last executing test programs: 6m7.148499598s ago: executing program 2 (id=36): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8004}, 0x94) syz_open_dev$mouse(0x0, 0x0, 0x2042) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x68, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2, 0x0, 0x10}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_LABELS={0x4}]}, 0x68}}, 0x0) 6m4.558806077s ago: executing program 2 (id=39): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, 0x2}, 0x94) ioctl$SNDCTL_DSP_GETCAPS(r0, 0x8004500f, &(0x7f00000004c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(0x0, &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0) msgctl$IPC_RMID(0x0, 0x0) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280), 0x42000, 0x0) read$FUSE(r4, &(0x7f0000002600)={0x2020, 0x0, 0x0, 0x0}, 0x2020) setreuid(r5, 0x0) getresgid(0x0, 0x0, 0x0) statx(r0, &(0x7f0000000600)='./file1\x00', 0x4000, 0x1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000440)={{0x0, r5, 0x0, r6, 0xee00, 0x2, 0xf}, 0x0, 0x0, 0x5, 0x7ff, 0xffffffff, 0x1, 0xd4a9, 0xbe0, 0x6, 0x5, r1}) r7 = openat$cgroup_ro(r3, &(0x7f0000000300)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f00000005c0)=ANY=[@ANYRES64], 0x32600) syz_open_procfs(0x0, &(0x7f0000002340)='net/vlan/vlan0\x00') 6m2.306751369s ago: executing program 2 (id=41): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) mkdirat(0xffffffffffffffff, 0x0, 0x271) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = socket$inet(0x2, 0x3, 0xd) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) getsockopt$inet_mreqsrc(r4, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r5}) 6m0.922872975s ago: executing program 2 (id=44): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000022c0)='/proc/tty/drivers\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000180)={0x2020}, 0x2024) socket$nl_generic(0x10, 0x3, 0x10) chdir(&(0x7f00000021c0)='./file0\x00') ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f0000000000)) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x201, 0x1, 0x1}, 0x1c) recvmsg$unix(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000440)=""/264, 0xfe}], 0x1, 0x0, 0xfffffffffffffd06}, 0x20) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6ad01, 0x0) writev(r2, 0x0, 0x0) rseq(0xfffffffffffffffd, 0xfffffffffffffe8f, 0x0, 0x0) r3 = io_uring_setup(0x2625, &(0x7f0000000100)={0x0, 0xfffffffd, 0x2, 0x1, 0xc000159}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)={0x40, r5, 0xc4fc9e906872338b, 0x70bd2a, 0x0, {{0x15}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x24, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x1c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x0, [@NL80211_TXRATE_HT={0x11, 0x2, [{0x7}, {0x0, 0x9}, {0x1, 0x8}, {0x1, 0x1}, {0x5, 0x5}, {0x1, 0x7}, {0x0, 0x7}, {0x1, 0x4}, {0x7, 0x9}, {0x0, 0x1}, {0x6, 0x2}, {0x7, 0x3}, {0x3, 0x1}]}]}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x0) epoll_create1(0x0) epoll_pwait(r0, &(0x7f0000002400), 0x0, 0x9, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) syz_open_procfs(0x0, &(0x7f00000000c0)='oom_adj\x00') ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000002300)={'gre0\x00', &(0x7f0000002240)={'syztnl1\x00', 0x0, 0x7800, 0x20, 0x0, 0x7, {{0xe, 0x4, 0x2, 0x0, 0x38, 0x67, 0x0, 0x3, 0x4, 0x0, @loopback, @local, {[@ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x17, 0xcf, [@multicast1, @rand_addr=0x64010100, @broadcast, @multicast2, @multicast1]}, @timestamp={0x44, 0x8, 0xa7, 0x0, 0xf, [0xfb9]}]}}}}}) sendmsg$nl_route_sched(r1, &(0x7f00000023c0)={&(0x7f0000002200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000002380)={&(0x7f0000002340)=@newqdisc={0x2c, 0x24, 0x300, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {}, {0x6, 0x2}, {0xf, 0xa}}, [@TCA_RATE={0x6, 0x5, {0x4, 0x9}}]}, 0x2c}}, 0x20004000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20a00, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0xf9, 0xc, 0xc, 0x2, [@float={0x2, 0x0, 0x0, 0x10, 0x10}]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) 5m58.904252156s ago: executing program 2 (id=50): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x64, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2, 0x10}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x10, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME_EXTENSION={0xc, 0x9, 0x7}]}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0x6, 0x100, 0x5d, 0x0, 0x7ff, 0x200}}, {0x4}}]}]}, 0x64}}, 0x0) 5m46.698180655s ago: executing program 2 (id=72): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000003b810000850000007d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) shmctl$IPC_SET(0x0, 0x1, 0x0) openat$sequencer(0xffffff9c, 0x0, 0x2000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) r4 = openat$audio(0xffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r4, 0x8010500d, &(0x7f0000000500)) socket$nl_route(0x10, 0x3, 0x0) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r6 = eventfd(0xfffffffd) ioctl$VHOST_SET_LOG_FD(r5, 0x4004af07, &(0x7f0000000240)=r6) ioctl$VHOST_SET_VRING_KICK(r5, 0x4008af20, &(0x7f0000000040)={0x0, r6}) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000380)={0x1, 0x0, 0x0, &(0x7f00000003c0)=""/233, 0x0}) 5m30.623195514s ago: executing program 32 (id=72): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000003b810000850000007d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) shmctl$IPC_SET(0x0, 0x1, 0x0) openat$sequencer(0xffffff9c, 0x0, 0x2000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) r4 = openat$audio(0xffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r4, 0x8010500d, &(0x7f0000000500)) socket$nl_route(0x10, 0x3, 0x0) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r6 = eventfd(0xfffffffd) ioctl$VHOST_SET_LOG_FD(r5, 0x4004af07, &(0x7f0000000240)=r6) ioctl$VHOST_SET_VRING_KICK(r5, 0x4008af20, &(0x7f0000000040)={0x0, r6}) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000380)={0x1, 0x0, 0x0, &(0x7f00000003c0)=""/233, 0x0}) 3m59.209877481s ago: executing program 1 (id=213): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x2) syz_emit_ethernet(0x0, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) 3m58.896367556s ago: executing program 1 (id=216): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d103"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socket$nl_netfilter(0x10, 0x3, 0xc) 3m56.395319017s ago: executing program 1 (id=220): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='htcp', 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @sack_perm, @window={0x3, 0x3, 0x401}, @window], 0x63) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 3m53.233540187s ago: executing program 1 (id=226): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x5, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x42}, [@call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r4, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 3m51.607239189s ago: executing program 0 (id=228): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mbind(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x0, 0x1ff, 0x0) socket(0x15, 0x5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000019c0), 0x121002, 0x0) ioctl$KVM_GET_MSRS_sys(r4, 0xc008ae88, &(0x7f00000004c0)={0x2, 0x0, [{0xb2e, 0x0, 0x8}, {0x188, 0x0, 0x2}]}) 3m51.389001364s ago: executing program 1 (id=229): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x44080) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c8, 0x1004, 0x45c5, 0xc595, 0x7, 0x2, 0xffffffffffffffff, 0x0, 0x80000004000000, 0x200000000c], 0x80a0000, 0x2010d3}) openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) syz_open_dev$sg(&(0x7f0000000080), 0x6f5e, 0xa0001) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x10, 0x4, 0x4, 0x2}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r6, @ANYRES32=r5], 0x10) ioctl$BTRFS_IOC_QUOTA_CTL(r5, 0xc0109428, &(0x7f0000000180)={0x2, 0x7}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r4, 0x2000012, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8ed"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3m49.659923946s ago: executing program 0 (id=231): mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file1\x00', 0x80242, 0xf0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_io_uring_setup(0x6be5, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) read$FUSE(0xffffffffffffffff, &(0x7f0000000040)={0x2020}, 0x2020) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth0_to_team\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) close(r1) ioctl$SNDCTL_SEQ_GETOUTCOUNT(0xffffffffffffffff, 0x80045104, &(0x7f0000000080)) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x1) ioctl$SIOCAX25ADDUID(r2, 0x89e1, &(0x7f0000000080)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f000001b040)) ioctl$SIOCSIFHWADDR(r1, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100008dffff"}) msgrcv(0x0, 0x0, 0x0, 0x3, 0x3000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB], 0xbb8}, 0x1, 0x0, 0x0, 0x2000}, 0x4004040) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x17f) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f000001b080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@userxattr}]}) 3m49.270037505s ago: executing program 1 (id=233): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000300)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair(0x25, 0x1, 0x0, &(0x7f0000000080)) 3m46.478136838s ago: executing program 0 (id=238): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x42}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r4, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 3m44.905252416s ago: executing program 0 (id=239): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0369e269b2, 0x8031, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0f000000040000000800000001"], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x18) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xfff7fffffffffff5}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r4) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r7 = fanotify_init(0xf00, 0x1000) fanotify_mark(r7, 0x105, 0x5000003a, r6, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r8 = fanotify_init(0x8, 0x400) r9 = inotify_init() dup3(r9, r8, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="1709000000000000000001000000050007000000000008000900fffffffe060002000000000008000a000100000008001800ac1414aa08001900e000000214001b0017"], 0x58}}, 0x0) 3m42.466432063s ago: executing program 0 (id=243): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mbind(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x0, 0x1ff, 0x0) socket(0x15, 0x5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000019c0), 0x121002, 0x0) ioctl$KVM_GET_MSRS_sys(r4, 0xc008ae88, &(0x7f00000004c0)={0x2, 0x0, [{0xb2e, 0x0, 0x8}, {0x188, 0x0, 0x2}]}) 3m39.567154592s ago: executing program 0 (id=245): socket$alg(0x26, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_vhci(0x0, 0x7) syz_open_dev$cec(0x0, 0x0, 0x0) r2 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x201, 0x40, 0x40}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r5}, 0x38) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x40, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$IPSET_CMD_TEST(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x64}}, 0x4800) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090) ioctl$SW_SYNC_IOC_INC(r2, 0x40045701, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0xfffffffe, 0x25dfdbff, {}, [@NHA_OIF={0x8, 0x5, r8}]}, 0x20}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x38, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x3fd7}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000280)={{0x1, 0x1, 0x18, r6, {0x800}}, './file0\x00'}) 3m33.313639778s ago: executing program 33 (id=233): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000300)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair(0x25, 0x1, 0x0, &(0x7f0000000080)) 3m23.856371796s ago: executing program 34 (id=245): socket$alg(0x26, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_vhci(0x0, 0x7) syz_open_dev$cec(0x0, 0x0, 0x0) r2 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x201, 0x40, 0x40}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r5}, 0x38) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x40, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$IPSET_CMD_TEST(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x64}}, 0x4800) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090) ioctl$SW_SYNC_IOC_INC(r2, 0x40045701, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0xfffffffe, 0x25dfdbff, {}, [@NHA_OIF={0x8, 0x5, r8}]}, 0x20}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x38, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x3fd7}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000280)={{0x1, 0x1, 0x18, r6, {0x800}}, './file0\x00'}) 11.088156392s ago: executing program 3 (id=568): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x3}, 0x50) r1 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x48082) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc4c85512, &(0x7f0000000040)={{0xa, 0x0, 0xffffffff, 0x0, 'syz0\x00'}, 0x0, [0x0, 0xa6d, 0xffffffffffffffff, 0x8e5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4d0, 0x0, 0x0, 0x3, 0x0, 0xfffffffffffffffc, 0x0, 0x795, 0xfffffffffffffffc, 0x1001, 0x10000000000, 0x0, 0x0, 0x0, 0xa, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1ffffffffffffd, 0xfb, 0x6, 0xfffffffffffffffe, 0x8, 0x0, 0x0, 0x0, 0xffeffffffffffffd, 0x3, 0x0, 0xfffffffffffff20c, 0x0, 0x0, 0x0, 0x2ba, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xeb, 0x0, 0x4, 0x2000000000000, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffc, 0x8, 0xfffffffffffffffc, 0x7, 0x1, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x9, 0x0, 0x10001, 0x200ce4, 0x2, 0x0, 0x89cf, 0x48, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xa, 0x0, 0x0, 0x6]}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) r3 = dup(0xffffffffffffffff) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) landlock_restrict_self(r5, 0x0) ptrace(0x10, r4) read$FUSE(r3, 0x0, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r7 = fcntl$dupfd(r6, 0x406, r6) ioctl$USBDEVFS_SUBMITURB(r7, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000040)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0x8, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) write$uinput_user_dev(r7, 0x0, 0x0) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001280)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x88, 0x88, 0x3, [@struct={0xe, 0x5, 0x0, 0x4, 0x1, 0x7, [{0xd, 0x4, 0x7}, {0x2, 0x2, 0x8c37}, {0x1, 0x3, 0xff}, {0x3, 0x3, 0x1}, {0x2, 0x2, 0x9}]}, @union={0xe, 0x3, 0x0, 0x5, 0x0, 0x2d133d35, [{0xc, 0x4, 0x4}, {0x2, 0x1, 0x45}, {0x3, 0x1, 0x4}]}, @var={0x5, 0x0, 0x0, 0xe, 0x5, 0x1}]}, {0x0, [0x5f]}}, &(0x7f0000000280)=""/4096, 0xa3, 0x1000, 0x1, 0x541b}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000012c0)=@bloom_filter={0x1e, 0x0, 0x44723733, 0x4, 0x8000, r0, 0x8000, '\x00', r2, r3, 0x4, 0x0, 0x3, 0x4, @value=r8}, 0x50) 10.783611158s ago: executing program 3 (id=572): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000040c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r1, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000001c0)={r2}, 0x4) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r3, 0x4) r4 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r4, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x44004) 9.339643176s ago: executing program 3 (id=574): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000000000)={0xc, {"a2e3ad2109c752f91b5a470987f70e06d038e7ff7fc6e5539b3245078b089b3208336d060890e0878f0e1ac6e70a9b3368959b6c9a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b38070d095d0936cd3b78130daa61f8e809ea882f5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4040d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a4d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6cb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006) 7.978293716s ago: executing program 3 (id=576): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000004c0), 0xf02, 0xf0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) ppoll(&(0x7f00000000c0)=[{r0, 0xd250}], 0x1, 0x0, 0x0, 0x0) io_setup(0x2004, &(0x7f0000000680)) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x4008850}, 0x40010) 7.84576057s ago: executing program 3 (id=578): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200082, 0x2, 0x0, 0x1, 0x4}) ioctl$KDGKBTYPE(r0, 0x4b48, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) fcntl$setownex(r2, 0xf, &(0x7f0000000080)={0x0, r1}) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) rseq(&(0x7f0000000300)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x0, 0x0) semop(0x0, 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x400448cb, &(0x7f0000000140)="37b412c685638e9f7a78d97dc0e9bf55a3ee41067463f970ccdf1980cd171729b0632c3a75") syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) rename(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x42c00) 7.746270584s ago: executing program 3 (id=580): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_devices(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1e0308003c5c980128876360864668f83a"], 0xfdef) 5.900566769s ago: executing program 4 (id=582): r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000580)={{0xa, 0x0, 0x9, 0x41, 'syz0\x00', 0x8}, 0x0, [0x0, 0x80, 0x0, 0xf, 0xfc5b, 0x80000001, 0xfffffffffffffffa, 0x7, 0x9, 0x1ff, 0xff, 0x1, 0xa5d, 0x8000000000000000, 0xb, 0x0, 0x3fe, 0xffffffff, 0x4, 0x3, 0x1, 0xdba, 0xe8, 0x8000000000000001, 0x5, 0x3, 0x4, 0x3a2be992, 0x3, 0x0, 0x7, 0x7, 0x82d2, 0x5, 0x2, 0x9, 0x5700000000000, 0x100000000, 0x71da19cd, 0x7, 0xff, 0xde, 0x8000000000000001, 0x8cd1, 0x3, 0xfffffffffffffff6, 0xa, 0x401, 0x3, 0x7, 0xa, 0x0, 0x4, 0x9, 0x0, 0x2b, 0x2, 0xff, 0x6, 0x419, 0x3, 0x5, 0x5, 0x24, 0x4, 0x0, 0x200, 0x8, 0x0, 0x7, 0x1, 0x4, 0x7, 0x80000001, 0x19ff, 0x7, 0x6, 0x2, 0x2, 0x1, 0xdc7c, 0x7, 0x8, 0x1, 0x6, 0x2, 0x7, 0x1, 0x1ff, 0x7, 0x7, 0x2, 0xb7d1, 0x8000000000000001, 0x1000, 0x2, 0x1, 0x1, 0xb0cb, 0x3, 0x7, 0x5, 0xb4, 0xffffffffffff6fe9, 0xe, 0x2, 0x8a17, 0x5, 0x2, 0x0, 0x4, 0x8, 0x33d, 0x2, 0x2, 0x200, 0x0, 0x3, 0x1d, 0x3, 0x7fffffff, 0x2, 0x8, 0xef, 0x5, 0x4, 0x6934d05b, 0x1]}) 5.823410027s ago: executing program 4 (id=583): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(r0, 0x1, 0x0) landlock_create_ruleset(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"/3699], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe50}, 0x48) open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x80000) 4.386451838s ago: executing program 4 (id=584): ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r0, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, &(0x7f0000000a80)=0x1, 0x8) sched_setscheduler(0x0, 0x2, 0x0) 4.303298041s ago: executing program 4 (id=585): openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_register(r0, &(0x7f00000000c0)={0x3a, 'syz1', 0x3a, 'E', 0x3a, 0x0, 0x3a, '+}', 0x3a, '-', 0x3a, './file1', 0x3a, [0x46]}, 0x2b) 4.293630749s ago: executing program 4 (id=586): r0 = socket(0x10, 0x803, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, 0x0, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000b40)=[{{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000340)=""/195, 0xc3}, {&(0x7f0000000e40)=""/143, 0x8f}, {&(0x7f0000000280)=""/110, 0x6e}, {&(0x7f0000004800)=""/4082, 0xff2}, {&(0x7f0000006380)=""/4101, 0x1005}, {&(0x7f0000000440)=""/137, 0x89}], 0x6}, 0x4}], 0x2, 0x100, 0x0) 0s ago: executing program 4 (id=587): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000180), 0x12) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, 0x0) write$cgroup_int(r4, &(0x7f0000000200)=0x1, 0x12) write$cgroup_pid(r4, &(0x7f0000000140), 0x12) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.28' (ED25519) to the list of known hosts. [ 91.469142][ T5786] cgroup: Unknown subsys name 'net' [ 91.690056][ T5786] cgroup: Unknown subsys name 'cpuset' [ 91.755407][ T5786] cgroup: Unknown subsys name 'rlimit' [ 92.102208][ T990] cfg80211: failed to load regulatory.db Setting up swapspace version 1, size = 127995904 bytes [ 93.815213][ T5786] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 98.577198][ T5800] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 98.580953][ T5800] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 98.582641][ T5800] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 98.598061][ T5800] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 98.606720][ T5800] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 98.669907][ T5117] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 98.673677][ T5117] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 98.685184][ T5806] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 98.695437][ T5806] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 98.697421][ T61] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 98.698689][ T61] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 98.782809][ T5800] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 98.798481][ T5800] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 98.803772][ T5808] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 98.820648][ T5808] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 98.831429][ T5808] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 98.859298][ T61] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 98.865229][ T61] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 98.866276][ T61] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 98.867325][ T61] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 98.878896][ T61] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 98.879987][ T61] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 98.883694][ T61] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 98.892756][ T61] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 98.898811][ T5800] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 99.725852][ T5798] chnl_net:caif_netlink_parms(): no params data found [ 100.104520][ T5804] chnl_net:caif_netlink_parms(): no params data found [ 100.159758][ T5813] chnl_net:caif_netlink_parms(): no params data found [ 100.177869][ T5809] chnl_net:caif_netlink_parms(): no params data found [ 100.553793][ T5803] chnl_net:caif_netlink_parms(): no params data found [ 100.645767][ T5117] Bluetooth: hci0: command tx timeout [ 100.705319][ T5798] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.706579][ T5798] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.707060][ T5798] bridge_slave_0: entered allmulticast mode [ 100.709201][ T5798] bridge_slave_0: entered promiscuous mode [ 100.762073][ T5798] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.762209][ T5798] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.762378][ T5798] bridge_slave_1: entered allmulticast mode [ 100.765694][ T5798] bridge_slave_1: entered promiscuous mode [ 100.804056][ T5117] Bluetooth: hci2: command tx timeout [ 100.885656][ T5117] Bluetooth: hci1: command tx timeout [ 100.964128][ T5117] Bluetooth: hci4: command tx timeout [ 100.964136][ T5808] Bluetooth: hci3: command tx timeout [ 101.428995][ T5798] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.429272][ T5804] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.429491][ T5804] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.429674][ T5804] bridge_slave_0: entered allmulticast mode [ 101.432107][ T5804] bridge_slave_0: entered promiscuous mode [ 101.618549][ T5798] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.618829][ T5804] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.618969][ T5804] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.619106][ T5804] bridge_slave_1: entered allmulticast mode [ 101.621024][ T5804] bridge_slave_1: entered promiscuous mode [ 101.635598][ T5813] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.635764][ T5813] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.636364][ T5813] bridge_slave_0: entered allmulticast mode [ 101.640020][ T5813] bridge_slave_0: entered promiscuous mode [ 101.643259][ T5809] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.643412][ T5809] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.646597][ T5809] bridge_slave_0: entered allmulticast mode [ 101.649710][ T5809] bridge_slave_0: entered promiscuous mode [ 101.895108][ T5813] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.895239][ T5813] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.895431][ T5813] bridge_slave_1: entered allmulticast mode [ 101.897680][ T5813] bridge_slave_1: entered promiscuous mode [ 101.899075][ T5809] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.899164][ T5809] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.899307][ T5809] bridge_slave_1: entered allmulticast mode [ 101.901235][ T5809] bridge_slave_1: entered promiscuous mode [ 102.386714][ T5798] team0: Port device team_slave_0 added [ 102.390894][ T5804] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.391194][ T5803] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.391400][ T5803] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.391590][ T5803] bridge_slave_0: entered allmulticast mode [ 102.393762][ T5803] bridge_slave_0: entered promiscuous mode [ 102.526947][ T5798] team0: Port device team_slave_1 added [ 102.530057][ T5804] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.530313][ T5803] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.530431][ T5803] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.530568][ T5803] bridge_slave_1: entered allmulticast mode [ 102.532572][ T5803] bridge_slave_1: entered promiscuous mode [ 102.540520][ T5813] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.550661][ T5809] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.724110][ T5808] Bluetooth: hci0: command tx timeout [ 102.768262][ T5813] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.770963][ T5809] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.884087][ T5808] Bluetooth: hci2: command tx timeout [ 102.964965][ T5808] Bluetooth: hci1: command tx timeout [ 103.044055][ T5808] Bluetooth: hci4: command tx timeout [ 103.044089][ T5808] Bluetooth: hci3: command tx timeout [ 103.207925][ T5798] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.207944][ T5798] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.207973][ T5798] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.213033][ T5804] team0: Port device team_slave_0 added [ 103.459207][ T5803] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.606798][ T5798] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.606811][ T5798] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.606843][ T5798] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.611108][ T5804] team0: Port device team_slave_1 added [ 103.616490][ T5803] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.619746][ T5813] team0: Port device team_slave_0 added [ 103.623585][ T5809] team0: Port device team_slave_0 added [ 103.796804][ T5813] team0: Port device team_slave_1 added [ 103.799685][ T5809] team0: Port device team_slave_1 added [ 104.057351][ T5804] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.057365][ T5804] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.057385][ T5804] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.060543][ T5803] team0: Port device team_slave_0 added [ 104.255855][ T5804] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.255871][ T5804] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.255891][ T5804] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.258107][ T5803] team0: Port device team_slave_1 added [ 104.259102][ T5813] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.259113][ T5813] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.259133][ T5813] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.260371][ T5809] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.260384][ T5809] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.260412][ T5809] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.647186][ T5813] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.647203][ T5813] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.647223][ T5813] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.648320][ T5809] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.648336][ T5809] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.648355][ T5809] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.661367][ T5798] hsr_slave_0: entered promiscuous mode [ 104.663475][ T5798] hsr_slave_1: entered promiscuous mode [ 104.778238][ T5803] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.778257][ T5803] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.778276][ T5803] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.804003][ T5117] Bluetooth: hci0: command tx timeout [ 104.856797][ T5803] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.856811][ T5803] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.856831][ T5803] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.964002][ T5117] Bluetooth: hci2: command tx timeout [ 105.054118][ T5117] Bluetooth: hci1: command tx timeout [ 105.124177][ T5117] Bluetooth: hci3: command tx timeout [ 105.124212][ T5117] Bluetooth: hci4: command tx timeout [ 105.190959][ T5804] hsr_slave_0: entered promiscuous mode [ 105.192016][ T5804] hsr_slave_1: entered promiscuous mode [ 105.192869][ T5804] debugfs: 'hsr0' already exists in 'hsr' [ 105.192971][ T5804] Cannot create hsr debugfs directory [ 105.465276][ T5813] hsr_slave_0: entered promiscuous mode [ 105.466905][ T5813] hsr_slave_1: entered promiscuous mode [ 105.468078][ T5813] debugfs: 'hsr0' already exists in 'hsr' [ 105.468109][ T5813] Cannot create hsr debugfs directory [ 105.562257][ T5809] hsr_slave_0: entered promiscuous mode [ 105.563407][ T5809] hsr_slave_1: entered promiscuous mode [ 105.565364][ T5809] debugfs: 'hsr0' already exists in 'hsr' [ 105.565394][ T5809] Cannot create hsr debugfs directory [ 105.852339][ T5803] hsr_slave_0: entered promiscuous mode [ 105.853451][ T5803] hsr_slave_1: entered promiscuous mode [ 105.857118][ T5803] debugfs: 'hsr0' already exists in 'hsr' [ 105.857152][ T5803] Cannot create hsr debugfs directory [ 106.884047][ T5808] Bluetooth: hci0: command tx timeout [ 107.044006][ T5808] Bluetooth: hci2: command tx timeout [ 107.125285][ T5808] Bluetooth: hci1: command tx timeout [ 107.204060][ T5117] Bluetooth: hci3: command tx timeout [ 107.204110][ T5808] Bluetooth: hci4: command tx timeout [ 107.270299][ T5798] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 107.323759][ T5798] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 107.349817][ T5798] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 107.386308][ T5798] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 107.524871][ T5804] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 107.562814][ T5804] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 107.579864][ T5804] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 107.641322][ T5804] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 107.777640][ T5813] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 107.818385][ T5813] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 107.851513][ T5813] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 107.891347][ T5813] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 108.037497][ T5809] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 108.082332][ T5809] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 108.124083][ T5809] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 108.182523][ T5809] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 108.290235][ T5798] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.325937][ T5803] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 108.366928][ T5803] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 108.407855][ T5803] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 108.445703][ T5803] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 108.522776][ T5798] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.563002][ T1174] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.563562][ T1174] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.592341][ T5804] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.634025][ T1505] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.634172][ T1505] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.703596][ T5804] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.738886][ T5813] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.757665][ T1174] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.757891][ T1174] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.807263][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.807376][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.867482][ T5813] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.910516][ T5809] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.912852][ T1505] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.912996][ T1505] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.973071][ T1174] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.973341][ T1174] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.068749][ T5809] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.129388][ T5803] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.136725][ T3632] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.136983][ T3632] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.196652][ T1505] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.196793][ T1505] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.282897][ T5803] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.340667][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.340948][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.390453][ T1098] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.390631][ T1098] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.459404][ T5798] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.776511][ T5804] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.826895][ T5798] veth0_vlan: entered promiscuous mode [ 109.863793][ T5798] veth1_vlan: entered promiscuous mode [ 109.901596][ T5813] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.102952][ T5804] veth0_vlan: entered promiscuous mode [ 110.109407][ T5798] veth0_macvtap: entered promiscuous mode [ 110.118579][ T5809] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.143197][ T5798] veth1_macvtap: entered promiscuous mode [ 110.181083][ T5804] veth1_vlan: entered promiscuous mode [ 110.221627][ T5803] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.226744][ T5813] veth0_vlan: entered promiscuous mode [ 110.249934][ T5798] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.292020][ T5798] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.311833][ T5813] veth1_vlan: entered promiscuous mode [ 110.372106][ T1505] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.393375][ T1505] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.412970][ T1505] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.439963][ T1505] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.466308][ T5809] veth0_vlan: entered promiscuous mode [ 110.469725][ T5804] veth0_macvtap: entered promiscuous mode [ 110.550529][ T5804] veth1_macvtap: entered promiscuous mode [ 110.627590][ T5809] veth1_vlan: entered promiscuous mode [ 110.753130][ T5813] veth0_macvtap: entered promiscuous mode [ 110.771654][ T5804] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.827629][ T5813] veth1_macvtap: entered promiscuous mode [ 110.836603][ T5804] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.869458][ T3632] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.869481][ T3632] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.916668][ T68] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.923362][ T68] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.952132][ T68] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.966066][ T68] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.000698][ T5813] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.036993][ T5809] veth0_macvtap: entered promiscuous mode [ 111.039533][ T3539] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.039554][ T3539] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.086715][ T5813] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.128673][ T5809] veth1_macvtap: entered promiscuous mode [ 111.150265][ T5803] veth0_vlan: entered promiscuous mode [ 111.215216][ T1505] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.228205][ T1505] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.249576][ T1505] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.272570][ T1505] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.322385][ T5803] veth1_vlan: entered promiscuous mode [ 111.377918][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.385690][ T1505] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.385711][ T1505] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.690600][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.544128][ T3632] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.544150][ T3632] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.547352][ T68] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.548691][ T68] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.549366][ T68] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.549427][ T68] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.664265][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 113.665177][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.665200][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.718187][ T5803] veth0_macvtap: entered promiscuous mode [ 114.131162][ T5803] veth1_macvtap: entered promiscuous mode [ 114.866450][ T5931] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7'. [ 116.965984][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.966008][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.077026][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.077048][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.188251][ T5803] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 118.239668][ T5803] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 118.394850][ T1505] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.394872][ T1505] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.403465][ T68] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.405709][ T68] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.406959][ T68] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.416575][ T68] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.593865][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 118.857949][ T5946] sctp: [Deprecated]: syz.1.10 (pid 5946) Use of struct sctp_assoc_value in delayed_ack socket option. [ 118.857949][ T5946] Use struct sctp_sack_info instead [ 120.474378][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 120.593908][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 120.625813][ T5808] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 120.625857][ T5808] CPU: 1 UID: 0 PID: 5808 Comm: kworker/u9:4 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 120.625883][ T5808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 120.625897][ T5808] Workqueue: hci4 hci_rx_work [ 120.625934][ T5808] Call Trace: [ 120.625947][ T5808] [ 120.625957][ T5808] dump_stack_lvl+0x189/0x250 [ 120.625991][ T5808] ? __pfx_dump_stack_lvl+0x10/0x10 [ 120.626019][ T5808] ? __pfx__printk+0x10/0x10 [ 120.626061][ T5808] ? kernfs_path_from_node+0x2c/0x280 [ 120.626092][ T5808] ? kernfs_path_from_node+0x243/0x280 [ 120.626120][ T5808] ? kernfs_path_from_node+0x2c/0x280 [ 120.626152][ T5808] sysfs_create_dir_ns+0x259/0x280 [ 120.626179][ T5808] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 120.626203][ T5808] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 120.626237][ T5808] ? rt_spin_unlock+0x161/0x200 [ 120.626273][ T5808] kobject_add_internal+0x5a5/0xb50 [ 120.626316][ T5808] kobject_add+0x155/0x220 [ 120.626353][ T5808] ? __pfx_kobject_add+0x10/0x10 [ 120.626394][ T5808] ? get_device_parent+0x370/0x3a0 [ 120.626428][ T5808] device_add+0x408/0xb50 [ 120.626469][ T5808] hci_conn_add_sysfs+0xd5/0x1e0 [ 120.626508][ T5808] le_conn_complete_evt+0xf39/0x1500 [ 120.626552][ T5808] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 120.626589][ T5808] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 120.626619][ T5808] ? lockdep_hardirqs_on+0x9c/0x150 [ 120.626654][ T5808] ? skb_pull_data+0xfb/0x200 [ 120.626687][ T5808] hci_le_enh_conn_complete_evt+0x189/0x470 [ 120.626718][ T5808] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 120.626751][ T5808] hci_event_packet+0x78f/0x1200 [ 120.626786][ T5808] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 120.626818][ T5808] ? __pfx_hci_event_packet+0x10/0x10 [ 120.626853][ T5808] ? hci_send_to_monitor+0xe2/0x570 [ 120.626888][ T5808] hci_rx_work+0x46a/0xe80 [ 120.626921][ T5808] ? process_scheduled_works+0x9ef/0x17b0 [ 120.626958][ T5808] process_scheduled_works+0xae1/0x17b0 [ 120.627026][ T5808] ? __pfx_process_scheduled_works+0x10/0x10 [ 120.627080][ T5808] worker_thread+0x8a0/0xda0 [ 120.627104][ T5808] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 120.627144][ T5808] ? __kthread_parkme+0x7b/0x200 [ 120.627179][ T5808] kthread+0x711/0x8a0 [ 120.627210][ T5808] ? __pfx_worker_thread+0x10/0x10 [ 120.627231][ T5808] ? __pfx_kthread+0x10/0x10 [ 120.627254][ T5808] ? rt_spin_unlock+0x150/0x200 [ 120.627283][ T5808] ? rt_spin_unlock+0x161/0x200 [ 120.627304][ T5808] ? __pfx_kthread+0x10/0x10 [ 120.627329][ T5808] ret_from_fork+0x4bc/0x870 [ 120.627371][ T5808] ? __pfx_ret_from_fork+0x10/0x10 [ 120.627415][ T5808] ? __switch_to_asm+0x39/0x70 [ 120.627450][ T5808] ? __switch_to_asm+0x33/0x70 [ 120.627479][ T5808] ? __pfx_kthread+0x10/0x10 [ 120.627507][ T5808] ret_from_fork_asm+0x1a/0x30 [ 120.627558][ T5808] [ 120.627593][ T5808] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 120.627636][ T5808] Bluetooth: hci4: failed to register connection device [ 120.713856][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 120.753917][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 121.982408][ T5963] sctp: [Deprecated]: syz.0.12 (pid 5963) Use of struct sctp_assoc_value in delayed_ack socket option. [ 121.982408][ T5963] Use struct sctp_sack_info instead [ 122.007589][ C1] vkms_vblank_simulate: vblank timer overrun [ 122.171111][ C1] vkms_vblank_simulate: vblank timer overrun [ 122.648079][ T5808] Bluetooth: hci4: command tx timeout [ 122.795211][ T3632] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.795248][ T3632] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.410992][ T5971] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 123.471037][ C1] vkms_vblank_simulate: vblank timer overrun [ 124.357741][ C1] vkms_vblank_simulate: vblank timer overrun [ 124.514299][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 125.131355][ T5923] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.131377][ T5923] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.236156][ T5983] 9pnet_virtio: no channels available for device syz [ 125.323961][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 125.815121][ C1] vkms_vblank_simulate: vblank timer overrun [ 125.916103][ C1] vkms_vblank_simulate: vblank timer overrun [ 125.971129][ C1] vkms_vblank_simulate: vblank timer overrun [ 126.371031][ C1] vkms_vblank_simulate: vblank timer overrun [ 126.779961][ C1] vkms_vblank_simulate: vblank timer overrun [ 127.090181][ C1] vkms_vblank_simulate: vblank timer overrun [ 127.640667][ C1] vkms_vblank_simulate: vblank timer overrun [ 127.692845][ C1] vkms_vblank_simulate: vblank timer overrun [ 127.826334][ T6005] netlink: 20 bytes leftover after parsing attributes in process `syz.3.22'. [ 127.830634][ C1] vkms_vblank_simulate: vblank timer overrun [ 132.563165][ T6025] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 133.027274][ T6040] netlink: 48 bytes leftover after parsing attributes in process `syz.4.31'. [ 133.067345][ T6041] syz.1.29(6041): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 136.513908][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 136.514132][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 137.967981][ T6068] netlink: 12 bytes leftover after parsing attributes in process `syz.3.37'. [ 138.625920][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.626026][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 141.016767][ T6078] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 141.635695][ T6089] netlink: 'syz.2.44': attribute type 11 has an invalid length. [ 143.552386][ T6091] syz.4.43 (6091) used greatest stack depth: 17840 bytes left [ 143.686256][ T6114] sctp: [Deprecated]: syz.3.48 (pid 6114) Use of struct sctp_assoc_value in delayed_ack socket option. [ 143.686256][ T6114] Use struct sctp_sack_info instead [ 144.720148][ C0] vkms_vblank_simulate: vblank timer overrun [ 145.045498][ C0] vkms_vblank_simulate: vblank timer overrun [ 145.487530][ T6126] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 145.919435][ C0] vkms_vblank_simulate: vblank timer overrun [ 148.176535][ C0] vkms_vblank_simulate: vblank timer overrun [ 148.647822][ T6152] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 149.317169][ C0] vkms_vblank_simulate: vblank timer overrun [ 150.031190][ T6158] netlink: 'syz.0.61': attribute type 27 has an invalid length. [ 152.154405][ T6175] netlink: 20 bytes leftover after parsing attributes in process `syz.0.63'. [ 154.265980][ T6189] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 157.610501][ T6212] lo speed is unknown, defaulting to 1000 [ 157.610906][ T6212] lo speed is unknown, defaulting to 1000 [ 159.733217][ T6212] lo speed is unknown, defaulting to 1000 [ 159.882970][ T6212] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 161.482204][ T6212] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 161.967065][ T6212] lo speed is unknown, defaulting to 1000 [ 162.002205][ T6212] lo speed is unknown, defaulting to 1000 [ 162.026365][ T6212] lo speed is unknown, defaulting to 1000 [ 162.029887][ T6212] lo speed is unknown, defaulting to 1000 [ 162.076098][ T6212] lo speed is unknown, defaulting to 1000 [ 164.062931][ T6249] 9pnet_virtio: no channels available for device syz [ 165.050474][ T6257] SQUASHFS error: Failed to read block 0x0: -5 [ 165.050537][ T6257] unable to read squashfs_super_block [ 167.011728][ T6269] netlink: 4 bytes leftover after parsing attributes in process `syz.3.86'. [ 170.401779][ T6279] netlink: 4 bytes leftover after parsing attributes in process `syz.0.89'. [ 172.598893][ T6290] netlink: 'syz.0.95': attribute type 27 has an invalid length. [ 175.392264][ T6308] 9pnet_virtio: no channels available for device syz [ 178.011609][ T5117] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 178.032418][ T5117] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 178.033493][ T5117] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 178.050752][ T5117] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 178.051538][ T5117] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 178.270282][ T6315] lo speed is unknown, defaulting to 1000 [ 180.165437][ T5808] Bluetooth: hci5: command tx timeout [ 181.921745][ T6321] netlink: 52 bytes leftover after parsing attributes in process `syz.0.102'. [ 182.537564][ T5117] Bluetooth: hci5: command tx timeout [ 184.699084][ T5808] Bluetooth: hci5: command tx timeout [ 185.330344][ T6349] capability: warning: `syz.3.108' uses deprecated v2 capabilities in a way that may be insecure [ 186.940377][ T5808] Bluetooth: hci5: command tx timeout [ 192.244485][ T5808] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 192.244529][ T5808] CPU: 0 UID: 0 PID: 5808 Comm: kworker/u9:4 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 192.244565][ T5808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 192.244579][ T5808] Workqueue: hci4 hci_rx_work [ 192.244626][ T5808] Call Trace: [ 192.244635][ T5808] [ 192.244645][ T5808] dump_stack_lvl+0x189/0x250 [ 192.244681][ T5808] ? __pfx_dump_stack_lvl+0x10/0x10 [ 192.244709][ T5808] ? __pfx__printk+0x10/0x10 [ 192.244744][ T5808] ? kernfs_path_from_node+0x2c/0x280 [ 192.244775][ T5808] ? kernfs_path_from_node+0x243/0x280 [ 192.244804][ T5808] ? kernfs_path_from_node+0x2c/0x280 [ 192.244839][ T5808] sysfs_create_dir_ns+0x259/0x280 [ 192.244868][ T5808] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 192.244893][ T5808] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 192.244928][ T5808] ? rt_spin_unlock+0x161/0x200 [ 192.244954][ T5808] kobject_add_internal+0x5a5/0xb50 [ 192.244997][ T5808] kobject_add+0x155/0x220 [ 192.245040][ T5808] ? __pfx_kobject_add+0x10/0x10 [ 192.245081][ T5808] ? get_device_parent+0x370/0x3a0 [ 192.245115][ T5808] device_add+0x408/0xb50 [ 192.245150][ T5808] hci_conn_add_sysfs+0xd5/0x1e0 [ 192.245189][ T5808] le_conn_complete_evt+0xf39/0x1500 [ 192.245234][ T5808] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 192.245264][ T5808] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 192.245294][ T5808] ? lockdep_hardirqs_on+0x9c/0x150 [ 192.245328][ T5808] ? skb_pull_data+0xfb/0x200 [ 192.245363][ T5808] hci_le_enh_conn_complete_evt+0x189/0x470 [ 192.245394][ T5808] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 192.245428][ T5808] hci_event_packet+0x78f/0x1200 [ 192.245455][ T5808] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 192.245486][ T5808] ? __pfx_hci_event_packet+0x10/0x10 [ 192.245521][ T5808] ? hci_send_to_monitor+0xe2/0x570 [ 192.245561][ T5808] hci_rx_work+0x46a/0xe80 [ 192.245593][ T5808] ? process_scheduled_works+0x9ef/0x17b0 [ 192.245630][ T5808] process_scheduled_works+0xae1/0x17b0 [ 192.245699][ T5808] ? __pfx_process_scheduled_works+0x10/0x10 [ 192.245752][ T5808] worker_thread+0x8a0/0xda0 [ 192.245777][ T5808] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 192.245817][ T5808] ? __kthread_parkme+0x7b/0x200 [ 192.245852][ T5808] kthread+0x711/0x8a0 [ 192.245882][ T5808] ? __pfx_worker_thread+0x10/0x10 [ 192.245903][ T5808] ? __pfx_kthread+0x10/0x10 [ 192.245926][ T5808] ? rt_spin_unlock+0x150/0x200 [ 192.245955][ T5808] ? rt_spin_unlock+0x161/0x200 [ 192.245976][ T5808] ? __pfx_kthread+0x10/0x10 [ 192.246004][ T5808] ret_from_fork+0x4bc/0x870 [ 192.246040][ T5808] ? __pfx_ret_from_fork+0x10/0x10 [ 192.246084][ T5808] ? __switch_to_asm+0x39/0x70 [ 192.246111][ T5808] ? __switch_to_asm+0x33/0x70 [ 192.246139][ T5808] ? __pfx_kthread+0x10/0x10 [ 192.246167][ T5808] ret_from_fork_asm+0x1a/0x30 [ 192.246217][ T5808] [ 192.246249][ T5808] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 192.246291][ T5808] Bluetooth: hci4: failed to register connection device [ 193.315458][ T3565] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.978836][ T6417] netlink: 12 bytes leftover after parsing attributes in process `syz.3.122'. [ 195.321002][ T5808] Bluetooth: hci4: command tx timeout [ 195.847563][ T6315] chnl_net:caif_netlink_parms(): no params data found [ 201.553604][ T3565] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.567040][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 201.567115][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 202.553161][ T5808] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 202.553190][ T5808] CPU: 0 UID: 0 PID: 5808 Comm: kworker/u9:4 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 202.553217][ T5808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 202.553233][ T5808] Workqueue: hci0 hci_rx_work [ 202.553262][ T5808] Call Trace: [ 202.553270][ T5808] [ 202.553280][ T5808] dump_stack_lvl+0x189/0x250 [ 202.553316][ T5808] ? __pfx_dump_stack_lvl+0x10/0x10 [ 202.553344][ T5808] ? __pfx__printk+0x10/0x10 [ 202.553378][ T5808] ? kernfs_path_from_node+0x2c/0x280 [ 202.553410][ T5808] ? kernfs_path_from_node+0x243/0x280 [ 202.553439][ T5808] ? kernfs_path_from_node+0x2c/0x280 [ 202.553474][ T5808] sysfs_create_dir_ns+0x259/0x280 [ 202.553505][ T5808] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 202.553531][ T5808] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 202.553566][ T5808] ? rt_spin_unlock+0x161/0x200 [ 202.553593][ T5808] kobject_add_internal+0x5a5/0xb50 [ 202.553644][ T5808] kobject_add+0x155/0x220 [ 202.553684][ T5808] ? __pfx_kobject_add+0x10/0x10 [ 202.553726][ T5808] ? get_device_parent+0x370/0x3a0 [ 202.553767][ T5808] device_add+0x408/0xb50 [ 202.553797][ T5808] hci_conn_add_sysfs+0xd5/0x1e0 [ 202.553835][ T5808] le_conn_complete_evt+0xf39/0x1500 [ 202.553880][ T5808] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 202.553911][ T5808] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 202.553942][ T5808] ? lockdep_hardirqs_on+0x9c/0x150 [ 202.553977][ T5808] ? skb_pull_data+0xfb/0x200 [ 202.554018][ T5808] hci_le_enh_conn_complete_evt+0x189/0x470 [ 202.554049][ T5808] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 202.554084][ T5808] hci_event_packet+0x78f/0x1200 [ 202.554111][ T5808] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 202.554142][ T5808] ? __pfx_hci_event_packet+0x10/0x10 [ 202.554177][ T5808] ? hci_send_to_monitor+0xe2/0x570 [ 202.554211][ T5808] hci_rx_work+0x46a/0xe80 [ 202.554243][ T5808] ? process_scheduled_works+0x9ef/0x17b0 [ 202.554280][ T5808] process_scheduled_works+0xae1/0x17b0 [ 202.554349][ T5808] ? __pfx_process_scheduled_works+0x10/0x10 [ 202.554406][ T5808] worker_thread+0x8a0/0xda0 [ 202.554432][ T5808] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 202.554471][ T5808] ? __kthread_parkme+0x7b/0x200 [ 202.554505][ T5808] kthread+0x711/0x8a0 [ 202.554536][ T5808] ? __pfx_worker_thread+0x10/0x10 [ 202.554558][ T5808] ? __pfx_kthread+0x10/0x10 [ 202.554582][ T5808] ? rt_spin_unlock+0x150/0x200 [ 202.554610][ T5808] ? rt_spin_unlock+0x161/0x200 [ 202.554631][ T5808] ? __pfx_kthread+0x10/0x10 [ 202.554659][ T5808] ret_from_fork+0x4bc/0x870 [ 202.554696][ T5808] ? __pfx_ret_from_fork+0x10/0x10 [ 202.554740][ T5808] ? __switch_to_asm+0x39/0x70 [ 202.554768][ T5808] ? __switch_to_asm+0x33/0x70 [ 202.554796][ T5808] ? __pfx_kthread+0x10/0x10 [ 202.554824][ T5808] ret_from_fork_asm+0x1a/0x30 [ 202.554876][ T5808] [ 202.563922][ T5808] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 202.563976][ T5808] Bluetooth: hci0: failed to register connection device [ 203.057491][ T6469] qnx4: no qnx4 filesystem (no root dir). [ 203.688877][ T6465] warning: `syz.0.132' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 204.597977][ T6474] netlink: 48 bytes leftover after parsing attributes in process `syz.3.134'. [ 205.027333][ T5808] Bluetooth: hci0: command tx timeout [ 205.139469][ T6485] netlink: 12 bytes leftover after parsing attributes in process `syz.1.138'. [ 205.139504][ T6485] netlink: 12 bytes leftover after parsing attributes in process `syz.1.138'. [ 207.647074][ T3565] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.079272][ T3565] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.065959][ T6514] rdma_op ffff88804ad45a70 conn xmit_rdma 0000000000000000 [ 212.625355][ T6525] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 212.791540][ T6315] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.791678][ T6315] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.791943][ T6315] bridge_slave_0: entered allmulticast mode [ 212.875019][ T6315] bridge_slave_0: entered promiscuous mode [ 212.895387][ T6315] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.895530][ T6315] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.895780][ T6315] bridge_slave_1: entered allmulticast mode [ 212.916482][ T6315] bridge_slave_1: entered promiscuous mode [ 216.558804][ T6539] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 217.045169][ T6315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 217.507536][ T6315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 220.348663][ T6574] siw: device registration error -23 [ 221.739512][ T6315] team0: Port device team_slave_0 added [ 222.470304][ T6573] Bluetooth: hci1: command 0x0406 tx timeout [ 222.470353][ T6573] Bluetooth: hci4: command 0x0406 tx timeout [ 222.470384][ T6573] Bluetooth: hci0: command 0x0406 tx timeout [ 222.470414][ T6573] Bluetooth: hci2: command 0x0406 tx timeout [ 223.767768][ T6315] team0: Port device team_slave_1 added [ 227.665207][ T6315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 227.665220][ T6315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 227.665240][ T6315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 227.673614][ T6315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 227.673632][ T6315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 227.673652][ T6315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 227.796967][ T3565] bridge_slave_1: left allmulticast mode [ 227.797161][ T3565] bridge_slave_1: left promiscuous mode [ 227.799532][ T3565] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.965950][ T3565] bridge_slave_0: left allmulticast mode [ 227.965980][ T3565] bridge_slave_0: left promiscuous mode [ 228.023988][ T3565] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.754285][ T5788] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 232.454121][ T5788] usb 1-1: Using ep0 maxpacket: 32 [ 232.523073][ T5788] usb 1-1: device descriptor read/all, error -71 [ 233.297293][ T6631] netlink: 12 bytes leftover after parsing attributes in process `syz.1.170'. [ 239.445470][ T5808] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 239.471515][ T5808] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 239.481452][ T5808] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 239.506988][ T5808] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 239.509508][ T5808] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 241.611885][ T5808] Bluetooth: hci3: command tx timeout [ 242.681441][ T5808] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 242.681471][ T5808] CPU: 1 UID: 0 PID: 5808 Comm: kworker/u9:4 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 242.681498][ T5808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 242.681512][ T5808] Workqueue: hci1 hci_rx_work [ 242.681541][ T5808] Call Trace: [ 242.681550][ T5808] [ 242.681560][ T5808] dump_stack_lvl+0x189/0x250 [ 242.681596][ T5808] ? __pfx_dump_stack_lvl+0x10/0x10 [ 242.681624][ T5808] ? __pfx__printk+0x10/0x10 [ 242.681658][ T5808] ? kernfs_path_from_node+0x2c/0x280 [ 242.681691][ T5808] ? kernfs_path_from_node+0x243/0x280 [ 242.681721][ T5808] ? kernfs_path_from_node+0x2c/0x280 [ 242.681756][ T5808] sysfs_create_dir_ns+0x259/0x280 [ 242.681786][ T5808] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 242.681811][ T5808] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 242.681845][ T5808] ? rt_spin_unlock+0x161/0x200 [ 242.681871][ T5808] kobject_add_internal+0x5a5/0xb50 [ 242.681913][ T5808] kobject_add+0x155/0x220 [ 242.681960][ T5808] ? __pfx_kobject_add+0x10/0x10 [ 242.682001][ T5808] ? get_device_parent+0x370/0x3a0 [ 242.682036][ T5808] device_add+0x408/0xb50 [ 242.682070][ T5808] hci_conn_add_sysfs+0xd5/0x1e0 [ 242.682109][ T5808] le_conn_complete_evt+0xf39/0x1500 [ 242.682154][ T5808] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 242.682186][ T5808] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 242.682224][ T5808] ? lockdep_hardirqs_on+0x9c/0x150 [ 242.682257][ T5808] ? skb_pull_data+0xfb/0x200 [ 242.682292][ T5808] hci_le_enh_conn_complete_evt+0x189/0x470 [ 242.682323][ T5808] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 242.682359][ T5808] hci_event_packet+0x78f/0x1200 [ 242.682386][ T5808] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 242.682416][ T5808] ? __pfx_hci_event_packet+0x10/0x10 [ 242.682450][ T5808] ? hci_send_to_monitor+0xe2/0x570 [ 242.682483][ T5808] hci_rx_work+0x46a/0xe80 [ 242.682516][ T5808] ? process_scheduled_works+0x9ef/0x17b0 [ 242.682554][ T5808] process_scheduled_works+0xae1/0x17b0 [ 242.682623][ T5808] ? __pfx_process_scheduled_works+0x10/0x10 [ 242.682676][ T5808] worker_thread+0x8a0/0xda0 [ 242.682702][ T5808] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 242.682741][ T5808] ? __kthread_parkme+0x7b/0x200 [ 242.682776][ T5808] kthread+0x711/0x8a0 [ 242.682806][ T5808] ? __pfx_worker_thread+0x10/0x10 [ 242.682828][ T5808] ? __pfx_kthread+0x10/0x10 [ 242.682851][ T5808] ? rt_spin_unlock+0x150/0x200 [ 242.682879][ T5808] ? rt_spin_unlock+0x161/0x200 [ 242.682899][ T5808] ? __pfx_kthread+0x10/0x10 [ 242.682934][ T5808] ret_from_fork+0x4bc/0x870 [ 242.682972][ T5808] ? __pfx_ret_from_fork+0x10/0x10 [ 242.683017][ T5808] ? __switch_to_asm+0x39/0x70 [ 242.683046][ T5808] ? __switch_to_asm+0x33/0x70 [ 242.683074][ T5808] ? __pfx_kthread+0x10/0x10 [ 242.683103][ T5808] ret_from_fork_asm+0x1a/0x30 [ 242.683152][ T5808] [ 242.683185][ T5808] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 242.683228][ T5808] Bluetooth: hci1: failed to register connection device [ 243.526340][ T6672] siw: device registration error -23 [ 243.684218][ T5808] Bluetooth: hci3: command tx timeout [ 244.356175][ T6687] netlink: 20 bytes leftover after parsing attributes in process `syz.0.185'. [ 244.952019][ T5808] Bluetooth: hci1: command 0x0406 tx timeout [ 245.814615][ T5808] Bluetooth: hci3: command tx timeout [ 247.843922][ T5808] Bluetooth: hci3: command tx timeout [ 248.327172][ T6705] netlink: 32 bytes leftover after parsing attributes in process `syz.4.191'. [ 248.328987][ T6706] netlink: 48 bytes leftover after parsing attributes in process `syz.1.190'. [ 248.755527][ T3565] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 249.918099][ T3565] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 250.175056][ T3565] bond0 (unregistering): Released all slaves [ 252.383341][ T6649] lo speed is unknown, defaulting to 1000 [ 252.548485][ T6734] netlink: 4 bytes leftover after parsing attributes in process `syz.0.196'. [ 262.577466][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 262.577912][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 268.488276][ T6848] qnx4: no qnx4 filesystem (no root dir). [ 268.699261][ T6835] syz.1.220 (6835) used greatest stack depth: 17560 bytes left [ 270.533893][ T6870] netlink: 'syz.4.225': attribute type 27 has an invalid length. [ 274.111963][ T6888] overlayfs: conflicting lowerdir path [ 277.065661][ T6021] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 277.333914][ T6021] usb 4-1: Using ep0 maxpacket: 32 [ 277.379787][ T6021] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 277.385846][ T6021] usb 4-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 277.385879][ T6021] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.385903][ T6021] usb 4-1: Product: syz [ 277.385920][ T6021] usb 4-1: Manufacturer: syz [ 277.385937][ T6021] usb 4-1: SerialNumber: syz [ 277.774008][ T3565] hsr_slave_0: left promiscuous mode [ 278.764962][ T6021] usb 4-1: config 0 descriptor?? [ 279.366513][ T6936] netlink: 12 bytes leftover after parsing attributes in process `syz.3.241'. [ 279.434067][ T6021] usb 4-1: can't set config #0, error -71 [ 279.455467][ T3565] hsr_slave_1: left promiscuous mode [ 279.459053][ T3565] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 279.459157][ T3565] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 279.476161][ T6021] usb 4-1: USB disconnect, device number 2 [ 279.668543][ T6937] netlink: 12 bytes leftover after parsing attributes in process `syz.3.241'. [ 279.724044][ T3565] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 279.724079][ T3565] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 282.547238][ T3565] veth1_macvtap: left promiscuous mode [ 282.554740][ T3565] veth0_macvtap: left promiscuous mode [ 282.555201][ T3565] veth1_vlan: left promiscuous mode [ 282.555586][ T3565] veth0_vlan: left promiscuous mode [ 283.620364][ T6956] siw: device registration error -23 [ 284.777289][ T6958] netlink: 'syz.3.247': attribute type 27 has an invalid length. [ 292.355408][ T6995] netlink: 4 bytes leftover after parsing attributes in process `syz.3.256'. [ 293.605314][ T5117] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 293.609575][ T5117] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 293.611760][ T5117] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 293.675812][ T5117] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 293.676742][ T5117] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 294.090512][ T5808] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 294.102842][ T5808] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 294.106172][ T5808] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 294.116318][ T5808] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 294.117449][ T5808] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 294.644851][ T3565] team0 (unregistering): Port device team_slave_1 removed [ 294.885312][ T3565] team0 (unregistering): Port device team_slave_0 removed [ 295.683945][ T5117] Bluetooth: hci5: command tx timeout [ 296.245842][ T5117] Bluetooth: hci6: command tx timeout [ 297.138371][ T6021] lo speed is unknown, defaulting to 1000 [ 297.138404][ T6021] infiniband syz0: ib_query_port failed (-19) [ 298.236339][ T5117] Bluetooth: hci5: command tx timeout [ 298.325036][ T5117] Bluetooth: hci6: command tx timeout [ 298.823378][ T7013] overlay: Unknown parameter '/' [ 299.881087][ T5808] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 299.883570][ T5808] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 299.885848][ T5808] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 299.887119][ T5808] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 299.887939][ T5808] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 301.541350][ T5117] Bluetooth: hci5: command tx timeout [ 301.541385][ T5117] Bluetooth: hci6: command tx timeout [ 302.074736][ T5808] Bluetooth: hci2: command tx timeout [ 302.204536][ T5867] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 302.383938][ T5867] usb 4-1: Using ep0 maxpacket: 32 [ 302.402976][ T5867] usb 4-1: config 0 has an invalid interface number: 231 but max is 0 [ 302.403006][ T5867] usb 4-1: config 0 has no interface number 0 [ 302.403681][ T5867] usb 4-1: config 0 interface 231 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 302.403712][ T5867] usb 4-1: config 0 interface 231 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 302.450687][ T5867] usb 4-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 302.450710][ T5867] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.450724][ T5867] usb 4-1: Product: syz [ 302.450734][ T5867] usb 4-1: Manufacturer: syz [ 302.450744][ T5867] usb 4-1: SerialNumber: syz [ 302.487775][ T5867] usb 4-1: config 0 descriptor?? [ 302.501017][ T7026] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 302.501211][ T7026] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 302.897261][ T5867] plusb 4-1:0.231 usb0: register 'plusb' at usb-dummy_hcd.3-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1, 06:30:e0:49:e6:8b [ 303.604058][ T5117] Bluetooth: hci6: command tx timeout [ 303.604092][ T5117] Bluetooth: hci5: command tx timeout [ 304.084007][ T5808] Bluetooth: hci2: command tx timeout [ 304.875530][ T7040] SQUASHFS error: Failed to read block 0x0: -5 [ 304.875912][ T7040] unable to read squashfs_super_block [ 305.643974][ T5788] usb 4-1: USB disconnect, device number 3 [ 305.648128][ T5788] plusb 4-1:0.231 usb0: unregister 'plusb' usb-dummy_hcd.3-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1 [ 306.168082][ T5808] Bluetooth: hci2: command tx timeout [ 308.761531][ T5808] Bluetooth: hci2: command tx timeout [ 311.582876][ T7069] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 312.076524][ T3565] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.146803][ T7000] chnl_net:caif_netlink_parms(): no params data found [ 313.326594][ T3565] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.376120][ T7002] chnl_net:caif_netlink_parms(): no params data found [ 320.036350][ T7116] netlink: 4 bytes leftover after parsing attributes in process `syz.3.278'. [ 320.108506][ T3565] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.835008][ T7016] chnl_net:caif_netlink_parms(): no params data found [ 322.930958][ C0] vkms_vblank_simulate: vblank timer overrun [ 322.941016][ T3565] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.198970][ C0] vkms_vblank_simulate: vblank timer overrun [ 323.496122][ T7000] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.496344][ T7000] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.496614][ T7000] bridge_slave_0: entered allmulticast mode [ 323.534854][ T7000] bridge_slave_0: entered promiscuous mode [ 323.816615][ T7000] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.816763][ T7000] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.817015][ T7000] bridge_slave_1: entered allmulticast mode [ 323.845710][ T7000] bridge_slave_1: entered promiscuous mode [ 324.126305][ T7002] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.126477][ T7002] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.126721][ T7002] bridge_slave_0: entered allmulticast mode [ 324.164170][ T7002] bridge_slave_0: entered promiscuous mode [ 324.427850][ T7002] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.428032][ T7002] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.428302][ T7002] bridge_slave_1: entered allmulticast mode [ 324.431527][ T7002] bridge_slave_1: entered promiscuous mode [ 324.468832][ T7000] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 325.002782][ C0] vkms_vblank_simulate: vblank timer overrun [ 325.065451][ T7000] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 325.065915][ T7016] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.066091][ T7016] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.066345][ T7016] bridge_slave_0: entered allmulticast mode [ 325.069884][ T7016] bridge_slave_0: entered promiscuous mode [ 325.534762][ C0] vkms_vblank_simulate: vblank timer overrun [ 325.906791][ C0] vkms_vblank_simulate: vblank timer overrun [ 326.057312][ C0] vkms_vblank_simulate: vblank timer overrun [ 326.645933][ T7159] netlink: 4 bytes leftover after parsing attributes in process `syz.3.287'. [ 327.303926][ C0] vkms_vblank_simulate: vblank timer overrun [ 327.361017][ T7016] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.361154][ T7016] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.361388][ T7016] bridge_slave_1: entered allmulticast mode [ 327.387880][ T7016] bridge_slave_1: entered promiscuous mode [ 327.541834][ T7002] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 327.614534][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 327.614612][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 327.829648][ C0] vkms_vblank_simulate: vblank timer overrun [ 328.048355][ T7166] netlink: 'syz.3.288': attribute type 27 has an invalid length. [ 330.329350][ C1] vkms_vblank_simulate: vblank timer overrun [ 330.475671][ C1] vkms_vblank_simulate: vblank timer overrun [ 330.737794][ T7175] netlink: 4 bytes leftover after parsing attributes in process `syz.3.291'. [ 330.745123][ C1] vkms_vblank_simulate: vblank timer overrun [ 330.860632][ C1] vkms_vblank_simulate: vblank timer overrun [ 331.235860][ C1] vkms_vblank_simulate: vblank timer overrun [ 331.256455][ C1] vkms_vblank_simulate: vblank timer overrun [ 331.410345][ C1] vkms_vblank_simulate: vblank timer overrun [ 333.173583][ C1] vkms_vblank_simulate: vblank timer overrun [ 333.615403][ C1] vkms_vblank_simulate: vblank timer overrun [ 333.708029][ T7002] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 333.726452][ T7000] team0: Port device team_slave_0 added [ 333.840999][ C1] vkms_vblank_simulate: vblank timer overrun [ 334.323332][ C1] vkms_vblank_simulate: vblank timer overrun [ 334.706158][ C1] vkms_vblank_simulate: vblank timer overrun [ 336.007327][ T7000] team0: Port device team_slave_1 added [ 336.037568][ T7016] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 337.497057][ T7200] netlink: 4 bytes leftover after parsing attributes in process `syz.3.295'. [ 338.436312][ T7016] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 338.495531][ T7002] team0: Port device team_slave_0 added [ 338.915261][ T7002] team0: Port device team_slave_1 added [ 340.307058][ T7000] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 340.307073][ T7000] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 340.307092][ T7000] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 340.382427][ T3565] bridge_slave_1: left allmulticast mode [ 340.382451][ T3565] bridge_slave_1: left promiscuous mode [ 340.382679][ T3565] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.476441][ T3565] bridge_slave_0: left allmulticast mode [ 340.476463][ T3565] bridge_slave_0: left promiscuous mode [ 340.476702][ T3565] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.577209][ T3565] bridge_slave_1: left allmulticast mode [ 340.577235][ T3565] bridge_slave_1: left promiscuous mode [ 340.577409][ T3565] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.686606][ T3565] bridge_slave_0: left allmulticast mode [ 340.686629][ T3565] bridge_slave_0: left promiscuous mode [ 340.686801][ T3565] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.951060][ T7229] qnx4: no qnx4 filesystem (no root dir). [ 345.549365][ T3565] bond0 (unregistering): Released all slaves [ 346.141930][ T7236] netlink: 12 bytes leftover after parsing attributes in process `syz.4.304'. [ 346.141958][ T7236] netlink: 12 bytes leftover after parsing attributes in process `syz.4.304'. [ 350.090745][ T5117] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 350.115992][ T5117] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 350.124984][ T5117] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 350.126978][ T5117] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 350.128039][ T5117] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 350.614680][ T3565] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 350.678324][ T3565] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 350.696603][ T3565] bond0 (unregistering): Released all slaves [ 350.884909][ T3565] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 350.964751][ T3565] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 351.037401][ T3565] bond0 (unregistering): Released all slaves [ 351.198352][ T7248] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 352.304174][ T5808] Bluetooth: hci0: command tx timeout [ 353.036800][ T7000] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 353.036815][ T7000] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 353.036835][ T7000] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 353.042067][ T7016] team0: Port device team_slave_0 added [ 354.324645][ T5808] Bluetooth: hci0: command tx timeout [ 354.330257][ T7016] team0: Port device team_slave_1 added [ 354.839283][ T5117] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 354.852456][ T5117] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 354.854905][ T5117] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 354.856274][ T5117] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 354.857210][ T5117] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 356.414043][ T5117] Bluetooth: hci0: command tx timeout [ 356.718903][ T7016] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 356.718917][ T7016] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 356.718936][ T7016] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 356.886838][ T5117] Bluetooth: hci3: command tx timeout [ 357.896688][ T7016] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 357.896707][ T7016] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 357.896734][ T7016] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 358.502932][ T5117] Bluetooth: hci0: command tx timeout [ 358.612172][ T7298] netlink: 'syz.3.315': attribute type 27 has an invalid length. [ 359.379850][ T5117] Bluetooth: hci3: command tx timeout [ 360.000026][ T5808] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 360.017307][ T5808] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 360.018539][ T5808] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 360.020260][ T5808] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 360.021218][ T5808] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 360.347049][ T7305] qnx4: no qnx4 filesystem (no root dir). [ 361.443834][ T5808] Bluetooth: hci3: command tx timeout [ 362.503550][ T5808] Bluetooth: hci5: command tx timeout [ 363.573753][ T5808] Bluetooth: hci3: command tx timeout [ 364.563835][ T5808] Bluetooth: hci5: command tx timeout [ 366.648023][ T5808] Bluetooth: hci5: command tx timeout [ 367.196395][ T3565] hsr_slave_0: left promiscuous mode [ 367.212095][ T7338] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 367.212117][ T7338] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 367.212146][ T7338] overlayfs: conflicting lowerdir path [ 367.240644][ T3565] hsr_slave_1: left promiscuous mode [ 367.241473][ T3565] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 367.241502][ T3565] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 367.275347][ T3565] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 367.275441][ T3565] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 367.302301][ T3565] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 367.337970][ T3565] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 367.440303][ T3565] veth1_macvtap: left promiscuous mode [ 367.440415][ T3565] veth0_macvtap: left promiscuous mode [ 367.440617][ T3565] veth1_vlan: left promiscuous mode [ 367.440739][ T3565] veth0_vlan: left promiscuous mode [ 368.723965][ T5808] Bluetooth: hci5: command tx timeout [ 369.895416][ T3565] team0 (unregistering): Port device team_slave_1 removed [ 370.114731][ T3565] team0 (unregistering): Port device team_slave_0 removed [ 372.794715][ T3565] team0 (unregistering): Port device team_slave_1 removed [ 372.914723][ T3565] team0 (unregistering): Port device team_slave_0 removed [ 374.047076][ T7352] netlink: 12 bytes leftover after parsing attributes in process `syz.3.328'. [ 374.047103][ T7352] netlink: 12 bytes leftover after parsing attributes in process `syz.3.328'. [ 374.843134][ T7253] chnl_net:caif_netlink_parms(): no params data found [ 375.552358][ T7387] Zero length message leads to an empty skb [ 376.821331][ T7277] chnl_net:caif_netlink_parms(): no params data found [ 377.038290][ T7302] chnl_net:caif_netlink_parms(): no params data found [ 377.424375][ T7411] netlink: 12 bytes leftover after parsing attributes in process `syz.4.340'. [ 377.424402][ T7411] netlink: 12 bytes leftover after parsing attributes in process `syz.4.340'. [ 381.396001][ T7253] bridge0: port 1(bridge_slave_0) entered blocking state [ 381.396156][ T7253] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.396378][ T7253] bridge_slave_0: entered allmulticast mode [ 381.399414][ T7253] bridge_slave_0: entered promiscuous mode [ 382.392810][ T7253] bridge0: port 2(bridge_slave_1) entered blocking state [ 382.392957][ T7253] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.393188][ T7253] bridge_slave_1: entered allmulticast mode [ 382.396963][ T7253] bridge_slave_1: entered promiscuous mode [ 383.998924][ T7445] netlink: 12 bytes leftover after parsing attributes in process `syz.4.348'. [ 383.998953][ T7445] netlink: 12 bytes leftover after parsing attributes in process `syz.4.348'. [ 385.863984][ T7455] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 387.026179][ T7466] netlink: 36 bytes leftover after parsing attributes in process `syz.4.353'. [ 387.102679][ T7253] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 387.134301][ T7277] bridge0: port 1(bridge_slave_0) entered blocking state [ 387.134468][ T7277] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.134677][ T7277] bridge_slave_0: entered allmulticast mode [ 387.136622][ T7277] bridge_slave_0: entered promiscuous mode [ 388.399535][ T7253] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 389.057633][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 389.057714][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 389.604665][ T7277] bridge0: port 2(bridge_slave_1) entered blocking state [ 389.604824][ T7277] bridge0: port 2(bridge_slave_1) entered disabled state [ 389.605094][ T7277] bridge_slave_1: entered allmulticast mode [ 389.607964][ T7277] bridge_slave_1: entered promiscuous mode [ 389.654280][ T7302] bridge0: port 1(bridge_slave_0) entered blocking state [ 389.654421][ T7302] bridge0: port 1(bridge_slave_0) entered disabled state [ 389.654703][ T7302] bridge_slave_0: entered allmulticast mode [ 389.657997][ T7302] bridge_slave_0: entered promiscuous mode [ 389.979900][ T7482] netlink: 12 bytes leftover after parsing attributes in process `syz.4.357'. [ 389.979928][ T7482] netlink: 12 bytes leftover after parsing attributes in process `syz.4.357'. [ 390.484175][ T7302] bridge0: port 2(bridge_slave_1) entered blocking state [ 390.484331][ T7302] bridge0: port 2(bridge_slave_1) entered disabled state [ 390.484612][ T7302] bridge_slave_1: entered allmulticast mode [ 390.487516][ T7302] bridge_slave_1: entered promiscuous mode [ 391.092049][ T7253] team0: Port device team_slave_0 added [ 391.137968][ T7277] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 392.836934][ T7253] team0: Port device team_slave_1 added [ 392.857787][ T7277] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 392.945219][ T7302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 394.046582][ T7506] netlink: 4 bytes leftover after parsing attributes in process `syz.4.364'. [ 394.067533][ T7302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 395.174879][ T7511] netlink: 12 bytes leftover after parsing attributes in process `syz.4.365'. [ 395.174906][ T7511] netlink: 12 bytes leftover after parsing attributes in process `syz.4.365'. [ 396.433342][ T7253] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 396.433361][ T7253] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 396.433389][ T7253] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 396.482096][ T7277] team0: Port device team_slave_0 added [ 396.894771][ T7520] netlink: 'syz.3.368': attribute type 2 has an invalid length. [ 396.894825][ T7520] netlink: 'syz.3.368': attribute type 1 has an invalid length. [ 397.515029][ T7253] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 397.515048][ T7253] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 397.515077][ T7253] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 397.528109][ T7277] team0: Port device team_slave_1 added [ 397.662962][ T7302] team0: Port device team_slave_0 added [ 398.314603][ T7532] netlink: 4 bytes leftover after parsing attributes in process `syz.4.369'. [ 398.648351][ T7534] netlink: 4 bytes leftover after parsing attributes in process `syz.3.372'. [ 399.889305][ T7302] team0: Port device team_slave_1 added [ 400.211808][ T7542] rdma_op ffff88801d282a70 conn xmit_rdma 0000000000000000 [ 400.919721][ T7277] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 400.919740][ T7277] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 400.919760][ T7277] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 402.686018][ T7277] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 402.686031][ T7277] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 402.686052][ T7277] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 403.628958][ T7565] netlink: 4 bytes leftover after parsing attributes in process `syz.3.381'. [ 403.813964][ T7302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 403.813983][ T7302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 403.814010][ T7302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 405.951413][ T7253] hsr_slave_0: entered promiscuous mode [ 405.960815][ T7253] hsr_slave_1: entered promiscuous mode [ 405.963600][ T7253] debugfs: 'hsr0' already exists in 'hsr' [ 405.963628][ T7253] Cannot create hsr debugfs directory [ 405.983235][ T7302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 405.983252][ T7302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 405.983277][ T7302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 406.291750][ T3565] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.605539][ T7577] rdma_op ffff88805bc87a70 conn xmit_rdma 0000000000000000 [ 409.656603][ T7277] hsr_slave_0: entered promiscuous mode [ 409.677528][ T7277] hsr_slave_1: entered promiscuous mode [ 409.678963][ T7277] debugfs: 'hsr0' already exists in 'hsr' [ 409.678991][ T7277] Cannot create hsr debugfs directory [ 410.127875][ T3565] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.663369][ T7302] hsr_slave_0: entered promiscuous mode [ 410.705341][ T7302] hsr_slave_1: entered promiscuous mode [ 410.706377][ T7302] debugfs: 'hsr0' already exists in 'hsr' [ 410.706402][ T7302] Cannot create hsr debugfs directory [ 410.970405][ T5117] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 410.989331][ T5117] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 410.994667][ T5117] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 411.000484][ T5117] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 411.017721][ T5117] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 411.089049][ T3565] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.710651][ T7607] overlayfs: failed to resolve './bus': -2 [ 412.529567][ T3565] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.123899][ T5808] Bluetooth: hci2: command tx timeout [ 415.203892][ T5808] Bluetooth: hci2: command tx timeout [ 417.075835][ T3565] bridge_slave_1: left allmulticast mode [ 417.075868][ T3565] bridge_slave_1: left promiscuous mode [ 417.076159][ T3565] bridge0: port 2(bridge_slave_1) entered disabled state [ 417.149220][ T3565] bridge_slave_0: left allmulticast mode [ 417.149251][ T3565] bridge_slave_0: left promiscuous mode [ 417.149535][ T3565] bridge0: port 1(bridge_slave_0) entered disabled state [ 417.270501][ T3565] bridge_slave_1: left allmulticast mode [ 417.270534][ T3565] bridge_slave_1: left promiscuous mode [ 417.270807][ T3565] bridge0: port 2(bridge_slave_1) entered disabled state [ 417.284496][ T5808] Bluetooth: hci2: command tx timeout [ 417.388453][ T3565] bridge_slave_0: left allmulticast mode [ 417.388483][ T3565] bridge_slave_0: left promiscuous mode [ 417.388730][ T3565] bridge0: port 1(bridge_slave_0) entered disabled state [ 417.415535][ T5117] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 417.426059][ T5117] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 417.427790][ T5117] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 417.431419][ T5117] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 417.432303][ T5117] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 417.542824][ T3565] bridge_slave_1: left allmulticast mode [ 417.542857][ T3565] bridge_slave_1: left promiscuous mode [ 417.543175][ T3565] bridge0: port 2(bridge_slave_1) entered disabled state [ 417.585940][ T3565] bridge_slave_0: left allmulticast mode [ 417.585971][ T3565] bridge_slave_0: left promiscuous mode [ 417.586283][ T3565] bridge0: port 1(bridge_slave_0) entered disabled state [ 417.699255][ T3565] bridge_slave_1: left allmulticast mode [ 417.699286][ T3565] bridge_slave_1: left promiscuous mode [ 417.699548][ T3565] bridge0: port 2(bridge_slave_1) entered disabled state [ 417.789641][ T3565] bridge_slave_0: left allmulticast mode [ 417.789673][ T3565] bridge_slave_0: left promiscuous mode [ 417.790539][ T3565] bridge0: port 1(bridge_slave_0) entered disabled state [ 418.287702][ T7656] netlink: 'syz.3.400': attribute type 27 has an invalid length. [ 419.364081][ T5808] Bluetooth: hci2: command tx timeout [ 419.524253][ T5808] Bluetooth: hci0: command tx timeout [ 420.580298][ T3565] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 420.784827][ T3565] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 421.073371][ T5117] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 421.095645][ T5117] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 421.097153][ T5117] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 421.101159][ T5117] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 421.101986][ T5117] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 421.164379][ T3565] bond0 (unregistering): Released all slaves [ 421.355433][ T3565] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 421.434926][ T3565] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 421.497102][ T3565] bond0 (unregistering): Released all slaves [ 421.615745][ T5808] Bluetooth: hci0: command tx timeout [ 422.064897][ T3565] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 423.271247][ T5808] Bluetooth: hci3: command tx timeout [ 423.345050][ T3565] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 423.522596][ T3565] bond0 (unregistering): Released all slaves [ 423.683941][ T5808] Bluetooth: hci0: command tx timeout [ 425.284192][ T5808] Bluetooth: hci3: command tx timeout [ 425.763794][ T5808] Bluetooth: hci0: command tx timeout [ 427.363919][ T5808] Bluetooth: hci3: command tx timeout [ 427.524629][ T3565] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 427.584889][ T3565] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 427.607335][ T3565] bond0 (unregistering): Released all slaves [ 429.544623][ T5808] Bluetooth: hci3: command tx timeout [ 430.815662][ T7720] lo speed is unknown, defaulting to 1000 [ 430.815780][ T7720] lo speed is unknown, defaulting to 1000 [ 430.817323][ T7720] lo speed is unknown, defaulting to 1000 [ 430.834612][ T7720] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 430.866977][ T7720] lo speed is unknown, defaulting to 1000 [ 430.870361][ T7720] lo speed is unknown, defaulting to 1000 [ 430.873817][ T7720] lo speed is unknown, defaulting to 1000 [ 430.877337][ T7720] lo speed is unknown, defaulting to 1000 [ 430.880778][ T7720] lo speed is unknown, defaulting to 1000 [ 430.884495][ T7720] lo speed is unknown, defaulting to 1000 [ 430.888099][ T7720] lo speed is unknown, defaulting to 1000 [ 430.891443][ T7720] lo speed is unknown, defaulting to 1000 [ 430.894885][ T7720] lo speed is unknown, defaulting to 1000 [ 430.900874][ T7720] lo speed is unknown, defaulting to 1000 [ 430.904417][ T7720] lo speed is unknown, defaulting to 1000 [ 430.907736][ T7720] lo speed is unknown, defaulting to 1000 [ 431.511676][ T7732] overlay: Unknown parameter '/' [ 431.574456][ T7604] chnl_net:caif_netlink_parms(): no params data found [ 435.231322][ T7604] bridge0: port 1(bridge_slave_0) entered blocking state [ 435.231531][ T7604] bridge0: port 1(bridge_slave_0) entered disabled state [ 435.231761][ T7604] bridge_slave_0: entered allmulticast mode [ 435.244738][ T7604] bridge_slave_0: entered promiscuous mode [ 435.249305][ T3565] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 435.340166][ T3565] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 435.430473][ T3565] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 435.568846][ T3565] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 435.784089][ T3565] hsr_slave_0: left promiscuous mode [ 435.804083][ T3565] hsr_slave_1: left promiscuous mode [ 435.805369][ T3565] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 435.805400][ T3565] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 435.856219][ T3565] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 435.856248][ T3565] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 435.916379][ T7777] overlay: Unknown parameter '/' [ 435.973992][ T3565] veth1_macvtap: left promiscuous mode [ 435.974104][ T3565] veth0_macvtap: left promiscuous mode [ 435.974374][ T3565] veth1_vlan: left promiscuous mode [ 435.974558][ T3565] veth0_vlan: left promiscuous mode [ 437.115263][ T7789] netlink: 'syz.4.431': attribute type 27 has an invalid length. [ 439.224444][ T3565] team0 (unregistering): Port device team_slave_1 removed [ 439.277316][ T1577] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 440.164801][ T3565] team0 (unregistering): Port device team_slave_0 removed [ 440.211437][ T7820] overlay: Unknown parameter '/' [ 440.223879][ T1577] usb 5-1: Using ep0 maxpacket: 32 [ 440.228189][ T1577] usb 5-1: config 0 has an invalid interface number: 231 but max is 0 [ 440.228218][ T1577] usb 5-1: config 0 has no interface number 0 [ 440.228264][ T1577] usb 5-1: config 0 interface 231 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 440.228291][ T1577] usb 5-1: config 0 interface 231 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 440.230888][ T1577] usb 5-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 440.230918][ T1577] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.230932][ T1577] usb 5-1: Product: syz [ 440.230943][ T1577] usb 5-1: Manufacturer: syz [ 440.230953][ T1577] usb 5-1: SerialNumber: syz [ 440.375556][ T1577] usb 5-1: config 0 descriptor?? [ 440.439298][ T7814] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 440.469073][ T7814] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 442.510432][ T7830] overlay: Unknown parameter '/' [ 442.515404][ T3565] team0 (unregistering): Port device team_slave_1 removed [ 443.138404][ T3565] team0 (unregistering): Port device team_slave_0 removed [ 443.231302][ T7835] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 445.278838][ T3565] team0 (unregistering): Port device team_slave_1 removed [ 446.488539][ T3565] team0 (unregistering): Port device team_slave_0 removed [ 448.375429][ T7864] netlink: 12 bytes leftover after parsing attributes in process `syz.3.452'. [ 448.375457][ T7864] netlink: 12 bytes leftover after parsing attributes in process `syz.3.452'. [ 450.492599][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 450.492675][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 458.734340][ T7904] netlink: 12 bytes leftover after parsing attributes in process `syz.4.462'. [ 458.734368][ T7904] netlink: 12 bytes leftover after parsing attributes in process `syz.4.462'. [ 460.223134][ T7911] netlink: 28 bytes leftover after parsing attributes in process `syz.4.465'. [ 460.284352][ T3565] team0 (unregistering): Port device team_slave_1 removed [ 460.535795][ T3565] team0 (unregistering): Port device team_slave_0 removed [ 463.885183][ T7604] bridge0: port 2(bridge_slave_1) entered blocking state [ 463.885349][ T7604] bridge0: port 2(bridge_slave_1) entered disabled state [ 463.885652][ T7604] bridge_slave_1: entered allmulticast mode [ 463.887848][ T7604] bridge_slave_1: entered promiscuous mode [ 463.948788][ T1577] plusb 5-1:0.231 usb0: register 'plusb' at usb-dummy_hcd.4-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1, b2:e2:58:b6:c1:40 [ 463.995150][ T1577] usb 5-1: USB disconnect, device number 2 [ 464.036192][ T1577] plusb 5-1:0.231 usb0: unregister 'plusb' usb-dummy_hcd.4-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1 [ 464.617153][ T7604] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 464.645591][ T7604] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 464.775745][ T7669] chnl_net:caif_netlink_parms(): no params data found [ 464.793860][ T1577] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 465.104323][ T1577] usb 5-1: Using ep0 maxpacket: 32 [ 465.121639][ T1577] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 465.121725][ T1577] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 465.121768][ T1577] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 465.121846][ T1577] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.125449][ T1577] usb 5-1: config 0 descriptor?? [ 466.624392][ T1577] hub 5-1:0.0: USB hub found [ 466.852715][ T1577] hub 5-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 467.582758][ T1577] usbhid 5-1:0.0: can't add hid device: -71 [ 467.583378][ T1577] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 467.675183][ T1577] usb 5-1: USB disconnect, device number 3 [ 467.933951][ T7604] team0: Port device team_slave_0 added [ 468.291276][ T7649] chnl_net:caif_netlink_parms(): no params data found [ 468.318717][ T7604] team0: Port device team_slave_1 added [ 468.947162][ T7604] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 468.947180][ T7604] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 468.947209][ T7604] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 468.977200][ T7604] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 468.977220][ T7604] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 468.977253][ T7604] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 469.347400][ T7669] bridge0: port 1(bridge_slave_0) entered blocking state [ 469.349422][ T7669] bridge0: port 1(bridge_slave_0) entered disabled state [ 469.349696][ T7669] bridge_slave_0: entered allmulticast mode [ 469.365498][ T7669] bridge_slave_0: entered promiscuous mode [ 469.502978][ T7669] bridge0: port 2(bridge_slave_1) entered blocking state [ 469.503128][ T7669] bridge0: port 2(bridge_slave_1) entered disabled state [ 469.503360][ T7669] bridge_slave_1: entered allmulticast mode [ 469.527407][ T7669] bridge_slave_1: entered promiscuous mode [ 469.664560][ T8005] input: syz0 as /devices/virtual/input/input5 [ 470.028762][ T7649] bridge0: port 1(bridge_slave_0) entered blocking state [ 470.028903][ T7649] bridge0: port 1(bridge_slave_0) entered disabled state [ 470.029189][ T7649] bridge_slave_0: entered allmulticast mode [ 470.032131][ T7649] bridge_slave_0: entered promiscuous mode [ 470.200009][ T7604] hsr_slave_0: entered promiscuous mode [ 470.201488][ T7604] hsr_slave_1: entered promiscuous mode [ 470.203200][ T7649] bridge0: port 2(bridge_slave_1) entered blocking state [ 470.203336][ T7649] bridge0: port 2(bridge_slave_1) entered disabled state [ 470.203554][ T7649] bridge_slave_1: entered allmulticast mode [ 470.209402][ T7649] bridge_slave_1: entered promiscuous mode [ 470.236130][ T7669] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 470.405079][ T7669] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 470.804999][ T5117] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 470.807971][ T5117] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 470.809141][ T5117] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 470.811342][ T5117] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 470.812204][ T5117] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 470.881256][ T7649] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 471.232667][ T5867] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 471.414960][ T5867] usb 4-1: Using ep0 maxpacket: 8 [ 472.254845][ T5867] usb 4-1: too many configurations: 129, using maximum allowed: 8 [ 472.258485][ T7649] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 472.329452][ T5867] usb 4-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice=d9.40 [ 472.329484][ T5867] usb 4-1: New USB device strings: Mfr=1, Product=130, SerialNumber=3 [ 472.329505][ T5867] usb 4-1: Product: syz [ 472.329519][ T5867] usb 4-1: Manufacturer: syz [ 472.329534][ T5867] usb 4-1: SerialNumber: syz [ 472.380374][ T5867] usb 4-1: config 0 descriptor?? [ 472.458931][ T7669] team0: Port device team_slave_0 added [ 472.918873][ T5867] usb 4-1: USB disconnect, device number 4 [ 472.957013][ T7669] team0: Port device team_slave_1 added [ 472.964506][ T5808] Bluetooth: hci5: command tx timeout [ 472.994522][ T7649] team0: Port device team_slave_0 added [ 473.024567][ T7727] udevd[7727]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 473.216100][ T7649] team0: Port device team_slave_1 added [ 473.530776][ T7669] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 473.530792][ T7669] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 473.530814][ T7669] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 473.635454][ T7669] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 473.635470][ T7669] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 473.635493][ T7669] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 473.637161][ T7649] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 473.637178][ T7649] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 473.637206][ T7649] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 473.658490][ T8025] lo speed is unknown, defaulting to 1000 [ 473.765663][ T7649] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 473.765681][ T7649] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 473.765710][ T7649] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 474.989544][ T7669] hsr_slave_0: entered promiscuous mode [ 474.991278][ T7669] hsr_slave_1: entered promiscuous mode [ 474.992325][ T7669] debugfs: 'hsr0' already exists in 'hsr' [ 474.992352][ T7669] Cannot create hsr debugfs directory [ 475.140610][ T5808] Bluetooth: hci5: command tx timeout [ 475.273120][ T8058] netlink: 8 bytes leftover after parsing attributes in process `syz.4.510'. [ 475.438676][ T7649] hsr_slave_0: entered promiscuous mode [ 475.440209][ T7649] hsr_slave_1: entered promiscuous mode [ 475.441277][ T7649] debugfs: 'hsr0' already exists in 'hsr' [ 475.441301][ T7649] Cannot create hsr debugfs directory [ 476.591557][ T5117] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 476.607634][ T5117] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 476.614669][ T5117] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 476.619150][ T5117] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 476.621498][ T5117] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 476.701087][ T8096] netlink: 28 bytes leftover after parsing attributes in process `syz.3.517'. [ 476.701112][ T8096] netlink: 'syz.3.517': attribute type 1 has an invalid length. [ 476.701126][ T8096] netlink: 4 bytes leftover after parsing attributes in process `syz.3.517'. [ 477.354768][ T5117] Bluetooth: hci5: command tx timeout [ 477.448205][ T8025] chnl_net:caif_netlink_parms(): no params data found [ 477.946314][ T8091] lo speed is unknown, defaulting to 1000 [ 478.726742][ T8025] bridge0: port 1(bridge_slave_0) entered blocking state [ 478.726920][ T8025] bridge0: port 1(bridge_slave_0) entered disabled state [ 478.727150][ T8025] bridge_slave_0: entered allmulticast mode [ 478.730056][ T8025] bridge_slave_0: entered promiscuous mode [ 478.756951][ T5117] Bluetooth: hci0: command tx timeout [ 478.788774][ T8025] bridge0: port 2(bridge_slave_1) entered blocking state [ 478.788971][ T8025] bridge0: port 2(bridge_slave_1) entered disabled state [ 478.789242][ T8025] bridge_slave_1: entered allmulticast mode [ 478.792967][ T8025] bridge_slave_1: entered promiscuous mode [ 479.542545][ T5117] Bluetooth: hci5: command tx timeout [ 480.788957][ T8025] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 480.807286][ T5117] Bluetooth: hci0: command tx timeout [ 481.048817][ T8025] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 481.171956][ T8163] Bluetooth: MGMT ver 1.23 [ 481.399730][ T8025] team0: Port device team_slave_0 added [ 481.490797][ T8025] team0: Port device team_slave_1 added [ 481.593977][ T5788] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 481.600264][ T5808] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 481.607816][ T5808] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 481.610398][ T5808] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 481.611940][ T5808] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 481.612855][ T5808] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 481.749102][ T5788] usb 5-1: config 0 has an invalid interface number: 125 but max is 0 [ 481.749132][ T5788] usb 5-1: config 0 has no interface number 0 [ 481.749202][ T5788] usb 5-1: New USB device found, idVendor=00a7, idProduct=07bc, bcdDevice=de.99 [ 481.749226][ T5788] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.771994][ T5788] usb 5-1: config 0 descriptor?? [ 481.841387][ T5788] usb-storage 5-1:0.125: USB Mass Storage device detected [ 481.991248][ T8167] netlink: 12 bytes leftover after parsing attributes in process `syz.4.542'. [ 482.136950][ T8025] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 482.136967][ T8025] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 482.136996][ T8025] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 482.259095][ T5788] usb 5-1: USB disconnect, device number 4 [ 482.280951][ T3565] bridge_slave_1: left allmulticast mode [ 482.280984][ T3565] bridge_slave_1: left promiscuous mode [ 482.281289][ T3565] bridge0: port 2(bridge_slave_1) entered disabled state [ 482.365770][ T3565] bridge_slave_0: left allmulticast mode [ 482.365801][ T3565] bridge_slave_0: left promiscuous mode [ 482.369682][ T3565] bridge0: port 1(bridge_slave_0) entered disabled state [ 482.459056][ T3565] bridge_slave_1: left allmulticast mode [ 482.459088][ T3565] bridge_slave_1: left promiscuous mode [ 482.459393][ T3565] bridge0: port 2(bridge_slave_1) entered disabled state [ 482.545100][ T3565] bridge_slave_0: left allmulticast mode [ 482.545122][ T3565] bridge_slave_0: left promiscuous mode [ 482.545332][ T3565] bridge0: port 1(bridge_slave_0) entered disabled state [ 482.618307][ T3565] bridge_slave_1: left allmulticast mode [ 482.618340][ T3565] bridge_slave_1: left promiscuous mode [ 482.618536][ T3565] bridge0: port 2(bridge_slave_1) entered disabled state [ 482.675567][ T3565] bridge_slave_0: left allmulticast mode [ 482.675591][ T3565] bridge_slave_0: left promiscuous mode [ 482.675785][ T3565] bridge0: port 1(bridge_slave_0) entered disabled state [ 482.751508][ T3565] bridge_slave_1: left allmulticast mode [ 482.751539][ T3565] bridge_slave_1: left promiscuous mode [ 482.751799][ T3565] bridge0: port 2(bridge_slave_1) entered disabled state [ 482.827079][ T3565] bridge_slave_0: left allmulticast mode [ 482.827112][ T3565] bridge_slave_0: left promiscuous mode [ 482.827371][ T3565] bridge0: port 1(bridge_slave_0) entered disabled state [ 482.883975][ T5117] Bluetooth: hci0: command tx timeout [ 482.926550][ T8207] trusted_key: syz.4.552 sent an empty control message without MSG_MORE. [ 484.014695][ T5117] Bluetooth: hci2: command tx timeout [ 484.364758][ T3565] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 484.658418][ T3565] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 484.726057][ T3565] bond0 (unregistering): Released all slaves [ 485.288251][ T5117] Bluetooth: hci0: command tx timeout [ 485.904519][ T3565] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 485.984724][ T3565] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 486.046416][ T3565] bond0 (unregistering): Released all slaves [ 486.083844][ T5117] Bluetooth: hci2: command tx timeout [ 486.224652][ T3565] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 486.314542][ T3565] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 486.376693][ T3565] bond0 (unregistering): Released all slaves [ 486.544926][ T3565] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 486.624734][ T3565] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 486.686399][ T3565] bond0 (unregistering): Released all slaves [ 486.708224][ T8025] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 486.708249][ T8025] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 486.708279][ T8025] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 487.544521][ T5955] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 488.492781][ T8174] lo speed is unknown, defaulting to 1000 [ 488.508506][ T5117] Bluetooth: hci2: command tx timeout [ 488.696366][ T8233] netlink: 12 bytes leftover after parsing attributes in process `syz.3.558'. [ 488.803950][ T5955] usb 5-1: Using ep0 maxpacket: 32 [ 488.808544][ T5955] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 488.808579][ T5955] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 488.808618][ T5955] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 488.808640][ T5955] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 488.818096][ T5955] usb 5-1: config 0 descriptor?? [ 488.940429][ T8091] chnl_net:caif_netlink_parms(): no params data found [ 489.886404][ T5955] savu 0003:1E7D:2D5A.0001: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0 [ 490.084013][ T5955] usb 5-1: USB disconnect, device number 5 [ 490.139385][ T8240] fido_id[8240]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 490.247765][ T8025] hsr_slave_0: entered promiscuous mode [ 490.249522][ T8025] hsr_slave_1: entered promiscuous mode [ 490.250602][ T8025] debugfs: 'hsr0' already exists in 'hsr' [ 490.250626][ T8025] Cannot create hsr debugfs directory [ 490.434665][ T5887] lo speed is unknown, defaulting to 1000 [ 490.563837][ T5117] Bluetooth: hci2: command tx timeout [ 491.277330][ T3565] hsr_slave_0: left promiscuous mode [ 491.544206][ T3565] hsr_slave_1: left promiscuous mode [ 491.545228][ T3565] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 491.598876][ T3565] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 493.085190][ T3565] hsr_slave_0: left promiscuous mode [ 493.413188][ T3565] hsr_slave_1: left promiscuous mode [ 493.430808][ T3565] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 494.122001][ T3565] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 494.213860][ T3565] hsr_slave_0: left promiscuous mode [ 494.253996][ T3565] hsr_slave_1: left promiscuous mode [ 494.254833][ T3565] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 494.296535][ T3565] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 494.418457][ T3565] hsr_slave_0: left promiscuous mode [ 494.456745][ T3565] hsr_slave_1: left promiscuous mode [ 494.457750][ T3565] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 494.693159][ T3565] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 496.648853][ T3565] team0 (unregistering): Port device team_slave_1 removed [ 497.817274][ T8315] binfmt_misc: register: failed to install interpreter file ./file1 [ 497.854697][ T3565] team0 (unregistering): Port device team_slave_0 removed [ 498.954610][ T3565] team0 (unregistering): Port device team_slave_1 removed [ 499.104712][ T3565] team0 (unregistering): Port device team_slave_0 removed [ 500.065909][ T3565] team0 (unregistering): Port device team_slave_1 removed [ 500.184750][ T3565] team0 (unregistering): Port device team_slave_0 removed [ 501.055743][ T3565] team0 (unregistering): Port device team_slave_1 removed [ 501.194625][ T3565] team0 (unregistering): Port device team_slave_0 removed [ 502.114327][ T8091] bridge0: port 1(bridge_slave_0) entered blocking state [ 502.114549][ T8091] bridge0: port 1(bridge_slave_0) entered disabled state [ 502.114787][ T8091] bridge_slave_0: entered allmulticast mode [ 502.117758][ T8091] bridge_slave_0: entered promiscuous mode [ 502.190550][ T8320] ------------[ cut here ]------------ [ 502.190569][ T8320] WARNING: CPU: 0 PID: 8320 at ./include/linux/seqlock.h:221 cgroup_freeze+0x80a/0xf90 [ 502.190600][ T8320] Modules linked in: [ 502.190623][ T8320] CPU: 0 UID: 0 PID: 8320 Comm: syz.4.587 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 502.190641][ T8320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 502.190654][ T8320] RIP: 0010:cgroup_freeze+0x80a/0xf90 [ 502.190675][ T8320] Code: 90 e9 9e fb ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c e7 f9 ff ff 4c 89 f7 e8 c1 1f 68 00 e9 da f9 ff ff e8 37 68 06 00 90 <0f> 0b 90 e9 10 fc ff ff 44 89 f9 80 e1 07 38 c1 48 8b 0c 24 0f 8c [ 502.190688][ T8320] RSP: 0018:ffffc900046e78e0 EFLAGS: 00010287 [ 502.190702][ T8320] RAX: ffffffff81b8a4d9 RBX: 0000000000000000 RCX: 0000000000080000 [ 502.190713][ T8320] RDX: ffffc9000e0fb000 RSI: 00000000000000a8 RDI: 00000000000000a9 [ 502.190723][ T8320] RBP: ffffc900046e7a70 R08: 0000000000000000 R09: 0000000000000000 [ 502.190733][ T8320] R10: dffffc0000000000 R11: fffffbfff1deed6f R12: dffffc0000000000 [ 502.190745][ T8320] R13: 0000000000000000 R14: 0000000000000001 R15: ffff8880763f0791 [ 502.190755][ T8320] FS: 00007f96e902e6c0(0000) GS:ffff888126bc2000(0000) knlGS:0000000000000000 [ 502.190769][ T8320] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 502.190779][ T8320] CR2: 000000110c251458 CR3: 0000000052a3a000 CR4: 00000000003526f0 [ 502.190793][ T8320] Call Trace: [ 502.190803][ T8320] [ 502.190813][ T8320] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 502.190841][ T8320] ? __pfx_cgroup_freeze+0x10/0x10 [ 502.190854][ T8320] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 502.190876][ T8320] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 502.190897][ T8320] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 502.190921][ T8320] ? mutex_lock_nested+0x154/0x1d0 [ 502.190936][ T8320] ? cgroup_kn_lock_live+0x13c/0x230 [ 502.190961][ T8320] cgroup_freeze_write+0x156/0x1c0 [ 502.190983][ T8320] ? __pfx_cgroup_freeze_write+0x10/0x10 [ 502.191003][ T8320] ? kernfs_root+0x1c/0x230 [ 502.191024][ T8320] ? kernfs_root+0x1c/0x230 [ 502.191046][ T8320] ? kernfs_root+0x1ea/0x230 [ 502.191067][ T8320] ? __pfx_cgroup_freeze_write+0x10/0x10 [ 502.191088][ T8320] cgroup_file_write+0x39e/0x740 [ 502.191109][ T8320] ? __pfx_cgroup_file_write+0x10/0x10 [ 502.191136][ T8320] ? __pfx_cgroup_file_write+0x10/0x10 [ 502.191151][ T8320] kernfs_fop_write_iter+0x3b0/0x540 [ 502.191174][ T8320] vfs_write+0x5d5/0xb40 [ 502.191193][ T8320] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 502.191211][ T8320] ? __pfx_vfs_write+0x10/0x10 [ 502.191223][ T8320] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 502.191247][ T8320] ? mutex_lock_nested+0x154/0x1d0 [ 502.191262][ T8320] ? fdget_pos+0x253/0x320 [ 502.191287][ T8320] ksys_write+0x14b/0x260 [ 502.191304][ T8320] ? __pfx_ksys_write+0x10/0x10 [ 502.191322][ T8320] ? do_syscall_64+0xbe/0xfa0 [ 502.191346][ T8320] do_syscall_64+0xfa/0xfa0 [ 502.191366][ T8320] ? lockdep_hardirqs_on+0x9c/0x150 [ 502.191387][ T8320] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 502.191403][ T8320] ? clear_bhb_loop+0x60/0xb0 [ 502.191424][ T8320] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 502.191439][ T8320] RIP: 0033:0x7f96eadcefc9 [ 502.191457][ T8320] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 502.191470][ T8320] RSP: 002b:00007f96e902e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 502.191485][ T8320] RAX: ffffffffffffffda RBX: 00007f96eb025fa0 RCX: 00007f96eadcefc9 [ 502.191496][ T8320] RDX: 0000000000000012 RSI: 0000200000000200 RDI: 0000000000000007 [ 502.191506][ T8320] RBP: 00007f96eae51f91 R08: 0000000000000000 R09: 0000000000000000 [ 502.191516][ T8320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 502.191527][ T8320] R13: 00007f96eb026038 R14: 00007f96eb025fa0 R15: 00007ffc1b7bd528 [ 502.191565][ T8320] [ 502.191587][ T8320] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 502.191603][ T8320] CPU: 0 UID: 0 PID: 8320 Comm: syz.4.587 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 502.191626][ T8320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 502.191637][ T8320] Call Trace: [ 502.191645][ T8320] [ 502.191653][ T8320] dump_stack_lvl+0x99/0x250 [ 502.191692][ T8320] ? __asan_memcpy+0x40/0x70 [ 502.191727][ T8320] ? __pfx_dump_stack_lvl+0x10/0x10 [ 502.191748][ T8320] ? __pfx__printk+0x10/0x10 [ 502.191779][ T8320] vpanic+0x237/0x6d0 [ 502.191795][ T8320] ? __pfx_vpanic+0x10/0x10 [ 502.191819][ T8320] panic+0xb9/0xc0 [ 502.191834][ T8320] ? __pfx_panic+0x10/0x10 [ 502.191862][ T8320] __warn+0x31b/0x4b0 [ 502.191876][ T8320] ? cgroup_freeze+0x80a/0xf90 [ 502.191893][ T8320] ? cgroup_freeze+0x80a/0xf90 [ 502.191907][ T8320] report_bug+0x2be/0x4f0 [ 502.191926][ T8320] ? cgroup_freeze+0x80a/0xf90 [ 502.191941][ T8320] ? cgroup_freeze+0x80a/0xf90 [ 502.191955][ T8320] ? cgroup_freeze+0x80c/0xf90 [ 502.191970][ T8320] handle_bug+0x84/0x160 [ 502.191995][ T8320] exc_invalid_op+0x1a/0x50 [ 502.192018][ T8320] asm_exc_invalid_op+0x1a/0x20 [ 502.192033][ T8320] RIP: 0010:cgroup_freeze+0x80a/0xf90 [ 502.192048][ T8320] Code: 90 e9 9e fb ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c e7 f9 ff ff 4c 89 f7 e8 c1 1f 68 00 e9 da f9 ff ff e8 37 68 06 00 90 <0f> 0b 90 e9 10 fc ff ff 44 89 f9 80 e1 07 38 c1 48 8b 0c 24 0f 8c [ 502.192060][ T8320] RSP: 0018:ffffc900046e78e0 EFLAGS: 00010287 [ 502.192073][ T8320] RAX: ffffffff81b8a4d9 RBX: 0000000000000000 RCX: 0000000000080000 [ 502.192084][ T8320] RDX: ffffc9000e0fb000 RSI: 00000000000000a8 RDI: 00000000000000a9 [ 502.192094][ T8320] RBP: ffffc900046e7a70 R08: 0000000000000000 R09: 0000000000000000 [ 502.192104][ T8320] R10: dffffc0000000000 R11: fffffbfff1deed6f R12: dffffc0000000000 [ 502.192116][ T8320] R13: 0000000000000000 R14: 0000000000000001 R15: ffff8880763f0791 [ 502.192132][ T8320] ? cgroup_freeze+0x809/0xf90 [ 502.192156][ T8320] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 502.192181][ T8320] ? __pfx_cgroup_freeze+0x10/0x10 [ 502.192194][ T8320] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 502.192215][ T8320] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 502.192236][ T8320] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 502.192259][ T8320] ? mutex_lock_nested+0x154/0x1d0 [ 502.192274][ T8320] ? cgroup_kn_lock_live+0x13c/0x230 [ 502.192299][ T8320] cgroup_freeze_write+0x156/0x1c0 [ 502.192321][ T8320] ? __pfx_cgroup_freeze_write+0x10/0x10 [ 502.192339][ T8320] ? kernfs_root+0x1c/0x230 [ 502.192360][ T8320] ? kernfs_root+0x1c/0x230 [ 502.192383][ T8320] ? kernfs_root+0x1ea/0x230 [ 502.192404][ T8320] ? __pfx_cgroup_freeze_write+0x10/0x10 [ 502.192426][ T8320] cgroup_file_write+0x39e/0x740 [ 502.192448][ T8320] ? __pfx_cgroup_file_write+0x10/0x10 [ 502.192474][ T8320] ? __pfx_cgroup_file_write+0x10/0x10 [ 502.192489][ T8320] kernfs_fop_write_iter+0x3b0/0x540 [ 502.192512][ T8320] vfs_write+0x5d5/0xb40 [ 502.192531][ T8320] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 502.192549][ T8320] ? __pfx_vfs_write+0x10/0x10 [ 502.192561][ T8320] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 502.192585][ T8320] ? mutex_lock_nested+0x154/0x1d0 [ 502.192600][ T8320] ? fdget_pos+0x253/0x320 [ 502.192624][ T8320] ksys_write+0x14b/0x260 [ 502.192641][ T8320] ? __pfx_ksys_write+0x10/0x10 [ 502.192666][ T8320] ? do_syscall_64+0xbe/0xfa0 [ 502.192690][ T8320] do_syscall_64+0xfa/0xfa0 [ 502.192710][ T8320] ? lockdep_hardirqs_on+0x9c/0x150 [ 502.192731][ T8320] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 502.192746][ T8320] ? clear_bhb_loop+0x60/0xb0 [ 502.192766][ T8320] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 502.192781][ T8320] RIP: 0033:0x7f96eadcefc9 [ 502.192795][ T8320] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 502.192807][ T8320] RSP: 002b:00007f96e902e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 502.192822][ T8320] RAX: ffffffffffffffda RBX: 00007f96eb025fa0 RCX: 00007f96eadcefc9 [ 502.192833][ T8320] RDX: 0000000000000012 RSI: 0000200000000200 RDI: 0000000000000007 [ 502.192843][ T8320] RBP: 00007f96eae51f91 R08: 0000000000000000 R09: 0000000000000000 [ 502.192852][ T8320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 502.192861][ T8320] R13: 00007f96eb026038 R14: 00007f96eb025fa0 R15: 00007ffc1b7bd528 [ 502.192887][ T8320] [ 502.193206][ T8320] Kernel Offset: disabled