last executing test programs: 18.011920976s ago: executing program 2 (id=493): syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x40000000015, 0x800, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000200)={0x1d, r5}, 0x10) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r5, @ANYRES64=r4, @ANYBLOB="3bf81bb9e9"], 0x20000600}}, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f0000001940)={&(0x7f00000002c0)=@sco={0x1f, @none}, 0x80, &(0x7f0000000000), 0x5, &(0x7f00000008c0)=[@timestamping={{0x14}}], 0x18}, 0x0) read$eventfd(r0, 0x0, 0x0) 16.623285918s ago: executing program 2 (id=495): r0 = socket$inet_tcp(0x2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/uts\x00') ioctl$NS_GET_USERNS(r2, 0xb701, 0x0) syz_init_net_socket$llc(0x1a, 0x802, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000280), 0x0) sendmsg$inet_sctp(r3, &(0x7f0000000540)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c044}, 0x40) r4 = dup(r3) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x106}}, 0x20) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r4, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x4}}, 0x29fdf) close_range(r0, 0xffffffffffffffff, 0x0) 15.915658619s ago: executing program 2 (id=497): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r1}, &(0x7f00000006c0), &(0x7f0000000700)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r1, &(0x7f00000007c0)}, 0x20) 9.032845613s ago: executing program 1 (id=512): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000f40), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010067bd7000fbdbdf25010000005c00018014000300fe80000000000a0000000000000000bb060001000a00000008000600777272000c0007002e000000050000000800090027000000060002001100000008000b0073697000080008000900000006000400001500"], 0x70}, 0x1, 0x0, 0x0, 0x20004084}, 0x20008800) 8.807770169s ago: executing program 1 (id=515): r0 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x4003, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) getrlimit(0xd, &(0x7f00000001c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmget(0x0, 0x1000, 0x2, &(0x7f0000871000/0x1000)=nil) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) preadv(0xffffffffffffffff, &(0x7f0000002b40)=[{&(0x7f0000000080)=""/121, 0x79}, {&(0x7f0000001b40)=""/4096, 0x1000}], 0x2, 0x5, 0xfffff073) syz_pidfd_open(r3, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r2, 0x4) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000002dc0)=@userptr={0x2, 0x1, 0x4, 0x800, 0x3, {}, {0x1, 0xc, 0x9, 0xc, 0x6, 0x8, "bf240fef"}, 0x3, 0x2, {0x0}, 0x96000}) 7.495891888s ago: executing program 1 (id=517): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x20040084) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x170bd2b, 0x3, {0x0, 0x0, 0x0, r5, {0x0, 0x5}, {}, {0x2, 0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_IPV4_SRC={0x8, 0x1b, @rand_addr=0x64010100}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc804}, 0x2) 6.866354777s ago: executing program 0 (id=518): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r3 = socket$unix(0x1, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x1, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000080}, 0x48000) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r6, &(0x7f00000002c0)="05032200d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) 6.724508711s ago: executing program 2 (id=519): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={0x0}, 0x1, 0x0, 0x0, 0x55}, 0xc010) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) getgroups(0x0, 0x0) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 6.636272023s ago: executing program 1 (id=520): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) ptrace$ARCH_MAP_VDSO_32(0x1e, r0, 0xfffffffffffffffd, 0x2002) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x18, 0x1415, 0x103, 0x70bd29, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) syz_emit_ethernet(0xb3, &(0x7f0000001000)={@local, @dev, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "f15b88", 0x7d, 0x6, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1, {[@srh={0x3b, 0x8, 0x4, 0x4, 0x58, 0x50, 0x7f, [@remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @dev={0xfe, 0x80, '\x00', 0x16}, @private1={0xfc, 0x1, '\x00', 0x1}]}, @fragment={0x5e, 0x0, 0x1, 0x1, 0x0, 0x15, 0x68}], @payload_named={{{{{0x2d, 0x0, 0x0, 0x0, 0x0, 0xa, 0x3, 0x2, 0x2, 0x0, 0x2, 0x7, 0x2, 0x2, 0xa, 0x2, 0x1, 0x4e24, 0x4e24}, 0x3, 0x1}, 0x3, 0x2}}, [0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000001940), 0xffffffffffffffff) 6.322414642s ago: executing program 0 (id=521): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x64, 0x24, 0xd0f, 0x70bd2b, 0x25dfdbfb, {0x60, 0x0, 0x0, r1, {}, {0xffe0, 0xa}, {0x2, 0x5}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x38, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0x50deecda08de2091}, @TCA_TBF_PARMS={0x28, 0x1, {{0xb, 0x1, 0x9, 0xe5ae, 0x42, 0x5}, {0x8, 0x3, 0x7cb, 0x200, 0xf5b, 0x7}, 0x7, 0x80000000, 0x1cd8}}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x55}, 0xc010) 5.478895467s ago: executing program 0 (id=522): openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) getdents64(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600) socket$kcm(0x29, 0x5, 0x0) socket(0x1e, 0x805, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = shmget(0x1, 0x4000, 0xa20, &(0x7f0000ffb000/0x4000)=nil) shmat(r3, &(0x7f0000ffd000/0x2000)=nil, 0x4000) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r4, 0x0, 0x0) listen(r4, 0x3) accept4$bt_l2cap(r4, &(0x7f0000000200), 0x0, 0x800) 5.179044996s ago: executing program 1 (id=531): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) ptrace$ARCH_MAP_VDSO_32(0x1e, r0, 0xfffffffffffffffd, 0x2002) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x18, 0x1415, 0x103, 0x70bd29, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) syz_emit_ethernet(0xb3, &(0x7f0000001000)={@local, @dev, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "f15b88", 0x7d, 0x6, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1, {[@srh={0x3b, 0x8, 0x4, 0x4, 0x58, 0x50, 0x7f, [@remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @dev={0xfe, 0x80, '\x00', 0x16}, @private1={0xfc, 0x1, '\x00', 0x1}]}, @fragment={0x5e, 0x0, 0x1, 0x1, 0x0, 0x15, 0x68}], @payload_named={{{{{0x2d, 0x0, 0x0, 0x0, 0x0, 0xa, 0x3, 0x2, 0x2, 0x0, 0x2, 0x7, 0x2, 0x2, 0xa, 0x2, 0x1, 0x4e24, 0x4e24}, 0x3, 0x1}, 0x3, 0x2}}, [0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000001940), 0xffffffffffffffff) 4.427408179s ago: executing program 0 (id=524): r0 = socket$inet_tcp(0x2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/uts\x00') ioctl$NS_GET_USERNS(r4, 0xb701, 0x0) syz_init_net_socket$llc(0x1a, 0x802, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000280), 0x0) sendmsg$inet_sctp(r5, &(0x7f0000000540)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c044}, 0x40) r6 = dup(r5) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x106}}, 0x20) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r6, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x4}}, 0x29fdf) close_range(r0, 0xffffffffffffffff, 0x0) 4.03981186s ago: executing program 3 (id=525): r0 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x4003, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) getrlimit(0xd, &(0x7f00000001c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmget(0x0, 0x1000, 0x2, &(0x7f0000871000/0x1000)=nil) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) preadv(0xffffffffffffffff, &(0x7f0000002b40)=[{&(0x7f0000000080)=""/121, 0x79}, {&(0x7f0000001b40)=""/4096, 0x1000}], 0x2, 0x5, 0xfffff073) syz_pidfd_open(r3, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r2, 0x4) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000002dc0)=@userptr={0x2, 0x1, 0x4, 0x800, 0x3, {}, {0x1, 0xc, 0x9, 0xc, 0x6, 0x8, "bf240fef"}, 0x3, 0x2, {0x0}, 0x96000}) 3.749232729s ago: executing program 1 (id=526): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r1}, &(0x7f00000006c0), &(0x7f0000000700)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r1, &(0x7f00000007c0)}, 0x20) 3.333886731s ago: executing program 2 (id=527): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x101000, 0x800, 0x3, 0x1}, 0x20) 2.908378934s ago: executing program 3 (id=528): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x20040084) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x170bd2b, 0x3, {0x0, 0x0, 0x0, r5, {0x0, 0x5}, {}, {0x2, 0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_IPV4_SRC={0x8, 0x1b, @rand_addr=0x64010100}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc804}, 0x2) 2.895190064s ago: executing program 0 (id=529): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r3 = socket$unix(0x1, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x1, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000080}, 0x48000) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r6, &(0x7f00000002c0)="05032200d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) 2.092812578s ago: executing program 2 (id=530): r0 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x4003, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) syz_pidfd_open(r3, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r2, 0x4) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) 1.958327172s ago: executing program 3 (id=532): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x64, 0x24, 0xd0f, 0x70bd2b, 0x25dfdbfb, {0x60, 0x0, 0x0, r1, {}, {0xffe0, 0xa}, {0x2, 0x5}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x38, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0x50deecda08de2091}, @TCA_TBF_PARMS={0x28, 0x1, {{0xb, 0x1, 0x9, 0xe5ae, 0x42, 0x5}, {0x8, 0x3, 0x7cb, 0x200, 0xf5b, 0x7}, 0x7, 0x80000000, 0x1cd8}}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x55}, 0xc010) 1.818696096s ago: executing program 3 (id=533): openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) getdents64(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600) socket$kcm(0x29, 0x5, 0x0) socket(0x1e, 0x805, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = shmget(0x1, 0x4000, 0xa20, &(0x7f0000ffb000/0x4000)=nil) shmat(r1, &(0x7f0000ffd000/0x2000)=nil, 0x4000) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r2, 0x0, 0x0) listen(r2, 0x3) accept4$bt_l2cap(r2, &(0x7f0000000200), 0x0, 0x800) 1.729480028s ago: executing program 0 (id=534): r0 = io_uring_setup(0x68f1, &(0x7f00000005c0)={0x0, 0x48c7, 0x8, 0x7, 0x1000168}) mincore(&(0x7f0000ffc000/0x4000)=nil, 0x4002, 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10e, &(0x7f00000000c0)={[{@errors_remount}, {@dax_inode}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@sysvgroups}, {@block_validity}, {@quota}]}, 0x3, 0x45f, &(0x7f0000000400)="$eJzs289vFFUcAPDvTFug/LAV8Qc/1CoaG3+0tKBy8KLRxIMmJl7wWNtCkEINrYkQotUYPBoS78ajiX+BJ70Y9WTiVe+GhBguoqc1sztDd5fZ0pZlB9nPJ9nuezNv+t5337zdN/N2A+hbY9mfJGJnRPweESONbGuBscbTtasXZv+5emE2iVrt7b+Serm/r16YLYoWx+3IM+NpRPpZEvtL6l06d/7UzMLC/Nk8P7l8+v3JpXPnnzt5eubE/In5M9NHjx45PPXiC9PPdyXOe7O27vto8cDe19+59ObssUvv/vxtUsTfFkeXjK2188larcvVVWtXUzoZrLAhbMhARGTdNVQf/yMxEKudNxKvfVpp44DbqpbrsHulBtzFkqi6BUA1ig/67Pq3ePRu9lG9Ky83LoCyuK/lj8aewUjzMkNt17fdNBYRx1b+/Sp7xO25DwEA0OL7bP7zbNn8L40Hmsrdk68NjeZrKbsj4r6I2BMR90fUyz4YEQ9tsP72RZIb5z/p5U0Ftk7Z/O+lfG2rdf5XzP5idCDP7arHP5QcP7kwfyh/TcZjaGuWn1qjjh9e/e2LTvtW53+76s9Z/cVcMG/H5cGtrcfMzSzP3ErMza58ErFvsCz+5PpKQBIReyNi3ybrOPn0Nwc67Wue/5bHv4YurDPVvo54qtH/K9EWfyFZe31yclsszB+aLM6KG/3y68W3OtV/S/F3Qdb/20vP/+vxjybN67VLG6/j4h+fd7ymmbhp/GXn/+qGLfnzhzPLy2enIrYkbzQa3bx9evXYIl+Uz+IfP1g+/nfH6iuxPyKyk/jhiHgkIh7N++6xiHg8Ig6Wh5ddOsZPrzzxXqf474T+n2vr/9HWIm39v5rYEu1byhMDp378bqXlP24k/qz/j9RT4/mW9bz/raddmzubAQAA4P8njYidkaQT19PD6cRE4zv8e2J7urC4tPzM8cUPzsw1fiMwGkNpcadrpOl+6FR+WV/kp9vyh/P7xl8ODNfzE7OLC3NVBw99bscN4z+tj//MnwNVtw647fxeC/pX0/hPqmwH0Hs+/6F/Gf/Qv0rG/3AV7QB6r+zz/+MK2gH0Xtv4t+wHfaTT9f9oj9sB9J77f9C/mse/LwBA31gajpv/SL4ssS02c5TEXZOI9I5oRncSySZHwXoTO6sOcOOJqt+ZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuuO/AAAA//+uj+a+") r1 = socket$kcm(0x23, 0x5, 0x0) listen(r1, 0x800) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000200)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a7ef595105ea1698fa51f60a64c9f408000000e786a6d0bdbdc3d44bd70011b6c0504bb9189d9193e9bd00"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x240040c4) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r3, &(0x7f0000000040)={0x23, 0x0, 0x58}, 0x10) r4 = accept4(r1, 0x0, 0x0, 0x80000) ioctl$SIOCPNENABLEPIPE(r4, 0x89ed, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x4, 0x1fa8, 0x2b0e}, &(0x7f0000000080)=0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f00000002c0)={0x1, 0x5}, 0x2) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x2000000, &(0x7f0000000200), 0x1, 0x445, &(0x7f0000001dc0)="$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") read(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f00000000c0)={r6, 0x3}, &(0x7f0000000100)=0x8) sendmsg$SMC_PNETID_DEL(r4, &(0x7f00000002c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x4004081) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) close_range(r0, 0xffffffffffffffff, 0x0) 1.369370279s ago: executing program 3 (id=535): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) ptrace$ARCH_MAP_VDSO_32(0x1e, r0, 0xfffffffffffffffd, 0x2002) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000540)={0xaa, 0x310}) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x1415, 0x103, 0x70bd29, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) syz_emit_ethernet(0x6b, &(0x7f0000001000)={@local, @dev, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "f15b88", 0x35, 0x6, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1, {[@fragment={0x5e, 0x0, 0x1, 0x1, 0x0, 0x15, 0x68}], @payload_named={{{{{0x2d, 0x0, 0x0, 0x0, 0x0, 0xa, 0x3, 0x2, 0x2, 0x0, 0x2, 0x7, 0x2, 0x2, 0xa, 0x2, 0x1, 0x4e24, 0x4e24}, 0x3, 0x1}, 0x3, 0x2}}, [0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001940), r7) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f00000019c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_INTERFACE(r7, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001a00)={0x3c, r8, 0x9d292b3bf99534c1, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0302}}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan4\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x4) 0s ago: executing program 3 (id=536): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) ptrace$ARCH_MAP_VDSO_32(0x1e, r0, 0xfffffffffffffffd, 0x2002) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x18, 0x1415, 0x103, 0x70bd29, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) syz_emit_ethernet(0xb3, &(0x7f0000001000)={@local, @dev, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "f15b88", 0x7d, 0x6, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1, {[@srh={0x3b, 0x8, 0x4, 0x4, 0x58, 0x50, 0x7f, [@remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @dev={0xfe, 0x80, '\x00', 0x16}, @private1={0xfc, 0x1, '\x00', 0x1}]}, @fragment={0x5e, 0x0, 0x1, 0x1, 0x0, 0x15, 0x68}], @payload_named={{{{{0x2d, 0x0, 0x0, 0x0, 0x0, 0xa, 0x3, 0x2, 0x2, 0x0, 0x2, 0x7, 0x2, 0x2, 0xa, 0x2, 0x1, 0x4e24, 0x4e24}, 0x3, 0x1}, 0x3, 0x2}}, [0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000001940), 0xffffffffffffffff) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.177' (ED25519) to the list of known hosts. [ 71.705536][ T5761] cgroup: Unknown subsys name 'net' [ 71.850331][ T5761] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 73.610386][ T5761] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 75.320185][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 75.342690][ T5785] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 75.344065][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 75.353382][ T5785] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 75.359803][ T5782] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 75.365195][ T5785] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 75.378522][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 75.379750][ T5785] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 75.387487][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 75.394702][ T5785] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 75.400700][ T51] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 75.407301][ T5785] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 75.414494][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 75.421849][ T5785] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 75.435471][ T5785] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 75.445039][ T5785] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 75.458371][ T5778] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 75.466251][ T5778] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 75.476593][ T5778] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 75.487306][ T5778] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 75.495484][ T5778] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 75.504523][ T5778] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 75.525081][ T5778] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 75.533178][ T5778] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 75.959328][ T5774] chnl_net:caif_netlink_parms(): no params data found [ 76.014763][ T5775] chnl_net:caif_netlink_parms(): no params data found [ 76.044230][ T5776] chnl_net:caif_netlink_parms(): no params data found [ 76.128767][ T5773] chnl_net:caif_netlink_parms(): no params data found [ 76.185298][ T5774] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.193015][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.200491][ T5774] bridge_slave_0: entered allmulticast mode [ 76.208165][ T5774] bridge_slave_0: entered promiscuous mode [ 76.237647][ T5774] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.245029][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.252201][ T5774] bridge_slave_1: entered allmulticast mode [ 76.259197][ T5774] bridge_slave_1: entered promiscuous mode [ 76.334466][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.341694][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.349615][ T5775] bridge_slave_0: entered allmulticast mode [ 76.356693][ T5775] bridge_slave_0: entered promiscuous mode [ 76.374012][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.381790][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.389339][ T5776] bridge_slave_0: entered allmulticast mode [ 76.397278][ T5776] bridge_slave_0: entered promiscuous mode [ 76.407366][ T5774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.420653][ T5774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.438856][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.446147][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.453749][ T5775] bridge_slave_1: entered allmulticast mode [ 76.460624][ T5775] bridge_slave_1: entered promiscuous mode [ 76.467499][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.477182][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.484764][ T5776] bridge_slave_1: entered allmulticast mode [ 76.491564][ T5776] bridge_slave_1: entered promiscuous mode [ 76.589163][ T5773] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.596702][ T5773] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.604196][ T5773] bridge_slave_0: entered allmulticast mode [ 76.611012][ T5773] bridge_slave_0: entered promiscuous mode [ 76.621053][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.635667][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.648495][ T5774] team0: Port device team_slave_0 added [ 76.657464][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.670213][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.680351][ T5773] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.688080][ T5773] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.695791][ T5773] bridge_slave_1: entered allmulticast mode [ 76.703648][ T5773] bridge_slave_1: entered promiscuous mode [ 76.720477][ T5774] team0: Port device team_slave_1 added [ 76.790710][ T5775] team0: Port device team_slave_0 added [ 76.800971][ T5775] team0: Port device team_slave_1 added [ 76.818864][ T5776] team0: Port device team_slave_0 added [ 76.828023][ T5776] team0: Port device team_slave_1 added [ 76.835525][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.843246][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.869586][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.906104][ T5773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.919532][ T5773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.948965][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.956144][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.982226][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.001375][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.008672][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.035830][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.069722][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.077139][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.110735][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.139436][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.146677][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.172951][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.186006][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.193229][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.219555][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.252895][ T5773] team0: Port device team_slave_0 added [ 77.261517][ T5773] team0: Port device team_slave_1 added [ 77.295539][ T5774] hsr_slave_0: entered promiscuous mode [ 77.303943][ T5774] hsr_slave_1: entered promiscuous mode [ 77.355709][ T5776] hsr_slave_0: entered promiscuous mode [ 77.362127][ T5776] hsr_slave_1: entered promiscuous mode [ 77.369073][ T5776] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.377021][ T5776] Cannot create hsr debugfs directory [ 77.392940][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.400031][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.426894][ T5773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.439432][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.446631][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.472794][ T5773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.493484][ T5785] Bluetooth: hci0: command tx timeout [ 77.493501][ T5778] Bluetooth: hci2: command tx timeout [ 77.533876][ T5775] hsr_slave_0: entered promiscuous mode [ 77.540192][ T5775] hsr_slave_1: entered promiscuous mode [ 77.546995][ T5775] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.554653][ T5775] Cannot create hsr debugfs directory [ 77.577622][ T5785] Bluetooth: hci1: command tx timeout [ 77.577642][ T5778] Bluetooth: hci3: command tx timeout [ 77.747940][ T5773] hsr_slave_0: entered promiscuous mode [ 77.755809][ T5773] hsr_slave_1: entered promiscuous mode [ 77.761947][ T5773] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.769763][ T5773] Cannot create hsr debugfs directory [ 78.030796][ T5774] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 78.049524][ T5774] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 78.077346][ T5774] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 78.096889][ T5774] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 78.130821][ T5776] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 78.161283][ T5776] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 78.171708][ T5776] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 78.205398][ T5776] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 78.243511][ T5775] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 78.268771][ T5775] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 78.286286][ T5775] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 78.299035][ T5775] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 78.408451][ T5773] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 78.422008][ T5773] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 78.438846][ T5773] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 78.450722][ T5773] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 78.568641][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.580675][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.638774][ T5774] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.659327][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.671702][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.686005][ T1122] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.693415][ T1122] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.731274][ T1122] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.738667][ T1122] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.754355][ T1122] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.761586][ T1122] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.785852][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.804907][ T4804] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.812035][ T4804] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.839232][ T4804] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.846435][ T4804] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.888354][ T1122] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.895507][ T1122] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.985789][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.050368][ T5775] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 79.067168][ T5775] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 79.105811][ T5773] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.167433][ T3514] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.174671][ T3514] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.224982][ T3514] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.232264][ T3514] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.572958][ T5785] Bluetooth: hci2: command tx timeout [ 79.574875][ T5778] Bluetooth: hci0: command tx timeout [ 79.610150][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.636857][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.654347][ T5778] Bluetooth: hci1: command tx timeout [ 79.657880][ T5785] Bluetooth: hci3: command tx timeout [ 79.718919][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.769149][ T5774] veth0_vlan: entered promiscuous mode [ 79.799305][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.818673][ T5774] veth1_vlan: entered promiscuous mode [ 79.852241][ T5776] veth0_vlan: entered promiscuous mode [ 79.907934][ T5776] veth1_vlan: entered promiscuous mode [ 79.926818][ T5775] veth0_vlan: entered promiscuous mode [ 79.940896][ T5774] veth0_macvtap: entered promiscuous mode [ 79.962468][ T5774] veth1_macvtap: entered promiscuous mode [ 79.978284][ T5775] veth1_vlan: entered promiscuous mode [ 80.008461][ T5776] veth0_macvtap: entered promiscuous mode [ 80.039275][ T5776] veth1_macvtap: entered promiscuous mode [ 80.057995][ T5773] veth0_vlan: entered promiscuous mode [ 80.086448][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.104901][ T5773] veth1_vlan: entered promiscuous mode [ 80.118906][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.129783][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.142285][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.157919][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.188834][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.201087][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.221457][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.244818][ T5774] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.255254][ T5774] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.265995][ T5774] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.275355][ T5774] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.287882][ T5775] veth0_macvtap: entered promiscuous mode [ 80.304066][ T5776] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.313792][ T5776] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.323454][ T5776] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.332248][ T5776] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.383337][ T5775] veth1_macvtap: entered promiscuous mode [ 80.391730][ T5773] veth0_macvtap: entered promiscuous mode [ 80.407785][ T5773] veth1_macvtap: entered promiscuous mode [ 80.513372][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.523548][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.524555][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.532051][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.542611][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.563721][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.576499][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.586988][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.597843][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.607974][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.619132][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.629327][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.639905][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.651592][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.669851][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.680642][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.691087][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.702343][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.714299][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.754084][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.765006][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.777432][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.789098][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.799414][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.810388][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.821950][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.858147][ T5775] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.868051][ T5775] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.877089][ T5775] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.886877][ T5775] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.907693][ T5773] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.919364][ T5773] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.928656][ T5773] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.939211][ T5773] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.972793][ T1122] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.981037][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.985258][ T1122] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.989173][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.084848][ T1122] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.117571][ T1122] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.211571][ T1122] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.234518][ T1122] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.283093][ T1110] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.291009][ T1110] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.509576][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.528250][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.099359][ T5785] Bluetooth: hci2: command tx timeout [ 82.105443][ T5785] Bluetooth: hci0: command tx timeout [ 82.111579][ T5785] Bluetooth: hci3: command tx timeout [ 82.117296][ T5785] Bluetooth: hci1: command tx timeout [ 83.110536][ T3514] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.230763][ T3514] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.577230][ T5778] Bluetooth: hci0: command tx timeout [ 85.582849][ T5778] Bluetooth: hci2: command tx timeout [ 85.588387][ T5778] Bluetooth: hci1: command tx timeout [ 85.602329][ T5778] Bluetooth: hci3: command tx timeout [ 85.803300][ T5861] lo speed is unknown, defaulting to 1000 [ 85.815779][ T5861] lo speed is unknown, defaulting to 1000 [ 85.832056][ T5861] lo speed is unknown, defaulting to 1000 [ 85.865234][ T5861] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 85.925857][ T5861] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 86.294149][ T5861] lo speed is unknown, defaulting to 1000 [ 86.311549][ T5861] lo speed is unknown, defaulting to 1000 [ 86.325921][ T5861] lo speed is unknown, defaulting to 1000 [ 86.340960][ T5861] lo speed is unknown, defaulting to 1000 [ 87.036589][ T966] cfg80211: failed to load regulatory.db [ 88.747743][ T5877] siw: device registration error -23 [ 91.727597][ T5895] siw: device registration error -23 [ 94.097080][ T5910] siw: device registration error -23 [ 94.219845][ T5899] netlink: 24 bytes leftover after parsing attributes in process `syz.2.16'. [ 94.305790][ T5909] Zero length message leads to an empty skb [ 96.391358][ T5922] siw: device registration error -23 [ 98.932040][ T5935] siw: device registration error -23 [ 101.432441][ C0] sched: RT throttling activated [ 101.941282][ T5953] siw: device registration error -23 [ 102.955771][ T5959] syz.1.31[5959]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 103.024882][ T5959] loop1: detected capacity change from 0 to 512 [ 103.043929][ T5959] EXT4-fs: Ignoring removed bh option [ 103.173851][ T5959] EXT4-fs error (device loop1): ext4_iget_extra_inode:4739: inode #15: comm syz.1.31: corrupted in-inode xattr: e_value size too large [ 103.260888][ T5959] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.31: couldn't read orphan inode 15 (err -117) [ 103.299973][ T5959] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.642737][ T5979] siw: device registration error -23 [ 106.164280][ T5985] siw: device registration error -23 [ 107.587577][ T5990] siw: device registration error -23 [ 109.673098][ T5785] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 109.683071][ T5785] CPU: 1 PID: 5785 Comm: kworker/u5:5 Not tainted syzkaller #0 [ 109.690753][ T5785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 109.700845][ T5785] Workqueue: hci3 hci_rx_work [ 109.705575][ T5785] Call Trace: [ 109.706832][ T5778] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 109.708869][ T5785] [ 109.708893][ T5785] dump_stack_lvl+0x18c/0x250 [ 109.726254][ T5785] ? show_regs_print_info+0x20/0x20 [ 109.731488][ T5785] ? load_image+0x420/0x420 [ 109.736060][ T5785] sysfs_create_dir_ns+0x26e/0x2a0 [ 109.741233][ T5785] ? sysfs_warn_dup+0xa0/0xa0 [ 109.746133][ T5785] ? do_raw_spin_unlock+0x121/0x230 [ 109.751374][ T5785] kobject_add_internal+0x61c/0xcc0 [ 109.756621][ T5785] kobject_add+0x164/0x240 [ 109.761069][ T5785] ? __rwlock_init+0x150/0x150 [ 109.765877][ T5785] ? kobject_init+0x1e0/0x1e0 [ 109.770608][ T5785] ? _raw_spin_unlock+0x28/0x40 [ 109.775517][ T5785] ? get_device_parent+0x366/0x390 [ 109.780774][ T5785] device_add+0x408/0xc50 [ 109.785154][ T5785] hci_conn_add_sysfs+0xd5/0x1e0 [ 109.790131][ T5785] le_conn_complete_evt+0xf5d/0x1540 [ 109.795619][ T5785] ? hci_event_packet+0x4cb/0x1270 [ 109.800764][ T5785] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 109.807035][ T5785] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 109.812703][ T5785] ? skb_pull_data+0xfb/0x200 [ 109.817405][ T5785] hci_le_conn_complete_evt+0x187/0x440 [ 109.822975][ T5785] ? hci_remote_host_features_evt+0x150/0x150 [ 109.829074][ T5785] hci_event_packet+0x7ba/0x1270 [ 109.834129][ T5785] ? bis_list+0x290/0x290 [ 109.838494][ T5785] ? lockdep_hardirqs_on+0x98/0x150 [ 109.843788][ T5785] ? hci_send_to_monitor+0xd7/0x4f0 [ 109.849023][ T5785] hci_rx_work+0x43a/0xd60 [ 109.853476][ T5785] ? process_scheduled_works+0x96f/0x15d0 [ 109.859218][ T5785] process_scheduled_works+0xa5d/0x15d0 [ 109.864900][ T5785] ? worker_attach_to_pool+0x380/0x380 [ 109.870390][ T5785] ? assign_work+0x3d2/0x5d0 [ 109.875011][ T5785] worker_thread+0xa55/0xfc0 [ 109.879659][ T5785] kthread+0x2fa/0x390 [ 109.883741][ T5785] ? pr_cont_work+0x560/0x560 [ 109.888526][ T5785] ? kthread_blkcg+0xd0/0xd0 [ 109.893137][ T5785] ret_from_fork+0x48/0x80 [ 109.897568][ T5785] ? kthread_blkcg+0xd0/0xd0 [ 109.902175][ T5785] ret_from_fork_asm+0x11/0x20 [ 109.907061][ T5785] [ 109.910106][ T5778] CPU: 0 PID: 5778 Comm: kworker/u5:2 Not tainted syzkaller #0 [ 109.917739][ T5778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 109.919109][ T5785] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 109.928008][ T5778] Workqueue: hci2 hci_rx_work [ 109.928044][ T5778] Call Trace: [ 109.928054][ T5778] [ 109.928064][ T5778] dump_stack_lvl+0x18c/0x250 [ 109.942488][ T5785] Bluetooth: hci3: failed to register connection device [ 109.947088][ T5778] ? show_regs_print_info+0x20/0x20 [ 109.970274][ T5778] ? load_image+0x420/0x420 [ 109.974853][ T5778] sysfs_create_dir_ns+0x26e/0x2a0 [ 109.980691][ T5778] ? sysfs_warn_dup+0xa0/0xa0 [ 109.985383][ T5778] ? do_raw_spin_unlock+0x121/0x230 [ 109.990615][ T5778] kobject_add_internal+0x61c/0xcc0 [ 109.995938][ T5778] kobject_add+0x164/0x240 [ 110.000373][ T5778] ? __rwlock_init+0x150/0x150 [ 110.005338][ T5778] ? kobject_init+0x1e0/0x1e0 [ 110.010044][ T5778] ? _raw_spin_unlock+0x28/0x40 [ 110.015016][ T5778] ? get_device_parent+0x366/0x390 [ 110.020418][ T5778] device_add+0x408/0xc50 [ 110.024776][ T5778] hci_conn_add_sysfs+0xd5/0x1e0 [ 110.029736][ T5778] le_conn_complete_evt+0xf5d/0x1540 [ 110.035041][ T5778] ? hci_event_packet+0x4cb/0x1270 [ 110.040181][ T5778] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 110.046440][ T5778] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 110.052092][ T5778] ? skb_pull_data+0xfb/0x200 [ 110.056873][ T5778] hci_le_conn_complete_evt+0x187/0x440 [ 110.062538][ T5778] ? hci_remote_host_features_evt+0x150/0x150 [ 110.068743][ T5778] hci_event_packet+0x7ba/0x1270 [ 110.073862][ T5778] ? bis_list+0x290/0x290 [ 110.078222][ T5778] ? lockdep_hardirqs_on+0x98/0x150 [ 110.083437][ T5778] ? hci_send_to_monitor+0xd7/0x4f0 [ 110.088656][ T5778] hci_rx_work+0x43a/0xd60 [ 110.093139][ T5778] ? process_scheduled_works+0x96f/0x15d0 [ 110.098876][ T5778] process_scheduled_works+0xa5d/0x15d0 [ 110.104471][ T5778] ? worker_attach_to_pool+0x380/0x380 [ 110.109951][ T5778] ? assign_work+0x3d2/0x5d0 [ 110.114565][ T5778] worker_thread+0xa55/0xfc0 [ 110.119170][ T5778] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 110.125180][ T5778] ? _raw_spin_unlock+0x40/0x40 [ 110.130481][ T5778] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 110.136408][ T5778] kthread+0x2fa/0x390 [ 110.140575][ T5778] ? pr_cont_work+0x560/0x560 [ 110.145277][ T5778] ? kthread_blkcg+0xd0/0xd0 [ 110.149883][ T5778] ret_from_fork+0x48/0x80 [ 110.154328][ T5778] ? kthread_blkcg+0xd0/0xd0 [ 110.159025][ T5778] ret_from_fork_asm+0x11/0x20 [ 110.163823][ T5778] [ 110.178191][ T5778] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 110.193230][ T5778] Bluetooth: hci2: failed to register connection device [ 110.247388][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.963768][ T6012] siw: device registration error -23 [ 114.212117][ T5785] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 114.222229][ T5785] CPU: 0 PID: 5785 Comm: kworker/u5:5 Not tainted syzkaller #0 [ 114.229818][ T5785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 114.240007][ T5785] Workqueue: hci0 hci_rx_work [ 114.244740][ T5785] Call Trace: [ 114.248053][ T5785] [ 114.251109][ T5785] dump_stack_lvl+0x18c/0x250 [ 114.255891][ T5785] ? show_regs_print_info+0x20/0x20 [ 114.261134][ T5785] ? load_image+0x420/0x420 [ 114.265713][ T5785] sysfs_create_dir_ns+0x26e/0x2a0 [ 114.270985][ T5785] ? sysfs_warn_dup+0xa0/0xa0 [ 114.275788][ T5785] ? do_raw_spin_unlock+0x121/0x230 [ 114.281030][ T5785] kobject_add_internal+0x61c/0xcc0 [ 114.286277][ T5785] kobject_add+0x164/0x240 [ 114.290993][ T5785] ? __rwlock_init+0x150/0x150 [ 114.295806][ T5785] ? kobject_init+0x1e0/0x1e0 [ 114.300706][ T5785] ? _raw_spin_unlock+0x28/0x40 [ 114.305613][ T5785] ? get_device_parent+0x366/0x390 [ 114.310774][ T5785] device_add+0x408/0xc50 [ 114.315159][ T5785] hci_conn_add_sysfs+0xd5/0x1e0 [ 114.320143][ T5785] le_conn_complete_evt+0xf5d/0x1540 [ 114.325494][ T5785] ? hci_event_packet+0x4cb/0x1270 [ 114.330679][ T5785] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 114.336974][ T5785] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 114.342727][ T5785] ? skb_pull_data+0xfb/0x200 [ 114.347662][ T5785] hci_le_conn_complete_evt+0x187/0x440 [ 114.353362][ T5785] ? hci_remote_host_features_evt+0x150/0x150 [ 114.359738][ T5785] hci_event_packet+0x7ba/0x1270 [ 114.364728][ T5785] ? bis_list+0x290/0x290 [ 114.369189][ T5785] ? lockdep_hardirqs_on+0x98/0x150 [ 114.374437][ T5785] ? hci_send_to_monitor+0xd7/0x4f0 [ 114.379679][ T5785] hci_rx_work+0x43a/0xd60 [ 114.384149][ T5785] ? process_scheduled_works+0x96f/0x15d0 [ 114.390079][ T5785] process_scheduled_works+0xa5d/0x15d0 [ 114.395790][ T5785] ? worker_attach_to_pool+0x380/0x380 [ 114.401386][ T5785] ? assign_work+0x3d2/0x5d0 [ 114.406217][ T5785] worker_thread+0xa55/0xfc0 [ 114.410901][ T5785] kthread+0x2fa/0x390 [ 114.415156][ T5785] ? pr_cont_work+0x560/0x560 [ 114.419873][ T5785] ? kthread_blkcg+0xd0/0xd0 [ 114.424596][ T5785] ret_from_fork+0x48/0x80 [ 114.429074][ T5785] ? kthread_blkcg+0xd0/0xd0 [ 114.433702][ T5785] ret_from_fork_asm+0x11/0x20 [ 114.438530][ T5785] [ 114.494319][ T5785] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 114.509410][ T5785] Bluetooth: hci0: failed to register connection device [ 115.355369][ T5778] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 115.368409][ T5778] CPU: 0 PID: 5778 Comm: kworker/u5:2 Not tainted syzkaller #0 [ 115.376016][ T5778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 115.386199][ T5778] Workqueue: hci1 hci_rx_work [ 115.391189][ T5778] Call Trace: [ 115.394592][ T5778] [ 115.397556][ T5778] dump_stack_lvl+0x18c/0x250 [ 115.402282][ T5778] ? show_regs_print_info+0x20/0x20 [ 115.408086][ T5778] ? load_image+0x420/0x420 [ 115.412749][ T5778] sysfs_create_dir_ns+0x26e/0x2a0 [ 115.417907][ T5778] ? sysfs_warn_dup+0xa0/0xa0 [ 115.422720][ T5778] ? do_raw_spin_unlock+0x121/0x230 [ 115.427968][ T5778] kobject_add_internal+0x61c/0xcc0 [ 115.433226][ T5778] kobject_add+0x164/0x240 [ 115.437976][ T5778] ? kobject_init+0x1e0/0x1e0 [ 115.442781][ T5778] ? _raw_spin_unlock+0x3a/0x40 [ 115.447673][ T5778] ? get_device_parent+0x366/0x390 [ 115.452840][ T5778] device_add+0x408/0xc50 [ 115.468250][ T5778] hci_conn_add_sysfs+0xd5/0x1e0 [ 115.473323][ T5778] le_conn_complete_evt+0xf5d/0x1540 [ 115.478656][ T5778] ? hci_event_packet+0x4cb/0x1270 [ 115.483839][ T5778] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 115.490307][ T5778] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 115.495981][ T5778] ? skb_pull_data+0xfb/0x200 [ 115.501113][ T5778] hci_le_conn_complete_evt+0x187/0x440 [ 115.506968][ T5778] ? hci_remote_host_features_evt+0x150/0x150 [ 115.513261][ T5778] hci_event_packet+0x7ba/0x1270 [ 115.518342][ T5778] ? bis_list+0x290/0x290 [ 115.522731][ T5778] ? kcov_remote_start+0x2b/0x7e0 [ 115.528144][ T5778] ? hci_send_to_monitor+0xd7/0x4f0 [ 115.533560][ T5778] hci_rx_work+0x43a/0xd60 [ 115.538223][ T5778] ? process_scheduled_works+0x96f/0x15d0 [ 115.544006][ T5778] process_scheduled_works+0xa5d/0x15d0 [ 115.549646][ T5778] ? worker_attach_to_pool+0x380/0x380 [ 115.555157][ T5778] ? assign_work+0x3d2/0x5d0 [ 115.560059][ T5778] worker_thread+0xa55/0xfc0 [ 115.564693][ T5778] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 115.570632][ T5778] ? _raw_spin_unlock+0x40/0x40 [ 115.575526][ T5778] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 115.581578][ T5778] kthread+0x2fa/0x390 [ 115.585685][ T5778] ? pr_cont_work+0x560/0x560 [ 115.590409][ T5778] ? kthread_blkcg+0xd0/0xd0 [ 115.595212][ T5778] ret_from_fork+0x48/0x80 [ 115.599844][ T5778] ? kthread_blkcg+0xd0/0xd0 [ 115.604846][ T5778] ret_from_fork_asm+0x11/0x20 [ 115.610103][ T5778] [ 115.637722][ T5778] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 115.652344][ T5778] Bluetooth: hci1: failed to register connection device [ 116.306326][ T6043] siw: device registration error -23 [ 117.295462][ T5785] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 119.799097][ T6059] siw: device registration error -23 [ 119.867381][ T5778] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 120.546200][ T6061] loop2: detected capacity change from 0 to 128 [ 120.934298][ T6061] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 121.339338][ T5778] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 121.410284][ T5778] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 121.426674][ T6061] ext4 filesystem being mounted at /14/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 121.907732][ T5780] Bluetooth: hci1: command 0x0406 tx timeout [ 122.068627][ T6061] fscrypt: Error allocating hmac(sha512): -2 [ 122.468309][ T6079] syzkaller0: entered promiscuous mode [ 122.503813][ T6079] syzkaller0: entered allmulticast mode [ 122.582598][ T6092] TC_ACT_REPEAT abuse ? [ 122.721498][ T5776] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 124.223553][ T28] audit: type=1326 audit(1779698423.426:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6099 comm="syz.1.62" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4caf99ce59 code=0x0 [ 126.951459][ T6113] siw: device registration error -23 [ 130.275358][ T5778] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 130.775862][ T6134] loop3: detected capacity change from 0 to 128 [ 131.112691][ T6134] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 131.292309][ T6134] ext4 filesystem being mounted at /17/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 131.736533][ T6134] fscrypt: Error allocating hmac(sha512): -2 [ 131.922378][ T5773] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 133.240621][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.252114][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 139.589716][ T6168] siw: device registration error -23 [ 144.736483][ T6205] netlink: 24 bytes leftover after parsing attributes in process `syz.1.84'. [ 148.903948][ T6243] siw: device registration error -23 [ 151.668533][ T6258] siw: device registration error -23 [ 153.225529][ T6270] siw: device registration error -23 [ 155.326632][ T6279] siw: device registration error -23 [ 156.812609][ T6290] siw: device registration error -23 [ 158.481551][ T5778] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 162.432579][ T6328] siw: device registration error -23 [ 165.069691][ T6337] siw: device registration error -23 [ 166.303509][ T5778] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 168.249935][ T6360] siw: device registration error -23 [ 169.069389][ T6362] siw: device registration error -23 [ 170.633782][ T6375] siw: device registration error -23 [ 171.676411][ T5780] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 173.763371][ T5780] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 179.872701][ T6446] siw: device registration error -23 [ 180.913746][ T6453] siw: device registration error -23 [ 182.278547][ T5778] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 184.043820][ T6472] siw: device registration error -23 [ 185.612715][ T6480] siw: device registration error -23 [ 185.793207][ T5780] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 186.959831][ T6489] siw: device registration error -23 [ 193.933844][ T5778] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 194.574356][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.581070][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 197.065771][ T6555] siw: device registration error -23 [ 199.001810][ T6571] siw: device registration error -23 [ 201.862140][ T5782] Bluetooth: hci2: command 0x0406 tx timeout [ 201.868383][ T5085] Bluetooth: hci0: command 0x0406 tx timeout [ 201.874538][ T5085] Bluetooth: hci3: command 0x0406 tx timeout [ 201.880863][ T5085] Bluetooth: hci1: command 0x0406 tx timeout [ 202.113031][ T51] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 204.081628][ T6599] siw: device registration error -23 [ 204.882182][ T6606] siw: device registration error -23 [ 205.684258][ T6609] siw: device registration error -23 [ 210.745296][ T6644] siw: device registration error -23 [ 212.593748][ T6654] siw: device registration error -23 [ 214.501986][ T51] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 214.513341][ T51] CPU: 1 PID: 51 Comm: kworker/u5:0 Not tainted syzkaller #0 [ 214.521205][ T51] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 214.532592][ T51] Workqueue: hci1 hci_rx_work [ 214.537685][ T51] Call Trace: [ 214.541294][ T51] [ 214.544633][ T51] dump_stack_lvl+0x18c/0x250 [ 214.549408][ T51] ? show_regs_print_info+0x20/0x20 [ 214.555284][ T51] ? load_image+0x420/0x420 [ 214.560119][ T51] sysfs_create_dir_ns+0x26e/0x2a0 [ 214.565903][ T51] ? sysfs_warn_dup+0xa0/0xa0 [ 214.570811][ T51] ? do_raw_spin_unlock+0x121/0x230 [ 214.576352][ T51] kobject_add_internal+0x61c/0xcc0 [ 214.582250][ T51] kobject_add+0x164/0x240 [ 214.587081][ T51] ? __rwlock_init+0x150/0x150 [ 214.592452][ T51] ? kobject_init+0x1e0/0x1e0 [ 214.597691][ T51] ? _raw_spin_unlock+0x28/0x40 [ 214.602886][ T51] ? get_device_parent+0x366/0x390 [ 214.608182][ T51] device_add+0x408/0xc50 [ 214.613750][ T51] hci_conn_add_sysfs+0xd5/0x1e0 [ 214.619017][ T51] le_conn_complete_evt+0xf5d/0x1540 [ 214.624539][ T51] ? hci_event_packet+0x4cb/0x1270 [ 214.630055][ T51] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 214.636865][ T51] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 214.643010][ T51] ? skb_pull_data+0xfb/0x200 [ 214.648278][ T51] hci_le_conn_complete_evt+0x187/0x440 [ 214.653956][ T51] ? hci_remote_host_features_evt+0x150/0x150 [ 214.660443][ T51] hci_event_packet+0x7ba/0x1270 [ 214.666741][ T51] ? bis_list+0x290/0x290 [ 214.671198][ T51] ? lockdep_hardirqs_on+0x98/0x150 [ 214.676590][ T51] ? hci_send_to_monitor+0xd7/0x4f0 [ 214.682124][ T51] hci_rx_work+0x43a/0xd60 [ 214.686948][ T51] ? process_scheduled_works+0x96f/0x15d0 [ 214.692894][ T51] process_scheduled_works+0xa5d/0x15d0 [ 214.699051][ T51] ? worker_attach_to_pool+0x380/0x380 [ 214.704836][ T51] ? assign_work+0x3d2/0x5d0 [ 214.709895][ T51] worker_thread+0xa55/0xfc0 [ 214.715034][ T51] kthread+0x2fa/0x390 [ 214.719390][ T51] ? pr_cont_work+0x560/0x560 [ 214.724747][ T51] ? kthread_blkcg+0xd0/0xd0 [ 214.731694][ T51] ret_from_fork+0x48/0x80 [ 214.736697][ T51] ? kthread_blkcg+0xd0/0xd0 [ 214.741916][ T51] ret_from_fork_asm+0x11/0x20 [ 214.748624][ T51] [ 214.753247][ C1] vkms_vblank_simulate: vblank timer overrun [ 214.822529][ T51] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 214.838687][ T51] Bluetooth: hci1: failed to register connection device [ 216.852629][ T5778] Bluetooth: hci1: command 0x0406 tx timeout [ 217.863226][ T6697] siw: device registration error -23 [ 218.464170][ T5778] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 218.728306][ T5778] CPU: 1 PID: 5778 Comm: kworker/u5:2 Not tainted syzkaller #0 [ 218.735962][ T5778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 218.746667][ T5778] Workqueue: hci1 hci_rx_work [ 218.751495][ T5778] Call Trace: [ 218.754931][ T5778] [ 218.758225][ T5778] dump_stack_lvl+0x18c/0x250 [ 218.763307][ T5778] ? show_regs_print_info+0x20/0x20 [ 218.768629][ T5778] ? load_image+0x420/0x420 [ 218.773197][ T5778] sysfs_create_dir_ns+0x26e/0x2a0 [ 218.778627][ T5778] ? sysfs_warn_dup+0xa0/0xa0 [ 218.783440][ T5778] ? do_raw_spin_unlock+0x121/0x230 [ 218.788775][ T5778] kobject_add_internal+0x61c/0xcc0 [ 218.794114][ T5778] kobject_add+0x164/0x240 [ 218.798574][ T5778] ? __rwlock_init+0x150/0x150 [ 218.803476][ T5778] ? kobject_init+0x1e0/0x1e0 [ 218.808685][ T5778] ? _raw_spin_unlock+0x28/0x40 [ 218.813671][ T5778] ? get_device_parent+0x366/0x390 [ 218.818926][ T5778] device_add+0x408/0xc50 [ 218.823389][ T5778] hci_conn_add_sysfs+0xd5/0x1e0 [ 218.828488][ T5778] le_conn_complete_evt+0xf5d/0x1540 [ 218.833982][ T5778] ? hci_event_packet+0x4cb/0x1270 [ 218.839670][ T5778] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 218.845950][ T5778] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 218.851799][ T5778] ? skb_pull_data+0xfb/0x200 [ 218.856781][ T5778] hci_le_conn_complete_evt+0x187/0x440 [ 218.862472][ T5778] ? hci_remote_host_features_evt+0x150/0x150 [ 218.868581][ T5778] hci_event_packet+0x7ba/0x1270 [ 218.873745][ T5778] ? bis_list+0x290/0x290 [ 218.878311][ T5778] ? lockdep_hardirqs_on+0x98/0x150 [ 218.883724][ T5778] ? hci_send_to_monitor+0xd7/0x4f0 [ 218.889091][ T5778] hci_rx_work+0x43a/0xd60 [ 218.893555][ T5778] ? process_scheduled_works+0x96f/0x15d0 [ 218.899326][ T5778] process_scheduled_works+0xa5d/0x15d0 [ 218.905121][ T5778] ? worker_attach_to_pool+0x380/0x380 [ 218.910806][ T5778] ? assign_work+0x3d2/0x5d0 [ 218.915624][ T5778] worker_thread+0xa55/0xfc0 [ 218.920436][ T5778] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 218.926457][ T5778] ? _raw_spin_unlock+0x40/0x40 [ 218.931442][ T5778] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 218.937495][ T5778] kthread+0x2fa/0x390 [ 218.941692][ T5778] ? pr_cont_work+0x560/0x560 [ 218.946590][ T5778] ? kthread_blkcg+0xd0/0xd0 [ 218.951491][ T5778] ret_from_fork+0x48/0x80 [ 218.955957][ T5778] ? kthread_blkcg+0xd0/0xd0 [ 218.960776][ T5778] ret_from_fork_asm+0x11/0x20 [ 218.965633][ T5778] [ 218.968926][ C1] vkms_vblank_simulate: vblank timer overrun [ 218.984811][ T5778] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 219.002280][ T5778] Bluetooth: hci1: failed to register connection device [ 220.269877][ T6713] siw: device registration error -23 [ 221.493178][ T5778] Bluetooth: hci1: command 0x0406 tx timeout [ 224.490753][ T6747] siw: device registration error -23 [ 225.516916][ T5778] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 225.527131][ T5778] CPU: 1 PID: 5778 Comm: kworker/u5:2 Not tainted syzkaller #0 [ 225.534802][ T5778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 225.545067][ T5778] Workqueue: hci0 hci_rx_work [ 225.549798][ T5778] Call Trace: [ 225.553109][ T5778] [ 225.556106][ T5778] dump_stack_lvl+0x18c/0x250 [ 225.560863][ T5778] ? show_regs_print_info+0x20/0x20 [ 225.566290][ T5778] ? load_image+0x420/0x420 [ 225.570947][ T5778] sysfs_create_dir_ns+0x26e/0x2a0 [ 225.576110][ T5778] ? sysfs_warn_dup+0xa0/0xa0 [ 225.581172][ T5778] ? do_raw_spin_unlock+0x121/0x230 [ 225.586430][ T5778] kobject_add_internal+0x61c/0xcc0 [ 225.591680][ T5778] kobject_add+0x164/0x240 [ 225.596231][ T5778] ? kobject_init+0x1e0/0x1e0 [ 225.601762][ T5778] ? _raw_spin_unlock+0x3a/0x40 [ 225.606863][ T5778] ? get_device_parent+0x366/0x390 [ 225.612473][ T5778] device_add+0x408/0xc50 [ 225.617036][ T5778] hci_conn_add_sysfs+0xd5/0x1e0 [ 225.622156][ T5778] le_conn_complete_evt+0xf5d/0x1540 [ 225.627585][ T5778] ? hci_event_packet+0x4cb/0x1270 [ 225.632843][ T5778] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 225.639214][ T5778] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 225.644990][ T5778] ? skb_pull_data+0xfb/0x200 [ 225.649712][ T5778] hci_le_conn_complete_evt+0x187/0x440 [ 225.655567][ T5778] ? hci_remote_host_features_evt+0x150/0x150 [ 225.661679][ T5778] hci_event_packet+0x7ba/0x1270 [ 225.666774][ T5778] ? bis_list+0x290/0x290 [ 225.671612][ T5778] ? kcov_remote_start+0x2b/0x7e0 [ 225.677251][ T5778] ? hci_send_to_monitor+0xd7/0x4f0 [ 225.682604][ T5778] hci_rx_work+0x43a/0xd60 [ 225.687099][ T5778] ? process_scheduled_works+0x96f/0x15d0 [ 225.693133][ T5778] process_scheduled_works+0xa5d/0x15d0 [ 225.698882][ T5778] ? worker_attach_to_pool+0x380/0x380 [ 225.704834][ T5778] ? assign_work+0x3d2/0x5d0 [ 225.709575][ T5778] worker_thread+0xa55/0xfc0 [ 225.714467][ T5778] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 225.720663][ T5778] ? _raw_spin_unlock+0x40/0x40 [ 225.725635][ T5778] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 225.731625][ T5778] kthread+0x2fa/0x390 [ 225.735906][ T5778] ? pr_cont_work+0x560/0x560 [ 225.740621][ T5778] ? kthread_blkcg+0xd0/0xd0 [ 225.745339][ T5778] ret_from_fork+0x48/0x80 [ 225.750005][ T5778] ? kthread_blkcg+0xd0/0xd0 [ 225.754808][ T5778] ret_from_fork_asm+0x11/0x20 [ 225.759634][ T5778] [ 225.782457][ T5778] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 225.796993][ T5778] Bluetooth: hci0: failed to register connection device [ 226.431952][ T6761] syzkaller0: entered promiscuous mode [ 226.468524][ T6761] syzkaller0: entered allmulticast mode [ 227.560897][ T6767] siw: device registration error -23 [ 227.853527][ T5778] Bluetooth: hci0: command 0x0406 tx timeout [ 230.083927][ T5778] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 230.094409][ T5778] CPU: 0 PID: 5778 Comm: kworker/u5:2 Not tainted syzkaller #0 [ 230.102370][ T5778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 230.112823][ T5778] Workqueue: hci0 hci_rx_work [ 230.117564][ T5778] Call Trace: [ 230.120880][ T5778] [ 230.124029][ T5778] dump_stack_lvl+0x18c/0x250 [ 230.128768][ T5778] ? show_regs_print_info+0x20/0x20 [ 230.134163][ T5778] ? load_image+0x420/0x420 [ 230.138753][ T5778] sysfs_create_dir_ns+0x26e/0x2a0 [ 230.143922][ T5778] ? sysfs_warn_dup+0xa0/0xa0 [ 230.148750][ T5778] ? do_raw_spin_unlock+0x121/0x230 [ 230.154103][ T5778] kobject_add_internal+0x61c/0xcc0 [ 230.159454][ T5778] kobject_add+0x164/0x240 [ 230.163929][ T5778] ? __rwlock_init+0x150/0x150 [ 230.168844][ T5778] ? kobject_init+0x1e0/0x1e0 [ 230.173582][ T5778] ? _raw_spin_unlock+0x28/0x40 [ 230.178482][ T5778] ? get_device_parent+0x366/0x390 [ 230.183798][ T5778] device_add+0x408/0xc50 [ 230.188248][ T5778] hci_conn_add_sysfs+0xd5/0x1e0 [ 230.193513][ T5778] le_conn_complete_evt+0xf5d/0x1540 [ 230.199104][ T5778] ? hci_event_packet+0x4cb/0x1270 [ 230.204388][ T5778] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 230.210660][ T5778] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 230.216408][ T5778] ? skb_pull_data+0xfb/0x200 [ 230.221283][ T5778] hci_le_conn_complete_evt+0x187/0x440 [ 230.226964][ T5778] ? hci_remote_host_features_evt+0x150/0x150 [ 230.233225][ T5778] hci_event_packet+0x7ba/0x1270 [ 230.238193][ T5778] ? bis_list+0x290/0x290 [ 230.242549][ T5778] ? lockdep_hardirqs_on+0x98/0x150 [ 230.247859][ T5778] ? hci_send_to_monitor+0xd7/0x4f0 [ 230.253596][ T5778] hci_rx_work+0x43a/0xd60 [ 230.258156][ T5778] ? process_scheduled_works+0x96f/0x15d0 [ 230.264264][ T5778] process_scheduled_works+0xa5d/0x15d0 [ 230.270033][ T5778] ? worker_attach_to_pool+0x380/0x380 [ 230.275616][ T5778] ? assign_work+0x3d2/0x5d0 [ 230.280318][ T5778] worker_thread+0xa55/0xfc0 [ 230.284932][ T5778] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 230.291108][ T5778] ? _raw_spin_unlock+0x40/0x40 [ 230.295980][ T5778] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 230.301925][ T5778] kthread+0x2fa/0x390 [ 230.306276][ T5778] ? pr_cont_work+0x560/0x560 [ 230.311412][ T5778] ? kthread_blkcg+0xd0/0xd0 [ 230.316105][ T5778] ret_from_fork+0x48/0x80 [ 230.320632][ T5778] ? kthread_blkcg+0xd0/0xd0 [ 230.325771][ T5778] ret_from_fork_asm+0x11/0x20 [ 230.330753][ T5778] [ 230.337030][ T5778] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 230.351279][ T5778] Bluetooth: hci0: failed to register connection device [ 231.514549][ T6794] siw: device registration error -23 [ 232.383859][ T5778] Bluetooth: hci0: command 0x0406 tx timeout [ 234.761240][ T6815] syzkaller0: entered promiscuous mode [ 234.767254][ T6815] syzkaller0: entered allmulticast mode [ 236.443803][ T6836] siw: device registration error -23 [ 237.269567][ T6837] siw: device registration error -23 [ 239.160763][ T6849] netlink: 24 bytes leftover after parsing attributes in process `syz.1.254'. [ 239.818919][ T5778] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 239.828924][ T5778] CPU: 1 PID: 5778 Comm: kworker/u5:2 Not tainted syzkaller #0 [ 239.836687][ T5778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 239.847126][ T5778] Workqueue: hci3 hci_rx_work [ 239.852302][ T5778] Call Trace: [ 239.855810][ T5778] [ 239.858783][ T5778] dump_stack_lvl+0x18c/0x250 [ 239.863611][ T5778] ? show_regs_print_info+0x20/0x20 [ 239.868939][ T5778] ? load_image+0x420/0x420 [ 239.873509][ T5778] sysfs_create_dir_ns+0x26e/0x2a0 [ 239.878753][ T5778] ? sysfs_warn_dup+0xa0/0xa0 [ 239.884000][ T5778] ? do_raw_spin_unlock+0x121/0x230 [ 239.889248][ T5778] kobject_add_internal+0x61c/0xcc0 [ 239.894646][ T5778] kobject_add+0x164/0x240 [ 239.899200][ T5778] ? kobject_init+0x1e0/0x1e0 [ 239.904176][ T5778] ? _raw_spin_unlock+0x3a/0x40 [ 239.909420][ T5778] ? get_device_parent+0x366/0x390 [ 239.914932][ T5778] device_add+0x408/0xc50 [ 239.919412][ T5778] hci_conn_add_sysfs+0xd5/0x1e0 [ 239.924495][ T5778] le_conn_complete_evt+0xf5d/0x1540 [ 239.930183][ T5778] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 239.936535][ T5778] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 239.942561][ T5778] ? lockdep_hardirqs_on+0x98/0x150 [ 239.947895][ T5778] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 239.953748][ T5778] ? hci_remote_host_features_evt+0x150/0x150 [ 239.959883][ T5778] hci_le_conn_complete_evt+0x187/0x440 [ 239.965577][ T5778] ? hci_remote_host_features_evt+0x150/0x150 [ 239.971956][ T5778] hci_event_packet+0x7ba/0x1270 [ 239.977294][ T5778] ? bis_list+0x290/0x290 [ 239.981858][ T5778] ? kcov_remote_start+0x2b/0x7e0 [ 239.987093][ T5778] ? hci_send_to_monitor+0xd7/0x4f0 [ 239.992614][ T5778] hci_rx_work+0x43a/0xd60 [ 239.997168][ T5778] ? process_scheduled_works+0x96f/0x15d0 [ 240.002918][ T5778] process_scheduled_works+0xa5d/0x15d0 [ 240.008639][ T5778] ? worker_attach_to_pool+0x380/0x380 [ 240.014155][ T5778] ? assign_work+0x3d2/0x5d0 [ 240.018781][ T5778] worker_thread+0xa55/0xfc0 [ 240.023657][ T5778] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 240.029565][ T5778] ? _raw_spin_unlock+0x40/0x40 [ 240.034452][ T5778] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 240.040644][ T5778] kthread+0x2fa/0x390 [ 240.044725][ T5778] ? pr_cont_work+0x560/0x560 [ 240.049453][ T5778] ? kthread_blkcg+0xd0/0xd0 [ 240.054087][ T5778] ret_from_fork+0x48/0x80 [ 240.058618][ T5778] ? kthread_blkcg+0xd0/0xd0 [ 240.063501][ T5778] ret_from_fork_asm+0x11/0x20 [ 240.068834][ T5778] [ 240.217682][ T5778] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 240.233272][ T5778] Bluetooth: hci3: failed to register connection device [ 240.709034][ T6867] netlink: 24 bytes leftover after parsing attributes in process `syz.3.257'. [ 241.498992][ T6875] siw: device registration error -23 [ 242.315733][ T5778] Bluetooth: hci3: command 0x0406 tx timeout [ 244.449070][ T6892] siw: device registration error -23 [ 245.271011][ T6902] siw: device registration error -23 [ 247.367965][ T5778] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 247.378754][ T5778] CPU: 0 PID: 5778 Comm: kworker/u5:2 Not tainted syzkaller #0 [ 247.386443][ T5778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 247.396753][ T5778] Workqueue: hci1 hci_rx_work [ 247.401553][ T5778] Call Trace: [ 247.404855][ T5778] [ 247.407895][ T5778] dump_stack_lvl+0x18c/0x250 [ 247.412700][ T5778] ? show_regs_print_info+0x20/0x20 [ 247.418004][ T5778] ? load_image+0x420/0x420 [ 247.422540][ T5778] sysfs_create_dir_ns+0x26e/0x2a0 [ 247.427843][ T5778] ? sysfs_warn_dup+0xa0/0xa0 [ 247.432636][ T5778] ? do_raw_spin_unlock+0x121/0x230 [ 247.438132][ T5778] kobject_add_internal+0x61c/0xcc0 [ 247.443621][ T5778] kobject_add+0x164/0x240 [ 247.448326][ T5778] ? __rwlock_init+0x150/0x150 [ 247.453113][ T5778] ? kobject_init+0x1e0/0x1e0 [ 247.457806][ T5778] ? _raw_spin_unlock+0x28/0x40 [ 247.462766][ T5778] ? get_device_parent+0x366/0x390 [ 247.467902][ T5778] device_add+0x408/0xc50 [ 247.472717][ T5778] hci_conn_add_sysfs+0xd5/0x1e0 [ 247.477865][ T5778] le_conn_complete_evt+0xf5d/0x1540 [ 247.483434][ T5778] ? hci_event_packet+0x4cb/0x1270 [ 247.488598][ T5778] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 247.495129][ T5778] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 247.500867][ T5778] ? skb_pull_data+0xfb/0x200 [ 247.505571][ T5778] hci_le_conn_complete_evt+0x187/0x440 [ 247.511186][ T5778] ? hci_remote_host_features_evt+0x150/0x150 [ 247.517298][ T5778] hci_event_packet+0x7ba/0x1270 [ 247.522554][ T5778] ? bis_list+0x290/0x290 [ 247.527492][ T5778] ? lockdep_hardirqs_on+0x98/0x150 [ 247.533001][ T5778] ? hci_send_to_monitor+0xd7/0x4f0 [ 247.538333][ T5778] hci_rx_work+0x43a/0xd60 [ 247.543055][ T5778] ? process_scheduled_works+0x96f/0x15d0 [ 247.548987][ T5778] process_scheduled_works+0xa5d/0x15d0 [ 247.554604][ T5778] ? worker_attach_to_pool+0x380/0x380 [ 247.560087][ T5778] ? assign_work+0x3d2/0x5d0 [ 247.565122][ T5778] worker_thread+0xa55/0xfc0 [ 247.569733][ T5778] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 247.576096][ T5778] ? _raw_spin_unlock+0x40/0x40 [ 247.581316][ T5778] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 247.587471][ T5778] kthread+0x2fa/0x390 [ 247.591577][ T5778] ? pr_cont_work+0x560/0x560 [ 247.596746][ T5778] ? kthread_blkcg+0xd0/0xd0 [ 247.601458][ T5778] ret_from_fork+0x48/0x80 [ 247.606814][ T5778] ? kthread_blkcg+0xd0/0xd0 [ 247.611720][ T5778] ret_from_fork_asm+0x11/0x20 [ 247.617591][ T5778] [ 247.621752][ T5778] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 247.636148][ T5778] Bluetooth: hci1: failed to register connection device [ 249.071790][ T6928] siw: device registration error -23 [ 249.843261][ T5778] Bluetooth: hci1: command 0x0406 tx timeout [ 250.352654][ T6938] siw: device registration error -23 [ 252.790447][ T6951] siw: device registration error -23 [ 253.314562][ T6948] syzkaller0: entered promiscuous mode [ 253.347868][ T6948] syzkaller0: entered allmulticast mode [ 253.380395][ T6953] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 253.458430][ T6953] sch_tbf: burst 12 is lower than device lo mtu (65550) ! [ 254.342719][ T5778] Bluetooth: hci1: Invalid handle: 0x20c9 > 0x0eff [ 254.445532][ T6964] siw: device registration error -23 [ 256.444311][ T6973] siw: device registration error -23 [ 256.522978][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.530887][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 259.318684][ T6998] siw: device registration error -23 [ 261.544795][ T7011] loop0: detected capacity change from 0 to 512 [ 261.597575][ T7011] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 261.773364][ T51] Bluetooth: hci1: Invalid handle: 0x20c9 > 0x0eff [ 262.396424][ T7011] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.292: invalid indirect mapped block 4294967295 (level 1) [ 263.266823][ T7011] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.292: invalid indirect mapped block 4294967295 (level 1) [ 263.309034][ T7011] EXT4-fs (loop0): 2 truncates cleaned up [ 263.337079][ T7011] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 264.512630][ T7038] siw: device registration error -23 [ 264.838551][ T5774] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.436820][ T7048] siw: device registration error -23 [ 265.880373][ T7045] syzkaller0: entered promiscuous mode [ 266.068877][ T7045] syzkaller0: entered allmulticast mode [ 266.763475][ T7056] siw: device registration error -23 [ 267.453599][ T5778] Bluetooth: hci2: Invalid handle: 0x20c9 > 0x0eff [ 268.827001][ T7066] siw: device registration error -23 [ 269.869651][ T7070] loop0: detected capacity change from 0 to 512 [ 269.977837][ T7070] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 270.103274][ T7070] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.306: invalid indirect mapped block 4294967295 (level 1) [ 270.360556][ T7070] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.306: invalid indirect mapped block 4294967295 (level 1) [ 270.660907][ T7070] EXT4-fs (loop0): 2 truncates cleaned up [ 270.711240][ T7070] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 272.212706][ T7083] siw: device registration error -23 [ 272.673475][ T5774] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 274.167019][ T5778] Bluetooth: hci0: Invalid handle: 0x20c9 > 0x0eff [ 275.184731][ T7099] syzkaller0: entered promiscuous mode [ 275.216971][ T7099] syzkaller0: entered allmulticast mode [ 275.258868][ T7101] siw: device registration error -23 [ 276.197702][ T7104] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 276.211936][ T7099] syz.3.313 (7099) used greatest stack depth: 20848 bytes left [ 276.311746][ T7105] siw: device registration error -23 [ 276.326228][ T7108] sch_tbf: burst 12 is lower than device lo mtu (65550) ! [ 277.689684][ T7118] loop2: detected capacity change from 0 to 512 [ 277.724354][ T7118] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 277.850162][ T7118] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.318: invalid indirect mapped block 4294967295 (level 1) [ 277.889785][ T7118] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.318: invalid indirect mapped block 4294967295 (level 1) [ 277.921089][ T7118] EXT4-fs (loop2): 2 truncates cleaned up [ 278.009377][ T7118] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 278.900491][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.349877][ T51] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 280.254462][ T7134] siw: device registration error -23 [ 281.009216][ T5778] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 281.311995][ T7141] syzkaller0: entered promiscuous mode [ 281.318048][ T7141] syzkaller0: entered allmulticast mode [ 281.387428][ T7142] siw: device registration error -23 [ 283.401217][ T7150] syzkaller0: entered promiscuous mode [ 283.475053][ T7150] syzkaller0: entered allmulticast mode [ 284.007452][ T7162] loop3: detected capacity change from 0 to 512 [ 284.040502][ T7162] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 284.128928][ T7162] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.328: invalid indirect mapped block 4294967295 (level 1) [ 284.220743][ T7162] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.328: invalid indirect mapped block 4294967295 (level 1) [ 284.286310][ T7162] EXT4-fs (loop3): 2 truncates cleaned up [ 284.295098][ T7162] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 284.747007][ T7170] siw: device registration error -23 [ 285.639034][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.482009][ T7182] syzkaller0: entered promiscuous mode [ 288.499561][ T7182] syzkaller0: entered allmulticast mode [ 288.776763][ T7193] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 288.878435][ T7193] sch_tbf: burst 12 is lower than device lo mtu (65550) ! [ 289.812984][ T7208] siw: device registration error -23 [ 289.872603][ T51] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 290.386676][ T7211] loop3: detected capacity change from 0 to 512 [ 290.408127][ T7212] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 290.452880][ T7211] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 290.537732][ T7212] sch_tbf: burst 12 is lower than device lo mtu (65550) ! [ 290.593455][ T7211] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.338: invalid indirect mapped block 4294967295 (level 1) [ 290.659566][ T7211] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.338: invalid indirect mapped block 4294967295 (level 1) [ 290.696439][ T7211] EXT4-fs (loop3): 2 truncates cleaned up [ 290.712892][ T7211] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 291.356465][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.656399][ T7225] syzkaller0: entered promiscuous mode [ 291.678218][ T7225] syzkaller0: entered allmulticast mode [ 292.422440][ T7235] siw: device registration error -23 [ 293.275650][ T7237] syzkaller0: entered promiscuous mode [ 293.296199][ T7237] syzkaller0: entered allmulticast mode [ 293.442977][ T7239] syzkaller0: entered promiscuous mode [ 293.460325][ T7239] syzkaller0: entered allmulticast mode [ 294.678319][ T7251] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 294.811186][ T7253] siw: device registration error -23 [ 295.705195][ T7256] loop3: detected capacity change from 0 to 512 [ 295.760501][ T7256] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 295.807333][ T7259] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 295.839060][ T7256] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.350: invalid indirect mapped block 4294967295 (level 1) [ 295.852887][ T7259] sch_tbf: burst 12 is lower than device lo mtu (65550) ! [ 295.861093][ T7256] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.350: invalid indirect mapped block 4294967295 (level 1) [ 295.881968][ T7256] EXT4-fs (loop3): 2 truncates cleaned up [ 295.889473][ T7256] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 296.023008][ T7260] netlink: 68 bytes leftover after parsing attributes in process `syz.1.347'. [ 296.900488][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.487542][ T7278] sch_tbf: burst 12 is lower than device lo mtu (65550) ! [ 300.525195][ T7309] siw: device registration error -23 [ 301.630592][ T7311] loop2: detected capacity change from 0 to 512 [ 301.739240][ T7311] EXT4-fs error (device loop2): ext4_quota_enable:7144: comm syz.2.362: inode #100663296: comm syz.2.362: iget: illegal inode # [ 301.795677][ T7317] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 301.805615][ T7311] EXT4-fs error (device loop2): ext4_quota_enable:7147: comm syz.2.362: Bad quota inode: 100663296, type: 2 [ 301.852147][ T7311] EXT4-fs warning (device loop2): ext4_enable_quotas:7188: Failed to enable quota tracking (type=2, err=-117, ino=100663296). Please run e2fsck to fix. [ 301.943879][ T7311] EXT4-fs (loop2): mount failed [ 303.077104][ T7323] loop3: detected capacity change from 0 to 512 [ 303.090090][ T7311] syz.2.362 uses obsolete (PF_INET,SOCK_PACKET) [ 303.097472][ T7323] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 303.147988][ T7323] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.364: invalid indirect mapped block 4294967295 (level 1) [ 303.188464][ T7323] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.364: invalid indirect mapped block 4294967295 (level 1) [ 303.220099][ T7323] EXT4-fs (loop3): 2 truncates cleaned up [ 303.233456][ T7323] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 304.299942][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 304.777535][ T7341] siw: device registration error -23 [ 304.855479][ T7340] syzkaller0: entered promiscuous mode [ 304.902400][ T7340] syzkaller0: entered allmulticast mode [ 306.442042][ T7351] siw: device registration error -23 [ 307.483496][ T7357] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 307.511179][ T7354] syzkaller0: entered promiscuous mode [ 307.541956][ T7354] syzkaller0: entered allmulticast mode [ 307.579141][ T7357] sch_tbf: burst 12 is lower than device lo mtu (65550) ! [ 308.103364][ T7367] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 308.136433][ T7367] sch_tbf: burst 12 is lower than device lo mtu (65550) ! [ 310.091475][ T7376] loop2: detected capacity change from 0 to 512 [ 310.126471][ T7376] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 310.168756][ T7377] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 310.184484][ T7376] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.377: invalid indirect mapped block 4294967295 (level 1) [ 310.268480][ T7376] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.377: invalid indirect mapped block 4294967295 (level 1) [ 310.316871][ T7376] EXT4-fs (loop2): 2 truncates cleaned up [ 310.325557][ T7376] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 311.308201][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 313.786224][ T7402] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 313.800196][ T7402] sch_tbf: burst 12 is lower than device lo mtu (65550) ! [ 314.436508][ T7406] netlink: 68 bytes leftover after parsing attributes in process `syz.3.382'. [ 316.499865][ T7423] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 316.647382][ T7425] sch_tbf: burst 12 is lower than device lo mtu (65550) ! [ 317.247960][ T7429] siw: device registration error -23 [ 317.419947][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.435051][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.610395][ T7448] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 319.675054][ T7448] sch_tbf: burst 12 is lower than device lo mtu (65550) ! [ 320.170086][ T7460] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 320.323210][ T7460] sch_tbf: burst 12 is lower than device lo mtu (65550) ! [ 321.453076][ T7470] siw: device registration error -23 [ 324.357241][ T7484] syzkaller0: entered promiscuous mode [ 324.399356][ T7484] syzkaller0: entered allmulticast mode [ 324.629786][ T7492] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 324.656075][ T7493] sch_tbf: burst 12 is lower than device lo mtu (65550) ! [ 324.922176][ T7500] sch_tbf: burst 12 is lower than device lo mtu (65550) ! [ 326.393061][ T7513] Bluetooth: MGMT ver 1.22 [ 326.428877][ T7513] loop1: detected capacity change from 0 to 256 [ 326.506788][ T6175] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 326.578928][ T7513] Invalid option length (190) for dns_resolver key [ 327.430335][ T7525] syzkaller0: entered promiscuous mode [ 327.436397][ T7525] syzkaller0: entered allmulticast mode [ 327.983987][ T7528] syzkaller0: entered promiscuous mode [ 328.021420][ T7528] syzkaller0: entered allmulticast mode [ 329.994094][ T7544] loop3: detected capacity change from 0 to 256 [ 330.174238][ T6175] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 330.243587][ T7544] Invalid option length (190) for dns_resolver key [ 330.930865][ T7553] syzkaller0: entered promiscuous mode [ 330.954852][ T7553] syzkaller0: entered allmulticast mode [ 331.352808][ T7557] siw: device registration error -23 [ 332.383453][ T7564] syzkaller0: entered promiscuous mode [ 332.389099][ T7564] syzkaller0: entered allmulticast mode [ 332.849877][ T7569] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 332.878556][ T7569] sch_tbf: burst 12 is lower than device lo mtu (65550) ! [ 335.225453][ T7587] siw: device registration error -23 [ 336.768776][ T7593] syzkaller0: entered promiscuous mode [ 336.787180][ T7593] syzkaller0: entered allmulticast mode [ 337.623001][ T7604] siw: device registration error -23 [ 340.701823][ T7628] siw: device registration error -23 [ 343.265001][ T7549] Set syz1 is full, maxelem 65536 reached [ 344.431625][ T7672] siw: device registration error -23 [ 349.178584][ T7718] siw: device registration error -23 [ 351.393361][ T7739] syzkaller0: entered promiscuous mode [ 351.399186][ T7739] syzkaller0: entered allmulticast mode [ 351.947337][ T7747] siw: device registration error -23 [ 355.412814][ T7765] sch_tbf: burst 12 is lower than device lo mtu (65550) ! [ 357.598816][ T7769] syzkaller0: entered promiscuous mode [ 357.622497][ T7769] syzkaller0: entered allmulticast mode [ 357.924948][ T7771] syzkaller0: entered promiscuous mode [ 357.943198][ T7771] syzkaller0: entered allmulticast mode [ 358.318434][ T7779] siw: device registration error -23 [ 359.434477][ T7783] loop3: detected capacity change from 0 to 512 [ 359.451203][ T7783] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 359.513899][ T7783] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.491: invalid indirect mapped block 4294967295 (level 1) [ 359.552285][ T7783] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.491: invalid indirect mapped block 4294967295 (level 1) [ 359.795016][ T7783] EXT4-fs (loop3): 2 truncates cleaned up [ 359.813942][ T7783] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 360.847146][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 361.917417][ T8] IPVS: starting estimator thread 0... [ 362.182562][ T7808] IPVS: using max 15 ests per chain, 36000 per kthread [ 362.467579][ T7813] syzkaller0: entered promiscuous mode [ 362.483352][ T7813] syzkaller0: entered allmulticast mode [ 363.065856][ T7819] syzkaller0: entered promiscuous mode [ 363.091898][ T7819] syzkaller0: entered allmulticast mode [ 363.439687][ T7823] sch_tbf: burst 12 is lower than device lo mtu (65550) ! [ 363.677469][ T7746] Set syz1 is full, maxelem 65536 reached [ 363.882848][ T7834] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 367.131316][ T7848] syzkaller0: entered promiscuous mode [ 367.323211][ T7848] syzkaller0: entered allmulticast mode [ 367.854324][ T7856] syzkaller0: entered promiscuous mode [ 367.859969][ T7856] syzkaller0: entered allmulticast mode [ 368.542516][ T5816] IPVS: starting estimator thread 0... [ 368.855141][ T7864] IPVS: using max 18 ests per chain, 43200 per kthread [ 368.873005][ T7872] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 370.652620][ T7882] syzkaller0: entered promiscuous mode [ 370.672431][ T7882] syzkaller0: entered allmulticast mode [ 375.214306][ T7926] syzkaller0: entered promiscuous mode [ 375.230296][ T7926] syzkaller0: entered allmulticast mode [ 375.707095][ T7936] loop0: detected capacity change from 0 to 512 [ 375.720473][ T7936] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 375.809187][ T7936] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 376.016445][ T7936] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2971: inode #17: comm syz.0.534: corrupted xattr block 128: invalid header [ 376.066072][ T7936] EXT4-fs (loop0): Remounting filesystem read-only [ 376.082974][ T7936] EXT4-fs warning (device loop0): ext4_evict_inode:274: xattr delete (err -117) [ 376.109349][ T7936] EXT4-fs (loop0): 1 orphan inode deleted [ 376.127135][ T7936] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 376.345781][ T7936] netlink: 'syz.0.534': attribute type 2 has an invalid length. [ 377.343828][ T7936] ------------[ cut here ]------------ [ 377.349366][ T7936] kernel BUG at net/phonet/socket.c:213! [ 377.419848][ T7936] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 377.426009][ T7936] CPU: 1 PID: 7936 Comm: syz.0.534 Not tainted syzkaller #0 [ 377.433381][ T7936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 377.443575][ T7936] RIP: 0010:pn_socket_sendmsg+0x235/0x240 [ 377.449337][ T7936] Code: 41 5f 5d c3 e8 bc 6a cb 00 89 d9 80 e1 07 fe c1 38 c1 0f 8c 0f ff ff ff 48 89 df e8 25 8b 23 f8 e9 02 ff ff ff e8 0b 4c cb f7 <0f> 0b 66 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 55 48 89 e5 41 57 41 [ 377.468988][ T7936] RSP: 0018:ffffc900199b7960 EFLAGS: 00010283 [ 377.475353][ T7936] RAX: ffffffff89bbdfe5 RBX: 0000000000000000 RCX: 0000000000080000 [ 377.483362][ T7936] RDX: ffffc9000ccf9000 RSI: 0000000000000050 RDI: 0000000000000051 [ 377.491473][ T7936] RBP: ffffc900199b7a10 R08: ffffffff8e8b3aef R09: 1ffffffff1d1675d [ 377.499674][ T7936] R10: dffffc0000000000 R11: fffffbfff1d1675e R12: dffffc0000000000 [ 377.507764][ T7936] R13: ffff88805e018600 R14: ffff88807702abc0 R15: 1ffff92003336f30 [ 377.515837][ T7936] FS: 00007ff5b8acb6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 377.524971][ T7936] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 377.531572][ T7936] CR2: 0000001b2de10ff8 CR3: 000000002dca9000 CR4: 00000000003506e0 [ 377.539566][ T7936] Call Trace: [ 377.542940][ T7936] [ 377.545896][ T7936] ? pn_socket_ioctl+0x350/0x350 [ 377.550949][ T7936] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 377.556361][ T7936] ? security_socket_sendmsg+0x80/0xa0 [ 377.561852][ T7936] ? pn_socket_ioctl+0x350/0x350 [ 377.566807][ T7936] ____sys_sendmsg+0x5ba/0x960 [ 377.571589][ T7936] ? __lock_acquire+0x7d40/0x7d40 [ 377.576642][ T7936] ? __asan_memset+0x22/0x40 [ 377.581332][ T7936] ? __sys_sendmsg_sock+0x30/0x30 [ 377.586452][ T7936] ? __import_iovec+0x5f2/0x850 [ 377.591325][ T7936] ? import_iovec+0x73/0xa0 [ 377.595924][ T7936] ___sys_sendmsg+0x2a6/0x360 [ 377.600791][ T7936] ? __sys_sendmsg+0x2a0/0x2a0 [ 377.605578][ T7936] __se_sys_sendmsg+0x1c2/0x2b0 [ 377.610442][ T7936] ? __x64_sys_sendmsg+0x80/0x80 [ 377.615594][ T7936] ? lockdep_hardirqs_on+0x98/0x150 [ 377.620910][ T7936] do_syscall_64+0x55/0xb0 [ 377.625347][ T7936] ? clear_bhb_loop+0x40/0x90 [ 377.630036][ T7936] ? clear_bhb_loop+0x40/0x90 [ 377.635088][ T7936] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 377.640995][ T7936] RIP: 0033:0x7ff5b7b9ce59 [ 377.645451][ T7936] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 377.665446][ T7936] RSP: 002b:00007ff5b8acb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 377.673983][ T7936] RAX: ffffffffffffffda RBX: 00007ff5b7e15fa0 RCX: 00007ff5b7b9ce59 [ 377.682670][ T7936] RDX: 0000000004004081 RSI: 00002000000002c0 RDI: 0000000000000008 [ 377.690868][ T7936] RBP: 00007ff5b7c32d6f R08: 0000000000000000 R09: 0000000000000000 [ 377.698955][ T7936] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 377.707219][ T7936] R13: 00007ff5b7e16038 R14: 00007ff5b7e15fa0 R15: 00007ffd34894b48 [ 377.715222][ T7936] [ 377.718261][ T7936] Modules linked in: [ 377.728639][ T7936] ---[ end trace 0000000000000000 ]--- [ 377.739625][ T7936] RIP: 0010:pn_socket_sendmsg+0x235/0x240 [ 377.749766][ T7936] Code: 41 5f 5d c3 e8 bc 6a cb 00 89 d9 80 e1 07 fe c1 38 c1 0f 8c 0f ff ff ff 48 89 df e8 25 8b 23 f8 e9 02 ff ff ff e8 0b 4c cb f7 <0f> 0b 66 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 55 48 89 e5 41 57 41 [ 377.788683][ T7936] RSP: 0018:ffffc900199b7960 EFLAGS: 00010283 [ 377.809998][ T7936] RAX: ffffffff89bbdfe5 RBX: 0000000000000000 RCX: 0000000000080000 [ 377.836043][ T7936] RDX: ffffc9000ccf9000 RSI: 0000000000000050 RDI: 0000000000000051 [ 377.852279][ T7936] RBP: ffffc900199b7a10 R08: ffffffff8e8b3aef R09: 1ffffffff1d1675d [ 377.867843][ T7936] R10: dffffc0000000000 R11: fffffbfff1d1675e R12: dffffc0000000000 [ 377.877152][ T7936] R13: ffff88805e018600 R14: ffff88807702abc0 R15: 1ffff92003336f30 [ 377.885583][ T7936] FS: 00007ff5b8acb6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 377.895110][ T7936] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 377.901806][ T7936] CR2: 00007f8666dc0ff8 CR3: 000000002dca9000 CR4: 00000000003506e0 [ 377.909919][ T7936] Kernel panic - not syncing: Fatal exception [ 377.916145][ T7936] Kernel Offset: disabled [ 377.920574][ T7936] Rebooting in 86400 seconds..