last executing test programs: 1m9.967234289s ago: executing program 3 (id=131): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) socket$l2tp6(0xa, 0x2, 0x73) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000780)='./file1\x00', 0x2000048, &(0x7f0000000000), 0x1, 0x753, &(0x7f00000017c0)="$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") syz_open_procfs(0x0, &(0x7f0000000240)='attr/prev\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000280), 0x0, 0x81, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x3f) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) 1m6.045597056s ago: executing program 3 (id=138): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00'}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x8, &(0x7f0000000080)=0x8, 0x1) connect$inet6(r2, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x6) r6 = socket$inet(0x2, 0xa, 0x629d) bind$inet(r6, 0x0, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40241, 0x0) write$tun(r7, 0x0, 0x0) getpid() open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01300000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a31f5ffffff38000000030a01040000000000000000010000010900030001007a32000000000c00024000000000000000010900010073797a300000"], 0xac}, 0x1, 0x0, 0x0, 0x2004041}, 0x0) 1m4.900778622s ago: executing program 3 (id=143): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000380), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r3, 0x0) prctl$PR_SET_MM(0x23, 0x5, &(0x7f00002e4000/0x4000)=nil) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000e80)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010800040000000000000b01000008000300", @ANYRES32=r6, @ANYBLOB="28005080140001004abee33957edf8aaae14574df40000000500020007000000080003000bac0f"], 0x44}}, 0x0) 1m3.915914624s ago: executing program 3 (id=149): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000200)=@filter={'filter\x00', 0xc, 0x4, 0x260, 0xffffffff, 0x220, 0x130, 0x0, 0x98, 0xffffffff, 0x220, 0x220, 0x220, 0x98, 0x4, 0x0, {[{{@ip={@local, @loopback, 0xff, 0xffffff00, 'dummy0\x00', 'veth1_macvtap\x00', {}, {}, 0x8, 0x2, 0x46}, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2f, &(0x7f0000000340)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}}}, 0x108) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x3, 0x0, @mcast1={0xff, 0x7}, 0x8a}}, {{0xa, 0x0, 0x10001, @local}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x9}}}, 0x108) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) io_setup(0x6, &(0x7f0000000d80)=0x0) io_getevents(r5, 0x1, 0x1, &(0x7f0000000340)=[{}], 0x0) r6 = eventfd2(0x62f6, 0x800) io_submit(r5, 0x2, &(0x7f00000001c0)=[&(0x7f0000000100)={0x8000000, 0x0, 0x0, 0x7, 0x23, r6, 0x0, 0x0, 0x4d3, 0x0, 0x1, r6}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x100, r4, 0x0, 0x0, 0x0, 0x0, 0x1, r6}]) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x82, 0x7fffffff, 0x4d, 0x39cc191a, 0x5c, 0x9, 0x5b2, 0x2, 0x0, 0x6, 0x3, 0x0, 0x2ab, 0x4, 0x10007, 0x4, 0x3c5b, 0x1, 0xb, 0x40000009, 0xfffffffd, 0x1f461e2c, 0x7, 0xe661, 0x7fff, 0xb, 0x3, 0x47a, 0x4c74, 0x80000000, 0x800242, 0xffffffff, 0x11, 0x0, 0xffffffff, 0x2, 0x406, 0x3, 0x2, 0x5, 0x3e, 0x8b, 0x6, 0x6, 0x3, 0x80092a3, 0x4, 0x1, 0x20000000, 0x82, 0x0, 0x7, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x5, 0x1000, 0xfffffffc, 0x43, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0xfffffffd, 0x0, 0xfffffffe, 0x8, 0x4, 0x8002, 0x9, 0x3fe, 0x401, 0x6, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0xbcf5, 0x1, 0x2, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0xb, 0xa, 0x1, 0x6, 0x9, 0x2, 0x7f, 0x9, 0x1, 0x403, 0x9, 0xffffffff, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x400004], [0x6, 0x6, 0x80000001, 0x2, 0xff, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0x4, 0x5, 0x1005, 0x0, 0x1f0, 0xfffffffd, 0x2, 0x82, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x800003, 0x200, 0x80, 0x2, 0xcc52, 0x950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0xac8, 0xbf, 0x10002, 0x403, 0x7ff, 0xffffffff, 0x0, 0x1, 0xffff, 0x0, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0xff], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x1, 0x6, 0x5, 0x0, 0x3, 0x80ce7, 0x1ff, 0x3, 0x7, 0x100, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2002, 0xf, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x8, 0xffffffff, 0x80000000, 0x7, 0x8, 0xc7, 0xee1, 0x0, 0xffff, 0x3, 0x7b, 0x20100, 0x9602, 0x4, 0x2, 0xffff, 0x6, 0x1, 0x10080, 0x6, 0x2, 0x30b1d693, 0x5a2b, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 1m3.640824343s ago: executing program 3 (id=151): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) accept$alg(r0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f00000000c0)='./bus\x00', 0x1010002, &(0x7f0000000240)={[{@iocharset={'iocharset', 0x3d, 'cp932'}}, {@iocharset={'iocharset', 0x3d, 'koi8-u'}}, {@uni_xlate}, {@uni_xlate}, {@numtail}, {@utf8}, {@utf8no}, {@shortname_lower}, {@numtail}, {@shortname_mixed}, {@utf8no}, {@fat=@codepage={'codepage', 0x3d, '950'}}, {@uni_xlate}, {@fat=@codepage={'codepage', 0x3d, '936'}}, {@fat=@check_strict}, {@uni_xlate}, {@numtail}]}, 0x1, 0x379, &(0x7f00000028c0)="$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") timer_create(0x2, 0x0, 0x0) timer_create(0x2, 0x0, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) timer_delete(0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x10042, 0x0) 1m0.683653368s ago: executing program 3 (id=156): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x400000000000003, 0x2) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x380000c, &(0x7f0000000340)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@debug}, {@data_journal}]}, 0x1, 0x437, &(0x7f0000000900)="$eJzs289PHFUcAPDv7EKR/hBs6o/Sqmg1En9AobX24EWjiQdNTPRQjwi0wW6LKZjYhigaU4+miXfj0cS/wJNejHoy8ap306QxXFo9rZndGdhddrdAF7a6n08y8N7MW9777szbfW8eE0DPGk1/JBH7I+L3iBiqZusLjFZ/3Vpdnvl7dXkmiXL5rb+SSrmbq8szedH8dfvyTF9E4bMkjjSpd/HylfPTpdLcpSw/sXTh/YnFy1eem78wfW7u3NzFqdOnT56YfOHU1PMdiTON6+bIRwtHD7/2zrU3Zs5ce/fnb5M8/oY4OmS03cEny+UOV9ddB2rSSV8XG8KWFKvdNPor/X8oirF+8obi1U+72jhgR5XL5fIDrQ+vlIH/sSS63QKgO/Iv+nT+m2+7NPS4K9x4qToBSuO+lW3VI31RyMr0N8xvO2k0Is6s/PNVusXO3IcAAKjzfTr+ebbZ+K8QtfeF7s3WUIYj4r6IOBgRpyLiUETcH1Ep+2BEPNSskqR1/Y2LJBvHP4Xr2w5uE9Lx34vZ2lb9+C8f/cVwMcsdqMTfn5ydL80dz96TsegfSPOTber44ZXfvmh1rHb8l25p/flYMGvH9b6B+tfMTi9N30nMtW58EjHS1yz+ZG0lID19hyNiZJt1zD/9zdFWx24ffxsdWGcqfx3xVPX8r0RD/Lmk/frkxD1Rmjs+kV8VG/3y69U3W9V/R/F3QHr+9za9/tfiH05q12sXt17H1T8+bzmn2e71vyd5u27fh9NLS5cmI/Ykr1cbXbt/qqHc1Hr5NP6xY837/8FYfyeORER6ET8cEY9ExKNZ2x+LiMcj4lib+H96+Yn3thf/QJu/2hlp/LNbOv/riT3RuKd5onj+x+/qKh3ebPyRnf+TldRYtmczn3+badf2rmYAAAD47ylExP5ICuNr6UJhfLz6P/yHYm+htLC49MzZhQ8uzlafERiO/kJ+p2uo5n7oZDatz/NTDfkT2X3jL4uDlfz4zEJpttvBQ4/b16L/p/4sdrt1wI7zvBb0Lv0fepf+D71L/4fe1aT/D3ajHcDua/b9/3EX2gHsvob+b9kPeoj5P/Qu/R96l/4PPWlxMG7/kLyExIZEFO6KZkjsUKLbn0wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACd8W8AAAD//zpS5t0=") r1 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x10042, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0, 0x4d, 0x0, 0x1}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB, @ANYRES32=r4, @ANYBLOB="10007d8005", @ANYRES8=0x0, @ANYRES32=r2], 0x2c}, 0x1, 0x0, 0x0, 0x20004080}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000700)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0500000009000000070000000900000002010000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000a1fc935a00000000000001010000000000090000"], 0x50) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f0000000480), 0x400034f, 0x2, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r1, 0x29, 0x41, &(0x7f0000000240)=ANY=[@ANYBLOB="345eca85835bc96c2dce6d616e676c65000000000000000800000000000000000000000000000000000000000000c06526c1b21b0c3dc84442dd379b52dbc3243c77fa25d33b869b8ef9f7fe8aa8c84b83661b0e242044c70f5096a8f429f30baf171b69a6990869363a11"], 0x0) syz_mount_image$fuse(0x0, 0x0, 0x3004049, 0x0, 0x1, 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x14b302, 0x8c) pwritev2(r8, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f00000000c0)={0xf0f041}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, 0x0) 45.439850798s ago: executing program 32 (id=156): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x400000000000003, 0x2) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x380000c, &(0x7f0000000340)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@debug}, {@data_journal}]}, 0x1, 0x437, &(0x7f0000000900)="$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") r1 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x10042, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0, 0x4d, 0x0, 0x1}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB, @ANYRES32=r4, @ANYBLOB="10007d8005", @ANYRES8=0x0, @ANYRES32=r2], 0x2c}, 0x1, 0x0, 0x0, 0x20004080}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000700)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0500000009000000070000000900000002010000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000a1fc935a00000000000001010000000000090000"], 0x50) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f0000000480), 0x400034f, 0x2, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r1, 0x29, 0x41, &(0x7f0000000240)=ANY=[@ANYBLOB="345eca85835bc96c2dce6d616e676c65000000000000000800000000000000000000000000000000000000000000c06526c1b21b0c3dc84442dd379b52dbc3243c77fa25d33b869b8ef9f7fe8aa8c84b83661b0e242044c70f5096a8f429f30baf171b69a6990869363a11"], 0x0) syz_mount_image$fuse(0x0, 0x0, 0x3004049, 0x0, 0x1, 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x14b302, 0x8c) pwritev2(r8, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f00000000c0)={0xf0f041}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, 0x0) 14.360052358s ago: executing program 0 (id=295): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @remote, 0x0, 0x0, 'lblc\x00', 0x1e, 0x80}, 0x2c) socket(0x2, 0x80805, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bb000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003100000095"], &(0x7f00000000c0)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffd}, 0x94) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x20, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x0) 12.687455082s ago: executing program 2 (id=299): unshare(0x22020400) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000480)=0x7) 12.236876006s ago: executing program 1 (id=300): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) syz_open_dev$tty20(0xc, 0x4, 0x0) listen(r0, 0x90004) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) ppoll(&(0x7f00000000c0)=[{r0, 0x6068}], 0x1, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) connect$unix(r3, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) listen(0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000240)={0x0, @in6={{0xa, 0x4e24, 0x7, @local, 0x80000000}}, 0x72d8, 0x6, 0x8, 0x81, 0x80, 0x1, 0x6}, 0x9c) close_range(r1, 0xffffffffffffffff, 0x0) 12.096116911s ago: executing program 2 (id=302): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x244}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() chdir(&(0x7f0000000040)='./file0\x00') 11.713628183s ago: executing program 2 (id=304): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = memfd_secret(0x80000) ioctl$int_out(r3, 0x5460, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x10000000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() r6 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r6, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001000010400000000000000", @ANYRES32=0x0, @ANYBLOB="7b13000000000065766500000400"], 0x34}}, 0x40800) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000001a0001000000", @ANYRES32=0x0, @ANYBLOB="0000000008000f000000000014"], 0x38}}, 0x0) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$rds(0x15, 0x5, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000800)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x2c}, @flat=@weak_binder={0x77622a85, 0x100, 0x2}, @fda={0x66646185, 0x9, 0x1, 0x2}}, &(0x7f0000000240)={0x0, 0x28, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) socket$inet6(0xa, 0x2, 0x0) 11.448404621s ago: executing program 5 (id=192): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCOUTQ(r1, 0x5411, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) r4 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_inet_SIOCSARP(r4, 0x8915, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x29, 0x12, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r5, &(0x7f0000000680)={0x15, 0x110, 0xfa08, {0xffffffffffffffff, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x4e23, @empty}, @in={0x2, 0x8, @local}}}, 0x118) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_ifreq(r6, 0x8990, &(0x7f0000000140)={'bond0\x00', @ifru_names='virt_wifi0\x00'}) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x1018ed8, &(0x7f00000003c0)={[{@sysvgroups}, {@noload}, {@mblk_io_submit}, {@jqfmt_vfsv0}, {@nogrpid}, {@i_version}, {@test_dummy_encryption}, {@quota}, {@orlov}, {@bh}]}, 0x0, 0x65d, &(0x7f0000002fc0)="$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") 10.435822374s ago: executing program 2 (id=306): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$xdp(0x2c, 0x3, 0x0) r3 = syz_open_dev$media(&(0x7f0000000340), 0x3, 0x400) r4 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x800) ioctl$MEDIA_IOC_ENUM_LINKS(r4, 0xc0287c02, &(0x7f00000000c0)={0x80000000, 0x0, &(0x7f0000000040)=[{{}, {0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r4, 0xc0287c02, &(0x7f0000000140)={r5, &(0x7f0000000100)=[{}, {0x80000000}], 0x0}) ioctl$MEDIA_IOC_SETUP_LINK(r3, 0xc0347c03, &(0x7f0000000bc0)={{r6, 0x0, 0xb, [0x6e, 0xf30]}, {0x80000000, 0x0, 0x0, [0x7ff, 0x2]}, 0x0, [0x5c, 0x3]}) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=@ipv6_newroute={0x3c, 0x18, 0xa01, 0x70bd2c, 0x25dfdbfb, {0xa, 0x20, 0x10, 0x0, 0xfd, 0x4, 0xc8, 0xb, 0x3a00}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x8, 0x8}}, @RTA_GATEWAY={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x31}}]}, 0x3c}, 0x1, 0x2}, 0x10) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) 9.93830049s ago: executing program 1 (id=307): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000380), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0x5, &(0x7f00002e4000/0x4000)=nil) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000e80)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010800040000000000000b01000008000300", @ANYRES32=r6, @ANYBLOB="28005080140001004abee33957edf8aaae14574df40000000500020007000000080003000bac0f"], 0x44}}, 0x0) 8.411289879s ago: executing program 1 (id=309): fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x0) fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) io_uring_setup(0x3450, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_procfs(0xffffffffffffffff, 0x0) read$FUSE(r0, &(0x7f00000024c0)={0x2020}, 0xfffffec1) 6.501639801s ago: executing program 5 (id=312): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000300), 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(0xffffffffffffffff, &(0x7f00000000c0)={0x1d, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x50, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x50}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 6.250848119s ago: executing program 5 (id=314): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e04070620"], 0x7) 5.518318803s ago: executing program 0 (id=317): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) syz_open_dev$tty20(0xc, 0x4, 0x0) listen(r0, 0x90004) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) ppoll(&(0x7f00000000c0)=[{r0, 0x6068}], 0x1, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) connect$unix(r3, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) listen(0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000240)={0x0, @in6={{0xa, 0x4e24, 0x7, @local, 0x80000000}}, 0x72d8, 0x6, 0x8, 0x81, 0x80, 0x1, 0x6}, 0x9c) close_range(r1, 0xffffffffffffffff, 0x0) 5.157219284s ago: executing program 1 (id=318): r0 = syz_open_dev$video(&(0x7f0000000000), 0x7, 0x40440) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2008080, &(0x7f0000000280)=ANY=[@ANYBLOB="696f636861727365743d637038363984d6ec236861727365743d63703836332c6e6f6e756d7461696c3d302c6e6f6e756d7461696c3d302c73686f72746e616d653d6d697865642c636f6465706167653d3836322c6e6f6e756d7461696c3d302c6e66732c756e695f786c6174653d312c696f636861727365743d63703934392c757466383d312c726f6469722c757466383d302c00"], 0x81, 0x2c8, &(0x7f0000000780)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000002100)='./file0\x00', 0x842, 0x10c) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000001a300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r5 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r5, 0x114, 0x6, &(0x7f00000005c0)=0x1, 0x4) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket(0x28, 0x1, 0x0) close_range(r0, r3, 0x2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r6) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r2}, 0x8) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r8 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r8, 0xc0184800, &(0x7f0000000100)={0x4, r7}) ioctl$DMA_BUF_SET_NAME_A(r9, 0x40086203, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x7, 0x1, 0x3, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0x6, 0x0, 0x0, 0x3c5b, 0x1, 0x23, 0x2, 0x5, 0x0, 0xffffffff, 0xe661, 0x0, 0x7, 0x20003, 0x8, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x18e, 0x200009, 0x6, 0x454f, 0x6, 0x80004, 0x8, 0x1, 0x80, 0x0, 0x5, 0x0, 0x8, 0x8000, 0x1, 0x40], [0xfffffffd, 0x9, 0x81, 0x8004, 0x5, 0x9, 0x129432f6, 0xc8, 0xf1, 0x4e, 0x2bf, 0x6c7, 0x2, 0xfffffffc, 0x5, 0x0, 0x3, 0x8, 0x2f, 0xe, 0x1, 0x66abcbd2, 0xea8, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xfc, 0x5, 0xfffff575, 0x5f31, 0x8, 0x4e0, 0x384, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0x6, 0x47, 0x6, 0x80, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x7, 0x8001, 0x4000009, 0x6, 0x0, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffd, 0x7, 0x4, 0x9, 0x5, 0x8, 0x0, 0x5, 0xb, 0x2, 0x5, 0x200005, 0x0, 0x1ef, 0x5, 0x88, 0x86, 0xf, 0x303c, 0xfffffffa, 0xb, 0x9, 0x2, 0x2, 0x400003, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfef, 0x1000, 0x9f, 0x4, 0x1000, 0x5, 0xb1, 0xac8, 0x80000c1, 0x82, 0x3, 0x7ff, 0x12b, 0x7, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x20080803, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x4, 0x6, 0x6, 0x0, 0xb9, 0x80000ce4, 0x1ff, 0x200, 0x4184, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x10005, 0x1, 0x2000002, 0x14c, 0x60a3, 0x10006, 0xa, 0xffffffff, 0x80000000, 0x5, 0x2, 0xc8, 0x1, 0xfffff000, 0xffff, 0xc, 0x7e, 0x101, 0x9622, 0x7, 0xaf, 0x20000008, 0x3, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0x4fbf, 0xf40, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0x8, 0x803, 0xd7, 0x200, 0xf8a4, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) 4.475369836s ago: executing program 4 (id=319): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000380), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0x5, &(0x7f00002e4000/0x4000)=nil) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000e80)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010800040000000000000b01000008000300", @ANYRES32=r6, @ANYBLOB="28005080140001004abee33957edf8aaae14574df40000000500020007000000080003000bac0f"], 0x44}}, 0x0) 3.386765521s ago: executing program 1 (id=320): socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mremap(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/protocols\x00') read$FUSE(r1, &(0x7f0000000d80)={0x2020}, 0x2020) 3.375529981s ago: executing program 4 (id=321): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3d}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x66, &(0x7f0000000000)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x30, 0x3a, 0x0, @remote, @remote, {[], @pkt_toobig={0x4, 0x2, 0x0, 0xfffffffc, {0x0, 0x6, "000810", 0x0, 0x11, 0x0, @private1, @empty}}}}}}}, 0x0) 3.267207955s ago: executing program 5 (id=322): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000001c0)=0x4) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffdfffff}) r2 = dup(r1) ioctl$BLKRRPART(r2, 0x125f, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x5ff5e000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r5 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x9cdc2384056b48b8) r6 = getpid() r7 = syz_pidfd_open(r6, 0x0) setns(r7, 0x24020000) syz_clone(0x120e1100, 0x0, 0x13, 0x0, 0x0, 0x0) 3.237600026s ago: executing program 1 (id=323): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b02, 0x0) read$char_usb(r1, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) syz_usb_connect$hid(0x3, 0x36, 0x0, 0x0) syz_usb_connect(0x5, 0x46, &(0x7f0000000780)=ANY=[], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a6400"], 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r2, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) syz_usb_disconnect(r0) 3.221761917s ago: executing program 4 (id=324): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000300), 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(0xffffffffffffffff, &(0x7f00000000c0)={0x1d, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x50, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x50}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 3.155277459s ago: executing program 0 (id=325): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x244}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() chdir(&(0x7f0000000040)='./file0\x00') 3.069678601s ago: executing program 2 (id=326): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000180)={[{@grpid}, {@mblk_io_submit}, {@usrquota}, {@test_dummy_encryption}, {@inode_readahead_blks}, {@nodelalloc}, {@minixdf}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}]}, 0x4, 0xbaf, &(0x7f00000017c0)="$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") mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) fchmod(r3, 0x0) write(0xffffffffffffffff, &(0x7f0000000040), 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') r4 = syz_open_dev$loop(&(0x7f0000000000), 0x9, 0x40000) ioctl$BLKIOOPT(r4, 0x1279, &(0x7f00000000c0)) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x5e0, 0x0, 0x2e0, 0x428, 0x2e0, 0x2e0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00', {}, {0xff}}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@socket1={{0x28, 'socket\x00', 0x3}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}, {0x0, 0x0, 0x0, [0x4]}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x640) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) ioctl$FBIOBLANK(r6, 0x4611, 0x0) 3.025698792s ago: executing program 0 (id=327): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @remote, 0x0, 0x0, 'lblc\x00', 0x1e, 0x80}, 0x2c) socket(0x2, 0x80805, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bb000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003100000095"], &(0x7f00000000c0)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffd}, 0x94) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x20, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x0) 2.325353535s ago: executing program 4 (id=328): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x1040}, 0x3548, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{}, {0x0, 0x0, 0x1}}}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{0x0, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc}]}}]}]}]}}]}, 0x6c}}, 0x0) 2.052083554s ago: executing program 5 (id=329): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = memfd_secret(0x80000) ioctl$int_out(r3, 0x5460, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x10000000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() r6 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r6, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001000010400000000000000", @ANYRES32=0x0, @ANYBLOB="7b13000000000065766500000400"], 0x34}}, 0x40800) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000001a0001000000", @ANYRES32=0x0, @ANYBLOB="0000000008000f000000000014"], 0x38}}, 0x0) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$rds(0x15, 0x5, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000800)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x2c}, @flat=@weak_binder={0x77622a85, 0x100, 0x2}, @fda={0x66646185, 0x9, 0x1, 0x2}}, &(0x7f0000000240)={0x0, 0x28, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) socket$inet6(0xa, 0x2, 0x0) 2.044826654s ago: executing program 0 (id=330): mknodat$null(0xffffffffffffff9c, 0x0, 0x0, 0x103) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x40000, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0x4) syz_mount_image$ext4(&(0x7f0000000900)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000000c0)={[{@nouid32}, {@nodioread_nolock}, {@noquota}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x9}}, {@commit}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000180)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) unshare(0x2a020400) fsopen(0x0, 0x0) prctl$PR_SET_TSC(0x1a, 0x1) fcntl$lock(0xffffffffffffffff, 0x26, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) syz_open_dev$video(&(0x7f0000000080), 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x8000}}) 1.85343877s ago: executing program 4 (id=331): r0 = bpf$MAP_CREATE(0x0, 0x0, 0xffffffdf) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000002c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340), 0x0, 0xda, &(0x7f0000000480)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f00000004c0), &(0x7f0000000500), 0x8, 0x5b, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000006c0), 0x10082, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0xc, 0x4, &(0x7f0000000080)=@raw=[@cb_func={0x18, 0x0, 0x4, 0x0, 0x4}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x5ef1}], &(0x7f00000000c0)='GPL\x00', 0x4fa53c31, 0x25, &(0x7f0000000100)=""/37, 0xd6f5c2bb20c3e840, 0x54, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x3, 0x1}, 0x8, 0x10, &(0x7f00000001c0)={0x1, 0xe, 0x401, 0xffffffff}, 0x10, r1, r2, 0x6, &(0x7f0000000700)=[0xffffffffffffffff, r0], &(0x7f0000000740)=[{0x0, 0x1, 0x10, 0x7}, {0x1, 0x1, 0xf, 0x1}, {0x5, 0x4, 0xc, 0x8}, {0x4, 0x4, 0x3, 0xb}, {0x4, 0x2, 0x6, 0x3}, {0x5, 0x7, 0x8, 0x3}], 0x10, 0x4}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_int(r6, 0x0, 0xb, &(0x7f0000000000)=0xfffffdfb, 0x4) sendto$inet(r6, 0x0, 0xffef, 0x20048000, &(0x7f0000000240)={0x2, 0x4e22, @remote}, 0x26) 984.588639ms ago: executing program 5 (id=332): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x16, 0x0) r3 = mq_open(&(0x7f0000000000)='batadv_slaveo1\x00', 0x8c2, 0x0, 0x0) mq_notify(r3, &(0x7f0000000200)={0x0, 0x25, 0x1, @thr={0x0, 0x0}}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20400, 0x38) getdents64(r4, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') io_uring_setup(0xab1, &(0x7f0000000080)={0x0, 0xdf4, 0x800, 0x0, 0x2, 0x0, r5}) writev(r5, &(0x7f0000000000), 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 627.18903ms ago: executing program 2 (id=333): socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mremap(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/protocols\x00') read$FUSE(r1, &(0x7f0000000d80)={0x2020}, 0x2020) 592.786501ms ago: executing program 0 (id=334): r0 = syz_open_dev$video(&(0x7f0000000000), 0x7, 0x40440) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2008080, &(0x7f0000000280)=ANY=[@ANYBLOB="696f636861727365743d637038363984d6ec236861727365743d63703836332c6e6f6e756d7461696c3d302c6e6f6e756d7461696c3d302c73686f72746e616d653d6d697865642c636f6465706167653d3836322c6e6f6e756d7461696c3d302c6e66732c756e695f786c6174653d312c696f636861727365743d63703934392c757466383d312c726f6469722c757466383d302c00"], 0x81, 0x2c8, &(0x7f0000000780)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000002100)='./file0\x00', 0x842, 0x10c) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000001a300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r5 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r5, 0x114, 0x6, &(0x7f00000005c0)=0x1, 0x4) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket(0x28, 0x1, 0x0) close_range(r0, r3, 0x2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r6) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r2}, 0x8) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r8 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r8, 0xc0184800, &(0x7f0000000100)={0x4, r7}) ioctl$DMA_BUF_SET_NAME_A(r9, 0x40086203, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x7, 0x1, 0x3, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0x6, 0x0, 0x0, 0x3c5b, 0x1, 0x23, 0x2, 0x5, 0x0, 0xffffffff, 0xe661, 0x0, 0x7, 0x20003, 0x8, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x18e, 0x200009, 0x6, 0x454f, 0x6, 0x80004, 0x8, 0x1, 0x80, 0x0, 0x5, 0x0, 0x8, 0x8000, 0x1, 0x40], [0xfffffffd, 0x9, 0x81, 0x8004, 0x5, 0x9, 0x129432f6, 0xc8, 0xf1, 0x4e, 0x2bf, 0x6c7, 0x2, 0xfffffffc, 0x5, 0x0, 0x3, 0x8, 0x2f, 0xe, 0x1, 0x66abcbd2, 0xea8, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xfc, 0x5, 0xfffff575, 0x5f31, 0x8, 0x4e0, 0x384, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0x6, 0x47, 0x6, 0x80, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x7, 0x8001, 0x4000009, 0x6, 0x0, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffd, 0x7, 0x4, 0x9, 0x5, 0x8, 0x0, 0x5, 0xb, 0x2, 0x5, 0x200005, 0x0, 0x1ef, 0x5, 0x88, 0x86, 0xf, 0x303c, 0xfffffffa, 0xb, 0x9, 0x2, 0x2, 0x400003, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfef, 0x1000, 0x9f, 0x4, 0x1000, 0x5, 0xb1, 0xac8, 0x80000c1, 0x82, 0x3, 0x7ff, 0x12b, 0x7, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x20080803, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x4, 0x6, 0x6, 0x0, 0xb9, 0x80000ce4, 0x1ff, 0x200, 0x4184, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x10005, 0x1, 0x2000002, 0x14c, 0x60a3, 0x10006, 0xa, 0xffffffff, 0x80000000, 0x5, 0x2, 0xc8, 0x1, 0xfffff000, 0xffff, 0xc, 0x7e, 0x101, 0x9622, 0x7, 0xaf, 0x20000008, 0x3, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0x4fbf, 0xf40, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0x8, 0x803, 0xd7, 0x200, 0xf8a4, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) 0s ago: executing program 4 (id=335): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) syz_open_dev$tty20(0xc, 0x4, 0x0) listen(r0, 0x90004) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) ppoll(&(0x7f00000000c0)=[{r0, 0x6068}], 0x1, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) connect$unix(r3, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) listen(0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000240)={0x0, @in6={{0xa, 0x4e24, 0x7, @local, 0x80000000}}, 0x72d8, 0x6, 0x8, 0x81, 0x80, 0x1, 0x6}, 0x9c) close_range(r1, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): pspace version 1, size = 127995904 bytes [ 62.829102][ T4176] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 64.887593][ T4194] chnl_net:caif_netlink_parms(): no params data found [ 64.907514][ T4189] chnl_net:caif_netlink_parms(): no params data found [ 65.004371][ T4196] chnl_net:caif_netlink_parms(): no params data found [ 65.055115][ T4203] chnl_net:caif_netlink_parms(): no params data found [ 65.084676][ T4194] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.092287][ T4194] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.100397][ T4194] device bridge_slave_0 entered promiscuous mode [ 65.129709][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 65.139767][ T4194] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.147209][ T4194] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.155476][ T4194] device bridge_slave_1 entered promiscuous mode [ 65.196969][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.204271][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.212090][ T4189] device bridge_slave_0 entered promiscuous mode [ 65.245283][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.252622][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.260626][ T4189] device bridge_slave_1 entered promiscuous mode [ 65.286914][ T4194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.298763][ T4194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.331998][ T4203] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.339596][ T4203] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.347801][ T4203] device bridge_slave_0 entered promiscuous mode [ 65.361823][ T4203] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.368982][ T4203] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.377471][ T4203] device bridge_slave_1 entered promiscuous mode [ 65.385017][ T4196] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.392229][ T4196] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.403794][ T4196] device bridge_slave_0 entered promiscuous mode [ 65.435110][ T4196] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.442211][ T4196] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.450541][ T4196] device bridge_slave_1 entered promiscuous mode [ 65.459741][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.478838][ T4194] team0: Port device team_slave_0 added [ 65.492836][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.529649][ T4194] team0: Port device team_slave_1 added [ 65.546159][ T4203] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.564293][ T4203] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.576088][ T4189] team0: Port device team_slave_0 added [ 65.582194][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.589505][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.597683][ T4188] device bridge_slave_0 entered promiscuous mode [ 65.613357][ T4196] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.631040][ T4189] team0: Port device team_slave_1 added [ 65.644713][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.651864][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.660386][ T4188] device bridge_slave_1 entered promiscuous mode [ 65.668898][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.676188][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.702815][ T4194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.716459][ T4196] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.753704][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.760694][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.787451][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.807319][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.814527][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.840559][ T4194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.853772][ T4203] team0: Port device team_slave_0 added [ 65.865936][ T4196] team0: Port device team_slave_0 added [ 65.880093][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.887298][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.913347][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.934278][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.944749][ T4203] team0: Port device team_slave_1 added [ 65.951918][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.962722][ T4196] team0: Port device team_slave_1 added [ 66.019953][ T4196] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.027143][ T4196] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.053197][ T4196] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.072067][ T4196] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.079518][ T4196] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.106160][ T4196] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.121731][ T4194] device hsr_slave_0 entered promiscuous mode [ 66.129023][ T4194] device hsr_slave_1 entered promiscuous mode [ 66.147391][ T4188] team0: Port device team_slave_0 added [ 66.155377][ T4203] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.162783][ T4203] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.189291][ T4203] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.214170][ T4188] team0: Port device team_slave_1 added [ 66.233935][ T4203] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.240927][ T4203] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.267125][ T4203] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.301968][ T4189] device hsr_slave_0 entered promiscuous mode [ 66.308936][ T4189] device hsr_slave_1 entered promiscuous mode [ 66.315820][ T4189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.323762][ T4189] Cannot create hsr debugfs directory [ 66.381778][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.389020][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.416199][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.431191][ T4196] device hsr_slave_0 entered promiscuous mode [ 66.438650][ T4196] device hsr_slave_1 entered promiscuous mode [ 66.446181][ T4196] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.454053][ T4196] Cannot create hsr debugfs directory [ 66.483815][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.490907][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.517835][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.548655][ T4203] device hsr_slave_0 entered promiscuous mode [ 66.555733][ T4203] device hsr_slave_1 entered promiscuous mode [ 66.563222][ T4203] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.570819][ T4203] Cannot create hsr debugfs directory [ 66.575513][ T3546] Bluetooth: hci2: command 0x0409 tx timeout [ 66.577690][ T7] Bluetooth: hci1: command 0x0409 tx timeout [ 66.595382][ T7] Bluetooth: hci0: command 0x0409 tx timeout [ 66.651152][ T4188] device hsr_slave_0 entered promiscuous mode [ 66.653163][ T3546] Bluetooth: hci3: command 0x0409 tx timeout [ 66.663978][ T3546] Bluetooth: hci4: command 0x0409 tx timeout [ 66.670348][ T4188] device hsr_slave_1 entered promiscuous mode [ 66.677241][ T4188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.684945][ T4188] Cannot create hsr debugfs directory [ 66.941498][ T4194] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 66.963313][ T4194] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 66.973412][ T4194] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 66.982826][ T4194] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 67.047341][ T4189] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 67.071738][ T4189] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 67.094302][ T4189] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 67.104289][ T4189] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 67.146745][ T4196] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 67.156619][ T4196] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 67.181279][ T4194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.195242][ T4196] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 67.209188][ T4196] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 67.226133][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.235937][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.258391][ T4194] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.274624][ T4203] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 67.315018][ T4203] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 67.324924][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.335029][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.345808][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.353126][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.361791][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.371728][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.381376][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.388542][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.407802][ T4203] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 67.417514][ T4203] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 67.429079][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.450034][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.469725][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.479514][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.490506][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.499741][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.512663][ T4188] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 67.534297][ T1233] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.547752][ T1233] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.559603][ T4188] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 67.569733][ T4188] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 67.591114][ T4188] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 67.609371][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.617114][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.626904][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.636467][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.645448][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.676291][ T4194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.711203][ T1233] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.720352][ T1233] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.737224][ T4196] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.747567][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.800362][ T4196] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.809895][ T1233] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.818271][ T1233] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.827114][ T1233] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.835960][ T1233] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.844906][ T1233] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.851984][ T1233] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.860066][ T1233] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.883445][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.900779][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.910670][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.917840][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.935094][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.949558][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.958339][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.965446][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.979460][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.999043][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.008276][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.019816][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.030107][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.039520][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.052565][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.061613][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.070712][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.077835][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.090198][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.106527][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.132205][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.141762][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.152164][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.161916][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.171200][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.179374][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.187094][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.196346][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.205181][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.216779][ T1233] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.225854][ T1233] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.248535][ T4189] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 68.260608][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.272911][ T4194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.282093][ T1233] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.293313][ T1233] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.301710][ T1233] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.311162][ T1233] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.325396][ T1233] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.334301][ T1233] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.372804][ T4196] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.391098][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.432534][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.441238][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.454260][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.462217][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.479727][ T4203] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.505034][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.521476][ T1233] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.530619][ T1233] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.557172][ T4194] device veth0_vlan entered promiscuous mode [ 68.566440][ T1233] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.584383][ T1233] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.598513][ T1233] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.614346][ T1233] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.627307][ T1233] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.634475][ T1233] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.649581][ T1233] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.659615][ T1233] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.663687][ T4235] Bluetooth: hci0: command 0x041b tx timeout [ 68.676857][ T4235] Bluetooth: hci1: command 0x041b tx timeout [ 68.680959][ T1233] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.684076][ T4235] Bluetooth: hci2: command 0x041b tx timeout [ 68.690033][ T1233] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.705621][ T1233] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.714418][ T1233] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.722178][ T1233] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.734353][ T4203] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.742756][ T1233] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.751916][ T1233] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.760117][ T4235] Bluetooth: hci4: command 0x041b tx timeout [ 68.766515][ T4235] Bluetooth: hci3: command 0x041b tx timeout [ 68.777885][ T4194] device veth1_vlan entered promiscuous mode [ 68.801104][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 68.815080][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.828618][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.856032][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.883795][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 68.894051][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.913027][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.921535][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.928671][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.943690][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.958412][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.967370][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.977782][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.987273][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.996092][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.032828][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.041516][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.060519][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.067701][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.082170][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.091043][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.105899][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.118649][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.131387][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.142491][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.151454][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.163641][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.171104][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.180498][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.189548][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.200254][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.219387][ T4196] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.230926][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.244737][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.270187][ T4203] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 69.283489][ T4203] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 69.300299][ T4194] device veth0_macvtap entered promiscuous mode [ 69.318852][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.333464][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.363168][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.374277][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.383364][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.392091][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.411771][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.435053][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.453171][ T4194] device veth1_macvtap entered promiscuous mode [ 69.475059][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.488697][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.500188][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.549177][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.581435][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.590376][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.600264][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.609521][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.619906][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.628903][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.639032][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.648109][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.663243][ T4196] device veth0_vlan entered promiscuous mode [ 69.677822][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.694498][ T4189] device veth0_vlan entered promiscuous mode [ 69.704491][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.719922][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.728152][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.743243][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.751463][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.766240][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.783511][ T4194] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.793735][ T4194] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.803757][ T4194] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.812802][ T4194] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.830143][ T4189] device veth1_vlan entered promiscuous mode [ 69.843787][ T4196] device veth1_vlan entered promiscuous mode [ 69.852222][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 69.860873][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 69.870990][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.879177][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.919715][ T4203] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.962078][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 69.971126][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 69.986119][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.994340][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.001849][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.011049][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.025821][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.036167][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.048935][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.060231][ T4189] device veth0_macvtap entered promiscuous mode [ 70.070358][ T4196] device veth0_macvtap entered promiscuous mode [ 70.117875][ T4196] device veth1_macvtap entered promiscuous mode [ 70.133054][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.141727][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.169960][ T4189] device veth1_macvtap entered promiscuous mode [ 70.177345][ T1237] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.196273][ T1237] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.211606][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.225980][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.234726][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.257688][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.270334][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.284648][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.294585][ T4203] device veth0_vlan entered promiscuous mode [ 70.309875][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.318656][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.327400][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.336402][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.356059][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.366841][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.379358][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.393943][ T4196] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.402980][ T4196] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.411707][ T4196] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.421707][ T4196] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.434877][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.444592][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.455007][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.464485][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.480714][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.491785][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.503334][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.514714][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.526368][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.542476][ T1237] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.550444][ T1237] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.566803][ T4203] device veth1_vlan entered promiscuous mode [ 70.579016][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.588441][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.598707][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.607808][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.616093][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.625782][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.640365][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.651696][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.662849][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.674117][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.685700][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.705448][ T4188] device veth0_vlan entered promiscuous mode [ 70.724596][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.744710][ T4235] Bluetooth: hci2: command 0x040f tx timeout [ 70.745229][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.754629][ T4235] Bluetooth: hci1: command 0x040f tx timeout [ 70.770402][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.775686][ T4235] Bluetooth: hci0: command 0x040f tx timeout [ 70.789443][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.798407][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.813184][ T4235] Bluetooth: hci3: command 0x040f tx timeout [ 70.819605][ T4235] Bluetooth: hci4: command 0x040f tx timeout [ 70.828702][ T4189] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.837760][ T4189] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.848337][ T4189] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.857980][ T4189] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.905364][ T4188] device veth1_vlan entered promiscuous mode [ 70.945213][ T4203] device veth0_macvtap entered promiscuous mode [ 70.958671][ T4203] device veth1_macvtap entered promiscuous mode [ 70.997453][ T4269] capability: warning: `syz.0.1' uses deprecated v2 capabilities in a way that may be insecure [ 71.011039][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.021420][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 71.036370][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.048803][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.066495][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.079981][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.101206][ T1233] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.127339][ T1233] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.171356][ T1233] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.187173][ T1233] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.229842][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.236480][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.290327][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.310660][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.177263][ T4203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.192730][ T4203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.202662][ T4203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.213277][ T4203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.223173][ T4203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.233630][ T4203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.248075][ T4203] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.368114][ T4188] device veth0_macvtap entered promiscuous mode [ 72.404029][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.416894][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.426320][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.435746][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.608825][ T4203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.619432][ T4203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.629386][ T4203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.640108][ T4203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.650016][ T4203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.661261][ T4203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.672881][ T4203] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.681218][ T4188] device veth1_macvtap entered promiscuous mode [ 72.698212][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.708552][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.720715][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.038203][ T4282] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.757196][ T4284] loop2: detected capacity change from 0 to 128 [ 73.786400][ T4282] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.890853][ T4282] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.912555][ T4282] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.962319][ C0] sched: RT throttling activated [ 73.963835][ T4235] Bluetooth: hci0: command 0x0419 tx timeout [ 73.974952][ T4235] Bluetooth: hci1: command 0x0419 tx timeout [ 73.978473][ T4203] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.981097][ T4235] Bluetooth: hci2: command 0x0419 tx timeout [ 74.011024][ T4203] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.050886][ T4203] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.061466][ T4203] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.098410][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.113302][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.179271][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.207275][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.224838][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.238020][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.251640][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.272493][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.288338][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.299221][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.331087][ T4282] attempt to access beyond end of device [ 74.331087][ T4282] loop2: rw=1, want=1041, limit=128 [ 74.351417][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.376876][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.416498][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.441980][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.502692][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.538017][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.566917][ T4290] loop4: detected capacity change from 0 to 1024 [ 74.580936][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.591211][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.621690][ T4290] ======================================================= [ 74.621690][ T4290] WARNING: The mand mount option has been deprecated and [ 74.621690][ T4290] and is ignored by this kernel. Remove the mand [ 74.621690][ T4290] option from the mount to silence this warning. [ 74.621690][ T4290] ======================================================= [ 74.675809][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.701701][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.722421][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.740649][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.760847][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.779146][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.808399][ T4188] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.858864][ T4188] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.873394][ T4188] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.887286][ T4188] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.955497][ T4235] Bluetooth: hci4: command 0x0419 tx timeout [ 74.961619][ T4235] Bluetooth: hci3: command 0x0419 tx timeout [ 75.026782][ T4282] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.072426][ T4282] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.133106][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.173530][ T4296] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 75.185466][ T4290] EXT4-fs (loop4): mounted filesystem without journal. Opts: nouid32,nodioread_nolock,noquota,delalloc,journal_dev=0x0000000000000009,commit=0x0000000000000000,,errors=continue. Quota mode: none. [ 75.214384][ T4290] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.325035][ T4282] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.342739][ T4282] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.356465][ T4296] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 75.382899][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.401080][ T4282] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.410974][ T4282] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.546008][ T4282] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.569856][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.579612][ T4282] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.116631][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.282968][ T4293] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 77.584753][ T4320] loop1: detected capacity change from 0 to 128 [ 79.884696][ T4320] EXT4-fs: error -4 creating inode table initialization thread [ 79.893369][ T4320] EXT4-fs (loop1): mount failed [ 80.287891][ T4342] loop3: detected capacity change from 0 to 4096 [ 80.331454][ T4347] loop2: detected capacity change from 0 to 256 [ 80.470927][ T4199] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 80.480844][ T4199] CPU: 1 PID: 4199 Comm: kworker/u5:4 Not tainted syzkaller #0 [ 80.488426][ T4199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 80.498511][ T4199] Workqueue: hci2 hci_rx_work [ 80.503248][ T4199] Call Trace: [ 80.506558][ T4199] [ 80.509512][ T4199] dump_stack_lvl+0x188/0x250 [ 80.514223][ T4199] ? show_regs_print_info+0x20/0x20 [ 80.519453][ T4199] ? load_image+0x400/0x400 [ 80.524005][ T4199] sysfs_create_dir_ns+0x26a/0x290 [ 80.529152][ T4199] ? sysfs_warn_dup+0xa0/0xa0 [ 80.533870][ T4199] ? process_one_work+0x85f/0x1010 [ 80.539031][ T4199] ? do_raw_spin_unlock+0x11d/0x230 [ 80.544267][ T4199] kobject_add_internal+0x6e0/0xd90 [ 80.549509][ T4199] kobject_add+0x160/0x230 [ 80.553964][ T4199] ? kobject_init+0x1d0/0x1d0 [ 80.558685][ T4199] ? klist_children_get+0x50/0x50 [ 80.563911][ T4199] ? get_device_parent+0x121/0x3f0 [ 80.569077][ T4199] device_add+0x483/0xfb0 [ 80.573471][ T4199] hci_conn_add_sysfs+0xd1/0x1e0 [ 80.578448][ T4199] le_conn_complete_evt+0xc48/0x15c0 [ 80.583782][ T4199] ? cs_le_create_conn+0x5e0/0x5e0 [ 80.588938][ T4199] ? __mutex_trylock_common+0x155/0x260 [ 80.594519][ T4199] hci_le_meta_evt+0x285/0x3c90 [ 80.599411][ T4199] ? hci_event_packet+0x37b/0x1370 [ 80.604747][ T4199] ? __lock_acquire+0x7d10/0x7d10 [ 80.609821][ T4199] ? hci_remote_host_features_evt+0x280/0x280 [ 80.615936][ T4199] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 80.621602][ T4199] ? mark_lock+0x94/0x320 [ 80.625978][ T4199] ? mutex_unlock+0x10/0x10 [ 80.630540][ T4199] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 80.636582][ T4199] ? lock_chain_count+0x20/0x20 [ 80.641495][ T4199] ? __rwlock_init+0x140/0x140 [ 80.646318][ T4199] hci_event_packet+0xe48/0x1370 [ 80.651293][ T4199] ? lockdep_hardirqs_on+0x94/0x140 [ 80.656549][ T4199] ? rcu_lock_release+0x20/0x20 [ 80.661488][ T4199] ? hci_send_to_monitor+0x9c/0x4a0 [ 80.666729][ T4199] hci_rx_work+0x255/0xa10 [ 80.671203][ T4199] process_one_work+0x85f/0x1010 [ 80.676194][ T4199] ? worker_detach_from_pool+0x240/0x240 [ 80.681861][ T4199] ? lockdep_hardirqs_off+0x70/0x100 [ 80.687293][ T4199] ? _raw_spin_lock_irq+0xb7/0xf0 [ 80.692365][ T4199] ? _raw_spin_lock_irqsave+0x100/0x100 [ 80.697944][ T4199] ? wq_worker_running+0x97/0x170 [ 80.703010][ T4199] worker_thread+0xaa6/0x1290 [ 80.707749][ T4199] kthread+0x436/0x520 [ 80.711852][ T4199] ? rcu_lock_release+0x20/0x20 [ 80.716731][ T4199] ? kthread_blkcg+0xd0/0xd0 [ 80.721355][ T4199] ret_from_fork+0x1f/0x30 [ 80.725821][ T4199] [ 80.728932][ C1] vkms_vblank_simulate: vblank timer overrun [ 80.741679][ T4199] kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 80.755687][ T4199] Bluetooth: hci2: failed to register connection device [ 80.950753][ T4342] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 81.018566][ T4347] FAT-fs (loop2): IO charset cp not found [ 84.350223][ T4381] loop4: detected capacity change from 0 to 512 [ 85.924391][ T4381] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpjquota=,noinit_itable,abort,bsdgroups,,errors=continue. Quota mode: writeback. [ 85.943257][ T4381] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.988283][ T4391] sctp: failed to load transform for md5: -2 [ 85.990423][ T4404] syz.2.30 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 86.234714][ T4381] Quota error (device loop4): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 86.330166][ T4411] cgroup: No subsys list or none specified [ 86.471913][ T4381] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 86.590173][ T21] cfg80211: failed to load regulatory.db [ 86.735639][ T4410] loop1: detected capacity change from 0 to 512 [ 86.875382][ T4381] EXT4-fs error (device loop4): ext4_acquire_dquot:6236: comm syz.4.26: Failed to acquire dquot type 0 [ 87.066443][ T4410] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpjquota=,noinit_itable,abort,bsdgroups,,errors=continue. Quota mode: writeback. [ 87.129249][ T4410] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.519597][ T4421] syz.2.32 uses obsolete (PF_INET,SOCK_PACKET) [ 87.862430][ T4236] Bluetooth: hci2: command 0x0406 tx timeout [ 88.794779][ T4430] loop2: detected capacity change from 0 to 128 [ 91.342609][ T4433] netlink: 'syz.0.38': attribute type 12 has an invalid length. [ 91.434978][ T4433] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 91.457121][ T4437] loop4: detected capacity change from 0 to 256 [ 92.860817][ T4448] loop2: detected capacity change from 0 to 512 [ 92.927528][ T4437] FAT-fs (loop4): Directory bread(block 64) failed [ 92.951525][ T4448] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 92.962546][ T4437] FAT-fs (loop4): Directory bread(block 65) failed [ 92.979472][ T4437] FAT-fs (loop4): Directory bread(block 66) failed [ 92.989862][ T4444] netlink: 80 bytes leftover after parsing attributes in process `syz.3.37'. [ 93.002706][ T4437] FAT-fs (loop4): Directory bread(block 67) failed [ 93.031462][ T4437] FAT-fs (loop4): Directory bread(block 68) failed [ 93.060927][ T4437] FAT-fs (loop4): Directory bread(block 69) failed [ 93.077350][ T4437] FAT-fs (loop4): Directory bread(block 70) failed [ 93.095841][ T4437] FAT-fs (loop4): Directory bread(block 71) failed [ 93.107503][ T4448] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (45506!=33349) [ 93.140748][ T4437] FAT-fs (loop4): Directory bread(block 72) failed [ 93.162434][ T4437] FAT-fs (loop4): Directory bread(block 73) failed [ 93.169041][ T4448] EXT4-fs error (device loop2): __ext4_get_inode_loc:4334: comm syz.2.39: Invalid inode table block 1 in block_group 0 [ 93.250120][ T4448] EXT4-fs (loop2): get root inode failed [ 93.309197][ T4454] loop1: detected capacity change from 0 to 512 [ 93.316802][ T4448] EXT4-fs (loop2): mount failed [ 93.376312][ T4454] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 93.396285][ T4454] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (45506!=33349) [ 93.659816][ T4454] EXT4-fs error (device loop1): __ext4_get_inode_loc:4334: comm syz.1.41: Invalid inode table block 1 in block_group 0 [ 93.668578][ T4437] attempt to access beyond end of device [ 93.668578][ T4437] loop4: rw=2049, want=1356, limit=256 [ 93.692474][ T4454] EXT4-fs (loop1): get root inode failed [ 93.697835][ T4376] attempt to access beyond end of device [ 93.697835][ T4376] loop4: rw=1, want=1264, limit=256 [ 93.698158][ T4454] EXT4-fs (loop1): mount failed [ 94.126205][ T4460] Zero length message leads to an empty skb [ 94.134094][ T4460] ubi0: attaching mtd0 [ 94.140015][ T4460] ubi0: scanning is finished [ 94.144723][ T4460] ubi0: empty MTD device detected [ 94.314493][ T4460] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 94.733948][ T4471] ubi0: attaching mtd0 [ 94.746501][ T4471] ubi0: scanning is finished [ 95.385444][ T4471] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 95.774673][ T4470] netlink: 4 bytes leftover after parsing attributes in process `syz.0.45'. [ 95.974330][ T4489] loop4: detected capacity change from 0 to 512 [ 96.377268][ T4497] loop2: detected capacity change from 0 to 256 [ 97.309126][ T4489] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 97.322362][ T4489] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 97.348768][ T4489] EXT4-fs (loop4): 1 truncate cleaned up [ 97.354844][ T4489] EXT4-fs (loop4): mounted filesystem without journal. Opts: minixdf,errors=remount-ro,. Quota mode: none. [ 98.186474][ T4521] loop3: detected capacity change from 0 to 128 [ 98.224817][ T4518] loop0: detected capacity change from 0 to 4096 [ 98.239271][ T4522] loop1: detected capacity change from 0 to 512 [ 98.269202][ T4518] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 98.315128][ T4521] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 98.329546][ T4522] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 98.390325][ T4521] ext4 filesystem being mounted at /13/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 98.401399][ T4522] ext4 filesystem being mounted at /9/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 98.484039][ T4518] EXT4-fs (loop0): Test dummy encryption mode enabled [ 98.500966][ T4518] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpid,mblk_io_submit,nodioread_nolock,test_dummy_encryption,inode_readahead_blks=0x0000000000000000,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 98.551171][ T4522] EXT4-fs error (device loop1): ext4_readdir:263: inode #12: block 32: comm syz.1.58: path /9/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 98.768712][ T4533] fscrypt (loop0): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))") [ 98.849589][ T4518] fscrypt (loop0): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))") [ 98.915842][ T4534] overlayfs: failed to resolve './bus': -2 [ 99.841756][ T4560] loop1: detected capacity change from 0 to 256 [ 100.089111][ T4560] FAT-fs (loop1): Directory bread(block 64) failed [ 100.132479][ T4560] FAT-fs (loop1): Directory bread(block 65) failed [ 100.139295][ T4560] FAT-fs (loop1): Directory bread(block 66) failed [ 100.152407][ T4560] FAT-fs (loop1): Directory bread(block 67) failed [ 100.159495][ T4560] FAT-fs (loop1): Directory bread(block 68) failed [ 100.357684][ T4560] FAT-fs (loop1): Directory bread(block 69) failed [ 100.398365][ T4560] FAT-fs (loop1): Directory bread(block 70) failed [ 100.488326][ T4560] FAT-fs (loop1): Directory bread(block 71) failed [ 100.562665][ T4560] FAT-fs (loop1): Directory bread(block 72) failed [ 100.660654][ T4560] FAT-fs (loop1): Directory bread(block 73) failed [ 101.651119][ T4585] loop2: detected capacity change from 0 to 512 [ 101.673909][ T4587] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 103.840995][ T4585] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 103.890779][ T4585] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 103.988878][ T4585] EXT4-fs (loop2): can't mount with commit=1, fs mounted w/o journal [ 104.902724][ T4595] loop3: detected capacity change from 0 to 8192 [ 105.879901][ T4619] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 105.928124][ T4619] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 106.165556][ T4622] loop1: detected capacity change from 0 to 256 [ 106.783937][ T4619] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 107.001154][ T4619] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 107.125442][ T4619] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 107.145226][ T4619] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 107.210995][ T4619] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 107.377240][ T4619] syz.0.80 (4619) used greatest stack depth: 20144 bytes left [ 107.396983][ T4649] netlink: 8 bytes leftover after parsing attributes in process `syz.0.88'. [ 107.410013][ T4649] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 107.419263][ T4649] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 107.428047][ T4649] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 107.436811][ T4649] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 107.492603][ T4651] loop2: detected capacity change from 0 to 1024 [ 107.519649][ T4643] loop1: detected capacity change from 0 to 4096 [ 107.683598][ T4651] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 107.955334][ T4643] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 107.972375][ T4651] EXT4-fs (loop2): orphan cleanup on readonly fs [ 108.202805][ T4651] Quota error (device loop2): v2_read_file_info: Can't read info structure [ 108.301594][ T4651] EXT4-fs warning (device loop2): ext4_enable_quotas:6488: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 108.335255][ T4643] fs-verity: sha256 using implementation "sha256-avx2" [ 108.385035][ T4651] EXT4-fs (loop2): Cannot turn on quotas: error -5 [ 108.450640][ T4651] EXT4-fs (loop2): 1 truncate cleaned up [ 108.458224][ T4651] EXT4-fs (loop2): mounted filesystem without journal. Opts: nojournal_checksum,resgid=0x000000000000ee00,nolazytime,,errors=continue. Quota mode: writeback. [ 108.483920][ T4643] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.86: bg 0: block 363: padding at end of block bitmap is not set [ 108.650800][ T4643] fs-verity (loop1, inode 15): ext4_end_enable_verity() failed with err -28 [ 108.810647][ T4672] loop4: detected capacity change from 0 to 1024 [ 108.949028][ T4672] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 109.000053][ T4666] loop0: detected capacity change from 0 to 8192 [ 109.116591][ T4666] loop0: p1 p2 p4 [ 109.158239][ T4666] loop0: p1 start 3959422976 is beyond EOD, truncated [ 109.181053][ T4666] loop0: p2 size 384768 extends beyond EOD, truncated [ 109.222621][ T13] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 109.240016][ T4666] loop0: p4 size 1073741824 extends beyond EOD, truncated [ 109.444570][ T4686] loop3: detected capacity change from 0 to 2048 [ 109.464733][ T4679] kvm [4678]: vcpu0, guest rIP: 0x1b8 ignored wrmsr: 0x11e data 0xbe702111 [ 109.482627][ T13] usb 2-1: Using ep0 maxpacket: 8 [ 109.543264][ T4686] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 109.566700][ T4686] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.803877][ T13] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 109.812562][ T13] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 109.822751][ T13] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 109.832840][ T13] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 109.843071][ T13] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 110.277141][ T13] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 110.648676][ T13] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.678606][ T4698] loop4: detected capacity change from 0 to 256 [ 110.942115][ T4182] udevd[4182]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 111.664106][ T4713] tmpfs: Unknown parameter 'noswap' [ 111.960173][ T4178] udevd[4178]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 112.390635][ T13] usb 2-1: can't set config #16, error -71 [ 112.402146][ T13] usb 2-1: USB disconnect, device number 2 [ 113.158754][ T4730] loop2: detected capacity change from 0 to 256 [ 113.237406][ T4732] loop3: detected capacity change from 0 to 512 [ 113.298139][ T4730] FAT-fs (loop2): Directory bread(block 64) failed [ 113.304812][ T4730] FAT-fs (loop2): Directory bread(block 65) failed [ 113.311451][ T4730] FAT-fs (loop2): Directory bread(block 66) failed [ 113.318068][ T4730] FAT-fs (loop2): Directory bread(block 67) failed [ 113.324762][ T4730] FAT-fs (loop2): Directory bread(block 68) failed [ 113.331318][ T4730] FAT-fs (loop2): Directory bread(block 69) failed [ 113.339234][ T4730] FAT-fs (loop2): Directory bread(block 70) failed [ 113.345888][ T4730] FAT-fs (loop2): Directory bread(block 71) failed [ 113.352520][ T4730] FAT-fs (loop2): Directory bread(block 72) failed [ 113.358804][ T4734] loop0: detected capacity change from 0 to 512 [ 113.359096][ T4730] FAT-fs (loop2): Directory bread(block 73) failed [ 113.532611][ T4732] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 113.568500][ T4732] ext4 filesystem being mounted at /20/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.833018][ T4734] EXT4-fs (loop0): mounted filesystem without journal. Opts: lazytime,errors=remount-ro,. Quota mode: writeback. [ 114.107890][ T4734] ext4 filesystem being mounted at /28/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.274496][ T4734] EXT4-fs (loop0): shut down requested (1) [ 114.590798][ T4751] loop3: detected capacity change from 0 to 2048 [ 114.905357][ T4751] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 114.955595][ T4751] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.082985][ T4753] loop0: detected capacity change from 0 to 4096 [ 115.361945][ T4753] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 116.274755][ T4767] tmpfs: Bad value for 'mpol' [ 118.566784][ T4783] loop0: detected capacity change from 0 to 256 [ 118.809004][ T4790] loop4: detected capacity change from 0 to 256 [ 119.286676][ T4792] loop3: detected capacity change from 0 to 256 [ 119.305883][ T4790] FAT-fs (loop4): Directory bread(block 64) failed [ 119.320109][ T4790] FAT-fs (loop4): Directory bread(block 65) failed [ 119.336188][ T4790] FAT-fs (loop4): Directory bread(block 66) failed [ 119.348278][ T4790] FAT-fs (loop4): Directory bread(block 67) failed [ 119.355440][ T4790] FAT-fs (loop4): Directory bread(block 68) failed [ 119.362173][ T4790] FAT-fs (loop4): Directory bread(block 69) failed [ 119.385176][ T4790] FAT-fs (loop4): Directory bread(block 70) failed [ 119.392011][ T4790] FAT-fs (loop4): Directory bread(block 71) failed [ 119.401315][ T4790] FAT-fs (loop4): Directory bread(block 72) failed [ 119.411703][ T4790] FAT-fs (loop4): Directory bread(block 73) failed [ 120.842877][ T4820] loop2: detected capacity change from 0 to 256 [ 120.961962][ T4820] FAT-fs (loop2): Directory bread(block 64) failed [ 120.968736][ T4820] FAT-fs (loop2): Directory bread(block 65) failed [ 120.975834][ T4820] FAT-fs (loop2): Directory bread(block 66) failed [ 120.982559][ T4820] FAT-fs (loop2): Directory bread(block 67) failed [ 120.989467][ T4820] FAT-fs (loop2): Directory bread(block 68) failed [ 120.996220][ T4820] FAT-fs (loop2): Directory bread(block 69) failed [ 121.003154][ T4820] FAT-fs (loop2): Directory bread(block 70) failed [ 121.009857][ T4820] FAT-fs (loop2): Directory bread(block 71) failed [ 121.017271][ T4820] FAT-fs (loop2): Directory bread(block 72) failed [ 121.024152][ T4820] FAT-fs (loop2): Directory bread(block 73) failed [ 121.926884][ T4811] loop3: detected capacity change from 0 to 2048 [ 122.264263][ T4826] loop0: detected capacity change from 0 to 256 [ 123.046268][ T4830] loop1: detected capacity change from 0 to 512 [ 123.403218][ T4811] EXT4-fs: error -4 creating inode table initialization thread [ 123.982811][ T4811] EXT4-fs (loop3): mount failed [ 124.093124][ T4830] EXT4-fs (loop1): Test dummy encryption mode enabled [ 124.100013][ T4830] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 124.130110][ T4830] EXT4-fs error (device loop1): ext4_orphan_get:1432: comm syz.1.134: bad orphan inode 131083 [ 124.141157][ T4830] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,noload,,errors=continue. Quota mode: none. [ 124.467692][ T4844] loop2: detected capacity change from 0 to 256 [ 125.489420][ T4855] loop1: detected capacity change from 0 to 256 [ 125.671317][ T4859] loop4: detected capacity change from 0 to 512 [ 126.464844][ T4859] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.145: invalid indirect mapped block 11 (level 0) [ 126.481840][ T4882] loop1: detected capacity change from 0 to 2048 [ 126.493592][ T4859] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #13: comm syz.4.145: attempt to clear invalid blocks 1024 len 1 [ 126.507828][ T4859] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 126.525971][ T4859] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.145: invalid indirect mapped block 1819239214 (level 0) [ 126.540670][ T4859] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.145: invalid indirect mapped block 33554432 (level 2) [ 126.564469][ T4859] EXT4-fs (loop4): 1 truncate cleaned up [ 126.572537][ T4236] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 126.580629][ T4859] EXT4-fs (loop4): mounted filesystem without journal. Opts: max_batch_time=0x000000000000000e,usrquota,nodelalloc,usrjquota=,max_batch_time=0x00000000000000ea,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 126.678236][ T4882] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 126.708820][ T4882] ext4 filesystem being mounted at /23/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 126.776258][ T4887] loop3: detected capacity change from 0 to 256 [ 126.802860][ T4889] loop0: detected capacity change from 0 to 256 [ 126.812807][ T4236] usb 3-1: Using ep0 maxpacket: 8 [ 126.887990][ T4889] FAT-fs (loop0): Directory bread(block 64) failed [ 126.896761][ T4889] FAT-fs (loop0): Directory bread(block 65) failed [ 126.903498][ T4889] FAT-fs (loop0): Directory bread(block 66) failed [ 126.910055][ T4889] FAT-fs (loop0): Directory bread(block 67) failed [ 126.916770][ T4889] FAT-fs (loop0): Directory bread(block 68) failed [ 126.923468][ T4889] FAT-fs (loop0): Directory bread(block 69) failed [ 126.924493][ T4887] FAT-fs (loop3): Directory bread(block 64) failed [ 126.930087][ T4889] FAT-fs (loop0): Directory bread(block 70) failed [ 126.943241][ T4889] FAT-fs (loop0): Directory bread(block 71) failed [ 126.949865][ T4889] FAT-fs (loop0): Directory bread(block 72) failed [ 126.956973][ T4889] FAT-fs (loop0): Directory bread(block 73) failed [ 126.973015][ T4236] usb 3-1: unable to get BOS descriptor or descriptor too short [ 127.162537][ T4887] FAT-fs (loop3): Directory bread(block 65) failed [ 127.169391][ T4887] FAT-fs (loop3): Directory bread(block 66) failed [ 127.182582][ T4887] FAT-fs (loop3): Directory bread(block 67) failed [ 127.189238][ T4887] FAT-fs (loop3): Directory bread(block 68) failed [ 127.213520][ T4236] usb 3-1: config 3 has an invalid interface number: 31 but max is 0 [ 127.565154][ T4887] FAT-fs (loop3): Directory bread(block 69) failed [ 128.957514][ T4887] FAT-fs (loop3): Directory bread(block 70) failed [ 128.964609][ T4236] usb 3-1: config 3 has no interface number 0 [ 128.965624][ T4887] FAT-fs (loop3): Directory bread(block 71) failed [ 128.977605][ T4887] FAT-fs (loop3): Directory bread(block 72) failed [ 128.984481][ T4236] usb 3-1: config 3 interface 31 altsetting 95 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 129.418890][ T4887] FAT-fs (loop3): Directory bread(block 73) failed [ 129.631456][ T4236] usb 3-1: config 3 interface 31 altsetting 95 has a duplicate endpoint with address 0x4, skipping [ 129.642654][ T4236] usb 3-1: config 3 interface 31 has no altsetting 0 [ 129.682485][ T4236] usb 3-1: string descriptor 0 read error: -71 [ 129.698123][ T4236] usb 3-1: New USB device found, idVendor=17cc, idProduct=0839, bcdDevice=a1.8f [ 129.707474][ T4236] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.815402][ T4906] loop4: detected capacity change from 0 to 256 [ 129.922480][ T4236] usb 3-1: can't set config #3, error -71 [ 129.939557][ T4236] usb 3-1: USB disconnect, device number 2 [ 130.405828][ T4910] loop1: detected capacity change from 0 to 256 [ 130.641524][ T4909] loop3: detected capacity change from 0 to 512 [ 131.861614][ T4909] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 131.920936][ T4909] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 131.942120][ T4909] System zones: 1-12 [ 131.982200][ T4936] device pim6reg1 entered promiscuous mode [ 132.004254][ T4909] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2807: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 132.032535][ T4909] EXT4-fs (loop3): 1 truncate cleaned up [ 132.038243][ T4909] EXT4-fs (loop3): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000005,debug_want_extra_isize=0x000000000000006a,mb_optimize_scan=0x0000000000000001,debug,data=journal,,errors=continue. Quota mode: none. [ 132.344346][ T4940] device syzkaller0 entered promiscuous mode [ 132.404655][ T4909] netlink: 24 bytes leftover after parsing attributes in process `syz.3.156'. [ 132.437822][ T4943] loop4: detected capacity change from 0 to 256 [ 132.655912][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.702992][ T4943] FAT-fs (loop4): Directory bread(block 64) failed [ 132.709630][ T4943] FAT-fs (loop4): Directory bread(block 65) failed [ 132.716678][ T4943] FAT-fs (loop4): Directory bread(block 66) failed [ 132.723322][ T4943] FAT-fs (loop4): Directory bread(block 67) failed [ 132.729928][ T4943] FAT-fs (loop4): Directory bread(block 68) failed [ 132.736580][ T4943] FAT-fs (loop4): Directory bread(block 69) failed [ 132.743243][ T4943] FAT-fs (loop4): Directory bread(block 70) failed [ 132.749823][ T4943] FAT-fs (loop4): Directory bread(block 71) failed [ 132.756508][ T4943] FAT-fs (loop4): Directory bread(block 72) failed [ 132.763107][ T4943] FAT-fs (loop4): Directory bread(block 73) failed [ 132.778315][ T4946] vivid-001: disconnect [ 132.892185][ T4904] vivid-001: reconnect [ 133.856448][ T4952] loop1: detected capacity change from 0 to 1024 [ 134.660126][ T4952] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 134.667446][ T4952] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 134.676931][ T4952] EXT4-fs (loop1): test_dummy_encryption requires encrypt feature [ 135.039666][ T4938] 9pnet: Insufficient options for proto=fd [ 135.385993][ T4197] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 135.395938][ T4197] CPU: 1 PID: 4197 Comm: kworker/u5:3 Not tainted syzkaller #0 [ 135.403539][ T4197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 135.413629][ T4197] Workqueue: hci3 hci_rx_work [ 135.418368][ T4197] Call Trace: [ 135.421696][ T4197] [ 135.424679][ T4197] dump_stack_lvl+0x188/0x250 [ 135.429396][ T4197] ? show_regs_print_info+0x20/0x20 [ 135.434630][ T4197] ? load_image+0x400/0x400 [ 135.439272][ T4197] sysfs_create_dir_ns+0x26a/0x290 [ 135.444454][ T4197] ? sysfs_warn_dup+0xa0/0xa0 [ 135.449167][ T4197] ? process_one_work+0x85f/0x1010 [ 135.454310][ T4197] ? do_raw_spin_unlock+0x11d/0x230 [ 135.459553][ T4197] kobject_add_internal+0x6e0/0xd90 [ 135.464795][ T4197] kobject_add+0x160/0x230 [ 135.469245][ T4197] ? kobject_init+0x1d0/0x1d0 [ 135.473957][ T4197] ? klist_children_get+0x50/0x50 [ 135.479100][ T4197] ? get_device_parent+0x121/0x3f0 [ 135.484249][ T4197] device_add+0x483/0xfb0 [ 135.488640][ T4197] hci_conn_add_sysfs+0xd1/0x1e0 [ 135.493610][ T4197] le_conn_complete_evt+0xc48/0x15c0 [ 135.498968][ T4197] ? cs_le_create_conn+0x5e0/0x5e0 [ 135.504155][ T4197] ? __mutex_trylock_common+0x155/0x260 [ 135.509754][ T4197] hci_le_meta_evt+0x285/0x3c90 [ 135.514639][ T4197] ? hci_event_packet+0x37b/0x1370 [ 135.519789][ T4197] ? __lock_acquire+0x7d10/0x7d10 [ 135.525050][ T4197] ? hci_remote_host_features_evt+0x280/0x280 [ 135.531155][ T4197] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 135.536825][ T4197] ? mark_lock+0x94/0x320 [ 135.541280][ T4197] ? mutex_unlock+0x10/0x10 [ 135.545816][ T4197] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 135.551834][ T4197] ? lock_chain_count+0x20/0x20 [ 135.556725][ T4197] ? __rwlock_init+0x140/0x140 [ 135.561524][ T4197] hci_event_packet+0xe48/0x1370 [ 135.566489][ T4197] ? lockdep_hardirqs_on+0x94/0x140 [ 135.571737][ T4197] ? rcu_lock_release+0x20/0x20 [ 135.576626][ T4197] ? hci_send_to_monitor+0x9c/0x4a0 [ 135.581858][ T4197] hci_rx_work+0x255/0xa10 [ 135.586318][ T4197] process_one_work+0x85f/0x1010 [ 135.591301][ T4197] ? worker_detach_from_pool+0x240/0x240 [ 135.596968][ T4197] ? lockdep_hardirqs_off+0x70/0x100 [ 135.602299][ T4197] ? _raw_spin_lock_irq+0xb7/0xf0 [ 135.607359][ T4197] ? _raw_spin_lock_irqsave+0x100/0x100 [ 135.612945][ T4197] ? wq_worker_running+0x97/0x170 [ 135.618005][ T4197] worker_thread+0xaa6/0x1290 [ 135.622807][ T4197] kthread+0x436/0x520 [ 135.626953][ T4197] ? rcu_lock_release+0x20/0x20 [ 135.631856][ T4197] ? kthread_blkcg+0xd0/0xd0 [ 135.636490][ T4197] ret_from_fork+0x1f/0x30 [ 135.640952][ T4197] [ 135.665863][ T4197] kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 135.679356][ T4197] Bluetooth: hci3: failed to register connection device [ 137.230698][ T4976] loop4: detected capacity change from 0 to 256 [ 137.579516][ T4976] FAT-fs (loop4): Directory bread(block 64) failed [ 137.673578][ T4987] 9pnet: Insufficient options for proto=fd [ 137.833552][ T4976] FAT-fs (loop4): Directory bread(block 65) failed [ 137.983847][ T4976] FAT-fs (loop4): Directory bread(block 66) failed [ 138.213078][ T4976] FAT-fs (loop4): Directory bread(block 67) failed [ 138.281231][ T4976] FAT-fs (loop4): Directory bread(block 68) failed [ 138.412910][ T4976] FAT-fs (loop4): Directory bread(block 69) failed [ 138.503158][ T4976] FAT-fs (loop4): Directory bread(block 70) failed [ 138.509729][ T4976] FAT-fs (loop4): Directory bread(block 71) failed [ 138.544730][ T4976] FAT-fs (loop4): Directory bread(block 72) failed [ 138.607773][ T4976] FAT-fs (loop4): Directory bread(block 73) failed [ 138.655609][ T4996] loop2: detected capacity change from 0 to 256 [ 138.772820][ T5002] bond0: (slave virt_wifi0): The slave device specified does not support setting the MAC address [ 138.784322][ T5002] bond0: (slave virt_wifi0): Error -95 calling set_mac_address [ 138.836602][ T5002] loop1: detected capacity change from 0 to 1024 [ 138.870806][ T5002] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 138.878126][ T5002] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 138.887751][ T5002] EXT4-fs (loop1): test_dummy_encryption requires encrypt feature [ 139.685609][ T5005] loop0: detected capacity change from 0 to 256 [ 139.807865][ T5005] FAT-fs (loop0): Directory bread(block 64) failed [ 139.814566][ T5005] FAT-fs (loop0): Directory bread(block 65) failed [ 139.821208][ T5005] FAT-fs (loop0): Directory bread(block 66) failed [ 139.827832][ T5005] FAT-fs (loop0): Directory bread(block 67) failed [ 139.834531][ T5005] FAT-fs (loop0): Directory bread(block 68) failed [ 139.841122][ T5005] FAT-fs (loop0): Directory bread(block 69) failed [ 139.847847][ T5005] FAT-fs (loop0): Directory bread(block 70) failed [ 139.854849][ T5005] FAT-fs (loop0): Directory bread(block 71) failed [ 139.861976][ T5005] FAT-fs (loop0): Directory bread(block 72) failed [ 139.868577][ T5005] FAT-fs (loop0): Directory bread(block 73) failed [ 143.782879][ T4197] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 143.782944][ T4197] CPU: 0 PID: 4197 Comm: kworker/u5:3 Not tainted syzkaller #0 [ 143.782966][ T4197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 143.782980][ T4197] Workqueue: hci1 hci_rx_work [ 143.783010][ T4197] Call Trace: [ 143.783018][ T4197] [ 143.783027][ T4197] dump_stack_lvl+0x188/0x250 [ 143.783056][ T4197] ? show_regs_print_info+0x20/0x20 [ 143.783079][ T4197] ? load_image+0x400/0x400 [ 143.783114][ T4197] sysfs_create_dir_ns+0x26a/0x290 [ 143.783140][ T4197] ? sysfs_warn_dup+0xa0/0xa0 [ 143.783159][ T4197] ? process_one_work+0x85f/0x1010 [ 143.783185][ T4197] ? do_raw_spin_unlock+0x11d/0x230 [ 143.783214][ T4197] kobject_add_internal+0x6e0/0xd90 [ 143.783246][ T4197] kobject_add+0x160/0x230 [ 143.783274][ T4197] ? kobject_init+0x1d0/0x1d0 [ 143.783303][ T4197] ? klist_children_get+0x50/0x50 [ 143.783328][ T4197] ? get_device_parent+0x121/0x3f0 [ 143.783356][ T4197] device_add+0x483/0xfb0 [ 143.783397][ T4197] hci_conn_add_sysfs+0xd1/0x1e0 [ 143.783426][ T4197] le_conn_complete_evt+0xc48/0x15c0 [ 143.783464][ T4197] ? cs_le_create_conn+0x5e0/0x5e0 [ 143.783495][ T4197] ? __mutex_trylock_common+0x155/0x260 [ 143.783528][ T4197] hci_le_meta_evt+0x285/0x3c90 [ 143.783553][ T4197] ? hci_event_packet+0x37b/0x1370 [ 143.783583][ T4197] ? __lock_acquire+0x7d10/0x7d10 [ 143.783619][ T4197] ? hci_remote_host_features_evt+0x280/0x280 [ 143.783644][ T4197] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 143.783671][ T4197] ? mark_lock+0x94/0x320 [ 143.783691][ T4197] ? mutex_unlock+0x10/0x10 [ 143.783716][ T4197] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 143.783746][ T4197] ? lock_chain_count+0x20/0x20 [ 143.783771][ T4197] ? __rwlock_init+0x140/0x140 [ 143.783798][ T4197] hci_event_packet+0xe48/0x1370 [ 143.783819][ T4197] ? lockdep_hardirqs_on+0x94/0x140 [ 143.783851][ T4197] ? rcu_lock_release+0x20/0x20 [ 143.783879][ T4197] ? hci_send_to_monitor+0x9c/0x4a0 [ 143.783907][ T4197] hci_rx_work+0x255/0xa10 [ 143.783945][ T4197] process_one_work+0x85f/0x1010 [ 143.783984][ T4197] ? worker_detach_from_pool+0x240/0x240 [ 143.784007][ T4197] ? lockdep_hardirqs_off+0x70/0x100 [ 143.784036][ T4197] ? _raw_spin_lock_irq+0xb7/0xf0 [ 143.784057][ T4197] ? _raw_spin_lock_irqsave+0x100/0x100 [ 143.784083][ T4197] ? wq_worker_running+0x97/0x170 [ 143.784107][ T4197] worker_thread+0xaa6/0x1290 [ 143.784161][ T4197] kthread+0x436/0x520 [ 143.784180][ T4197] ? rcu_lock_release+0x20/0x20 [ 143.784201][ T4197] ? kthread_blkcg+0xd0/0xd0 [ 143.784225][ T4197] ret_from_fork+0x1f/0x30 [ 143.784263][ T4197] [ 143.785451][ T4197] kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 143.785480][ T4197] Bluetooth: hci1: failed to register connection device [ 144.925414][ T5047] loop1: detected capacity change from 0 to 512 [ 145.007627][ T5047] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 145.140492][ T5047] EXT4-fs (loop1): 1 truncate cleaned up [ 145.192557][ T5047] EXT4-fs (loop1): mounted filesystem without journal. Opts: minixdf,nobarrier,stripe=0x0000000000000001,grpjquota=,resgid=0x0000000000000000,,errors=continue. Quota mode: none. [ 145.204462][ T5057] loop0: detected capacity change from 0 to 256 [ 145.293075][ T5057] FAT-fs (loop0): Directory bread(block 64) failed [ 145.309975][ T5057] FAT-fs (loop0): Directory bread(block 65) failed [ 145.331455][ T5047] EXT4-fs (loop1): shut down requested (0) [ 145.337641][ T5057] FAT-fs (loop0): Directory bread(block 66) failed [ 145.382048][ T5057] FAT-fs (loop0): Directory bread(block 67) failed [ 145.410393][ T5059] loop4: detected capacity change from 0 to 256 [ 145.420932][ T5057] FAT-fs (loop0): Directory bread(block 68) failed [ 145.465213][ T5057] FAT-fs (loop0): Directory bread(block 69) failed [ 145.471870][ T5057] FAT-fs (loop0): Directory bread(block 70) failed [ 145.495779][ T5059] FAT-fs (loop4): Directory bread(block 64) failed [ 145.503932][ T5059] FAT-fs (loop4): Directory bread(block 65) failed [ 145.510546][ T5059] FAT-fs (loop4): Directory bread(block 66) failed [ 145.517211][ T5059] FAT-fs (loop4): Directory bread(block 67) failed [ 145.523877][ T5059] FAT-fs (loop4): Directory bread(block 68) failed [ 145.530583][ T5059] FAT-fs (loop4): Directory bread(block 69) failed [ 145.537359][ T5059] FAT-fs (loop4): Directory bread(block 70) failed [ 145.543982][ T5059] FAT-fs (loop4): Directory bread(block 71) failed [ 145.550722][ T5059] FAT-fs (loop4): Directory bread(block 72) failed [ 145.557322][ T5059] FAT-fs (loop4): Directory bread(block 73) failed [ 145.765847][ T5057] FAT-fs (loop0): Directory bread(block 71) failed [ 145.772944][ T5057] FAT-fs (loop0): Directory bread(block 72) failed [ 145.830816][ T5065] 9pnet: Insufficient options for proto=fd [ 146.479303][ T5057] FAT-fs (loop0): Directory bread(block 73) failed [ 147.309813][ T1335] Bluetooth: hci5: command 0x0409 tx timeout [ 148.089262][ T5054] chnl_net:caif_netlink_parms(): no params data found [ 149.577047][ T5095] loop4: detected capacity change from 0 to 1024 [ 149.684970][ T5095] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 149.693285][ T5095] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 149.702926][ T5095] EXT4-fs (loop4): test_dummy_encryption requires encrypt feature [ 150.263915][ T4199] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 150.273520][ T4199] CPU: 0 PID: 4199 Comm: kworker/u5:4 Not tainted syzkaller #0 [ 150.281107][ T4199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 150.291187][ T4199] Workqueue: hci3 hci_rx_work [ 150.295909][ T4199] Call Trace: [ 150.299222][ T4199] [ 150.302164][ T4199] dump_stack_lvl+0x188/0x250 [ 150.306870][ T4199] ? show_regs_print_info+0x20/0x20 [ 150.312080][ T4199] ? load_image+0x400/0x400 [ 150.316598][ T4199] sysfs_create_dir_ns+0x26a/0x290 [ 150.321724][ T4199] ? sysfs_warn_dup+0xa0/0xa0 [ 150.326432][ T4199] ? process_one_work+0x85f/0x1010 [ 150.331581][ T4199] ? do_raw_spin_unlock+0x11d/0x230 [ 150.336819][ T4199] kobject_add_internal+0x6e0/0xd90 [ 150.342056][ T4199] kobject_add+0x160/0x230 [ 150.347794][ T4199] ? kobject_init+0x1d0/0x1d0 [ 150.347858][ T4199] ? klist_children_get+0x50/0x50 [ 150.357681][ T4199] ? get_device_parent+0x121/0x3f0 [ 150.362833][ T4199] device_add+0x483/0xfb0 [ 150.367213][ T4199] hci_conn_add_sysfs+0xd1/0x1e0 [ 150.372185][ T4199] le_conn_complete_evt+0xc48/0x15c0 [ 150.377515][ T4199] ? cs_le_create_conn+0x5e0/0x5e0 [ 150.382767][ T4199] ? __mutex_trylock_common+0x155/0x260 [ 150.388363][ T4199] hci_le_meta_evt+0x285/0x3c90 [ 150.393237][ T4199] ? hci_event_packet+0x37b/0x1370 [ 150.398365][ T4199] ? __lock_acquire+0x7d10/0x7d10 [ 150.403419][ T4199] ? hci_remote_host_features_evt+0x280/0x280 [ 150.409513][ T4199] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 150.415171][ T4199] ? mark_lock+0x94/0x320 [ 150.419516][ T4199] ? mutex_unlock+0x10/0x10 [ 150.424040][ T4199] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 150.430045][ T4199] ? lock_chain_count+0x20/0x20 [ 150.434914][ T4199] ? __rwlock_init+0x140/0x140 [ 150.439701][ T4199] hci_event_packet+0xe48/0x1370 [ 150.444810][ T4199] ? lockdep_hardirqs_on+0x94/0x140 [ 150.450059][ T4199] ? rcu_lock_release+0x20/0x20 [ 150.454968][ T4199] ? hci_send_to_monitor+0x9c/0x4a0 [ 150.460282][ T4199] hci_rx_work+0x255/0xa10 [ 150.464733][ T4199] process_one_work+0x85f/0x1010 [ 150.469712][ T4199] ? worker_detach_from_pool+0x240/0x240 [ 150.475377][ T4199] ? lockdep_hardirqs_off+0x70/0x100 [ 150.480718][ T4199] ? _raw_spin_lock_irq+0xb7/0xf0 [ 150.485764][ T4199] ? _raw_spin_lock_irqsave+0x100/0x100 [ 150.491329][ T4199] ? wq_worker_running+0x97/0x170 [ 150.496375][ T4199] worker_thread+0xaa6/0x1290 [ 150.501095][ T4199] kthread+0x436/0x520 [ 150.505180][ T4199] ? rcu_lock_release+0x20/0x20 [ 150.510043][ T4199] ? kthread_blkcg+0xd0/0xd0 [ 150.514664][ T4199] ret_from_fork+0x1f/0x30 [ 150.519111][ T4199] [ 150.557298][ T4199] kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 150.570768][ T4199] Bluetooth: hci3: failed to register connection device [ 150.641173][ T5054] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.652406][ T1335] Bluetooth: hci5: command 0x041b tx timeout [ 150.721898][ T5054] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.797727][ T5054] device bridge_slave_0 entered promiscuous mode [ 150.914467][ T5054] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.968102][ T5054] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.052571][ T4234] Bluetooth: hci1: command 0x0406 tx timeout [ 151.102013][ T5054] device bridge_slave_1 entered promiscuous mode [ 151.290620][ T5112] 9pnet: Insufficient options for proto=fd [ 151.654573][ T5054] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 151.994797][ T5054] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 152.236816][ T5124] loop1: detected capacity change from 0 to 256 [ 152.245512][ T5054] team0: Port device team_slave_0 added [ 152.255320][ T5054] team0: Port device team_slave_1 added [ 152.280437][ T5054] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 152.290419][ T5054] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 152.317254][ T5054] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 152.365105][ T5124] FAT-fs (loop1): Directory bread(block 64) failed [ 152.371819][ T5124] FAT-fs (loop1): Directory bread(block 65) failed [ 152.378639][ T5124] FAT-fs (loop1): Directory bread(block 66) failed [ 152.385221][ T5124] FAT-fs (loop1): Directory bread(block 67) failed [ 152.391901][ T5124] FAT-fs (loop1): Directory bread(block 68) failed [ 152.398513][ T5124] FAT-fs (loop1): Directory bread(block 69) failed [ 152.405161][ T5124] FAT-fs (loop1): Directory bread(block 70) failed [ 152.411708][ T5124] FAT-fs (loop1): Directory bread(block 71) failed [ 152.418339][ T5124] FAT-fs (loop1): Directory bread(block 72) failed [ 152.424921][ T5124] FAT-fs (loop1): Directory bread(block 73) failed [ 152.731358][ T5054] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 152.738858][ T4236] Bluetooth: hci5: command 0x040f tx timeout [ 152.745037][ T5054] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 152.907900][ T5126] loop4: detected capacity change from 0 to 256 [ 153.282416][ T5054] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 154.545659][ T5054] device hsr_slave_0 entered promiscuous mode [ 154.630860][ T5054] device hsr_slave_1 entered promiscuous mode [ 154.682503][ T5054] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 154.690168][ T5054] Cannot create hsr debugfs directory [ 154.931097][ T4197] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 154.941260][ T4197] CPU: 1 PID: 4197 Comm: kworker/u5:3 Not tainted syzkaller #0 [ 154.948842][ T4197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 154.958938][ T4197] Workqueue: hci2 hci_rx_work [ 154.963656][ T4197] Call Trace: [ 154.966957][ T4197] [ 154.969918][ T4197] dump_stack_lvl+0x188/0x250 [ 154.974630][ T4197] ? show_regs_print_info+0x20/0x20 [ 154.979861][ T4197] ? load_image+0x400/0x400 [ 154.984498][ T4197] sysfs_create_dir_ns+0x26a/0x290 [ 154.989646][ T4197] ? sysfs_warn_dup+0xa0/0xa0 [ 154.994350][ T4197] ? process_one_work+0x85f/0x1010 [ 154.999498][ T4197] ? do_raw_spin_unlock+0x11d/0x230 [ 155.004739][ T4197] kobject_add_internal+0x6e0/0xd90 [ 155.009979][ T4197] kobject_add+0x160/0x230 [ 155.014431][ T4197] ? kobject_init+0x1d0/0x1d0 [ 155.019146][ T4197] ? klist_children_get+0x50/0x50 [ 155.024206][ T4197] ? get_device_parent+0x121/0x3f0 [ 155.029411][ T4197] device_add+0x483/0xfb0 [ 155.033853][ T4197] hci_conn_add_sysfs+0xd1/0x1e0 [ 155.038833][ T4197] le_conn_complete_evt+0xc48/0x15c0 [ 155.044175][ T4197] ? cs_le_create_conn+0x5e0/0x5e0 [ 155.049334][ T4197] ? __mutex_trylock_common+0x155/0x260 [ 155.054924][ T4197] hci_le_meta_evt+0x285/0x3c90 [ 155.059815][ T4197] ? hci_event_packet+0x37b/0x1370 [ 155.064964][ T4197] ? __lock_acquire+0x7d10/0x7d10 [ 155.070036][ T4197] ? hci_remote_host_features_evt+0x280/0x280 [ 155.076135][ T4197] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 155.081804][ T4197] ? mark_lock+0x94/0x320 [ 155.086166][ T4197] ? mutex_unlock+0x10/0x10 [ 155.090710][ T4197] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 155.096738][ T4197] ? lock_chain_count+0x20/0x20 [ 155.101636][ T4197] ? __rwlock_init+0x140/0x140 [ 155.106450][ T4197] hci_event_packet+0xe48/0x1370 [ 155.111432][ T4197] ? lockdep_hardirqs_on+0x94/0x140 [ 155.116674][ T4197] ? rcu_lock_release+0x20/0x20 [ 155.121572][ T4197] ? hci_send_to_monitor+0x9c/0x4a0 [ 155.126806][ T4197] hci_rx_work+0x255/0xa10 [ 155.131277][ T4197] process_one_work+0x85f/0x1010 [ 155.136271][ T4197] ? worker_detach_from_pool+0x240/0x240 [ 155.141941][ T4197] ? lockdep_hardirqs_off+0x70/0x100 [ 155.147259][ T4197] ? _raw_spin_lock_irq+0xb7/0xf0 [ 155.152309][ T4197] ? _raw_spin_lock_irqsave+0x100/0x100 [ 155.157882][ T4197] ? wq_worker_running+0x97/0x170 [ 155.162925][ T4197] worker_thread+0xaa6/0x1290 [ 155.167644][ T4197] kthread+0x436/0x520 [ 155.171731][ T4197] ? rcu_lock_release+0x20/0x20 [ 155.176601][ T4197] ? kthread_blkcg+0xd0/0xd0 [ 155.181207][ T4197] ret_from_fork+0x1f/0x30 [ 155.185649][ T4197] [ 155.230127][ T4236] Bluetooth: hci5: command 0x0419 tx timeout [ 155.236445][ T4197] kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 155.249772][ T4197] Bluetooth: hci2: failed to register connection device [ 155.913785][ T5169] loop4: detected capacity change from 0 to 256 [ 155.996841][ T5169] FAT-fs (loop4): Directory bread(block 64) failed [ 156.003510][ T5169] FAT-fs (loop4): Directory bread(block 65) failed [ 156.010104][ T5169] FAT-fs (loop4): Directory bread(block 66) failed [ 156.016715][ T5169] FAT-fs (loop4): Directory bread(block 67) failed [ 156.023443][ T5169] FAT-fs (loop4): Directory bread(block 68) failed [ 156.029988][ T5169] FAT-fs (loop4): Directory bread(block 69) failed [ 156.037423][ T5169] FAT-fs (loop4): Directory bread(block 70) failed [ 156.044018][ T5169] FAT-fs (loop4): Directory bread(block 71) failed [ 156.050611][ T5169] FAT-fs (loop4): Directory bread(block 72) failed [ 156.057227][ T5169] FAT-fs (loop4): Directory bread(block 73) failed [ 157.025670][ T4639] Bluetooth: hci3: command 0x0406 tx timeout [ 157.725217][ T5096] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.950633][ T5096] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.961453][ T5191] loop1: detected capacity change from 0 to 256 [ 158.916142][ T5204] loop0: detected capacity change from 0 to 1024 [ 159.237881][ T5204] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 159.245176][ T5204] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 159.254910][ T5204] EXT4-fs (loop0): test_dummy_encryption requires encrypt feature [ 159.289169][ T5201] loop2: detected capacity change from 0 to 256 [ 159.360780][ T5201] FAT-fs (loop2): Directory bread(block 64) failed [ 159.367508][ T5201] FAT-fs (loop2): Directory bread(block 65) failed [ 159.374231][ T5201] FAT-fs (loop2): Directory bread(block 66) failed [ 159.380784][ T5201] FAT-fs (loop2): Directory bread(block 67) failed [ 159.387412][ T5201] FAT-fs (loop2): Directory bread(block 68) failed [ 159.393987][ T5201] FAT-fs (loop2): Directory bread(block 69) failed [ 159.400578][ T5201] FAT-fs (loop2): Directory bread(block 70) failed [ 159.407366][ T5201] FAT-fs (loop2): Directory bread(block 71) failed [ 159.414016][ T5201] FAT-fs (loop2): Directory bread(block 72) failed [ 159.421414][ T5201] FAT-fs (loop2): Directory bread(block 73) failed [ 159.527383][ T5096] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.253911][ T5096] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.624256][ T4197] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 160.633965][ T4197] CPU: 1 PID: 4197 Comm: kworker/u5:3 Not tainted syzkaller #0 [ 160.641534][ T4197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 160.651633][ T4197] Workqueue: hci2 hci_rx_work [ 160.656342][ T4197] Call Trace: [ 160.659643][ T4197] [ 160.662590][ T4197] dump_stack_lvl+0x188/0x250 [ 160.667309][ T4197] ? show_regs_print_info+0x20/0x20 [ 160.672532][ T4197] ? load_image+0x400/0x400 [ 160.677075][ T4197] sysfs_create_dir_ns+0x26a/0x290 [ 160.682220][ T4197] ? sysfs_warn_dup+0xa0/0xa0 [ 160.686980][ T4197] ? process_one_work+0x85f/0x1010 [ 160.692135][ T4197] ? do_raw_spin_unlock+0x11d/0x230 [ 160.697382][ T4197] kobject_add_internal+0x6e0/0xd90 [ 160.702634][ T4197] kobject_add+0x160/0x230 [ 160.707106][ T4197] ? kobject_init+0x1d0/0x1d0 [ 160.711826][ T4197] ? klist_children_get+0x50/0x50 [ 160.717010][ T4197] ? get_device_parent+0x121/0x3f0 [ 160.722164][ T4197] device_add+0x483/0xfb0 [ 160.726542][ T4197] hci_conn_add_sysfs+0xd1/0x1e0 [ 160.731522][ T4197] le_conn_complete_evt+0xc48/0x15c0 [ 160.736864][ T4197] ? cs_le_create_conn+0x5e0/0x5e0 [ 160.742041][ T4197] ? __mutex_trylock_common+0x155/0x260 [ 160.747657][ T4197] hci_le_meta_evt+0x285/0x3c90 [ 160.752550][ T4197] ? hci_event_packet+0x37b/0x1370 [ 160.757749][ T4197] ? __lock_acquire+0x7d10/0x7d10 [ 160.762812][ T4197] ? hci_remote_host_features_evt+0x280/0x280 [ 160.768907][ T4197] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 160.774581][ T4197] ? mark_lock+0x94/0x320 [ 160.778926][ T4197] ? mutex_unlock+0x10/0x10 [ 160.783455][ T4197] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 160.789456][ T4197] ? lock_chain_count+0x20/0x20 [ 160.794335][ T4197] ? __rwlock_init+0x140/0x140 [ 160.799124][ T4197] hci_event_packet+0xe48/0x1370 [ 160.804082][ T4197] ? lockdep_hardirqs_on+0x94/0x140 [ 160.809317][ T4197] ? rcu_lock_release+0x20/0x20 [ 160.814199][ T4197] ? hci_send_to_monitor+0x9c/0x4a0 [ 160.819427][ T4197] hci_rx_work+0x255/0xa10 [ 160.823874][ T4197] process_one_work+0x85f/0x1010 [ 160.828845][ T4197] ? worker_detach_from_pool+0x240/0x240 [ 160.834511][ T4197] ? lockdep_hardirqs_off+0x70/0x100 [ 160.839821][ T4197] ? _raw_spin_lock_irq+0xb7/0xf0 [ 160.844863][ T4197] ? _raw_spin_lock_irqsave+0x100/0x100 [ 160.850429][ T4197] ? wq_worker_running+0x97/0x170 [ 160.855488][ T4197] worker_thread+0xaa6/0x1290 [ 160.860210][ T4197] kthread+0x436/0x520 [ 160.864296][ T4197] ? rcu_lock_release+0x20/0x20 [ 160.869166][ T4197] ? kthread_blkcg+0xd0/0xd0 [ 160.873775][ T4197] ret_from_fork+0x1f/0x30 [ 160.878223][ T4197] [ 160.982630][ T4197] kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 160.996826][ T4197] Bluetooth: hci2: failed to register connection device [ 161.006123][ T4197] Bluetooth: hci2: link tx timeout [ 161.012221][ T4197] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 161.318830][ T5054] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 161.396782][ T5054] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 161.512197][ T5054] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 162.395575][ T5054] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 162.666198][ T5240] netlink: 8 bytes leftover after parsing attributes in process `syz.4.247'. [ 162.909660][ T5054] 8021q: adding VLAN 0 to HW filter on device bond0 [ 162.941201][ T5253] loop4: detected capacity change from 0 to 256 [ 162.984822][ T5054] 8021q: adding VLAN 0 to HW filter on device team0 [ 163.039421][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 163.058600][ T4192] Bluetooth: hci2: command 0x0406 tx timeout [ 163.266011][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 163.286043][ T5253] FAT-fs (loop4): Directory bread(block 64) failed [ 163.292766][ T5253] FAT-fs (loop4): Directory bread(block 65) failed [ 163.299397][ T5253] FAT-fs (loop4): Directory bread(block 66) failed [ 163.306793][ T5253] FAT-fs (loop4): Directory bread(block 67) failed [ 163.313466][ T5253] FAT-fs (loop4): Directory bread(block 68) failed [ 163.320020][ T5253] FAT-fs (loop4): Directory bread(block 69) failed [ 163.326745][ T5253] FAT-fs (loop4): Directory bread(block 70) failed [ 163.333317][ T5253] FAT-fs (loop4): Directory bread(block 71) failed [ 163.339919][ T5253] FAT-fs (loop4): Directory bread(block 72) failed [ 163.346603][ T5253] FAT-fs (loop4): Directory bread(block 73) failed [ 163.558507][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 163.688081][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 163.716806][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.723952][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 163.751166][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 163.768028][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 163.779005][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.786120][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 163.800929][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 163.810211][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 163.849064][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 163.858402][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 163.867122][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 163.878347][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 163.887316][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 163.896242][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 164.309043][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 164.322692][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 164.658002][ T5259] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 164.895517][ T5054] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 164.940511][ T1233] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 164.979361][ T5287] loop2: detected capacity change from 0 to 512 [ 164.998571][ T1233] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 165.062372][ T5287] EXT4-fs (loop2): Ignoring removed nobh option [ 165.069337][ T5287] EXT4-fs (loop2): Test dummy encryption mode enabled [ 165.128002][ T5277] loop4: detected capacity change from 0 to 8192 [ 165.389675][ T5277] loop4: p1 p2 p4 [ 165.395194][ T5287] EXT4-fs error (device loop2): ext4_orphan_get:1406: inode #15: comm syz.2.256: iget: bad i_size value: 38620345925642 [ 165.401892][ T5277] loop4: p1 start 3959422976 is beyond EOD, truncated [ 165.437514][ T5287] EXT4-fs error (device loop2): ext4_orphan_get:1411: comm syz.2.256: couldn't read orphan inode 15 (err -117) [ 165.450140][ T5277] loop4: p2 size 384768 extends beyond EOD, truncated [ 165.459367][ T5277] loop4: p4 size 1073741824 extends beyond EOD, truncated [ 165.467543][ T5287] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobh,test_dummy_encryption,data_err=ignore,,errors=continue. Quota mode: writeback. [ 165.795694][ T5287] fscrypt (loop2): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 165.900414][ T4178] udevd[4178]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 166.279881][ T4182] udevd[4182]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 166.738350][ T5316] 9pnet: Insufficient options for proto=fd [ 166.907765][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 166.925873][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 166.927153][ T5322] loop4: detected capacity change from 0 to 256 [ 166.988436][ T5096] device hsr_slave_0 left promiscuous mode [ 167.012185][ T5096] device hsr_slave_1 left promiscuous mode [ 167.030068][ T5322] FAT-fs (loop4): Directory bread(block 64) failed [ 167.036713][ T5322] FAT-fs (loop4): Directory bread(block 65) failed [ 167.043621][ T5322] FAT-fs (loop4): Directory bread(block 66) failed [ 167.050188][ T5322] FAT-fs (loop4): Directory bread(block 67) failed [ 167.057113][ T5322] FAT-fs (loop4): Directory bread(block 68) failed [ 167.063739][ T5322] FAT-fs (loop4): Directory bread(block 69) failed [ 167.070863][ T5322] FAT-fs (loop4): Directory bread(block 70) failed [ 167.077671][ T5322] FAT-fs (loop4): Directory bread(block 71) failed [ 167.085416][ T5322] FAT-fs (loop4): Directory bread(block 72) failed [ 167.091979][ T5322] FAT-fs (loop4): Directory bread(block 73) failed [ 167.165015][ T5096] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 167.192981][ T5096] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 167.290417][ T5096] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 167.321141][ T5096] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 167.382741][ T4233] Bluetooth: hci2: command 0x0406 tx timeout [ 167.419200][ T5096] device bridge_slave_1 left promiscuous mode [ 167.443156][ T5096] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.885281][ T5096] device bridge_slave_0 left promiscuous mode [ 167.897515][ T5096] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.926903][ T5096] device veth1_macvtap left promiscuous mode [ 167.935233][ T5096] device veth0_macvtap left promiscuous mode [ 167.941368][ T5096] device veth1_vlan left promiscuous mode [ 167.947966][ T5096] device veth0_vlan left promiscuous mode [ 168.040243][ T5340] loop4: detected capacity change from 0 to 8192 [ 168.186570][ T5340] loop4: p1 p2 p4 [ 168.197720][ T5340] loop4: p1 start 3959422976 is beyond EOD, truncated [ 168.210633][ T5340] loop4: p2 size 384768 extends beyond EOD, truncated [ 168.221931][ T5340] loop4: p4 size 1073741824 extends beyond EOD, truncated [ 168.658069][ T5096] team0 (unregistering): Port device team_slave_1 removed [ 168.680328][ T5096] team0 (unregistering): Port device team_slave_0 removed [ 168.708801][ T5096] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 168.727236][ T5096] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 168.859913][ T5096] bond0 (unregistering): Released all slaves [ 168.983611][ T5054] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 169.085411][ T4178] udevd[4178]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 169.408305][ T4182] udevd[4182]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 169.854737][ T5359] 9pnet: Insufficient options for proto=fd [ 169.993347][ T4197] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 170.004101][ T4197] CPU: 1 PID: 4197 Comm: kworker/u5:3 Not tainted syzkaller #0 [ 170.011694][ T4197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 170.021860][ T4197] Workqueue: hci2 hci_rx_work [ 170.026567][ T4197] Call Trace: [ 170.029860][ T4197] [ 170.032805][ T4197] dump_stack_lvl+0x188/0x250 [ 170.037507][ T4197] ? show_regs_print_info+0x20/0x20 [ 170.042719][ T4197] ? load_image+0x400/0x400 [ 170.047254][ T4197] sysfs_create_dir_ns+0x26a/0x290 [ 170.052406][ T4197] ? sysfs_warn_dup+0xa0/0xa0 [ 170.057110][ T4197] ? process_one_work+0x85f/0x1010 [ 170.062259][ T4197] ? do_raw_spin_unlock+0x11d/0x230 [ 170.067499][ T4197] kobject_add_internal+0x6e0/0xd90 [ 170.072726][ T4197] kobject_add+0x160/0x230 [ 170.077181][ T4197] ? kobject_init+0x1d0/0x1d0 [ 170.081989][ T4197] ? klist_children_get+0x50/0x50 [ 170.087051][ T4197] ? get_device_parent+0x121/0x3f0 [ 170.092206][ T4197] device_add+0x483/0xfb0 [ 170.096570][ T4197] hci_conn_add_sysfs+0xd1/0x1e0 [ 170.101618][ T4197] le_conn_complete_evt+0xc48/0x15c0 [ 170.107160][ T4197] ? cs_le_create_conn+0x5e0/0x5e0 [ 170.112349][ T4197] ? __mutex_trylock_common+0x155/0x260 [ 170.117924][ T4197] hci_le_meta_evt+0x285/0x3c90 [ 170.122790][ T4197] ? hci_event_packet+0x37b/0x1370 [ 170.128014][ T4197] ? __lock_acquire+0x7d10/0x7d10 [ 170.133064][ T4197] ? hci_remote_host_features_evt+0x280/0x280 [ 170.139153][ T4197] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 170.144810][ T4197] ? mark_lock+0x94/0x320 [ 170.149159][ T4197] ? mutex_unlock+0x10/0x10 [ 170.154209][ T4197] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 170.160212][ T4197] ? lock_chain_count+0x20/0x20 [ 170.165081][ T4197] ? __rwlock_init+0x140/0x140 [ 170.169954][ T4197] hci_event_packet+0xe48/0x1370 [ 170.174912][ T4197] ? lockdep_hardirqs_on+0x94/0x140 [ 170.180137][ T4197] ? rcu_lock_release+0x20/0x20 [ 170.185013][ T4197] ? hci_send_to_monitor+0x9c/0x4a0 [ 170.190323][ T4197] hci_rx_work+0x255/0xa10 [ 170.194768][ T4197] process_one_work+0x85f/0x1010 [ 170.199736][ T4197] ? worker_detach_from_pool+0x240/0x240 [ 170.205389][ T4197] ? lockdep_hardirqs_off+0x70/0x100 [ 170.210702][ T4197] ? _raw_spin_lock_irq+0xb7/0xf0 [ 170.215780][ T4197] ? _raw_spin_lock_irqsave+0x100/0x100 [ 170.221345][ T4197] ? wq_worker_running+0x97/0x170 [ 170.226397][ T4197] worker_thread+0xaa6/0x1290 [ 170.231118][ T4197] kthread+0x436/0x520 [ 170.235202][ T4197] ? rcu_lock_release+0x20/0x20 [ 170.240064][ T4197] ? kthread_blkcg+0xd0/0xd0 [ 170.244663][ T4197] ret_from_fork+0x1f/0x30 [ 170.249104][ T4197] [ 170.263507][ T4197] kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 170.278728][ T4197] Bluetooth: hci2: failed to register connection device [ 170.286949][ T4197] Bluetooth: hci2: link tx timeout [ 170.292101][ T4197] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 170.454643][ T5374] loop2: detected capacity change from 0 to 256 [ 170.517725][ T5374] FAT-fs (loop2): Directory bread(block 64) failed [ 170.524473][ T5374] FAT-fs (loop2): Directory bread(block 65) failed [ 170.531105][ T5374] FAT-fs (loop2): Directory bread(block 66) failed [ 170.537745][ T5374] FAT-fs (loop2): Directory bread(block 67) failed [ 170.544428][ T5374] FAT-fs (loop2): Directory bread(block 68) failed [ 170.550990][ T5374] FAT-fs (loop2): Directory bread(block 69) failed [ 170.557632][ T5374] FAT-fs (loop2): Directory bread(block 70) failed [ 170.564226][ T5374] FAT-fs (loop2): Directory bread(block 71) failed [ 170.570836][ T5374] FAT-fs (loop2): Directory bread(block 72) failed [ 170.577863][ T5374] FAT-fs (loop2): Directory bread(block 73) failed [ 170.957000][ T5388] loop4: detected capacity change from 0 to 256 [ 171.845273][ T5402] loop1: detected capacity change from 0 to 512 [ 171.911593][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 171.931113][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 171.958899][ T5402] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 172.044169][ T5413] loop2: detected capacity change from 0 to 128 [ 172.336647][ T5402] ext4 filesystem being mounted at /52/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 172.795598][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 172.815942][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 173.012860][ T5417] 9pnet: Insufficient options for proto=fd [ 173.106391][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 173.181357][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 173.189147][ T5402] EXT4-fs error (device loop1): ext4_get_first_dir_block:3597: inode #12: comm syz.1.282: Directory block failed checksum [ 173.604683][ T4197] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 173.615028][ T4197] CPU: 1 PID: 4197 Comm: kworker/u5:3 Not tainted syzkaller #0 [ 173.622642][ T4197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 173.632735][ T4197] Workqueue: hci2 hci_rx_work [ 173.637465][ T4197] Call Trace: [ 173.640773][ T4197] [ 173.643724][ T4197] dump_stack_lvl+0x188/0x250 [ 173.648519][ T4197] ? show_regs_print_info+0x20/0x20 [ 173.653747][ T4197] ? load_image+0x400/0x400 [ 173.658300][ T4197] sysfs_create_dir_ns+0x26a/0x290 [ 173.663447][ T4197] ? sysfs_warn_dup+0xa0/0xa0 [ 173.668158][ T4197] ? process_one_work+0x85f/0x1010 [ 173.673304][ T4197] ? do_raw_spin_unlock+0x11d/0x230 [ 173.678533][ T4197] kobject_add_internal+0x6e0/0xd90 [ 173.683770][ T4197] kobject_add+0x160/0x230 [ 173.688217][ T4197] ? kobject_init+0x1d0/0x1d0 [ 173.692935][ T4197] ? klist_children_get+0x50/0x50 [ 173.697990][ T4197] ? get_device_parent+0x121/0x3f0 [ 173.703132][ T4197] device_add+0x483/0xfb0 [ 173.707506][ T4197] hci_conn_add_sysfs+0xd1/0x1e0 [ 173.712476][ T4197] le_conn_complete_evt+0xc48/0x15c0 [ 173.717808][ T4197] ? cs_le_create_conn+0x5e0/0x5e0 [ 173.722960][ T4197] ? __mutex_trylock_common+0x155/0x260 [ 173.728550][ T4197] hci_le_meta_evt+0x285/0x3c90 [ 173.733437][ T4197] ? hci_event_packet+0x37b/0x1370 [ 173.738587][ T4197] ? __lock_acquire+0x7d10/0x7d10 [ 173.743658][ T4197] ? hci_remote_host_features_evt+0x280/0x280 [ 173.750121][ T4197] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 173.755807][ T4197] ? mark_lock+0x94/0x320 [ 173.760171][ T4197] ? mutex_unlock+0x10/0x10 [ 173.764725][ T4197] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 173.770744][ T4197] ? lock_chain_count+0x20/0x20 [ 173.775638][ T4197] ? __rwlock_init+0x140/0x140 [ 173.780454][ T4197] hci_event_packet+0xe48/0x1370 [ 173.785699][ T4197] ? lockdep_hardirqs_on+0x94/0x140 [ 173.790947][ T4197] ? rcu_lock_release+0x20/0x20 [ 173.795833][ T4197] ? hci_send_to_monitor+0x9c/0x4a0 [ 173.801066][ T4197] hci_rx_work+0x255/0xa10 [ 173.805528][ T4197] process_one_work+0x85f/0x1010 [ 173.810513][ T4197] ? worker_detach_from_pool+0x240/0x240 [ 173.816172][ T4197] ? lockdep_hardirqs_off+0x70/0x100 [ 173.821503][ T4197] ? _raw_spin_lock_irq+0xb7/0xf0 [ 173.826559][ T4197] ? _raw_spin_lock_irqsave+0x100/0x100 [ 173.832135][ T4197] ? wq_worker_running+0x97/0x170 [ 173.837191][ T4197] worker_thread+0xaa6/0x1290 [ 173.841926][ T4197] kthread+0x436/0x520 [ 173.846019][ T4197] ? rcu_lock_release+0x20/0x20 [ 173.850896][ T4197] ? kthread_blkcg+0xd0/0xd0 [ 173.855524][ T4197] ret_from_fork+0x1f/0x30 [ 173.859988][ T4197] [ 173.873024][ T4197] kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 173.886458][ T4197] Bluetooth: hci2: failed to register connection device [ 173.894563][ T4197] Bluetooth: hci2: link tx timeout [ 173.899808][ T4197] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 173.968777][ T5054] device veth0_vlan entered promiscuous mode [ 173.981526][ T5054] device veth1_vlan entered promiscuous mode [ 174.484276][ T5054] device veth0_macvtap entered promiscuous mode [ 174.599513][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 174.623781][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 174.635222][ T5444] loop1: detected capacity change from 0 to 256 [ 174.648268][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 174.663606][ T5444] FAT-fs (loop1): Directory bread(block 64) failed [ 174.670225][ T5444] FAT-fs (loop1): Directory bread(block 65) failed [ 174.678131][ T5444] FAT-fs (loop1): Directory bread(block 66) failed [ 174.684739][ T5444] FAT-fs (loop1): Directory bread(block 67) failed [ 174.691352][ T5444] FAT-fs (loop1): Directory bread(block 68) failed [ 174.697936][ T5444] FAT-fs (loop1): Directory bread(block 69) failed [ 174.704583][ T5444] FAT-fs (loop1): Directory bread(block 70) failed [ 174.711167][ T5444] FAT-fs (loop1): Directory bread(block 71) failed [ 174.717811][ T5444] FAT-fs (loop1): Directory bread(block 72) failed [ 174.724425][ T5444] FAT-fs (loop1): Directory bread(block 73) failed [ 174.747112][ T5054] device veth1_macvtap entered promiscuous mode [ 174.816268][ T5054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.885586][ T5054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.920436][ T5054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.969710][ T5054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.012847][ T5054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 175.035738][ T5448] loop0: detected capacity change from 0 to 4096 [ 175.050584][ T5054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.102713][ T5054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 175.113687][ T5054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.131572][ T5054] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 175.142670][ T5054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 175.153200][ T5054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.163336][ T5054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 175.233088][ T5054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.331852][ T5448] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 175.343824][ T5054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 175.395343][ T5054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.476579][ T5054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 175.546071][ T5054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.588986][ T5448] EXT4-fs (loop0): changing journal_checksum during remount not supported; ignoring [ 175.639662][ T5054] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 175.684042][ T5448] EXT4-fs (loop0): re-mounted. Opts: max_dir_size_kb=0x0000000000000019,quota,user_xattr,grpjquota=,data_err=ignore,noblock_validity,minixdf,journal_checksum,. Quota mode: writeback. [ 175.719210][ T5459] loop1: detected capacity change from 0 to 256 [ 175.928206][ T5054] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.045007][ T5054] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.203701][ T5054] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.370537][ T5054] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.594961][ T5466] netlink: 8 bytes leftover after parsing attributes in process `syz.2.294'. [ 176.742557][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 176.751405][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 176.781465][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 176.790586][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 176.812379][ T4236] Bluetooth: hci2: command 0x0406 tx timeout [ 177.108033][ T5479] loop1: detected capacity change from 0 to 512 [ 177.176425][ T5479] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 178.158669][ T1233] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 178.252641][ T1233] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 178.324194][ T1233] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 178.338996][ T1233] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 178.430006][ T1233] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 178.438218][ T1233] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 179.852674][ T5512] loop4: detected capacity change from 0 to 256 [ 180.871960][ T1335] Bluetooth: hci2: command 0x0406 tx timeout [ 181.819154][ T5538] bond0: (slave virt_wifi0): The slave device specified does not support setting the MAC address [ 181.830958][ T5538] bond0: (slave virt_wifi0): Error -95 calling set_mac_address [ 181.880457][ T5538] loop5: detected capacity change from 0 to 1024 [ 182.334500][ T5538] EXT4-fs (loop5): Ignoring removed mblk_io_submit option [ 182.341805][ T5538] EXT4-fs (loop5): Quota format mount options ignored when QUOTA feature is enabled [ 182.351400][ T5538] EXT4-fs (loop5): test_dummy_encryption requires encrypt feature [ 183.713434][ T5552] device syzkaller0 entered promiscuous mode [ 184.190449][ T5563] loop4: detected capacity change from 0 to 256 [ 184.309425][ T5563] FAT-fs (loop4): Directory bread(block 64) failed [ 184.328561][ T5563] FAT-fs (loop4): Directory bread(block 65) failed [ 184.362554][ T5563] FAT-fs (loop4): Directory bread(block 66) failed [ 184.389584][ T5563] FAT-fs (loop4): Directory bread(block 67) failed [ 184.412863][ T5563] FAT-fs (loop4): Directory bread(block 68) failed [ 184.419445][ T5563] FAT-fs (loop4): Directory bread(block 69) failed [ 184.464502][ T5563] FAT-fs (loop4): Directory bread(block 70) failed [ 184.491454][ T5563] FAT-fs (loop4): Directory bread(block 71) failed [ 184.504183][ T5563] FAT-fs (loop4): Directory bread(block 72) failed [ 184.521983][ T5563] FAT-fs (loop4): Directory bread(block 73) failed [ 184.952159][ T4197] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 184.961863][ T4197] CPU: 0 PID: 4197 Comm: kworker/u5:3 Not tainted syzkaller #0 [ 184.969446][ T4197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 184.979520][ T4197] Workqueue: hci2 hci_rx_work [ 184.984257][ T4197] Call Trace: [ 184.987556][ T4197] [ 184.990516][ T4197] dump_stack_lvl+0x188/0x250 [ 184.995225][ T4197] ? show_regs_print_info+0x20/0x20 [ 185.000455][ T4197] ? load_image+0x400/0x400 [ 185.005001][ T4197] sysfs_create_dir_ns+0x26a/0x290 [ 185.010142][ T4197] ? sysfs_warn_dup+0xa0/0xa0 [ 185.014850][ T4197] ? process_one_work+0x85f/0x1010 [ 185.019991][ T4197] ? do_raw_spin_unlock+0x11d/0x230 [ 185.025222][ T4197] kobject_add_internal+0x6e0/0xd90 [ 185.030452][ T4197] kobject_add+0x160/0x230 [ 185.034899][ T4197] ? kobject_init+0x1d0/0x1d0 [ 185.039627][ T4197] ? klist_children_get+0x50/0x50 [ 185.044681][ T4197] ? get_device_parent+0x121/0x3f0 [ 185.049834][ T4197] device_add+0x483/0xfb0 [ 185.054205][ T4197] hci_conn_add_sysfs+0xd1/0x1e0 [ 185.059182][ T4197] le_conn_complete_evt+0xc48/0x15c0 [ 185.064510][ T4197] ? cs_le_create_conn+0x5e0/0x5e0 [ 185.069663][ T4197] ? __mutex_trylock_common+0x155/0x260 [ 185.075337][ T4197] hci_le_meta_evt+0x285/0x3c90 [ 185.080221][ T4197] ? hci_event_packet+0x37b/0x1370 [ 185.085375][ T4197] ? __lock_acquire+0x7d10/0x7d10 [ 185.090440][ T4197] ? hci_remote_host_features_evt+0x280/0x280 [ 185.096541][ T4197] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 185.102206][ T4197] ? mark_lock+0x94/0x320 [ 185.106566][ T4197] ? mutex_unlock+0x10/0x10 [ 185.111129][ T4197] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 185.117148][ T4197] ? lock_chain_count+0x20/0x20 [ 185.122049][ T4197] ? __rwlock_init+0x140/0x140 [ 185.126851][ T4197] hci_event_packet+0xe48/0x1370 [ 185.131824][ T4197] ? lockdep_hardirqs_on+0x94/0x140 [ 185.137066][ T4197] ? rcu_lock_release+0x20/0x20 [ 185.141953][ T4197] ? hci_send_to_monitor+0x9c/0x4a0 [ 185.147188][ T4197] hci_rx_work+0x255/0xa10 [ 185.151659][ T4197] process_one_work+0x85f/0x1010 [ 185.156644][ T4197] ? worker_detach_from_pool+0x240/0x240 [ 185.162314][ T4197] ? lockdep_hardirqs_off+0x70/0x100 [ 185.167637][ T4197] ? _raw_spin_lock_irq+0xb7/0xf0 [ 185.172687][ T4197] ? _raw_spin_lock_irqsave+0x100/0x100 [ 185.178273][ T4197] ? wq_worker_running+0x97/0x170 [ 185.183338][ T4197] worker_thread+0xaa6/0x1290 [ 185.188086][ T4197] kthread+0x436/0x520 [ 185.192190][ T4197] ? rcu_lock_release+0x20/0x20 [ 185.197082][ T4197] ? kthread_blkcg+0xd0/0xd0 [ 185.201705][ T4197] ret_from_fork+0x1f/0x30 [ 185.206164][ T4197] [ 185.219889][ T4197] kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 185.233296][ T4197] Bluetooth: hci2: failed to register connection device [ 185.240431][ T4197] Bluetooth: hci2: link tx timeout [ 185.246050][ T4197] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 185.719377][ T5585] loop1: detected capacity change from 0 to 256 [ 187.628339][ T4639] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 187.942558][ T4639] usb 2-1: Using ep0 maxpacket: 8 [ 188.011719][ T5615] loop2: detected capacity change from 0 to 4096 [ 188.037907][ T5623] netlink: 4 bytes leftover after parsing attributes in process `syz.4.328'. [ 188.109840][ T5623] netlink: 12 bytes leftover after parsing attributes in process `syz.4.328'. [ 188.128993][ T5615] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 188.242093][ T5615] EXT4-fs (loop2): Test dummy encryption mode enabled [ 188.295440][ T5627] loop0: detected capacity change from 0 to 1024 [ 188.336165][ T4639] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 188.362196][ T5615] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpid,mblk_io_submit,usrquota,test_dummy_encryption,inode_readahead_blks=0x0000000000000000,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 188.405580][ T4639] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 188.420879][ T5615] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 188.430439][ T5615] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 188.638013][ T4639] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 188.649947][ T4639] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 188.660282][ T4639] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 188.669202][ T5627] EXT4-fs (loop0): mounted filesystem without journal. Opts: nouid32,nodioread_nolock,noquota,delalloc,journal_dev=0x0000000000000009,commit=0x0000000000000000,,errors=continue. Quota mode: none. [ 188.692824][ T5627] ext4 filesystem being mounted at /77/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 188.712099][ T4639] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 188.742786][ T4639] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.933106][ T5646] binder: BINDER_SET_CONTEXT_MGR already set [ 188.939830][ T5646] binder: 5629:5646 ioctl 4018620d 200000000040 returned -16 [ 189.715894][ T4639] usb 2-1: usb_control_msg returned -32 [ 189.921734][ T5605] udc-core: couldn't find an available UDC or it's busy [ 189.975245][ T4639] usbtmc 2-1:16.0: can't read capabilities [ 190.014688][ T5605] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 191.095068][ T5605] udc-core: couldn't find an available UDC or it's busy [ 191.110964][ T5605] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 191.135901][ T5605] usbtmc 2-1:16.0: send_request_dev_dep_msg_in returned -90 [ 191.169747][ T1335] usb 2-1: USB disconnect, device number 3 [ 191.392169][ T7] Bluetooth: hci3: command 0x0406 tx timeout [ 191.412798][ T4199] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 191.423217][ T4199] CPU: 0 PID: 4199 Comm: kworker/u5:4 Not tainted syzkaller #0 [ 191.430809][ T4199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 191.440882][ T4199] Workqueue: hci1 hci_rx_work [ 191.445615][ T4199] Call Trace: [ 191.448920][ T4199] [ 191.451871][ T4199] dump_stack_lvl+0x188/0x250 [ 191.456671][ T4199] ? show_regs_print_info+0x20/0x20 [ 191.461892][ T4199] ? load_image+0x400/0x400 [ 191.466428][ T4199] sysfs_create_dir_ns+0x26a/0x290 [ 191.471566][ T4199] ? sysfs_warn_dup+0xa0/0xa0 [ 191.476272][ T4199] ? process_one_work+0x85f/0x1010 [ 191.481424][ T4199] ? do_raw_spin_unlock+0x11d/0x230 [ 191.486668][ T4199] kobject_add_internal+0x6e0/0xd90 [ 191.492008][ T4199] kobject_add+0x160/0x230 [ 191.496454][ T4199] ? kobject_init+0x1d0/0x1d0 [ 191.501160][ T4199] ? klist_children_get+0x50/0x50 [ 191.506208][ T4199] ? get_device_parent+0x121/0x3f0 [ 191.511353][ T4199] device_add+0x483/0xfb0 [ 191.515746][ T4199] hci_conn_add_sysfs+0xd1/0x1e0 [ 191.520720][ T4199] le_conn_complete_evt+0xc48/0x15c0 [ 191.526048][ T4199] ? cs_le_create_conn+0x5e0/0x5e0 [ 191.531339][ T4199] hci_le_meta_evt+0x285/0x3c90 [ 191.536226][ T4199] ? mark_lock+0x94/0x320 [ 191.540601][ T4199] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 191.546694][ T4199] ? lock_chain_count+0x20/0x20 [ 191.551584][ T4199] ? hci_remote_host_features_evt+0x280/0x280 [ 191.557681][ T4199] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 191.563333][ T4199] ? lockdep_hardirqs_on+0x94/0x140 [ 191.568560][ T4199] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 191.574236][ T4199] hci_event_packet+0xe48/0x1370 [ 191.579205][ T4199] ? lockdep_hardirqs_on+0x94/0x140 [ 191.584427][ T4199] ? rcu_lock_release+0x20/0x20 [ 191.589305][ T4199] ? hci_send_to_monitor+0x9c/0x4a0 [ 191.594711][ T4199] hci_rx_work+0x255/0xa10 [ 191.599189][ T4199] process_one_work+0x85f/0x1010 [ 191.604163][ T4199] ? worker_detach_from_pool+0x240/0x240 [ 191.610160][ T4199] ? lockdep_hardirqs_off+0x70/0x100 [ 191.615478][ T4199] ? _raw_spin_lock_irq+0xb7/0xf0 [ 191.620528][ T4199] ? _raw_spin_lock_irqsave+0x100/0x100 [ 191.626111][ T4199] ? wq_worker_running+0x97/0x170 [ 191.631208][ T4199] worker_thread+0xaa6/0x1290 [ 191.635972][ T4199] kthread+0x436/0x520 [ 191.640067][ T4199] ? rcu_lock_release+0x20/0x20 [ 191.644943][ T4199] ? kthread_blkcg+0xd0/0xd0 [ 191.649566][ T4199] ret_from_fork+0x1f/0x30 [ 191.654150][ T4199] [ 191.664141][ T4199] kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 191.678190][ T4199] Bluetooth: hci1: failed to register connection device [ 191.691219][ T4199] ================================================================== [ 191.699518][ T4199] BUG: KASAN: use-after-free in l2cap_connect_cfm+0x6ff/0x10f0 [ 191.707118][ T4199] Read of size 8 at addr ffff88807e7e0488 by task kworker/u5:4/4199 [ 191.715559][ T4199] [ 191.717924][ T4199] CPU: 0 PID: 4199 Comm: kworker/u5:4 Not tainted syzkaller #0 [ 191.725492][ T4199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 191.735673][ T4199] Workqueue: hci1 hci_rx_work [ 191.740397][ T4199] Call Trace: [ 191.743697][ T4199] [ 191.746656][ T4199] dump_stack_lvl+0x188/0x250 [ 191.751365][ T4199] ? show_regs_print_info+0x20/0x20 [ 191.756598][ T4199] ? load_image+0x400/0x400 [ 191.761123][ T4199] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 191.766875][ T4199] ? __mutex_unlock_slowpath+0x658/0x6c0 [ 191.772548][ T4199] print_address_description+0x60/0x2d0 [ 191.778135][ T4199] ? l2cap_connect_cfm+0x6ff/0x10f0 [ 191.783364][ T4199] kasan_report+0xdf/0x130 [ 191.787814][ T4199] ? l2cap_connect_cfm+0x6ff/0x10f0 [ 191.793054][ T4199] l2cap_connect_cfm+0x6ff/0x10f0 [ 191.798122][ T4199] ? l2cap_ertm_resend+0x10d0/0x10d0 [ 191.803459][ T4199] ? l2cap_ertm_resend+0x10d0/0x10d0 [ 191.808800][ T4199] le_conn_complete_evt+0xd42/0x15c0 [ 191.814128][ T4199] ? cs_le_create_conn+0x5e0/0x5e0 [ 191.819290][ T4199] hci_le_meta_evt+0x285/0x3c90 [ 191.824354][ T4199] ? mark_lock+0x94/0x320 [ 191.828721][ T4199] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 191.834765][ T4199] ? lock_chain_count+0x20/0x20 [ 191.839651][ T4199] ? hci_remote_host_features_evt+0x280/0x280 [ 191.845758][ T4199] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 191.851427][ T4199] ? lockdep_hardirqs_on+0x94/0x140 [ 191.856659][ T4199] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 191.862334][ T4199] hci_event_packet+0xe48/0x1370 [ 191.867303][ T4199] ? lockdep_hardirqs_on+0x94/0x140 [ 191.872658][ T4199] ? rcu_lock_release+0x20/0x20 [ 191.877559][ T4199] ? hci_send_to_monitor+0x9c/0x4a0 [ 191.882792][ T4199] hci_rx_work+0x255/0xa10 [ 191.887252][ T4199] process_one_work+0x85f/0x1010 [ 191.892256][ T4199] ? worker_detach_from_pool+0x240/0x240 [ 191.897934][ T4199] ? lockdep_hardirqs_off+0x70/0x100 [ 191.903267][ T4199] ? _raw_spin_lock_irq+0xb7/0xf0 [ 191.908323][ T4199] ? _raw_spin_lock_irqsave+0x100/0x100 [ 191.913908][ T4199] ? wq_worker_running+0x97/0x170 [ 191.918960][ T4199] worker_thread+0xaa6/0x1290 [ 191.923718][ T4199] kthread+0x436/0x520 [ 191.927839][ T4199] ? rcu_lock_release+0x20/0x20 [ 191.932719][ T4199] ? kthread_blkcg+0xd0/0xd0 [ 191.937342][ T4199] ret_from_fork+0x1f/0x30 [ 191.941814][ T4199] [ 191.944848][ T4199] [ 191.947187][ T4199] Allocated by task 4199: [ 191.951558][ T4199] __kasan_kmalloc+0xb5/0xf0 [ 191.956168][ T4199] l2cap_chan_create+0x4c/0x730 [ 191.961043][ T4199] l2cap_sock_alloc+0x13a/0x200 [ 191.965920][ T4199] l2cap_sock_new_connection_cb+0xd1/0x1c0 [ 191.971750][ T4199] l2cap_connect_cfm+0x35d/0x10f0 [ 191.976794][ T4199] le_conn_complete_evt+0xd42/0x15c0 [ 191.982122][ T4199] hci_le_meta_evt+0x285/0x3c90 [ 191.986993][ T4199] hci_event_packet+0xe48/0x1370 [ 191.991952][ T4199] hci_rx_work+0x255/0xa10 [ 191.996402][ T4199] process_one_work+0x85f/0x1010 [ 192.001368][ T4199] worker_thread+0xaa6/0x1290 [ 192.006082][ T4199] kthread+0x436/0x520 [ 192.010179][ T4199] ret_from_fork+0x1f/0x30 [ 192.014621][ T4199] [ 192.016965][ T4199] Freed by task 5663: [ 192.020974][ T4199] kasan_set_track+0x4b/0x70 [ 192.025619][ T4199] kasan_set_free_info+0x1f/0x40 [ 192.030588][ T4199] ____kasan_slab_free+0xd5/0x110 [ 192.035644][ T4199] slab_free_freelist_hook+0xea/0x170 [ 192.041060][ T4199] kfree+0xef/0x2a0 [ 192.044900][ T4199] l2cap_sock_cleanup_listen+0xea/0x270 [ 192.050479][ T4199] l2cap_sock_release+0x66/0x1e0 [ 192.055469][ T4199] sock_close+0xd5/0x240 [ 192.059754][ T4199] __fput+0x234/0x930 [ 192.063763][ T4199] task_work_run+0x125/0x1a0 [ 192.068381][ T4199] exit_to_user_mode_loop+0x10f/0x130 [ 192.073780][ T4199] exit_to_user_mode_prepare+0xee/0x180 [ 192.079352][ T4199] syscall_exit_to_user_mode+0x16/0x40 [ 192.084840][ T4199] do_syscall_64+0x58/0xa0 [ 192.089291][ T4199] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 192.095214][ T4199] [ 192.097562][ T4199] Last potentially related work creation: [ 192.103301][ T4199] kasan_save_stack+0x35/0x60 [ 192.108007][ T4199] kasan_record_aux_stack+0xb8/0x100 [ 192.113324][ T4199] call_rcu+0x189/0x950 [ 192.117508][ T4199] netlink_release+0x1369/0x17b0 [ 192.122489][ T4199] sock_close+0xd5/0x240 [ 192.126758][ T4199] __fput+0x234/0x930 [ 192.130770][ T4199] task_work_run+0x125/0x1a0 [ 192.135382][ T4199] exit_to_user_mode_loop+0x10f/0x130 [ 192.140779][ T4199] exit_to_user_mode_prepare+0xee/0x180 [ 192.146348][ T4199] syscall_exit_to_user_mode+0x16/0x40 [ 192.151841][ T4199] do_syscall_64+0x58/0xa0 [ 192.156286][ T4199] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 192.162206][ T4199] [ 192.164552][ T4199] The buggy address belongs to the object at ffff88807e7e0000 [ 192.164552][ T4199] which belongs to the cache kmalloc-2k of size 2048 [ 192.178628][ T4199] The buggy address is located 1160 bytes inside of [ 192.178628][ T4199] 2048-byte region [ffff88807e7e0000, ffff88807e7e0800) [ 192.192100][ T4199] The buggy address belongs to the page: [ 192.197760][ T4199] page:ffffea0001f9f800 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7e7e0 [ 192.208552][ T4199] head:ffffea0001f9f800 order:3 compound_mapcount:0 compound_pincount:0 [ 192.216928][ T4199] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 192.224939][ T4199] raw: 00fff00000010200 0000000000000000 0000000100000001 ffff888016c42000 [ 192.233614][ T4199] raw: 0000000000000000 0000000080080008 00000001ffffffff 0000000000000000 [ 192.242228][ T4199] page dumped because: kasan: bad access detected [ 192.248850][ T4199] page_owner tracks the page as allocated [ 192.254673][ T4199] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 4189, ts 73959086212, free_ts 73937184958 [ 192.255921][ T4234] Bluetooth: hci1: command 0x0406 tx timeout [ 192.275293][ T4199] get_page_from_freelist+0x1bbd/0x1ca0 [ 192.275357][ T4199] __alloc_pages+0x1ee/0x480 [ 192.275378][ T4199] new_slab+0xc0/0x4b0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 192.275396][ T4199] ___slab_alloc+0x80a/0xdd0 [ 192.275412][ T4199] __kmalloc+0x1cd/0x330 [ 192.275429][ T4199] sk_prot_alloc+0xe7/0x210 [ 192.275448][ T4199] sk_alloc+0x2f/0x310 [ 192.275465][ T4199] __netlink_create+0x6b/0x2d0 [ 192.318018][ T4199] netlink_create+0x3a7/0x510 [ 192.322740][ T4199] __sock_create+0x47b/0x900 [ 192.327365][ T4199] __sys_socket+0xe2/0x170 [ 192.331808][ T4199] __x64_sys_socket+0x76/0x80 [ 192.336528][ T4199] do_syscall_64+0x4c/0xa0 [ 192.340989][ T4199] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 192.346932][ T4199] page last free stack trace: [ 192.351627][ T4199] free_unref_page_prepare+0x637/0x6c0 [ 192.357126][ T4199] free_unref_page+0x8f/0x2a0 [ 192.361841][ T4199] qlist_free_all+0x35/0x90 [ 192.366378][ T4199] kasan_quarantine_reduce+0x150/0x160 [ 192.371865][ T4199] __kasan_slab_alloc+0x2f/0xd0 [ 192.376752][ T4199] slab_post_alloc_hook+0x4c/0x380 [ 192.381896][ T4199] kmem_cache_alloc+0x100/0x290 [ 192.386776][ T4199] sock_alloc_inode+0x17/0xb0 [ 192.391570][ T4199] new_inode_pseudo+0x5f/0x210 [ 192.396377][ T4199] __sock_create+0x129/0x900 [ 192.401002][ T4199] __sys_socket+0xe2/0x170 [ 192.405451][ T4199] __x64_sys_socket+0x76/0x80 [ 192.410173][ T4199] do_syscall_64+0x4c/0xa0 [ 192.414618][ T4199] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 192.420691][ T4199] [ 192.423063][ T4199] Memory state around the buggy address: [ 192.428714][ T4199] ffff88807e7e0380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 192.436803][ T4199] ffff88807e7e0400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 192.444901][ T4199] >ffff88807e7e0480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 192.452983][ T4199] ^ [ 192.457337][ T4199] ffff88807e7e0500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 192.465428][ T4199] ffff88807e7e0580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 192.473527][ T4199] ================================================================== [ 192.481623][ T4199] Disabling lock debugging due to kernel taint [ 192.700677][ T5668] loop0: detected capacity change from 0 to 256 [ 192.834412][ T4199] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 192.841685][ T4199] CPU: 0 PID: 4199 Comm: kworker/u5:4 Tainted: G B syzkaller #0 [ 192.850650][ T4199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 192.860743][ T4199] Workqueue: hci1 hci_rx_work [ 192.865463][ T4199] Call Trace: [ 192.868772][ T4199] [ 192.871733][ T4199] dump_stack_lvl+0x188/0x250 [ 192.876441][ T4199] ? show_regs_print_info+0x20/0x20 [ 192.881673][ T4199] ? load_image+0x400/0x400 [ 192.886214][ T4199] panic+0x2e5/0x810 [ 192.890149][ T4199] ? bpf_jit_dump+0xd0/0xd0 [ 192.894695][ T4199] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 192.900709][ T4199] ? _raw_spin_unlock+0x40/0x40 [ 192.905593][ T4199] ? l2cap_connect_cfm+0x6ff/0x10f0 [ 192.910817][ T4199] check_panic_on_warn+0x80/0xa0 [ 192.915794][ T4199] ? l2cap_connect_cfm+0x6ff/0x10f0 [ 192.921121][ T4199] end_report+0x6d/0xf0 [ 192.925303][ T4199] kasan_report+0x102/0x130 [ 192.929839][ T4199] ? l2cap_connect_cfm+0x6ff/0x10f0 [ 192.935080][ T4199] l2cap_connect_cfm+0x6ff/0x10f0 [ 192.940136][ T4199] ? l2cap_ertm_resend+0x10d0/0x10d0 [ 192.945449][ T4199] ? l2cap_ertm_resend+0x10d0/0x10d0 [ 192.950769][ T4199] le_conn_complete_evt+0xd42/0x15c0 [ 192.956089][ T4199] ? cs_le_create_conn+0x5e0/0x5e0 [ 192.961237][ T4199] hci_le_meta_evt+0x285/0x3c90 [ 192.966117][ T4199] ? mark_lock+0x94/0x320 [ 192.970485][ T4199] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 192.976502][ T4199] ? lock_chain_count+0x20/0x20 [ 192.981381][ T4199] ? hci_remote_host_features_evt+0x280/0x280 [ 192.987496][ T4199] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 192.993168][ T4199] ? lockdep_hardirqs_on+0x94/0x140 [ 192.998393][ T4199] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 193.004057][ T4199] hci_event_packet+0xe48/0x1370 [ 193.009019][ T4199] ? lockdep_hardirqs_on+0x94/0x140 [ 193.014246][ T4199] ? rcu_lock_release+0x20/0x20 [ 193.019121][ T4199] ? hci_send_to_monitor+0x9c/0x4a0 [ 193.024351][ T4199] hci_rx_work+0x255/0xa10 [ 193.028807][ T4199] process_one_work+0x85f/0x1010 [ 193.033792][ T4199] ? worker_detach_from_pool+0x240/0x240 [ 193.039450][ T4199] ? lockdep_hardirqs_off+0x70/0x100 [ 193.044775][ T4199] ? _raw_spin_lock_irq+0xb7/0xf0 [ 193.049829][ T4199] ? _raw_spin_lock_irqsave+0x100/0x100 [ 193.055403][ T4199] ? wq_worker_running+0x97/0x170 [ 193.060469][ T4199] worker_thread+0xaa6/0x1290 [ 193.065184][ T4199] kthread+0x436/0x520 [ 193.069279][ T4199] ? rcu_lock_release+0x20/0x20 [ 193.074158][ T4199] ? kthread_blkcg+0xd0/0xd0 [ 193.078774][ T4199] ret_from_fork+0x1f/0x30 [ 193.083221][ T4199] [ 193.086480][ T4199] Kernel Offset: disabled [ 193.090826][ T4199] Rebooting in 86400 seconds..