0)=[@acquire], 0xffffffffffffff47, 0x0, 0x0}) dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x8, 0x0, &(0x7f0000000680)=[@release], 0x0, 0x0, 0x0}) 1m1.181037243s ago: executing program 2 (id=23): getpid() syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x210000, &(0x7f0000000780)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x2}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000000980)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000f00)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000f40)='./file0\x00', &(0x7f0000000f80), 0x0, &(0x7f0000000fc0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) lsetxattr$security_capability(&(0x7f0000001000)='./file1\x00', &(0x7f0000001040), &(0x7f0000001080)=@v3={0x3000000, [{0x101, 0x3}, {0x5, 0x1ff}]}, 0x18, 0x0) truncate(&(0x7f00000010c0)='./file0/file1\x00', 0xe2) 59.884698783s ago: executing program 2 (id=29): syz_mount_image$ext4(&(0x7f0000000640)='ext3\x00', &(0x7f0000000840)='./file0\x00', 0x8080, &(0x7f0000000880)={[{@norecovery}, {@sysvgroups}, {@sysvgroups}, {@lazytime}]}, 0xee, 0x49b, &(0x7f00000008c0)="$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") renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x5) 58.924704915s ago: executing program 2 (id=38): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000540)='./config\x00', &(0x7f0000000580)='configfs\x00', 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) symlinkat(&(0x7f00000009c0)='./config/usb_gadget/g1/functions/uvc.0\x00', 0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/configs/c.1/uvc.0\x00') 58.637142402s ago: executing program 32 (id=38): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000540)='./config\x00', &(0x7f0000000580)='configfs\x00', 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) symlinkat(&(0x7f00000009c0)='./config/usb_gadget/g1/functions/uvc.0\x00', 0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/configs/c.1/uvc.0\x00') 42.634005805s ago: executing program 0 (id=112): lsetxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x15, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x10008, &(0x7f0000000280)={[{@nombcache}, {@nogrpid}]}, 0xff, 0x4a3, &(0x7f0000000440)="$eJzs3M9vFFUcAPDvbH/Qyo9WRBQEraCR+KOlBZWDBzSaeNDERA94rG1BZKGG1gRIo8UYPBoS78ajiX+BNy9GPRgTr5p4NCREe6F4qplfdGm3pVvarnQ/n2Q77+3M7Hvfmfd238x0JoCW1Zf+SSK2RcTvEdGTZ29foC+fzM5MjdycmRpJYm7u7b+TbLkbM1Mj5aLleluLzKFKROWzJI4ni8uduHjpzHC1Ona+yA9Mnv1wYOLipedOnx0+NXZq7NzQsWNHjwy++MLQ83cXYCWfpHHd2Pvx+L49r7979c2RE1ff++nbtFq79+fza+O4o5t1AqqjL91q/8xlFs57csWF3Ru216ST9iZWhIa0RUS6uzqy/t8TbTG/83ritU+bWjlgXaW/TVuWnj09B2xiSTS7BkBzlD/06fFv+dqgocf/wvWXIzqL9OzM1Mjsrfjby1MH2bHReumLiBPT/36VvqLR8xAAAKuQjW2erTf+q8TubJpf6+gqrqH0RsT9EbEzIh6IiF0R8WBEtuxDEfFwvvJczwrL71uQXzz+qVyrW+c1ko7/XqoZ+83WxF9MetuK3PYs/o7k5Onq2OGI2BERh6JjS5ofXKaM71/97Yul5tWO/9JXWn45FiwqcK19wQm60eHJ4bXaCNcvR+xtrxd/cutKQNoC9kTE3sY+ekeZOP30N/uWWujO8S9jDa4zzX0d8VS+/6djQfylZPnrkwNdUR07PFC2isV+/vXKW0uVf1fxr4HrBx7JE/P7f8ESNQ2tWh07P9F4GVf++HzJY5rVtv/O5J2sT/7yfv7eheHJyfODEZ3JG1m+PKbL3h+aX/fC8GR3mi+XT9v/oYP1+//OYp10/6dbKW3E+yPi0Yh4rKj74xFxICIOLhP/j6888cEy8SeRRPP2/+WI0brff7faf29Se71+FYm2Mz98t9QV85Xt/6MxnX3X5rLvvztYaQXvcvMBAADAPaESEdsiqfTn6b5tUan09+f/w78r7qtUxycmnzk5/tG50fwegd7oqJRnunpqzocOJtPFJ+b5oeJccTn/SHHe+Mu27izfPzJeHW1y7NDqtt7e/6Ps/6m/2ppdO2DduV8LWtfC/l9pUj2AjbeS33/HArA53d7/u9I/3c2qC7CxHP9D66rX/z9ZkDf+h81pcf//s84j64DNyPgfWpf+D61L/4eW1Mjt/HF8qVldEdHIYwHKmwVW/1SBrhXf4d8qifKJF+tZVndcOtNZvBOVItGxwZG2NdjYNkUi7TEbW+j8M1QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADuZf8FAAD//82f3ds=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./file1\x00', 0x80042, 0x121) mkdirat(0xffffffffffffff9c, &(0x7f0000000940)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000980)='./proc\x00', &(0x7f00000009c0)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write$cgroup_int(r1, &(0x7f0000000a40)=0x8, 0x12) getitimer(0x1, 0x0) pwrite64(r0, &(0x7f0000000a80)='\"', 0x1, 0xe7c) syz_io_uring_setup(0x39d4, 0x0, 0x0, 0x0, 0x0) 42.362124292s ago: executing program 3 (id=114): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x1, 0x267, &(0x7f0000000280)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpuset.effective_cpus\x00', 0x275a, 0x0) syz_mount_image$vfat(&(0x7f0000000580), &(0x7f00000005c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1802a53, 0x0, 0xfa, 0x0, &(0x7f0000000640)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000680)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000700)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x92001, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000800)='rdma.current\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000900)='cpuacct.usage_sys\x00', 0x275a, 0x0) 41.873272023s ago: executing program 0 (id=115): r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) write$binfmt_aout(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="03040000b500000001008aea0000feffe7d5"], 0xc8) r1 = socket(0x2a, 0x2, 0x9) connect(r1, &(0x7f00000000c0)=@qipcrtr={0x2a, 0x4, 0x3fff}, 0x80) bind$inet(r1, &(0x7f0000000240)={0x2a, 0x4e23, @empty=0x1000000}, 0x10) 41.656175998s ago: executing program 3 (id=116): ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f00000002c0)={0x22, 0x1, 0x2, "27425ba25f173b3ccec1d8665c00840000000000796caf19e30200", 0x34325241}) 41.512603011s ago: executing program 0 (id=117): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000200)={0xf, 0x2, 0x0, "9f76fe92f6d87e3a99080debac1874d47ee2318d4526f2148e84c532d56b46f0"}) socket$nl_netfilter(0x10, 0x3, 0xc) fsopen(&(0x7f0000000000)='ramfs\x00', 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000300)=@ccm_128={{}, "fbcca74f42b2b800", "491f304ba9972b4c42f80b2b3dec245a", "ebbaddc0", "919123b60bde99f2"}, 0x2) close(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b14, &(0x7f0000000340)={'wlan1\x00', @random="0100008d8dff"}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl802154(0x0, r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000003c0)={'wlan1\x00'}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='blkio.bfq.io_wait_time_recursive\x00', 0x26e1, 0x0) close(r4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)) ioctl$SIOCSIFHWADDR(r4, 0x8b14, &(0x7f0000000600)={'wlan1\x00', @random="0100"}) 41.463692823s ago: executing program 4 (id=118): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) ioctl$TIOCL_GETSHIFTSTATE(0xffffffffffffffff, 0x541c, 0x0) madvise(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x64) socket$l2tp6(0xa, 0x2, 0x73) mount(0x0, &(0x7f0000000440)='./sys\x00', &(0x7f0000000480)='sysfs\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000004c0)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000500)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000540)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000005c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000640), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000680), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./sys/bus/pci/rescan\x00', 0x1, 0x0) waitid$P_PIDFD(0x3, r3, &(0x7f0000000640), 0x4, 0x0) write(r3, &(0x7f0000000700)='1', 0x1) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x16, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="000000000000000005000000000000009500000000000000b1f8306e05d1e4aab009c16b5c05077115d0749619ca39f89974785ae0619b77c6585f678ac92a3b6b4148f56b43c3dd75d75f97c8f92f60a2def458df05e2fbfb3e849b2b3cffd4f29446ae60dd76654b2639b2bc14350706214a6ab7a712d4317fbc3ca01d0d3ed6110b3775903141a5091a4d3db8eb335414fbdb288aba73aaf6d18000a3a2a069cf7f9402e1425bb6bc370576aa1faea0fe222671ecf99038fce8dba53dcb11f87cca"], &(0x7f00000002c0)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000300)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000780)=ANY=[@ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="1100"/12, @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0xa) openat$zero(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000800)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB="1100"/12, @ANYRES64=0x0], 0xa) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f00000000c0)={0x3, 0x7ffffff, 0x1}) 41.410670324s ago: executing program 3 (id=119): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1, 0x200000005c832, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xa, 0x204031, 0xffffffffffffffff, 0xc9751000) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000380)=0x9, 0x8, 0x0) set_mempolicy_home_node(&(0x7f0000064000/0x400000)=nil, 0x400000, 0x0, 0x0) 41.296617716s ago: executing program 0 (id=120): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000001b00)='./sys\x00', &(0x7f0000001b40)='sysfs\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000001c0), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000200), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x6) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000001b80)='./sys/bus/netdevsim/new_device\x00', 0x1, 0x0) ioctl$NS_GET_OWNER_UID(r3, 0xb704, &(0x7f0000000400)=0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x1, &(0x7f0000000500)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r5, &(0x7f0000001c00)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2082) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f0000000200)='\x00', 0x8000, &(0x7f0000005e40)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, r4}, 0x2c, {'group_id', 0x3d, r6}, 0x2c, {[{@default_permissions}, {@blksize}, {@blksize}, {@blksize={'blksize', 0x3d, 0x600}}, {@max_read={'max_read', 0x3d, 0xf35}}, {@max_read={'max_read', 0x3d, 0x9}}, {@default_permissions}, {@allow_other}, {@blksize}], [{@seclabel}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@context={'context', 0x3d, 'user_u'}}]}}, 0x1, 0x0, &(0x7f0000005fc0)="986ab1d2e7c8a93461c9e26d844a4d1c63d249fb898e6c2fa7951805f5e3b9d4d2552cda9949c713cdd10f5c148343e2b1bf46a95cf1bae2d0ebe76877ce48a460732507831deece3135c1f06c56e028debbb4b8ba66ac5f1b828b3ff588d9a981a6fa459da7b78d99f2556f2cce2a1de3552117007ca615f18cf897ef0837bc7108bb73c6f9b10e71f7261986ff37bb99424839c94e8a9d418726b0fe63d9df741fe1e8d53bc6") mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={0x100000, 0x70}, 0x20) write(r3, &(0x7f0000001bc0)='10 -', 0x4) 41.217487438s ago: executing program 3 (id=121): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000000000000000002ff070300000000000300000d"], &(0x7f0000000f00)=""/4089, 0x4a, 0xff9, 0x1, 0x330}, 0x28) 39.915367309s ago: executing program 4 (id=122): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e) ptrace$cont(0x1f, r0, 0x0, 0x7) sendmmsg$unix(r2, &(0x7f0000000240), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000340), 0x10106, 0x2, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000340), 0x13f}}, 0x20) mount(0x0, &(0x7f0000000400)='./proc\x00', &(0x7f0000000440)='proc\x00', 0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r4, &(0x7f00000004c0)={0x1f, 0x80, @any, 0x0, 0x1}, 0x10) listen(r4, 0x5) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_ecred_conn_req={{0x17, 0x42, 0xa}, {0x80, 0x8200, 0x200, 0xa, [0x40]}}}}, 0x17) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) 39.814301071s ago: executing program 3 (id=123): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2804000, &(0x7f0000000640), 0x1, 0x5aa, &(0x7f0000000e40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d) mkdirat(0xffffffffffffff9c, &(0x7f0000000a80)='./sys\x00', 0x1ff) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x118) copy_file_range(r1, 0x0, r1, &(0x7f00000000c0)=0x10c6b, 0x863, 0x0) 39.756711423s ago: executing program 0 (id=124): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x1, 0x267, &(0x7f0000000280)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpuset.effective_cpus\x00', 0x275a, 0x0) syz_mount_image$vfat(&(0x7f0000000580), &(0x7f00000005c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1802a53, 0x0, 0xfa, 0x0, &(0x7f0000000640)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000680)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000700)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x92001, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000800)='rdma.current\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000900)='cpuacct.usage_sys\x00', 0x275a, 0x0) 38.873836984s ago: executing program 1 (id=125): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0xc004}, 0x0) 38.831346024s ago: executing program 0 (id=126): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000001040)={'syzkaller1\x00', 0x5001}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000001080)=0xc) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x6, &(0x7f0000001240)=0x400000001, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000010c0)={'syzkaller1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000001100)={@dev={0xfe, 0x80, '\x00', 0x2}, 0x40, r2}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000001140)={'syzkaller1\x00', 0x41}) write$tun(r0, &(0x7f0000001200)=ANY=[@ANYBLOB="0105300007002800060000006000000000308440fe8000000000"], 0x64) 38.692685997s ago: executing program 1 (id=127): r0 = syz_open_dev$vim2m(0x0, 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000002c0)={0x22, 0x1, 0x2, "27425ba25f173b3ccec1d8665c00840000000000796caf19e30200", 0x34325241}) 38.542229801s ago: executing program 1 (id=128): r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000016c0)={0x5, @vbi={0x3, 0x8, 0x7, 0x44495658, [0xfff, 0x3], [0x40003, 0x9], 0x1}}) 38.483343112s ago: executing program 3 (id=129): sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmmsg(r0, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./trace\x00', 0x1ff) mount(0x0, &(0x7f00000005c0)='./trace\x00', &(0x7f0000000600)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./trace/set_event\x00', 0x2, 0x0) write(r1, &(0x7f0000000680)='*:', 0x2) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r2, 0x0, 0xf, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000940), r4) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)={0x70, r5, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x5c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x13c4}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0xffffffff}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x64}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x20}]}]}, 0x70}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r4, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000011c0)={0x64, r5, 0x2, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_DEST={0x48, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@loopback}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x80000000}, @IPVS_DEST_ATTR_L_THRESH={0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xfffffe00}]}]}, 0x64}}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r6, &(0x7f0000000c40)='INVITE sip:test@127.0.0.1 SIP/2.0\r\nCall-ID: test12345\r\n\r\n', 0x39, 0x0, &(0x7f0000000c80)={0x2, 0x13c4, @loopback}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000cc0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000d00)='./proc\x00', &(0x7f0000000d40)='proc\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000d80)='./proc/net/ip_vs_conn\x00', 0x0, 0x0) read(r7, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000540)={@fallback, r3, 0x36, 0x202c}, 0x20) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000340)=[@in={0x2, 0x4e24, @broadcast}], 0x10) syz_mount_image$fuse(&(0x7f00000006c0), &(0x7f0000000700)='./trace/set_event\x00', 0x142021, &(0x7f0000000740)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x6}}, {@max_read={'max_read', 0x3d, 0x2}}, {@allow_other}], [{@subj_type}]}}, 0x1, 0x0, &(0x7f0000000840)="84ca95b7986019947395970ca67c17774efbdc3eb1f4a588b4066be1cbc670909bcc58afe4c5bba12f7b3100590524d1a51c5a137cb9e4af981f0728d3e7afc4866c988d0e32a9ecbf02fdda71cc67e64107f7d38b8f9bc776ed6cb1ac07bfb235") setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000380)=[@in6={0xa, 0x4e21, 0x8, @private0={0xfc, 0x0, '\x00', 0x3}, 0x7}], 0x1c) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) 38.392631804s ago: executing program 1 (id=130): mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x181) syz_mount_image$fuse(0x0, &(0x7f0000000540)='./bus\x00', 0x3820c50, 0x0, 0xff, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000580)='./bus\x00', &(0x7f00000005c0), 0x8, &(0x7f0000000600)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000006c0)='./bus\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0xfffffffb) capset(&(0x7f00000003c0)={0x20071026}, &(0x7f0000000400)={0x200002, 0x200003, 0x801, 0x4, 0x7}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='memory.events\x00', 0x275a, 0x0) 38.297208466s ago: executing program 4 (id=131): r0 = add_key$keyring(&(0x7f0000000680), &(0x7f00000006c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) clock_adjtime(0x0, &(0x7f0000000700)={0x3ff, 0x0, 0x9, 0x8, 0x5, 0x0, 0xfffffffffffffff8, 0x101, 0xfffffffffffffffe, 0x103, 0x0, 0x0, 0x9, 0x90, 0xfffffffffffffffe, 0x7a31, 0x4, 0x0, 0x3, 0x2, 0x0, 0x2, 0xfffffffffffffffe, 0x7, 0x1, 0x8000000000000005}) keyctl$set_timeout(0xf, r0, 0xe9a) 38.219147088s ago: executing program 1 (id=132): syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="040e04011a0c"], 0x7) 38.14328736s ago: executing program 4 (id=133): socket$inet6(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000000)={'ip6gre0\x00', 0x0}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0xb0}, 0x80) pipe2(0x0, 0x0) syz_ublk_add_dev(r5, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe, 0x0, 0x0, 0x10}}}, &(0x7f0000000300)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000000040)={0x0, 0xc1, 0x10, 0xfffffffd, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3, 0x42, 0x3, 0x91, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc81d, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626d, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 37.940688735s ago: executing program 4 (id=134): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000001c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000002c0), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000300), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x6) r3 = syz_open_dev$mtd(&(0x7f0000000900), 0x46, 0x1) socket$can_raw(0x1d, 0x3, 0x1) ioctl$MEMREADOOB64(r3, 0x1269, &(0x7f00000000c0)={0x1}) 30.966380768s ago: executing program 1 (id=135): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000500)='cpuset.effective_mems\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpuset.effective_cpus\x00', 0x275a, 0x0) syz_mount_image$vfat(&(0x7f0000000580), &(0x7f00000005c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1802a53, 0x0, 0xfa, 0x0, &(0x7f0000000640)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000680)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000700)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x92001, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000800)='rdma.current\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000900)='cpuacct.usage_sys\x00', 0x275a, 0x0) 24.340139112s ago: executing program 4 (id=136): r0 = syz_open_dev$vim2m(0x0, 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000002c0)={0x22, 0x1, 0x2, "27425ba25f173b3ccec1d8665c00840000000000796caf19e30200", 0x34325241}) 18.782311972s ago: executing program 33 (id=126): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000001040)={'syzkaller1\x00', 0x5001}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000001080)=0xc) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x6, &(0x7f0000001240)=0x400000001, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000010c0)={'syzkaller1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000001100)={@dev={0xfe, 0x80, '\x00', 0x2}, 0x40, r2}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000001140)={'syzkaller1\x00', 0x41}) write$tun(r0, &(0x7f0000001200)=ANY=[@ANYBLOB="0105300007002800060000006000000000308440fe8000000000"], 0x64) 12.85691979s ago: executing program 34 (id=129): sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmmsg(r0, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./trace\x00', 0x1ff) mount(0x0, &(0x7f00000005c0)='./trace\x00', &(0x7f0000000600)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./trace/set_event\x00', 0x2, 0x0) write(r1, &(0x7f0000000680)='*:', 0x2) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r2, 0x0, 0xf, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000940), r4) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)={0x70, r5, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x5c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x13c4}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0xffffffff}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x64}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x20}]}]}, 0x70}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r4, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000011c0)={0x64, r5, 0x2, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_DEST={0x48, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@loopback}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x80000000}, @IPVS_DEST_ATTR_L_THRESH={0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xfffffe00}]}]}, 0x64}}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r6, &(0x7f0000000c40)='INVITE sip:test@127.0.0.1 SIP/2.0\r\nCall-ID: test12345\r\n\r\n', 0x39, 0x0, &(0x7f0000000c80)={0x2, 0x13c4, @loopback}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000cc0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000d00)='./proc\x00', &(0x7f0000000d40)='proc\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000d80)='./proc/net/ip_vs_conn\x00', 0x0, 0x0) read(r7, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000540)={@fallback, r3, 0x36, 0x202c}, 0x20) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000340)=[@in={0x2, 0x4e24, @broadcast}], 0x10) syz_mount_image$fuse(&(0x7f00000006c0), &(0x7f0000000700)='./trace/set_event\x00', 0x142021, &(0x7f0000000740)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x6}}, {@max_read={'max_read', 0x3d, 0x2}}, {@allow_other}], [{@subj_type}]}}, 0x1, 0x0, &(0x7f0000000840)="84ca95b7986019947395970ca67c17774efbdc3eb1f4a588b4066be1cbc670909bcc58afe4c5bba12f7b3100590524d1a51c5a137cb9e4af981f0728d3e7afc4866c988d0e32a9ecbf02fdda71cc67e64107f7d38b8f9bc776ed6cb1ac07bfb235") setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000380)=[@in6={0xa, 0x4e21, 0x8, @private0={0xfc, 0x0, '\x00', 0x3}, 0x7}], 0x1c) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) 6.355032882s ago: executing program 35 (id=135): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000500)='cpuset.effective_mems\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpuset.effective_cpus\x00', 0x275a, 0x0) syz_mount_image$vfat(&(0x7f0000000580), &(0x7f00000005c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1802a53, 0x0, 0xfa, 0x0, &(0x7f0000000640)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000680)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000700)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x92001, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000800)='rdma.current\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000900)='cpuacct.usage_sys\x00', 0x275a, 0x0) 0s ago: executing program 36 (id=136): r0 = syz_open_dev$vim2m(0x0, 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000002c0)={0x22, 0x1, 0x2, "27425ba25f173b3ccec1d8665c00840000000000796caf19e30200", 0x34325241}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.6' (ED25519) to the list of known hosts. [ 74.241806][ T5766] cgroup: Unknown subsys name 'net' [ 74.380050][ T5766] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 75.723416][ T5766] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 77.255702][ T5780] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 77.264741][ T5780] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 77.274835][ T5785] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 77.283155][ T5785] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 77.291635][ T5785] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 77.304415][ T5791] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 77.348624][ T5790] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 77.359306][ T5788] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 77.367771][ T5790] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 77.375310][ T5788] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 77.382926][ T5790] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 77.387329][ T5792] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 77.393584][ T5790] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 77.398422][ T5788] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 77.404235][ T5791] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 77.411743][ T5788] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 77.419476][ T5790] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 77.436194][ T5092] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 77.464247][ T5788] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 77.472568][ T5092] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 77.482132][ T5092] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 77.489571][ T5788] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 77.497233][ T5788] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 77.505505][ T5092] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 77.916982][ T5777] chnl_net:caif_netlink_parms(): no params data found [ 77.951784][ T5781] chnl_net:caif_netlink_parms(): no params data found [ 78.026156][ T5782] chnl_net:caif_netlink_parms(): no params data found [ 78.040248][ T5786] chnl_net:caif_netlink_parms(): no params data found [ 78.160217][ T5777] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.167558][ T5777] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.178032][ T5777] bridge_slave_0: entered allmulticast mode [ 78.184979][ T5777] bridge_slave_0: entered promiscuous mode [ 78.193095][ T5781] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.200642][ T5781] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.208077][ T5781] bridge_slave_0: entered allmulticast mode [ 78.214994][ T5781] bridge_slave_0: entered promiscuous mode [ 78.233063][ T5777] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.240305][ T5777] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.247914][ T5777] bridge_slave_1: entered allmulticast mode [ 78.254790][ T5777] bridge_slave_1: entered promiscuous mode [ 78.261954][ T5781] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.271395][ T5781] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.279357][ T5781] bridge_slave_1: entered allmulticast mode [ 78.286884][ T5781] bridge_slave_1: entered promiscuous mode [ 78.376955][ T5782] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.384341][ T5782] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.391491][ T5782] bridge_slave_0: entered allmulticast mode [ 78.398710][ T5782] bridge_slave_0: entered promiscuous mode [ 78.407241][ T5786] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.414462][ T5786] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.421869][ T5786] bridge_slave_0: entered allmulticast mode [ 78.428923][ T5786] bridge_slave_0: entered promiscuous mode [ 78.436926][ T5786] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.444578][ T5786] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.451742][ T5786] bridge_slave_1: entered allmulticast mode [ 78.458672][ T5786] bridge_slave_1: entered promiscuous mode [ 78.467794][ T5777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.482425][ T5781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.492549][ T5782] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.500292][ T5782] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.508123][ T5782] bridge_slave_1: entered allmulticast mode [ 78.515230][ T5782] bridge_slave_1: entered promiscuous mode [ 78.533129][ T5777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.545027][ T5781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.598579][ T5786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.631796][ T5777] team0: Port device team_slave_0 added [ 78.641077][ T5782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.652383][ T5786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.667411][ T5781] team0: Port device team_slave_0 added [ 78.675887][ T5781] team0: Port device team_slave_1 added [ 78.690979][ T5777] team0: Port device team_slave_1 added [ 78.699847][ T5782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.769077][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.776351][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.802796][ T5781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.835372][ T5786] team0: Port device team_slave_0 added [ 78.845246][ T5782] team0: Port device team_slave_0 added [ 78.852360][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.859856][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.886256][ T5781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.898176][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.905815][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.932005][ T5777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.944149][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.951131][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.977404][ T5777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.991314][ T5786] team0: Port device team_slave_1 added [ 79.009886][ T5782] team0: Port device team_slave_1 added [ 79.082730][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.089757][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.116200][ T5782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.131833][ T5781] hsr_slave_0: entered promiscuous mode [ 79.138731][ T5781] hsr_slave_1: entered promiscuous mode [ 79.146588][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.154391][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.180405][ T5786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.192603][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.199688][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.226562][ T5786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.238833][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.246021][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.271988][ T5782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.332964][ T5777] hsr_slave_0: entered promiscuous mode [ 79.340424][ T5777] hsr_slave_1: entered promiscuous mode [ 79.347054][ T5777] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.355654][ T5777] Cannot create hsr debugfs directory [ 79.434572][ T5782] hsr_slave_0: entered promiscuous mode [ 79.440961][ T5782] hsr_slave_1: entered promiscuous mode [ 79.447572][ T5782] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.455310][ T5782] Cannot create hsr debugfs directory [ 79.464301][ T5784] Bluetooth: hci0: command tx timeout [ 79.470028][ T5784] Bluetooth: hci2: command tx timeout [ 79.538230][ T5786] hsr_slave_0: entered promiscuous mode [ 79.544104][ T5784] Bluetooth: hci3: command tx timeout [ 79.547996][ T5788] Bluetooth: hci1: command tx timeout [ 79.555725][ T5786] hsr_slave_1: entered promiscuous mode [ 79.561835][ T5786] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.570340][ T5786] Cannot create hsr debugfs directory [ 79.860973][ T5777] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 79.881552][ T5777] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 79.892233][ T5777] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 79.903920][ T5777] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 79.965986][ T5782] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 79.986779][ T5782] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 80.006474][ T5782] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 80.042074][ T5782] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 80.108638][ T5786] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 80.120474][ T5786] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 80.131381][ T5786] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 80.154732][ T5786] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 80.197538][ T5777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.262026][ T5777] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.272867][ T5781] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 80.298679][ T5781] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 80.309001][ T5781] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 80.321168][ T5781] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 80.339435][ T134] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.346916][ T134] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.380130][ T134] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.387295][ T134] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.431073][ T5782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.518103][ T5782] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.535815][ T3527] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.542921][ T3527] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.587655][ T3527] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.594853][ T3527] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.729183][ T5786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.778842][ T5781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.820456][ T5786] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.842295][ T5782] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 80.857665][ T5781] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.867715][ T3527] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.874849][ T3527] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.900289][ T2982] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.907477][ T2982] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.934335][ T5777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.947041][ T3559] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.954263][ T3559] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.997902][ T3559] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.005175][ T3559] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.138028][ T5777] veth0_vlan: entered promiscuous mode [ 81.193246][ T5777] veth1_vlan: entered promiscuous mode [ 81.207667][ T5781] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 81.328087][ T5782] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.358600][ T5777] veth0_macvtap: entered promiscuous mode [ 81.420312][ T5777] veth1_macvtap: entered promiscuous mode [ 81.501708][ T5782] veth0_vlan: entered promiscuous mode [ 81.526465][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.539300][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.550178][ T5788] Bluetooth: hci0: command tx timeout [ 81.557095][ T5788] Bluetooth: hci2: command tx timeout [ 81.562524][ T5782] veth1_vlan: entered promiscuous mode [ 81.589934][ T5781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.609899][ T5786] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.624566][ T5788] Bluetooth: hci1: command tx timeout [ 81.634948][ T5788] Bluetooth: hci3: command tx timeout [ 81.648185][ T5777] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.659227][ T5777] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.668918][ T5777] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.679557][ T5777] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.771902][ T5786] veth0_vlan: entered promiscuous mode [ 81.794136][ T5782] veth0_macvtap: entered promiscuous mode [ 81.807488][ T5781] veth0_vlan: entered promiscuous mode [ 81.826983][ T5781] veth1_vlan: entered promiscuous mode [ 81.840330][ T5782] veth1_macvtap: entered promiscuous mode [ 81.859355][ T5786] veth1_vlan: entered promiscuous mode [ 81.889618][ T2982] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.903082][ T2982] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.960007][ T3559] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.968441][ T3559] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.991589][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.005138][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.016864][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.028189][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.039490][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.051364][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.084115][ T5786] veth0_macvtap: entered promiscuous mode [ 82.107367][ T5781] veth0_macvtap: entered promiscuous mode [ 82.119682][ T5782] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.133674][ T5782] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.142461][ T5782] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.151452][ T5782] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.168523][ T5781] veth1_macvtap: entered promiscuous mode [ 82.177399][ T5786] veth1_macvtap: entered promiscuous mode [ 82.238567][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.251582][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.262154][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.272920][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.284962][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.298387][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.311016][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.324378][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.363998][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.378842][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.390869][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.418184][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.440565][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.460600][ T5844] Zero length message leads to an empty skb [ 82.476956][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.488798][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.506347][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.521681][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.561194][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.590044][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.602891][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.617300][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.629056][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.641564][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.655173][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.669695][ T5781] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.678843][ T5781] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.687650][ T5781] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.699736][ T5781] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.746579][ T5786] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.757224][ T5786] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.766359][ T5786] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.775504][ T5786] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.837516][ T2923] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.846235][ T2923] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.937545][ T3527] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.951698][ T3527] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.973987][ T3507] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.984548][ T3507] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.032673][ T134] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.042744][ T134] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.103531][ T2982] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.111372][ T2982] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.204252][ T3527] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.212133][ T3527] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.624862][ T5788] Bluetooth: hci2: command tx timeout [ 84.297254][ T5869] netlink: 'syz.2.8': attribute type 10 has an invalid length. [ 84.307869][ T5788] Bluetooth: hci3: command tx timeout [ 84.313814][ T5788] Bluetooth: hci1: command tx timeout [ 84.371100][ T5869] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 84.654257][ T5870] FAULT_INJECTION: forcing a failure. [ 84.654257][ T5870] name failslab, interval 1, probability 0, space 0, times 1 [ 84.751754][ T5870] CPU: 1 PID: 5870 Comm: syz.1.10 Not tainted syzkaller #0 [ 84.759028][ T5870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 84.769142][ T5870] Call Trace: [ 84.772450][ T5870] [ 84.775402][ T5870] dump_stack_lvl+0x18c/0x250 [ 84.780132][ T5870] ? show_regs_print_info+0x20/0x20 [ 84.785358][ T5870] ? load_image+0x420/0x420 [ 84.789901][ T5870] ? __might_sleep+0xe0/0xe0 [ 84.794527][ T5870] ? __lock_acquire+0x7eb0/0x7eb0 [ 84.799609][ T5870] should_fail_ex+0x394/0x4c0 [ 84.804339][ T5870] should_failslab+0x9/0x20 [ 84.808891][ T5870] slab_pre_alloc_hook+0x59/0x300 [ 84.813953][ T5870] ? nci_allocate_device+0xe8/0x350 [ 84.819204][ T5870] __kmem_cache_alloc_node+0x53/0x250 [ 84.824630][ T5870] ? nci_allocate_device+0xe8/0x350 [ 84.829875][ T5870] kmalloc_trace+0x2a/0xe0 [ 84.834324][ T5870] ? virtual_nci_close+0xe0/0xe0 [ 84.839317][ T5870] nci_allocate_device+0xe8/0x350 [ 84.844392][ T5870] virtual_ncidev_open+0x75/0x1a0 [ 84.849454][ T5870] ? virtual_ncidev_ioctl+0xd0/0xd0 [ 84.854698][ T5870] misc_open+0x326/0x3a0 [ 84.858986][ T5870] chrdev_open+0x58c/0x600 [ 84.863447][ T5870] ? cd_forget+0x160/0x160 [ 84.867907][ T5870] ? fsnotify_perm+0x3ed/0x5e0 [ 84.872715][ T5870] do_dentry_open+0x880/0x14b0 [ 84.877522][ T5870] ? cd_forget+0x160/0x160 [ 84.882082][ T5870] path_openat+0x284f/0x3270 [ 84.886747][ T5870] ? do_sys_openat2+0xda/0x1d0 [ 84.891560][ T5870] ? __x64_sys_openat+0x139/0x160 [ 84.896676][ T5870] ? verify_lock_unused+0x140/0x140 [ 84.901920][ T5870] ? do_filp_open+0x430/0x430 [ 84.906656][ T5870] do_filp_open+0x1f2/0x430 [ 84.911208][ T5870] ? vfs_tmpfile+0x620/0x620 [ 84.912194][ T5855] mmap: syz.0.1 (5855) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 84.915833][ T5870] ? _raw_spin_unlock+0x28/0x40 [ 84.915890][ T5870] ? alloc_fd+0x590/0x640 [ 84.915921][ T5870] do_sys_openat2+0x134/0x1d0 [ 84.915947][ T5870] ? do_sys_open+0xe0/0xe0 [ 84.915972][ T5870] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 84.915997][ T5870] ? lock_chain_count+0x20/0x20 [ 84.916022][ T5870] __x64_sys_openat+0x139/0x160 [ 84.943590][ T5875] FAULT_INJECTION: forcing a failure. [ 84.943590][ T5875] name failslab, interval 1, probability 0, space 0, times 1 [ 84.945923][ T5870] do_syscall_64+0x55/0xb0 [ 84.978879][ T5870] ? clear_bhb_loop+0x40/0x90 [ 84.983598][ T5870] ? clear_bhb_loop+0x40/0x90 [ 84.988311][ T5870] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 84.994238][ T5870] RIP: 0033:0x7f962599e1d9 [ 84.998689][ T5870] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 85.018325][ T5870] RSP: 002b:00007f96268dd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 85.026870][ T5870] RAX: ffffffffffffffda RBX: 00007f9625c25fa0 RCX: 00007f962599e1d9 [ 85.034868][ T5870] RDX: 0000000000000002 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 85.042871][ T5870] RBP: 00007f9625a35888 R08: 0000000000000000 R09: 0000000000000000 [ 85.050881][ T5870] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 85.058892][ T5870] R13: 00007f9625c26038 R14: 00007f9625c25fa0 R15: 00007ffdfd4947b8 [ 85.066918][ T5870] [ 85.080724][ T5784] Bluetooth: hci0: command tx timeout [ 85.083977][ T5875] CPU: 1 PID: 5875 Comm: syz.2.12 Not tainted syzkaller #0 [ 85.093374][ T5875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 85.103461][ T5875] Call Trace: [ 85.106780][ T5875] [ 85.109756][ T5875] dump_stack_lvl+0x18c/0x250 [ 85.114476][ T5875] ? show_regs_print_info+0x20/0x20 [ 85.119725][ T5875] ? load_image+0x420/0x420 [ 85.124293][ T5875] ? __lock_acquire+0x7eb0/0x7eb0 [ 85.129364][ T5875] should_fail_ex+0x394/0x4c0 [ 85.134086][ T5875] should_failslab+0x9/0x20 [ 85.138643][ T5875] slab_pre_alloc_hook+0x59/0x300 [ 85.143687][ T5875] ? __vb2_queue_alloc+0x142/0x1410 [ 85.148930][ T5875] ? __vb2_queue_alloc+0x142/0x1410 [ 85.154173][ T5875] __kmem_cache_alloc_node+0x53/0x250 [ 85.159597][ T5875] ? __vb2_queue_alloc+0x142/0x1410 [ 85.164845][ T5875] __kmalloc+0xa7/0x240 [ 85.169059][ T5875] __vb2_queue_alloc+0x142/0x1410 [ 85.174160][ T5875] vb2_core_create_bufs+0x57d/0xa80 [ 85.179419][ T5875] ? __vb2_queue_alloc+0x1410/0x1410 [ 85.184789][ T5875] vb2_create_bufs+0x803/0xe70 [ 85.189605][ T5875] ? vb2_queue_or_prepare_buf+0xe80/0xe80 [ 85.195353][ T5875] ? __mutex_lock+0x30d/0xc80 [ 85.200043][ T5875] ? v4l2_ioctl+0x18a/0x1e0 [ 85.204643][ T5875] ? __se_sys_ioctl+0xfd/0x170 [ 85.209412][ T5875] ? do_syscall_64+0x55/0xb0 [ 85.214003][ T5875] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 85.220082][ T5875] ? vb2_verify_memory_type+0x1fc/0x570 [ 85.225652][ T5875] vb2_ioctl_create_bufs+0x4ce/0x7f0 [ 85.230961][ T5875] v4l_create_bufs+0xb6/0x180 [ 85.235659][ T5875] __video_do_ioctl+0xa34/0xde0 [ 85.240532][ T5875] ? video_ioctl2+0x30/0x30 [ 85.245038][ T5875] ? __virt_addr_valid+0x10c/0x380 [ 85.250166][ T5875] ? __might_fault+0xc6/0x120 [ 85.254853][ T5875] ? __might_fault+0xaa/0x120 [ 85.259542][ T5875] video_usercopy+0x889/0x1360 [ 85.264347][ T5875] ? video_ioctl2+0x30/0x30 [ 85.268879][ T5875] ? v4l_printk_ioctl+0x160/0x160 [ 85.273935][ T5875] v4l2_ioctl+0x18a/0x1e0 [ 85.278273][ T5875] ? v4l2_poll+0x2b0/0x2b0 [ 85.282702][ T5875] __se_sys_ioctl+0xfd/0x170 [ 85.287307][ T5875] do_syscall_64+0x55/0xb0 [ 85.291728][ T5875] ? clear_bhb_loop+0x40/0x90 [ 85.296445][ T5875] ? clear_bhb_loop+0x40/0x90 [ 85.301129][ T5875] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 85.307049][ T5875] RIP: 0033:0x7fe3cdf9e1d9 [ 85.311471][ T5875] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 85.331175][ T5875] RSP: 002b:00007fe3cedce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 85.339605][ T5875] RAX: ffffffffffffffda RBX: 00007fe3ce225fa0 RCX: 00007fe3cdf9e1d9 [ 85.347592][ T5875] RDX: 0000200000000e80 RSI: 00000000c100565c RDI: 0000000000000004 [ 85.355575][ T5875] RBP: 00007fe3ce035888 R08: 0000000000000000 R09: 0000000000000000 [ 85.363591][ T5875] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 85.371587][ T5875] R13: 00007fe3ce226038 R14: 00007fe3ce225fa0 R15: 00007ffc685d29c8 [ 85.379600][ T5875] [ 85.508654][ T5878] syz.3.13[5878]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 85.531135][ T5878] loop3: detected capacity change from 0 to 512 [ 85.562632][ T5878] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 85.681220][ T5883] loop0: detected capacity change from 0 to 512 [ 85.690542][ T5883] EXT4-fs: Ignoring removed mblk_io_submit option [ 85.756345][ T5878] EXT4-fs (loop3): 1 orphan inode deleted [ 85.768285][ T5883] EXT4-fs (loop0): orphan cleanup on readonly fs [ 85.776994][ T5878] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.789203][ T3527] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 85.790829][ T5883] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 85.812176][ T5878] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.852269][ T5883] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #13: comm syz.0.15: attempt to clear invalid blocks 2 len 1 [ 85.880905][ T3527] EXT4-fs error (device loop3): ext4_release_dquot:6989: comm kworker/u4:13: Failed to release dquot type 1 [ 85.953414][ T5883] EXT4-fs (loop0): Remounting filesystem read-only [ 85.988139][ T5883] EXT4-fs (loop0): 1 truncate cleaned up [ 86.009945][ T5883] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 86.029349][ T5878] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000. [ 86.130290][ T5892] Invalid ELF header magic: != ELF [ 86.413696][ T5784] Bluetooth: hci1: command tx timeout [ 86.419366][ T5784] Bluetooth: hci3: command tx timeout [ 86.429785][ T5788] Bluetooth: hci2: command tx timeout [ 86.769263][ T5786] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.782555][ T5782] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.116262][ T5899] binder: 5895:5899 ioctl c0306201 200000000380 returned -14 [ 87.876226][ T5906] loop2: detected capacity change from 0 to 1024 [ 87.915564][ T5906] EXT4-fs: Ignoring removed bh option [ 87.947595][ T5906] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 88.136665][ T5906] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.299411][ T5919] synth uevent: /bus/platform/drivers/usb-conn-gpio: unknown uevent action string [ 88.925593][ T5906] EXT4-fs error (device loop2): ext4_find_dest_de:2117: inode #12: block 7: comm syz.2.23: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 88.956931][ T5906] EXT4-fs (loop2): Remounting filesystem read-only [ 89.259141][ T5931] FAULT_INJECTION: forcing a failure. [ 89.259141][ T5931] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 89.280192][ T5931] CPU: 0 PID: 5931 Comm: syz.3.31 Not tainted syzkaller #0 [ 89.286328][ T5933] loop0: detected capacity change from 0 to 128 [ 89.287437][ T5931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 89.298455][ T5933] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 89.303740][ T5931] Call Trace: [ 89.303754][ T5931] [ 89.303762][ T5931] dump_stack_lvl+0x18c/0x250 [ 89.303790][ T5931] ? show_regs_print_info+0x20/0x20 [ 89.303807][ T5931] ? load_image+0x420/0x420 [ 89.303833][ T5931] ? __might_fault+0xaa/0x120 [ 89.338431][ T5931] ? __lock_acquire+0x7eb0/0x7eb0 [ 89.343482][ T5931] should_fail_ex+0x394/0x4c0 [ 89.348178][ T5931] _copy_from_user+0x2f/0xe0 [ 89.352777][ T5931] __sys_bpf+0x23e/0x890 [ 89.357025][ T5931] ? bpf_link_show_fdinfo+0x560/0x560 [ 89.362416][ T5931] ? lock_chain_count+0x20/0x20 [ 89.367316][ T5931] __x64_sys_bpf+0x7c/0x90 [ 89.371758][ T5931] do_syscall_64+0x55/0xb0 [ 89.376178][ T5931] ? clear_bhb_loop+0x40/0x90 [ 89.380862][ T5931] ? clear_bhb_loop+0x40/0x90 [ 89.385541][ T5931] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 89.391447][ T5931] RIP: 0033:0x7f438599e1d9 [ 89.395865][ T5931] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 89.415563][ T5931] RSP: 002b:00007f4386936028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 89.423983][ T5931] RAX: ffffffffffffffda RBX: 00007f4385c25fa0 RCX: 00007f438599e1d9 [ 89.431965][ T5931] RDX: 0000000000000004 RSI: 00002000000002c0 RDI: 0000000000000013 [ 89.439967][ T5931] RBP: 00007f4385a35888 R08: 0000000000000000 R09: 0000000000000000 [ 89.447943][ T5931] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 89.455916][ T5931] R13: 00007f4385c26038 R14: 00007f4385c25fa0 R15: 00007ffc89f9ca18 [ 89.463910][ T5931] [ 89.837503][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.984001][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.136850][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.268496][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.462413][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.764917][ T5782] FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF [ 90.790424][ T5782] FAT-fs (loop0): Filesystem has been set read-only [ 90.856726][ T5788] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 90.867009][ T5788] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 90.867449][ T5782] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 90.895877][ T5788] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 90.905167][ T5788] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 90.922518][ T5788] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 90.930427][ T5788] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 91.160189][ T5969] Bluetooth: MGMT ver 1.22 [ 91.438009][ T5980] tipc: Started in network mode [ 91.447698][ T5980] tipc: Node identity 2000004, cluster identity 4711 [ 91.468215][ T5980] tipc: Node number set to 33554436 [ 91.509101][ T5981] syzkaller0: entered promiscuous mode [ 91.528085][ T5981] syzkaller0: entered allmulticast mode [ 92.163030][ T6003] loop1: detected capacity change from 0 to 256 [ 92.295440][ T173] cfg80211: failed to load regulatory.db [ 92.592339][ T5788] Bluetooth: hci3: unexpected event 0x04 length: 11 > 10 [ 93.381378][ T6008] sched: RT throttling activated [ 93.412453][ T5780] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:200' [ 93.766117][ T6018] netlink: 'syz.0.57': attribute type 1 has an invalid length. [ 93.816004][ T5788] Bluetooth: hci0: command tx timeout [ 93.842540][ T5780] CPU: 1 PID: 5780 Comm: kworker/u5:2 Not tainted syzkaller #0 [ 93.850244][ T5780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 93.860322][ T5780] Workqueue: hci3 hci_rx_work [ 93.865042][ T5780] Call Trace: [ 93.868343][ T5780] [ 93.871291][ T5780] dump_stack_lvl+0x18c/0x250 [ 93.875997][ T5780] ? show_regs_print_info+0x20/0x20 [ 93.881224][ T5780] ? load_image+0x420/0x420 [ 93.885774][ T5780] sysfs_create_dir_ns+0x26e/0x2a0 [ 93.890924][ T5780] ? __lock_acquire+0x7eb0/0x7eb0 [ 93.895980][ T5780] ? sysfs_warn_dup+0xa0/0xa0 [ 93.900686][ T5780] ? do_raw_spin_unlock+0x121/0x230 [ 93.905936][ T5780] kobject_add_internal+0x617/0xc90 [ 93.911350][ T5780] kobject_add+0x164/0x240 [ 93.915805][ T5780] ? kobject_init+0x1d0/0x1d0 [ 93.920513][ T5780] ? get_device_parent+0x366/0x390 [ 93.925660][ T5780] device_add+0x3fa/0xc40 [ 93.930030][ T5780] hci_conn_add_sysfs+0xd5/0x1e0 [ 93.935000][ T5780] hci_conn_complete_evt+0x7b2/0x13c0 [ 93.940426][ T5780] ? hci_inquiry_result_evt+0x520/0x520 [ 93.945994][ T5780] ? __skb_clone+0x446/0x6c0 [ 93.950622][ T5780] ? skb_pull_data+0xf0/0x1f0 [ 93.955330][ T5780] ? hci_inquiry_result_evt+0x520/0x520 [ 93.960898][ T5780] hci_event_packet+0x807/0x1280 [ 93.965865][ T5780] ? __lock_acquire+0x7eb0/0x7eb0 [ 93.970911][ T5780] ? lock_chain_count+0x20/0x20 [ 93.975787][ T5780] ? bis_list+0x290/0x290 [ 93.980143][ T5780] ? kcov_remote_start+0x513/0x810 [ 93.985276][ T5780] ? lockdep_hardirqs_on+0x98/0x150 [ 93.990509][ T5780] ? hci_send_to_monitor+0xd7/0x4f0 [ 93.995737][ T5780] hci_rx_work+0x43a/0xd60 [ 94.000201][ T5780] ? process_scheduled_works+0x975/0x1600 [ 94.005968][ T5780] process_scheduled_works+0xa60/0x1600 [ 94.011584][ T5780] ? worker_attach_to_pool+0x370/0x370 [ 94.017083][ T5780] ? assign_work+0x3cc/0x5d0 [ 94.021709][ T5780] worker_thread+0xa5e/0xfe0 [ 94.026339][ T5780] ? _raw_spin_unlock+0x40/0x40 [ 94.031219][ T5780] ? __kthread_parkme+0x71/0x1c0 [ 94.036190][ T5780] kthread+0x2fa/0x390 [ 94.040286][ T5780] ? pr_cont_work+0x550/0x550 [ 94.044995][ T5780] ? kthread_blkcg+0xd0/0xd0 [ 94.049614][ T5780] ret_from_fork+0x48/0x80 [ 94.054091][ T5780] ? kthread_blkcg+0xd0/0xd0 [ 94.058718][ T5780] ret_from_fork_asm+0x11/0x20 [ 94.063535][ T5780] [ 94.278094][ T5780] kobject: kobject_add_internal failed for hci3:200 with -EEXIST, don't try to register things with the same name in the same directory. [ 94.296820][ T5780] Bluetooth: hci3: failed to register connection device [ 94.447559][ T5961] chnl_net:caif_netlink_parms(): no params data found [ 94.734278][ T12] hsr_slave_0: left promiscuous mode [ 94.759443][ T5780] Bluetooth: hci3: command tx timeout [ 94.775598][ T6030] loop1: detected capacity change from 0 to 256 [ 94.793301][ T12] hsr_slave_1: left promiscuous mode [ 94.818583][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 94.880142][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 94.939971][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 94.967336][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 94.982132][ T12] bridge_slave_1: left allmulticast mode [ 94.992551][ T12] bridge_slave_1: left promiscuous mode [ 95.002111][ T6039] loop3: detected capacity change from 0 to 256 [ 95.010374][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.101611][ T12] bridge_slave_0: left allmulticast mode [ 95.149202][ T12] bridge_slave_0: left promiscuous mode [ 95.167365][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.275830][ T12] veth1_macvtap: left promiscuous mode [ 95.303596][ T12] veth0_macvtap: left promiscuous mode [ 95.309369][ T12] veth1_vlan: left promiscuous mode [ 95.335275][ T12] veth0_vlan: left promiscuous mode [ 96.013818][ T12] team0 (unregistering): Port device team_slave_1 removed [ 96.039607][ T5780] Bluetooth: hci0: command tx timeout [ 96.054190][ T12] team0 (unregistering): Port device team_slave_0 removed [ 96.090966][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 96.127108][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 96.359004][ T12] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 96.408526][ T12] bond0 (unregistering): Released all slaves [ 96.480937][ T134] wlan1: IBSS 50:50:50:50:50:50 switches to unsupported channel (2484 MHz, width:0, CF1/2: 2484/0 MHz), disconnecting [ 96.566458][ T134] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.601144][ T134] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.601557][ T5961] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.659533][ T5961] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.691676][ T5961] bridge_slave_0: entered allmulticast mode [ 96.699895][ T5961] bridge_slave_0: entered promiscuous mode [ 96.737162][ T6065] loop1: detected capacity change from 0 to 256 [ 96.757946][ T5961] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.804379][ T5961] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.820412][ T5961] bridge_slave_1: entered allmulticast mode [ 96.832418][ T5961] bridge_slave_1: entered promiscuous mode [ 96.924158][ T5961] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.985525][ T5780] Bluetooth: hci3: command tx timeout [ 97.011307][ T5961] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.096654][ T5961] team0: Port device team_slave_0 added [ 97.135991][ T5961] team0: Port device team_slave_1 added [ 97.151924][ T6073] loop3: detected capacity change from 0 to 256 [ 97.239398][ T5961] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.252073][ T6075] loop1: detected capacity change from 0 to 256 [ 97.271406][ T5961] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.388953][ T6080] 0x000000000000-0x000000020000 : "" [ 97.418478][ T5961] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.470629][ T5961] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.477995][ T5961] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.506766][ T6080] ftl_cs: FTL header not found. [ 97.592926][ T5961] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.700242][ T6087] loop1: detected capacity change from 0 to 512 [ 97.806213][ T6087] EXT4-fs: Ignoring removed orlov option [ 97.860310][ T5961] hsr_slave_0: entered promiscuous mode [ 97.892610][ T6087] EXT4-fs (loop1): Test dummy encryption mode enabled [ 97.906018][ T5961] hsr_slave_1: entered promiscuous mode [ 97.910202][ T6087] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 97.922769][ T5961] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 97.930361][ T5961] Cannot create hsr debugfs directory [ 97.974865][ T6087] EXT4-fs (loop1): 1 truncate cleaned up [ 97.981937][ T6087] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.273677][ T5780] Bluetooth: hci0: command tx timeout [ 98.483383][ T6087] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 98.610068][ T5781] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.823658][ T6113] netlink: 'syz.1.79': attribute type 10 has an invalid length. [ 98.856908][ T6113] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 98.961011][ T5961] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 98.998680][ T6117] loop1: detected capacity change from 0 to 256 [ 99.006130][ T5961] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 99.037859][ T5961] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 99.068392][ T5961] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 99.205834][ T5780] Bluetooth: hci3: command tx timeout [ 99.297012][ T6129] loop3: detected capacity change from 0 to 256 [ 99.306904][ T6127] binder: 6125:6127 ioctl 4018620d 0 returned -22 [ 99.384651][ T5961] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.465868][ T5961] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.479708][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.486956][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.555351][ T3559] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.562595][ T3559] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.663909][ T789] usb 2-1: new low-speed USB device number 2 using dummy_hcd [ 99.916650][ T789] usb 2-1: unable to get BOS descriptor or descriptor too short [ 99.949396][ T6144] 0x000000000000-0x000000020000 : "" [ 99.976931][ T6144] ftl_cs: FTL header not found. [ 100.220797][ T789] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 100.451814][ T789] usb 2-1: can't read configurations, error -71 [ 100.487211][ T5780] Bluetooth: hci0: command tx timeout [ 100.579084][ T6141] loop0: detected capacity change from 0 to 4096 [ 100.626875][ T6141] EXT4-fs: inline encryption not supported [ 100.725993][ T6141] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 100.743709][ T6141] EXT4-fs (loop0): Test dummy encryption mode enabled [ 100.901007][ T6141] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec0a8, mo2=0002] [ 100.953562][ T6141] System zones: 0-5 [ 100.969172][ T6141] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.003753][ T5961] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.019466][ T6157] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 101.750136][ T6157] FAULT_INJECTION: forcing a failure. [ 101.750136][ T6157] name failslab, interval 1, probability 0, space 0, times 0 [ 101.763676][ T6157] CPU: 1 PID: 6157 Comm: syz.1.89 Not tainted syzkaller #0 [ 101.770921][ T6157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 101.781000][ T6157] Call Trace: [ 101.784313][ T6157] [ 101.787282][ T6157] dump_stack_lvl+0x18c/0x250 [ 101.792008][ T6157] ? show_regs_print_info+0x20/0x20 [ 101.797247][ T6157] ? load_image+0x420/0x420 [ 101.801792][ T6157] ? __might_sleep+0xe0/0xe0 [ 101.806425][ T6157] ? __lock_acquire+0x7eb0/0x7eb0 [ 101.811620][ T6157] ? mark_lock+0x94/0x320 [ 101.816386][ T6157] should_fail_ex+0x394/0x4c0 [ 101.821126][ T6157] should_failslab+0x9/0x20 [ 101.825681][ T6157] slab_pre_alloc_hook+0x59/0x300 [ 101.830758][ T6157] ? __local_bh_enable_ip+0x13a/0x1c0 [ 101.836179][ T6157] ? pneigh_lookup+0x227/0x4f0 [ 101.840983][ T6157] ? pneigh_lookup+0x227/0x4f0 [ 101.845793][ T6157] __kmem_cache_alloc_node+0x53/0x250 [ 101.851212][ T6157] ? __local_bh_enable_ip+0x13a/0x1c0 [ 101.856631][ T6157] ? pneigh_lookup+0x227/0x4f0 [ 101.861432][ T6157] __kmalloc+0xa7/0x240 [ 101.865646][ T6157] pneigh_lookup+0x227/0x4f0 [ 101.870308][ T6157] arp_req_set+0x3ab/0x760 [ 101.874776][ T6157] ? arp_req_delete+0x330/0x330 [ 101.879670][ T6157] ? mutex_lock_nested+0x20/0x20 [ 101.884624][ T6157] ? apparmor_capable+0x137/0x1a0 [ 101.889677][ T6157] ? __might_fault+0xaa/0x120 [ 101.894413][ T6157] ? full_name_hash+0x92/0xe0 [ 101.899207][ T6157] arp_ioctl+0x3fc/0x540 [ 101.903650][ T6157] ? neigh_release+0x80/0x80 [ 101.908274][ T6157] ? do_vfs_ioctl+0x156c/0x1cc0 [ 101.913164][ T6157] inet_ioctl+0x3c5/0x560 [ 101.917517][ T6157] ? tomoyo_path_number_perm+0x217/0x5e0 [ 101.923177][ T6157] ? inet_shutdown+0x370/0x370 [ 101.928145][ T6157] ? slab_free_freelist_hook+0x130/0x1a0 [ 101.933802][ T6157] ? tomoyo_path_number_perm+0x4b7/0x5e0 [ 101.939492][ T6157] ? __kmem_cache_free+0xba/0x1f0 [ 101.944544][ T6157] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 101.950021][ T6157] sock_do_ioctl+0xfc/0x310 [ 101.954538][ T6157] ? sock_show_fdinfo+0xb0/0xb0 [ 101.959412][ T6157] sock_ioctl+0x5be/0x7e0 [ 101.963755][ T6157] ? sock_poll+0x3e0/0x3e0 [ 101.968197][ T6157] ? bpf_lsm_file_ioctl+0x9/0x10 [ 101.973145][ T6157] ? security_file_ioctl+0x80/0xa0 [ 101.978267][ T6157] ? sock_poll+0x3e0/0x3e0 [ 101.982686][ T6157] __se_sys_ioctl+0xfd/0x170 [ 101.987306][ T6157] do_syscall_64+0x55/0xb0 [ 101.991904][ T6157] ? clear_bhb_loop+0x40/0x90 [ 101.996583][ T6157] ? clear_bhb_loop+0x40/0x90 [ 102.001262][ T6157] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 102.007258][ T6157] RIP: 0033:0x7f962599e1d9 [ 102.011705][ T6157] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.031354][ T6157] RSP: 002b:00007f96268dd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 102.039778][ T6157] RAX: ffffffffffffffda RBX: 00007f9625c25fa0 RCX: 00007f962599e1d9 [ 102.047755][ T6157] RDX: 0000200000000240 RSI: 0000000000008955 RDI: 0000000000000006 [ 102.055738][ T6157] RBP: 00007f9625a35888 R08: 0000000000000000 R09: 0000000000000000 [ 102.064061][ T6157] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 102.072037][ T6157] R13: 00007f9625c26038 R14: 00007f9625c25fa0 R15: 00007ffdfd4947b8 [ 102.080052][ T6157] [ 102.236125][ T6164] netlink: 8 bytes leftover after parsing attributes in process `syz.0.87'. [ 102.673855][ T6181] netlink: 17 bytes leftover after parsing attributes in process `syz.3.93'. [ 102.704927][ T6184] loop1: detected capacity change from 0 to 256 [ 102.729796][ T5782] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.863980][ T5961] veth0_vlan: entered promiscuous mode [ 102.933674][ T5961] veth1_vlan: entered promiscuous mode [ 102.993329][ T6190] loop0: detected capacity change from 0 to 512 [ 103.047151][ T5961] veth0_macvtap: entered promiscuous mode [ 103.108091][ T5961] veth1_macvtap: entered promiscuous mode [ 103.116246][ T6190] EXT4-fs (loop0): 1 orphan inode deleted [ 103.158160][ T5961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.160743][ T6190] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.185358][ T6192] loop1: detected capacity change from 0 to 512 [ 103.190972][ T5961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.201874][ T5961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.213420][ T3559] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 103.229640][ T5961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.243713][ T3559] EXT4-fs error (device loop0): ext4_release_dquot:6989: comm kworker/u4:14: Failed to release dquot type 1 [ 103.270215][ T6190] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.281066][ T5961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.325732][ T6192] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.339362][ T5961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.362607][ T6192] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.385414][ T5961] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.417486][ T5782] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.438780][ T5961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.442384][ T6192] capability: warning: `syz.1.97' uses 32-bit capabilities (legacy support in use) [ 103.454421][ T5961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.471634][ T5961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.482737][ T5961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.513663][ T5961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.528010][ T5961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.574001][ T5961] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.584811][ T5781] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.617547][ T5961] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.632194][ T5961] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.642034][ T5961] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.652705][ T5961] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.710387][ T6212] netlink: 24 bytes leftover after parsing attributes in process `syz.1.102'. [ 103.855089][ T134] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.872167][ T134] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.943927][ T6218] loop3: detected capacity change from 0 to 256 [ 103.953142][ T3527] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.970851][ T3527] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.224108][ T6220] synth uevent: /bus/platform/drivers/usb-conn-gpio: unknown uevent action string [ 104.957604][ T6225] loop0: detected capacity change from 0 to 512 [ 104.970403][ T6225] EXT4-fs: Ignoring removed orlov option [ 104.994826][ T6225] EXT4-fs (loop0): Test dummy encryption mode enabled [ 105.011572][ T6225] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 105.101213][ T6225] EXT4-fs (loop0): 1 truncate cleaned up [ 105.140953][ T6225] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.336787][ T5782] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.162661][ T6246] sctp: Trying to GSO but underlying device doesn't support it. [ 106.166074][ T6246] netlink: 'syz.0.110': attribute type 17 has an invalid length. [ 106.247379][ T6249] loop3: detected capacity change from 0 to 128 [ 106.273568][ T6249] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 106.367876][ T6252] loop0: detected capacity change from 0 to 512 [ 106.390725][ T6252] EXT4-fs error (device loop0): ext4_iget_extra_inode:4752: inode #15: comm syz.0.112: corrupted in-inode xattr: invalid ea_ino [ 106.427928][ T6252] EXT4-fs error (device loop0): ext4_orphan_get:1413: comm syz.0.112: couldn't read orphan inode 15 (err -117) [ 106.503033][ T6252] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.556942][ T6258] 0x000000000000-0x000000020000 : "" [ 106.591896][ T6258] ftl_cs: FTL header not found. [ 106.650630][ T6261] loop3: detected capacity change from 0 to 256 [ 106.667947][ T6252] FAULT_INJECTION: forcing a failure. [ 106.667947][ T6252] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 106.681932][ T6252] CPU: 0 PID: 6252 Comm: syz.0.112 Not tainted syzkaller #0 [ 106.689287][ T6252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 106.699384][ T6252] Call Trace: [ 106.702735][ T6252] [ 106.705684][ T6252] dump_stack_lvl+0x18c/0x250 [ 106.710378][ T6252] ? show_regs_print_info+0x20/0x20 [ 106.715591][ T6252] ? load_image+0x420/0x420 [ 106.720120][ T6252] ? ext4_es_is_delayed+0x40/0x40 [ 106.725256][ T6252] ? folio_put+0xd0/0xd0 [ 106.729627][ T6252] should_fail_ex+0x394/0x4c0 [ 106.734343][ T6252] copy_page_from_iter_atomic+0x29e/0x13d0 [ 106.740204][ T6252] ? iov_iter_zero+0x1160/0x1160 [ 106.745169][ T6252] ? ext4_readahead+0x110/0x110 [ 106.750475][ T6252] ? fault_in_readable+0x11c/0x150 [ 106.755960][ T6252] ? fault_in_iov_iter_readable+0xc3/0x300 [ 106.761789][ T6252] generic_perform_write+0x353/0x5c0 [ 106.767272][ T6252] ? generic_file_direct_write+0x3e0/0x3e0 [ 106.773096][ T6252] ? file_modified_flags+0x230/0x260 [ 106.778401][ T6252] ? ext4_write_checks+0x248/0x2c0 [ 106.783615][ T6252] ext4_buffered_write_iter+0xd5/0x360 [ 106.789114][ T6252] ext4_file_write_iter+0x1e7/0x1980 [ 106.794566][ T6252] ? rcu_read_lock_any_held+0xb4/0x140 [ 106.800417][ T6252] ? ext4_file_read_iter+0x660/0x660 [ 106.805925][ T6252] vfs_write+0x474/0x9a0 [ 106.810430][ T6252] ? file_end_write+0x250/0x250 [ 106.815501][ T6252] ? __fget_files+0x3fc/0x460 [ 106.820193][ T6252] ? __fdget+0x180/0x210 [ 106.824571][ T6252] ? __x64_sys_pwrite64+0xf7/0x220 [ 106.830063][ T6252] __x64_sys_pwrite64+0x198/0x220 [ 106.835649][ T6252] ? ksys_pwrite64+0x1c0/0x1c0 [ 106.840522][ T6252] ? lockdep_hardirqs_on+0x98/0x150 [ 106.845738][ T6252] do_syscall_64+0x55/0xb0 [ 106.850429][ T6252] ? clear_bhb_loop+0x40/0x90 [ 106.855551][ T6252] ? clear_bhb_loop+0x40/0x90 [ 106.860235][ T6252] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 106.866146][ T6252] RIP: 0033:0x7fa66ab9e1d9 [ 106.870581][ T6252] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 106.890394][ T6252] RSP: 002b:00007fa66ba16028 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 106.899441][ T6252] RAX: ffffffffffffffda RBX: 00007fa66ae25fa0 RCX: 00007fa66ab9e1d9 [ 106.907447][ T6252] RDX: 0000000000000001 RSI: 0000200000000a80 RDI: 0000000000000004 [ 106.915594][ T6252] RBP: 00007fa66ac35888 R08: 0000000000000000 R09: 0000000000000000 [ 106.923580][ T6252] R10: 0000000000000e7c R11: 0000000000000246 R12: 0000000000000000 [ 106.931728][ T6252] R13: 00007fa66ae26038 R14: 00007fa66ae25fa0 R15: 00007ffcdbb12d18 [ 106.939713][ T6252] [ 107.089537][ T5782] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.467885][ T6275] warning: `syz.0.117' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 108.971610][ T6292] netdevsim netdevsim10 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.517382][ T6297] loop3: detected capacity change from 0 to 1024 [ 109.617234][ T6301] loop0: detected capacity change from 0 to 256 [ 109.952269][ T6297] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 110.052795][ T6297] ext4 filesystem being mounted at /47/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.207119][ T6297] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm syz.3.123: bg 0: block 112: padding at end of block bitmap is not set [ 110.252925][ T6297] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 64 with max blocks 6 with error 28 [ 110.305714][ T6297] EXT4-fs (loop3): This should not happen!! Data will be lost [ 110.305714][ T6297] [ 110.320387][ T6297] EXT4-fs (loop3): Total free blocks count 0 [ 110.331081][ T6297] EXT4-fs (loop3): Free/Dirty block details [ 110.343930][ T6297] EXT4-fs (loop3): free_blocks=0 [ 110.350446][ T6297] EXT4-fs (loop3): dirty_blocks=64 [ 110.357499][ T6297] EXT4-fs (loop3): Block reservation details [ 110.364924][ T6297] EXT4-fs (loop3): i_reserved_data_blocks=4 [ 110.421112][ T6297] syz.3.123 (6297) used greatest stack depth: 19736 bytes left [ 110.432622][ T2982] EXT4-fs error (device loop3): ext4_map_blocks:720: inode #15: block 3: comm kworker/u4:9: lblock 3 mapped to illegal pblock 3 (length 3) [ 110.463142][ T2982] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 110.483821][ T12] EXT4-fs error (device loop3): ext4_map_blocks:720: inode #15: block 8: comm kworker/u4:1: lblock 8 mapped to illegal pblock 8 (length 8) [ 110.543488][ T6322] capability: warning: `syz.1.130' uses deprecated v2 capabilities in a way that may be insecure [ 110.812663][ T5819] IPVS: starting estimator thread 0... [ 110.821729][ T6332] IPVS: rr: UDP 127.0.0.1:5060 - no destination available [ 110.942651][ T6338] IPVS: using max 18 ests per chain, 43200 per kthread [ 110.997309][ C0] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 136.222665][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 136.250649][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 159.778433][ T5788] Bluetooth: hci0: command 0x0406 tx timeout [ 191.053159][ T49] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.458913][ T49] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.326115][ T49] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.841882][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 201.908837][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 204.468458][ T49] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.550060][ T5780] Bluetooth: hci3: command 0x0406 tx timeout [ 212.301904][ T5780] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 212.401301][ T5780] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 212.462207][ T5780] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 212.798327][ T5780] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 212.917349][ T5780] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 212.949197][ T5780] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 215.446724][ T5780] Bluetooth: hci0: command tx timeout [ 217.501140][ T49] netdevsim netdevsim10 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.680093][ T5788] Bluetooth: hci0: command tx timeout [ 219.895787][ T5788] Bluetooth: hci0: command tx timeout [ 220.971973][ T5780] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 221.143252][ T5780] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 221.277292][ T5780] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 221.449267][ T5780] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 221.595312][ T5780] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 221.636292][ T5780] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 222.104648][ T5788] Bluetooth: hci0: command tx timeout [ 224.094644][ T5788] Bluetooth: hci1: command tx timeout [ 226.307060][ T5788] Bluetooth: hci1: command tx timeout [ 228.517873][ T5780] Bluetooth: hci1: command tx timeout [ 228.885920][ T5780] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 228.926382][ T5780] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 228.993819][ T5780] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 229.216577][ T5780] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 229.258345][ T5780] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 229.322836][ T5780] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 230.747460][ T5780] Bluetooth: hci1: command tx timeout [ 231.708176][ T5780] Bluetooth: hci2: command tx timeout [ 232.950242][ T49] tipc: Left network mode [ 233.919657][ T5780] Bluetooth: hci2: command tx timeout [ 236.142244][ T5780] Bluetooth: hci2: command tx timeout [ 238.355794][ T5780] Bluetooth: hci2: command tx timeout [ 267.483554][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 267.506592][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 289.388823][ T49] hsr_slave_0: left promiscuous mode [ 289.832494][ T49] hsr_slave_1: left promiscuous mode [ 290.387024][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 290.481780][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 290.690381][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 290.876315][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 291.226939][ T49] bridge_slave_1: left allmulticast mode [ 291.349411][ T49] bridge_slave_1: left promiscuous mode [ 291.448494][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.664824][ T49] bridge_slave_0: left allmulticast mode [ 292.670906][ T49] bridge_slave_0: left promiscuous mode [ 292.888874][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.379127][ T49] veth1_macvtap: left promiscuous mode [ 297.387196][ T49] veth0_macvtap: left promiscuous mode [ 297.513494][ T49] veth1_vlan: left promiscuous mode [ 297.681534][ T49] veth0_vlan: left promiscuous mode [ 317.660845][ T5788] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 317.980581][ T5788] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 318.065639][ T5788] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 318.260177][ T5788] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 318.293978][ T5788] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 318.365348][ T5788] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 320.735967][ T5788] Bluetooth: hci0: command tx timeout [ 322.950339][ T5788] Bluetooth: hci0: command tx timeout [ 323.911674][ T5780] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 323.972952][ T5780] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 324.031940][ T5780] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 324.141587][ T5780] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 324.258821][ T5780] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 324.279539][ T5780] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 325.172624][ T5780] Bluetooth: hci0: command tx timeout [ 326.787148][ T5780] Bluetooth: hci1: command tx timeout [ 327.396818][ T5780] Bluetooth: hci0: command tx timeout [ 329.011636][ T5780] Bluetooth: hci1: command tx timeout [ 330.851462][ T5788] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 331.258168][ T5788] Bluetooth: hci1: command tx timeout [ 331.282074][ T5788] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 331.305790][ T5788] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 331.363737][ T5788] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 331.516605][ T5788] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 331.598651][ T5788] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 333.166196][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 333.181136][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 333.493662][ T5780] Bluetooth: hci1: command tx timeout [ 333.896144][ T5780] Bluetooth: hci4: command tx timeout [ 336.120740][ T5780] Bluetooth: hci4: command tx timeout [ 338.354624][ T5780] Bluetooth: hci4: command tx timeout [ 340.570414][ T5780] Bluetooth: hci4: command tx timeout [ 344.700521][ T49] team0 (unregistering): Port device team_slave_1 removed [ 346.755235][ T49] team0 (unregistering): Port device team_slave_0 removed [ 348.911879][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 351.059015][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 362.807333][ T5788] Bluetooth: hci2: command 0x0406 tx timeout [ 374.278801][ T49] bond0 (unregistering): Released all slaves [ 398.875985][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 398.886842][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 409.437015][ T5788] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 409.459491][ T5788] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 409.575763][ T5788] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 409.858408][ T5788] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 410.123307][ T5788] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 410.155833][ T5788] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 410.447592][ T49] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.275223][ T6447] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 411.386977][ T6447] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 411.450457][ T6447] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 412.022595][ T6447] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 412.175114][ T6447] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 412.317597][ T6447] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 413.093316][ T6447] Bluetooth: hci3: command tx timeout [ 414.802947][ T6447] Bluetooth: hci5: command tx timeout [ 414.937419][ T49] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.314903][ T6447] Bluetooth: hci3: command tx timeout [ 417.275860][ T6447] Bluetooth: hci5: command tx timeout [ 417.722755][ T6447] Bluetooth: hci3: command tx timeout [ 419.529469][ T6447] Bluetooth: hci5: command tx timeout [ 419.863993][ T49] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.966887][ T6447] Bluetooth: hci3: command tx timeout [ 421.720558][ T5788] Bluetooth: hci5: command tx timeout [ 421.931679][ T5788] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 421.976436][ T5788] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 422.010776][ T5788] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 422.286586][ T5788] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 422.501810][ T5788] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 422.519638][ T5788] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 424.696841][ T49] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.936755][ T6447] Bluetooth: hci6: command tx timeout [ 427.118707][ T6447] Bluetooth: hci6: command tx timeout [ 429.419433][ T6447] Bluetooth: hci6: command tx timeout [ 431.651152][ T5788] Bluetooth: hci6: command tx timeout