last executing test programs: 23m0.887744204s ago: executing program 32 (id=1187): socket$inet6_udplite(0xa, 0x2, 0x88) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20) 17m0.333646353s ago: executing program 33 (id=1594): r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0xfffffffe, @local, 0x1}, 0x1c) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) 16m32.371583243s ago: executing program 3 (id=1657): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) unshare(0x2040400) getpid() listen(0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc)=0x4, 0xb, 0x4, 0x0, &(0x7f0000048000)=0x2, 0x0) futex(&(0x7f000000cffc), 0x80, 0x2, 0x0, &(0x7f0000048000)=0x2000, 0x5000003) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB], 0x50) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) 16m31.837602717s ago: executing program 3 (id=1658): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000400)="4ab0", 0x2}], 0x1, 0x0, 0x0, 0x4}}], 0x1, 0x44084) pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f00000002c0)=0x8001, 0x4) write$binfmt_elf64(r1, 0x0, 0x78) splice(r0, 0x0, r2, 0x0, 0x39000, 0x0) 16m31.3474661s ago: executing program 3 (id=1660): syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="6f626a5f757365723d2d5d2c737562845f757365723d756466002c657569643e", @ANYRESDEC=0xee00, @ANYBLOB=',\x00'], 0x1, 0x59d, &(0x7f0000000680)="$eJzs3U9sHFcdB/Df86ydtZOm26QkLRSxEkhEKY1sJ7RNUgShqQWoAkRq/oo/JnZSt443sl3UVAj1wA0uXLlwKhckJARXDlRC4lhxasUFIUBCXCwuPQbNeGZ3duvWG2J7cfr5RNGbmf3t5M0cIn3n7bwXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDEZ5+5ND2TRt0LAAAAYC998cpXps/K/wAAAHBPe874PwAAAAAAAAAcdCmyeDRSvPbjzXSk2N/SfHZ59aWX5y/Pbf+1yRQpxiIr6vO/zZnZs+c++fgTT1bte39/tz0cX7ry3KX2050bN9eW1teXFtvzq8tXO4tLQ5/hbr8/6HRxA9o3Xnxp8dq19fbsmbN9H7/c+uehwydaF8/PffsjVe385bm5K7Waxvj//K+/g194AAAAvL9NRBb/jhR/v/TrdF9EjMXdZ+Ednh3stclo5fm7uIj5y3PFhawsL6xu5B+msbKq1Z+JJ6qMvA9Z/K60Io7lfZ2Q6AEAABjeeGTxnUjxsz9upqMRkVU5+NFiYsCdT9Dah05uoxERxyPiVByAzA4AAAAjdiiyuBIpfr/SivvLXF3k/89EXBx15wAAAIBd0YgsbkWKTtpMreL3ABFxev7yXPvZr7Y/v3qtU6tNY+WI+kF/P2A/+W0CAAAA/weakcXRYsR/Mz0w6s4AAAAAe2IyspiMFL/9ww+KeeWimJf+/osXDp/5bn2GuZM7nCevPRMRHxrynfzxcq7BNJb/2f3rAgAAAHqaKYt/RIq332oW+6eqdwD+evv27VF3DgAAANgdKYtvRIrTT26mNLAufVZb37/roL/7v7f9n2w+3bl5a235+vMb234+1bz0/fWNtYWr23+8tXZhVj+y0zqGg1rlGo4AAABQM5Wy+FekaP9ps5sbyzUA7tva66XR137YexZwaqCt1J8fDLM99Cr2dzCPXt6nlLKYiBQfe/2hrfcMYko2BgAA4H0rz/8fjxSPnXwjVUm/zP+Nrb1a/n+ql5+bqb/tKrL90SLbd+cSmJqbfbfje5H/8z7l+f8n+VW88FBxBVX+zwZq87o3IsVTnUfKurGJvK5RXc7WGa8tryxN57XPRIrfrVS1UdQeKmuP92pn8trX8/Mu9Nc2y9oHe7Wzee3tSPH82va1H+jVns1r1yPFr37Rrmqn8tojZe2JXu2Zq52VxWFvLwAAAPe2PP8fjhRf+/rnUpV53zX/18b/Xx1ou96R+d97e7fyf6t27NUy1/+0zP+NHfL/lyPFww88Ul13kb2rxwpbayL08v9/IsXaN/trJ8raY73amWEvCwAAAPZDnv/fihTnf/m37lB6mW3L3e3z/wcb/W3XiPJ/fe3CvE/rt155cWFlZWnNhg0bNrobd/CfIwAA3GPy/P+FSDGTxlI1jl3m//In5b38//aPevn/wkDbNaL8f6x27EI5Z+F4I6K5cePm+ImI5vqtVx5bvrFwfen60uq58+emZ2eemJ4Zn6jG9ntbQ986AAAAODDy/L8RKX7zlz9332MfZvx/aqDtGlH+P16/pqiP/w99KwAAAOCelef/xyNF5803u/PN9ef/XkLP8381/9+pj/a33acEI8r/D9aOtcp+Td7hvQAAAAAAAAAAAAAAAAAAAIBRmUpZfCpSfOvnn0jlhP9Dzf+3ONB2jej9/xO1Y4uxP+v/DX2TAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4IAYiyxeiBQfPrmZPp0f+F7EkXoLAAAAHHj/DQAA//+enUSk") r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, 0x0}, 0x94) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000300)=0x80000009, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) bind$bt_l2cap(r0, 0x0, 0x0) 16m30.725519755s ago: executing program 3 (id=1661): syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) r0 = socket$netlink(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0xc144) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000200)) ptrace(0x8, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x4, 0x1000085}, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) read$msr(r3, &(0x7f0000019680)=""/102384, 0x18ff0) mkdirat(0xffffffffffffff9c, 0x0, 0x48) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000002300)=@raw={'raw\x00', 0xc01, 0x3, 0x1268, 0x1100, 0x5002004a, 0x0, 0x0, 0x0, 0x2200, 0x3c8, 0x3c8, 0x2200, 0x3c8, 0x3, 0x0, {[{{@uncond, 0x60, 0x10a0, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x1, 0x0, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x2, 0x1, 0x7], 0x6, 0x2}, {0x2, [0x0, 0x6, 0x4, 0x9, 0x0, 0x89ce99baffcf6900], 0x1, 0x1}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@loopback, [0xffffff00, 0xff000000, 0xff, 0xff0000ff], 0x4e22, 0x4c20, 0x4e24, 0x4e23, 0xc9, 0x0, 0x3b, 0x83, 0x25}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x12c8) ioctl$USBDEVFS_IOCTL(r2, 0x80045505, &(0x7f0000000040)) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), r0) semget$private(0x0, 0xc, 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bridge0\x00'}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="18000000", @ANYRES16=r4, @ANYBLOB="89ef7bd3185e0d0380000000000000000000"], 0x18}, 0x1, 0x0, 0x0, 0x804}, 0x0) fanotify_init(0x40, 0x40000) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x0, 0x0) 16m29.466913243s ago: executing program 3 (id=1663): syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) 16m27.946231724s ago: executing program 3 (id=1664): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0x18) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, 0x0) unshare(0x62040200) r3 = fsopen(&(0x7f0000000b00)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x0, 0x0) lseek(0xffffffffffffffff, 0x3, 0x1) getdents64(0xffffffffffffffff, 0x0, 0x22) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x8004, &(0x7f0000000080)={[{@discard}, {@bh}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x7b9, &(0x7f00000007c0)="$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") rt_sigprocmask(0x1, &(0x7f0000000000)={[0x9]}, &(0x7f0000000040), 0x8) 16m14.587341115s ago: executing program 34 (id=1662): syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="6f626a5f757365723d2d5d2c737562845f757365723d756466002c657569643e", @ANYRESDEC=0xee00, @ANYBLOB=',\x00'], 0x1, 0x59d, &(0x7f0000000680)="$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") r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, 0x0}, 0x94) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) syz_emit_ethernet(0x9a, &(0x7f0000000680)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "3000bb", 0x64, 0x2b, 0x0, @private2, @local, {[], {0x20, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "82f63de64f6ce2ee11028289aefdb3449391a823213e6336516748a7949bb108", "402fa83b1d661c18462075368a186092", {"9ddeb8f71aa23d391b8fa99e9816af2d", "040876a663a86d97f46b9665cc18492b"}}}}}}}}, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000300)=0x80000009, 0x4) recvmmsg(r2, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) bind$bt_l2cap(r0, 0x0, 0x0) 16m12.682946828s ago: executing program 35 (id=1664): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0x18) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, 0x0) unshare(0x62040200) r3 = fsopen(&(0x7f0000000b00)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x0, 0x0) lseek(0xffffffffffffffff, 0x3, 0x1) getdents64(0xffffffffffffffff, 0x0, 0x22) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x8004, &(0x7f0000000080)={[{@discard}, {@bh}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x7b9, &(0x7f00000007c0)="$eJzs3d9rHNUeAPDvbJLmR3tvcuFy7+1b4EJvoHRzU2Or4EPFBxEsFPTZNmy2oWaTLdlNaULAFhF8EVR8EPSlz/6ob776A3zS/8IHaamaFis+SGR2Z5M02c2vJtloPh+YzDkzsznnO+fMzNmdYTeAQ2sw/ZOLOB4RbycR/dnyJCK6aqnOiHP17R4uLvRERCGJpaWXfkpq2zxYXCjEqtekjmaZ/0TEV29EnMytL7cyNz85VioVZ7L8cHXq6nBlbv7UlamxieJEcfrMyOjo6bNPnj2ze7H+8t38sbvvPP+/T8/99vq/b7/1dRLn4li2bnUcu2UwBrN90pXuwkc8t9uFtVnS7gqwI+mh2VE/yuN49EdHLdVC737WDADYK69FxBIAcMgkrv8AcMg0Pgd4sLhQaEzt/URif917NiJ66vE/zKb6ms7snl1P7T5o34PkkTsjSUQM7EL5gxHx4eevnOjI8mk93EsD9sONmxFxaWBw/fk/WffMwnb9f6OVS9212eCaxYft+gPt9EU6/nmq2fgvtzz+iSbjn+76sfuvxy1/8+M/d+dxy9hIOv57pv5s25rx3/JDawMdWe5vtTFfV3L5SqmYntv+HhFD0dWd5kdqmzYfuQ3d//1+q/Kz8d/H6fTzu69+lJafzle2yN3p7H70NeNj1c5vHjfwzL2b0Zcl18SfLLd/0mL8e2GLZbzw9JsftFqXxp/G25jWx7+3lm5FnGja/ittmWz4fOJwrTsMNzpFE599/35fq/JXt386peWn892PtLl7N6PWAZJkZR/U1yzHP5Csfl6zsv0yvr3V/2WrdZvH37T/jx1JXq6lj2TLro9VqzMjEUeSF9cvP73y2ka+sX0a/9B/mx//9WKb9//0PeGlLcbfeffHT3Ye/95K4x/fuP+vaf+ebPHKks0Stx9OdrQqf2vtP1pLDWVL0vbfLK6t1GtnvRkAAAAAAAAAAAAAAAAAAAAAAAAAti8XEcciyeWX07lcPl//De9/Rl+uVK5UT14uz06PR+23sgeiK9f4qsv+Vd+HOpJ9H34jf3pN/omI+EdEvNfdW8vnC+XSeLuDBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDM0Ra//5/6obvdtQMA9kxPuysAAOw7138AOHy2d/3v3bN6AAD7x/t/ADh8tnz9v7S39QAA9o/3/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOyxC+fPp9PSr4sLhTQ/fm1udrJ87dR4sTKZn5ot5Avlmav5iXJ5olTMF8pTLf/RjfqsVC5fHY3p2evD1WKlOlyZm784VZ6drl68MjU2UbxY7Nq3yAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABg6ypz85NjpVJx5i+RuLES2C7/5962xtV3MHbvqkRnHIhqHOhEdxyIauwwsfos0duGMxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAn8MfAQAA//94WBdi") rt_sigprocmask(0x1, &(0x7f0000000000)={[0x9]}, &(0x7f0000000040), 0x8) 15m8.211189747s ago: executing program 5 (id=1612): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/vmallocinfo\x00', 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) memfd_create(&(0x7f0000000080)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb90a\xa9\xb2\x04\x1d\xa1\xce\x8b\x19\xcc_\xe3\x00\x00\x00\x00\x00\x00\x00\x00E}\xd6`\x84\xb9\x82\xa0\xbf\xa4\xaf\xe9\xbd\n\x92,x\xc8<\xa8WfCW\xee2\xd3\x87\xafT\x81V\xc4\xcbm\x12\xf5\xb4\v\xa14\xf4\x9d\x93Li\xbd\x7fU)a\xee[\xea\xb1\xe7/\x8b\xcb<\xb8\x1a\xdb/\x9c\xdbK\xfb', 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) fanotify_mark(0xffffffffffffffff, 0x1, 0x48000021, 0xffffffffffffffff, 0x0) 15m6.993445645s ago: executing program 5 (id=1757): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000000000000080001000200000004000b"], 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000006800e97800000000000000000a000000000000000400040030db"], 0x1c}}, 0x0) 14m51.50943601s ago: executing program 36 (id=1757): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000000000000080001000200000004000b"], 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000006800e97800000000000000000a000000000000000400040030db"], 0x1c}}, 0x0) 14m13.883877267s ago: executing program 6 (id=1862): syz_init_net_socket$bt_l2cap(0x1f, 0xe, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0xfffffffe, @local, 0x1}, 0x1c) rt_sigqueueinfo(r0, 0x22, &(0x7f0000000300)={0x15, 0x8, 0x5}) r4 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_pts(r4, 0x149e01) syz_open_dev$MSR(0x0, 0x9, 0x0) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000fc0)=@mangle={'mangle\x00', 0x64, 0x6, 0x540, 0x0, 0xd0, 0x1b8, 0x1b8, 0x0, 0x470, 0x470, 0x388, 0x470, 0x470, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x8000, 0x3}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [0x0, 0xff], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@unspec=@connmark={{0x30}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a0) 14m12.685959455s ago: executing program 6 (id=1865): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000000c0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="1808000000000000000000000200", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a20fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x94) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r5, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port1\x00', 0x62, 0x104fe, 0x0, 0x8000008, 0x3, 0x0, 0x3, 0x0, 0x5}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r5, 0x40505330, &(0x7f0000000040)={0x800080, 0x859, 0x7, 0xb, 0x7, 0x4}) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) readv(r6, &(0x7f00000038c0)=[{&(0x7f0000004980)=""/4096, 0x1000}], 0x1) setns(r4, 0x24020000) syz_clone(0x16040000, 0x0, 0x0, 0x0, 0x0, 0x0) setns(0xffffffffffffffff, 0x10000000) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x48044}, 0x0) 14m11.333162075s ago: executing program 6 (id=1866): r0 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r4, 0x400, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x8, &(0x7f00000000c0)=ANY=[@ANYRESOCT=r4], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xb, '\x00', 0x0, @fallback=0x8, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_clone(0x14000000, &(0x7f0000000300)="9026d6657ff29609e4dfbf22355b68044125a31d33f1d5fedf7a2c3aab9d7163336820ee49b7338ee79beff0c8559cc33dab6f8d629aa6dd4ff0f09144a68723216d0d7882dec809f9788ec33875c8f49ad7ee7ffaa24ad9cb2fbb1adebe52f02794040aacaa4f52de350ad2a2400b01a5f027ca4b064a037e0c6ac22eec44a54709588d256fd1d82962efca951d8fdaf91c1075dfd1c3eab184c61276922a4a9acd788f", 0xa4, &(0x7f0000000440), &(0x7f0000000480), &(0x7f0000000540)="bb37e27815fc0ef3d9d10c3a0a") r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000400)={{0x0, 0x1, 0xfffffffe, 0x0, 0xd335}}) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r5, 0x54a3) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{}, &(0x7f0000000080), &(0x7f0000000180)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rss_stat\x00'}, 0x10) madvise(&(0x7f0000bbe000/0x4000)=nil, 0x4000, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000005, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x15) syz_clone(0x640c7000, 0x0, 0x61, 0x0, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) 14m10.128430783s ago: executing program 6 (id=1867): socket$kcm(0x10, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) dup(r3) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x10, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x2, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0xfffffffd}, [@alu={0x4, 0x0, 0xd, 0xa, 0x0, 0x0, 0x20}]}, &(0x7f0000000280)='GPL\x00', 0x7}, 0x94) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 14m6.21275498s ago: executing program 6 (id=1873): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/vmallocinfo\x00', 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) 14m5.022135587s ago: executing program 6 (id=1875): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r4, 0x5452, &(0x7f0000000940)=0x707987cd) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) recvmsg(r4, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) socket$inet6(0xa, 0x3, 0x6) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000280)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010003080800418e224e0004fcff", 0x58}], 0x1) 13m49.772161601s ago: executing program 37 (id=1875): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r4, 0x5452, &(0x7f0000000940)=0x707987cd) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) recvmsg(r4, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) socket$inet6(0xa, 0x3, 0x6) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000280)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010003080800418e224e0004fcff", 0x58}], 0x1) 13m37.477525025s ago: executing program 7 (id=1910): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b18, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r2, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900"], 0x398}}, 0x0) 13m36.240677293s ago: executing program 7 (id=1913): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fanotify_mark(0xffffffffffffffff, 0x1, 0x48000021, 0xffffffffffffffff, 0x0) 13m35.481383338s ago: executing program 7 (id=1915): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r4, 0x5452, &(0x7f0000000940)=0x707987cd) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001100)=ANY=[@ANYBLOB="0f000000040000000400"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) recvmsg(r4, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) socket$inet6(0xa, 0x3, 0x6) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000280)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010003080800418e224e0004fcff", 0x58}], 0x1) 13m32.499858289s ago: executing program 7 (id=1918): socket$kcm(0x10, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) dup(r3) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x10, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x2, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0xfffffffd}, [@alu={0x4, 0x0, 0xd, 0xa, 0x0, 0x0, 0x20}]}, &(0x7f0000000280)='GPL\x00', 0x7}, 0x94) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 13m29.131313252s ago: executing program 7 (id=1924): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/vmallocinfo\x00', 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) 13m27.018894696s ago: executing program 7 (id=1926): r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) 13m11.75646504s ago: executing program 38 (id=1926): r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) 13m5.141598795s ago: executing program 9 (id=1899): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/vmallocinfo\x00', 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) 13m3.900773754s ago: executing program 9 (id=1954): prctl$PR_SET_MM(0x23, 0xb, &(0x7f0000000000/0x3000)=nil) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000600)={0x14, r2, 0x1, 0x0, 0x0, {0x2d}}, 0x14}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x4}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x4, &(0x7f00000001c0)=0x1000, 0x4) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$pptp(0x18, 0x1, 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r6, &(0x7f0000000f00)=[{{&(0x7f0000000300)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000440)="83", 0x1}], 0x1}}, {{&(0x7f0000000040)={0xa, 0x4e23, 0x4, @local}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000080)="b6", 0x1}], 0x1}}], 0x2, 0x0) 12m48.659230358s ago: executing program 39 (id=1954): prctl$PR_SET_MM(0x23, 0xb, &(0x7f0000000000/0x3000)=nil) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000600)={0x14, r2, 0x1, 0x0, 0x0, {0x2d}}, 0x14}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x4}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x4, &(0x7f00000001c0)=0x1000, 0x4) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$pptp(0x18, 0x1, 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r6, &(0x7f0000000f00)=[{{&(0x7f0000000300)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000440)="83", 0x1}], 0x1}}, {{&(0x7f0000000040)={0xa, 0x4e23, 0x4, @local}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000080)="b6", 0x1}], 0x1}}], 0x2, 0x0) 9m31.57751846s ago: executing program 1 (id=2223): prctl$PR_SET_MM(0x23, 0xb, &(0x7f0000000000/0x3000)=nil) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000600)={0x14, r2, 0x1, 0x0, 0x0, {0x2d}}, 0x14}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x4}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x4, &(0x7f00000001c0)=0x1000, 0x4) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$pptp(0x18, 0x1, 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r5, &(0x7f0000000f00)=[{{&(0x7f0000000300)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000440)="83", 0x1}], 0x1}}, {{&(0x7f0000000040)={0xa, 0x4e23, 0x4, @local}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000080)="b6", 0x1}], 0x1}}], 0x2, 0x0) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e1301"], 0x16) 9m23.677968894s ago: executing program 1 (id=2234): openat$sequencer(0xffffff9c, &(0x7f0000000040), 0x2000, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x400, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x805}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x14008045, 0x1}) bind$nfc_llcp(0xffffffffffffffff, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x2, 0x2, 0x46, "c46e9f00a84b7fa0bf2cca6beb9363a6809652a86bdf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0xba}, 0x58) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0)={0x0, 0x2}, 0x10}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1a1) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000480)=0x1, 0x4) connect$inet(r3, &(0x7f00000004c0)={0x2, 0x4e22, @local}, 0x10) getsockopt$IPT_SO_GET_REVISION_MATCH(r3, 0x0, 0x42, &(0x7f0000000040)={'icmp6\x00'}, &(0x7f0000000080)=0x1e) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) 9m21.456873499s ago: executing program 1 (id=2237): openat$sequencer(0xffffff9c, &(0x7f0000000040), 0x2000, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x400, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x805}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x14008045, 0x1}) bind$nfc_llcp(0xffffffffffffffff, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x2, 0x2, 0x46, "c46e9f00a84b7fa0bf2cca6beb9363a6809652a86bdf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0xba}, 0x58) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0)={0x0, 0x2}, 0x10}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1a1) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000480)=0x1, 0x4) connect$inet(r3, &(0x7f00000004c0)={0x2, 0x4e22, @local}, 0x10) getsockopt$IPT_SO_GET_REVISION_MATCH(r3, 0x0, 0x42, &(0x7f0000000040)={'icmp6\x00'}, &(0x7f0000000080)=0x1e) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000000)=ANY=[@ANYRES8=r3, @ANYRESDEC=r3]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) 9m19.185736194s ago: executing program 1 (id=2240): r0 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r4, 0x400, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x8, &(0x7f00000000c0)=ANY=[@ANYRESOCT=r4], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xb, '\x00', 0x0, @fallback=0x8, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_clone(0x14000000, &(0x7f0000000300)="9026d6657ff29609e4dfbf22355b68044125a31d33f1d5fedf7a2c3aab9d7163336820ee49b7338ee79beff0c8559cc33dab6f8d629aa6dd4ff0f09144a68723216d0d7882dec809f9788ec33875c8f49ad7ee7ffaa24ad9cb2fbb1adebe52f02794040aacaa4f52de350ad2a2400b01a5f027ca4b064a037e0c6ac22eec44a54709588d256fd1d82962efca951d8fdaf91c1075dfd1c3eab184c61276922a4a9acd788f", 0xa4, &(0x7f0000000440), &(0x7f0000000480), &(0x7f0000000540)="bb37e27815fc0ef3d9d10c3a0a") r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000400)={{0x0, 0x1, 0xfffffffe, 0x0, 0xd335}}) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r5, 0x54a3) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{}, &(0x7f0000000080), &(0x7f0000000180)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rss_stat\x00'}, 0x10) madvise(&(0x7f0000bbe000/0x4000)=nil, 0x4000, 0x0) socket$inet6(0xa, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000005, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x15) syz_clone(0x640c7000, 0x0, 0x61, 0x0, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) 9m18.152488982s ago: executing program 1 (id=2243): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, 0x0}, 0x94) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, 0x0, 0x0) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000300)=0x80000009, 0x4) recvmmsg(r2, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) bind$bt_l2cap(r0, 0x0, 0x0) 9m15.741634388s ago: executing program 1 (id=2247): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10) shmctl$IPC_RMID(0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x8, 0x3, 0x370, 0x238, 0x11, 0x148, 0x238, 0x0, 0x2d8, 0x2a8, 0x2a8, 0x2d8, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x8800, 0x1f0, 0x238, 0x0, {}, [@common=@inet=@socket2={{0x28}}, @common=@inet=@hashlimit3={{0x158}, {'bridge0\x00', {0x6, 0x6, 0x40, 0x6, 0x0, 0x3, 0x5, 0x8, 0x0, 0x20}, {0x5}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0xfffffffe}}}, {{@ip={@multicast2, @remote, 0x0, 0x0, 'vlan0\x00', 'macvlan1\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) 9m0.605280131s ago: executing program 40 (id=2247): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10) shmctl$IPC_RMID(0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x8, 0x3, 0x370, 0x238, 0x11, 0x148, 0x238, 0x0, 0x2d8, 0x2a8, 0x2a8, 0x2d8, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x8800, 0x1f0, 0x238, 0x0, {}, [@common=@inet=@socket2={{0x28}}, @common=@inet=@hashlimit3={{0x158}, {'bridge0\x00', {0x6, 0x6, 0x40, 0x6, 0x0, 0x3, 0x5, 0x8, 0x0, 0x20}, {0x5}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0xfffffffe}}}, {{@ip={@multicast2, @remote, 0x0, 0x0, 'vlan0\x00', 'macvlan1\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) 5.893597951s ago: executing program 4 (id=3369): socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x15, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x28}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) 5.550560494s ago: executing program 4 (id=3370): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000080)={0x0, 0x7}, &(0x7f00000000c0)=0x8) 4.825536078s ago: executing program 2 (id=3377): syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89c, 0xc000, 0x7, 0x20002f3}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='8', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 4.52075706s ago: executing program 4 (id=3379): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000280)="23690f58112f0121bf8815213f2f", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x400c, 0x4000000100008d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = socket(0xa, 0x3, 0x3a) ioctl$SIOCRSGCAUSE(r0, 0x89e0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$key(0xf, 0x3, 0x2) syz_open_dev$evdev(0x0, 0x800, 0x1e10c0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000540), r2) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000580)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000100)={0x34, r3, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x3}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x1}]}, 0x34}}, 0x20000010) 4.338011641s ago: executing program 2 (id=3380): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x7a22, 0xc000, 0x7, 0x337}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0xb09, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x4, 0xd}}}, 0x24}}, 0x0) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 3.634351906s ago: executing program 0 (id=3381): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x10, &(0x7f0000000100)=0x1000000, 0x4) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) sendmsg$nl_route(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)={0x64, r2, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r3}, {0x48, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) 3.600893326s ago: executing program 8 (id=3382): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r1 = fcntl$dupfd(r0, 0x406, r0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) write$binfmt_elf32(r1, &(0x7f0000000640)={{0x7f, 0x45, 0x4c, 0x46, 0x40, 0x0, 0x9b, 0x5, 0xffffffff7fffffff, 0x2, 0x3, 0x8, 0x2a, 0x38, 0x329, 0xb, 0x0, 0x20, 0x1, 0x9, 0x7ff}, [{0x2, 0x5dbf, 0x2, 0x6, 0x8000, 0x5, 0x400, 0xb}], "", ['\x00', '\x00']}, 0x258) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000009c0)={0x648, 0x0, 0x38, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x7b}, @void, @void}}, [@NL80211_ATTR_VENDOR_DATA={0x629, 0xc5, "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"}]}, 0x648}, 0x1, 0x0, 0x0, 0x20040000}, 0x800) 2.753190532s ago: executing program 2 (id=3383): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x368, 0x8, 0x7f02ae, 0x368, 0x200, 0x4a0, 0x2e8, 0x2e8, 0x4a0, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@CLASSIFY={0x28}}, {{@ipv6={@private2, @private2={0xfc, 0x2, '\x00', 0xfe}, [], [], 'veth0_to_team\x00', 'netdevsim0\x00', {}, {}, 0x0, 0x0, 0x1}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x13, 0x9, 0x5, 0x400, 'snmp\x00', 'syz0\x00', {0x8000}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4008050) r0 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="2800000009000000000000000000000001"], 0x28) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newtaction={0x6c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x58, 0x1, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_TCINDEX={0x6, 0x3}]}]}, {0x4}, {0xc}, {0x68}}}]}]}, 0x6c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.752769082s ago: executing program 4 (id=3384): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000600)=0x9, 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000600)=0x9, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}], 0x10) listen(r1, 0x7) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x20}}], 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) socket$netlink(0x10, 0x3, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) fsmount(0xffffffffffffffff, 0x1, 0x80) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r5}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000180)={0x28, 0x2, r5, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x100000000}) close_range(r3, 0xffffffffffffffff, 0x0) 2.140399806s ago: executing program 8 (id=3385): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYRESDEC=r0, @ANYRES64=r0, @ANYRESDEC=r1, @ANYRESDEC=r1], 0x4c}}, 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="50000000090601020000000000000000020000000900020073797a3100000000050001000700"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) r4 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) r5 = gettid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x2}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r6 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) read$msr(r6, &(0x7f0000048040)=""/102392, 0x18ff8) getgroups(0xfffffffffffffdb2, 0xfffffffffffffffe) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) socket$nl_xfrm(0x10, 0x3, 0x6) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r7) sendmsg$NLBL_CALIPSO_C_ADD(r7, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000000)={0x24, r8, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0xc840}, 0x20020000) sendmsg$NLBL_CALIPSO_C_REMOVE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r8, 0x1, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0x8000) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r7, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000440)={0x68, r9, 0x300, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r0}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_PID={0x8, 0x1c, r5}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_PID={0x8, 0x1c, r5}]}, 0x68}, 0x1, 0x0, 0x0, 0x40040}, 0x20001) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000100000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.115468956s ago: executing program 0 (id=3386): syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) getgroups(0x2, &(0x7f0000001080)=[0xee01, 0xffffffffffffffff]) setgroups(0x0, 0x0) keyctl$chown(0x4, r0, 0xee01, r1) keyctl$setperm(0x5, r0, 0x20925) keyctl$KEYCTL_MOVE(0x3, r0, 0x0, 0x0, 0x0) 2.001576717s ago: executing program 2 (id=3387): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000080)={0x0, 0x7}, &(0x7f00000000c0)=0x8) 1.963266377s ago: executing program 4 (id=3388): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$audion(&(0x7f0000000000), 0x2, 0x80000) close_range(r0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bind$alg(0xffffffffffffffff, &(0x7f0000000740)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000500)='oom_score\x00') preadv(r3, &(0x7f0000000040)=[{&(0x7f0000001180)=""/4113, 0x1011}], 0x1, 0x16, 0xfffffff9) sendto$packet(r2, &(0x7f00000002c0)="48357e0287af48ffa745b497a54e0eec1bf2c69011f35b48339d15afaef1bd7efe075ff441b16e244b8b05fe09e29583ad142567826dfa5cbc6f979b050015bde8c4441cd0fa6be03213181bfe84743015ec12ced8b1aa8f44e5c30afac6f9fd2ab1303be0d1b2c02533bcc97cce7da9b507b053b11821323590d379e9e350a3291fbedb6382de878b7a56e4e38c7f746d0424029f5d49b04697a4", 0xfffffffffffffcf6, 0x0, 0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) recvmmsg(r4, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f0000002cc0)=[{0x0, 0x94}, {&(0x7f00000017c0)=""/130, 0x94}], 0x13}, 0xa1}], 0x2, 0x22, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000040c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000700)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x24000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)={0x34, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x8, 0x3, 0x0, 0x1, [{0x4}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f0000000100)={'fscrypt:', @auto=[0x65, 0x33, 0x62, 0x35, 0x31, 0x65, 0x35, 0x32, 0x31, 0x63, 0x0, 0x30, 0x63, 0x38, 0x65, 0x30]}, &(0x7f0000000200)={0x0, "07efce4ea9177435fa65e963c23dd72df3e934386a5d619eab2093152800df5de28e30cbcd5171be579b0092cd1f082c277a6de690e9852db37b248962798198", 0x17}, 0x48, 0x0) 1.938862227s ago: executing program 8 (id=3389): syz_open_dev$usbmon(&(0x7f0000000000), 0x80000001, 0x82002) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x200000000622c, 0x0) socket(0x18, 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r3, 0xc0105500, &(0x7f0000000080)={0xa1, 0x0, 0x802, 0x0, 0x0, 0x4, 0x0}) 1.773547248s ago: executing program 0 (id=3390): socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x15, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x28}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) 534.131066ms ago: executing program 0 (id=3391): socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00'}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = eventfd2(0xe5c, 0x80800) r3 = eventfd2(0x4001, 0x800) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000100)={r2, 0x7, 0x2, r3}) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000140)={r2, 0x7, 0x2, r3}) 531.796466ms ago: executing program 2 (id=3392): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r0 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0x529a, 0x1000, 0x2, 0x40000333}, &(0x7f0000000000)=0x0, &(0x7f0000001e00)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) 521.215277ms ago: executing program 8 (id=3393): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) 229.559989ms ago: executing program 0 (id=3394): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x2, @empty, 0xa098}, {0xa, 0x4e21, 0x8000009, @mcast1}, r1, 0x4040099d}}, 0x48) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000180)={0x12, 0x10, 0xfa00, {&(0x7f0000000000), r1, r0}}, 0x18) 229.384498ms ago: executing program 8 (id=3395): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x10, &(0x7f0000000100)=0x1000000, 0x4) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)={0x64, r2, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r3}, {0x48, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) 178.626019ms ago: executing program 4 (id=3396): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) getcwd(0x0, 0x0) 58.5419ms ago: executing program 0 (id=3397): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$can_j1939(0x1d, 0x2, 0x7) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) shmget(0x1, 0x3000, 0x200, &(0x7f0000ffd000/0x3000)=nil) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000008c0)={0x84, @rand_addr=0x64010102, 0x4e22, 0x1, 'lblcr\x00', 0x0, 0x10001, 0x6f}, 0x2c) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f0000000000)={[{@subsystem='hugetlb'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x5}, {0xfff1, 0xffff}, {0x4}}}, 0x24}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x80) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r5, 0x29, 0x3b, &(0x7f0000000340), 0x8) getsockopt$inet6_opts(r5, 0x29, 0x3b, 0x0, &(0x7f00000002c0)=0xa4) syz_genetlink_get_family_id$nfc(0x0, r4) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYRES32], 0x1c}}, 0x0) 851.81µs ago: executing program 2 (id=3398): sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[], 0xe4}}, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f00000000c0)={0x6, 0x3d, 0x0, 0x0, 0x0, 0x0}) 0s ago: executing program 8 (id=3399): socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x15, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x28}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) kernel console output (not intermixed with test programs): address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1087.935275][T12800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1088.129405][T12800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1088.140004][T12800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1088.150277][T12800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1089.196659][T12800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1089.209052][T12800] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1089.220633][T12800] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1089.255227][T12800] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1089.263997][T12800] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1089.344669][T12800] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1089.968040][ T9344] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1090.103084][ T9344] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1090.936042][T13071] netlink: 'syz.0.1999': attribute type 10 has an invalid length. [ 1090.958949][T13071] team0: Cannot enslave team device to itself [ 1091.068964][ T9344] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1091.086344][ T9344] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1097.226212][T12284] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1097.244858][T12284] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1097.254055][T12284] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1097.315386][T12284] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1097.335019][T12284] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1097.343625][T12284] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1097.522735][T11738] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1097.798656][T11738] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1097.987915][T11738] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1098.208013][T11738] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1099.255895][T11738] tipc: Left network mode [ 1099.425379][T12284] Bluetooth: hci1: command tx timeout [ 1100.415683][T13115] chnl_net:caif_netlink_parms(): no params data found [ 1101.264963][T12284] Bluetooth: hci2: command tx timeout [ 1101.504741][T12284] Bluetooth: hci1: command tx timeout [ 1101.584754][T13159] tipc: Started in network mode [ 1101.591219][T13159] tipc: Node identity 4, cluster identity 4711 [ 1101.606087][T13159] tipc: Node number set to 4 [ 1102.148242][T13167] netlink: 'syz.2.2010': attribute type 10 has an invalid length. [ 1102.613638][T13167] team0: Cannot enslave team device to itself [ 1102.792575][T12284] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:0' [ 1102.806937][T12284] CPU: 1 PID: 12284 Comm: kworker/u5:4 Not tainted syzkaller #0 [ 1102.814632][T12284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1102.824814][T12284] Workqueue: hci2 hci_rx_work [ 1102.829743][T12284] Call Trace: [ 1102.833064][T12284] [ 1102.836042][T12284] dump_stack_lvl+0x16c/0x230 [ 1102.840853][T12284] ? show_regs_print_info+0x20/0x20 [ 1102.846075][T12284] ? load_image+0x3b0/0x3b0 [ 1102.850682][T12284] sysfs_create_dir_ns+0x256/0x280 [ 1102.855902][T12284] ? hci_rx_work+0x43a/0xd80 [ 1102.860556][T12284] ? sysfs_warn_dup+0xa0/0xa0 [ 1102.865312][T12284] ? do_raw_spin_unlock+0x121/0x230 [ 1102.870609][T12284] kobject_add_internal+0x6b8/0xc70 [ 1102.875879][T12284] kobject_add+0x156/0x220 [ 1102.880348][T12284] ? __rwlock_init+0x150/0x150 [ 1102.885270][T12284] ? kobject_init+0x1e0/0x1e0 [ 1102.889994][T12284] ? _raw_spin_unlock+0x28/0x40 [ 1102.894950][T12284] ? get_device_parent+0x366/0x390 [ 1102.900248][T12284] device_add+0x408/0xc20 [ 1102.904664][T12284] hci_conn_add_sysfs+0xd5/0x1e0 [ 1102.909845][T12284] le_conn_complete_evt+0xf36/0x1500 [ 1102.915155][T12284] ? hci_event_packet+0x4a7/0x1210 [ 1102.920294][T12284] ? hci_le_big_info_adv_report_evt+0x8e0/0x8e0 [ 1102.926566][T12284] ? __copy_skb_header+0xa7/0x550 [ 1102.931692][T12284] ? __mutex_unlock_slowpath+0x1a2/0x6a0 [ 1102.937356][T12284] ? skb_pull_data+0xfb/0x200 [ 1102.942061][T12284] hci_le_conn_complete_evt+0x187/0x440 [ 1102.947641][T12284] ? hci_remote_host_features_evt+0x160/0x160 [ 1102.953727][T12284] hci_event_packet+0x795/0x1210 [ 1102.958698][T12284] ? bis_list+0x290/0x290 [ 1102.963045][T12284] ? lockdep_hardirqs_on+0x98/0x150 [ 1102.968262][T12284] ? hci_send_to_monitor+0xd7/0x4f0 [ 1102.973486][T12284] hci_rx_work+0x43a/0xd80 [ 1102.977932][T12284] ? process_scheduled_works+0x957/0x15b0 [ 1102.983702][T12284] process_scheduled_works+0xa45/0x15b0 [ 1102.989294][T12284] ? assign_work+0x400/0x400 [ 1102.993912][T12284] ? assign_work+0x39e/0x400 [ 1102.998523][T12284] worker_thread+0xa55/0xfc0 [ 1103.003137][T12284] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 1103.009086][T12284] ? _raw_spin_unlock+0x40/0x40 [ 1103.013963][T12284] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 1103.019979][T12284] kthread+0x2fa/0x390 [ 1103.024102][T12284] ? pr_cont_work+0x560/0x560 [ 1103.028843][T12284] ? kthread_blkcg+0xd0/0xd0 [ 1103.033506][T12284] ret_from_fork+0x48/0x80 [ 1103.037998][T12284] ? kthread_blkcg+0xd0/0xd0 [ 1103.042647][T12284] ret_from_fork_asm+0x11/0x20 [ 1103.047513][T12284] [ 1103.051533][T12284] kobject: kobject_add_internal failed for hci2:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 1103.065526][T12284] Bluetooth: hci2: failed to register connection device [ 1104.200348][T12284] Bluetooth: hci1: command tx timeout [ 1104.790746][T13115] bridge0: port 1(bridge_slave_0) entered blocking state [ 1104.920209][T13115] bridge0: port 1(bridge_slave_0) entered disabled state [ 1104.944973][T13115] bridge_slave_0: entered allmulticast mode [ 1105.003163][T13115] bridge_slave_0: entered promiscuous mode [ 1105.104863][T12262] Bluetooth: hci2: command tx timeout [ 1105.139855][T13115] bridge0: port 2(bridge_slave_1) entered blocking state [ 1105.183894][T13115] bridge0: port 2(bridge_slave_1) entered disabled state [ 1105.204937][T13115] bridge_slave_1: entered allmulticast mode [ 1105.249271][T13115] bridge_slave_1: entered promiscuous mode [ 1105.752158][T13115] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1105.840144][T13115] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1105.920503][T13115] team0: Port device team_slave_0 added [ 1106.009529][T13115] team0: Port device team_slave_1 added [ 1106.111334][T13115] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1106.125802][T13115] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1106.153141][T13115] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1106.237089][T12284] Bluetooth: hci1: command tx timeout [ 1107.075762][T13115] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1107.082776][T13115] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1107.144951][T13115] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1109.033810][T13215] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1109.192129][T13215] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1109.244577][T13115] hsr_slave_0: entered promiscuous mode [ 1109.266641][T13215] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1109.288768][T13115] hsr_slave_1: entered promiscuous mode [ 1109.298062][T13215] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1109.298091][T13115] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1109.307317][T13115] Cannot create hsr debugfs directory [ 1109.332950][T13215] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1109.675761][T13215] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1109.874326][T13215] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1110.076141][T13215] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1110.082143][T13215] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1110.345717][T13215] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1110.413203][T11738] hsr_slave_0: left promiscuous mode [ 1110.470463][T11738] hsr_slave_1: left promiscuous mode [ 1110.495206][T11738] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1110.502676][T11738] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1110.561582][T11738] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1110.599018][T11738] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1110.623521][T11738] bridge_slave_1: left allmulticast mode [ 1110.669940][T11738] bridge_slave_1: left promiscuous mode [ 1110.695315][T11738] bridge0: port 2(bridge_slave_1) entered disabled state [ 1110.716282][T11738] bridge_slave_0: left allmulticast mode [ 1110.732368][T11738] bridge_slave_0: left promiscuous mode [ 1110.742691][T11738] bridge0: port 1(bridge_slave_0) entered disabled state [ 1110.800163][T11738] veth1_macvtap: left promiscuous mode [ 1110.807595][T11738] veth0_macvtap: left promiscuous mode [ 1110.824892][T11738] veth1_vlan: left promiscuous mode [ 1110.830286][T11738] veth0_vlan: left promiscuous mode [ 1110.955002][T12284] Bluetooth: hci3: command 0x0406 tx timeout [ 1111.384706][T12284] Bluetooth: hci2: command 0x0c1a tx timeout [ 1112.148004][T12284] Bluetooth: hci1: command 0x0c1a tx timeout [ 1112.389391][T11738] team0 (unregistering): Port device team_slave_1 removed [ 1112.437519][T11738] team0 (unregistering): Port device team_slave_0 removed [ 1112.484734][T11738] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1112.528927][T11738] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1113.030123][T12284] Bluetooth: hci3: command 0x0406 tx timeout [ 1113.041354][T11738] bond0 (unregistering): Released all slaves [ 1113.434710][T12284] Bluetooth: hci2: command 0x0c1a tx timeout [ 1113.582661][T12284] Bluetooth: hci3: unexpected event for opcode 0x000c [ 1113.806268][T13267] loop8: detected capacity change from 0 to 256 [ 1114.193056][T13267] exFAT-fs (loop8): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18d7c, utbl_chksum : 0xe619d30d) [ 1114.273321][T12284] Bluetooth: hci1: command 0x0c1a tx timeout [ 1114.938494][T13269] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1114.946099][T13269] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1114.957831][T13269] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1116.083727][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.090756][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 1117.024833][T12284] Bluetooth: hci1: command 0x0c1a tx timeout [ 1117.032445][T12284] Bluetooth: hci2: command 0x0c1a tx timeout [ 1117.041271][T12284] Bluetooth: hci3: command 0x0406 tx timeout [ 1118.749019][T13115] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1118.821078][T13115] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1118.947380][T13115] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1118.997024][T13115] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1119.250094][T12284] Bluetooth: hci2: command 0x0c1a tx timeout [ 1120.062858][T13115] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1120.116158][T13332] netlink: 'syz.8.2032': attribute type 72 has an invalid length. [ 1120.144513][T13332] netlink: 'syz.8.2032': attribute type 8 has an invalid length. [ 1120.288714][T13115] 8021q: adding VLAN 0 to HW filter on device team0 [ 1120.381433][T11696] bridge0: port 1(bridge_slave_0) entered blocking state [ 1120.388687][T11696] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1120.499014][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 1120.506291][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1120.679495][T13347] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2034'. [ 1121.264799][T12284] Bluetooth: hci2: command 0x0c1a tx timeout [ 1122.274446][T13115] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1124.906797][T13115] veth0_vlan: entered promiscuous mode [ 1124.999132][T13115] veth1_vlan: entered promiscuous mode [ 1125.108453][T13115] veth0_macvtap: entered promiscuous mode [ 1125.133388][T13115] veth1_macvtap: entered promiscuous mode [ 1125.164246][T13115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1125.182001][T13115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1125.194084][T13115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1125.214255][T13115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1125.523633][T13115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1125.667399][T13115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1126.011434][T13115] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1126.039015][T13115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1126.050163][T13115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1126.060197][T13115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1126.071698][T13115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1126.084849][T13115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1126.097301][T13115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1126.113459][T13115] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1126.310290][T13115] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1126.322170][T13115] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1126.350065][T13115] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1126.364248][T13115] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1126.580545][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1126.593164][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1126.632591][T11695] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1126.641258][T11695] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1128.439133][T13391] netlink: 'syz.0.2043': attribute type 10 has an invalid length. [ 1130.095086][T13391] team0: Cannot enslave team device to itself [ 1136.156846][ T5800] Bluetooth: hci2: command 0x0c1a tx timeout [ 1136.333210][T13417] netlink: 'syz.2.2052': attribute type 10 has an invalid length. [ 1136.341136][T13417] team0: Cannot enslave team device to itself [ 1139.511641][T13465] netlink: 'syz.1.2056': attribute type 10 has an invalid length. [ 1140.204670][T13465] team0: Cannot enslave team device to itself [ 1142.020051][T13494] tipc: Started in network mode [ 1142.054043][T13494] tipc: Node identity 4, cluster identity 4711 [ 1142.070754][T13494] tipc: Node number set to 4 [ 1143.134762][T12284] Bluetooth: hci3: command 0x0406 tx timeout [ 1145.461691][T13521] netlink: 'syz.2.2063': attribute type 10 has an invalid length. [ 1145.495062][T13521] team0: Cannot enslave team device to itself [ 1148.142556][T13544] netlink: 'syz.1.2068': attribute type 10 has an invalid length. [ 1148.241604][T13544] team0: Cannot enslave team device to itself [ 1156.599117][T13596] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1161.057449][T13626] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 1161.064361][T13626] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1161.074490][T13626] vhci_hcd vhci_hcd.0: Device attached [ 1161.074523][T13627] vhci_hcd: connection closed [ 1161.525861][ T616] vhci_hcd: stop threads [ 1161.573994][ T616] vhci_hcd: release socket [ 1161.593408][ T616] vhci_hcd: disconnect device [ 1168.686471][T13699] netlink: 'syz.2.2098': attribute type 10 has an invalid length. [ 1168.695764][T13699] team0: Cannot enslave team device to itself [ 1170.145141][ T5800] Bluetooth: hci1: command 0x0c1a tx timeout [ 1174.250520][T13757] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2110'. [ 1177.545025][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.551517][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.785432][T13797] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2121'. [ 1180.902908][T13824] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2127'. [ 1183.625236][T13848] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2132'. [ 1184.982230][T13868] netlink: 'syz.1.2135': attribute type 10 has an invalid length. [ 1185.220009][T13868] team0: Cannot enslave team device to itself [ 1185.246595][T13872] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2138'. [ 1188.597860][ T5800] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:0' [ 1188.608381][ T5800] CPU: 1 PID: 5800 Comm: kworker/u5:3 Not tainted syzkaller #0 [ 1188.615972][ T5800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1188.626060][ T5800] Workqueue: hci1 hci_rx_work [ 1188.630799][ T5800] Call Trace: [ 1188.634112][ T5800] [ 1188.637102][ T5800] dump_stack_lvl+0x16c/0x230 [ 1188.641801][ T5800] ? show_regs_print_info+0x20/0x20 [ 1188.647010][ T5800] ? load_image+0x3b0/0x3b0 [ 1188.651528][ T5800] sysfs_create_dir_ns+0x256/0x280 [ 1188.656657][ T5800] ? hci_rx_work+0x43a/0xd80 [ 1188.661258][ T5800] ? sysfs_warn_dup+0xa0/0xa0 [ 1188.665949][ T5800] ? do_raw_spin_unlock+0x121/0x230 [ 1188.671154][ T5800] kobject_add_internal+0x6b8/0xc70 [ 1188.676360][ T5800] kobject_add+0x156/0x220 [ 1188.680807][ T5800] ? __rwlock_init+0x150/0x150 [ 1188.685675][ T5800] ? kobject_init+0x1e0/0x1e0 [ 1188.690355][ T5800] ? _raw_spin_unlock+0x28/0x40 [ 1188.695214][ T5800] ? get_device_parent+0x366/0x390 [ 1188.700345][ T5800] device_add+0x408/0xc20 [ 1188.704698][ T5800] hci_conn_add_sysfs+0xd5/0x1e0 [ 1188.709672][ T5800] le_conn_complete_evt+0xf36/0x1500 [ 1188.714992][ T5800] ? hci_event_packet+0x4a7/0x1210 [ 1188.720114][ T5800] ? hci_le_big_info_adv_report_evt+0x8e0/0x8e0 [ 1188.726366][ T5800] ? __copy_skb_header+0xa7/0x550 [ 1188.731405][ T5800] ? __mutex_unlock_slowpath+0x1a2/0x6a0 [ 1188.737052][ T5800] ? skb_pull_data+0xfb/0x200 [ 1188.741736][ T5800] hci_le_conn_complete_evt+0x187/0x440 [ 1188.747301][ T5800] ? hci_remote_host_features_evt+0x160/0x160 [ 1188.753373][ T5800] hci_event_packet+0x795/0x1210 [ 1188.758323][ T5800] ? bis_list+0x290/0x290 [ 1188.762682][ T5800] ? lockdep_hardirqs_on+0x98/0x150 [ 1188.767911][ T5800] ? hci_send_to_monitor+0xd7/0x4f0 [ 1188.773142][ T5800] hci_rx_work+0x43a/0xd80 [ 1188.777579][ T5800] ? process_scheduled_works+0x957/0x15b0 [ 1188.783315][ T5800] process_scheduled_works+0xa45/0x15b0 [ 1188.788893][ T5800] ? assign_work+0x400/0x400 [ 1188.793500][ T5800] ? assign_work+0x39e/0x400 [ 1188.798117][ T5800] worker_thread+0xa55/0xfc0 [ 1188.802741][ T5800] kthread+0x2fa/0x390 [ 1188.806822][ T5800] ? pr_cont_work+0x560/0x560 [ 1188.811510][ T5800] ? kthread_blkcg+0xd0/0xd0 [ 1188.816108][ T5800] ret_from_fork+0x48/0x80 [ 1188.820553][ T5800] ? kthread_blkcg+0xd0/0xd0 [ 1188.825147][ T5800] ret_from_fork_asm+0x11/0x20 [ 1188.829939][ T5800] [ 1188.838501][ T5800] kobject: kobject_add_internal failed for hci1:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 1188.852466][ T5800] Bluetooth: hci1: failed to register connection device [ 1190.980421][ T5800] Bluetooth: hci1: command 0x0c1a tx timeout [ 1200.511822][T12284] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:0' [ 1200.521548][T12284] CPU: 1 PID: 12284 Comm: kworker/u5:4 Not tainted syzkaller #0 [ 1200.529223][T12284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1200.539297][T12284] Workqueue: hci1 hci_rx_work [ 1200.544013][T12284] Call Trace: [ 1200.547300][T12284] [ 1200.550236][T12284] dump_stack_lvl+0x16c/0x230 [ 1200.554929][T12284] ? show_regs_print_info+0x20/0x20 [ 1200.560136][T12284] ? load_image+0x3b0/0x3b0 [ 1200.564672][T12284] sysfs_create_dir_ns+0x256/0x280 [ 1200.569807][T12284] ? hci_rx_work+0x43a/0xd80 [ 1200.574411][T12284] ? sysfs_warn_dup+0xa0/0xa0 [ 1200.579122][T12284] ? do_raw_spin_unlock+0x121/0x230 [ 1200.584333][T12284] kobject_add_internal+0x6b8/0xc70 [ 1200.589581][T12284] kobject_add+0x156/0x220 [ 1200.594025][T12284] ? __rwlock_init+0x150/0x150 [ 1200.598804][T12284] ? kobject_init+0x1e0/0x1e0 [ 1200.603488][T12284] ? _raw_spin_unlock+0x28/0x40 [ 1200.608364][T12284] ? get_device_parent+0x366/0x390 [ 1200.613492][T12284] device_add+0x408/0xc20 [ 1200.617869][T12284] hci_conn_add_sysfs+0xd5/0x1e0 [ 1200.622842][T12284] le_conn_complete_evt+0xf36/0x1500 [ 1200.628141][T12284] ? hci_event_packet+0x4a7/0x1210 [ 1200.633265][T12284] ? hci_le_big_info_adv_report_evt+0x8e0/0x8e0 [ 1200.639526][T12284] ? __copy_skb_header+0xa7/0x550 [ 1200.644575][T12284] ? __mutex_unlock_slowpath+0x1a2/0x6a0 [ 1200.650257][T12284] ? skb_pull_data+0xfb/0x200 [ 1200.654942][T12284] hci_le_conn_complete_evt+0x187/0x440 [ 1200.660504][T12284] ? hci_remote_host_features_evt+0x160/0x160 [ 1200.666583][T12284] hci_event_packet+0x795/0x1210 [ 1200.671533][T12284] ? bis_list+0x290/0x290 [ 1200.675871][T12284] ? lockdep_hardirqs_on+0x98/0x150 [ 1200.681075][T12284] ? hci_send_to_monitor+0xd7/0x4f0 [ 1200.686290][T12284] hci_rx_work+0x43a/0xd80 [ 1200.690748][T12284] ? process_scheduled_works+0x957/0x15b0 [ 1200.696497][T12284] process_scheduled_works+0xa45/0x15b0 [ 1200.702072][T12284] ? assign_work+0x400/0x400 [ 1200.706682][T12284] ? assign_work+0x39e/0x400 [ 1200.711281][T12284] worker_thread+0xa55/0xfc0 [ 1200.715889][T12284] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 1200.721800][T12284] ? _raw_spin_unlock+0x40/0x40 [ 1200.726661][T12284] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 1200.732584][T12284] kthread+0x2fa/0x390 [ 1200.736674][T12284] ? pr_cont_work+0x560/0x560 [ 1200.741381][T12284] ? kthread_blkcg+0xd0/0xd0 [ 1200.745977][T12284] ret_from_fork+0x48/0x80 [ 1200.750400][T12284] ? kthread_blkcg+0xd0/0xd0 [ 1200.755002][T12284] ret_from_fork_asm+0x11/0x20 [ 1200.759785][T12284] [ 1200.764080][T12284] kobject: kobject_add_internal failed for hci1:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 1200.778485][T12284] Bluetooth: hci1: failed to register connection device [ 1202.874787][ T5800] Bluetooth: hci1: command 0x0c1a tx timeout [ 1211.036077][ T5800] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 1211.048045][ T5800] CPU: 1 PID: 5800 Comm: kworker/u5:3 Not tainted syzkaller #0 [ 1211.055657][ T5800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1211.065748][ T5800] Workqueue: hci3 hci_rx_work [ 1211.070507][ T5800] Call Trace: [ 1211.073793][ T5800] [ 1211.076733][ T5800] dump_stack_lvl+0x16c/0x230 [ 1211.081426][ T5800] ? show_regs_print_info+0x20/0x20 [ 1211.086633][ T5800] ? load_image+0x3b0/0x3b0 [ 1211.091152][ T5800] sysfs_create_dir_ns+0x256/0x280 [ 1211.096279][ T5800] ? hci_rx_work+0x43a/0xd80 [ 1211.100879][ T5800] ? sysfs_warn_dup+0xa0/0xa0 [ 1211.105682][ T5800] ? do_raw_spin_unlock+0x121/0x230 [ 1211.110899][ T5800] kobject_add_internal+0x6b8/0xc70 [ 1211.116117][ T5800] kobject_add+0x156/0x220 [ 1211.120539][ T5800] ? __rwlock_init+0x150/0x150 [ 1211.125313][ T5800] ? kobject_init+0x1e0/0x1e0 [ 1211.129993][ T5800] ? _raw_spin_unlock+0x28/0x40 [ 1211.134857][ T5800] ? get_device_parent+0x366/0x390 [ 1211.139992][ T5800] device_add+0x408/0xc20 [ 1211.144430][ T5800] hci_conn_add_sysfs+0xd5/0x1e0 [ 1211.149386][ T5800] le_conn_complete_evt+0xf36/0x1500 [ 1211.154700][ T5800] ? hci_event_packet+0x4a7/0x1210 [ 1211.159837][ T5800] ? hci_le_big_info_adv_report_evt+0x8e0/0x8e0 [ 1211.166093][ T5800] ? __copy_skb_header+0xa7/0x550 [ 1211.171138][ T5800] ? __mutex_unlock_slowpath+0x1a2/0x6a0 [ 1211.176799][ T5800] ? skb_pull_data+0xfb/0x200 [ 1211.181503][ T5800] hci_le_conn_complete_evt+0x187/0x440 [ 1211.187071][ T5800] ? hci_remote_host_features_evt+0x160/0x160 [ 1211.193152][ T5800] hci_event_packet+0x795/0x1210 [ 1211.198130][ T5800] ? bis_list+0x290/0x290 [ 1211.202556][ T5800] ? lockdep_hardirqs_on+0x98/0x150 [ 1211.207790][ T5800] ? hci_send_to_monitor+0xd7/0x4f0 [ 1211.213021][ T5800] hci_rx_work+0x43a/0xd80 [ 1211.217473][ T5800] ? process_scheduled_works+0x957/0x15b0 [ 1211.223212][ T5800] process_scheduled_works+0xa45/0x15b0 [ 1211.228790][ T5800] ? assign_work+0x400/0x400 [ 1211.233499][ T5800] ? assign_work+0x39e/0x400 [ 1211.238119][ T5800] worker_thread+0xa55/0xfc0 [ 1211.242761][ T5800] kthread+0x2fa/0x390 [ 1211.246839][ T5800] ? pr_cont_work+0x560/0x560 [ 1211.251537][ T5800] ? kthread_blkcg+0xd0/0xd0 [ 1211.256142][ T5800] ret_from_fork+0x48/0x80 [ 1211.260576][ T5800] ? kthread_blkcg+0xd0/0xd0 [ 1211.265176][ T5800] ret_from_fork_asm+0x11/0x20 [ 1211.269981][ T5800] [ 1211.282044][ T5800] kobject: kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 1211.296058][ T5800] Bluetooth: hci3: failed to register connection device [ 1211.358374][ T5800] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:0' [ 1211.368434][ T5800] CPU: 0 PID: 5800 Comm: kworker/u5:3 Not tainted syzkaller #0 [ 1211.375994][ T5800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1211.386070][ T5800] Workqueue: hci2 hci_rx_work [ 1211.390781][ T5800] Call Trace: [ 1211.394068][ T5800] [ 1211.397014][ T5800] dump_stack_lvl+0x16c/0x230 [ 1211.401716][ T5800] ? show_regs_print_info+0x20/0x20 [ 1211.406930][ T5800] ? load_image+0x3b0/0x3b0 [ 1211.411456][ T5800] sysfs_create_dir_ns+0x256/0x280 [ 1211.416609][ T5800] ? hci_rx_work+0x43a/0xd80 [ 1211.421209][ T5800] ? sysfs_warn_dup+0xa0/0xa0 [ 1211.425912][ T5800] ? do_raw_spin_unlock+0x121/0x230 [ 1211.431135][ T5800] kobject_add_internal+0x6b8/0xc70 [ 1211.436362][ T5800] kobject_add+0x156/0x220 [ 1211.440838][ T5800] ? __rwlock_init+0x150/0x150 [ 1211.445627][ T5800] ? kobject_init+0x1e0/0x1e0 [ 1211.450316][ T5800] ? _raw_spin_unlock+0x28/0x40 [ 1211.455180][ T5800] ? get_device_parent+0x366/0x390 [ 1211.460312][ T5800] device_add+0x408/0xc20 [ 1211.464667][ T5800] hci_conn_add_sysfs+0xd5/0x1e0 [ 1211.469626][ T5800] le_conn_complete_evt+0xf36/0x1500 [ 1211.474928][ T5800] ? hci_event_packet+0x4a7/0x1210 [ 1211.480054][ T5800] ? hci_le_big_info_adv_report_evt+0x8e0/0x8e0 [ 1211.486311][ T5800] ? __copy_skb_header+0xa7/0x550 [ 1211.491369][ T5800] ? __mutex_unlock_slowpath+0x1a2/0x6a0 [ 1211.497054][ T5800] ? skb_pull_data+0xfb/0x200 [ 1211.501769][ T5800] hci_le_conn_complete_evt+0x187/0x440 [ 1211.507598][ T5800] ? hci_remote_host_features_evt+0x160/0x160 [ 1211.513678][ T5800] hci_event_packet+0x795/0x1210 [ 1211.518644][ T5800] ? bis_list+0x290/0x290 [ 1211.522991][ T5800] ? lockdep_hardirqs_on+0x98/0x150 [ 1211.528200][ T5800] ? hci_send_to_monitor+0xd7/0x4f0 [ 1211.533421][ T5800] hci_rx_work+0x43a/0xd80 [ 1211.537869][ T5800] ? process_scheduled_works+0x957/0x15b0 [ 1211.543624][ T5800] process_scheduled_works+0xa45/0x15b0 [ 1211.549207][ T5800] ? assign_work+0x400/0x400 [ 1211.553812][ T5800] ? assign_work+0x39e/0x400 [ 1211.558505][ T5800] worker_thread+0xa55/0xfc0 [ 1211.563126][ T5800] kthread+0x2fa/0x390 [ 1211.567207][ T5800] ? pr_cont_work+0x560/0x560 [ 1211.571896][ T5800] ? kthread_blkcg+0xd0/0xd0 [ 1211.576577][ T5800] ret_from_fork+0x48/0x80 [ 1211.581003][ T5800] ? kthread_blkcg+0xd0/0xd0 [ 1211.585598][ T5800] ret_from_fork_asm+0x11/0x20 [ 1211.590382][ T5800] [ 1211.595593][ T5800] kobject: kobject_add_internal failed for hci2:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 1211.610298][ T5800] Bluetooth: hci2: failed to register connection device [ 1213.544674][T12284] Bluetooth: hci3: command 0x0406 tx timeout [ 1213.765679][T12284] Bluetooth: hci2: command 0x0c1a tx timeout [ 1215.488464][T12284] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 1215.498069][T12284] CPU: 1 PID: 12284 Comm: kworker/u5:4 Not tainted syzkaller #0 [ 1215.505755][T12284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1215.515939][T12284] Workqueue: hci3 hci_rx_work [ 1215.520679][T12284] Call Trace: [ 1215.523990][T12284] [ 1215.526961][T12284] dump_stack_lvl+0x16c/0x230 [ 1215.531696][T12284] ? show_regs_print_info+0x20/0x20 [ 1215.536939][T12284] ? load_image+0x3b0/0x3b0 [ 1215.541590][T12284] sysfs_create_dir_ns+0x256/0x280 [ 1215.546760][T12284] ? hci_rx_work+0x43a/0xd80 [ 1215.551397][T12284] ? sysfs_warn_dup+0xa0/0xa0 [ 1215.556128][T12284] ? do_raw_spin_unlock+0x121/0x230 [ 1215.561376][T12284] kobject_add_internal+0x6b8/0xc70 [ 1215.566624][T12284] kobject_add+0x156/0x220 [ 1215.571111][T12284] ? __rwlock_init+0x150/0x150 [ 1215.575921][T12284] ? kobject_init+0x1e0/0x1e0 [ 1215.580647][T12284] ? _raw_spin_unlock+0x28/0x40 [ 1215.585537][T12284] ? get_device_parent+0x366/0x390 [ 1215.590701][T12284] device_add+0x408/0xc20 [ 1215.595081][T12284] hci_conn_add_sysfs+0xd5/0x1e0 [ 1215.600072][T12284] le_conn_complete_evt+0xf36/0x1500 [ 1215.605406][T12284] ? hci_event_packet+0x4a7/0x1210 [ 1215.610565][T12284] ? hci_le_big_info_adv_report_evt+0x8e0/0x8e0 [ 1215.616851][T12284] ? __copy_skb_header+0xa7/0x550 [ 1215.621928][T12284] ? __mutex_unlock_slowpath+0x1a2/0x6a0 [ 1215.627616][T12284] ? skb_pull_data+0xfb/0x200 [ 1215.632331][T12284] hci_le_conn_complete_evt+0x187/0x440 [ 1215.637921][T12284] ? hci_remote_host_features_evt+0x160/0x160 [ 1215.644019][T12284] hci_event_packet+0x795/0x1210 [ 1215.649015][T12284] ? bis_list+0x290/0x290 [ 1215.653369][T12284] ? lockdep_hardirqs_on+0x98/0x150 [ 1215.658687][T12284] ? hci_send_to_monitor+0xd7/0x4f0 [ 1215.663913][T12284] hci_rx_work+0x43a/0xd80 [ 1215.668392][T12284] ? process_scheduled_works+0x957/0x15b0 [ 1215.674141][T12284] process_scheduled_works+0xa45/0x15b0 [ 1215.679734][T12284] ? assign_work+0x400/0x400 [ 1215.684351][T12284] ? assign_work+0x39e/0x400 [ 1215.688966][T12284] worker_thread+0xa55/0xfc0 [ 1215.693580][T12284] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 1215.699492][T12284] ? _raw_spin_unlock+0x40/0x40 [ 1215.704366][T12284] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 1215.710300][T12284] kthread+0x2fa/0x390 [ 1215.714384][T12284] ? pr_cont_work+0x560/0x560 [ 1215.719093][T12284] ? kthread_blkcg+0xd0/0xd0 [ 1215.723702][T12284] ret_from_fork+0x48/0x80 [ 1215.728145][T12284] ? kthread_blkcg+0xd0/0xd0 [ 1215.733106][T12284] ret_from_fork_asm+0x11/0x20 [ 1215.737909][T12284] [ 1215.763603][ T5800] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:0' [ 1215.774957][ T5800] CPU: 1 PID: 5800 Comm: kworker/u5:3 Not tainted syzkaller #0 [ 1215.782596][ T5800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1215.792710][ T5800] Workqueue: hci1 hci_rx_work [ 1215.794677][T12284] kobject: kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 1215.797478][ T5800] Call Trace: [ 1215.811577][T12284] Bluetooth: hci3: failed to register connection device [ 1215.814699][ T5800] [ 1215.814713][ T5800] dump_stack_lvl+0x16c/0x230 [ 1215.814795][ T5800] ? show_regs_print_info+0x20/0x20 [ 1215.834759][ T5800] ? load_image+0x3b0/0x3b0 [ 1215.839382][ T5800] sysfs_create_dir_ns+0x256/0x280 [ 1215.844604][ T5800] ? hci_rx_work+0x43a/0xd80 [ 1215.849332][ T5800] ? sysfs_warn_dup+0xa0/0xa0 [ 1215.854202][ T5800] ? do_raw_spin_unlock+0x121/0x230 [ 1215.859540][ T5800] kobject_add_internal+0x6b8/0xc70 [ 1215.864930][ T5800] kobject_add+0x156/0x220 [ 1215.869440][ T5800] ? __rwlock_init+0x150/0x150 [ 1215.874321][ T5800] ? kobject_init+0x1e0/0x1e0 [ 1215.879211][ T5800] ? _raw_spin_unlock+0x28/0x40 [ 1215.884187][ T5800] ? get_device_parent+0x366/0x390 [ 1215.889412][ T5800] device_add+0x408/0xc20 [ 1215.893805][ T5800] hci_conn_add_sysfs+0xd5/0x1e0 [ 1215.898811][ T5800] le_conn_complete_evt+0xf36/0x1500 [ 1215.904182][ T5800] ? hci_event_packet+0x4a7/0x1210 [ 1215.909361][ T5800] ? hci_le_big_info_adv_report_evt+0x8e0/0x8e0 [ 1215.915667][ T5800] ? __copy_skb_header+0xa7/0x550 [ 1215.920766][ T5800] ? __mutex_unlock_slowpath+0x1a2/0x6a0 [ 1215.926465][ T5800] ? skb_pull_data+0xfb/0x200 [ 1215.931198][ T5800] hci_le_conn_complete_evt+0x187/0x440 [ 1215.936772][ T5800] ? hci_remote_host_features_evt+0x160/0x160 [ 1215.942870][ T5800] hci_event_packet+0x795/0x1210 [ 1215.947889][ T5800] ? bis_list+0x290/0x290 [ 1215.952389][ T5800] ? lockdep_hardirqs_on+0x98/0x150 [ 1215.957677][ T5800] ? hci_send_to_monitor+0xd7/0x4f0 [ 1215.962940][ T5800] hci_rx_work+0x43a/0xd80 [ 1215.967415][ T5800] ? process_scheduled_works+0x957/0x15b0 [ 1215.973180][ T5800] process_scheduled_works+0xa45/0x15b0 [ 1215.978823][ T5800] ? assign_work+0x400/0x400 [ 1215.983471][ T5800] ? assign_work+0x39e/0x400 [ 1215.988137][ T5800] worker_thread+0xa55/0xfc0 [ 1215.992895][ T5800] kthread+0x2fa/0x390 [ 1215.997003][ T5800] ? pr_cont_work+0x560/0x560 [ 1216.001757][ T5800] ? kthread_blkcg+0xd0/0xd0 [ 1216.006567][ T5800] ret_from_fork+0x48/0x80 [ 1216.011023][ T5800] ? kthread_blkcg+0xd0/0xd0 [ 1216.015656][ T5800] ret_from_fork_asm+0x11/0x20 [ 1216.020505][ T5800] [ 1216.024731][ T5800] kobject: kobject_add_internal failed for hci1:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 1216.182372][ T5800] Bluetooth: hci1: failed to register connection device [ 1217.756606][ T5800] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:0' [ 1217.766003][ T5800] CPU: 1 PID: 5800 Comm: kworker/u5:3 Not tainted syzkaller #0 [ 1217.773587][ T5800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1217.783650][ T5800] Workqueue: hci2 hci_rx_work [ 1217.788350][ T5800] Call Trace: [ 1217.791650][ T5800] [ 1217.794611][ T5800] dump_stack_lvl+0x16c/0x230 [ 1217.799325][ T5800] ? show_regs_print_info+0x20/0x20 [ 1217.804634][ T5800] ? load_image+0x3b0/0x3b0 [ 1217.809175][ T5800] sysfs_create_dir_ns+0x256/0x280 [ 1217.814321][ T5800] ? hci_rx_work+0x43a/0xd80 [ 1217.818946][ T5800] ? sysfs_warn_dup+0xa0/0xa0 [ 1217.823637][ T5800] ? do_raw_spin_unlock+0x121/0x230 [ 1217.828856][ T5800] kobject_add_internal+0x6b8/0xc70 [ 1217.834098][ T5800] kobject_add+0x156/0x220 [ 1217.838522][ T5800] ? __rwlock_init+0x150/0x150 [ 1217.843315][ T5800] ? kobject_init+0x1e0/0x1e0 [ 1217.848022][ T5800] ? _raw_spin_unlock+0x28/0x40 [ 1217.852886][ T5800] ? get_device_parent+0x366/0x390 [ 1217.858017][ T5800] device_add+0x408/0xc20 [ 1217.862364][ T5800] hci_conn_add_sysfs+0xd5/0x1e0 [ 1217.867353][ T5800] le_conn_complete_evt+0xf36/0x1500 [ 1217.872653][ T5800] ? hci_event_packet+0x4a7/0x1210 [ 1217.877779][ T5800] ? hci_le_big_info_adv_report_evt+0x8e0/0x8e0 [ 1217.884028][ T5800] ? __copy_skb_header+0xa7/0x550 [ 1217.889072][ T5800] ? __mutex_unlock_slowpath+0x1a2/0x6a0 [ 1217.894734][ T5800] ? skb_pull_data+0xfb/0x200 [ 1217.899452][ T5800] hci_le_conn_complete_evt+0x187/0x440 [ 1217.905017][ T5800] ? hci_remote_host_features_evt+0x160/0x160 [ 1217.911098][ T5800] hci_event_packet+0x795/0x1210 [ 1217.916052][ T5800] ? bis_list+0x290/0x290 [ 1217.920395][ T5800] ? lockdep_hardirqs_on+0x98/0x150 [ 1217.925603][ T5800] ? hci_send_to_monitor+0xd7/0x4f0 [ 1217.930831][ T5800] hci_rx_work+0x43a/0xd80 [ 1217.935281][ T5800] ? process_scheduled_works+0x957/0x15b0 [ 1217.941019][ T5800] process_scheduled_works+0xa45/0x15b0 [ 1217.946595][ T5800] ? assign_work+0x400/0x400 [ 1217.951195][ T5800] ? assign_work+0x39e/0x400 [ 1217.955799][ T5800] worker_thread+0xa55/0xfc0 [ 1217.960416][ T5800] kthread+0x2fa/0x390 [ 1217.964505][ T5800] ? pr_cont_work+0x560/0x560 [ 1217.969199][ T5800] ? kthread_blkcg+0xd0/0xd0 [ 1217.973793][ T5800] ret_from_fork+0x48/0x80 [ 1217.978236][ T5800] ? kthread_blkcg+0xd0/0xd0 [ 1217.982917][ T5800] ret_from_fork_asm+0x11/0x20 [ 1217.987792][ T5800] [ 1217.999560][ T5800] kobject: kobject_add_internal failed for hci2:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 1218.014225][ T5800] Bluetooth: hci2: failed to register connection device [ 1218.022244][ T5800] Bluetooth: hci3: command 0x0406 tx timeout [ 1218.230994][T12262] Bluetooth: hci1: command 0x0c1a tx timeout [ 1221.404765][T12262] Bluetooth: hci2: command 0x0c1a tx timeout [ 1225.055795][T14112] overlayfs: failed to clone upperpath [ 1231.707503][T14163] netlink: 'syz.0.2191': attribute type 10 has an invalid length. [ 1232.788704][T14163] team0: Cannot enslave team device to itself [ 1232.868021][T14167] netlink: 'syz.1.2192': attribute type 10 has an invalid length. [ 1232.887846][T14167] team0: Cannot enslave team device to itself [ 1238.955753][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.963016][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 1241.132904][T14234] netlink: 'syz.0.2201': attribute type 10 has an invalid length. [ 1241.144225][T14234] team0: Cannot enslave team device to itself [ 1241.451942][T14240] netlink: 'syz.1.2204': attribute type 3 has an invalid length. [ 1242.504719][T14250] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2206'. [ 1247.578209][T14290] netlink: 'syz.1.2215': attribute type 10 has an invalid length. [ 1247.586108][T14290] team0: Cannot enslave team device to itself [ 1247.688640][T14301] netlink: 'syz.0.2216': attribute type 3 has an invalid length. [ 1248.666564][T14311] netlink: 'syz.8.2217': attribute type 10 has an invalid length. [ 1248.674925][T14311] team0: Cannot enslave team device to itself [ 1250.238263][T14328] netlink: 'syz.0.2219': attribute type 10 has an invalid length. [ 1250.246712][T14328] team0: Cannot enslave team device to itself [ 1251.093788][T14332] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2222'. [ 1252.939987][ T5800] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:0' [ 1252.954822][ T5800] CPU: 1 PID: 5800 Comm: kworker/u5:3 Not tainted syzkaller #0 [ 1252.962447][ T5800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1252.972541][ T5800] Workqueue: hci2 hci_rx_work [ 1252.977368][ T5800] Call Trace: [ 1252.980680][ T5800] [ 1252.983639][ T5800] dump_stack_lvl+0x16c/0x230 [ 1252.988365][ T5800] ? show_regs_print_info+0x20/0x20 [ 1252.993608][ T5800] ? load_image+0x3b0/0x3b0 [ 1252.998159][ T5800] sysfs_create_dir_ns+0x256/0x280 [ 1253.003314][ T5800] ? hci_rx_work+0x43a/0xd80 [ 1253.007946][ T5800] ? sysfs_warn_dup+0xa0/0xa0 [ 1253.012681][ T5800] ? do_raw_spin_unlock+0x121/0x230 [ 1253.017928][ T5800] kobject_add_internal+0x6b8/0xc70 [ 1253.023181][ T5800] kobject_add+0x156/0x220 [ 1253.027636][ T5800] ? __rwlock_init+0x150/0x150 [ 1253.032443][ T5800] ? kobject_init+0x1e0/0x1e0 [ 1253.037163][ T5800] ? _raw_spin_unlock+0x28/0x40 [ 1253.042063][ T5800] ? get_device_parent+0x366/0x390 [ 1253.047226][ T5800] device_add+0x408/0xc20 [ 1253.051609][ T5800] hci_conn_add_sysfs+0xd5/0x1e0 [ 1253.056615][ T5800] le_conn_complete_evt+0xf36/0x1500 [ 1253.061950][ T5800] ? hci_event_packet+0x4a7/0x1210 [ 1253.067117][ T5800] ? hci_le_big_info_adv_report_evt+0x8e0/0x8e0 [ 1253.073404][ T5800] ? __copy_skb_header+0xa7/0x550 [ 1253.078483][ T5800] ? __mutex_unlock_slowpath+0x1a2/0x6a0 [ 1253.084169][ T5800] ? skb_pull_data+0xfb/0x200 [ 1253.088893][ T5800] hci_le_conn_complete_evt+0x187/0x440 [ 1253.094502][ T5800] ? hci_remote_host_features_evt+0x160/0x160 [ 1253.100615][ T5800] hci_event_packet+0x795/0x1210 [ 1253.105612][ T5800] ? bis_list+0x290/0x290 [ 1253.109984][ T5800] ? lockdep_hardirqs_on+0x98/0x150 [ 1253.115224][ T5800] ? hci_send_to_monitor+0xd7/0x4f0 [ 1253.120472][ T5800] hci_rx_work+0x43a/0xd80 [ 1253.124968][ T5800] ? process_scheduled_works+0x957/0x15b0 [ 1253.130726][ T5800] process_scheduled_works+0xa45/0x15b0 [ 1253.136344][ T5800] ? assign_work+0x400/0x400 [ 1253.140981][ T5800] ? assign_work+0x39e/0x400 [ 1253.145615][ T5800] worker_thread+0xa55/0xfc0 [ 1253.150278][ T5800] kthread+0x2fa/0x390 [ 1253.154378][ T5800] ? pr_cont_work+0x560/0x560 [ 1253.159094][ T5800] ? kthread_blkcg+0xd0/0xd0 [ 1253.163717][ T5800] ret_from_fork+0x48/0x80 [ 1253.168169][ T5800] ? kthread_blkcg+0xd0/0xd0 [ 1253.172796][ T5800] ret_from_fork_asm+0x11/0x20 [ 1253.177616][ T5800] [ 1253.184767][ T5800] kobject: kobject_add_internal failed for hci2:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 1253.198902][ T5800] Bluetooth: hci2: failed to register connection device [ 1253.465185][T14354] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2227'. [ 1255.144738][T14361] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2226'. [ 1255.303810][T12262] Bluetooth: hci2: command 0x0c1a tx timeout [ 1257.989593][T14379] netlink: 'syz.2.2228': attribute type 10 has an invalid length. [ 1258.039803][T14379] team0: Cannot enslave team device to itself [ 1258.131419][T14383] fuse: Bad value for 'group_id' [ 1260.673477][T14402] autofs4:pid:14402:autofs_fill_super: called with bogus options [ 1263.375088][T14415] autofs4:pid:14415:autofs_fill_super: called with bogus options [ 1269.756003][T14470] netlink: 'syz.8.2249': attribute type 3 has an invalid length. [ 1273.825113][T14495] autofs4:pid:14495:autofs_fill_super: called with bogus options [ 1274.504663][T14505] netlink: 'syz.2.2252': attribute type 10 has an invalid length. [ 1274.512691][T14505] team0: Cannot enslave team device to itself [ 1279.132591][T14532] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2258'. [ 1285.551422][ T5800] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1285.561625][ T5800] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1285.614833][ T5800] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1285.642337][ T5800] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1285.677813][ T5800] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1285.699079][ T5800] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1286.939520][T11695] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1287.081816][T14575] netlink: 'syz.0.2265': attribute type 10 has an invalid length. [ 1287.092904][T14575] team0: Cannot enslave team device to itself [ 1287.964805][ T5800] Bluetooth: hci4: command tx timeout [ 1288.616779][T11695] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1289.239072][T11695] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1289.288014][T14583] netlink: 'syz.8.2267': attribute type 3 has an invalid length. [ 1289.510029][T11695] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1289.984621][ T5800] Bluetooth: hci4: command tx timeout [ 1290.416699][T14564] chnl_net:caif_netlink_parms(): no params data found [ 1290.901720][T14606] netlink: 'syz.8.2269': attribute type 10 has an invalid length. [ 1290.957794][T14606] team0: Cannot enslave team device to itself [ 1291.921028][T11695] tipc: Left network mode [ 1292.114640][ T5800] Bluetooth: hci4: command tx timeout [ 1293.075136][T14622] autofs4:pid:14622:autofs_fill_super: called with bogus options [ 1294.097392][T14564] bridge0: port 1(bridge_slave_0) entered blocking state [ 1294.207497][ T5800] Bluetooth: hci4: command tx timeout [ 1294.244830][T14564] bridge0: port 1(bridge_slave_0) entered disabled state [ 1294.252288][T14564] bridge_slave_0: entered allmulticast mode [ 1294.259465][T14564] bridge_slave_0: entered promiscuous mode [ 1294.381763][T14564] bridge0: port 2(bridge_slave_1) entered blocking state [ 1294.400488][T14564] bridge0: port 2(bridge_slave_1) entered disabled state [ 1294.425128][T14564] bridge_slave_1: entered allmulticast mode [ 1294.442938][T14564] bridge_slave_1: entered promiscuous mode [ 1294.971705][T14564] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1295.039193][T14564] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1295.392917][T14564] team0: Port device team_slave_0 added [ 1295.421612][T14564] team0: Port device team_slave_1 added [ 1295.633964][T14564] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1295.650479][T14564] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1295.706726][T14564] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1295.750936][T14564] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1295.768701][T14564] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1295.805661][T14564] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1296.076341][T14564] hsr_slave_0: entered promiscuous mode [ 1296.089035][T14564] hsr_slave_1: entered promiscuous mode [ 1296.095826][T14564] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1296.103427][T14564] Cannot create hsr debugfs directory [ 1296.517509][T14669] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2278'. [ 1298.060627][T11695] hsr_slave_0: left promiscuous mode [ 1298.135012][T11695] hsr_slave_1: left promiscuous mode [ 1298.152909][T11695] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1298.174749][T11695] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1298.205772][T11695] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1298.233288][T11695] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1298.273086][T11695] bridge_slave_1: left allmulticast mode [ 1298.287289][T11695] bridge_slave_1: left promiscuous mode [ 1298.293310][T11695] bridge0: port 2(bridge_slave_1) entered disabled state [ 1298.333951][T11695] bridge_slave_0: left allmulticast mode [ 1298.346275][T11695] bridge_slave_0: left promiscuous mode [ 1298.362271][T14701] netlink: 892 bytes leftover after parsing attributes in process `syz.0.2281'. [ 1298.362368][T11695] bridge0: port 1(bridge_slave_0) entered disabled state [ 1298.448866][T11695] veth1_macvtap: left promiscuous mode [ 1298.455007][T11695] veth0_macvtap: left promiscuous mode [ 1298.461935][T11695] veth1_vlan: left promiscuous mode [ 1298.469876][T11695] veth0_vlan: left promiscuous mode [ 1299.071880][T14714] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2282'. [ 1299.913984][T11695] team0 (unregistering): Port device team_slave_1 removed [ 1299.962327][T11695] team0 (unregistering): Port device team_slave_0 removed [ 1300.007065][T11695] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1300.053238][T11695] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1300.392254][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.398800][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.584772][T11695] bond0 (unregistering): Released all slaves [ 1302.589112][T14734] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2286'. [ 1304.264352][ T5800] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 1304.274739][ T5800] CPU: 1 PID: 5800 Comm: kworker/u5:3 Not tainted syzkaller #0 [ 1304.282351][ T5800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1304.292456][ T5800] Workqueue: hci3 hci_rx_work [ 1304.297193][ T5800] Call Trace: [ 1304.300520][ T5800] [ 1304.303496][ T5800] dump_stack_lvl+0x16c/0x230 [ 1304.308231][ T5800] ? show_regs_print_info+0x20/0x20 [ 1304.313479][ T5800] ? load_image+0x3b0/0x3b0 [ 1304.318104][ T5800] sysfs_create_dir_ns+0x256/0x280 [ 1304.323250][ T5800] ? hci_rx_work+0x43a/0xd80 [ 1304.327897][ T5800] ? sysfs_warn_dup+0xa0/0xa0 [ 1304.332608][ T5800] ? do_raw_spin_unlock+0x121/0x230 [ 1304.337849][ T5800] kobject_add_internal+0x6b8/0xc70 [ 1304.343070][ T5800] kobject_add+0x156/0x220 [ 1304.347501][ T5800] ? __rwlock_init+0x150/0x150 [ 1304.352287][ T5800] ? kobject_init+0x1e0/0x1e0 [ 1304.356981][ T5800] ? _raw_spin_unlock+0x28/0x40 [ 1304.361850][ T5800] ? get_device_parent+0x366/0x390 [ 1304.367071][ T5800] device_add+0x408/0xc20 [ 1304.371532][ T5800] hci_conn_add_sysfs+0xd5/0x1e0 [ 1304.376501][ T5800] le_conn_complete_evt+0xf36/0x1500 [ 1304.381819][ T5800] ? hci_event_packet+0x4a7/0x1210 [ 1304.386955][ T5800] ? hci_le_big_info_adv_report_evt+0x8e0/0x8e0 [ 1304.393229][ T5800] ? __copy_skb_header+0xa7/0x550 [ 1304.398284][ T5800] ? __mutex_unlock_slowpath+0x1a2/0x6a0 [ 1304.403943][ T5800] ? skb_pull_data+0xfb/0x200 [ 1304.408659][ T5800] hci_le_conn_complete_evt+0x187/0x440 [ 1304.414251][ T5800] ? hci_remote_host_features_evt+0x160/0x160 [ 1304.420371][ T5800] hci_event_packet+0x795/0x1210 [ 1304.425355][ T5800] ? bis_list+0x290/0x290 [ 1304.429712][ T5800] ? lockdep_hardirqs_on+0x98/0x150 [ 1304.434934][ T5800] ? hci_send_to_monitor+0xd7/0x4f0 [ 1304.440160][ T5800] hci_rx_work+0x43a/0xd80 [ 1304.444617][ T5800] ? process_scheduled_works+0x957/0x15b0 [ 1304.450366][ T5800] process_scheduled_works+0xa45/0x15b0 [ 1304.455959][ T5800] ? assign_work+0x400/0x400 [ 1304.460570][ T5800] ? assign_work+0x39e/0x400 [ 1304.465185][ T5800] worker_thread+0xa55/0xfc0 [ 1304.469820][ T5800] kthread+0x2fa/0x390 [ 1304.473921][ T5800] ? pr_cont_work+0x560/0x560 [ 1304.478739][ T5800] ? kthread_blkcg+0xd0/0xd0 [ 1304.483376][ T5800] ret_from_fork+0x48/0x80 [ 1304.487826][ T5800] ? kthread_blkcg+0xd0/0xd0 [ 1304.492441][ T5800] ret_from_fork_asm+0x11/0x20 [ 1304.497266][ T5800] [ 1304.525030][ T5800] kobject: kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 1304.539485][ T5800] Bluetooth: hci3: failed to register connection device [ 1304.899202][T14564] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1304.964320][T14564] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1305.007218][T14564] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1305.072132][T14564] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1305.193188][T14752] netlink: 892 bytes leftover after parsing attributes in process `syz.0.2290'. [ 1306.009542][T14564] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1306.142848][T14768] netlink: 'syz.0.2291': attribute type 10 has an invalid length. [ 1306.154761][T14768] team0: Cannot enslave team device to itself [ 1306.203779][T14564] 8021q: adding VLAN 0 to HW filter on device team0 [ 1307.435145][ T5800] Bluetooth: hci3: command 0x0406 tx timeout [ 1307.467704][T11695] bridge0: port 1(bridge_slave_0) entered blocking state [ 1307.474969][T11695] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1308.160397][T11695] bridge0: port 2(bridge_slave_1) entered blocking state [ 1308.167652][T11695] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1308.339554][T14564] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1308.350041][T14564] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1310.105083][T14790] autofs4:pid:14790:autofs_fill_super: called with bogus options [ 1311.275282][T14796] overlayfs: failed to clone upperpath [ 1313.308905][T14564] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1315.281332][T14840] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2303'. [ 1315.323211][T14564] veth0_vlan: entered promiscuous mode [ 1315.368992][T14564] veth1_vlan: entered promiscuous mode [ 1315.565889][T14564] veth0_macvtap: entered promiscuous mode [ 1315.785180][T14564] veth1_macvtap: entered promiscuous mode [ 1316.023874][T14564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1316.058761][T14564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1316.705265][T14564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1316.889038][T14852] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2307'. [ 1317.014912][T14564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1317.080140][T14564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1317.155777][T14564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1317.314223][T14564] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1317.468485][T14564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1317.530786][T14564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1317.604654][T14564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1317.642418][T14564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1317.682872][T14564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1317.713751][T14564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1317.766086][T14564] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1317.817212][T14564] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1317.884360][T14564] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1317.925068][T14564] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1317.978526][T14564] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1318.645490][T11331] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1318.661701][T11331] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1318.854601][T14881] netlink: 'syz.8.2310': attribute type 10 has an invalid length. [ 1318.888456][T14881] team0: Cannot enslave team device to itself [ 1318.980935][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1319.010739][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1321.325535][T14900] autofs4:pid:14900:autofs_fill_super: called with bogus options [ 1322.771565][T14901] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 1322.778155][T14901] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1322.785972][T14901] vhci_hcd vhci_hcd.0: Device attached [ 1322.794266][T14905] vhci_hcd: connection closed [ 1322.834011][ T616] vhci_hcd: stop threads [ 1322.917646][ T616] vhci_hcd: release socket [ 1322.924646][ T616] vhci_hcd: disconnect device [ 1325.488097][T14938] autofs4:pid:14938:autofs_fill_super: called with bogus options [ 1329.535184][T14962] autofs4:pid:14962:autofs_fill_super: called with bogus options [ 1332.395997][T14976] autofs4:pid:14976:autofs_fill_super: called with bogus options [ 1332.886096][T14990] fuse: Unknown parameter 'user_id00000000000000000000' [ 1334.409684][T15022] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2336'. [ 1334.762608][T15029] autofs4:pid:15029:autofs_fill_super: called with bogus options [ 1335.082074][T15032] netlink: 892 bytes leftover after parsing attributes in process `syz.8.2337'. [ 1338.597381][T15060] autofs4:pid:15060:autofs_fill_super: called with bogus options [ 1341.444214][T15089] netlink: 'syz.0.2348': attribute type 8 has an invalid length. [ 1345.285145][T15119] autofs4:pid:15119:autofs_fill_super: called with bogus options [ 1348.235375][ T5800] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 1348.245020][ T5800] CPU: 1 PID: 5800 Comm: kworker/u5:3 Not tainted syzkaller #0 [ 1348.252584][ T5800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1348.262648][ T5800] Workqueue: hci3 hci_rx_work [ 1348.267348][ T5800] Call Trace: [ 1348.270661][ T5800] [ 1348.273594][ T5800] dump_stack_lvl+0x16c/0x230 [ 1348.278331][ T5800] ? show_regs_print_info+0x20/0x20 [ 1348.283563][ T5800] ? load_image+0x3b0/0x3b0 [ 1348.288089][ T5800] sysfs_create_dir_ns+0x256/0x280 [ 1348.293223][ T5800] ? hci_rx_work+0x43a/0xd80 [ 1348.297834][ T5800] ? sysfs_warn_dup+0xa0/0xa0 [ 1348.302527][ T5800] ? do_raw_spin_unlock+0x121/0x230 [ 1348.307750][ T5800] kobject_add_internal+0x6b8/0xc70 [ 1348.312983][ T5800] kobject_add+0x156/0x220 [ 1348.317430][ T5800] ? __rwlock_init+0x150/0x150 [ 1348.322211][ T5800] ? kobject_init+0x1e0/0x1e0 [ 1348.326899][ T5800] ? _raw_spin_unlock+0x28/0x40 [ 1348.331761][ T5800] ? get_device_parent+0x366/0x390 [ 1348.336896][ T5800] device_add+0x408/0xc20 [ 1348.341275][ T5800] hci_conn_add_sysfs+0xd5/0x1e0 [ 1348.346275][ T5800] le_conn_complete_evt+0xf36/0x1500 [ 1348.351596][ T5800] ? hci_event_packet+0x4a7/0x1210 [ 1348.356740][ T5800] ? hci_le_big_info_adv_report_evt+0x8e0/0x8e0 [ 1348.362992][ T5800] ? __copy_skb_header+0xa7/0x550 [ 1348.368119][ T5800] ? __mutex_unlock_slowpath+0x1a2/0x6a0 [ 1348.373779][ T5800] ? skb_pull_data+0xfb/0x200 [ 1348.378473][ T5800] hci_le_conn_complete_evt+0x187/0x440 [ 1348.384037][ T5800] ? hci_remote_host_features_evt+0x160/0x160 [ 1348.390134][ T5800] hci_event_packet+0x795/0x1210 [ 1348.395087][ T5800] ? bis_list+0x290/0x290 [ 1348.399430][ T5800] ? kcov_remote_start+0x2b/0x7f0 [ 1348.404508][ T5800] ? hci_send_to_monitor+0xd7/0x4f0 [ 1348.409751][ T5800] hci_rx_work+0x43a/0xd80 [ 1348.414187][ T5800] ? process_scheduled_works+0x957/0x15b0 [ 1348.419936][ T5800] process_scheduled_works+0xa45/0x15b0 [ 1348.425519][ T5800] ? assign_work+0x400/0x400 [ 1348.430126][ T5800] ? assign_work+0x39e/0x400 [ 1348.434729][ T5800] worker_thread+0xa55/0xfc0 [ 1348.439369][ T5800] kthread+0x2fa/0x390 [ 1348.443449][ T5800] ? pr_cont_work+0x560/0x560 [ 1348.448145][ T5800] ? kthread_blkcg+0xd0/0xd0 [ 1348.452768][ T5800] ret_from_fork+0x48/0x80 [ 1348.457221][ T5800] ? kthread_blkcg+0xd0/0xd0 [ 1348.461866][ T5800] ret_from_fork_asm+0x11/0x20 [ 1348.466700][ T5800] [ 1348.478271][ T5800] kobject: kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 1348.492779][ T5800] Bluetooth: hci3: failed to register connection device [ 1349.210104][T12262] Bluetooth: hci4: command tx timeout [ 1349.879083][T15168] loop4: detected capacity change from 0 to 512 [ 1349.906187][T15168] UDF-fs: bad mount option "obj_user=-]" or missing value [ 1350.544804][T12262] Bluetooth: hci3: command 0x0406 tx timeout [ 1350.577018][T15177] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2363'. [ 1351.572990][T15199] fuse: Unknown parameter '0x0000000000000004' [ 1352.822003][T15214] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2370'. [ 1353.556133][T15228] overlayfs: failed to clone upperpath [ 1355.091130][T15240] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2375'. [ 1356.016737][T12262] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 1356.026127][T12262] CPU: 0 PID: 12262 Comm: kworker/u5:1 Not tainted syzkaller #0 [ 1356.033811][T12262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1356.043893][T12262] Workqueue: hci3 hci_rx_work [ 1356.048596][T12262] Call Trace: [ 1356.051887][T12262] [ 1356.054830][T12262] dump_stack_lvl+0x16c/0x230 [ 1356.059577][T12262] ? show_regs_print_info+0x20/0x20 [ 1356.064820][T12262] ? load_image+0x3b0/0x3b0 [ 1356.069358][T12262] sysfs_create_dir_ns+0x256/0x280 [ 1356.074486][T12262] ? hci_rx_work+0x43a/0xd80 [ 1356.079118][T12262] ? sysfs_warn_dup+0xa0/0xa0 [ 1356.083829][T12262] ? do_raw_spin_unlock+0x121/0x230 [ 1356.089064][T12262] kobject_add_internal+0x6b8/0xc70 [ 1356.094303][T12262] kobject_add+0x156/0x220 [ 1356.098733][T12262] ? __rwlock_init+0x150/0x150 [ 1356.103519][T12262] ? kobject_init+0x1e0/0x1e0 [ 1356.108210][T12262] ? _raw_spin_unlock+0x28/0x40 [ 1356.113078][T12262] ? get_device_parent+0x366/0x390 [ 1356.118212][T12262] device_add+0x408/0xc20 [ 1356.122570][T12262] hci_conn_add_sysfs+0xd5/0x1e0 [ 1356.127567][T12262] le_conn_complete_evt+0xf36/0x1500 [ 1356.132879][T12262] ? hci_event_packet+0x4a7/0x1210 [ 1356.138022][T12262] ? hci_le_big_info_adv_report_evt+0x8e0/0x8e0 [ 1356.144288][T12262] ? __copy_skb_header+0xa7/0x550 [ 1356.149338][T12262] ? __mutex_unlock_slowpath+0x1a2/0x6a0 [ 1356.154996][T12262] ? skb_pull_data+0xfb/0x200 [ 1356.159689][T12262] hci_le_conn_complete_evt+0x187/0x440 [ 1356.165259][T12262] ? hci_remote_host_features_evt+0x160/0x160 [ 1356.171345][T12262] hci_event_packet+0x795/0x1210 [ 1356.176396][T12262] ? bis_list+0x290/0x290 [ 1356.180744][T12262] ? lockdep_hardirqs_on+0x98/0x150 [ 1356.185963][T12262] ? hci_send_to_monitor+0xd7/0x4f0 [ 1356.191196][T12262] hci_rx_work+0x43a/0xd80 [ 1356.195643][T12262] ? process_scheduled_works+0x957/0x15b0 [ 1356.201380][T12262] process_scheduled_works+0xa45/0x15b0 [ 1356.206970][T12262] ? assign_work+0x400/0x400 [ 1356.211599][T12262] ? assign_work+0x39e/0x400 [ 1356.216221][T12262] worker_thread+0xa55/0xfc0 [ 1356.220937][T12262] kthread+0x2fa/0x390 [ 1356.225024][T12262] ? pr_cont_work+0x560/0x560 [ 1356.229717][T12262] ? kthread_blkcg+0xd0/0xd0 [ 1356.234317][T12262] ret_from_fork+0x48/0x80 [ 1356.238755][T12262] ? kthread_blkcg+0xd0/0xd0 [ 1356.243365][T12262] ret_from_fork_asm+0x11/0x20 [ 1356.248179][T12262] [ 1356.269424][T12262] kobject: kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 1356.283551][T12262] Bluetooth: hci3: failed to register connection device [ 1356.537297][ T5800] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:0' [ 1356.552232][ T5800] CPU: 0 PID: 5800 Comm: kworker/u5:3 Not tainted syzkaller #0 [ 1356.559850][ T5800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1356.569954][ T5800] Workqueue: hci4 hci_rx_work [ 1356.574698][ T5800] Call Trace: [ 1356.578013][ T5800] [ 1356.580982][ T5800] dump_stack_lvl+0x16c/0x230 [ 1356.585718][ T5800] ? show_regs_print_info+0x20/0x20 [ 1356.590930][ T5800] ? load_image+0x3b0/0x3b0 [ 1356.595454][ T5800] sysfs_create_dir_ns+0x256/0x280 [ 1356.600582][ T5800] ? hci_rx_work+0x43a/0xd80 [ 1356.605196][ T5800] ? sysfs_warn_dup+0xa0/0xa0 [ 1356.609902][ T5800] ? do_raw_spin_unlock+0x121/0x230 [ 1356.615121][ T5800] kobject_add_internal+0x6b8/0xc70 [ 1356.620347][ T5800] kobject_add+0x156/0x220 [ 1356.624864][ T5800] ? __rwlock_init+0x150/0x150 [ 1356.629651][ T5800] ? kobject_init+0x1e0/0x1e0 [ 1356.634340][ T5800] ? _raw_spin_unlock+0x28/0x40 [ 1356.639211][ T5800] ? get_device_parent+0x366/0x390 [ 1356.644351][ T5800] device_add+0x408/0xc20 [ 1356.648713][ T5800] hci_conn_add_sysfs+0xd5/0x1e0 [ 1356.653683][ T5800] le_conn_complete_evt+0xf36/0x1500 [ 1356.658990][ T5800] ? hci_event_packet+0x4a7/0x1210 [ 1356.664123][ T5800] ? hci_le_big_info_adv_report_evt+0x8e0/0x8e0 [ 1356.670385][ T5800] ? __copy_skb_header+0xa7/0x550 [ 1356.675434][ T5800] ? __mutex_unlock_slowpath+0x1a2/0x6a0 [ 1356.681093][ T5800] ? skb_pull_data+0xfb/0x200 [ 1356.685792][ T5800] hci_le_conn_complete_evt+0x187/0x440 [ 1356.691445][ T5800] ? hci_remote_host_features_evt+0x160/0x160 [ 1356.697539][ T5800] hci_event_packet+0x795/0x1210 [ 1356.702523][ T5800] ? bis_list+0x290/0x290 [ 1356.706873][ T5800] ? lockdep_hardirqs_on+0x98/0x150 [ 1356.712610][ T5800] ? hci_send_to_monitor+0xd7/0x4f0 [ 1356.717838][ T5800] hci_rx_work+0x43a/0xd80 [ 1356.722283][ T5800] ? process_scheduled_works+0x957/0x15b0 [ 1356.728022][ T5800] process_scheduled_works+0xa45/0x15b0 [ 1356.733607][ T5800] ? assign_work+0x400/0x400 [ 1356.738221][ T5800] ? assign_work+0x39e/0x400 [ 1356.742830][ T5800] worker_thread+0xa55/0xfc0 [ 1356.747457][ T5800] kthread+0x2fa/0x390 [ 1356.751545][ T5800] ? pr_cont_work+0x560/0x560 [ 1356.756241][ T5800] ? kthread_blkcg+0xd0/0xd0 [ 1356.760845][ T5800] ret_from_fork+0x48/0x80 [ 1356.765286][ T5800] ? kthread_blkcg+0xd0/0xd0 [ 1356.769888][ T5800] ret_from_fork_asm+0x11/0x20 [ 1356.774698][ T5800] [ 1356.782129][ T5800] kobject: kobject_add_internal failed for hci4:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 1356.797141][ T5800] Bluetooth: hci4: failed to register connection device [ 1358.249316][T15273] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2379'. [ 1358.310422][T12262] Bluetooth: hci3: command 0x0406 tx timeout [ 1358.833624][T15287] loop4: detected capacity change from 0 to 512 [ 1358.843912][T15287] UDF-fs: bad mount option "obj_user=-]" or missing value [ 1358.874675][T12262] Bluetooth: hci4: command tx timeout [ 1361.923773][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.936906][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 1362.224426][T15313] netlink: 56 bytes leftover after parsing attributes in process `syz.8.2387'. [ 1363.312666][T15331] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2392'. [ 1366.715717][T15342] wireguard0: entered promiscuous mode [ 1366.755254][T15342] wireguard0: entered allmulticast mode [ 1368.383411][T15361] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 1368.390002][T15361] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1368.399223][T15361] vhci_hcd vhci_hcd.0: Device attached [ 1369.275742][T15362] vhci_hcd: connection closed [ 1369.340060][T11738] vhci_hcd: stop threads [ 1369.349686][T11738] vhci_hcd: release socket [ 1369.669423][T11738] vhci_hcd: disconnect device [ 1369.768173][T11629] vhci_hcd: vhci_device speed not set [ 1369.861798][T15373] fuse: Unknown parameter 'fd0x0000000000000004' [ 1371.009554][T15381] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1371.253258][T15381] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1371.520405][T15392] autofs4:pid:15392:autofs_fill_super: called with bogus options [ 1372.397922][T15381] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1372.448986][T15381] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1372.472828][T15381] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1372.496538][T15381] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1372.511435][T15381] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1372.578384][T15381] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1372.605163][T15381] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1372.623879][T15381] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1372.630810][T12262] Bluetooth: hci3: command 0x0406 tx timeout [ 1372.723632][T15381] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1372.745863][T15381] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1372.773384][T15381] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1372.804785][T15381] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1372.850740][T15381] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1373.051472][T15381] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1373.078557][T15381] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1374.605562][T15411] autofs4:pid:15411:autofs_fill_super: called with bogus options [ 1374.625873][T12262] Bluetooth: hci1: command 0x0c1a tx timeout [ 1374.704914][T12262] Bluetooth: hci3: command 0x0406 tx timeout [ 1374.784875][T12262] Bluetooth: hci4: command 0x0c1a tx timeout [ 1375.237425][T15435] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2409'. [ 1375.615579][T15445] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2411'. [ 1376.708528][T12262] Bluetooth: hci1: command 0x0c1a tx timeout [ 1376.784679][T12262] Bluetooth: hci3: command 0x0406 tx timeout [ 1376.864589][T12262] Bluetooth: hci4: command 0x0c1a tx timeout [ 1377.321725][T15457] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2413'. [ 1379.294600][T12262] Bluetooth: hci1: command 0x0c1a tx timeout [ 1379.300718][T12262] Bluetooth: hci3: command 0x0406 tx timeout [ 1379.306930][T12262] Bluetooth: hci4: command 0x0c1a tx timeout [ 1380.989215][T15483] netlink: 804 bytes leftover after parsing attributes in process `syz.8.2419'. [ 1381.449172][ T5800] Bluetooth: hci4: command 0x0c1a tx timeout [ 1381.459332][T12262] Bluetooth: hci3: command 0x0406 tx timeout [ 1381.465582][T12262] Bluetooth: hci1: command 0x0c1a tx timeout [ 1382.954672][T15498] overlayfs: failed to clone upperpath [ 1383.514599][T12284] Bluetooth: hci4: command 0x0c1a tx timeout [ 1383.520782][ T5800] Bluetooth: hci3: command 0x0406 tx timeout [ 1383.520783][T15488] Bluetooth: hci1: command 0x0c1a tx timeout [ 1386.246475][T15488] Bluetooth: hci3: command 0x0406 tx timeout [ 1388.314772][T12284] Bluetooth: hci3: command 0x0406 tx timeout [ 1388.359699][T15555] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2430'. [ 1388.428871][T15557] netlink: 'syz.8.2431': attribute type 3 has an invalid length. [ 1389.820137][T15572] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2433'. [ 1391.320962][T15591] netlink: 56 bytes leftover after parsing attributes in process `syz.8.2436'. [ 1394.776192][T15632] netlink: 'syz.4.2441': attribute type 10 has an invalid length. [ 1395.091945][T15632] team0: Cannot enslave team device to itself [ 1395.273964][T15633] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2443'. [ 1396.189215][T15642] netlink: 56 bytes leftover after parsing attributes in process `syz.8.2445'. [ 1397.642504][T15658] netlink: 'syz.0.2446': attribute type 10 has an invalid length. [ 1397.689602][T15658] team0: Cannot enslave team device to itself [ 1398.443594][T15669] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2449'. [ 1400.902066][T15699] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2453'. [ 1401.228812][T15702] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2454'. [ 1401.465917][T15708] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2455'. [ 1403.412485][T15743] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2457'. [ 1405.535343][T15749] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2461'. [ 1408.479656][T15780] netlink: 'syz.0.2464': attribute type 10 has an invalid length. [ 1408.487942][T15780] team0: Cannot enslave team device to itself [ 1409.454409][T15787] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2467'. [ 1409.796571][T15791] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2468'. [ 1412.415304][T15806] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2471'. [ 1412.923053][T15814] netlink: 56 bytes leftover after parsing attributes in process `syz.8.2472'. [ 1419.329113][T12284] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 1419.340871][T12284] CPU: 0 PID: 12284 Comm: kworker/u5:4 Not tainted syzkaller #0 [ 1419.348558][T12284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1419.358653][T12284] Workqueue: hci3 hci_rx_work [ 1419.363353][T12284] Call Trace: [ 1419.366637][T12284] [ 1419.369590][T12284] dump_stack_lvl+0x16c/0x230 [ 1419.374285][T12284] ? show_regs_print_info+0x20/0x20 [ 1419.379598][T12284] ? load_image+0x3b0/0x3b0 [ 1419.384121][T12284] sysfs_create_dir_ns+0x256/0x280 [ 1419.389427][T12284] ? hci_rx_work+0x43a/0xd80 [ 1419.394029][T12284] ? sysfs_warn_dup+0xa0/0xa0 [ 1419.398739][T12284] ? do_raw_spin_unlock+0x121/0x230 [ 1419.403976][T12284] kobject_add_internal+0x6b8/0xc70 [ 1419.409288][T12284] kobject_add+0x156/0x220 [ 1419.413733][T12284] ? __rwlock_init+0x150/0x150 [ 1419.418534][T12284] ? kobject_init+0x1e0/0x1e0 [ 1419.423228][T12284] ? _raw_spin_unlock+0x28/0x40 [ 1419.428104][T12284] ? get_device_parent+0x366/0x390 [ 1419.433239][T12284] device_add+0x408/0xc20 [ 1419.437678][T12284] hci_conn_add_sysfs+0xd5/0x1e0 [ 1419.442642][T12284] le_conn_complete_evt+0xf36/0x1500 [ 1419.448017][T12284] ? hci_event_packet+0x4a7/0x1210 [ 1419.453183][T12284] ? hci_le_big_info_adv_report_evt+0x8e0/0x8e0 [ 1419.459454][T12284] ? __copy_skb_header+0xa7/0x550 [ 1419.464512][T12284] ? __mutex_unlock_slowpath+0x1a2/0x6a0 [ 1419.470179][T12284] ? skb_pull_data+0xfb/0x200 [ 1419.474878][T12284] hci_le_conn_complete_evt+0x187/0x440 [ 1419.480468][T12284] ? hci_remote_host_features_evt+0x160/0x160 [ 1419.486558][T12284] hci_event_packet+0x795/0x1210 [ 1419.491619][T12284] ? bis_list+0x290/0x290 [ 1419.495969][T12284] ? lockdep_hardirqs_on+0x98/0x150 [ 1419.501186][T12284] ? hci_send_to_monitor+0xd7/0x4f0 [ 1419.506406][T12284] hci_rx_work+0x43a/0xd80 [ 1419.510865][T12284] ? process_scheduled_works+0x957/0x15b0 [ 1419.516603][T12284] process_scheduled_works+0xa45/0x15b0 [ 1419.522223][T12284] ? assign_work+0x400/0x400 [ 1419.526841][T12284] ? assign_work+0x39e/0x400 [ 1419.531450][T12284] worker_thread+0xa55/0xfc0 [ 1419.536083][T12284] kthread+0x2fa/0x390 [ 1419.540171][T12284] ? pr_cont_work+0x560/0x560 [ 1419.544865][T12284] ? kthread_blkcg+0xd0/0xd0 [ 1419.549495][T12284] ret_from_fork+0x48/0x80 [ 1419.553928][T12284] ? kthread_blkcg+0xd0/0xd0 [ 1419.558527][T12284] ret_from_fork_asm+0x11/0x20 [ 1419.563320][T12284] [ 1419.575045][T12284] kobject: kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 1419.589537][T12284] Bluetooth: hci3: failed to register connection device [ 1421.305949][T15875] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2477'. [ 1421.326505][T15873] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1421.462461][T15873] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1421.548273][T15873] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1421.624225][T15873] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1421.674823][T15873] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1422.321550][T15884] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2481'. [ 1423.124587][T12284] Bluetooth: hci3: command 0x0406 tx timeout [ 1423.272878][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.279506][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.678584][T12284] Bluetooth: hci1: command 0x0c1a tx timeout [ 1423.748710][T12284] Bluetooth: hci4: command 0x0c1a tx timeout [ 1425.194778][T12284] Bluetooth: hci3: command 0x0406 tx timeout [ 1425.503150][T15925] netlink: 'syz.4.2489': attribute type 10 has an invalid length. [ 1426.955218][T15925] team0: Cannot enslave team device to itself [ 1427.344615][T12284] Bluetooth: hci3: command 0x0406 tx timeout [ 1429.340590][T15960] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2492'. [ 1429.546997][T15961] netlink: 56 bytes leftover after parsing attributes in process `syz.8.2493'. [ 1430.335388][T15488] Bluetooth: hci1: command 0x0c1a tx timeout [ 1431.247846][T15968] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2494'. [ 1432.600804][T15981] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2495'. [ 1432.652425][T15980] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2496'. [ 1432.848525][T15985] wireguard0: entered promiscuous mode [ 1432.861366][T15985] wireguard0: entered allmulticast mode [ 1441.539185][T16052] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2507'. [ 1443.871347][T16081] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2515'. [ 1444.024643][T16081] wireguard0: entered promiscuous mode [ 1444.030179][T16081] wireguard0: entered allmulticast mode [ 1449.324332][T16115] netlink: 56 bytes leftover after parsing attributes in process `syz.8.2519'. [ 1452.108660][T16129] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1453.336993][T16148] netlink: 'syz.8.2524': attribute type 3 has an invalid length. [ 1457.646116][T16165] autofs4:pid:16165:autofs_fill_super: called with bogus options [ 1459.235432][T16175] overlayfs: failed to clone upperpath [ 1463.663200][T16188] lo: entered allmulticast mode [ 1463.829583][T16193] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2535'. [ 1466.251910][T16203] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1466.403665][T16207] wireguard0: entered promiscuous mode [ 1466.414097][T16207] wireguard0: entered allmulticast mode [ 1471.935176][T16257] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2543'. [ 1472.864248][T16257] wireguard0: entered promiscuous mode [ 1472.911699][T16257] wireguard0: entered allmulticast mode [ 1473.019744][T16264] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2544'. [ 1473.068249][T16266] wireguard0: entered promiscuous mode [ 1473.081279][T16266] wireguard0: entered allmulticast mode [ 1474.925721][T16288] overlayfs: failed to clone upperpath [ 1475.532399][T16290] netlink: 56 bytes leftover after parsing attributes in process `syz.8.2546'. [ 1476.141603][T16291] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2547'. [ 1476.487333][T16298] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2549'. [ 1477.884290][T16309] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2550'. [ 1477.951075][T16310] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2551'. [ 1478.140412][T16313] 9pnet_virtio: no channels available for device syz [ 1478.210149][T16313] overlayfs: failed to clone upperpath [ 1478.411750][T16315] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2552'. [ 1480.429748][T16329] 9pnet_virtio: no channels available for device syz [ 1480.953027][T16329] overlayfs: failed to clone upperpath [ 1481.044982][T16332] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2554'. [ 1481.359619][T16338] random: crng reseeded on system resumption [ 1485.899643][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 1485.906361][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 1493.314395][T16388] 9pnet_virtio: no channels available for device syz [ 1493.324989][T16388] overlayfs: failed to clone upperpath [ 1493.563729][T16388] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2563'. [ 1494.160147][T16399] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2562'. [ 1495.406019][T16406] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2565'. [ 1496.132709][T16408] wireguard0: entered promiscuous mode [ 1496.150517][T16408] wireguard0: entered allmulticast mode [ 1498.838763][T16443] netlink: 'syz.2.2570': attribute type 10 has an invalid length. [ 1498.876364][T16443] team0: Cannot enslave team device to itself [ 1500.060010][ T28] audit: type=1326 audit(1762402674.217:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16445 comm="syz.4.2572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f690458f6c9 code=0x7ffc0000 [ 1500.356771][ T28] audit: type=1326 audit(1762402674.217:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16445 comm="syz.4.2572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f690458f6c9 code=0x7ffc0000 [ 1500.513838][ T28] audit: type=1326 audit(1762402674.217:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16445 comm="syz.4.2572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f690458f6c9 code=0x7ffc0000 [ 1500.748794][ T28] audit: type=1326 audit(1762402674.257:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16445 comm="syz.4.2572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f690458f6c9 code=0x7ffc0000 [ 1500.778115][T16455] Bluetooth: MGMT ver 1.22 [ 1500.795108][ T28] audit: type=1326 audit(1762402674.257:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16445 comm="syz.4.2572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f690458f6c9 code=0x7ffc0000 [ 1500.878036][ T28] audit: type=1326 audit(1762402674.257:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16445 comm="syz.4.2572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f690458f6c9 code=0x7ffc0000 [ 1500.969190][ T28] audit: type=1326 audit(1762402674.437:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16445 comm="syz.4.2572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f690458f6c9 code=0x7ffc0000 [ 1501.045954][ T28] audit: type=1326 audit(1762402674.437:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16445 comm="syz.4.2572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f690458f6c9 code=0x7ffc0000 [ 1501.066396][T16461] bridge_slave_0: left allmulticast mode [ 1501.092371][T16461] bridge_slave_0: left promiscuous mode [ 1501.118713][T16461] bridge0: port 1(bridge_slave_0) entered disabled state [ 1501.221233][T16461] bridge_slave_1: left allmulticast mode [ 1501.232135][T16461] bridge_slave_1: left promiscuous mode [ 1501.257294][T16461] bridge0: port 2(bridge_slave_1) entered disabled state [ 1501.292671][T16461] bond0: (slave bond_slave_0): Releasing backup interface [ 1501.341557][T16461] bond0: (slave bond_slave_1): Releasing backup interface [ 1501.418249][T16461] team0: Port device team_slave_0 removed [ 1501.472558][T16461] team0: Port device team_slave_1 removed [ 1501.490282][T16461] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1501.501024][T16461] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1501.513016][T16461] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1501.513460][ T28] audit: type=1326 audit(1762402674.437:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16445 comm="syz.4.2572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f690458f6c9 code=0x7ffc0000 [ 1501.532025][T16461] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1501.624020][T16463] team0: Mode changed to "loadbalance" [ 1501.721504][ T28] audit: type=1326 audit(1762402674.437:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16445 comm="syz.4.2572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f690458f6c9 code=0x7ffc0000 [ 1501.904593][T15488] Bluetooth: hci3: command 0x0406 tx timeout [ 1502.693984][T16499] netlink: 'syz.8.2586': attribute type 10 has an invalid length. [ 1502.719979][T16499] team0: Device veth0_vlan is up. Set it down before adding it as a team port [ 1502.986817][T16477] loop4: detected capacity change from 0 to 32768 [ 1503.134838][T16511] bridge0: port 1(bridge_slave_0) entered disabled state [ 1503.152314][T16511] bridge0: port 2(bridge_slave_1) entered disabled state [ 1503.260065][T16513] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2591'. [ 1503.270043][T16515] netlink: 'syz.8.2590': attribute type 16 has an invalid length. [ 1503.300218][T16515] netlink: 'syz.8.2590': attribute type 17 has an invalid length. [ 1503.394073][T16515] 8021q: adding VLAN 0 to HW filter on device team0 [ 1503.422193][T16515] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1504.943531][T16537] loop4: detected capacity change from 0 to 4096 [ 1505.018618][T16537] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1506.932321][T14564] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1507.255453][T16578] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2603'. [ 1513.098429][T16643] vxfs: WRONG superblock magic 00000000 at 1 [ 1513.106646][T16643] vxfs: WRONG superblock magic 00000000 at 8 [ 1513.113156][T16643] vxfs: can't find superblock. [ 1515.085766][T16664] loop4: detected capacity change from 0 to 40427 [ 1515.133661][T16664] F2FS-fs (loop4): LFS is not compatible with checkpoint=disable [ 1517.651516][T16724] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1518.964672][ T789] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 1520.518713][ T789] usb 5-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 1520.564561][ T789] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1520.599863][ T789] usb 5-1: Product: syz [ 1520.612068][ T789] usb 5-1: Manufacturer: syz [ 1520.776915][ T789] usb 5-1: SerialNumber: syz [ 1520.848056][ T789] usb 5-1: config 0 descriptor?? [ 1522.264723][ T789] usb 5-1: can't set config #0, error -71 [ 1522.283231][ T789] usb 5-1: USB disconnect, device number 2 [ 1524.188465][T16783] netlink: 'syz.0.2645': attribute type 3 has an invalid length. [ 1524.217256][ T28] kauditd_printk_skb: 61 callbacks suppressed [ 1524.217274][ T28] audit: type=1326 audit(1762402698.367:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16784 comm="syz.4.2646" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f690458f6c9 code=0x0 [ 1526.636789][T16808] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2650'. [ 1529.349839][T16814] loop4: detected capacity change from 0 to 32768 [ 1529.521089][T16814] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 scanned by syz.4.2651 (16814) [ 1529.633290][T16814] BTRFS info (device loop4): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 1529.645108][T16814] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 1529.655431][T16814] BTRFS info (device loop4): using free space tree [ 1530.132321][T16866] No such timeout policy "syz1" [ 1531.260930][T16872] overlayfs: failed to clone lowerpath [ 1531.916819][T16814] BTRFS error (device loop4): open_ctree failed: -4 [ 1533.911473][T16899] netlink: 256 bytes leftover after parsing attributes in process `syz.8.2665'. [ 1533.935003][T16899] unsupported nlmsg_type 40 [ 1536.855885][T16956] netlink: 'syz.2.2673': attribute type 11 has an invalid length. [ 1536.863786][T16956] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2673'. [ 1537.105861][T16963] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2679'. [ 1537.285712][ T789] libceph: connect (1)[c::]:6789 error -101 [ 1537.292771][ T789] libceph: mon0 (1)[c::]:6789 connect error [ 1537.536052][T16967] ceph: No mds server is up or the cluster is laggy [ 1537.549582][ T789] libceph: connect (1)[c::]:6789 error -101 [ 1537.563875][ T789] libceph: mon0 (1)[c::]:6789 connect error [ 1538.367319][ T789] libceph: connect (1)[c::]:6789 error -101 [ 1538.373486][ T789] libceph: mon0 (1)[c::]:6789 connect error [ 1539.307538][T16992] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2684'. [ 1540.718197][T16995] kthread_run failed with err -4 [ 1542.772022][T17027] netlink: 'syz.4.2690': attribute type 27 has an invalid length. [ 1543.584823][T16283] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 1543.809464][T16283] usb 5-1: Using ep0 maxpacket: 32 [ 1543.840613][T16283] usb 5-1: config 0 has an invalid interface number: 66 but max is 0 [ 1543.880740][T16283] usb 5-1: config 0 has no interface number 0 [ 1543.950549][T16283] usb 5-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 1544.000832][T16283] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1544.023576][T16283] usb 5-1: Product: syz [ 1544.045106][T16283] usb 5-1: Manufacturer: syz [ 1544.049770][T16283] usb 5-1: SerialNumber: syz [ 1544.076112][T16283] usb 5-1: config 0 descriptor?? [ 1544.125111][T16283] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 1544.155247][T16283] dvb-usb: bulk message failed: -22 (2/0) [ 1544.200696][T16283] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1544.235235][T16283] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 1544.277521][T16283] usb 5-1: media controller created [ 1544.401837][T16283] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1544.486556][T16283] cxusb: set interface failed [ 1544.495746][T17050] gretap0: entered promiscuous mode [ 1544.498617][T16283] dvb-usb: bulk message failed: -22 (1/0) [ 1544.700401][T16283] DVB: Unable to find symbol lgdt330x_attach() [ 1544.725425][T16283] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 1544.964815][T16283] rc_core: IR keymap rc-dvico-portable not found [ 1544.980350][T16283] Registered IR keymap rc-empty [ 1545.017506][T16283] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 1545.042552][T17062] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2697'. [ 1545.065481][T16283] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input5 [ 1545.128653][T16283] dvb-usb: schedule remote query interval to 100 msecs. [ 1545.155478][T16283] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 1545.235525][T16283] usb 5-1: USB disconnect, device number 3 [ 1545.514375][T16283] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 1546.154026][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.161416][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.909172][T17077] loop4: detected capacity change from 0 to 32768 [ 1547.011539][T17077] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1547.304652][T17077] XFS (loop4): Ending clean mount [ 1547.389215][T17077] XFS (loop4): Quotacheck needed: Please wait. [ 1547.624622][T17077] XFS (loop4): Quotacheck: Done. [ 1548.024886][T14564] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1553.073326][T17147] batadv_slave_1: entered promiscuous mode [ 1553.080970][T17147] batadv_slave_1: left promiscuous mode [ 1553.673867][T17154] loop4: detected capacity change from 0 to 512 [ 1553.777032][T17154] EXT4-fs: Ignoring removed oldalloc option [ 1553.812051][T17154] EXT4-fs: Mount option(s) incompatible with ext2 [ 1553.995805][T17157] bridge_slave_0: left allmulticast mode [ 1554.002640][T17157] bridge_slave_0: left promiscuous mode [ 1554.025579][T17157] bridge0: port 1(bridge_slave_0) entered disabled state [ 1554.047559][T17157] bridge_slave_1: left allmulticast mode [ 1554.053279][T17157] bridge_slave_1: left promiscuous mode [ 1554.091561][T17157] bridge0: port 2(bridge_slave_1) entered disabled state [ 1554.135220][T17157] bond0: (slave bond_slave_0): Releasing backup interface [ 1554.187182][T17157] bond0: (slave bond_slave_1): Releasing backup interface [ 1554.619684][T17157] team0: Port device team_slave_0 removed [ 1555.467845][T17157] team0: Port device team_slave_1 removed [ 1555.492076][T17157] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1555.520348][T17157] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1555.537445][T17157] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1555.555589][T17157] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1555.572602][T17160] team0: Mode changed to "activebackup" [ 1555.844571][T17165] : renamed from bridge_slave_0 (while UP) [ 1559.304903][T17226] v: renamed from ip6_vti0 (while UP) [ 1565.547451][T17273] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2734'. [ 1565.591811][T17273] !60X: renamed from caif0 [ 1565.672480][T17273] !60X: entered allmulticast mode [ 1565.690656][T17273] A link change request failed with some changes committed already. Interface !60X may have been left with an inconsistent configuration, please check. [ 1565.773436][T17257] loop4: detected capacity change from 0 to 32768 [ 1565.798811][T17257] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 scanned by syz.4.2731 (17257) [ 1565.839187][T17257] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 1565.920028][T17257] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 1565.961514][T17257] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 1565.986255][T17257] BTRFS info (device loop4): use zstd compression, level 3 [ 1566.011066][T17257] BTRFS info (device loop4): using free space tree [ 1566.977615][T17257] BTRFS info (device loop4): enabling ssd optimizations [ 1567.044923][T17257] BTRFS info (device loop4): auto enabling async discard [ 1568.804225][T14564] BTRFS info (device loop4): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 1569.031598][ T789] IPVS: starting estimator thread 0... [ 1569.174844][T17323] IPVS: using max 26 ests per chain, 62400 per kthread [ 1577.680477][T17372] loop4: detected capacity change from 0 to 32768 [ 1577.732011][T17372] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.2755 (17372) [ 1577.753983][T17372] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1577.773464][T17372] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 1577.794154][T17372] BTRFS info (device loop4): using free space tree [ 1578.094755][T17372] BTRFS info (device loop4): enabling ssd optimizations [ 1578.121998][T17372] BTRFS info (device loop4): auto enabling async discard [ 1578.717840][T14564] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1579.088921][T17244] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 9 /dev/loop4 scanned by udevd (17244) [ 1579.124754][ T9757] IPVS: starting estimator thread 0... [ 1579.169268][T17421] IPVS: nq: FWM 3 0x00000003 - no destination available [ 1579.271112][T17423] IPVS: using max 26 ests per chain, 62400 per kthread [ 1579.887036][T17431] netlink: 45 bytes leftover after parsing attributes in process `syz.4.2762'. [ 1583.164877][T17457] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2768'. [ 1583.174309][T17457] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2768'. [ 1589.983361][T17508] 8021q: adding VLAN 0 to HW filter on device team0 [ 1590.025908][T17508] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1590.647811][T17525] loop4: detected capacity change from 0 to 128 [ 1590.799486][T17530] netlink: 45 bytes leftover after parsing attributes in process `syz.4.2784'. [ 1590.838182][T17530] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2784'. [ 1591.692353][ T23] IPVS: starting estimator thread 0... [ 1591.934638][T17537] IPVS: using max 15 ests per chain, 36000 per kthread [ 1592.211455][T17546] lo speed is unknown, defaulting to 1000 [ 1592.217998][T17546] lo speed is unknown, defaulting to 1000 [ 1592.228289][T17546] lo speed is unknown, defaulting to 1000 [ 1592.246212][T17546] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 1592.279601][T17546] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 1592.332757][T17546] lo speed is unknown, defaulting to 1000 [ 1592.352329][T17549] loop4: detected capacity change from 0 to 1024 [ 1592.357719][T17546] lo speed is unknown, defaulting to 1000 [ 1592.369942][T17546] lo speed is unknown, defaulting to 1000 [ 1592.422548][T17546] lo speed is unknown, defaulting to 1000 [ 1592.652809][T17549] EXT4-fs: Ignoring removed i_version option [ 1592.691732][T17549] EXT4-fs: inline encryption not supported [ 1592.718295][T17549] EXT4-fs (loop4): Test dummy encryption mode enabled [ 1592.781686][T17549] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1594.333719][T14564] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1594.662437][T17586] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2795'. [ 1602.594687][T17667] bridge0: port 1(gretap0) entered blocking state [ 1602.602156][T17667] bridge0: port 1(gretap0) entered disabled state [ 1602.610410][T17667] gretap0: entered allmulticast mode [ 1602.630101][T17667] gretap0: entered promiscuous mode [ 1602.642641][T17667] bridge0: port 1(gretap0) entered blocking state [ 1602.649606][T17667] bridge0: port 1(gretap0) entered forwarding state [ 1603.638444][T17674] (null): rxe_set_mtu: Set mtu to 4096 [ 1604.309885][T17672] lo speed is unknown, defaulting to 1000 [ 1604.378831][T17674] lo speed is unknown, defaulting to 1000 [ 1604.439075][T17674] lo speed is unknown, defaulting to 1000 [ 1604.445798][T17674] lo speed is unknown, defaulting to 1000 [ 1605.037312][T17674] infiniband sz1: set active [ 1605.047363][T17674] infiniband sz1: added lo [ 1605.055464][ T5850] lo speed is unknown, defaulting to 1000 [ 1605.069499][T17674] sz1: rxe_create_cq: returned err = -12 [ 1605.096725][T17674] infiniband sz1: Couldn't create ib_mad CQ [ 1605.103219][T17674] infiniband sz1: Couldn't open port 1 [ 1605.210452][T17674] RDS/IB: sz1: added [ 1605.219248][T17674] smc: adding ib device sz1 with port count 1 [ 1605.227701][T17674] smc: ib device sz1 port 1 has pnetid [ 1605.236533][ T5850] lo speed is unknown, defaulting to 1000 [ 1605.247245][T17674] lo speed is unknown, defaulting to 1000 [ 1605.642728][T17674] lo speed is unknown, defaulting to 1000 [ 1607.080722][T17674] lo speed is unknown, defaulting to 1000 [ 1607.466679][T17674] lo speed is unknown, defaulting to 1000 [ 1607.592527][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.599034][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 1607.707311][T17674] lo speed is unknown, defaulting to 1000 [ 1608.761433][T17756] sz1: rxe_set_mtu: Set mtu to 256 [ 1608.971142][T17756] infiniband sz1: set active [ 1609.474274][T11629] lo speed is unknown, defaulting to 1000 [ 1609.506063][T17755] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1609.973382][T17772] loop4: detected capacity change from 0 to 512 [ 1610.056645][T17772] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #15: comm syz.4.2833: inode has both inline data and extents flags [ 1610.154799][T17772] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.2833: couldn't read orphan inode 15 (err -117) [ 1610.246865][T17772] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1610.848418][ T28] audit: type=1804 audit(1762402785.007:78): pid=17788 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2833" name="/newroot/131/file0/bus" dev="loop4" ino=18 res=1 errno=0 [ 1610.886190][T17788] Invalid ELF header magic: != ELF [ 1611.074466][ T28] audit: type=1800 audit(1762402785.007:79): pid=17788 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2833" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 1615.965078][T17826] vxcan1: entered allmulticast mode [ 1616.356608][T14564] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1617.709156][T17863] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2854'. [ 1618.187165][T17844] loop4: detected capacity change from 0 to 32768 [ 1618.367187][T17844] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 1618.521820][T17844] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 1619.180480][T17844] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 1619.457531][T12785] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 1619.524649][T12785] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 1620.021238][T12785] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 496ms [ 1620.102869][T12785] gfs2: fsid=syz:syz.0: jid=0: Done [ 1620.151336][T17844] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 1620.212608][T17844] gfs2: fsid=syz:syz.0: can't create logd thread: -4 [ 1620.974818][T17902] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2862'. [ 1622.207032][T17916] Cannot find add_set index 0 as target [ 1622.249791][T17918] xt_l2tp: missing protocol rule (udp|l2tpip) [ 1622.455708][T17920] vxfs: WRONG superblock magic 00000000 at 1 [ 1622.466144][T17920] vxfs: WRONG superblock magic 00000000 at 8 [ 1622.472239][T17920] vxfs: can't find superblock. [ 1624.436541][T17938] loop4: detected capacity change from 0 to 2048 [ 1624.492787][T17938] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1624.577008][T17938] ext4 filesystem being mounted at /137/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1625.298386][T17956] EXT4-fs error (device loop4): ext4_xattr_block_find:1891: inode #15: comm syz.4.2870: corrupted xattr block 128: invalid ea_ino [ 1625.512932][T17958] Invalid ELF header magic: != ELF [ 1626.357459][T17943] EXT4-fs error (device loop4): ext4_validate_block_bitmap:439: comm ext4lazyinit: bg 0: block 345: padding at end of block bitmap is not set [ 1626.473387][T14564] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1626.700136][T17965] overlayfs: failed to clone lowerpath [ 1631.128250][T18015] netlink: 'syz.4.2885': attribute type 27 has an invalid length. [ 1632.001347][T15488] Bluetooth: hci4: command 0x0c1a tx timeout [ 1632.860721][T18032] kAFS: unable to lookup cell '' [ 1633.692194][T18040] 9pnet: Could not find request transport: 0xffffffffffffffff [ 1634.070781][T18022] loop4: detected capacity change from 0 to 32768 [ 1634.125891][T18022] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1634.341248][T18022] XFS (loop4): Ending clean mount [ 1635.717799][T14564] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1638.297934][T18115] bridge1: entered promiscuous mode [ 1640.267946][T18139] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2911'. [ 1645.920542][T18189] loop4: detected capacity change from 0 to 2048 [ 1646.110422][T18189] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1648.400283][T14564] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1648.680772][T18221] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2929'. [ 1649.309828][T11629] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1649.350700][T11629] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1649.584902][T16283] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 1649.604926][T18239] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2932'. [ 1649.696730][T18241] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2940'. [ 1649.830505][T16283] usb 5-1: config 0 has no interfaces? [ 1649.858472][T16283] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1650.064139][T16283] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1650.110235][T16283] usb 5-1: SerialNumber: syz [ 1650.212838][T16283] usb 5-1: config 0 descriptor?? [ 1652.122232][ T788] usb 5-1: USB disconnect, device number 4 [ 1654.959269][T18359] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2953'. [ 1658.620026][T18398] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2962'. [ 1661.670235][T18424] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2968'. [ 1661.686935][T18410] lo speed is unknown, defaulting to 1000 [ 1661.706760][T18410] lo speed is unknown, defaulting to 1000 [ 1669.183322][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 1669.189718][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 1669.744122][T18481] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2980'. [ 1671.351211][ T28] audit: type=1326 audit(1762402845.467:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18521 comm="syz.4.2986" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f690458f6c9 code=0x0 [ 1673.645095][T18561] overlayfs: failed to clone lowerpath [ 1675.351660][T18567] lo speed is unknown, defaulting to 1000 [ 1675.358760][T18567] lo speed is unknown, defaulting to 1000 [ 1678.131816][T18589] netlink: 'syz.4.2998': attribute type 1 has an invalid length. [ 1678.139728][T18589] netlink: 'syz.4.2998': attribute type 4 has an invalid length. [ 1678.147641][T18589] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.2998'. [ 1685.053244][T18660] syz.0.3012 uses obsolete (PF_INET,SOCK_PACKET) [ 1685.716823][T18668] bridge0: port 3(gretap0) entered blocking state [ 1685.723458][T18668] bridge0: port 3(gretap0) entered disabled state [ 1685.730361][T18668] gretap0: entered allmulticast mode [ 1685.738187][T18668] bridge0: port 3(gretap0) entered blocking state [ 1685.746058][T18668] bridge0: port 3(gretap0) entered forwarding state [ 1692.557252][T18727] : left allmulticast mode [ 1692.561956][T18727] : left promiscuous mode [ 1692.567152][T18727] bridge0: port 1() entered disabled state [ 1692.579542][T18727] bridge_slave_1: left allmulticast mode [ 1692.592205][T18727] bridge_slave_1: left promiscuous mode [ 1692.624830][T18727] bridge0: port 2(bridge_slave_1) entered disabled state [ 1692.741969][T18727] bond0: (slave bond_slave_0): Releasing backup interface [ 1692.782392][T18727] bond0: (slave bond_slave_1): Releasing backup interface [ 1692.889801][T18727] team0: Port device team_slave_0 removed [ 1692.964167][T18727] team0: Port device team_slave_1 removed [ 1692.997690][T18727] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1693.034529][T18727] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1693.083182][T18727] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1693.166507][T18727] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1693.265654][T18728] team0: Mode changed to "activebackup" [ 1697.821569][T18791] infiniband sz1: set active [ 1697.831996][T18791] gretap0: left allmulticast mode [ 1697.843065][T18791] gretap0: left promiscuous mode [ 1697.849601][T18791] bridge0: port 1(gretap0) entered disabled state [ 1698.024531][ T27] lo speed is unknown, defaulting to 1000 [ 1698.445306][T18792] team0: Mode changed to "activebackup" [ 1700.674682][T18808] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3044'. [ 1702.252554][T18823] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3045'. [ 1705.943989][T18879] overlayfs: missing 'lowerdir' [ 1709.262052][T18913] xt_connbytes: Forcing CT accounting to be enabled [ 1709.269150][T18913] Cannot find set identified by id 0 to match [ 1710.248794][T18927] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3070'. [ 1711.302698][T18929] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3071'. [ 1712.009650][T18946] infiniband sz1: set active [ 1712.021405][T18938] trusted_key: encrypted_key: master key parameter 'use' is invalid [ 1712.080250][T11239] lo speed is unknown, defaulting to 1000 [ 1713.065866][T18962] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3081'. [ 1715.496056][T19016] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3097'. [ 1718.435788][T19045] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1719.842575][T19065] netlink: 45 bytes leftover after parsing attributes in process `syz.0.3110'. [ 1719.876413][T19068] netlink: 'syz.4.3108': attribute type 1 has an invalid length. [ 1720.804428][ T28] audit: type=1326 audit(1762402894.947:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19083 comm="syz.8.3115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1807d8f6c9 code=0x7ffc0000 [ 1720.916300][ T28] audit: type=1326 audit(1762402894.947:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19083 comm="syz.8.3115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1807d8f6c9 code=0x7ffc0000 [ 1721.029756][ T28] audit: type=1326 audit(1762402894.947:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19083 comm="syz.8.3115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1807d8f6c9 code=0x7ffc0000 [ 1721.117738][ T28] audit: type=1326 audit(1762402894.947:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19083 comm="syz.8.3115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1807d8f6c9 code=0x7ffc0000 [ 1721.140061][ C0] vkms_vblank_simulate: vblank timer overrun [ 1721.201032][ T28] audit: type=1326 audit(1762402894.947:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19083 comm="syz.8.3115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f1807d8f6c9 code=0x7ffc0000 [ 1721.223427][ C0] vkms_vblank_simulate: vblank timer overrun [ 1721.307324][ T28] audit: type=1326 audit(1762402894.947:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19083 comm="syz.8.3115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1807d8f6c9 code=0x7ffc0000 [ 1721.351452][ T28] audit: type=1326 audit(1762402894.947:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19083 comm="syz.8.3115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1807d8f6c9 code=0x7ffc0000 [ 1721.373762][ C0] vkms_vblank_simulate: vblank timer overrun [ 1721.475737][ T28] audit: type=1326 audit(1762402894.947:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19083 comm="syz.8.3115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f1807d8f6c9 code=0x7ffc0000 [ 1721.563407][ T28] audit: type=1326 audit(1762402894.947:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19083 comm="syz.8.3115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f1807d8f6c9 code=0x7ffc0000 [ 1721.760521][ T28] audit: type=1326 audit(1762402895.917:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19113 comm="syz.4.3126" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f690458f6c9 code=0x0 [ 1726.027063][T19164] gretap0: left allmulticast mode [ 1726.049096][T19164] bridge0: port 3(gretap0) entered disabled state [ 1726.126882][T19164] bridge_slave_0: left allmulticast mode [ 1726.148494][T19164] bridge_slave_0: left promiscuous mode [ 1726.176651][T19164] bridge0: port 1(bridge_slave_0) entered disabled state [ 1726.244145][T19164] bridge_slave_1: left allmulticast mode [ 1726.298655][T19164] bridge_slave_1: left promiscuous mode [ 1726.331681][T19164] bridge0: port 2(bridge_slave_1) entered disabled state [ 1726.473013][T19164] bond0: (slave bond_slave_0): Releasing backup interface [ 1726.567421][T19164] bond0: (slave bond_slave_1): Releasing backup interface [ 1726.773187][T19164] team0: Port device team_slave_0 removed [ 1726.927716][T19164] team0: Port device team_slave_1 removed [ 1726.950391][T19164] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1726.958472][T19164] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1727.042378][T19164] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1727.094660][T19164] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1729.273609][T19195] loop4: detected capacity change from 0 to 512 [ 1729.341559][T19195] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802e018, mo2=0002] [ 1729.596598][T19195] System zones: 0-2, 18-18, 34-35 [ 1729.701891][T19195] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1730.425310][T19195] ext4 filesystem being mounted at /207/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1730.477371][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.483752][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 1734.799564][T14564] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1736.556369][T19294] (null): rxe_set_mtu: Set mtu to 4096 [ 1736.584807][T19294] rdma_rxe: rxe_newlink: failed to add lo [ 1737.581311][T15488] Bluetooth: hci1: unexpected Set CIG Parameters response data [ 1737.591544][T15488] Bluetooth: hci1: unexpected event for opcode 0x2062 [ 1740.605106][T19345] team0: Unable to change to the same mode the team is in [ 1741.667662][T15488] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 1741.677653][T15488] Bluetooth: hci1: Injecting HCI hardware error event [ 1741.687281][T15488] Bluetooth: hci1: hardware error 0x00 [ 1744.389109][T15488] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 1746.023233][T19391] team0: Unable to change to the same mode the team is in [ 1749.217923][T19386] lo speed is unknown, defaulting to 1000 [ 1749.266759][T19386] lo speed is unknown, defaulting to 1000 [ 1750.144659][T19420] (unnamed net_device) (uninitialized): option use_carrier: invalid value (245) [ 1750.165856][T19420] overlayfs: failed to clone upperpath [ 1754.862203][ T28] audit: type=1800 audit(1762402928.997:91): pid=19459 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3194" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 1754.871697][T19459] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 1754.905052][T19459] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 1754.928776][T19459] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1755.847562][ T28] audit: type=1326 audit(1762402930.007:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19482 comm="syz.0.3200" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f412958f6c9 code=0x0 [ 1758.404705][ T5781] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 1758.632621][ T5781] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1758.679330][ T5781] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1758.715666][ T5781] usb 5-1: Product: syz [ 1758.734495][ T5781] usb 5-1: Manufacturer: syz [ 1758.739155][ T5781] usb 5-1: SerialNumber: syz [ 1758.796149][ T5781] usb 5-1: config 0 descriptor?? [ 1759.038869][ T5781] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1762.855375][ T5781] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -71 [ 1762.867654][ T5781] usb 5-1: USB disconnect, device number 5 [ 1763.718758][T19561] overlayfs: failed to clone upperpath [ 1763.848834][T19567] sctp: [Deprecated]: syz.4.3221 (pid 19567) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1763.848834][T19567] Use struct sctp_sack_info instead [ 1763.909751][ T28] audit: type=1326 audit(1762402938.057:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19563 comm="syz.2.3218" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5df9f8f6c9 code=0x0 [ 1765.684928][ T28] audit: type=1326 audit(1762402939.837:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19581 comm="syz.8.3225" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1807d8f6c9 code=0x0 [ 1765.706708][ C0] vkms_vblank_simulate: vblank timer overrun [ 1765.911680][T19587] syz.4.3223: attempt to access beyond end of device [ 1765.911680][T19587] loop9: rw=0, sector=0, nr_sectors = 8 limit=0 [ 1765.935782][T19587] F2FS-fs (loop9): Unable to read 1th superblock [ 1765.946420][T19587] syz.4.3223: attempt to access beyond end of device [ 1765.946420][T19587] loop9: rw=0, sector=8, nr_sectors = 8 limit=0 [ 1766.085843][T19595] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1766.755563][T19587] F2FS-fs (loop9): Unable to read 2th superblock [ 1768.139838][T19613] bridge2: entered promiscuous mode [ 1768.145262][T19613] bridge2: entered allmulticast mode [ 1774.904585][T19683] netlink: 80 bytes leftover after parsing attributes in process `syz.8.3244'. [ 1780.123287][T19732] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3256'. [ 1790.503364][T19818] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3273'. [ 1791.919467][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.929899][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 1793.147163][T19916] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3289'. [ 1794.584688][ T28] audit: type=1326 audit(1762402968.737:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19951 comm="syz.4.3298" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f690458f6c9 code=0x0 [ 1794.618151][T19953] team0: Unable to change to the same mode the team is in [ 1796.505826][T19991] infiniband sz1: set active [ 1796.543001][ T9757] lo speed is unknown, defaulting to 1000 [ 1796.563965][T19991] team0: Unable to change to the same mode the team is in [ 1797.356770][ T5781] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 1797.614450][ T5781] usb 5-1: Using ep0 maxpacket: 16 [ 1797.627349][ T5781] usb 5-1: config 2 has an invalid interface number: 4 but max is 0 [ 1797.673482][ T5781] usb 5-1: config 2 has no interface number 0 [ 1797.703210][ T5781] usb 5-1: New USB device found, idVendor=0499, idProduct=1018, bcdDevice=b2.da [ 1797.722968][ T5781] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1797.750118][ T5781] usb 5-1: Product: syz [ 1797.771213][ T5781] usb 5-1: Manufacturer: syz [ 1797.791892][ T5781] usb 5-1: SerialNumber: syz [ 1797.840976][ T5781] usb 5-1: Quirk or no altest; falling back to MIDI 1.0 [ 1797.953589][ T28] audit: type=1326 audit(1762402972.107:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20014 comm="syz.2.3315" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5df9f8f6c9 code=0x0 [ 1798.038721][ T5781] snd-usb-audio: probe of 5-1:2.4 failed with error -2 [ 1798.084901][ T5781] usb 5-1: USB disconnect, device number 6 [ 1798.137018][T20004] udevd[20004]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:2.4/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1799.844270][T20048] team0: Unable to change to the same mode the team is in [ 1800.442932][ T28] audit: type=1326 audit(1762402974.597:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20050 comm="syz.8.3322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1807d8f6c9 code=0x7ffc0000 [ 1800.490804][T20065] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3326'. [ 1800.500533][T20065] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3326'. [ 1800.509704][T20065] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3326'. [ 1800.518960][T20065] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3326'. [ 1800.528091][ T28] audit: type=1326 audit(1762402974.597:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20050 comm="syz.8.3322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1807d8f6c9 code=0x7ffc0000 [ 1800.558263][ T28] audit: type=1326 audit(1762402974.637:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20050 comm="syz.8.3322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f1807d8f6c9 code=0x7ffc0000 [ 1800.689610][ T28] audit: type=1326 audit(1762402974.637:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20050 comm="syz.8.3322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1807d8f6c9 code=0x7ffc0000 [ 1800.714122][ T28] audit: type=1326 audit(1762402974.637:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20050 comm="syz.8.3322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1807d8f6c9 code=0x7ffc0000 [ 1800.781588][ T28] audit: type=1326 audit(1762402974.637:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20050 comm="syz.8.3322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7f1807d8f6c9 code=0x7ffc0000 [ 1800.807556][ T28] audit: type=1326 audit(1762402974.637:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20050 comm="syz.8.3322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1807d8f6c9 code=0x7ffc0000 [ 1800.830296][ T28] audit: type=1326 audit(1762402974.637:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20050 comm="syz.8.3322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1807d8f6c9 code=0x7ffc0000 [ 1800.865282][ T28] audit: type=1326 audit(1762402974.637:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20050 comm="syz.8.3322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=149 compat=0 ip=0x7f1807d8f6c9 code=0x7ffc0000 [ 1803.246373][T20102] infiniband sz1: set active [ 1803.256120][T20103] netlink: 48 bytes leftover after parsing attributes in process `syz.8.3334'. [ 1803.351940][ T5781] lo speed is unknown, defaulting to 1000 [ 1803.357985][T20105] team0: Unable to change to the same mode the team is in [ 1805.531441][T20137] syz.4.3342[20137] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1805.531583][T20137] syz.4.3342[20137] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1807.288866][T20137] tty tty29: ldisc open failed (-12), clearing slot 28 [ 1808.232138][T20158] team0: Mode changed to "activebackup" [ 1810.433275][T20197] batman_adv: batadv0: Adding interface: ipvlan2 [ 1810.453971][T20197] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1810.521571][T20197] batman_adv: batadv0: Interface activated: ipvlan2 [ 1810.583128][T20199] team0: Unable to change to the same mode the team is in [ 1811.445600][T20223] netlink: 'syz.8.3364': attribute type 27 has an invalid length. [ 1811.918564][ T5781] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 1812.812672][ T5781] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 64 [ 1812.859306][ T5781] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 1812.975583][ T5781] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1813.022571][ T5781] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1813.058441][ T5781] usb 5-1: Product: ⃄䔅ᓕ赉룪䁞퐈禂퇥㫧縖蝇ꮔ팳籧㔠䓰Ⳗ [ 1813.111173][ T5781] usb 5-1: Manufacturer: Ћ [ 1813.122920][ T5781] usb 5-1: SerialNumber: ф [ 1813.400423][ T5781] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 1813.418372][ T5781] cdc_ncm 5-1:1.0: bind() failure [ 1813.454398][ T5781] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 1813.483907][ T5781] cdc_ncm 5-1:1.1: bind() failure [ 1816.805652][T20249] usb 5-1: USB disconnect, device number 7 [ 1816.950350][T20223] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1816.963506][T20223] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1816.975916][T20223] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1816.989191][T20223] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1817.120829][T20223] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 1817.354075][T20225] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1817.363111][T20225] 8021q: adding VLAN 0 to HW filter on device team0 [ 1817.373117][T20225] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1817.437878][T20260] team0: Unable to change to the same mode the team is in [ 1817.604967][T20269] vlan2: entered allmulticast mode [ 1817.628467][T20269] hsr_slave_1: entered allmulticast mode [ 1817.897049][ T28] audit: type=1326 audit(1762402992.057:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20281 comm="syz.0.3375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f412958f6c9 code=0x7ffc0000 [ 1817.953672][ T28] audit: type=1326 audit(1762402992.057:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20281 comm="syz.0.3375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f412958f6c9 code=0x7ffc0000 [ 1818.081545][ T28] audit: type=1326 audit(1762402992.057:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20281 comm="syz.0.3375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f412958df10 code=0x7ffc0000 [ 1818.141197][ T28] audit: type=1326 audit(1762402992.057:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20281 comm="syz.0.3375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f412958f6c9 code=0x7ffc0000 [ 1818.282076][ T28] audit: type=1326 audit(1762402992.057:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20281 comm="syz.0.3375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f412958f6c9 code=0x7ffc0000 [ 1818.373326][ T28] audit: type=1326 audit(1762402992.077:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20281 comm="syz.0.3375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f41295915e7 code=0x7ffc0000 [ 1818.506028][ T28] audit: type=1326 audit(1762402992.077:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20281 comm="syz.0.3375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f412959155c code=0x7ffc0000 [ 1818.601103][ T28] audit: type=1326 audit(1762402992.077:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20281 comm="syz.0.3375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f4129591494 code=0x7ffc0000 [ 1818.627343][ T28] audit: type=1326 audit(1762402992.077:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20281 comm="syz.0.3375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f4129591494 code=0x7ffc0000 [ 1819.040973][ T28] audit: type=1326 audit(1762402992.077:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20281 comm="syz.0.3375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f412958e32a code=0x7ffc0000 [ 1820.032233][T20304] team0: Unable to change to the same mode the team is in [ 1820.463803][T20306] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3383'. [ 1820.602911][T20306] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3383'. [ 1820.707010][T20316] netlink: 40 bytes leftover after parsing attributes in process `syz.8.3385'. [ 1822.641146][T20348] team0: Unable to change to the same mode the team is in [ 1824.623439][T18301] tipc: Left network mode [ 1825.837034][T18301] hsr_slave_0: left promiscuous mode [ 1825.843965][T18301] hsr_slave_1: left promiscuous mode [ 1825.863922][T18301] batman_adv: batadv0: Removing interface: ipvlan2 [ 1826.115307][T18298] smc: removing ib device syz2 [ 1827.624958][T18301] bond0 (unregistering): Released all slaves [ 1827.995773][T18301] IPVS: stop unused estimator thread 0... [ 1828.093967][T18301] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1828.188050][T18301] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1828.257719][T18301] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1828.328901][T18301] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1828.472699][T18301] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1828.551503][T18301] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1828.609390][T18301] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1828.656260][T18301] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1828.829903][T18301] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1828.895898][T18301] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1828.946281][T18301] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1829.016172][T18301] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1829.179568][T18301] tipc: Left network mode [ 1830.973147][T18301] hsr_slave_0: left promiscuous mode [ 1830.979771][T18301] hsr_slave_1: left promiscuous mode [ 1830.996729][T18301] hsr_slave_0: left promiscuous mode [ 1831.002621][T18301] hsr_slave_1: left promiscuous mode [ 1831.018369][T18301] hsr_slave_0: left promiscuous mode [ 1831.025043][T18301] hsr_slave_1: left promiscuous mode [ 1831.071038][T18301] veth1_macvtap: left promiscuous mode [ 1831.076805][T18301] veth0_macvtap: left promiscuous mode [ 1831.083840][T18301] veth1_macvtap: left promiscuous mode [ 1831.089546][T18301] veth0_macvtap: left promiscuous mode [ 1831.099048][T18301] veth1_vlan: left promiscuous mode [ 1831.104953][T18301] veth0_vlan: left promiscuous mode [ 1831.112658][T18301] veth1_macvtap: left promiscuous mode [ 1831.118360][T18301] veth0_macvtap: left promiscuous mode [ 1831.123978][T18301] veth1_vlan: left promiscuous mode [ 1831.129647][T18301] veth0_vlan: left promiscuous mode [ 1831.430035][T18301] infiniband sz1: set down [ 1832.519892][T18301] bond0 (unregistering): Released all slaves