last executing test programs: 6.022634563s ago: executing program 1 (id=4961): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0xf) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) 5.959859314s ago: executing program 1 (id=4963): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000100)={0x0, 0x0, 0x80800, 0x0, 0xffffffffffffffff}) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000100)={0x0, &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c643c, &(0x7f0000000300)={0x0, 0x0, r2}) 5.858464937s ago: executing program 1 (id=4965): r0 = syz_open_procfs(0x0, &(0x7f0000003100)='net/ip6_mr_cache\x00') ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f0000000040)={0xc, 0x0, 0x3, 0xc}) read$FUSE(r0, &(0x7f0000012f40)={0x2020}, 0x2040) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[], 0x150}}, 0x0) bind$alg(r1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x14, 0x0, 0xffffffffffffffdc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_wait_time_recursive\x00', 0x26e1, 0x0) r6 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x800, 0x0, 0x2, 0x1}, 0x20) add_key$fscrypt_v1(&(0x7f00000002c0), &(0x7f0000000300)={'fscrypt:', @desc4}, &(0x7f0000000440)={0x0, "8527d2100090af54bfbca283be11c0de7af30e90937920fcba13d90af61beaa44d66a6535daf1bc35fb3af1e9197e31d26589d073c10184095fb00", 0x14}, 0x48, 0xffffffffffffffff) r7 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000700), 0x101180, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r7, 0xc0040d07, &(0x7f0000000040)=0x121) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000070605000000020000007f0000000002"], 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) recvmsg(r8, &(0x7f000000c1c0)={0x0, 0x0, 0x0}, 0x20) 4.850796035s ago: executing program 1 (id=4969): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x5, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) close(r0) 4.838426365s ago: executing program 3 (id=4970): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000480)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x1fff, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='batadv0\x00', 0x10) write(r0, &(0x7f0000000140)="8465000000000000", 0x5ac) 4.725617708s ago: executing program 3 (id=4972): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x40800) 4.505183694s ago: executing program 3 (id=4975): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xff2e) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TCXONC(r0, 0x540a, 0x1) 4.419750817s ago: executing program 3 (id=4977): syz_usb_connect$lan78xx(0x3, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100000b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x4004f506, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{0x0}], 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000380)={'syz1\x00', {0x0, 0x7fff, 0x2, 0x2}, 0x51, [0x3ff, 0x2, 0x10000, 0x0, 0x7ca6, 0x9, 0xc2ad, 0x4, 0x9, 0x9, 0x5, 0x9, 0x8, 0x200, 0x5, 0x3, 0x7, 0x5, 0xfffffff9, 0x6, 0x3, 0xfff, 0x7f, 0x4152, 0x8b3, 0x9, 0x861, 0x7, 0x5, 0x0, 0x3c, 0x4, 0x1005, 0x4, 0x8, 0x38, 0x8, 0x8, 0xd5bb, 0x3, 0x1, 0x9de9, 0x8, 0x3, 0x3, 0x7f, 0x5, 0x8, 0x0, 0x1, 0x3ff, 0x6, 0x2e, 0x800, 0x846c, 0x3, 0x6, 0x31b, 0x8, 0xa, 0x1, 0x7, 0xffffffff, 0x3], [0x4a, 0x19a78cbf, 0xe936, 0x0, 0x200, 0xfffffff7, 0x2, 0x7d, 0x10001, 0x8, 0x3ff, 0x1, 0x7, 0x8f, 0x1, 0x5, 0x1ff, 0x200, 0x6f8, 0x7, 0xd, 0x7, 0x100788, 0x6, 0x0, 0x0, 0x8, 0x3, 0x5, 0x2, 0xa, 0x7, 0x80, 0x5aa, 0xfffff000, 0x400, 0x2, 0x7, 0x6, 0x6, 0x5, 0x3, 0x87, 0x22e2, 0x502, 0xffffffff, 0x7, 0x1ff, 0x6, 0x10001, 0x9e, 0x1, 0x5, 0x101, 0xfffffffa, 0x0, 0x2, 0x2, 0x6, 0x1ff, 0x8, 0x3, 0x6], [0x2, 0x94da, 0xffffffff, 0xb, 0xc0000, 0x4, 0x4, 0xfffffffa, 0x6, 0x7, 0xea, 0x7, 0x6, 0x400, 0xfffeffff, 0xfc000000, 0x8, 0x8, 0xd1, 0x2, 0xb66, 0x3, 0x4, 0x52c, 0x4, 0x10001, 0xfffffff8, 0x2, 0x9, 0x1, 0x7, 0xe86, 0x8, 0x20000100, 0x7, 0x1, 0x746a6ffd, 0x3, 0x4, 0x0, 0x1, 0x45a6c325, 0x8, 0x10000, 0x1000, 0x2, 0x5, 0x0, 0x2, 0x2, 0x1, 0x8, 0x2, 0x2, 0x81, 0x200, 0x3ff, 0xffffffcc, 0x6, 0xa000000, 0x8, 0xfff, 0x4000, 0x1], [0x8, 0x7, 0x3, 0xfffffffc, 0x8000, 0x2, 0x8, 0x1ff, 0xfffffffe, 0x10, 0x5e, 0x4, 0x8, 0x8, 0x5, 0x8, 0xfb, 0xf25, 0xd, 0x1ff, 0x2, 0x95, 0x9, 0x9, 0x1, 0xc, 0xffff6f9e, 0x4, 0xfffffff7, 0x10000, 0x7, 0x52a, 0x5, 0xc1a4, 0x4, 0x8, 0x3, 0x9, 0x5, 0xb7af, 0x3, 0x4, 0x0, 0x1ff8, 0x2, 0x7, 0x6, 0x80000000, 0x652d, 0x7, 0x7fffffff, 0xd, 0x40, 0x3ff, 0xc, 0x1ff, 0x9, 0x6, 0x0, 0x1000, 0x9, 0x2, 0x9, 0x4]}, 0x45c) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendto(0xffffffffffffffff, 0x0, 0x0, 0x810, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r4 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r4, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, 0x0, 0x0) syz_genetlink_get_family_id$smc(0x0, r4) syz_genetlink_get_family_id$ethtool(0x0, r4) bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r3, 0x90004) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e130100c900"], 0x16) ppoll(&(0x7f00000000c0)=[{r3, 0x60}], 0x1, 0x0, 0x0, 0x0) r6 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000004}, 0x4) 3.383688516s ago: executing program 1 (id=4983): syz_usb_connect$lan78xx(0x3, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100000b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x4004f506, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{0x0}], 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000380)={'syz1\x00', {0x0, 0x7fff, 0x2, 0x2}, 0x51, [0x3ff, 0x2, 0x10000, 0x0, 0x7ca6, 0x9, 0xc2ad, 0x4, 0x9, 0x9, 0x5, 0x9, 0x8, 0x200, 0x5, 0x3, 0x7, 0x5, 0xfffffff9, 0x6, 0x3, 0xfff, 0x7f, 0x4152, 0x8b3, 0x9, 0x861, 0x7, 0x5, 0x0, 0x3c, 0x4, 0x1005, 0x4, 0x8, 0x38, 0x8, 0x8, 0xd5bb, 0x3, 0x1, 0x9de9, 0x8, 0x3, 0x3, 0x7f, 0x5, 0x8, 0x0, 0x1, 0x3ff, 0x6, 0x2e, 0x800, 0x846c, 0x3, 0x6, 0x31b, 0x8, 0xa, 0x1, 0x7, 0xffffffff, 0x3], [0x4a, 0x19a78cbf, 0xe936, 0x0, 0x200, 0xfffffff7, 0x2, 0x7d, 0x10001, 0x8, 0x3ff, 0x1, 0x7, 0x8f, 0x1, 0x5, 0x1ff, 0x200, 0x6f8, 0x7, 0xd, 0x7, 0x100788, 0x6, 0x0, 0x0, 0x8, 0x3, 0x5, 0x2, 0xa, 0x7, 0x80, 0x5aa, 0xfffff000, 0x400, 0x2, 0x7, 0x6, 0x6, 0x5, 0x3, 0x87, 0x22e2, 0x502, 0xffffffff, 0x7, 0x1ff, 0x6, 0x10001, 0x9e, 0x1, 0x5, 0x101, 0xfffffffa, 0x0, 0x2, 0x2, 0x6, 0x1ff, 0x8, 0x3, 0x6], [0x2, 0x94da, 0xffffffff, 0xb, 0xc0000, 0x4, 0x4, 0xfffffffa, 0x6, 0x7, 0xea, 0x7, 0x6, 0x400, 0xfffeffff, 0xfc000000, 0x8, 0x8, 0xd1, 0x2, 0xb66, 0x3, 0x4, 0x52c, 0x4, 0x10001, 0xfffffff8, 0x2, 0x9, 0x1, 0x7, 0xe86, 0x8, 0x20000100, 0x7, 0x1, 0x746a6ffd, 0x3, 0x4, 0x0, 0x1, 0x45a6c325, 0x8, 0x10000, 0x1000, 0x2, 0x5, 0x0, 0x2, 0x2, 0x1, 0x8, 0x2, 0x2, 0x81, 0x200, 0x3ff, 0xffffffcc, 0x6, 0xa000000, 0x8, 0xfff, 0x4000, 0x1], [0x8, 0x7, 0x3, 0xfffffffc, 0x8000, 0x2, 0x8, 0x1ff, 0xfffffffe, 0x10, 0x5e, 0x4, 0x8, 0x8, 0x5, 0x8, 0xfb, 0xf25, 0xd, 0x1ff, 0x2, 0x95, 0x9, 0x9, 0x1, 0xc, 0xffff6f9e, 0x4, 0xfffffff7, 0x10000, 0x7, 0x52a, 0x5, 0xc1a4, 0x4, 0x8, 0x3, 0x9, 0x5, 0xb7af, 0x3, 0x4, 0x0, 0x1ff8, 0x2, 0x7, 0x6, 0x80000000, 0x652d, 0x7, 0x7fffffff, 0xd, 0x40, 0x3ff, 0xc, 0x1ff, 0x9, 0x6, 0x0, 0x1000, 0x9, 0x2, 0x9, 0x4]}, 0x45c) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendto(0xffffffffffffffff, 0x0, 0x0, 0x810, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r4 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r4, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, 0x0, 0x0) syz_genetlink_get_family_id$smc(0x0, r4) syz_genetlink_get_family_id$ethtool(0x0, r4) bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r3, 0x90004) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e130100c900"], 0x16) ppoll(&(0x7f00000000c0)=[{r3, 0x60}], 0x1, 0x0, 0x0, 0x0) r6 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000004}, 0x4) 2.660407316s ago: executing program 2 (id=4988): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.564664328s ago: executing program 2 (id=4991): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x400000b4, 0x0, 0x210000}]}) socket$nl_generic(0x10, 0x3, 0x10) 2.471265821s ago: executing program 2 (id=4992): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000080)={0x1c7d, "0300005627de1100a3250300541886d5ff4144b0f26a07219808229ad9000100", 0xffffffffffffffff}) dup3(r1, r0, 0x0) epoll_create1(0x0) pselect6(0x40, &(0x7f0000000100)={0x7, 0x5, 0xf, 0x447, 0x3ff, 0x7, 0x0, 0x80}, &(0x7f00000000c0)={0x38, 0x400000000d, 0xffff, 0x7, 0x3ff, 0x9, 0x9, 0x1}, 0x0, 0x0, 0x0) 2.414570012s ago: executing program 2 (id=4993): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='fdinfo\x00') r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x40100, 0x0) fcntl$notify(r1, 0x402, 0x7) exit(0x3) getdents64(r0, 0x0, 0x0) 1.450203519s ago: executing program 2 (id=4996): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000002c0)=[@in={0x2, 0x4e23, @empty}], 0x10) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000002180)=0x7f, 0x4) sendto$inet6(r0, &(0x7f00000005c0)='u', 0x1, 0x8081, &(0x7f00000004c0)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x40000001) 1.343832632s ago: executing program 0 (id=4997): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='configfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r0, &(0x7f0000000400)=""/4096, 0xc00) 1.210650726s ago: executing program 0 (id=4998): syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000200)='./file0\x00', 0xa00010, &(0x7f0000000840)=ANY=[@ANYBLOB='nodecompose,decompose,nobarrier,gid=', @ANYRESHEX=0xee01, @ANYBLOB="2c6e6c733d69736f383835392d310000000072726965722c00bcd0f0b5c4e2957974ff5d7ea3c3dcee087e4983684e8a4c4e4e87b134e30ce77162b12885b964b3506ff3eae0f3599447b17861d19be78079e5dd7bdc7f1eb36e31ac14de48349767164f5f6431bbdeaef96a4f2bce64b5cfa76ce3a2c4302374bc5535d7e2eb8dfb2e5d58a37b7e37836597c21f51bcdf6df4cad825cfd9ef5ee9e89e04b15cd3cea9e152d67b9a7eedc5dfe6d85a3ce7c342da8cc969b552197cb8bcc4a1009f38f4a85b7c742101ba5bc03115feca2b994c699812"], 0x6, 0x644, &(0x7f0000002cc0)="$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") munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000240)=""/184, 0xb8) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 1.210458936s ago: executing program 2 (id=4999): syz_usb_connect$lan78xx(0x3, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100000b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x4004f506, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendto(0xffffffffffffffff, 0x0, 0x0, 0x810, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r4 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r4, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, 0x0, 0x0) syz_genetlink_get_family_id$smc(0x0, r4) syz_genetlink_get_family_id$ethtool(0x0, r4) bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r3, 0x90004) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e130100c900"], 0x16) ppoll(&(0x7f00000000c0)=[{r3, 0x60}], 0x1, 0x0, 0x0, 0x0) r6 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000004}, 0x4) 1.142530958s ago: executing program 3 (id=5001): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x1008000, &(0x7f00000069c0)=ANY=[], 0x1, 0x5536, &(0x7f0000006040)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x105042, 0x0) write$char_usb(r0, &(0x7f0000000380)="e0", 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xe7c) 901.335895ms ago: executing program 0 (id=5005): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xa902, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd0900300003003000000060ce902d000c2f0081e949b93897bc3b0000000000007d01ff020000000000000000000000000001120088be68"], 0xfdef) 534.593845ms ago: executing program 3 (id=5011): syz_usb_connect$lan78xx(0x3, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100000b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x4004f506, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000380)={'syz1\x00', {0x0, 0x7fff, 0x2, 0x2}, 0x51, [0x3ff, 0x2, 0x10000, 0x0, 0x7ca6, 0x9, 0xc2ad, 0x4, 0x9, 0x9, 0x5, 0x9, 0x8, 0x200, 0x5, 0x3, 0x7, 0x5, 0xfffffff9, 0x6, 0x3, 0xfff, 0x7f, 0x4152, 0x8b3, 0x9, 0x861, 0x7, 0x5, 0x0, 0x3c, 0x4, 0x1005, 0x4, 0x8, 0x38, 0x8, 0x8, 0xd5bb, 0x3, 0x1, 0x9de9, 0x8, 0x3, 0x3, 0x7f, 0x5, 0x8, 0x0, 0x1, 0x3ff, 0x6, 0x2e, 0x800, 0x846c, 0x3, 0x6, 0x31b, 0x8, 0xa, 0x1, 0x7, 0xffffffff, 0x3], [0x4a, 0x19a78cbf, 0xe936, 0x0, 0x200, 0xfffffff7, 0x2, 0x7d, 0x10001, 0x8, 0x3ff, 0x1, 0x7, 0x8f, 0x1, 0x5, 0x1ff, 0x200, 0x6f8, 0x7, 0xd, 0x7, 0x100788, 0x6, 0x0, 0x0, 0x8, 0x3, 0x5, 0x2, 0xa, 0x7, 0x80, 0x5aa, 0xfffff000, 0x400, 0x2, 0x7, 0x6, 0x6, 0x5, 0x3, 0x87, 0x22e2, 0x502, 0xffffffff, 0x7, 0x1ff, 0x6, 0x10001, 0x9e, 0x1, 0x5, 0x101, 0xfffffffa, 0x0, 0x2, 0x2, 0x6, 0x1ff, 0x8, 0x3, 0x6], [0x2, 0x94da, 0xffffffff, 0xb, 0xc0000, 0x4, 0x4, 0xfffffffa, 0x6, 0x7, 0xea, 0x7, 0x6, 0x400, 0xfffeffff, 0xfc000000, 0x8, 0x8, 0xd1, 0x2, 0xb66, 0x3, 0x4, 0x52c, 0x4, 0x10001, 0xfffffff8, 0x2, 0x9, 0x1, 0x7, 0xe86, 0x8, 0x20000100, 0x7, 0x1, 0x746a6ffd, 0x3, 0x4, 0x0, 0x1, 0x45a6c325, 0x8, 0x10000, 0x1000, 0x2, 0x5, 0x0, 0x2, 0x2, 0x1, 0x8, 0x2, 0x2, 0x81, 0x200, 0x3ff, 0xffffffcc, 0x6, 0xa000000, 0x8, 0xfff, 0x4000, 0x1], [0x8, 0x7, 0x3, 0xfffffffc, 0x8000, 0x2, 0x8, 0x1ff, 0xfffffffe, 0x10, 0x5e, 0x4, 0x8, 0x8, 0x5, 0x8, 0xfb, 0xf25, 0xd, 0x1ff, 0x2, 0x95, 0x9, 0x9, 0x1, 0xc, 0xffff6f9e, 0x4, 0xfffffff7, 0x10000, 0x7, 0x52a, 0x5, 0xc1a4, 0x4, 0x8, 0x3, 0x9, 0x5, 0xb7af, 0x3, 0x4, 0x0, 0x1ff8, 0x2, 0x7, 0x6, 0x80000000, 0x652d, 0x7, 0x7fffffff, 0xd, 0x40, 0x3ff, 0xc, 0x1ff, 0x9, 0x6, 0x0, 0x1000, 0x9, 0x2, 0x9, 0x4]}, 0x45c) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendto(0xffffffffffffffff, 0x0, 0x0, 0x810, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r4 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r4, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, 0x0, 0x0) syz_genetlink_get_family_id$smc(0x0, r4) syz_genetlink_get_family_id$ethtool(0x0, r4) bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r3, 0x90004) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e130100c900"], 0x16) ppoll(&(0x7f00000000c0)=[{r3, 0x60}], 0x1, 0x0, 0x0, 0x0) r6 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000004}, 0x4) 486.339696ms ago: executing program 4 (id=5012): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x181403, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000340)=@x86={0xf8, 0x3, 0x5, 0x0, 0x2, 0xf, 0x0, 0x2, 0x7f, 0x5, 0xf, 0x6, 0x0, 0x6, 0x3, 0x7, 0x0, 0xc, 0x2, '\x00', 0xf6, 0x2}) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000000)={0x9f634221289f0805, 0x0, {[0x7, 0xffffffffff7fff00, 0x4000000000010022, 0x9, 0x4009, 0x2, 0x401, 0x47fd]}}) 414.754748ms ago: executing program 4 (id=5013): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000280)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@nombcache}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@id={0x2, 0x0, @a}}) chdir(&(0x7f0000000080)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x1ab341, 0x114) 317.376121ms ago: executing program 4 (id=5014): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000001c0)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000040)={@host}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, &(0x7f0000000000)={&(0x7f0000000540)={{@host=0x10}, {@host=0x10, 0x800}, 0x400, "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"}, 0x418, 0x1}) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r0, 0x7ac, &(0x7f0000000140)={0x0, 0xffffffffffffff60, 0x6}) 316.901331ms ago: executing program 0 (id=5015): r0 = syz_open_dev$media(&(0x7f0000000080), 0x2, 0x40001) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000008e002, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r2, 0x2000) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f00000003c0)={0x0, 0xfffffffffffffe10, 0x0, 0x0, 0x5b, 0x0, &(0x7f00000016c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 296.402291ms ago: executing program 4 (id=5016): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f00000000c0)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xeb0}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@nombcache}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000000}}, {@noquota}]}, 0x1, 0x440, &(0x7f0000000780)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x110) pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8080c61) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x24, 0x0) fallocate(r0, 0x3, 0x46c, 0x8008c61) 247.568083ms ago: executing program 0 (id=5017): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000880)='freezer.self_freezing\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x13, r1, 0x0) write(r0, &(0x7f0000000100)='~', 0x1) 235.372533ms ago: executing program 4 (id=5018): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000280)={0x9}) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000100)={[{0x800005, 0xc000, 0x4, 0xff, 0x0, 0x8, 0xf6, 0xa, 0xb9, 0x1, 0x12, 0x5, 0xcc}, {0x804, 0x2, 0x1, 0x45, 0x7, 0x0, 0x2, 0xff, 0x0, 0x4, 0x1, 0x7f, 0x20c}, {0x0, 0x2, 0x38, 0x3, 0x84, 0x7, 0x3, 0x50, 0x8, 0x1, 0x4, 0x9, 0x24ab}], 0xffffffff}) 176.649245ms ago: executing program 4 (id=5019): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/key-users\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x106f) r6 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r6, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x0, 0x4}) ioctl$DVB_DEMUX_DMX_ADD_PID(r6, 0x40026f33, &(0x7f0000000100)=0x808c) ioctl$DVB_DEMUX_DMX_REMOVE_PID(r6, 0x40026f34, &(0x7f0000000040)=0x1) ioctl$DVB_DEMUX_DMX_ADD_PID(r6, 0x40026f33, 0x0) r7 = socket$rds(0x15, 0x5, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0xffffffffffffff2d, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r8, 0x0, 0x0) bind$rds(r7, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r7, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10, 0x0}, 0x0) syz_io_uring_setup(0x2, &(0x7f0000000180)={0x0, 0x289b, 0x10000, 0x1, 0x323}, &(0x7f0000000000), &(0x7f00000003c0), &(0x7f0000000000)) prctl$PR_MCE_KILL(0x4e, 0x1, 0x20000) close_range(r0, 0xffffffffffffffff, 0x0) 176.130345ms ago: executing program 0 (id=5020): r0 = memfd_create(&(0x7f0000000480)='\xff\x00l\x1e\xa0 [ 1128.234444][T14286] dump_stack_lvl+0x188/0x24e [ 1128.239120][T14286] ? show_regs_print_info+0x12/0x12 [ 1128.244308][T14286] ? load_image+0x400/0x400 [ 1128.248802][T14286] sysfs_create_dir_ns+0x26a/0x290 [ 1128.253905][T14286] ? sysfs_warn_dup+0xa0/0xa0 [ 1128.258567][T14286] ? do_raw_spin_unlock+0x11d/0x230 [ 1128.263754][T14286] kobject_add_internal+0x61c/0xcc0 [ 1128.268944][T14286] kobject_add+0x160/0x230 [ 1128.273351][T14286] ? kobject_init+0x1d0/0x1d0 [ 1128.278018][T14286] ? klist_children_get+0x50/0x50 [ 1128.283029][T14286] ? get_device_parent+0x121/0x3f0 [ 1128.288131][T14286] device_add+0x483/0xfb0 [ 1128.292447][T14286] ? kmem_cache_free+0xf7/0x290 [ 1128.297294][T14286] hci_conn_add_sysfs+0xd1/0x1e0 [ 1128.302259][T14286] le_conn_complete_evt+0x1062/0x1670 [ 1128.307623][T14286] ? le_conn_complete_evt+0xe9/0x1670 [ 1128.312983][T14286] ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0 [ 1128.319213][T14286] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 1128.324841][T14286] ? skb_pull_data+0xf7/0x200 [ 1128.329504][T14286] hci_le_conn_complete_evt+0x183/0x440 [ 1128.335039][T14286] ? hci_remote_host_features_evt+0x270/0x270 [ 1128.341094][T14286] hci_event_packet+0x7b9/0x1280 [ 1128.346028][T14286] ? bis_list+0x280/0x280 [ 1128.350361][T14286] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1128.356272][T14286] ? kcov_remote_start+0x4c7/0x7e0 [ 1128.361375][T14286] ? patch_conexant_auto+0x1260/0x1650 [ 1128.366832][T14286] ? hci_send_to_monitor+0x9c/0x4a0 [ 1128.372030][T14286] hci_rx_work+0x3eb/0xd40 [ 1128.376433][T14286] ? _raw_spin_unlock+0x40/0x40 [ 1128.381281][T14286] ? process_one_work+0x7b0/0x1160 [ 1128.386379][T14286] process_one_work+0x8a2/0x1160 [ 1128.391335][T14286] ? worker_detach_from_pool+0x240/0x240 [ 1128.396956][T14286] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1128.401971][T14286] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1128.407514][T14286] ? kthread_data+0x4b/0xc0 [ 1128.412027][T14286] worker_thread+0xaa2/0x1270 [ 1128.416707][T14286] ? __kthread_parkme+0x162/0x1c0 [ 1128.421742][T14286] kthread+0x29d/0x330 [ 1128.425798][T14286] ? worker_clr_flags+0x1a0/0x1a0 [ 1128.430811][T14286] ? kthread_blkcg+0xd0/0xd0 [ 1128.435389][T14286] ret_from_fork+0x1f/0x30 [ 1128.439803][T14286] [ 1128.444043][T14286] kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1128.457660][T14286] Bluetooth: hci4: failed to register connection device [ 1128.831446][T14815] sctp: [Deprecated]: syz.4.2905 (pid 14815) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1128.831446][T14815] Use struct sctp_sack_info instead [ 1128.861098][T14286] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 1128.870734][T14286] CPU: 1 PID: 14286 Comm: kworker/u5:2 Not tainted syzkaller #0 [ 1128.878382][T14286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1128.881466][T14815] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2905'. [ 1128.888443][T14286] Workqueue: hci3 hci_rx_work [ 1128.902079][T14286] Call Trace: [ 1128.905369][T14286] [ 1128.908316][T14286] dump_stack_lvl+0x188/0x24e [ 1128.913028][T14286] ? show_regs_print_info+0x12/0x12 [ 1128.918261][T14286] ? load_image+0x400/0x400 [ 1128.922798][T14286] sysfs_create_dir_ns+0x26a/0x290 [ 1128.927933][T14286] ? sysfs_warn_dup+0xa0/0xa0 [ 1128.932637][T14286] ? do_raw_spin_unlock+0x11d/0x230 [ 1128.937850][T14286] kobject_add_internal+0x61c/0xcc0 [ 1128.943045][T14286] kobject_add+0x160/0x230 [ 1128.947456][T14286] ? kobject_init+0x1d0/0x1d0 [ 1128.952124][T14286] ? klist_children_get+0x50/0x50 [ 1128.957138][T14286] ? get_device_parent+0x121/0x3f0 [ 1128.962252][T14286] device_add+0x483/0xfb0 [ 1128.966603][T14286] ? kmem_cache_free+0xf7/0x290 [ 1128.971452][T14286] hci_conn_add_sysfs+0xd1/0x1e0 [ 1128.976384][T14286] le_conn_complete_evt+0x1062/0x1670 [ 1128.981750][T14286] ? le_conn_complete_evt+0xe9/0x1670 [ 1128.987162][T14286] ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0 [ 1128.993429][T14286] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 1128.999070][T14286] ? skb_pull_data+0xf7/0x200 [ 1129.003748][T14286] hci_le_conn_complete_evt+0x183/0x440 [ 1129.009301][T14286] ? hci_remote_host_features_evt+0x270/0x270 [ 1129.015385][T14286] hci_event_packet+0x7b9/0x1280 [ 1129.020333][T14286] ? bis_list+0x280/0x280 [ 1129.024665][T14286] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1129.030558][T14286] ? kcov_remote_start+0x4c7/0x7e0 [ 1129.035670][T14286] ? patch_conexant_auto+0x1260/0x1650 [ 1129.041135][T14286] ? hci_send_to_monitor+0x9c/0x4a0 [ 1129.046339][T14286] hci_rx_work+0x3eb/0xd40 [ 1129.050759][T14286] ? _raw_spin_unlock+0x40/0x40 [ 1129.055619][T14286] ? process_one_work+0x7b0/0x1160 [ 1129.060730][T14286] process_one_work+0x8a2/0x1160 [ 1129.065678][T14286] ? worker_detach_from_pool+0x240/0x240 [ 1129.071328][T14286] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1129.076357][T14286] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1129.081896][T14286] ? kthread_data+0x4b/0xc0 [ 1129.086406][T14286] worker_thread+0xaa2/0x1270 [ 1129.091114][T14286] ? __kthread_parkme+0x162/0x1c0 [ 1129.096238][T14286] kthread+0x29d/0x330 [ 1129.100349][T14286] ? worker_clr_flags+0x1a0/0x1a0 [ 1129.105409][T14286] ? kthread_blkcg+0xd0/0xd0 [ 1129.110025][T14286] ret_from_fork+0x1f/0x30 [ 1129.114522][T14286] [ 1129.119254][T14286] kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1129.132621][T14286] Bluetooth: hci3: failed to register connection device [ 1130.685893][T14286] Bluetooth: hci4: command 0x2016 tx timeout [ 1131.401861][T14286] Bluetooth: hci3: command 0x2016 tx timeout [ 1133.192897][T14860] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 1134.158326][T14864] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 1136.112826][ T8850] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 1136.122455][ T8850] CPU: 0 PID: 8850 Comm: kworker/u5:0 Not tainted syzkaller #0 [ 1136.129991][ T8850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1136.140031][ T8850] Workqueue: hci3 hci_rx_work [ 1136.144699][ T8850] Call Trace: [ 1136.147984][ T8850] [ 1136.150898][ T8850] dump_stack_lvl+0x188/0x24e [ 1136.155567][ T8850] ? show_regs_print_info+0x12/0x12 [ 1136.160758][ T8850] ? load_image+0x400/0x400 [ 1136.165278][ T8850] sysfs_create_dir_ns+0x26a/0x290 [ 1136.170384][ T8850] ? sysfs_warn_dup+0xa0/0xa0 [ 1136.175047][ T8850] ? do_raw_spin_unlock+0x11d/0x230 [ 1136.180233][ T8850] kobject_add_internal+0x61c/0xcc0 [ 1136.185420][ T8850] kobject_add+0x160/0x230 [ 1136.189829][ T8850] ? kobject_init+0x1d0/0x1d0 [ 1136.194506][ T8850] ? klist_children_get+0x50/0x50 [ 1136.199518][ T8850] ? get_device_parent+0x121/0x3f0 [ 1136.204620][ T8850] device_add+0x483/0xfb0 [ 1136.208934][ T8850] ? kmem_cache_free+0xf7/0x290 [ 1136.213778][ T8850] hci_conn_add_sysfs+0xd1/0x1e0 [ 1136.218707][ T8850] le_conn_complete_evt+0x1062/0x1670 [ 1136.224086][ T8850] ? le_conn_complete_evt+0xe9/0x1670 [ 1136.229482][ T8850] ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0 [ 1136.235733][ T8850] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 1136.241390][ T8850] ? skb_pull_data+0xf7/0x200 [ 1136.246097][ T8850] hci_le_conn_complete_evt+0x183/0x440 [ 1136.251680][ T8850] ? hci_remote_host_features_evt+0x270/0x270 [ 1136.257774][ T8850] hci_event_packet+0x7b9/0x1280 [ 1136.262745][ T8850] ? bis_list+0x280/0x280 [ 1136.267096][ T8850] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1136.273009][ T8850] ? kcov_remote_start+0x4c7/0x7e0 [ 1136.278134][ T8850] ? patch_conexant_auto+0x1260/0x1650 [ 1136.283621][ T8850] ? hci_send_to_monitor+0x9c/0x4a0 [ 1136.288841][ T8850] hci_rx_work+0x3eb/0xd40 [ 1136.293369][ T8850] ? _raw_spin_unlock+0x40/0x40 [ 1136.298221][ T8850] ? process_one_work+0x7b0/0x1160 [ 1136.303318][ T8850] process_one_work+0x8a2/0x1160 [ 1136.308250][ T8850] ? worker_detach_from_pool+0x240/0x240 [ 1136.313871][ T8850] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1136.318879][ T8850] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1136.324405][ T8850] ? kthread_data+0x4b/0xc0 [ 1136.328898][ T8850] worker_thread+0xaa2/0x1270 [ 1136.333583][ T8850] kthread+0x29d/0x330 [ 1136.337639][ T8850] ? worker_clr_flags+0x1a0/0x1a0 [ 1136.342648][ T8850] ? kthread_blkcg+0xd0/0xd0 [ 1136.347222][ T8850] ret_from_fork+0x1f/0x30 [ 1136.351638][ T8850] [ 1136.583957][T14893] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2927'. [ 1137.142612][ T8850] kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1137.155918][ T8850] Bluetooth: hci3: failed to register connection device [ 1138.403311][T14902] sctp: [Deprecated]: syz.2.2930 (pid 14902) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1138.403311][T14902] Use struct sctp_sack_info instead [ 1138.426737][T14902] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2930'. [ 1138.438636][T14908] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 1139.376788][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1139.383147][T14286] Bluetooth: hci3: command 0x2016 tx timeout [ 1139.392623][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1139.829281][T14923] overlayfs: failed to clone upperpath [ 1143.592270][T14948] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 1143.993675][T14959] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2946'. [ 1148.577842][T14286] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 1148.588161][T14286] CPU: 1 PID: 14286 Comm: kworker/u5:2 Not tainted syzkaller #0 [ 1148.595800][T14286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1148.605850][T14286] Workqueue: hci4 hci_rx_work [ 1148.610537][T14286] Call Trace: [ 1148.613820][T14286] [ 1148.616738][T14286] dump_stack_lvl+0x188/0x24e [ 1148.621437][T14286] ? show_regs_print_info+0x12/0x12 [ 1148.626627][T14286] ? load_image+0x400/0x400 [ 1148.631124][T14286] sysfs_create_dir_ns+0x26a/0x290 [ 1148.636227][T14286] ? sysfs_warn_dup+0xa0/0xa0 [ 1148.640891][T14286] ? do_raw_spin_unlock+0x11d/0x230 [ 1148.646074][T14286] kobject_add_internal+0x61c/0xcc0 [ 1148.651282][T14286] kobject_add+0x160/0x230 [ 1148.655715][T14286] ? kobject_init+0x1d0/0x1d0 [ 1148.660397][T14286] ? klist_children_get+0x50/0x50 [ 1148.665409][T14286] ? get_device_parent+0x121/0x3f0 [ 1148.670508][T14286] device_add+0x483/0xfb0 [ 1148.674823][T14286] ? kmem_cache_free+0xf7/0x290 [ 1148.679662][T14286] hci_conn_add_sysfs+0xd1/0x1e0 [ 1148.684592][T14286] le_conn_complete_evt+0x1062/0x1670 [ 1148.689966][T14286] ? le_conn_complete_evt+0xe9/0x1670 [ 1148.695334][T14286] ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0 [ 1148.701571][T14286] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 1148.707198][T14286] ? skb_pull_data+0xf7/0x200 [ 1148.711864][T14286] hci_le_conn_complete_evt+0x183/0x440 [ 1148.717407][T14286] ? hci_remote_host_features_evt+0x270/0x270 [ 1148.723483][T14286] hci_event_packet+0x7b9/0x1280 [ 1148.728417][T14286] ? bis_list+0x280/0x280 [ 1148.732734][T14286] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1148.738619][T14286] ? kcov_remote_start+0x4c7/0x7e0 [ 1148.743715][T14286] ? patch_conexant_auto+0x1260/0x1650 [ 1148.749163][T14286] ? hci_send_to_monitor+0x9c/0x4a0 [ 1148.754351][T14286] hci_rx_work+0x3eb/0xd40 [ 1148.758765][T14286] ? _raw_spin_unlock+0x40/0x40 [ 1148.763609][T14286] ? process_one_work+0x7b0/0x1160 [ 1148.768710][T14286] process_one_work+0x8a2/0x1160 [ 1148.773640][T14286] ? worker_detach_from_pool+0x240/0x240 [ 1148.779278][T14286] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1148.784289][T14286] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1148.789818][T14286] ? kthread_data+0x4b/0xc0 [ 1148.794313][T14286] worker_thread+0xaa2/0x1270 [ 1148.798987][T14286] ? __kthread_parkme+0x162/0x1c0 [ 1148.804000][T14286] kthread+0x29d/0x330 [ 1148.808062][T14286] ? worker_clr_flags+0x1a0/0x1a0 [ 1148.813107][T14286] ? kthread_blkcg+0xd0/0xd0 [ 1148.817690][T14286] ret_from_fork+0x1f/0x30 [ 1148.822105][T14286] [ 1148.833121][T14286] kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1148.846855][T14286] Bluetooth: hci4: failed to register connection device [ 1148.942475][T15002] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 1148.987920][T15005] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 1149.226361][T15009] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2960'. [ 1149.874554][T14286] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 1149.884224][T14286] CPU: 1 PID: 14286 Comm: kworker/u5:2 Not tainted syzkaller #0 [ 1149.891879][T14286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1149.901934][T14286] Workqueue: hci3 hci_rx_work [ 1149.906642][T14286] Call Trace: [ 1149.909927][T14286] [ 1149.912857][T14286] dump_stack_lvl+0x188/0x24e [ 1149.917526][T14286] ? show_regs_print_info+0x12/0x12 [ 1149.922712][T14286] ? load_image+0x400/0x400 [ 1149.927205][T14286] sysfs_create_dir_ns+0x26a/0x290 [ 1149.932303][T14286] ? sysfs_warn_dup+0xa0/0xa0 [ 1149.936967][T14286] ? do_raw_spin_unlock+0x11d/0x230 [ 1149.942172][T14286] kobject_add_internal+0x61c/0xcc0 [ 1149.947396][T14286] kobject_add+0x160/0x230 [ 1149.951822][T14286] ? kobject_init+0x1d0/0x1d0 [ 1149.956726][T14286] ? klist_children_get+0x50/0x50 [ 1149.961772][T14286] ? get_device_parent+0x121/0x3f0 [ 1149.966896][T14286] device_add+0x483/0xfb0 [ 1149.971227][T14286] ? kmem_cache_free+0xf7/0x290 [ 1149.976083][T14286] hci_conn_add_sysfs+0xd1/0x1e0 [ 1149.981026][T14286] le_conn_complete_evt+0x1062/0x1670 [ 1149.986401][T14286] ? le_conn_complete_evt+0xe9/0x1670 [ 1149.991789][T14286] ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0 [ 1149.998044][T14286] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 1150.003684][T14286] ? skb_pull_data+0xf7/0x200 [ 1150.008361][T14286] hci_le_conn_complete_evt+0x183/0x440 [ 1150.013913][T14286] ? hci_remote_host_features_evt+0x270/0x270 [ 1150.019989][T14286] hci_event_packet+0x7b9/0x1280 [ 1150.024939][T14286] ? bis_list+0x280/0x280 [ 1150.029276][T14286] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1150.035171][T14286] ? kcov_remote_start+0x4c7/0x7e0 [ 1150.040284][T14286] ? patch_conexant_auto+0x1260/0x1650 [ 1150.045750][T14286] ? hci_send_to_monitor+0x9c/0x4a0 [ 1150.050955][T14286] hci_rx_work+0x3eb/0xd40 [ 1150.055379][T14286] ? _raw_spin_unlock+0x40/0x40 [ 1150.060235][T14286] ? process_one_work+0x7b0/0x1160 [ 1150.065366][T14286] process_one_work+0x8a2/0x1160 [ 1150.070321][T14286] ? worker_detach_from_pool+0x240/0x240 [ 1150.075958][T14286] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1150.080996][T14286] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1150.086545][T14286] ? kthread_data+0x4b/0xc0 [ 1150.091089][T14286] worker_thread+0xaa2/0x1270 [ 1150.095783][T14286] ? __kthread_parkme+0x162/0x1c0 [ 1150.100818][T14286] kthread+0x29d/0x330 [ 1150.104882][T14286] ? worker_clr_flags+0x1a0/0x1a0 [ 1150.109904][T14286] ? kthread_blkcg+0xd0/0xd0 [ 1150.114490][T14286] ret_from_fork+0x1f/0x30 [ 1150.118917][T14286] [ 1150.176812][T14286] kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1150.190179][T14286] Bluetooth: hci3: failed to register connection device [ 1151.032083][T14286] Bluetooth: hci4: command 0x2016 tx timeout [ 1152.406679][T15025] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1152.415443][T14286] Bluetooth: hci3: command 0x2016 tx timeout [ 1153.815755][T15039] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 1154.040431][T15051] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 1156.482046][T14286] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 1156.491517][T14286] CPU: 1 PID: 14286 Comm: kworker/u5:2 Not tainted syzkaller #0 [ 1156.499134][T14286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1156.509171][T14286] Workqueue: hci4 hci_rx_work [ 1156.513840][T14286] Call Trace: [ 1156.517106][T14286] [ 1156.520020][T14286] dump_stack_lvl+0x188/0x24e [ 1156.524691][T14286] ? show_regs_print_info+0x12/0x12 [ 1156.529881][T14286] ? load_image+0x400/0x400 [ 1156.534374][T14286] sysfs_create_dir_ns+0x26a/0x290 [ 1156.539481][T14286] ? sysfs_warn_dup+0xa0/0xa0 [ 1156.544143][T14286] ? do_raw_spin_unlock+0x11d/0x230 [ 1156.549327][T14286] kobject_add_internal+0x61c/0xcc0 [ 1156.554517][T14286] kobject_add+0x160/0x230 [ 1156.558927][T14286] ? kobject_init+0x1d0/0x1d0 [ 1156.563587][T14286] ? klist_children_get+0x50/0x50 [ 1156.568600][T14286] ? get_device_parent+0x121/0x3f0 [ 1156.573708][T14286] device_add+0x483/0xfb0 [ 1156.578034][T14286] ? kmem_cache_free+0xf7/0x290 [ 1156.582924][T14286] hci_conn_add_sysfs+0xd1/0x1e0 [ 1156.587886][T14286] le_conn_complete_evt+0x1062/0x1670 [ 1156.593258][T14286] ? le_conn_complete_evt+0xe9/0x1670 [ 1156.598622][T14286] ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0 [ 1156.604865][T14286] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 1156.610494][T14286] ? skb_pull_data+0xf7/0x200 [ 1156.615182][T14286] hci_le_conn_complete_evt+0x183/0x440 [ 1156.620735][T14286] ? hci_remote_host_features_evt+0x270/0x270 [ 1156.626799][T14286] hci_event_packet+0x7b9/0x1280 [ 1156.631734][T14286] ? bis_list+0x280/0x280 [ 1156.636050][T14286] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1156.641942][T14286] ? kcov_remote_start+0x4c7/0x7e0 [ 1156.647043][T14286] ? patch_conexant_auto+0x1260/0x1650 [ 1156.652491][T14286] ? hci_send_to_monitor+0x9c/0x4a0 [ 1156.657681][T14286] hci_rx_work+0x3eb/0xd40 [ 1156.662087][T14286] ? _raw_spin_unlock+0x40/0x40 [ 1156.666930][T14286] ? process_one_work+0x7b0/0x1160 [ 1156.672058][T14286] process_one_work+0x8a2/0x1160 [ 1156.676994][T14286] ? worker_detach_from_pool+0x240/0x240 [ 1156.682615][T14286] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1156.687628][T14286] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1156.693167][T14286] ? kthread_data+0x4b/0xc0 [ 1156.697664][T14286] worker_thread+0xaa2/0x1270 [ 1156.702360][T14286] ? __kthread_parkme+0x162/0x1c0 [ 1156.707379][T14286] kthread+0x29d/0x330 [ 1156.711433][T14286] ? worker_clr_flags+0x1a0/0x1a0 [ 1156.716443][T14286] ? kthread_blkcg+0xd0/0xd0 [ 1156.721016][T14286] ret_from_fork+0x1f/0x30 [ 1156.725431][T14286] [ 1156.737378][T14286] kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1156.750940][T14286] Bluetooth: hci4: failed to register connection device [ 1157.363195][T15084] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 1157.389658][T14286] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 1157.399321][T14286] CPU: 1 PID: 14286 Comm: kworker/u5:2 Not tainted syzkaller #0 [ 1157.406945][T14286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1157.416987][T14286] Workqueue: hci3 hci_rx_work [ 1157.421668][T14286] Call Trace: [ 1157.424946][T14286] [ 1157.427867][T14286] dump_stack_lvl+0x188/0x24e [ 1157.432540][T14286] ? show_regs_print_info+0x12/0x12 [ 1157.437803][T14286] ? load_image+0x400/0x400 [ 1157.442314][T14286] sysfs_create_dir_ns+0x26a/0x290 [ 1157.447426][T14286] ? sysfs_warn_dup+0xa0/0xa0 [ 1157.452097][T14286] ? do_raw_spin_unlock+0x11d/0x230 [ 1157.457300][T14286] kobject_add_internal+0x61c/0xcc0 [ 1157.462518][T14286] kobject_add+0x160/0x230 [ 1157.466948][T14286] ? kobject_init+0x1d0/0x1d0 [ 1157.471644][T14286] ? klist_children_get+0x50/0x50 [ 1157.476672][T14286] ? get_device_parent+0x121/0x3f0 [ 1157.481782][T14286] device_add+0x483/0xfb0 [ 1157.486114][T14286] ? kmem_cache_free+0xf7/0x290 [ 1157.490996][T14286] hci_conn_add_sysfs+0xd1/0x1e0 [ 1157.495940][T14286] le_conn_complete_evt+0x1062/0x1670 [ 1157.501314][T14286] ? le_conn_complete_evt+0xe9/0x1670 [ 1157.506692][T14286] ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0 [ 1157.512935][T14286] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 1157.518580][T14286] ? skb_pull_data+0xf7/0x200 [ 1157.523254][T14286] hci_le_conn_complete_evt+0x183/0x440 [ 1157.528806][T14286] ? hci_remote_host_features_evt+0x270/0x270 [ 1157.534880][T14286] hci_event_packet+0x7b9/0x1280 [ 1157.539837][T14286] ? bis_list+0x280/0x280 [ 1157.544166][T14286] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1157.550059][T14286] ? kcov_remote_start+0x4c7/0x7e0 [ 1157.555169][T14286] ? patch_conexant_auto+0x1260/0x1650 [ 1157.560633][T14286] ? hci_send_to_monitor+0x9c/0x4a0 [ 1157.565837][T14286] hci_rx_work+0x3eb/0xd40 [ 1157.570255][T14286] ? _raw_spin_unlock+0x40/0x40 [ 1157.575110][T14286] ? process_one_work+0x7b0/0x1160 [ 1157.580218][T14286] process_one_work+0x8a2/0x1160 [ 1157.585164][T14286] ? worker_detach_from_pool+0x240/0x240 [ 1157.590795][T14286] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1157.595819][T14286] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1157.601362][T14286] ? kthread_data+0x4b/0xc0 [ 1157.605872][T14286] worker_thread+0xaa2/0x1270 [ 1157.610557][T14286] ? __kthread_parkme+0x162/0x1c0 [ 1157.615593][T14286] kthread+0x29d/0x330 [ 1157.619649][T14286] ? worker_clr_flags+0x1a0/0x1a0 [ 1157.624670][T14286] ? kthread_blkcg+0xd0/0xd0 [ 1157.629253][T14286] ret_from_fork+0x1f/0x30 [ 1157.633684][T14286] [ 1157.646865][T14286] kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1157.660124][T14286] Bluetooth: hci3: failed to register connection device [ 1158.907914][T14286] Bluetooth: hci4: command 0x2016 tx timeout [ 1158.925048][T15104] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2979'. [ 1159.159532][T15104] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1159.199756][T15104] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1159.273529][T15104] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1159.300378][T15105] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2987'. [ 1160.543099][T14286] Bluetooth: hci3: command 0x2016 tx timeout [ 1162.128186][T14286] Bluetooth: hci3: hcon ffff888072dc2000 sent 1 < count 2 [ 1162.181276][T15137] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 1162.924830][T15125] sctp: [Deprecated]: syz.4.2992 (pid 15125) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1162.924830][T15125] Use struct sctp_sack_info instead [ 1162.945523][T15125] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2992'. [ 1163.204510][T14286] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 1163.214019][T14286] CPU: 0 PID: 14286 Comm: kworker/u5:2 Not tainted syzkaller #0 [ 1163.221663][T14286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1163.231712][T14286] Workqueue: hci4 hci_rx_work [ 1163.236382][T14286] Call Trace: [ 1163.239649][T14286] [ 1163.242581][T14286] dump_stack_lvl+0x188/0x24e [ 1163.247253][T14286] ? show_regs_print_info+0x12/0x12 [ 1163.252449][T14286] ? load_image+0x400/0x400 [ 1163.256964][T14286] sysfs_create_dir_ns+0x26a/0x290 [ 1163.262096][T14286] ? sysfs_warn_dup+0xa0/0xa0 [ 1163.266770][T14286] ? do_raw_spin_unlock+0x11d/0x230 [ 1163.271958][T14286] kobject_add_internal+0x61c/0xcc0 [ 1163.277148][T14286] kobject_add+0x160/0x230 [ 1163.281557][T14286] ? kobject_init+0x1d0/0x1d0 [ 1163.286227][T14286] ? klist_children_get+0x50/0x50 [ 1163.291241][T14286] ? get_device_parent+0x121/0x3f0 [ 1163.296337][T14286] device_add+0x483/0xfb0 [ 1163.300652][T14286] ? kmem_cache_free+0xf7/0x290 [ 1163.305495][T14286] hci_conn_add_sysfs+0xd1/0x1e0 [ 1163.310434][T14286] le_conn_complete_evt+0x1062/0x1670 [ 1163.315836][T14286] ? le_conn_complete_evt+0xe9/0x1670 [ 1163.321201][T14286] ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0 [ 1163.327441][T14286] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 1163.333105][T14286] ? skb_pull_data+0xf7/0x200 [ 1163.337769][T14286] hci_le_conn_complete_evt+0x183/0x440 [ 1163.343316][T14286] ? hci_remote_host_features_evt+0x270/0x270 [ 1163.349390][T14286] hci_event_packet+0x7b9/0x1280 [ 1163.354326][T14286] ? bis_list+0x280/0x280 [ 1163.358649][T14286] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1163.364548][T14286] ? kcov_remote_start+0x4c7/0x7e0 [ 1163.369648][T14286] ? patch_conexant_auto+0x1260/0x1650 [ 1163.375100][T14286] ? hci_send_to_monitor+0x9c/0x4a0 [ 1163.380287][T14286] hci_rx_work+0x3eb/0xd40 [ 1163.384689][T14286] ? _raw_spin_unlock+0x40/0x40 [ 1163.389530][T14286] ? process_one_work+0x7b0/0x1160 [ 1163.394626][T14286] process_one_work+0x8a2/0x1160 [ 1163.399558][T14286] ? worker_detach_from_pool+0x240/0x240 [ 1163.405194][T14286] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1163.410217][T14286] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1163.415753][T14286] ? kthread_data+0x4b/0xc0 [ 1163.420273][T14286] worker_thread+0xaa2/0x1270 [ 1163.424948][T14286] ? __kthread_parkme+0x162/0x1c0 [ 1163.429968][T14286] kthread+0x29d/0x330 [ 1163.434019][T14286] ? worker_clr_flags+0x1a0/0x1a0 [ 1163.439029][T14286] ? kthread_blkcg+0xd0/0xd0 [ 1163.443605][T14286] ret_from_fork+0x1f/0x30 [ 1163.448017][T14286] [ 1163.459919][T14286] kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1163.475172][T14286] Bluetooth: hci4: failed to register connection device [ 1163.909928][T14286] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 1163.919506][T14286] CPU: 0 PID: 14286 Comm: kworker/u5:2 Not tainted syzkaller #0 [ 1163.927159][T14286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1163.937220][T14286] Workqueue: hci3 hci_rx_work [ 1163.941904][T14286] Call Trace: [ 1163.945186][T14286] [ 1163.948109][T14286] dump_stack_lvl+0x188/0x24e [ 1163.952784][T14286] ? show_regs_print_info+0x12/0x12 [ 1163.957978][T14286] ? load_image+0x400/0x400 [ 1163.962491][T14286] sysfs_create_dir_ns+0x26a/0x290 [ 1163.967602][T14286] ? sysfs_warn_dup+0xa0/0xa0 [ 1163.972275][T14286] ? do_raw_spin_unlock+0x11d/0x230 [ 1163.977463][T14286] kobject_add_internal+0x61c/0xcc0 [ 1163.982647][T14286] kobject_add+0x160/0x230 [ 1163.987053][T14286] ? kobject_init+0x1d0/0x1d0 [ 1163.991719][T14286] ? klist_children_get+0x50/0x50 [ 1163.996729][T14286] ? get_device_parent+0x121/0x3f0 [ 1164.001823][T14286] device_add+0x483/0xfb0 [ 1164.006134][T14286] ? kmem_cache_free+0xf7/0x290 [ 1164.010976][T14286] hci_conn_add_sysfs+0xd1/0x1e0 [ 1164.015918][T14286] le_conn_complete_evt+0x1062/0x1670 [ 1164.021290][T14286] ? le_conn_complete_evt+0xe9/0x1670 [ 1164.026676][T14286] ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0 [ 1164.032937][T14286] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 1164.038578][T14286] ? skb_pull_data+0xf7/0x200 [ 1164.043248][T14286] hci_le_conn_complete_evt+0x183/0x440 [ 1164.048790][T14286] ? hci_remote_host_features_evt+0x270/0x270 [ 1164.054851][T14286] hci_event_packet+0x7b9/0x1280 [ 1164.059787][T14286] ? bis_list+0x280/0x280 [ 1164.064110][T14286] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1164.069999][T14286] ? kcov_remote_start+0x4c7/0x7e0 [ 1164.075097][T14286] ? patch_conexant_auto+0x1260/0x1650 [ 1164.080558][T14286] ? hci_send_to_monitor+0x9c/0x4a0 [ 1164.085758][T14286] hci_rx_work+0x3eb/0xd40 [ 1164.090179][T14286] ? _raw_spin_unlock+0x40/0x40 [ 1164.095047][T14286] ? process_one_work+0x7b0/0x1160 [ 1164.100151][T14286] process_one_work+0x8a2/0x1160 [ 1164.105087][T14286] ? worker_detach_from_pool+0x240/0x240 [ 1164.110715][T14286] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1164.115747][T14286] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1164.121279][T14286] ? kthread_data+0x4b/0xc0 [ 1164.125785][T14286] worker_thread+0xaa2/0x1270 [ 1164.130462][T14286] ? __kthread_parkme+0x162/0x1c0 [ 1164.135481][T14286] kthread+0x29d/0x330 [ 1164.139551][T14286] ? worker_clr_flags+0x1a0/0x1a0 [ 1164.144590][T14286] ? kthread_blkcg+0xd0/0xd0 [ 1164.149169][T14286] ret_from_fork+0x1f/0x30 [ 1164.153589][T14286] [ 1164.157452][T14286] kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1164.175227][T14286] Bluetooth: hci3: failed to register connection device [ 1164.228488][T15156] IPVS: sync thread started: state = BACKUP, mcast_ifn = vlan1, syncid = 4, id = 0 [ 1164.238711][T15153] IPVS: stopping backup sync thread 15156 ... [ 1165.658056][T14286] Bluetooth: hci4: command 0x2016 tx timeout [ 1166.342575][T15181] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 1166.345942][T14286] Bluetooth: hci3: command 0x2016 tx timeout [ 1169.391844][T14286] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 1169.406035][T14286] CPU: 0 PID: 14286 Comm: kworker/u5:2 Not tainted syzkaller #0 [ 1169.413699][T14286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1169.423768][T14286] Workqueue: hci1 hci_rx_work [ 1169.428468][T14286] Call Trace: [ 1169.431750][T14286] [ 1169.434693][T14286] dump_stack_lvl+0x188/0x24e [ 1169.439403][T14286] ? show_regs_print_info+0x12/0x12 [ 1169.444626][T14286] ? load_image+0x400/0x400 [ 1169.449158][T14286] sysfs_create_dir_ns+0x26a/0x290 [ 1169.454289][T14286] ? sysfs_warn_dup+0xa0/0xa0 [ 1169.459000][T14286] ? do_raw_spin_unlock+0x11d/0x230 [ 1169.464217][T14286] kobject_add_internal+0x61c/0xcc0 [ 1169.469441][T14286] kobject_add+0x160/0x230 [ 1169.473878][T14286] ? kobject_init+0x1d0/0x1d0 [ 1169.478576][T14286] ? klist_children_get+0x50/0x50 [ 1169.483619][T14286] ? get_device_parent+0x121/0x3f0 [ 1169.488747][T14286] device_add+0x483/0xfb0 [ 1169.493091][T14286] ? kmem_cache_free+0xf7/0x290 [ 1169.497971][T14286] hci_conn_add_sysfs+0xd1/0x1e0 [ 1169.502944][T14286] le_conn_complete_evt+0x1062/0x1670 [ 1169.508312][T14286] ? le_conn_complete_evt+0xe9/0x1670 [ 1169.513689][T14286] ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0 [ 1169.519936][T14286] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 1169.525583][T14286] ? skb_pull_data+0xf7/0x200 [ 1169.530248][T14286] hci_le_conn_complete_evt+0x183/0x440 [ 1169.535779][T14286] ? hci_remote_host_features_evt+0x270/0x270 [ 1169.541845][T14286] hci_event_packet+0x7b9/0x1280 [ 1169.546796][T14286] ? bis_list+0x280/0x280 [ 1169.551113][T14286] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1169.556992][T14286] ? kcov_remote_start+0x4c7/0x7e0 [ 1169.562102][T14286] ? patch_conexant_auto+0x1260/0x1650 [ 1169.567573][T14286] ? hci_send_to_monitor+0x9c/0x4a0 [ 1169.572761][T14286] hci_rx_work+0x3eb/0xd40 [ 1169.577163][T14286] ? _raw_spin_unlock+0x40/0x40 [ 1169.582000][T14286] ? process_one_work+0x7b0/0x1160 [ 1169.587100][T14286] process_one_work+0x8a2/0x1160 [ 1169.592056][T14286] ? worker_detach_from_pool+0x240/0x240 [ 1169.597686][T14286] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1169.602697][T14286] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1169.608235][T14286] ? kthread_data+0x4b/0xc0 [ 1169.612732][T14286] worker_thread+0xaa2/0x1270 [ 1169.617407][T14286] ? __kthread_parkme+0x162/0x1c0 [ 1169.622419][T14286] kthread+0x29d/0x330 [ 1169.626479][T14286] ? worker_clr_flags+0x1a0/0x1a0 [ 1169.631517][T14286] ? kthread_blkcg+0xd0/0xd0 [ 1169.636091][T14286] ret_from_fork+0x1f/0x30 [ 1169.640521][T14286] [ 1169.646025][T14286] kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1169.659295][T14286] Bluetooth: hci1: failed to register connection device [ 1171.962724][T14286] Bluetooth: hci1: command 0x2016 tx timeout [ 1171.996412][T15216] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 1175.342551][T15250] IPVS: rr: FWM 3 0x00000003 - no destination available [ 1176.716229][T14286] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 1176.726977][T14286] CPU: 0 PID: 14286 Comm: kworker/u5:2 Not tainted syzkaller #0 [ 1176.734638][T14286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1176.744709][T14286] Workqueue: hci4 hci_rx_work [ 1176.749415][T14286] Call Trace: [ 1176.752707][T14286] [ 1176.755650][T14286] dump_stack_lvl+0x188/0x24e [ 1176.760356][T14286] ? show_regs_print_info+0x12/0x12 [ 1176.765584][T14286] ? load_image+0x400/0x400 [ 1176.770118][T14286] sysfs_create_dir_ns+0x26a/0x290 [ 1176.775227][T14286] ? sysfs_warn_dup+0xa0/0xa0 [ 1176.779904][T14286] ? do_raw_spin_unlock+0x11d/0x230 [ 1176.785099][T14286] kobject_add_internal+0x61c/0xcc0 [ 1176.790294][T14286] kobject_add+0x160/0x230 [ 1176.794703][T14286] ? kobject_init+0x1d0/0x1d0 [ 1176.799374][T14286] ? klist_children_get+0x50/0x50 [ 1176.804384][T14286] ? get_device_parent+0x121/0x3f0 [ 1176.809487][T14286] device_add+0x483/0xfb0 [ 1176.813808][T14286] ? kmem_cache_free+0xf7/0x290 [ 1176.818671][T14286] hci_conn_add_sysfs+0xd1/0x1e0 [ 1176.823621][T14286] le_conn_complete_evt+0x1062/0x1670 [ 1176.829003][T14286] ? le_conn_complete_evt+0xe9/0x1670 [ 1176.834376][T14286] ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0 [ 1176.840622][T14286] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 1176.846263][T14286] ? skb_pull_data+0xf7/0x200 [ 1176.850939][T14286] hci_le_conn_complete_evt+0x183/0x440 [ 1176.856487][T14286] ? hci_remote_host_features_evt+0x270/0x270 [ 1176.862555][T14286] hci_event_packet+0x7b9/0x1280 [ 1176.867502][T14286] ? bis_list+0x280/0x280 [ 1176.871832][T14286] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1176.877724][T14286] ? kcov_remote_start+0x4c7/0x7e0 [ 1176.882844][T14286] ? patch_conexant_auto+0x1260/0x1650 [ 1176.888312][T14286] ? hci_send_to_monitor+0x9c/0x4a0 [ 1176.893602][T14286] hci_rx_work+0x3eb/0xd40 [ 1176.898023][T14286] ? _raw_spin_unlock+0x40/0x40 [ 1176.902904][T14286] ? process_one_work+0x7b0/0x1160 [ 1176.908023][T14286] process_one_work+0x8a2/0x1160 [ 1176.912967][T14286] ? worker_detach_from_pool+0x240/0x240 [ 1176.918600][T14286] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1176.923624][T14286] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1176.929167][T14286] ? kthread_data+0x4b/0xc0 [ 1176.933673][T14286] worker_thread+0xaa2/0x1270 [ 1176.938361][T14286] ? __kthread_parkme+0x162/0x1c0 [ 1176.943394][T14286] kthread+0x29d/0x330 [ 1176.947456][T14286] ? worker_clr_flags+0x1a0/0x1a0 [ 1176.952484][T14286] ? kthread_blkcg+0xd0/0xd0 [ 1176.957073][T14286] ret_from_fork+0x1f/0x30 [ 1176.961508][T14286] [ 1176.965775][T14286] kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1176.990676][T14286] Bluetooth: hci4: failed to register connection device [ 1177.143488][T15262] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 1179.551116][T14286] Bluetooth: hci4: command 0x2016 tx timeout [ 1179.597871][ T8850] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 1179.659392][ T8850] CPU: 1 PID: 8850 Comm: kworker/u5:0 Not tainted syzkaller #0 [ 1179.666977][ T8850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1179.677036][ T8850] Workqueue: hci3 hci_rx_work [ 1179.681710][ T8850] Call Trace: [ 1179.684977][ T8850] [ 1179.687895][ T8850] dump_stack_lvl+0x188/0x24e [ 1179.692572][ T8850] ? show_regs_print_info+0x12/0x12 [ 1179.697760][ T8850] ? load_image+0x400/0x400 [ 1179.702269][ T8850] sysfs_create_dir_ns+0x26a/0x290 [ 1179.707376][ T8850] ? sysfs_warn_dup+0xa0/0xa0 [ 1179.712053][ T8850] ? do_raw_spin_unlock+0x11d/0x230 [ 1179.717240][ T8850] kobject_add_internal+0x61c/0xcc0 [ 1179.722442][ T8850] kobject_add+0x160/0x230 [ 1179.726870][ T8850] ? kobject_init+0x1d0/0x1d0 [ 1179.731537][ T8850] ? klist_children_get+0x50/0x50 [ 1179.736549][ T8850] ? get_device_parent+0x121/0x3f0 [ 1179.741673][ T8850] device_add+0x483/0xfb0 [ 1179.745991][ T8850] ? kmem_cache_free+0xf7/0x290 [ 1179.750834][ T8850] hci_conn_add_sysfs+0xd1/0x1e0 [ 1179.755762][ T8850] le_conn_complete_evt+0x1062/0x1670 [ 1179.761127][ T8850] ? le_conn_complete_evt+0xe9/0x1670 [ 1179.766494][ T8850] ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0 [ 1179.772728][ T8850] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 1179.778369][ T8850] ? skb_pull_data+0xf7/0x200 [ 1179.783039][ T8850] hci_le_conn_complete_evt+0x183/0x440 [ 1179.788594][ T8850] ? hci_remote_host_features_evt+0x270/0x270 [ 1179.794681][ T8850] hci_event_packet+0x7b9/0x1280 [ 1179.799619][ T8850] ? bis_list+0x280/0x280 [ 1179.803938][ T8850] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1179.809839][ T8850] ? kcov_remote_start+0x4c7/0x7e0 [ 1179.814942][ T8850] ? patch_conexant_auto+0x1260/0x1650 [ 1179.820401][ T8850] ? hci_send_to_monitor+0x9c/0x4a0 [ 1179.825594][ T8850] hci_rx_work+0x3eb/0xd40 [ 1179.830000][ T8850] ? _raw_spin_unlock+0x40/0x40 [ 1179.834848][ T8850] ? process_one_work+0x7b0/0x1160 [ 1179.839949][ T8850] process_one_work+0x8a2/0x1160 [ 1179.844882][ T8850] ? worker_detach_from_pool+0x240/0x240 [ 1179.850505][ T8850] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1179.855515][ T8850] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1179.861045][ T8850] ? kthread_data+0x4b/0xc0 [ 1179.865551][ T8850] worker_thread+0xaa2/0x1270 [ 1179.870229][ T8850] kthread+0x29d/0x330 [ 1179.874386][ T8850] ? worker_clr_flags+0x1a0/0x1a0 [ 1179.879406][ T8850] ? kthread_blkcg+0xd0/0xd0 [ 1179.883987][ T8850] ret_from_fork+0x1f/0x30 [ 1179.888405][ T8850] [ 1179.911237][ T8850] kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1179.925122][ T8850] Bluetooth: hci3: failed to register connection device [ 1182.352916][ T8850] Bluetooth: hci3: command 0x2016 tx timeout [ 1183.017162][T15301] sctp: [Deprecated]: syz.0.3046 (pid 15301) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1183.017162][T15301] Use struct sctp_sack_info instead [ 1183.035563][T15301] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3046'. [ 1183.113725][T15320] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 1185.617059][T14286] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 1185.627293][T14286] CPU: 0 PID: 14286 Comm: kworker/u5:2 Not tainted syzkaller #0 [ 1185.634955][T14286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1185.645017][T14286] Workqueue: hci3 hci_rx_work [ 1185.649689][T14286] Call Trace: [ 1185.652952][T14286] [ 1185.655883][T14286] dump_stack_lvl+0x188/0x24e [ 1185.660583][T14286] ? show_regs_print_info+0x12/0x12 [ 1185.665776][T14286] ? load_image+0x400/0x400 [ 1185.670276][T14286] sysfs_create_dir_ns+0x26a/0x290 [ 1185.675376][T14286] ? sysfs_warn_dup+0xa0/0xa0 [ 1185.680044][T14286] ? do_raw_spin_unlock+0x11d/0x230 [ 1185.685237][T14286] kobject_add_internal+0x61c/0xcc0 [ 1185.690432][T14286] kobject_add+0x160/0x230 [ 1185.694860][T14286] ? kobject_init+0x1d0/0x1d0 [ 1185.699527][T14286] ? klist_children_get+0x50/0x50 [ 1185.704540][T14286] ? get_device_parent+0x121/0x3f0 [ 1185.709640][T14286] device_add+0x483/0xfb0 [ 1185.713956][T14286] ? kmem_cache_free+0xf7/0x290 [ 1185.718809][T14286] hci_conn_add_sysfs+0xd1/0x1e0 [ 1185.723760][T14286] le_conn_complete_evt+0x1062/0x1670 [ 1185.729118][T14286] ? le_conn_complete_evt+0xe9/0x1670 [ 1185.734481][T14286] ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0 [ 1185.740717][T14286] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 1185.746346][T14286] ? skb_pull_data+0xf7/0x200 [ 1185.751023][T14286] hci_le_conn_complete_evt+0x183/0x440 [ 1185.756572][T14286] ? hci_remote_host_features_evt+0x270/0x270 [ 1185.762641][T14286] hci_event_packet+0x7b9/0x1280 [ 1185.767577][T14286] ? bis_list+0x280/0x280 [ 1185.771893][T14286] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1185.777784][T14286] ? kcov_remote_start+0x4c7/0x7e0 [ 1185.782888][T14286] ? patch_conexant_auto+0x1260/0x1650 [ 1185.788340][T14286] ? hci_send_to_monitor+0x9c/0x4a0 [ 1185.793543][T14286] hci_rx_work+0x3eb/0xd40 [ 1185.797974][T14286] ? _raw_spin_unlock+0x40/0x40 [ 1185.802826][T14286] ? process_one_work+0x7b0/0x1160 [ 1185.807929][T14286] process_one_work+0x8a2/0x1160 [ 1185.812866][T14286] ? worker_detach_from_pool+0x240/0x240 [ 1185.818493][T14286] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1185.823505][T14286] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1185.829037][T14286] ? kthread_data+0x4b/0xc0 [ 1185.833535][T14286] worker_thread+0xaa2/0x1270 [ 1185.838222][T14286] ? __kthread_parkme+0x162/0x1c0 [ 1185.843244][T14286] kthread+0x29d/0x330 [ 1185.847316][T14286] ? worker_clr_flags+0x1a0/0x1a0 [ 1185.852370][T14286] ? kthread_blkcg+0xd0/0xd0 [ 1185.856955][T14286] ret_from_fork+0x1f/0x30 [ 1185.861371][T14286] [ 1185.865079][T14286] kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1185.878595][T14286] Bluetooth: hci3: failed to register connection device [ 1187.545237][T15359] tipc: Started in network mode [ 1187.550263][T15359] tipc: Node identity 4, cluster identity 4711 [ 1187.556485][T15359] tipc: Node number set to 4 [ 1188.088632][T14286] Bluetooth: hci3: command 0x2016 tx timeout [ 1188.515511][T15364] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 1189.747186][T15371] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3065'. [ 1189.861235][T15371] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1190.820056][T15371] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 1190.875119][T15371] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1193.708814][T15405] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3077'. [ 1195.509788][ T8850] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 1195.519381][ T8850] CPU: 1 PID: 8850 Comm: kworker/u5:0 Not tainted syzkaller #0 [ 1195.526922][ T8850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1195.536969][ T8850] Workqueue: hci3 hci_rx_work [ 1195.541646][ T8850] Call Trace: [ 1195.544927][ T8850] [ 1195.547867][ T8850] dump_stack_lvl+0x188/0x24e [ 1195.552574][ T8850] ? show_regs_print_info+0x12/0x12 [ 1195.557781][ T8850] ? load_image+0x400/0x400 [ 1195.562295][ T8850] sysfs_create_dir_ns+0x26a/0x290 [ 1195.567412][ T8850] ? sysfs_warn_dup+0xa0/0xa0 [ 1195.572094][ T8850] ? do_raw_spin_unlock+0x11d/0x230 [ 1195.577299][ T8850] kobject_add_internal+0x61c/0xcc0 [ 1195.582502][ T8850] kobject_add+0x160/0x230 [ 1195.586917][ T8850] ? kobject_init+0x1d0/0x1d0 [ 1195.591593][ T8850] ? klist_children_get+0x50/0x50 [ 1195.596616][ T8850] ? get_device_parent+0x121/0x3f0 [ 1195.601726][ T8850] device_add+0x483/0xfb0 [ 1195.606054][ T8850] ? kmem_cache_free+0xf7/0x290 [ 1195.610913][ T8850] hci_conn_add_sysfs+0xd1/0x1e0 [ 1195.615857][ T8850] le_conn_complete_evt+0x1062/0x1670 [ 1195.621244][ T8850] ? le_conn_complete_evt+0xe9/0x1670 [ 1195.626620][ T8850] ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0 [ 1195.632863][ T8850] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 1195.638499][ T8850] ? skb_pull_data+0xf7/0x200 [ 1195.643182][ T8850] hci_le_conn_complete_evt+0x183/0x440 [ 1195.648734][ T8850] ? hci_remote_host_features_evt+0x270/0x270 [ 1195.654817][ T8850] hci_event_packet+0x7b9/0x1280 [ 1195.659765][ T8850] ? bis_list+0x280/0x280 [ 1195.664101][ T8850] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1195.669996][ T8850] ? kcov_remote_start+0x4c7/0x7e0 [ 1195.675107][ T8850] ? patch_conexant_auto+0x1260/0x1650 [ 1195.680593][ T8850] ? hci_send_to_monitor+0x9c/0x4a0 [ 1195.685793][ T8850] hci_rx_work+0x3eb/0xd40 [ 1195.690208][ T8850] ? _raw_spin_unlock+0x40/0x40 [ 1195.695062][ T8850] ? process_one_work+0x7b0/0x1160 [ 1195.700176][ T8850] process_one_work+0x8a2/0x1160 [ 1195.705131][ T8850] ? worker_detach_from_pool+0x240/0x240 [ 1195.710763][ T8850] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1195.715786][ T8850] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1195.721327][ T8850] ? kthread_data+0x4b/0xc0 [ 1195.725838][ T8850] worker_thread+0xaa2/0x1270 [ 1195.730534][ T8850] kthread+0x29d/0x330 [ 1195.734595][ T8850] ? worker_clr_flags+0x1a0/0x1a0 [ 1195.739618][ T8850] ? kthread_blkcg+0xd0/0xd0 [ 1195.744205][ T8850] ret_from_fork+0x1f/0x30 [ 1195.748634][ T8850] [ 1195.752639][ T8850] kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1195.766014][ T8850] Bluetooth: hci3: failed to register connection device [ 1197.800434][T15444] tipc: Started in network mode [ 1197.805451][T15444] tipc: Node identity 4, cluster identity 4711 [ 1197.811732][T15444] tipc: Node number set to 4 [ 1198.168326][ T8850] Bluetooth: hci3: command 0x2016 tx timeout [ 1199.453066][ T8850] Bluetooth: hci3: unexpected cc 0x202f length: 41 > 9 [ 1202.104915][ T8850] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 1202.114444][ T8850] CPU: 0 PID: 8850 Comm: kworker/u5:0 Not tainted syzkaller #0 [ 1202.122001][ T8850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1202.132060][ T8850] Workqueue: hci4 hci_rx_work [ 1202.136755][ T8850] Call Trace: [ 1202.140028][ T8850] [ 1202.142955][ T8850] dump_stack_lvl+0x188/0x24e [ 1202.147640][ T8850] ? show_regs_print_info+0x12/0x12 [ 1202.152843][ T8850] ? load_image+0x400/0x400 [ 1202.157356][ T8850] sysfs_create_dir_ns+0x26a/0x290 [ 1202.162475][ T8850] ? sysfs_warn_dup+0xa0/0xa0 [ 1202.167155][ T8850] ? do_raw_spin_unlock+0x11d/0x230 [ 1202.172351][ T8850] kobject_add_internal+0x61c/0xcc0 [ 1202.177555][ T8850] kobject_add+0x160/0x230 [ 1202.181989][ T8850] ? kobject_init+0x1d0/0x1d0 [ 1202.186685][ T8850] ? klist_children_get+0x50/0x50 [ 1202.191711][ T8850] ? get_device_parent+0x121/0x3f0 [ 1202.196820][ T8850] device_add+0x483/0xfb0 [ 1202.201145][ T8850] ? kmem_cache_free+0xf7/0x290 [ 1202.205997][ T8850] hci_conn_add_sysfs+0xd1/0x1e0 [ 1202.210937][ T8850] le_conn_complete_evt+0x1062/0x1670 [ 1202.216311][ T8850] ? le_conn_complete_evt+0xe9/0x1670 [ 1202.221684][ T8850] ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0 [ 1202.227926][ T8850] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 1202.233567][ T8850] ? skb_pull_data+0xf7/0x200 [ 1202.238245][ T8850] hci_le_conn_complete_evt+0x183/0x440 [ 1202.243795][ T8850] ? hci_remote_host_features_evt+0x270/0x270 [ 1202.249865][ T8850] hci_event_packet+0x7b9/0x1280 [ 1202.254811][ T8850] ? bis_list+0x280/0x280 [ 1202.259157][ T8850] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1202.265053][ T8850] ? kcov_remote_start+0x4c7/0x7e0 [ 1202.270165][ T8850] ? patch_conexant_auto+0x1260/0x1650 [ 1202.275631][ T8850] ? hci_send_to_monitor+0x9c/0x4a0 [ 1202.280834][ T8850] hci_rx_work+0x3eb/0xd40 [ 1202.285249][ T8850] ? _raw_spin_unlock+0x40/0x40 [ 1202.290101][ T8850] ? process_one_work+0x7b0/0x1160 [ 1202.295210][ T8850] process_one_work+0x8a2/0x1160 [ 1202.300157][ T8850] ? worker_detach_from_pool+0x240/0x240 [ 1202.305791][ T8850] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1202.310808][ T8850] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1202.316349][ T8850] ? kthread_data+0x4b/0xc0 [ 1202.320857][ T8850] worker_thread+0xaa2/0x1270 [ 1202.325554][ T8850] kthread+0x29d/0x330 [ 1202.329618][ T8850] ? worker_clr_flags+0x1a0/0x1a0 [ 1202.334638][ T8850] ? kthread_blkcg+0xd0/0xd0 [ 1202.339224][ T8850] ret_from_fork+0x1f/0x30 [ 1202.343911][ T8850] [ 1202.347942][ T8850] kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1202.361702][ T8850] Bluetooth: hci4: failed to register connection device [ 1203.618528][T15500] tipc: Started in network mode [ 1203.623493][T15500] tipc: Node identity 4, cluster identity 4711 [ 1203.629760][T15500] tipc: Node number set to 4 [ 1204.457168][T15504] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3121'. [ 1204.654675][ T8850] Bluetooth: hci4: command 0x2016 tx timeout [ 1204.751651][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1204.758125][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1211.199111][T14286] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 1211.208715][T14286] CPU: 1 PID: 14286 Comm: kworker/u5:2 Not tainted syzkaller #0 [ 1211.216407][T14286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1211.226476][T14286] Workqueue: hci4 hci_rx_work [ 1211.231182][T14286] Call Trace: [ 1211.234469][T14286] [ 1211.237407][T14286] dump_stack_lvl+0x188/0x24e [ 1211.242117][T14286] ? show_regs_print_info+0x12/0x12 [ 1211.247345][T14286] ? load_image+0x400/0x400 [ 1211.251884][T14286] sysfs_create_dir_ns+0x26a/0x290 [ 1211.257023][T14286] ? sysfs_warn_dup+0xa0/0xa0 [ 1211.261723][T14286] ? do_raw_spin_unlock+0x11d/0x230 [ 1211.266946][T14286] kobject_add_internal+0x61c/0xcc0 [ 1211.272172][T14286] kobject_add+0x160/0x230 [ 1211.276604][T14286] ? kobject_init+0x1d0/0x1d0 [ 1211.281270][T14286] ? klist_children_get+0x50/0x50 [ 1211.286291][T14286] ? get_device_parent+0x121/0x3f0 [ 1211.291390][T14286] device_add+0x483/0xfb0 [ 1211.295707][T14286] ? kmem_cache_free+0xf7/0x290 [ 1211.300546][T14286] hci_conn_add_sysfs+0xd1/0x1e0 [ 1211.305479][T14286] le_conn_complete_evt+0x1062/0x1670 [ 1211.310859][T14286] ? le_conn_complete_evt+0xe9/0x1670 [ 1211.316229][T14286] ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0 [ 1211.322465][T14286] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 1211.328097][T14286] ? skb_pull_data+0xf7/0x200 [ 1211.332775][T14286] hci_le_conn_complete_evt+0x183/0x440 [ 1211.338313][T14286] ? hci_remote_host_features_evt+0x270/0x270 [ 1211.344369][T14286] hci_event_packet+0x7b9/0x1280 [ 1211.349331][T14286] ? bis_list+0x280/0x280 [ 1211.353689][T14286] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1211.359609][T14286] ? kcov_remote_start+0x4c7/0x7e0 [ 1211.364746][T14286] ? patch_conexant_auto+0x1260/0x1650 [ 1211.370228][T14286] ? hci_send_to_monitor+0x9c/0x4a0 [ 1211.375455][T14286] hci_rx_work+0x3eb/0xd40 [ 1211.379907][T14286] ? _raw_spin_unlock+0x40/0x40 [ 1211.384797][T14286] ? process_one_work+0x7b0/0x1160 [ 1211.389945][T14286] process_one_work+0x8a2/0x1160 [ 1211.394931][T14286] ? worker_detach_from_pool+0x240/0x240 [ 1211.400590][T14286] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1211.405639][T14286] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1211.411210][T14286] ? kthread_data+0x4b/0xc0 [ 1211.415744][T14286] worker_thread+0xaa2/0x1270 [ 1211.420461][T14286] ? __kthread_parkme+0x162/0x1c0 [ 1211.425522][T14286] kthread+0x29d/0x330 [ 1211.429604][T14286] ? worker_clr_flags+0x1a0/0x1a0 [ 1211.434648][T14286] ? kthread_blkcg+0xd0/0xd0 [ 1211.439254][T14286] ret_from_fork+0x1f/0x30 [ 1211.443715][T14286] [ 1211.451053][T14286] kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1211.464354][T14286] Bluetooth: hci4: failed to register connection device [ 1211.706243][T15577] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3126'. [ 1213.877248][T14286] Bluetooth: hci4: command 0x2016 tx timeout [ 1215.542178][T15603] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3140'. [ 1217.736847][T15620] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3146'. [ 1218.402849][T14286] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 1218.412431][T14286] CPU: 1 PID: 14286 Comm: kworker/u5:2 Not tainted syzkaller #0 [ 1218.420069][T14286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1218.430119][T14286] Workqueue: hci4 hci_rx_work [ 1218.434803][T14286] Call Trace: [ 1218.438080][T14286] [ 1218.441005][T14286] dump_stack_lvl+0x188/0x24e [ 1218.445691][T14286] ? show_regs_print_info+0x12/0x12 [ 1218.450889][T14286] ? load_image+0x400/0x400 [ 1218.455400][T14286] sysfs_create_dir_ns+0x26a/0x290 [ 1218.460513][T14286] ? sysfs_warn_dup+0xa0/0xa0 [ 1218.465189][T14286] ? do_raw_spin_unlock+0x11d/0x230 [ 1218.470380][T14286] kobject_add_internal+0x61c/0xcc0 [ 1218.475579][T14286] kobject_add+0x160/0x230 [ 1218.479992][T14286] ? kobject_init+0x1d0/0x1d0 [ 1218.484668][T14286] ? klist_children_get+0x50/0x50 [ 1218.489687][T14286] ? get_device_parent+0x121/0x3f0 [ 1218.494793][T14286] device_add+0x483/0xfb0 [ 1218.499128][T14286] ? kmem_cache_free+0xf7/0x290 [ 1218.503986][T14286] hci_conn_add_sysfs+0xd1/0x1e0 [ 1218.508930][T14286] le_conn_complete_evt+0x1062/0x1670 [ 1218.514306][T14286] ? le_conn_complete_evt+0xe9/0x1670 [ 1218.519684][T14286] ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0 [ 1218.525928][T14286] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 1218.531561][T14286] ? skb_pull_data+0xf7/0x200 [ 1218.536237][T14286] hci_le_conn_complete_evt+0x183/0x440 [ 1218.541782][T14286] ? hci_remote_host_features_evt+0x270/0x270 [ 1218.547852][T14286] hci_event_packet+0x7b9/0x1280 [ 1218.552794][T14286] ? bis_list+0x280/0x280 [ 1218.557120][T14286] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1218.563014][T14286] ? kcov_remote_start+0x4c7/0x7e0 [ 1218.568127][T14286] ? patch_conexant_auto+0x1260/0x1650 [ 1218.573588][T14286] ? hci_send_to_monitor+0x9c/0x4a0 [ 1218.578786][T14286] hci_rx_work+0x3eb/0xd40 [ 1218.583198][T14286] ? _raw_spin_unlock+0x40/0x40 [ 1218.588057][T14286] ? process_one_work+0x7b0/0x1160 [ 1218.593164][T14286] process_one_work+0x8a2/0x1160 [ 1218.598109][T14286] ? worker_detach_from_pool+0x240/0x240 [ 1218.603739][T14286] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1218.609028][T14286] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1218.614570][T14286] ? kthread_data+0x4b/0xc0 [ 1218.619080][T14286] worker_thread+0xaa2/0x1270 [ 1218.623784][T14286] ? __kthread_parkme+0x162/0x1c0 [ 1218.628823][T14286] kthread+0x29d/0x330 [ 1218.632891][T14286] ? worker_clr_flags+0x1a0/0x1a0 [ 1218.637909][T14286] ? kthread_blkcg+0xd0/0xd0 [ 1218.642496][T14286] ret_from_fork+0x1f/0x30 [ 1218.646925][T14286] [ 1218.658192][T14286] kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1218.671474][T14286] Bluetooth: hci4: failed to register connection device [ 1220.887929][T14286] Bluetooth: hci4: command 0x2016 tx timeout [ 1221.898612][T15657] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3159'. [ 1222.713871][ T8850] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 1222.724003][ T8850] CPU: 1 PID: 8850 Comm: kworker/u5:0 Not tainted syzkaller #0 [ 1222.731571][ T8850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1222.741613][ T8850] Workqueue: hci3 hci_rx_work [ 1222.746289][ T8850] Call Trace: [ 1222.749551][ T8850] [ 1222.752472][ T8850] dump_stack_lvl+0x188/0x24e [ 1222.757151][ T8850] ? show_regs_print_info+0x12/0x12 [ 1222.762342][ T8850] ? load_image+0x400/0x400 [ 1222.766843][ T8850] sysfs_create_dir_ns+0x26a/0x290 [ 1222.771947][ T8850] ? sysfs_warn_dup+0xa0/0xa0 [ 1222.776611][ T8850] ? do_raw_spin_unlock+0x11d/0x230 [ 1222.781802][ T8850] kobject_add_internal+0x61c/0xcc0 [ 1222.786993][ T8850] kobject_add+0x160/0x230 [ 1222.791402][ T8850] ? kobject_init+0x1d0/0x1d0 [ 1222.796070][ T8850] ? klist_children_get+0x50/0x50 [ 1222.801082][ T8850] ? get_device_parent+0x121/0x3f0 [ 1222.806178][ T8850] device_add+0x483/0xfb0 [ 1222.810492][ T8850] ? kmem_cache_free+0xf7/0x290 [ 1222.815329][ T8850] hci_conn_add_sysfs+0xd1/0x1e0 [ 1222.820258][ T8850] le_conn_complete_evt+0x1062/0x1670 [ 1222.825634][ T8850] ? le_conn_complete_evt+0xe9/0x1670 [ 1222.831011][ T8850] ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0 [ 1222.837253][ T8850] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 1222.842900][ T8850] ? skb_pull_data+0xf7/0x200 [ 1222.847575][ T8850] hci_le_conn_complete_evt+0x183/0x440 [ 1222.853124][ T8850] ? hci_remote_host_features_evt+0x270/0x270 [ 1222.859192][ T8850] hci_event_packet+0x7b9/0x1280 [ 1222.864134][ T8850] ? bis_list+0x280/0x280 [ 1222.868463][ T8850] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1222.874347][ T8850] ? kcov_remote_start+0x4c7/0x7e0 [ 1222.879458][ T8850] ? patch_conexant_auto+0x1260/0x1650 [ 1222.884917][ T8850] ? hci_send_to_monitor+0x9c/0x4a0 [ 1222.890114][ T8850] hci_rx_work+0x3eb/0xd40 [ 1222.894536][ T8850] ? _raw_spin_unlock+0x40/0x40 [ 1222.899382][ T8850] ? process_one_work+0x7b0/0x1160 [ 1222.904482][ T8850] process_one_work+0x8a2/0x1160 [ 1222.909418][ T8850] ? worker_detach_from_pool+0x240/0x240 [ 1222.915045][ T8850] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1222.920074][ T8850] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1222.925616][ T8850] ? kthread_data+0x4b/0xc0 [ 1222.930113][ T8850] worker_thread+0xaa2/0x1270 [ 1222.934794][ T8850] kthread+0x29d/0x330 [ 1222.938861][ T8850] ? worker_clr_flags+0x1a0/0x1a0 [ 1222.943876][ T8850] ? kthread_blkcg+0xd0/0xd0 [ 1222.948457][ T8850] ret_from_fork+0x1f/0x30 [ 1222.952892][ T8850] [ 1222.960796][ T8850] kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1222.974208][ T8850] Bluetooth: hci3: failed to register connection device [ 1225.025614][ T8850] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 1225.035168][ T8850] CPU: 1 PID: 8850 Comm: kworker/u5:0 Not tainted syzkaller #0 [ 1225.042727][ T8850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1225.052783][ T8850] Workqueue: hci1 hci_rx_work [ 1225.057460][ T8850] Call Trace: [ 1225.060726][ T8850] [ 1225.063650][ T8850] dump_stack_lvl+0x188/0x24e [ 1225.068325][ T8850] ? show_regs_print_info+0x12/0x12 [ 1225.073519][ T8850] ? load_image+0x400/0x400 [ 1225.078022][ T8850] sysfs_create_dir_ns+0x26a/0x290 [ 1225.083128][ T8850] ? sysfs_warn_dup+0xa0/0xa0 [ 1225.087795][ T8850] ? do_raw_spin_unlock+0x11d/0x230 [ 1225.092984][ T8850] kobject_add_internal+0x61c/0xcc0 [ 1225.098195][ T8850] kobject_add+0x160/0x230 [ 1225.102627][ T8850] ? kobject_init+0x1d0/0x1d0 [ 1225.107293][ T8850] ? klist_children_get+0x50/0x50 [ 1225.112307][ T8850] ? get_device_parent+0x121/0x3f0 [ 1225.117422][ T8850] device_add+0x483/0xfb0 [ 1225.121755][ T8850] ? kmem_cache_free+0xf7/0x290 [ 1225.126597][ T8850] hci_conn_add_sysfs+0xd1/0x1e0 [ 1225.131528][ T8850] le_conn_complete_evt+0x1062/0x1670 [ 1225.136892][ T8850] ? le_conn_complete_evt+0xe9/0x1670 [ 1225.142254][ T8850] ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0 [ 1225.148499][ T8850] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 1225.154127][ T8850] ? skb_pull_data+0xf7/0x200 [ 1225.158795][ T8850] hci_le_conn_complete_evt+0x183/0x440 [ 1225.164333][ T8850] ? hci_remote_host_features_evt+0x270/0x270 [ 1225.170392][ T8850] hci_event_packet+0x7b9/0x1280 [ 1225.175326][ T8850] ? bis_list+0x280/0x280 [ 1225.179649][ T8850] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1225.185532][ T8850] ? kcov_remote_start+0x4c7/0x7e0 [ 1225.190652][ T8850] ? patch_conexant_auto+0x1260/0x1650 [ 1225.196100][ T8850] ? hci_send_to_monitor+0x9c/0x4a0 [ 1225.201287][ T8850] hci_rx_work+0x3eb/0xd40 [ 1225.205693][ T8850] ? _raw_spin_unlock+0x40/0x40 [ 1225.210532][ T8850] ? process_one_work+0x7b0/0x1160 [ 1225.215628][ T8850] process_one_work+0x8a2/0x1160 [ 1225.220574][ T8850] ? worker_detach_from_pool+0x240/0x240 [ 1225.226194][ T8850] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1225.231204][ T8850] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1225.236734][ T8850] ? kthread_data+0x4b/0xc0 [ 1225.241324][ T8850] worker_thread+0xaa2/0x1270 [ 1225.246001][ T8850] kthread+0x29d/0x330 [ 1225.250054][ T8850] ? worker_clr_flags+0x1a0/0x1a0 [ 1225.255063][ T8850] ? kthread_blkcg+0xd0/0xd0 [ 1225.259639][ T8850] ret_from_fork+0x1f/0x30 [ 1225.264050][ T8850] [ 1225.280529][ T8850] kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1225.281143][T14286] Bluetooth: hci3: command 0x2016 tx timeout [ 1225.293800][ T8850] Bluetooth: hci1: failed to register connection device [ 1227.402389][ T8850] Bluetooth: hci3: unexpected event 0x18 length: 247 > 23 [ 1227.458693][ T8850] Bluetooth: hci1: command 0x2016 tx timeout [ 1227.682394][T15717] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3173'. [ 1229.306527][T14286] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 1229.316185][T14286] CPU: 0 PID: 14286 Comm: kworker/u5:2 Not tainted syzkaller #0 [ 1229.323846][T14286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1229.333913][T14286] Workqueue: hci3 hci_rx_work [ 1229.338585][T14286] Call Trace: [ 1229.341862][T14286] [ 1229.344790][T14286] dump_stack_lvl+0x188/0x24e [ 1229.349504][T14286] ? show_regs_print_info+0x12/0x12 [ 1229.354697][T14286] ? load_image+0x400/0x400 [ 1229.359192][T14286] sysfs_create_dir_ns+0x26a/0x290 [ 1229.364306][T14286] ? sysfs_warn_dup+0xa0/0xa0 [ 1229.368984][T14286] ? do_raw_spin_unlock+0x11d/0x230 [ 1229.374172][T14286] kobject_add_internal+0x61c/0xcc0 [ 1229.379361][T14286] kobject_add+0x160/0x230 [ 1229.383765][T14286] ? kobject_init+0x1d0/0x1d0 [ 1229.388427][T14286] ? klist_children_get+0x50/0x50 [ 1229.393436][T14286] ? get_device_parent+0x121/0x3f0 [ 1229.398534][T14286] device_add+0x483/0xfb0 [ 1229.402854][T14286] ? kmem_cache_free+0xf7/0x290 [ 1229.407704][T14286] hci_conn_add_sysfs+0xd1/0x1e0 [ 1229.412630][T14286] le_conn_complete_evt+0x1062/0x1670 [ 1229.417991][T14286] ? le_conn_complete_evt+0xe9/0x1670 [ 1229.423350][T14286] ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0 [ 1229.429592][T14286] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 1229.435242][T14286] ? skb_pull_data+0xf7/0x200 [ 1229.439909][T14286] hci_le_conn_complete_evt+0x183/0x440 [ 1229.445448][T14286] ? hci_remote_host_features_evt+0x270/0x270 [ 1229.451506][T14286] hci_event_packet+0x7b9/0x1280 [ 1229.456440][T14286] ? bis_list+0x280/0x280 [ 1229.460761][T14286] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1229.466642][T14286] ? kcov_remote_start+0x4c7/0x7e0 [ 1229.471736][T14286] ? patch_conexant_auto+0x1260/0x1650 [ 1229.477183][T14286] ? hci_send_to_monitor+0x9c/0x4a0 [ 1229.482369][T14286] hci_rx_work+0x3eb/0xd40 [ 1229.486775][T14286] ? _raw_spin_unlock+0x40/0x40 [ 1229.491723][T14286] ? process_one_work+0x7b0/0x1160 [ 1229.496841][T14286] process_one_work+0x8a2/0x1160 [ 1229.501791][T14286] ? worker_detach_from_pool+0x240/0x240 [ 1229.507436][T14286] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1229.512446][T14286] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1229.517975][T14286] ? kthread_data+0x4b/0xc0 [ 1229.522484][T14286] worker_thread+0xaa2/0x1270 [ 1229.527186][T14286] ? __kthread_parkme+0x162/0x1c0 [ 1229.532210][T14286] kthread+0x29d/0x330 [ 1229.536262][T14286] ? worker_clr_flags+0x1a0/0x1a0 [ 1229.541284][T14286] ? kthread_blkcg+0xd0/0xd0 [ 1229.545871][T14286] ret_from_fork+0x1f/0x30 [ 1229.550291][T14286] [ 1229.555223][T14286] kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1229.568896][T14286] Bluetooth: hci3: failed to register connection device [ 1229.832881][T15735] fuse: Unknown parameter 'grou00000000000000000000' [ 1231.121297][T15731] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3187'. [ 1231.132491][T15731] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1231.162531][T15731] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1231.364958][T14286] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 1231.374633][T14286] CPU: 0 PID: 14286 Comm: kworker/u5:2 Not tainted syzkaller #0 [ 1231.382277][T14286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1231.392320][T14286] Workqueue: hci3 hci_rx_work [ 1231.396992][T14286] Call Trace: [ 1231.400255][T14286] [ 1231.403174][T14286] dump_stack_lvl+0x188/0x24e [ 1231.407846][T14286] ? show_regs_print_info+0x12/0x12 [ 1231.413051][T14286] ? load_image+0x400/0x400 [ 1231.417557][T14286] sysfs_create_dir_ns+0x26a/0x290 [ 1231.422657][T14286] ? sysfs_warn_dup+0xa0/0xa0 [ 1231.427330][T14286] ? do_raw_spin_unlock+0x11d/0x230 [ 1231.432513][T14286] kobject_add_internal+0x61c/0xcc0 [ 1231.437703][T14286] kobject_add+0x160/0x230 [ 1231.442119][T14286] ? kobject_init+0x1d0/0x1d0 [ 1231.446791][T14286] ? klist_children_get+0x50/0x50 [ 1231.451800][T14286] ? get_device_parent+0x121/0x3f0 [ 1231.456909][T14286] device_add+0x483/0xfb0 [ 1231.461224][T14286] ? kmem_cache_free+0xf7/0x290 [ 1231.466103][T14286] hci_conn_add_sysfs+0xd1/0x1e0 [ 1231.471070][T14286] le_conn_complete_evt+0x1062/0x1670 [ 1231.476450][T14286] ? le_conn_complete_evt+0xe9/0x1670 [ 1231.481819][T14286] ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0 [ 1231.488054][T14286] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 1231.493679][T14286] ? skb_pull_data+0xf7/0x200 [ 1231.498349][T14286] hci_le_conn_complete_evt+0x183/0x440 [ 1231.503883][T14286] ? hci_remote_host_features_evt+0x270/0x270 [ 1231.509955][T14286] hci_event_packet+0x7b9/0x1280 [ 1231.514898][T14286] ? bis_list+0x280/0x280 [ 1231.519216][T14286] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1231.525109][T14286] ? kcov_remote_start+0x4c7/0x7e0 [ 1231.530212][T14286] ? patch_conexant_auto+0x1260/0x1650 [ 1231.535683][T14286] ? hci_send_to_monitor+0x9c/0x4a0 [ 1231.540879][T14286] hci_rx_work+0x3eb/0xd40 [ 1231.545284][T14286] ? _raw_spin_unlock+0x40/0x40 [ 1231.550130][T14286] ? process_one_work+0x7b0/0x1160 [ 1231.555230][T14286] process_one_work+0x8a2/0x1160 [ 1231.560165][T14286] ? worker_detach_from_pool+0x240/0x240 [ 1231.565791][T14286] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1231.570807][T14286] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1231.576341][T14286] ? kthread_data+0x4b/0xc0 [ 1231.580836][T14286] worker_thread+0xaa2/0x1270 [ 1231.585516][T14286] ? __kthread_parkme+0x162/0x1c0 [ 1231.590537][T14286] kthread+0x29d/0x330 [ 1231.594592][T14286] ? worker_clr_flags+0x1a0/0x1a0 [ 1231.599605][T14286] ? kthread_blkcg+0xd0/0xd0 [ 1231.604184][T14286] ret_from_fork+0x1f/0x30 [ 1231.608602][T14286] [ 1231.612521][T14286] kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1231.626079][T14286] Bluetooth: hci3: failed to register connection device [ 1231.733230][ T8850] Bluetooth: hci3: command 0x2016 tx timeout [ 1233.074343][T15759] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3192'. [ 1233.932331][T14286] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 1233.941973][T14286] CPU: 0 PID: 14286 Comm: kworker/u5:2 Not tainted syzkaller #0 [ 1233.949596][T14286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1233.955830][ T8850] Bluetooth: hci3: command 0x2016 tx timeout [ 1233.959631][T14286] Workqueue: hci1 hci_rx_work [ 1233.959663][T14286] Call Trace: [ 1233.959671][T14286] [ 1233.959681][T14286] dump_stack_lvl+0x188/0x24e [ 1233.981138][T14286] ? show_regs_print_info+0x12/0x12 [ 1233.986354][T14286] ? load_image+0x400/0x400 [ 1233.990869][T14286] sysfs_create_dir_ns+0x26a/0x290 [ 1233.995995][T14286] ? sysfs_warn_dup+0xa0/0xa0 [ 1234.000667][T14286] ? do_raw_spin_unlock+0x11d/0x230 [ 1234.005857][T14286] kobject_add_internal+0x61c/0xcc0 [ 1234.011072][T14286] kobject_add+0x160/0x230 [ 1234.015480][T14286] ? kobject_init+0x1d0/0x1d0 [ 1234.020149][T14286] ? klist_children_get+0x50/0x50 [ 1234.025167][T14286] ? get_device_parent+0x121/0x3f0 [ 1234.030290][T14286] device_add+0x483/0xfb0 [ 1234.034620][T14286] ? kmem_cache_free+0xf7/0x290 [ 1234.039464][T14286] hci_conn_add_sysfs+0xd1/0x1e0 [ 1234.044397][T14286] le_conn_complete_evt+0x1062/0x1670 [ 1234.049763][T14286] ? le_conn_complete_evt+0xe9/0x1670 [ 1234.055139][T14286] ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0 [ 1234.061400][T14286] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 1234.067028][T14286] ? skb_pull_data+0xf7/0x200 [ 1234.071700][T14286] hci_le_conn_complete_evt+0x183/0x440 [ 1234.077240][T14286] ? hci_remote_host_features_evt+0x270/0x270 [ 1234.083390][T14286] hci_event_packet+0x7b9/0x1280 [ 1234.088331][T14286] ? bis_list+0x280/0x280 [ 1234.092654][T14286] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1234.098538][T14286] ? kcov_remote_start+0x4c7/0x7e0 [ 1234.103651][T14286] ? patch_conexant_auto+0x1260/0x1650 [ 1234.109105][T14286] ? hci_send_to_monitor+0x9c/0x4a0 [ 1234.114293][T14286] hci_rx_work+0x3eb/0xd40 [ 1234.118704][T14286] ? _raw_spin_unlock+0x40/0x40 [ 1234.123552][T14286] ? process_one_work+0x7b0/0x1160 [ 1234.128655][T14286] process_one_work+0x8a2/0x1160 [ 1234.133589][T14286] ? worker_detach_from_pool+0x240/0x240 [ 1234.139227][T14286] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1234.144258][T14286] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1234.149794][T14286] ? kthread_data+0x4b/0xc0 [ 1234.154304][T14286] worker_thread+0xaa2/0x1270 [ 1234.158993][T14286] ? __kthread_parkme+0x162/0x1c0 [ 1234.164013][T14286] kthread+0x29d/0x330 [ 1234.168066][T14286] ? worker_clr_flags+0x1a0/0x1a0 [ 1234.173098][T14286] ? kthread_blkcg+0xd0/0xd0 [ 1234.177674][T14286] ret_from_fork+0x1f/0x30 [ 1234.182092][T14286] [ 1234.186348][T14286] kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1234.199656][T14286] Bluetooth: hci1: failed to register connection device [ 1235.048883][T12410] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 1235.058431][T12410] CPU: 0 PID: 12410 Comm: kworker/u5:1 Not tainted syzkaller #0 [ 1235.066049][T12410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1235.076092][T12410] Workqueue: hci4 hci_rx_work [ 1235.080767][T12410] Call Trace: [ 1235.084032][T12410] [ 1235.086952][T12410] dump_stack_lvl+0x188/0x24e [ 1235.091631][T12410] ? show_regs_print_info+0x12/0x12 [ 1235.096821][T12410] ? load_image+0x400/0x400 [ 1235.101327][T12410] sysfs_create_dir_ns+0x26a/0x290 [ 1235.106441][T12410] ? sysfs_warn_dup+0xa0/0xa0 [ 1235.111143][T12410] ? do_raw_spin_unlock+0x11d/0x230 [ 1235.116342][T12410] kobject_add_internal+0x61c/0xcc0 [ 1235.121540][T12410] kobject_add+0x160/0x230 [ 1235.125947][T12410] ? kobject_init+0x1d0/0x1d0 [ 1235.130616][T12410] ? klist_children_get+0x50/0x50 [ 1235.135627][T12410] ? get_device_parent+0x121/0x3f0 [ 1235.140723][T12410] device_add+0x483/0xfb0 [ 1235.145042][T12410] ? kmem_cache_free+0xf7/0x290 [ 1235.149884][T12410] hci_conn_add_sysfs+0xd1/0x1e0 [ 1235.154815][T12410] le_conn_complete_evt+0x1062/0x1670 [ 1235.160175][T12410] ? le_conn_complete_evt+0xe9/0x1670 [ 1235.165553][T12410] ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0 [ 1235.171802][T12410] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 1235.177466][T12410] ? skb_pull_data+0xf7/0x200 [ 1235.182163][T12410] hci_le_conn_complete_evt+0x183/0x440 [ 1235.187708][T12410] ? hci_remote_host_features_evt+0x270/0x270 [ 1235.193800][T12410] hci_event_packet+0x7b9/0x1280 [ 1235.198736][T12410] ? bis_list+0x280/0x280 [ 1235.203151][T12410] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1235.209055][T12410] ? kcov_remote_start+0x4c7/0x7e0 [ 1235.214153][T12410] ? patch_conexant_auto+0x1260/0x1650 [ 1235.219603][T12410] ? hci_send_to_monitor+0x9c/0x4a0 [ 1235.224816][T12410] hci_rx_work+0x3eb/0xd40 [ 1235.229224][T12410] ? _raw_spin_unlock+0x40/0x40 [ 1235.234070][T12410] ? process_one_work+0x7b0/0x1160 [ 1235.239170][T12410] process_one_work+0x8a2/0x1160 [ 1235.244103][T12410] ? worker_detach_from_pool+0x240/0x240 [ 1235.249748][T12410] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1235.254769][T12410] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1235.260304][T12410] ? kthread_data+0x4b/0xc0 [ 1235.264803][T12410] worker_thread+0xaa2/0x1270 [ 1235.269478][T12410] ? __kthread_parkme+0x162/0x1c0 [ 1235.274509][T12410] kthread+0x29d/0x330 [ 1235.278577][T12410] ? worker_clr_flags+0x1a0/0x1a0 [ 1235.283590][T12410] ? kthread_blkcg+0xd0/0xd0 [ 1235.288169][T12410] ret_from_fork+0x1f/0x30 [ 1235.292583][T12410] [ 1235.360684][T15783] fuse: Unknown parameter 'grou00000000000000000000' [ 1235.957747][T12410] kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1235.971573][T12410] Bluetooth: hci4: failed to register connection device [ 1236.837648][T12410] Bluetooth: hci1: command 0x2016 tx timeout [ 1237.084216][T14286] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 1237.093907][T14286] CPU: 1 PID: 14286 Comm: kworker/u5:2 Not tainted syzkaller #0 [ 1237.101534][T14286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1237.111586][T14286] Workqueue: hci3 hci_rx_work [ 1237.116261][T14286] Call Trace: [ 1237.119530][T14286] [ 1237.122447][T14286] dump_stack_lvl+0x188/0x24e [ 1237.127138][T14286] ? show_regs_print_info+0x12/0x12 [ 1237.132353][T14286] ? load_image+0x400/0x400 [ 1237.136850][T14286] sysfs_create_dir_ns+0x26a/0x290 [ 1237.141953][T14286] ? sysfs_warn_dup+0xa0/0xa0 [ 1237.146633][T14286] ? do_raw_spin_unlock+0x11d/0x230 [ 1237.152948][T14286] kobject_add_internal+0x61c/0xcc0 [ 1237.158162][T14286] kobject_add+0x160/0x230 [ 1237.162574][T14286] ? kobject_init+0x1d0/0x1d0 [ 1237.167239][T14286] ? klist_children_get+0x50/0x50 [ 1237.172261][T14286] ? get_device_parent+0x121/0x3f0 [ 1237.177394][T14286] device_add+0x483/0xfb0 [ 1237.181724][T14286] ? kmem_cache_free+0xf7/0x290 [ 1237.186617][T14286] hci_conn_add_sysfs+0xd1/0x1e0 [ 1237.191554][T14286] le_conn_complete_evt+0x1062/0x1670 [ 1237.196917][T14286] ? le_conn_complete_evt+0xe9/0x1670 [ 1237.202281][T14286] ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0 [ 1237.208522][T14286] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 1237.214166][T14286] ? skb_pull_data+0xf7/0x200 [ 1237.218842][T14286] hci_le_conn_complete_evt+0x183/0x440 [ 1237.224397][T14286] ? hci_remote_host_features_evt+0x270/0x270 [ 1237.230471][T14286] hci_event_packet+0x7b9/0x1280 [ 1237.235416][T14286] ? bis_list+0x280/0x280 [ 1237.239748][T14286] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1237.245643][T14286] ? kcov_remote_start+0x4c7/0x7e0 [ 1237.250753][T14286] ? patch_conexant_auto+0x1260/0x1650 [ 1237.256229][T14286] ? hci_send_to_monitor+0x9c/0x4a0 [ 1237.261435][T14286] hci_rx_work+0x3eb/0xd40 [ 1237.265855][T14286] ? _raw_spin_unlock+0x40/0x40 [ 1237.270709][T14286] ? process_one_work+0x7b0/0x1160 [ 1237.275816][T14286] process_one_work+0x8a2/0x1160 [ 1237.280764][T14286] ? worker_detach_from_pool+0x240/0x240 [ 1237.286400][T14286] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1237.291421][T14286] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1237.296962][T14286] ? kthread_data+0x4b/0xc0 [ 1237.301474][T14286] worker_thread+0xaa2/0x1270 [ 1237.306167][T14286] ? __kthread_parkme+0x162/0x1c0 [ 1237.311200][T14286] kthread+0x29d/0x330 [ 1237.315259][T14286] ? worker_clr_flags+0x1a0/0x1a0 [ 1237.320278][T14286] ? kthread_blkcg+0xd0/0xd0 [ 1237.324860][T14286] ret_from_fork+0x1f/0x30 [ 1237.329286][T14286] [ 1238.009447][T14286] kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1238.022957][T14286] Bluetooth: hci3: failed to register connection device [ 1238.189488][T14286] Bluetooth: hci4: command 0x2016 tx timeout [ 1239.262492][T15821] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3213'. [ 1239.372890][T15825] fuse: Unknown parameter 'group_i00000000000000000000' [ 1240.201398][T12410] Bluetooth: hci3: command 0x2016 tx timeout [ 1241.498476][T12410] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 1241.508727][T12410] CPU: 1 PID: 12410 Comm: kworker/u5:1 Not tainted syzkaller #0 [ 1241.516369][T12410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1241.526409][T12410] Workqueue: hci4 hci_rx_work [ 1241.531079][T12410] Call Trace: [ 1241.534342][T12410] [ 1241.537256][T12410] dump_stack_lvl+0x188/0x24e [ 1241.541927][T12410] ? show_regs_print_info+0x12/0x12 [ 1241.547121][T12410] ? load_image+0x400/0x400 [ 1241.551620][T12410] sysfs_create_dir_ns+0x26a/0x290 [ 1241.556721][T12410] ? sysfs_warn_dup+0xa0/0xa0 [ 1241.561385][T12410] ? do_raw_spin_unlock+0x11d/0x230 [ 1241.566581][T12410] kobject_add_internal+0x61c/0xcc0 [ 1241.571788][T12410] kobject_add+0x160/0x230 [ 1241.576208][T12410] ? kobject_init+0x1d0/0x1d0 [ 1241.580885][T12410] ? klist_children_get+0x50/0x50 [ 1241.585907][T12410] ? get_device_parent+0x121/0x3f0 [ 1241.591013][T12410] device_add+0x483/0xfb0 [ 1241.595333][T12410] ? kmem_cache_free+0xf7/0x290 [ 1241.600193][T12410] hci_conn_add_sysfs+0xd1/0x1e0 [ 1241.605136][T12410] le_conn_complete_evt+0x1062/0x1670 [ 1241.610519][T12410] ? le_conn_complete_evt+0xe9/0x1670 [ 1241.615891][T12410] ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0 [ 1241.622135][T12410] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 1241.627773][T12410] ? skb_pull_data+0xf7/0x200 [ 1241.632450][T12410] hci_le_conn_complete_evt+0x183/0x440 [ 1241.637998][T12410] ? hci_remote_host_features_evt+0x270/0x270 [ 1241.644065][T12410] hci_event_packet+0x7b9/0x1280 [ 1241.649016][T12410] ? bis_list+0x280/0x280 [ 1241.653342][T12410] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1241.659231][T12410] ? kcov_remote_start+0x4c7/0x7e0 [ 1241.664339][T12410] ? patch_conexant_auto+0x1260/0x1650 [ 1241.669796][T12410] ? hci_send_to_monitor+0x9c/0x4a0 [ 1241.674991][T12410] hci_rx_work+0x3eb/0xd40 [ 1241.679404][T12410] ? _raw_spin_unlock+0x40/0x40 [ 1241.684258][T12410] ? process_one_work+0x7b0/0x1160 [ 1241.689368][T12410] process_one_work+0x8a2/0x1160 [ 1241.694311][T12410] ? worker_detach_from_pool+0x240/0x240 [ 1241.699942][T12410] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1241.704961][T12410] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1241.710500][T12410] ? kthread_data+0x4b/0xc0 [ 1241.715005][T12410] worker_thread+0xaa2/0x1270 [ 1241.719689][T12410] ? __kthread_parkme+0x162/0x1c0 [ 1241.724716][T12410] kthread+0x29d/0x330 [ 1241.728772][T12410] ? worker_clr_flags+0x1a0/0x1a0 [ 1241.733788][T12410] ? kthread_blkcg+0xd0/0xd0 [ 1241.738371][T12410] ret_from_fork+0x1f/0x30 [ 1241.742797][T12410] [ 1241.757657][T12410] kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1241.771653][T12410] Bluetooth: hci4: failed to register connection device [ 1242.976394][T12410] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 1242.986290][T12410] CPU: 1 PID: 12410 Comm: kworker/u5:1 Not tainted syzkaller #0 [ 1242.993932][T12410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1243.003981][T12410] Workqueue: hci3 hci_rx_work [ 1243.008673][T12410] Call Trace: [ 1243.011939][T12410] [ 1243.014855][T12410] dump_stack_lvl+0x188/0x24e [ 1243.019530][T12410] ? show_regs_print_info+0x12/0x12 [ 1243.024724][T12410] ? load_image+0x400/0x400 [ 1243.029238][T12410] sysfs_create_dir_ns+0x26a/0x290 [ 1243.034343][T12410] ? sysfs_warn_dup+0xa0/0xa0 [ 1243.039008][T12410] ? do_raw_spin_unlock+0x11d/0x230 [ 1243.044192][T12410] kobject_add_internal+0x61c/0xcc0 [ 1243.049381][T12410] kobject_add+0x160/0x230 [ 1243.053791][T12410] ? kobject_init+0x1d0/0x1d0 [ 1243.058460][T12410] ? klist_children_get+0x50/0x50 [ 1243.063471][T12410] ? get_device_parent+0x121/0x3f0 [ 1243.068568][T12410] device_add+0x483/0xfb0 [ 1243.072884][T12410] ? kmem_cache_free+0xf7/0x290 [ 1243.077725][T12410] hci_conn_add_sysfs+0xd1/0x1e0 [ 1243.082649][T12410] le_conn_complete_evt+0x1062/0x1670 [ 1243.088007][T12410] ? le_conn_complete_evt+0xe9/0x1670 [ 1243.093365][T12410] ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0 [ 1243.099594][T12410] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 1243.105219][T12410] ? skb_pull_data+0xf7/0x200 [ 1243.109882][T12410] hci_le_conn_complete_evt+0x183/0x440 [ 1243.115425][T12410] ? hci_remote_host_features_evt+0x270/0x270 [ 1243.121490][T12410] hci_event_packet+0x7b9/0x1280 [ 1243.126423][T12410] ? bis_list+0x280/0x280 [ 1243.130743][T12410] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1243.136629][T12410] ? kcov_remote_start+0x4c7/0x7e0 [ 1243.141744][T12410] ? patch_conexant_auto+0x1260/0x1650 [ 1243.147200][T12410] ? hci_send_to_monitor+0x9c/0x4a0 [ 1243.152388][T12410] hci_rx_work+0x3eb/0xd40 [ 1243.156798][T12410] ? _raw_spin_unlock+0x40/0x40 [ 1243.161641][T12410] ? process_one_work+0x7b0/0x1160 [ 1243.166740][T12410] process_one_work+0x8a2/0x1160 [ 1243.171675][T12410] ? worker_detach_from_pool+0x240/0x240 [ 1243.177299][T12410] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1243.182311][T12410] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1243.187843][T12410] ? kthread_data+0x4b/0xc0 [ 1243.192341][T12410] worker_thread+0xaa2/0x1270 [ 1243.197018][T12410] ? __kthread_parkme+0x162/0x1c0 [ 1243.202037][T12410] kthread+0x29d/0x330 [ 1243.206085][T12410] ? worker_clr_flags+0x1a0/0x1a0 [ 1243.211100][T12410] ? kthread_blkcg+0xd0/0xd0 [ 1243.215677][T12410] ret_from_fork+0x1f/0x30 [ 1243.220088][T12410] [ 1243.224509][T12410] kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1243.238070][T12410] Bluetooth: hci3: failed to register connection device [ 1243.524374][T12410] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 1243.538082][T12410] CPU: 1 PID: 12410 Comm: kworker/u5:1 Not tainted syzkaller #0 [ 1243.545719][T12410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1243.555769][T12410] Workqueue: hci1 hci_rx_work [ 1243.560434][T12410] Call Trace: [ 1243.563698][T12410] [ 1243.566620][T12410] dump_stack_lvl+0x188/0x24e [ 1243.571294][T12410] ? show_regs_print_info+0x12/0x12 [ 1243.576489][T12410] ? load_image+0x400/0x400 [ 1243.580994][T12410] sysfs_create_dir_ns+0x26a/0x290 [ 1243.586098][T12410] ? sysfs_warn_dup+0xa0/0xa0 [ 1243.590771][T12410] ? do_raw_spin_unlock+0x11d/0x230 [ 1243.595981][T12410] kobject_add_internal+0x61c/0xcc0 [ 1243.601211][T12410] kobject_add+0x160/0x230 [ 1243.605648][T12410] ? kobject_init+0x1d0/0x1d0 [ 1243.610331][T12410] ? klist_children_get+0x50/0x50 [ 1243.615352][T12410] ? get_device_parent+0x121/0x3f0 [ 1243.620461][T12410] device_add+0x483/0xfb0 [ 1243.624785][T12410] ? kmem_cache_free+0xf7/0x290 [ 1243.629640][T12410] hci_conn_add_sysfs+0xd1/0x1e0 [ 1243.634580][T12410] le_conn_complete_evt+0x1062/0x1670 [ 1243.639952][T12410] ? le_conn_complete_evt+0xe9/0x1670 [ 1243.645327][T12410] ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0 [ 1243.651572][T12410] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 1243.657212][T12410] ? skb_pull_data+0xf7/0x200 [ 1243.661891][T12410] hci_le_conn_complete_evt+0x183/0x440 [ 1243.667441][T12410] ? hci_remote_host_features_evt+0x270/0x270 [ 1243.673512][T12410] hci_event_packet+0x7b9/0x1280 [ 1243.678461][T12410] ? bis_list+0x280/0x280 [ 1243.682793][T12410] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1243.688686][T12410] ? kcov_remote_start+0x4c7/0x7e0 [ 1243.693794][T12410] ? patch_conexant_auto+0x1260/0x1650 [ 1243.699257][T12410] ? hci_send_to_monitor+0x9c/0x4a0 [ 1243.704455][T12410] hci_rx_work+0x3eb/0xd40 [ 1243.708870][T12410] ? _raw_spin_unlock+0x40/0x40 [ 1243.713724][T12410] ? process_one_work+0x7b0/0x1160 [ 1243.718837][T12410] process_one_work+0x8a2/0x1160 [ 1243.723784][T12410] ? worker_detach_from_pool+0x240/0x240 [ 1243.729416][T12410] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1243.734438][T12410] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1243.739982][T12410] ? kthread_data+0x4b/0xc0 [ 1243.744500][T12410] worker_thread+0xaa2/0x1270 [ 1243.749192][T12410] ? __kthread_parkme+0x162/0x1c0 [ 1243.754223][T12410] kthread+0x29d/0x330 [ 1243.758284][T12410] ? worker_clr_flags+0x1a0/0x1a0 [ 1243.763303][T12410] ? kthread_blkcg+0xd0/0xd0 [ 1243.767910][T12410] ret_from_fork+0x1f/0x30 [ 1243.772358][T12410] [ 1243.777998][T12410] kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1243.792152][T12410] Bluetooth: hci1: failed to register connection device [ 1243.800311][T12410] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 1243.810371][T12410] Bluetooth: hci1: Injecting HCI hardware error event [ 1243.819565][T14286] Bluetooth: hci1: hardware error 0x00 [ 1243.958011][T12410] Bluetooth: hci4: command 0x2016 tx timeout [ 1245.411576][T12410] Bluetooth: hci3: command 0x2016 tx timeout [ 1246.009723][T14286] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 1249.239418][T15937] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3254'. [ 1249.248667][T15937] netlink: 'syz.0.3254': attribute type 6 has an invalid length. [ 1249.265190][T15937] 9pnet_fd: Insufficient options for proto=fd [ 1250.250733][T15944] overlayfs: failed to clone upperpath [ 1250.331945][T15945] netlink: 312 bytes leftover after parsing attributes in process `syz.1.3255'. [ 1251.860793][T15957] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3258'. [ 1252.164131][T15959] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3259'. [ 1252.969672][T15969] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3265'. [ 1253.343452][T15976] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3266'. [ 1254.510219][T15984] overlayfs: failed to clone upperpath [ 1254.949262][T15994] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3272'. [ 1255.199450][T15997] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3273'. [ 1256.466672][T16007] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3278'. [ 1257.162548][T16017] netlink: 312 bytes leftover after parsing attributes in process `syz.2.3279'. [ 1257.173439][T16022] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3280'. [ 1257.250328][T16019] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1258.994014][T16034] overlayfs: failed to clone upperpath [ 1259.433383][T16043] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3286'. [ 1263.870903][T16064] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1264.330428][T16073] overlayfs: failed to clone upperpath [ 1264.758739][T16090] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3301'. [ 1266.570603][T16104] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1270.335809][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1270.343135][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1270.554459][T16129] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3316'. [ 1270.563728][T16129] netlink: 'syz.1.3316': attribute type 6 has an invalid length. [ 1270.624374][T16130] 9pnet_fd: Insufficient options for proto=fd [ 1271.532433][T16137] netlink: 'syz.4.3319': attribute type 39 has an invalid length. [ 1271.682316][T16139] overlayfs: failed to clone upperpath [ 1272.494600][T16150] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3320'. [ 1273.943521][T16162] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3324'. [ 1277.373193][T16195] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1278.383999][T16204] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3341'. [ 1280.357766][T14286] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 1280.368243][T14286] CPU: 1 PID: 14286 Comm: kworker/u5:2 Not tainted syzkaller #0 [ 1280.375904][T14286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1280.385985][T14286] Workqueue: hci4 hci_rx_work [ 1280.390695][T14286] Call Trace: [ 1280.393986][T14286] [ 1280.396930][T14286] dump_stack_lvl+0x188/0x24e [ 1280.401642][T14286] ? show_regs_print_info+0x12/0x12 [ 1280.406876][T14286] ? load_image+0x400/0x400 [ 1280.411428][T14286] sysfs_create_dir_ns+0x26a/0x290 [ 1280.416580][T14286] ? sysfs_warn_dup+0xa0/0xa0 [ 1280.421290][T14286] ? do_raw_spin_unlock+0x11d/0x230 [ 1280.426519][T14286] kobject_add_internal+0x61c/0xcc0 [ 1280.431739][T14286] kobject_add+0x160/0x230 [ 1280.436161][T14286] ? kobject_init+0x1d0/0x1d0 [ 1280.440845][T14286] ? klist_children_get+0x50/0x50 [ 1280.445886][T14286] ? get_device_parent+0x121/0x3f0 [ 1280.451084][T14286] device_add+0x483/0xfb0 [ 1280.455405][T14286] ? kmem_cache_free+0xf7/0x290 [ 1280.460263][T14286] hci_conn_add_sysfs+0xd1/0x1e0 [ 1280.465207][T14286] le_conn_complete_evt+0x1062/0x1670 [ 1280.470574][T14286] ? le_conn_complete_evt+0xe9/0x1670 [ 1280.475944][T14286] ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0 [ 1280.482194][T14286] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 1280.487843][T14286] ? skb_pull_data+0xf7/0x200 [ 1280.492513][T14286] hci_le_conn_complete_evt+0x183/0x440 [ 1280.498056][T14286] ? hci_remote_host_features_evt+0x270/0x270 [ 1280.504120][T14286] hci_event_packet+0x7b9/0x1280 [ 1280.509076][T14286] ? bis_list+0x280/0x280 [ 1280.513415][T14286] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1280.519308][T14286] ? kcov_remote_start+0x4c7/0x7e0 [ 1280.524423][T14286] ? patch_conexant_auto+0x1260/0x1650 [ 1280.529874][T14286] ? hci_send_to_monitor+0x9c/0x4a0 [ 1280.535067][T14286] hci_rx_work+0x3eb/0xd40 [ 1280.539478][T14286] ? _raw_spin_unlock+0x40/0x40 [ 1280.544332][T14286] ? process_one_work+0x7b0/0x1160 [ 1280.549436][T14286] process_one_work+0x8a2/0x1160 [ 1280.554378][T14286] ? worker_detach_from_pool+0x240/0x240 [ 1280.560031][T14286] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1280.565048][T14286] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1280.570584][T14286] ? kthread_data+0x4b/0xc0 [ 1280.575085][T14286] worker_thread+0xaa2/0x1270 [ 1280.579764][T14286] ? __kthread_parkme+0x162/0x1c0 [ 1280.584976][T14286] kthread+0x29d/0x330 [ 1280.590019][T14286] ? worker_clr_flags+0x1a0/0x1a0 [ 1280.595058][T14286] ? kthread_blkcg+0xd0/0xd0 [ 1280.599640][T14286] ret_from_fork+0x1f/0x30 [ 1280.604057][T14286] [ 1280.611745][T14286] kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1280.625063][T14286] Bluetooth: hci4: failed to register connection device [ 1283.165446][T14286] Bluetooth: hci4: command 0x2016 tx timeout [ 1284.494458][T16260] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3357'. [ 1285.617700][T16269] netlink: 'syz.1.3366': attribute type 39 has an invalid length. [ 1287.483260][T16289] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3371'. [ 1288.711715][T16300] fuse: Bad value for 'fd' [ 1291.912871][T16325] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3374'. [ 1292.729887][T16333] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3383'. [ 1293.136253][T16336] fuse: Bad value for 'fd' [ 1295.403094][T14286] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 1295.411906][T14286] Bluetooth: hci3: Injecting HCI hardware error event [ 1295.423010][T14286] Bluetooth: hci3: hardware error 0x00 [ 1296.769772][T16378] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3395'. [ 1297.583730][T16388] netlink: 'syz.0.3400': attribute type 8 has an invalid length. [ 1298.446325][T16389] fuse: Bad value for 'fd' [ 1298.843873][T14286] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 1300.154086][T16409] fuse: Bad value for 'user_id' [ 1302.763574][T16428] fuse: Bad value for 'fd' [ 1302.977145][T16427] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3411'. [ 1304.404507][T16449] fuse: Bad value for 'fd' [ 1307.235114][T16471] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3426'. [ 1307.442392][T16479] xt_hashlimit: size too large, truncated to 1048576 [ 1307.449599][T16479] xt_hashlimit: max too large, truncated to 1048576 [ 1309.889710][T16521] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3449'. [ 1313.859302][T16564] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3464'. [ 1315.895642][T12410] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 1315.905579][T12410] CPU: 0 PID: 12410 Comm: kworker/u5:1 Not tainted syzkaller #0 [ 1315.913223][T12410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1315.923270][T12410] Workqueue: hci4 hci_rx_work [ 1315.927954][T12410] Call Trace: [ 1315.931223][T12410] [ 1315.934143][T12410] dump_stack_lvl+0x188/0x24e [ 1315.938816][T12410] ? show_regs_print_info+0x12/0x12 [ 1315.944009][T12410] ? load_image+0x400/0x400 [ 1315.948505][T12410] sysfs_create_dir_ns+0x26a/0x290 [ 1315.953625][T12410] ? sysfs_warn_dup+0xa0/0xa0 [ 1315.958305][T12410] ? do_raw_spin_unlock+0x11d/0x230 [ 1315.963500][T12410] kobject_add_internal+0x61c/0xcc0 [ 1315.968695][T12410] kobject_add+0x160/0x230 [ 1315.973190][T12410] ? kobject_init+0x1d0/0x1d0 [ 1315.977858][T12410] ? klist_children_get+0x50/0x50 [ 1315.982873][T12410] ? get_device_parent+0x121/0x3f0 [ 1315.987976][T12410] device_add+0x483/0xfb0 [ 1315.992297][T12410] ? kmem_cache_free+0xf7/0x290 [ 1315.997144][T12410] hci_conn_add_sysfs+0xd1/0x1e0 [ 1316.002096][T12410] le_conn_complete_evt+0x1062/0x1670 [ 1316.007474][T12410] ? le_conn_complete_evt+0xe9/0x1670 [ 1316.012850][T12410] ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0 [ 1316.019088][T12410] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 1316.024715][T12410] ? skb_pull_data+0xf7/0x200 [ 1316.029411][T12410] hci_le_conn_complete_evt+0x183/0x440 [ 1316.034947][T12410] ? hci_remote_host_features_evt+0x270/0x270 [ 1316.041006][T12410] hci_event_packet+0x7b9/0x1280 [ 1316.045950][T12410] ? bis_list+0x280/0x280 [ 1316.050287][T12410] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1316.056169][T12410] ? kcov_remote_start+0x4c7/0x7e0 [ 1316.061283][T12410] ? patch_conexant_auto+0x1260/0x1650 [ 1316.066731][T12410] ? hci_send_to_monitor+0x9c/0x4a0 [ 1316.071922][T12410] hci_rx_work+0x3eb/0xd40 [ 1316.076330][T12410] ? _raw_spin_unlock+0x40/0x40 [ 1316.081178][T12410] ? process_one_work+0x7b0/0x1160 [ 1316.086277][T12410] process_one_work+0x8a2/0x1160 [ 1316.091210][T12410] ? worker_detach_from_pool+0x240/0x240 [ 1316.096857][T12410] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1316.101873][T12410] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1316.107408][T12410] ? kthread_data+0x4b/0xc0 [ 1316.111909][T12410] worker_thread+0xaa2/0x1270 [ 1316.116586][T12410] ? __kthread_parkme+0x162/0x1c0 [ 1316.121609][T12410] kthread+0x29d/0x330 [ 1316.125664][T12410] ? worker_clr_flags+0x1a0/0x1a0 [ 1316.130676][T12410] ? kthread_blkcg+0xd0/0xd0 [ 1316.135251][T12410] ret_from_fork+0x1f/0x30 [ 1316.139666][T12410] [ 1316.145605][T12410] kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1316.158871][T12410] Bluetooth: hci4: failed to register connection device [ 1316.839369][T16589] fuse: Invalid rootmode [ 1318.659788][T12410] Bluetooth: hci4: command 0x2016 tx timeout [ 1318.671856][T16602] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3478'. [ 1320.189533][T16613] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3482'. [ 1320.535721][T16625] fuse: Bad value for 'fd' [ 1321.978039][T16636] fuse: Invalid rootmode [ 1323.726941][T16659] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1323.735908][T16659] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1323.744672][T16659] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1323.753498][T16659] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1323.764330][T16659] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1323.773258][T16659] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1323.782534][T16659] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1323.791437][T16659] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1323.834896][T16660] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1323.843856][T16660] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1323.852572][T16660] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1323.861257][T16660] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1323.909942][T16660] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1323.919057][T16660] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1323.928171][T16660] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1323.937119][T16660] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1326.593445][T16693] fuse: Bad value for 'rootmode' [ 1327.963336][T16700] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3508'. [ 1330.319215][T16720] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1330.328088][T16720] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1330.336841][T16720] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1330.345775][T16720] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1331.131606][T16720] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1331.140667][T16720] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1331.149536][T16720] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1331.158392][T16720] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1332.348651][T16727] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1332.357903][T16727] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1332.366677][T16727] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1332.375418][T16727] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1332.510003][T16727] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1332.519016][T16727] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1332.527932][T16727] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1332.536908][T16727] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1332.645709][T16746] fuse: Bad value for 'rootmode' [ 1335.134835][T16764] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3531'. [ 1335.617194][T16777] fuse: Bad value for 'rootmode' [ 1336.019017][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1336.025460][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1336.339588][T16779] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3536'. [ 1337.337376][T16793] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3534'. [ 1337.372118][T16793] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 1337.381812][T16793] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 1337.420914][T14286] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 1337.430543][T14286] CPU: 1 PID: 14286 Comm: kworker/u5:2 Not tainted syzkaller #0 [ 1337.438172][T14286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1337.448237][T14286] Workqueue: hci4 hci_rx_work [ 1337.452921][T14286] Call Trace: [ 1337.456198][T14286] [ 1337.459121][T14286] dump_stack_lvl+0x188/0x24e [ 1337.463802][T14286] ? show_regs_print_info+0x12/0x12 [ 1337.468998][T14286] ? load_image+0x400/0x400 [ 1337.473515][T14286] sysfs_create_dir_ns+0x26a/0x290 [ 1337.478621][T14286] ? sysfs_warn_dup+0xa0/0xa0 [ 1337.483290][T14286] ? do_raw_spin_unlock+0x11d/0x230 [ 1337.488481][T14286] kobject_add_internal+0x61c/0xcc0 [ 1337.493696][T14286] kobject_add+0x160/0x230 [ 1337.498130][T14286] ? kobject_init+0x1d0/0x1d0 [ 1337.502799][T14286] ? klist_children_get+0x50/0x50 [ 1337.507812][T14286] ? get_device_parent+0x121/0x3f0 [ 1337.512915][T14286] device_add+0x483/0xfb0 [ 1337.517233][T14286] ? kmem_cache_free+0xf7/0x290 [ 1337.522078][T14286] hci_conn_add_sysfs+0xd1/0x1e0 [ 1337.527014][T14286] le_conn_complete_evt+0x1062/0x1670 [ 1337.532382][T14286] ? le_conn_complete_evt+0xe9/0x1670 [ 1337.537758][T14286] ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0 [ 1337.544013][T14286] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 1337.549653][T14286] ? skb_pull_data+0xf7/0x200 [ 1337.554339][T14286] hci_le_conn_complete_evt+0x183/0x440 [ 1337.559891][T14286] ? hci_remote_host_features_evt+0x270/0x270 [ 1337.565966][T14286] hci_event_packet+0x7b9/0x1280 [ 1337.570918][T14286] ? bis_list+0x280/0x280 [ 1337.575253][T14286] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1337.581181][T14286] ? kcov_remote_start+0x4c7/0x7e0 [ 1337.586295][T14286] ? patch_conexant_auto+0x1260/0x1650 [ 1337.591780][T14286] ? hci_send_to_monitor+0x9c/0x4a0 [ 1337.596985][T14286] hci_rx_work+0x3eb/0xd40 [ 1337.601403][T14286] ? _raw_spin_unlock+0x40/0x40 [ 1337.606291][T14286] ? process_one_work+0x7b0/0x1160 [ 1337.611405][T14286] process_one_work+0x8a2/0x1160 [ 1337.616361][T14286] ? worker_detach_from_pool+0x240/0x240 [ 1337.621998][T14286] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1337.627024][T14286] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1337.632566][T14286] ? kthread_data+0x4b/0xc0 [ 1337.637081][T14286] worker_thread+0xaa2/0x1270 [ 1337.641778][T14286] ? __kthread_parkme+0x162/0x1c0 [ 1337.646812][T14286] kthread+0x29d/0x330 [ 1337.650876][T14286] ? worker_clr_flags+0x1a0/0x1a0 [ 1337.655900][T14286] ? kthread_blkcg+0xd0/0xd0 [ 1337.660492][T14286] ret_from_fork+0x1f/0x30 [ 1337.664926][T14286] [ 1337.669997][T14286] kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1337.683547][T14286] Bluetooth: hci4: failed to register connection device [ 1337.712250][T16793] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1339.498904][T16817] fuse: Unknown parameter 'use00000000000000000000' [ 1340.131744][T14286] Bluetooth: hci4: command 0x2016 tx timeout [ 1343.056196][T16842] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3557'. [ 1343.076826][T16842] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1343.088289][T16842] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 1343.150278][T16842] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1344.421330][T16860] fuse: Invalid rootmode [ 1345.541204][T16867] fuse: Unknown parameter 'use00000000000000000000' [ 1350.818957][T16905] fuse: Bad value for 'rootmode' [ 1351.245989][T16906] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3575'. [ 1352.110024][T16917] fuse: Unknown parameter 'use00000000000000000000' [ 1355.702196][T16943] fuse: Bad value for 'rootmode' [ 1357.810900][T16965] netlink: 'syz.4.3598': attribute type 21 has an invalid length. [ 1358.326212][T16965] IPv6: NLM_F_CREATE should be specified when creating new route [ 1358.334996][T16965] netlink: 'syz.4.3598': attribute type 1 has an invalid length. [ 1359.057554][T16983] fuse: Bad value for 'rootmode' [ 1363.809913][T17024] fuse: Unknown parameter 'use00000000000000000000' [ 1366.966427][T17063] fuse: Unknown parameter 'use00000000000000000000' [ 1366.977683][T12410] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 1366.986472][T12410] Bluetooth: hci4: Injecting HCI hardware error event [ 1366.996661][T12410] Bluetooth: hci4: hardware error 0x00 [ 1369.198488][T12410] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 1369.345641][T17092] trusted_key: encrypted_key: keyword 'upfault' not recognized [ 1369.415654][T17094] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3644'. [ 1370.107629][T17118] fuse: Unknown parameter 'use00000000000000000000' [ 1371.444369][T17126] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3656'. [ 1372.840324][T17133] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3661'. [ 1375.399544][T17153] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3666'. [ 1380.456320][T17202] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3684'. [ 1380.689026][T17204] IPv6: NLM_F_CREATE should be specified when creating new route [ 1382.416503][T17228] device bridge1 entered promiscuous mode [ 1384.926650][T17259] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3706'. [ 1387.909423][T17301] fuse: Unknown parameter '0x0000000000000008' [ 1391.016592][T17338] fuse: Unknown parameter '0x0000000000000008' [ 1393.073718][T17355] fuse: Unknown parameter 'user_id00000000000000000000' [ 1394.593580][T17377] fuse: Unknown parameter '0x0000000000000008' [ 1396.230020][T17393] fuse: Unknown parameter 'user_id00000000000000000000' [ 1398.227191][T17447] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1398.246346][ T4354] lo speed is unknown, defaulting to 1000 [ 1400.539988][T17489] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3801'. [ 1400.551659][T17489] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3801'. [ 1400.560754][T17489] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check. [ 1400.848799][T17498] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3806'. [ 1401.620739][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1401.627326][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1402.575803][T17534] fuse: Unknown parameter '0x0000000000000008' [ 1403.917994][T17556] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3828'. [ 1405.095363][T17568] fuse: Unknown parameter '0x0000000000000008' [ 1407.307605][T17599] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3840'. [ 1411.717092][T17662] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3865'. [ 1412.014233][T17669] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3874'. [ 1412.849910][T17697] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3884'. [ 1413.123229][T17703] netlink: 'syz.1.3888': attribute type 4 has an invalid length. [ 1413.346837][T17707] Driver unsupported XDP return value 0 on prog (id 229) dev N/A, expect packet loss! [ 1413.807954][T17719] fuse: Unknown parameter '0x0000000000000008' [ 1415.302720][T17753] fuse: Unknown parameter '0x0000000000000008' [ 1416.299473][T17767] CIFS mount error: No usable UNC path provided in device string! [ 1416.299473][T17767] [ 1416.327923][T17767] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1416.928572][T17803] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3936'. [ 1418.170006][T17824] netlink: 144 bytes leftover after parsing attributes in process `syz.2.3944'. [ 1418.588186][T17834] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3945'. [ 1420.124425][T17846] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3953'. [ 1420.364857][T17856] netlink: 'syz.1.3957': attribute type 10 has an invalid length. [ 1420.384680][T17856] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3957'. [ 1420.394060][T17856] bridge0: port 4(dummy0) entered blocking state [ 1420.406143][T17856] bridge0: port 4(dummy0) entered disabled state [ 1420.424432][T17856] device dummy0 entered promiscuous mode [ 1420.436101][T17856] bridge0: port 4(dummy0) entered blocking state [ 1420.442563][T17856] bridge0: port 4(dummy0) entered forwarding state [ 1420.519921][T17856] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 1420.636299][T17864] fuse: Unknown parameter 'fd0x0000000000000008' [ 1421.513390][T17871] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3962'. [ 1421.528287][T17874] netlink: 'syz.0.3960': attribute type 10 has an invalid length. [ 1421.537469][T17874] bridge0: port 3(geneve1) entered disabled state [ 1421.544110][T17874] bridge0: port 2(bridge_slave_1) entered disabled state [ 1422.325840][T17874] bridge0: port 3(geneve1) entered blocking state [ 1422.332434][T17874] bridge0: port 3(geneve1) entered forwarding state [ 1422.339166][T17874] bridge0: port 2(bridge_slave_1) entered blocking state [ 1422.346287][T17874] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1422.359062][T17874] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1422.578278][T17891] IPv6: Can't replace route, no match found [ 1422.891175][T17902] fuse: Unknown parameter 'fd0x0000000000000008' [ 1423.902233][T17913] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3973'. [ 1424.931724][T17922] netlink: 'syz.3.3980': attribute type 3 has an invalid length. [ 1425.890010][T17932] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3974'. [ 1429.279579][T17987] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4000'. [ 1433.094702][T18049] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4018'. [ 1433.783146][T18058] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4028'. [ 1434.159788][T18070] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4029'. [ 1435.522327][T18092] netlink: 'syz.1.4043': attribute type 3 has an invalid length. [ 1435.828487][ T26] kauditd_printk_skb: 40 callbacks suppressed [ 1435.828502][ T26] audit: type=1326 audit(1777380741.707:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18105 comm="syz.4.4050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50adb9cdd9 code=0x7ffc0000 [ 1435.890919][ T26] audit: type=1326 audit(1777380741.744:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18105 comm="syz.4.4050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f50adb5d60e code=0x7ffc0000 [ 1435.929915][ T26] audit: type=1326 audit(1777380741.744:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18105 comm="syz.4.4050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f50adb5d60e code=0x7ffc0000 [ 1435.953704][ T26] audit: type=1326 audit(1777380741.744:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18105 comm="syz.4.4050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50adb9cdd9 code=0x7ffc0000 [ 1435.977156][ T26] audit: type=1326 audit(1777380741.744:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18105 comm="syz.4.4050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f50adb9cdd9 code=0x7ffc0000 [ 1436.000910][ T26] audit: type=1326 audit(1777380741.744:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18105 comm="syz.4.4050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50adb9cdd9 code=0x7ffc0000 [ 1436.522892][T18126] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4042'. [ 1436.953357][T18151] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4066'. [ 1439.964804][T18186] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4082'. [ 1439.987437][T18186] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4082'. [ 1440.006169][T18186] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4082'. [ 1440.042772][T18190] netlink: 'syz.1.4085': attribute type 10 has an invalid length. [ 1440.064734][T18190] bridge0: port 4(dummy0) entered disabled state [ 1440.071290][T18190] bridge0: port 3(geneve1) entered disabled state [ 1440.077907][T18190] bridge0: port 2(bridge_slave_1) entered disabled state [ 1440.085174][T18190] bridge0: port 1(bridge_slave_0) entered disabled state [ 1440.152326][T18190] bridge0: port 4(dummy0) entered blocking state [ 1440.158822][T18190] bridge0: port 4(dummy0) entered forwarding state [ 1440.165620][T18190] bridge0: port 3(geneve1) entered blocking state [ 1440.172131][T18190] bridge0: port 3(geneve1) entered forwarding state [ 1440.178989][T18190] bridge0: port 2(bridge_slave_1) entered blocking state [ 1440.186241][T18190] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1440.193659][T18190] bridge0: port 1(bridge_slave_0) entered blocking state [ 1440.200855][T18190] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1441.587250][T18198] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4084'. [ 1441.725162][T18190] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1443.679363][T18231] netlink: 'syz.2.4096': attribute type 7 has an invalid length. [ 1443.784521][T18231] netlink: 'syz.2.4096': attribute type 8 has an invalid length. [ 1444.353483][T18231] netlink: 'syz.2.4096': attribute type 13 has an invalid length. [ 1444.362026][T18222] netlink: 'syz.2.4096': attribute type 7 has an invalid length. [ 1444.433924][T18222] netlink: 'syz.2.4096': attribute type 8 has an invalid length. [ 1444.441855][T18222] netlink: 'syz.2.4096': attribute type 13 has an invalid length. [ 1445.171025][T18262] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4099'. [ 1445.256076][T18263] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4108'. [ 1445.938083][T18271] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4114'. [ 1445.947850][T18271] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4114'. [ 1445.961398][T18271] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4114'. [ 1446.290216][T18294] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1446.297505][T18294] IPv6: NLM_F_CREATE should be set when creating new route [ 1446.304756][T18294] IPv6: NLM_F_CREATE should be set when creating new route [ 1447.489270][T18309] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4129'. [ 1448.752310][T18321] tipc: Enabled bearer , priority 0 [ 1450.089975][T18344] xt_policy: too many policy elements [ 1450.191183][T18348] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4141'. [ 1452.961794][T18385] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4158'. [ 1456.653099][T18427] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4175'. [ 1458.956189][T18463] device batadv0 entered promiscuous mode [ 1458.984547][T18463] device macsec2 entered promiscuous mode [ 1459.012882][T18463] device batadv0 left promiscuous mode [ 1463.255462][T18517] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4212'. [ 1465.780502][T18547] fuse: Unknown parameter 'fd0x0000000000000008' [ 1466.512478][T18549] netlink: 'syz.1.4223': attribute type 8 has an invalid length. [ 1467.255792][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1467.262844][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1468.904838][T18609] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 1470.221200][T18649] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4264'. [ 1471.940160][T18684] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4279'. [ 1472.879149][T18691] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4281'. [ 1473.991909][T18705] device macsec3 entered promiscuous mode [ 1474.100553][T18708] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4288'. [ 1475.323782][T18729] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4296'. [ 1476.958008][T18753] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4306'. [ 1478.779926][T18773] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4312'. [ 1479.964606][T18777] tipc: Enabling of bearer rejected, failed to enable media [ 1481.030873][T18798] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4326'. [ 1482.897898][T18819] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4332'. [ 1485.702518][T18850] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4345'. [ 1488.921704][T18896] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4361'. [ 1489.829109][T18906] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4359'. [ 1490.989150][T18919] device ipvlan0 entered promiscuous mode [ 1491.016829][T18919] bridge0: port 1(ipvlan0) entered blocking state [ 1491.039814][T18919] bridge0: port 1(ipvlan0) entered disabled state [ 1491.690601][T18932] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4375'. [ 1492.323418][T18938] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4377'. [ 1493.439217][T18945] DRBG: could not allocate digest TFM handle: hmac(sha512) [ 1494.216888][T18997] capability: warning: `syz.3.4400' uses 32-bit capabilities (legacy support in use) [ 1494.797303][T19015] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4405'. [ 1496.461041][T19046] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4420'. [ 1497.363022][T19052] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4421'. [ 1500.836820][T19133] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4456'. [ 1502.301377][T19163] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4468'. [ 1503.005108][T19152] overlayfs: failed to resolve './file0': -2 [ 1505.189348][T19236] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4500'. [ 1505.205328][T19236] device ip6gre2 entered promiscuous mode [ 1505.215129][ T6580] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1505.223495][ T6580] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1505.242726][ T4312] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1505.343662][T19239] sch_tbf: burst 0 is lower than device veth0_to_team mtu (1514) ! [ 1505.563305][ T6580] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1505.786336][T19249] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4503'. [ 1506.295455][ T4312] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1506.716495][T19258] netlink: 'syz.3.4509': attribute type 2 has an invalid length. [ 1507.969479][T19282] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4518'. [ 1509.826946][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1510.787076][T19319] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4534'. [ 1513.274862][T19346] netlink: 'syz.4.4544': attribute type 29 has an invalid length. [ 1513.284502][T19346] netlink: 'syz.4.4544': attribute type 29 has an invalid length. [ 1513.293795][T19346] netlink: 'syz.4.4544': attribute type 29 has an invalid length. [ 1513.302283][T19346] netlink: 'syz.4.4544': attribute type 29 has an invalid length. [ 1517.418615][T19416] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4575'. [ 1519.230659][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1520.036784][T19447] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4587'. [ 1521.340290][T19466] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4592'. [ 1523.240856][T19488] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4601'. [ 1524.069358][T19497] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4605'. [ 1525.955132][T19528] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4617'. [ 1527.178246][T19541] syz.0.4620[19541] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1527.178354][T19541] syz.0.4620[19541] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1528.829395][T19561] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4630'. [ 1529.451753][T19563] 9pnet_fd: Insufficient options for proto=fd [ 1531.699249][T19604] bond0: (slave bond_slave_0): Slave does not support ipsec offload [ 1532.294374][T19651] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4665'. [ 1532.905717][T19652] netlink: 164 bytes leftover after parsing attributes in process `syz.0.4663'. [ 1532.918221][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1532.926025][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1535.258848][T19689] lo speed is unknown, defaulting to 1000 [ 1535.338579][T19692] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4685'. [ 1535.514653][T13331] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 4 [ 1535.743639][T19704] siw: device registration error -23 [ 1535.766876][T19704] netlink: 14 bytes leftover after parsing attributes in process `syz.4.4690'. [ 1535.864028][T19704] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1535.895187][T19704] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1535.914996][T19704] bond0 (unregistering): Released all slaves [ 1537.218968][T19740] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4704'. [ 1539.064061][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1540.153261][T19788] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4723'. [ 1541.908156][T19822] netlink: 'syz.0.4738': attribute type 1 has an invalid length. [ 1543.185281][T19848] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4750'. [ 1545.744114][T19883] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4766'. [ 1545.754986][T19883] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4766'. [ 1549.286170][T19935] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4787'. [ 1551.943912][T19976] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4806'. [ 1551.962237][T19976] netlink: 'syz.1.4806': attribute type 30 has an invalid length. [ 1551.977326][T19976] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1551.986640][T19976] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1551.995377][T19976] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1552.004093][T19976] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1552.045146][T19976] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4806'. [ 1552.054261][T19976] netlink: 'syz.1.4806': attribute type 30 has an invalid length. [ 1552.270452][T19988] tipc: New replicast peer: 255.255.255.255 [ 1552.279619][T19988] tipc: Enabled bearer , priority 10 [ 1553.101420][T20004] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4813'. [ 1555.420555][T20031] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4826'. [ 1556.234152][T20035] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4829'. [ 1562.360617][T20136] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4866'. [ 1562.939054][T20137] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4868'. [ 1566.277118][T20216] netlink: 'syz.1.4901': attribute type 3 has an invalid length. [ 1566.346086][T20220] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4902'. [ 1567.033575][T20244] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4914'. [ 1567.116311][T20247] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4915'. [ 1567.701008][T20265] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 1568.244985][T20285] overlayfs: failed to clone upperpath [ 1570.980859][T20374] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4965'. [ 1572.532396][T20417] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4980'. [ 1573.870472][T20427] netlink: 830 bytes leftover after parsing attributes in process `syz.2.4986'. [ 1574.488359][T20450] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4994'. [ 1575.280584][T20457] overlayfs: failed to clone lowerpath [ 1575.581777][T20470] overlayfs: failed to clone upperpath [ 1575.897788][T20478] overlayfs: failed to clone upperpath [ 1575.959415][T20480] syz.4.5009[20480] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1575.959564][T20480] syz.4.5009[20480] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1576.879373][ C1] ------------[ cut here ]------------ [ 1576.896234][ C1] WARNING: CPU: 1 PID: 20507 at net/mac80211/tx.c:4944 __ieee80211_beacon_get+0x1233/0x1600 [ 1576.906329][ C1] Modules linked in: [ 1576.910232][ C1] CPU: 1 PID: 20507 Comm: syz.4.5019 Not tainted syzkaller #0 [ 1576.917688][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1576.927758][ C1] RIP: 0010:__ieee80211_beacon_get+0x1233/0x1600 [ 1576.934091][ C1] Code: 24 4c 89 e7 e8 7e 06 0a f8 45 31 f6 4c 8b bc 24 a0 00 00 00 e9 7a fe ff ff e8 79 66 d1 f7 0f 0b e9 f6 f7 ff ff e8 6d 66 d1 f7 <0f> 0b e9 48 fb ff ff e8 61 66 d1 f7 48 c7 c7 50 f1 fa 8d 4c 89 e6 [ 1576.953698][ C1] RSP: 0018:ffffc900001e0a30 EFLAGS: 00010246 [ 1576.959769][ C1] RAX: ffffffff89b10ee3 RBX: ffffffff89b0fce6 RCX: ffff88802c768000 [ 1576.967764][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 1576.975738][ C1] RBP: 0000000000000000 R08: ffff88802c768000 R09: 0000000000000003 [ 1576.983707][ C1] R10: 0000000000000007 R11: 0000000000000100 R12: ffff88807bf4a228 [ 1576.991683][ C1] R13: dffffc0000000000 R14: ffff88807bf4a760 R15: ffff888055345c24 [ 1576.999661][ C1] FS: 00007f50aeaca6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1577.008577][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1577.015160][ C1] CR2: 00007f50adbea4c0 CR3: 000000004ce6f000 CR4: 00000000003506e0 [ 1577.023135][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1577.031112][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1577.039095][ C1] Call Trace: [ 1577.042381][ C1] [ 1577.045212][ C1] ? __ieee80211_beacon_get+0x36/0x1600 [ 1577.050749][ C1] ieee80211_beacon_get_tim+0x63/0x4e0 [ 1577.056211][ C1] mac80211_hwsim_beacon_tx+0x21c/0xae0 [ 1577.061746][ C1] ? read_lock_is_recursive+0x10/0x10 [ 1577.067125][ C1] __iterate_interfaces+0x243/0x500 [ 1577.072314][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 1577.078552][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x26/0x170 [ 1577.085750][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 1577.091978][ C1] ieee80211_iterate_active_interfaces_atomic+0xd7/0x170 [ 1577.099040][ C1] mac80211_hwsim_beacon+0xb7/0x1b0 [ 1577.104258][ C1] __hrtimer_run_queues+0x54a/0xd50 [ 1577.109491][ C1] ? hw_scan_work+0xf50/0xf50 [ 1577.114166][ C1] ? hrtimer_interrupt+0x9c0/0x9c0 [ 1577.119290][ C1] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 1577.125353][ C1] hrtimer_run_softirq+0x183/0x2a0 [ 1577.130478][ C1] handle_softirqs+0x2a1/0x930 [ 1577.135232][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 1577.140086][ C1] ? do_softirq+0x210/0x210 [ 1577.144579][ C1] ? irqtime_account_irq+0xb2/0x1b0 [ 1577.149793][ C1] __irq_exit_rcu+0x13b/0x230 [ 1577.154472][ C1] ? irq_exit_rcu+0x20/0x20 [ 1577.158972][ C1] irq_exit_rcu+0x5/0x20 [ 1577.163230][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 1577.168857][ C1] [ 1577.171790][ C1] [ 1577.174708][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1577.180684][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0xbc/0x120 [ 1577.187190][ C1] Code: c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f7 44 24 20 00 02 00 00 41 c6 04 07 f8 75 4b f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 2f dd 20 f7 65 8b 05 80 60 ca 75 85 c0 74 3c 48 c7 04 24 0e 36 [ 1577.206800][ C1] RSP: 0018:ffffc900046c75a0 EFLAGS: 00000206 [ 1577.212867][ C1] RAX: dffffc0000000004 RBX: 0000000000000a06 RCX: 5ecddd70ad3b3000 [ 1577.220847][ C1] RDX: dffffc0000000000 RSI: ffffffff8a8c1120 RDI: 0000000000000001 [ 1577.228824][ C1] RBP: ffffc900046c7630 R08: ffffffff90af92ef R09: 1ffffffff215f25d [ 1577.236799][ C1] R10: dffffc0000000000 R11: fffffbfff215f25e R12: dffffc0000000000 [ 1577.244762][ C1] R13: 0000000000000000 R14: ffff88807e3a3ec0 R15: 1ffff920008d8eb4 [ 1577.252756][ C1] ? _raw_spin_unlock+0x40/0x40 [ 1577.257612][ C1] ? __wake_up_common+0x2a4/0x4e0 [ 1577.262636][ C1] __wake_up_sync_key+0x128/0x190 [ 1577.267667][ C1] ? __wake_up_locked_key_bookmark+0x20/0x20 [ 1577.273640][ C1] ? sock_load_diag_module+0x130/0x130 [ 1577.279107][ C1] __unix_dgram_recvmsg+0x4c3/0xdc0 [ 1577.284304][ C1] ? unix_unhash+0x10/0x10 [ 1577.288814][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 1577.294000][ C1] ? mark_lock+0x94/0x320 [ 1577.298336][ C1] ? unix_dgram_recvmsg+0xa9/0xd0 [ 1577.303403][ C1] ? unix_dgram_sendmsg+0x16e0/0x16e0 [ 1577.308765][ C1] ____sys_recvmsg+0x2cb/0x5e0 [ 1577.313539][ C1] ? __sys_recvmsg_sock+0x40/0x40 [ 1577.318597][ C1] ? import_iovec+0x6f/0xa0 [ 1577.323175][ C1] ___sys_recvmsg+0x212/0x590 [ 1577.327895][ C1] ? __sys_recvmsg+0x290/0x290 [ 1577.332690][ C1] ? __lock_acquire+0x7d10/0x7d10 [ 1577.337697][ C1] ? __might_fault+0x4e/0x120 [ 1577.342407][ C1] ? __might_fault+0xc2/0x120 [ 1577.347067][ C1] ? __might_fault+0xa6/0x120 [ 1577.351734][ C1] do_recvmmsg+0x393/0x870 [ 1577.356153][ C1] ? __sys_recvmmsg+0x290/0x290 [ 1577.360995][ C1] ? __ia32_sys_get_robust_list+0x100/0x100 [ 1577.366889][ C1] ? rcu_read_lock_sched_held+0x86/0x110 [ 1577.372513][ C1] __x64_sys_recvmmsg+0x195/0x250 [ 1577.377536][ C1] ? do_recvmmsg+0x870/0x870 [ 1577.382111][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 1577.387319][ C1] do_syscall_64+0x4c/0xa0 [ 1577.391725][ C1] ? clear_bhb_loop+0x60/0xb0 [ 1577.396401][ C1] ? clear_bhb_loop+0x60/0xb0 [ 1577.401068][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1577.406962][ C1] RIP: 0033:0x7f50adb9cdd9 [ 1577.411374][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1577.431240][ C1] RSP: 002b:00007f50aeaca028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1577.439671][ C1] RAX: ffffffffffffffda RBX: 00007f50ade16090 RCX: 00007f50adb9cdd9 [ 1577.447634][ C1] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000004 [ 1577.455610][ C1] RBP: 00007f50adc32d69 R08: 0000000000000000 R09: 0000000000000000 [ 1577.463581][ C1] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1577.471549][ C1] R13: 00007f50ade16128 R14: 00007f50ade16090 R15: 00007ffd57258248 [ 1577.479517][ C1] [ 1577.482546][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1577.489805][ C1] CPU: 1 PID: 20507 Comm: syz.4.5019 Not tainted syzkaller #0 [ 1577.497239][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1577.507271][ C1] Call Trace: [ 1577.510531][ C1] [ 1577.513361][ C1] dump_stack_lvl+0x188/0x24e [ 1577.518024][ C1] ? memcpy+0x3c/0x60 [ 1577.521983][ C1] ? show_regs_print_info+0x12/0x12 [ 1577.527165][ C1] ? load_image+0x400/0x400 [ 1577.531656][ C1] panic+0x2e5/0x730 [ 1577.535536][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 1577.540027][ C1] __warn+0x2f8/0x4f0 [ 1577.543986][ C1] ? __ieee80211_beacon_get+0x1233/0x1600 [ 1577.549687][ C1] ? __ieee80211_beacon_get+0x1233/0x1600 [ 1577.555388][ C1] report_bug+0x2ba/0x4f0 [ 1577.559700][ C1] ? __ieee80211_beacon_get+0x1233/0x1600 [ 1577.565400][ C1] handle_bug+0x3a/0x70 [ 1577.569540][ C1] exc_invalid_op+0x16/0x40 [ 1577.574028][ C1] asm_exc_invalid_op+0x16/0x20 [ 1577.578859][ C1] RIP: 0010:__ieee80211_beacon_get+0x1233/0x1600 [ 1577.585165][ C1] Code: 24 4c 89 e7 e8 7e 06 0a f8 45 31 f6 4c 8b bc 24 a0 00 00 00 e9 7a fe ff ff e8 79 66 d1 f7 0f 0b e9 f6 f7 ff ff e8 6d 66 d1 f7 <0f> 0b e9 48 fb ff ff e8 61 66 d1 f7 48 c7 c7 50 f1 fa 8d 4c 89 e6 [ 1577.604749][ C1] RSP: 0018:ffffc900001e0a30 EFLAGS: 00010246 [ 1577.610795][ C1] RAX: ffffffff89b10ee3 RBX: ffffffff89b0fce6 RCX: ffff88802c768000 [ 1577.618746][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 1577.626697][ C1] RBP: 0000000000000000 R08: ffff88802c768000 R09: 0000000000000003 [ 1577.634664][ C1] R10: 0000000000000007 R11: 0000000000000100 R12: ffff88807bf4a228 [ 1577.642617][ C1] R13: dffffc0000000000 R14: ffff88807bf4a760 R15: ffff888055345c24 [ 1577.650573][ C1] ? __ieee80211_beacon_get+0x36/0x1600 [ 1577.656105][ C1] ? __ieee80211_beacon_get+0x1233/0x1600 [ 1577.661812][ C1] ? __ieee80211_beacon_get+0x36/0x1600 [ 1577.667354][ C1] ieee80211_beacon_get_tim+0x63/0x4e0 [ 1577.672800][ C1] mac80211_hwsim_beacon_tx+0x21c/0xae0 [ 1577.678348][ C1] ? read_lock_is_recursive+0x10/0x10 [ 1577.683705][ C1] __iterate_interfaces+0x243/0x500 [ 1577.688884][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 1577.695104][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x26/0x170 [ 1577.702280][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 1577.708498][ C1] ieee80211_iterate_active_interfaces_atomic+0xd7/0x170 [ 1577.715504][ C1] mac80211_hwsim_beacon+0xb7/0x1b0 [ 1577.720687][ C1] __hrtimer_run_queues+0x54a/0xd50 [ 1577.725871][ C1] ? hw_scan_work+0xf50/0xf50 [ 1577.730539][ C1] ? hrtimer_interrupt+0x9c0/0x9c0 [ 1577.735628][ C1] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 1577.741683][ C1] hrtimer_run_softirq+0x183/0x2a0 [ 1577.746788][ C1] handle_softirqs+0x2a1/0x930 [ 1577.751534][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 1577.756363][ C1] ? do_softirq+0x210/0x210 [ 1577.760845][ C1] ? irqtime_account_irq+0xb2/0x1b0 [ 1577.766025][ C1] __irq_exit_rcu+0x13b/0x230 [ 1577.770681][ C1] ? irq_exit_rcu+0x20/0x20 [ 1577.775168][ C1] irq_exit_rcu+0x5/0x20 [ 1577.779391][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 1577.785020][ C1] [ 1577.787933][ C1] [ 1577.790845][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1577.796804][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0xbc/0x120 [ 1577.803302][ C1] Code: c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f7 44 24 20 00 02 00 00 41 c6 04 07 f8 75 4b f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 2f dd 20 f7 65 8b 05 80 60 ca 75 85 c0 74 3c 48 c7 04 24 0e 36 [ 1577.822915][ C1] RSP: 0018:ffffc900046c75a0 EFLAGS: 00000206 [ 1577.828968][ C1] RAX: dffffc0000000004 RBX: 0000000000000a06 RCX: 5ecddd70ad3b3000 [ 1577.836921][ C1] RDX: dffffc0000000000 RSI: ffffffff8a8c1120 RDI: 0000000000000001 [ 1577.844876][ C1] RBP: ffffc900046c7630 R08: ffffffff90af92ef R09: 1ffffffff215f25d [ 1577.852826][ C1] R10: dffffc0000000000 R11: fffffbfff215f25e R12: dffffc0000000000 [ 1577.860780][ C1] R13: 0000000000000000 R14: ffff88807e3a3ec0 R15: 1ffff920008d8eb4 [ 1577.868760][ C1] ? _raw_spin_unlock+0x40/0x40 [ 1577.873595][ C1] ? __wake_up_common+0x2a4/0x4e0 [ 1577.878609][ C1] __wake_up_sync_key+0x128/0x190 [ 1577.883621][ C1] ? __wake_up_locked_key_bookmark+0x20/0x20 [ 1577.889590][ C1] ? sock_load_diag_module+0x130/0x130 [ 1577.895040][ C1] __unix_dgram_recvmsg+0x4c3/0xdc0 [ 1577.900225][ C1] ? unix_unhash+0x10/0x10 [ 1577.904622][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 1577.909829][ C1] ? mark_lock+0x94/0x320 [ 1577.914148][ C1] ? unix_dgram_recvmsg+0xa9/0xd0 [ 1577.919155][ C1] ? unix_dgram_sendmsg+0x16e0/0x16e0 [ 1577.924508][ C1] ____sys_recvmsg+0x2cb/0x5e0 [ 1577.929264][ C1] ? __sys_recvmsg_sock+0x40/0x40 [ 1577.934283][ C1] ? import_iovec+0x6f/0xa0 [ 1577.938771][ C1] ___sys_recvmsg+0x212/0x590 [ 1577.943437][ C1] ? __sys_recvmsg+0x290/0x290 [ 1577.948207][ C1] ? __lock_acquire+0x7d10/0x7d10 [ 1577.953216][ C1] ? __might_fault+0x4e/0x120 [ 1577.957880][ C1] ? __might_fault+0xc2/0x120 [ 1577.962547][ C1] ? __might_fault+0xa6/0x120 [ 1577.967210][ C1] do_recvmmsg+0x393/0x870 [ 1577.971626][ C1] ? __sys_recvmmsg+0x290/0x290 [ 1577.976476][ C1] ? __ia32_sys_get_robust_list+0x100/0x100 [ 1577.982350][ C1] ? rcu_read_lock_sched_held+0x86/0x110 [ 1577.987991][ C1] __x64_sys_recvmmsg+0x195/0x250 [ 1577.993004][ C1] ? do_recvmmsg+0x870/0x870 [ 1577.997585][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 1578.002767][ C1] do_syscall_64+0x4c/0xa0 [ 1578.007178][ C1] ? clear_bhb_loop+0x60/0xb0 [ 1578.011844][ C1] ? clear_bhb_loop+0x60/0xb0 [ 1578.016510][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1578.022390][ C1] RIP: 0033:0x7f50adb9cdd9 [ 1578.026789][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1578.046376][ C1] RSP: 002b:00007f50aeaca028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1578.054770][ C1] RAX: ffffffffffffffda RBX: 00007f50ade16090 RCX: 00007f50adb9cdd9 [ 1578.062733][ C1] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000004 [ 1578.070691][ C1] RBP: 00007f50adc32d69 R08: 0000000000000000 R09: 0000000000000000 [ 1578.078655][ C1] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1578.086623][ C1] R13: 00007f50ade16128 R14: 00007f50ade16090 R15: 00007ffd57258248 [ 1578.094589][ C1] [ 1578.097890][ C1] Kernel Offset: disabled [ 1578.102246][ C1] Rebooting in 86400 seconds..