last executing test programs: 4m20.173037715s ago: executing program 1 (id=156): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000003e000701fcfffffffddbdf25027c0000040036800c000180069906008e0a0000"], 0x24}, 0x1, 0x0, 0x0, 0x488c0}, 0xc050) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000140)=[{&(0x7f0000000340)="5800000014001923fc834b80040d8c560a067f020000000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd001a0010000300080c10000000000000000000", 0x58}], 0x1) connect$pppl2tp(r3, &(0x7f0000001080)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x41, 0x0, @multicast2}, 0x20020003}}, 0x2e) recvmmsg(r0, &(0x7f0000002080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)=""/204, 0xcc}, 0x6c1b}], 0x1, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180200000020702500000000002020207b1af8ff00000000bfa100000000000007010000dbffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4b, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8c}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r12, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r11, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r6, 0x0, 0xfffffffffffffffc}, 0x18) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 4m17.701232853s ago: executing program 1 (id=162): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x202080, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x490420}}, 0x50) syz_fuse_handle_req(r1, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) syz_fuse_handle_req(r1, &(0x7f0000006340)="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", 0x2000, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) gettid() close_range(r0, 0xffffffffffffffff, 0x0) 4m17.137129978s ago: executing program 1 (id=166): socket(0x10, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xffff, 0x20000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x7b53a000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002280)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a}, [@FRA_GENERIC_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e20, 0x4e22}}]}, 0x24}}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) recvmsg(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000780)=""/243, 0x11000}], 0x1}, 0x142) 4m15.7433095s ago: executing program 1 (id=171): socket(0x10, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xffff, 0x20000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x7b53a000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002280)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a}, [@FRA_GENERIC_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e20, 0x4e22}}]}, 0x24}}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) recvmsg(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000780)=""/243, 0x11000}], 0x1}, 0x142) 4m14.321049704s ago: executing program 1 (id=175): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x75b08000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e27}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ff"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) unshare(0x42000000) 4m10.589222843s ago: executing program 0 (id=181): syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_INIT(r2, &(0x7f0000000380)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x0, 0x10000, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x10}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) statx(0xffffffffffffff9c, 0x0, 0x0, 0x20, 0x0) 4m10.459319933s ago: executing program 0 (id=182): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route_sched(r4, 0x0, 0x8080) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$P9_RVERSION(0xffffffffffffffff, &(0x7f00000005c0)=ANY=[@ANYBLOB], 0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000380)) gettid() signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffffb]}, 0x8, 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x40, 0x0, 0xfd}, {0x6}]}, 0x10) 4m9.50197642s ago: executing program 1 (id=186): ptrace(0x10, 0x0) ptrace$setsig(0x4203, 0x0, 0x80, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) 4m9.391206909s ago: executing program 0 (id=187): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x1, 0x5}}, 0x10) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) 4m7.923659956s ago: executing program 0 (id=189): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r0}, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000480)={0x0, 'dummy0\x00', {0x3}, 0x7}) 4m6.696341415s ago: executing program 0 (id=190): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x75b08000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e27}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) unshare(0x42000000) 4m5.12591716s ago: executing program 0 (id=194): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000380)=@filename='./file0\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018", @ANYRES32, @ANYBLOB="0000000000000000b7080000300000207b8af8ff00000000bfa200"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000001540)='./file1\x00', 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c00a3a2a4e7417e941910c27d130b55ac2d5f7a61e59ec6d5de07239091924c32eeb367d16409d6d3ec1fb755f9a7989ebc4e96918e268f0b7acebf67c07bc4731250f87d27b5e9e61000e70f0c6a4e2432073d0d3e18f864e9ef64637d14e5485f36e53c821cb5898685c055a367ea51b653eff6581710f6c3824bc667bd24219163c60803099f985567be0d978e301b4f6603628606afadb04eee58f42f1853f2e8598a5e250e0f4c9a", @ANYRESOCT, @ANYRES32=r4, @ANYRESDEC], 0x1, 0x150e, &(0x7f0000001580)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) 3m53.620044122s ago: executing program 32 (id=186): ptrace(0x10, 0x0) ptrace$setsig(0x4203, 0x0, 0x80, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) 3m49.977849893s ago: executing program 33 (id=194): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000380)=@filename='./file0\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018", @ANYRES32, @ANYBLOB="0000000000000000b7080000300000207b8af8ff00000000bfa200"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000001540)='./file1\x00', 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c00a3a2a4e7417e941910c27d130b55ac2d5f7a61e59ec6d5de07239091924c32eeb367d16409d6d3ec1fb755f9a7989ebc4e96918e268f0b7acebf67c07bc4731250f87d27b5e9e61000e70f0c6a4e2432073d0d3e18f864e9ef64637d14e5485f36e53c821cb5898685c055a367ea51b653eff6581710f6c3824bc667bd24219163c60803099f985567be0d978e301b4f6603628606afadb04eee58f42f1853f2e8598a5e250e0f4c9a", @ANYRESOCT, @ANYRES32=r4, @ANYRESDEC], 0x1, 0x150e, &(0x7f0000001580)="$eJzs3Qu4TtX2MPAx5pyLTeJNcp9jjsWbXCZJkkuSXJIkOZLklpAkSRISm9ySkITck9xDcgvJ/X7LPUmOJElCQpL5Pep0nHM6/6/z/875f87/7PF7nvW8czxzjbnGMuz9rrWed+/9dYdBVepVrViHmeGfgr+8pAJACgD0BYAsABABQMmsJbNems+gMfWfO4j413pg6pWuQFxJ0v+0Tfqftkn/0zbpf9om/U/bpP9pm/Q/bZP+C5GWbZ2W6xrZ0u72zz//T/nlRZ7//y8k7///4dT/fVr6/5/mdIb/zt7S//8kF0MI/70M6X/aJv1P26T/aZv0P22T/qdt0n8h0rIr89w5HQBc+WffsuW65kr//xNCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIkTacC5cZAPh1fKXrEkIIIYQQQgghxL9OSH+lKxBCCCGEEEIIIcT/PAQFGgxEkA7SQwpkgIxwFWSCqyEzZIEEXANZ4VrIBtdBdsgBOSEX5IY8kBcsEDhgiCEf5IckXA8F4AYoCIWgMBQBD0WhGNwIxeEmKAE3Q0m4BUrBrVAaykBZKAe3QXm4HSrAHVAR7oRKUBmqQFW4C6rB3VAd7oEacC/UhPugFtwPteEPUAcegLrwINSDh6A+PAwNoCE0gsbQ5P8p/3noAi9AV+gGqdAdesCL0BN6QW/oA33hJegHL0N/eAUGwEAYBK/CYHgNhsDrMBSGwXB4A0bASBgFo2EMjIVx8CaMh7dgArwNE2ESTIYpMBWmwXR4B2bATJgF78JseA/mwFyYB/NhAbwPC2ERLIYPYAl8CEthGSyHFfAjrILVsAbWwjpYDxtgI2yCzbAFtsJHsA22ww7YCbtgN+yBj2EvfAL74FPYD5/9OX/lP5R/9m/yOyIgoEKFBg2mw3SYgimYETNiJsyEmTEzJjCBWTErZsNsmB2zY07MibkxN+bFvEhIyMiYD/NhEpNYAAtgQSyIhbEwevRYDIthcbwJS2AJLIklsRSWwtJYBstgOSyH5bE8VsAKWBErYiWshFWwCt6Fd+HdWB2rYw2sgTWxJtbCWlgba2MdrIN1sS7Ww3pYH+tjA2yAjbARNsEm2BSbYjNshi2wBbbEltgKW2FrbI1tsA22xbbYDtthe2yPHbADdsRO2Amfx+fxBXwBu2El1R17YA/siT2xN/bBPvgS9sOX8WV8BQfgQByEr+Kr+BoOwTM4FIfhcByO5dVIHIWjkdVYHIfjcDyOxwk4ASfiJJyEU3AqTsPpOB1n4Eycie/ibHwP38O5OBfn4wJcgAtxES7GxbgEz+JSXIbLcQWuxFW4EtfgWlyD63EDrsdNuAm34Bb8CD/C7bgdd+JO3I278WP8GD/BT3AA7sf9eAAP4EE8iIfwEB7Gw3gEj+BRPIrH8Bgex+N4Ak/iKTyJp/E0nsGzeA7P4Xk8jxfwAl7Ei5e++NUlRhmVTqVTKSpFZVQZVSaVSWVWmVVCJVRWlVVlU9lUdpVd5VQ5VW6VW+VVeRUpUqxilU/lU0mVVAVUAVVQFVSFVWHllVfFVDFVXBVXJVQJVVLdokqpW1VpVUY19+VUOVVetfAV1B2qoqqoKqnKqoqqqqqqaqqaqq6qqxqqhqqpaqpa6n5VW3XH3viAutSZemog1leDsIFqqBqpxuo1fEQ1VUOwmWquWqjH1DAciq1UU99aPanaqFHYVj2tRuMzqr0aix3Uc6qj6qQ6q+dVF9XMd1Xd1ETsrnqoKdhT9VK9VR81AyurSx2rol5RA9RANUi9qubja2qIel0NVcPUcPWGGqFGqlFqtBqjxqpx6k01Xr2lJqi31UQ1SU1WU9RUNU1NV++oGWqmmqXeVbPVe2qOmqvmqflqgXpfLVSL1GL1gVqiPlRL1TK1XK1QK9UqtVqtUWvVOrVebVAb1Sa1WW1RW9VHapvarnaonWqX2q32qI/VXvWJ2qc+VfvVZ+qA+qM6qD5Xh9QX6rD6Uh1RX6mj6mt1TH2jjqtv1Ql1Up1S36nT6nt1Rp1V59QP6rz6UV1QP6mLKijQqJXW2uhIp9PpdYrOoDPqq3QmfbXOrLPohL5GZ9XX6mz6Op1d59A5dS6dW+fRebXVpJ1mHet8Or9O6ut1AX2DLqgL6cK6iPa6qC6mb9TF9U26hL5Zl9S36FL6Vl1al9FldTl9my6vb9cV9B26or5TV9KVdRVdVd+lq+m7dXV9j66h79U19X26lr5f19Z/0HX0A7quflDX0w/p+vph3UA31I10Y91EP6Kb6kd1M91ct9CP6Zb6cd1KP6Fb6yd1G/2Ubquf1u30M7q9flZ30M/pjrqT7qx/0hd10F11N52qu+se+kXdU/fSvXUf3Ve/pPvpl3V//YoeoAfqQfpVPVi/pofo1/VQPUwP12/oEXqkHqVH6zF6rB6n39Tj9Vt6gn5bT9ST9GQ9RU/V03TvP6006x/If+vv5Pf/+ehb9Fb9kd6mt+sdeqfepXfrPXqP3qv36n16n96v9+sD+oA+qA/qQ/qQPqwP6yP6iD6qj+pj+pg+ro/rE/qk/kF/p0/r7/UZfVaf1T/o8/q8vvCnfwMwaJTRxpjIpDPpTYrJYDKaq0wmc7XJbLKYhLnGZDXXmmzmOpPd5DA5TS6T2+QxeY01ZJxhE5t8Jr9JmutNAXODKWgKmcKmiPGmqClmbvyn83+vviamiWlqmppmpplpYVqYlqalaWVamdamtWlj2pi2pq1pZ9qZ9qa96WA6mI6mo+lsOpsuposJAJBqUk0P86LpaXqZ3qaP6WteMv1MP9Pf9DcDzAAzyAwyg81gM8QMMUPNUDPcDDcjzAgzyowyY8wYM86MM+PNeDPBTDATzUQz2Uw2U81UM91MNzPMDDPLzDKzzWwzx8wx88w8s8AsMAvNQrPYLDZLzBKz1Cwzy8wKs8KsMqvMGrPGrDPrzAazwWwym8xS8+sHNHeYHWaX2WX2mD1mr9lr9pl9Zr/Zbw6YA+agOWgOmUPmsDlsjpgj5qg5ao6ZY+a4OW5OmBPmlDllTpvT5ow5Y86Zc+a8OW8umAvmorl46bIvUpGKTGSidFG6KCVKiTJGGaNMUaYoc5Q5SkSJKGuUNcoWXRdlj3JEOaNcUe4oT5Q3shFFLuIojvJF+aNkdH1UILohKhgVigpHRSIfFY2KRTdGxaObohLRzVHJ6JaoVHRrVDoqE5WNykW3ReWj26MK0R1RxejOqFJUOaoSVY3uiqpFd0fVo3uiGtG9Uc3ovqhWdH9UO/pDVCd6IKobPRjVix6K6kcPRw2ihlGjqHHU5F+6fghncjzqu9puNtV2tz3si7an7WV72z62r33J9rMv2/72FTvADrSD7Kt2sH3NDrGv26F2mB1u37Aj7Eg7yo62Y+xYO86+acfbt+wE+7adaCfZyXaKnWqn2en2HTvDzrSz7Lt2tn3PzrFz7Tw73y6w79uFdpFdbD+wS+yHdimkAtgVdqVdZVfbNXatXWfX2w12o91kN9stdqv9yG6z2+0Ou9PusrvtHvux3Ws/sfvsp3a//cwesH+0B+3n9pD9wh62X9oj9it71H5tj9lv7HH7rT1hT9pT9jt72n5vz9iz9pz9wZ63P9oL9id70YZLF/eX3t7JkKF0lI5SKIUyUkbKRJkoM2WmBCUoK2WlbJSNslN2ykk5KTflpryUly5hYspH+ShJSSpABaggFaTCVJg8eSpGxag4FacSVIJKUkkqRaWoNJWmsnTpfuQ2up1upzvoDrqT7qTKVJmqUlWqRtWoOlWnGlSDalJNqkW1qDbVpjpUh+pSXapH9ag+1acG1IAaUSNqQk2oKTWlZtSMWlALakktqRW1otbUmtpQG2pLbakdtaP21J46UAfqSB2pM3WmLtSFulJXSqVU6kE9qCf1pN7Ue0Am6kv9qB/1p/40gAbQIBpEg2kwDaEhNJSG0XB6g0bQSBpFo2kMjaVxNI7G03iaQBNoIk2kyTSZptJUmk7TaQbNoFk0i2bTbJpDc2gezaMFtIAW0kJaTItpCS2hpbSUltNyWkkraTWtprW0ltbTetpIG2kzbaattJW20TbaQTtoF+2iPbSH9tJe2kf7aD/tpwN0gA7SQTpEh+gwHaYjdISO0lE6RsfoOB2nE3QCT9EpOk2n6QydoXN0js7Tj3SBfqKLFCjFZXAZ3VUuk7vaZXZZXIrL0A0A/hzndLlcbpfH5XXWZXc5/iom51xBV8gVdkWcd0VdMXfjb+LSrowr68q521x5d7ur8Ju4mrvbVXf3uBruXlfV3fVXcU13n6vlHnK13cOujmvo6rrGrp57yNV3D7sGrqFr5Bq7lu5x18o94Vq7J10b99Rv4oVukVvr1rn1boPb6z5x59wP7qj72p13P7qurpvr615y/dzLrr97xQ1wA38TD3dvuBFupBvlRrsxbuxv4sluipvqprnp7h03w838TbzAve9mu8Vujpvr5rn5P8eXalrsPnBL3IduqVvmlrsVbqVb5Va7NX+udYXb5Da7LW6P+9htc9vdDrfT7XK7f44vncc+96nb7z5zR9xX7qD73B1yx9xh9+XP8aXzO+a+ccfdt+6EO+lOue/cafe9O+PO/nz+l879O/eTu+iCA0ZWrNlwxOk4PadwBs7IV3EmvpozcxZO8DWcla/lbHwdZ+ccnJNzcW7Ow3nZMrFj5pjzcX5O8vVcgG/gglyIC3MR9lyUi/GNXJxv4hJ8M5fkW7gU38qluQyX5XJ8G5fn27kC38EV+U6uxJW5Clflu7ga383V+R6uwfdyTb6Pa/H9XJv/wHX4Aa7LD3I9fojr88PcgBtyI27MTfgRbsqPcjNuzi34MW7Jj3MrfoJb85Pchp/itvw0t+NnuD0/yx34Oe7InbgzP89d+AXuyt04lbtzD36Re3Iv7s19uC+/xP34Ze7Pr/AAHsiD+FUezK/xEH6dh/IwHs5v8AgeyaN4NI/hsTyO3+Tx/BZP4Ld5Ik/iyTyFp/I0ns7v8AyeybP4XZ7N7/EcnsvzeD4v4Pd5IS/ixfwBL+EPeSkv4+W8glfyKl7Na3gtr+P1vIE38ibezFt4K3/E23g77+CdvIt38x7+mPfyJ7yPP+X9/Bkf4D/yQf6cD/EXfJi/5CP8FR/lr/kYf8PH+Vs+wSf5FH/Hp/l7PsNn+Rz/wOf5R77AP/FFDgwxxirWsYmjOF2cPk6JM8QZ46viTPHVceY4S5yIr4mzxtfG2eLr4uxxjjhnnCvOHeeJ88Y2ptjFHMdxvjh/nIyvjwvEN8QF40Jx4bhI7OOicbH4xrh4fFNcIr45LhnfEpeKb41Lx2XisnG5+La4fHx7XCG+I64Y3xlXiivHVeKq8V1xtfjuuHp8T1wjvjcuEd8X14rvj2vHf4jrxA/EdeMH43rxQ3H9+OG4QdwwbhQ3jpvEj8RN40fjZnHzuEX8WNwyfjxuFT8Rt46fjNvET/3ufGrcPe4Rvxi/GIdwj56XnJ9ckHw/uTC5KLk4+UFySfLD5NLksuTy5IrkyuSq5OrkmuTa5Lrk+uSG5MbkpuTm5JZkCFXTg0evvPbGRz6dT+9TfAaf0V/lM/mrfWafxSf8NT6rv9Zn89f57D6Hz+lz+dw+j8/rrSfvPPvY5/P5fdJf7wv4G3xBX8gX9kW890V9Md/YN/FNfFP/qG/mm/sW/jH/mH/cP+6f8E/4J30b/5Rv65/27fwzvr1/1j/rn/MdfSff2T/vu/gXfFffzaf6VN/D9/A9fU/f2/f2fX1f38/38/19fz/AD/CD/CA/2A/2Q/wQP9QP9cP9cD/Cj/Cj/Cg/xo/x4/w4P96P9xP8BD/RT/ST/WQ/1U/10/10P8PP8LP8LD/bz/Zz/Bw/z8/zC/wCv9Av9Iv9Yr/EL/FL/VK/3C/3K/1Kv9qv9mv9Wr/er/cb/Ua/2W/2W/1Wv81v8zv8Dr/L7/J7/B6/1+/1+/w+v9/v9wf8AX/QH/SH/Bf+sP/SH/Ff+aP+a3/Mf+OP+2/9CX/Sn/Lf+dP+e3/Gn/Xn/A/+vP/RX/A/+Ys++HGJNxPjE28lJiTeTkxMTEpMTkxJTE1MS0xPvJOYkZiZmJV4NzE78V5iTmJuYl5ifmJB4v3EwsSixOLEB4kliQ8TSxPLEssTKxIrE6sSIeTZFod8IX9IhutDgXBDKBgKhcKhSPChaCgWbgzFw02hRLg5lAy3hFLh1lA6lAllw8OhQWgYGoXGoUl4JDQNj4ZmoXloER4LLcPjoVV4IrQOT4Y24anQNjwd2oVnQvvwbOgQngsdQ6fQOTwfuoQXQtfQLaSG7qFHeDH0DL1C79An9A0vhX7h5dA/vBIGhIFhUHg1DA6vhSHh9TA0DAvDwxthRBgZRoXRYUwYG8aFN8P48FaYEN4OE8OkMDlMCVPDtDA9vBNmhJlhVng3zA7vhTlhbpgX5ocF4f2wMCwKi8MHYUn4MCwNy8LysCKsDKvC6rAmrA3rwvqwIWwMm8LmsCVsDR+FbWF72BF2hl1hd9gTPg57wydhX/g07A+fhQPhj+Fg+DwcCl+Ew+HLcCR8FY6Gr8Ox8E04Hr4NJ8LJcCp8F06H78OZcDacCz+E8+HHcCH8FC7Kz6wJIYQQQvxD9O/Md/8vctSfxj0A4OrtuQ7/7fzG7L+Me6XP3TIBAE926/DAr1ulSqmpqX/ad6mGKP9cAEhczk8Hl+Nl0AIeh9bQHIr/eT7lL47VS3U6z7+zfvIWgIx/kXMp/9f48vo3/d3z76VGzv7d9ecCFMx/OScDXI4vr1/iv1g/R9PfWT/D5+MAmv1FTia4HF9evxg8Ck9B67/aUwghhBBCCCGE+EUvVbbd793fXro/z20u56SHy/Hfuz8XQgghhBBCCCHEv5dnOnV+4pHWrZu3+188+PWzCP8u9fzNIGT5pbx/l3pkIIN/YHAlvysJIYQQQggh/idcvui/0pUIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBp1/+PXyf267F+728NCiGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEP+p/k8AAAD//y9qNPA=") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) 12.84903754s ago: executing program 3 (id=1025): bpf$PROG_LOAD(0x5, 0x0, 0x0) timer_gettime(0x0, &(0x7f0000000000)) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) ptrace(0x4207, r0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x216, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={0xffffffffffffffff, 0x0, &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1f, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x15) 7.638005448s ago: executing program 4 (id=1034): r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$SNDCTL_SEQ_TESTMIDI(r4, 0x40045108, 0x0) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r5, 0x5100) r6 = io_uring_setup(0x7fd0, &(0x7f00000004c0)={0x0, 0x3ed8, 0x2, 0x1, 0x20f}) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r6, 0x1e, &(0x7f0000000000)={r6}, 0x1) r7 = syz_open_procfs(0x0, &(0x7f00000005c0)='smaps_rollup\x00') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000880)=@bpf_tracing={0x1a, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}]}, &(0x7f0000000100)='GPL\x00', 0x1, 0xd6, &(0x7f0000000780)=""/214, 0x41000, 0x20, '\x00', 0x0, 0x2, r7, 0x8, &(0x7f00000001c0)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0x6, 0x1, 0x6}, 0x10, 0x1f5e7, 0xffffffffffffffff, 0x3, &(0x7f0000000040)=[0xffffffffffffffff, r0, r0, r0, 0xffffffffffffffff], &(0x7f00000005c0)=[{0x5, 0x2, 0x2, 0xc}, {0x2, 0x3, 0x8, 0x4}, {0x4, 0x2, 0x4, 0xa}], 0x10, 0xc4e7}, 0x94) 7.543201965s ago: executing program 3 (id=1035): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB], &(0x7f0000001700)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='contention_end\x00', r0}, 0x18) r1 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(r1, 0xc0347c03, &(0x7f00000001c0)={{0x80000000, 0x0, 0xe10faebb7221f0, [0xffffffff, 0xd]}, {0x80000000, 0x0, 0x7, [0x5, 0x836f]}, 0x2, [0x4000, 0x4]}) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x20, 0x5, &(0x7f0000000780)=ANY=[@ANYBLOB="18020000000000000000000000001d3a8500000017000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$caif_seqpacket(0x25, 0x5, 0x5) r7 = fsmount(r6, 0x0, 0x18) symlinkat(&(0x7f00000001c0)='./file0\x00', r7, &(0x7f0000000140)='./file0\x00') openat2(r7, &(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000040)={0x0, 0x29, 0x8}, 0x18) fsetxattr$trusted_overlay_opaque(r5, 0x0, 0x0, 0x0, 0x3) ioctl$BLKPG(r2, 0x1269, &(0x7f0000000040)={0x1, 0x0, 0x98, &(0x7f0000000140)={0x0, 0x1000, 0x1}}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000500)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) 6.622680699s ago: executing program 4 (id=1037): r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$SNDCTL_SEQ_TESTMIDI(r4, 0x40045108, &(0x7f0000001080)=0x2) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r5, 0x5100) r6 = io_uring_setup(0x7fd0, &(0x7f00000004c0)={0x0, 0x3ed8, 0x2, 0x1, 0x20f}) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r6, 0x1e, &(0x7f0000000000)={r6}, 0x1) r7 = syz_open_procfs(0x0, &(0x7f00000005c0)='smaps_rollup\x00') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000880)=@bpf_tracing={0x1a, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}]}, &(0x7f0000000100)='GPL\x00', 0x1, 0xd6, &(0x7f0000000780)=""/214, 0x41000, 0x20, '\x00', 0x0, 0x2, r7, 0x8, &(0x7f00000001c0)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0x6, 0x1, 0x6}, 0x10, 0x1f5e7, 0xffffffffffffffff, 0x3, &(0x7f0000000040)=[0xffffffffffffffff, r0, r0, r0, 0xffffffffffffffff], &(0x7f00000005c0)=[{0x5, 0x2, 0x2, 0xc}, {0x2, 0x3, 0x8, 0x4}, {0x4, 0x2, 0x4, 0xa}], 0x10, 0xc4e7}, 0x94) 6.018926388s ago: executing program 5 (id=1038): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB], &(0x7f0000001700)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='contention_end\x00', r0}, 0x18) r1 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(r1, 0xc0347c03, &(0x7f00000001c0)={{0x80000000, 0x0, 0xe10faebb7221f0, [0xffffffff, 0xd]}, {0x80000000, 0x0, 0x7, [0x5, 0x836f]}, 0x2, [0x4000, 0x4]}) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x20, 0x5, &(0x7f0000000780)=ANY=[@ANYBLOB="18020000000000000000000000001d3a8500000017000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$caif_seqpacket(0x25, 0x5, 0x5) r7 = fsmount(r6, 0x0, 0x18) symlinkat(&(0x7f00000001c0)='./file0\x00', r7, &(0x7f0000000140)='./file0\x00') openat2(r7, &(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000040)={0x0, 0x29, 0x8}, 0x18) fsetxattr$trusted_overlay_opaque(r5, 0x0, 0x0, 0x0, 0x3) ioctl$BLKPG(r2, 0x1269, &(0x7f0000000040)={0x1, 0x0, 0x98, &(0x7f0000000140)={0x0, 0x1000, 0x1}}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) 5.972226472s ago: executing program 6 (id=1040): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r7 = socket$unix(0x1, 0x2, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x40000006}, [@TCA_NETEM_JITTER64={0xc, 0xb, 0x5a7e}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2001c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 5.86286927s ago: executing program 2 (id=1042): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0}, 0x18) socket(0xc1acd62b43d46ca9, 0x801, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) syz_open_dev$evdev(0x0, 0x2, 0x862b01) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x61, 0x8e}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x101042, 0x40) write$binfmt_register(r4, &(0x7f0000000200)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0xe, 0x3a, '.))', 0x3a, '&@', 0x3a, './file2'}, 0x2c) symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./file7\x00', 0x0) socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x7}]}}}]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000004) syz_emit_ethernet(0x4e, &(0x7f0000000680)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @local, @val={@val={0x88a8, 0x6, 0x0, 0x2}, {0x8100, 0x2}}, {@ipv6={0x86dd, @dccp_packet={0x8, 0x6, "fa8dba", 0x10, 0x21, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @remote, {[], {{0x4e20, 0x4e23, 0x4, 0x1, 0x6, 0x0, 0x0, 0x4, 0x1, "88b1da", 0x5, "b30704"}}}}}}}, 0x0) 5.37271857s ago: executing program 6 (id=1043): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r0, 0x90004) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) r2 = syz_io_uring_setup(0x12de, &(0x7f0000000300)={0x0, 0x2000, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r1, 0x80, &(0x7f0000000540)=@l2tp6={0xa, 0x0, 0x7, @mcast1, 0xbf6b}}) io_uring_enter(r2, 0x5b43, 0xaced, 0x20, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r8, 0x4b67, &(0x7f0000000040)={0x3ffffffffffffe96, &(0x7f0000000000)=[{0x2000, 0x5}]}) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) accept4(r0, 0x0, 0x0, 0x0) 4.352673161s ago: executing program 2 (id=1044): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x5577c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) readv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0xfdef}], 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xd) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) madvise(&(0x7f0000304000/0x3000)=nil, 0x3000, 0x9) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r4, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r6 = accept(r3, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0xc000}, 0x10) recvfrom(r5, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) 4.352471841s ago: executing program 3 (id=1045): openat$adsp1(0xffffff9c, &(0x7f0000000380), 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) socket$key(0xf, 0x3, 0x2) openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r1, 0x2f000000}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 4.328123353s ago: executing program 6 (id=1046): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0xdc) 4.282979207s ago: executing program 6 (id=1047): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB], &(0x7f0000001700)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='contention_end\x00', r0}, 0x18) r1 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(r1, 0xc0347c03, &(0x7f00000001c0)={{0x80000000, 0x0, 0xe10faebb7221f0, [0xffffffff, 0xd]}, {0x80000000, 0x0, 0x7, [0x5, 0x836f]}, 0x2, [0x4000, 0x4]}) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x20, 0x5, &(0x7f0000000780)=ANY=[@ANYBLOB="18020000000000000000000000001d3a8500000017000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$caif_seqpacket(0x25, 0x5, 0x5) r7 = fsmount(r6, 0x0, 0x18) symlinkat(&(0x7f00000001c0)='./file0\x00', r7, &(0x7f0000000140)='./file0\x00') openat2(r7, &(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000040)={0x0, 0x29, 0x8}, 0x18) fsetxattr$trusted_overlay_opaque(r5, 0x0, 0x0, 0x0, 0x3) ioctl$BLKPG(r2, 0x1269, &(0x7f0000000040)={0x1, 0x0, 0x98, &(0x7f0000000140)={0x0, 0x1000, 0x1}}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) 4.269255178s ago: executing program 4 (id=1048): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x100c404, &(0x7f0000000380)={[{@dots}, {@fat=@fmask={'fmask', 0x3d, 0xdbd}}, {@fat=@uid}, {@fat=@uid={'uid', 0x3d, 0xee00}}, {@dots}, {@nodots}, {@fat=@gid={'gid', 0x3d, 0xee00}}, {@nodots}, {@nodots}, {@dots}, {@nodots}, {@nodots}, {@nodots}, {}, {@nodots}, {@fat=@nfs}, {@nodots}, {@fat=@showexec}, {@fat=@flush}, {@fat=@umask={'umask', 0x3d, 0x7}}, {@nodots}, {@dots}]}, 0x1, 0x1f5, &(0x7f0000000600)="$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") mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x100, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x5, 0x6) 4.177525265s ago: executing program 5 (id=1049): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB], &(0x7f0000001700)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='contention_end\x00', r0}, 0x18) r1 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(r1, 0xc0347c03, &(0x7f00000001c0)={{0x80000000, 0x0, 0xe10faebb7221f0, [0xffffffff, 0xd]}, {0x80000000, 0x0, 0x7, [0x5, 0x836f]}, 0x2, [0x4000, 0x4]}) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x20, 0x5, &(0x7f0000000780)=ANY=[@ANYBLOB="18020000000000000000000000001d3a8500000017000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = fsmount(r6, 0x0, 0x18) symlinkat(&(0x7f00000001c0)='./file0\x00', r7, &(0x7f0000000140)='./file0\x00') openat2(r7, &(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000040)={0x0, 0x29, 0x8}, 0x18) fsetxattr$trusted_overlay_opaque(r5, 0x0, 0x0, 0x0, 0x3) ioctl$BLKPG(r2, 0x1269, &(0x7f0000000040)={0x1, 0x0, 0x98, &(0x7f0000000140)={0x0, 0x1000, 0x1}}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000500)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) 3.292971516s ago: executing program 2 (id=1050): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x3, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r3, &(0x7f0000000040)}, 0x20) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000f40), r4) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f00000001c0)={0x70, r5, 0x1, 0x70bd67, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x5c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2e, 0x5}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x39}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x115}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x20004084}, 0x20008800) 3.290918776s ago: executing program 4 (id=1051): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000f40), r3) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={0x0}, 0x1, 0x0, 0x0, 0x20004084}, 0x20008800) 2.786911647s ago: executing program 6 (id=1052): openat$adsp1(0xffffff9c, &(0x7f0000000380), 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(0xffffffffffffffff, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r0, 0x2f000000}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 2.784455807s ago: executing program 5 (id=1053): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x101042, 0x40) symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./file7\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000b80), 0x200008, &(0x7f0000000380)={[{@lowerdir={'lowerdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f0000000240)='./bus\x00', 0x322020, &(0x7f0000000240)=ANY=[], 0x1, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file2\x00', 0x42, 0x0) 2.762578649s ago: executing program 5 (id=1054): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) getpid() r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0xdc) 2.74941955s ago: executing program 5 (id=1055): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0}, 0x18) socket(0xc1acd62b43d46ca9, 0x801, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) syz_open_dev$evdev(0x0, 0x2, 0x862b01) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x61, 0x8e}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x101042, 0x40) write$binfmt_register(r4, &(0x7f0000000200)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0xe, 0x3a, '.))', 0x3a, '&@', 0x3a, './file2'}, 0x2c) symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./file7\x00', 0x0) socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x7}]}}}]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000004) syz_emit_ethernet(0x4e, &(0x7f0000000680)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @local, @val={@val={0x88a8, 0x6, 0x0, 0x2}, {0x8100, 0x2}}, {@ipv6={0x86dd, @dccp_packet={0x8, 0x6, "fa8dba", 0x10, 0x21, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @remote, {[], {{0x4e20, 0x4e23, 0x4, 0x1, 0x6, 0x0, 0x0, 0x4, 0x1, "88b1da", 0x5, "b30704"}}}}}}}, 0x0) 2.238033081s ago: executing program 2 (id=1056): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB], &(0x7f0000001700)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='contention_end\x00', r0}, 0x18) r1 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(r1, 0xc0347c03, &(0x7f00000001c0)={{0x80000000, 0x0, 0xe10faebb7221f0, [0xffffffff, 0xd]}, {0x80000000, 0x0, 0x7, [0x5, 0x836f]}, 0x2, [0x4000, 0x4]}) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) socket$caif_seqpacket(0x25, 0x5, 0x5) r7 = fsmount(r6, 0x0, 0x18) symlinkat(&(0x7f00000001c0)='./file0\x00', r7, &(0x7f0000000140)='./file0\x00') openat2(r7, &(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000040)={0x0, 0x29, 0x8}, 0x18) fsetxattr$trusted_overlay_opaque(r5, 0x0, 0x0, 0x0, 0x3) ioctl$BLKPG(r2, 0x1269, &(0x7f0000000040)={0x1, 0x0, 0x98, &(0x7f0000000140)={0x0, 0x1000, 0x1}}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000500)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) 2.23768502s ago: executing program 3 (id=1057): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r0, 0x90004) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) r2 = syz_io_uring_setup(0x12de, &(0x7f0000000300)={0x0, 0x2000, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r1, 0x80, &(0x7f0000000540)=@l2tp6={0xa, 0x0, 0x7, @mcast1, 0xbf6b}}) io_uring_enter(r2, 0x5b43, 0xaced, 0x20, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r8, 0x4b67, &(0x7f0000000040)={0x3ffffffffffffe96, &(0x7f0000000000)=[{0x2000, 0x5}]}) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) accept4(r0, 0x0, 0x0, 0x0) 2.237064871s ago: executing program 4 (id=1058): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe2$watch_queue(0x0, 0x80) socket$inet_smc(0x2b, 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0xdc) 1.232764851s ago: executing program 5 (id=1059): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB], &(0x7f0000001700)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='contention_end\x00', r0}, 0x18) r1 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(r1, 0xc0347c03, &(0x7f00000001c0)={{0x80000000, 0x0, 0xe10faebb7221f0, [0xffffffff, 0xd]}, {0x80000000, 0x0, 0x7, [0x5, 0x836f]}, 0x2, [0x4000, 0x4]}) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) socket$caif_seqpacket(0x25, 0x5, 0x5) r7 = fsmount(r6, 0x0, 0x18) symlinkat(&(0x7f00000001c0)='./file0\x00', r7, &(0x7f0000000140)='./file0\x00') openat2(r7, &(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000040)={0x0, 0x29, 0x8}, 0x18) fsetxattr$trusted_overlay_opaque(r5, 0x0, 0x0, 0x0, 0x3) ioctl$BLKPG(r2, 0x1269, &(0x7f0000000040)={0x1, 0x0, 0x98, &(0x7f0000000140)={0x0, 0x1000, 0x1}}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000500)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) 1.230349331s ago: executing program 3 (id=1060): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000003e000701fcfffffffddbdf25027c0000040036800c000180069906008e0a0000"], 0x24}, 0x1, 0x0, 0x0, 0x488c0}, 0xc050) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000140)=[{&(0x7f0000000340)}], 0x1) connect$pppl2tp(r3, &(0x7f0000001080)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x41, 0x0, @multicast2}, 0x20020003}}, 0x2e) recvmmsg(r0, &(0x7f0000002080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)=""/204, 0xcc}, 0x6c1b}], 0x1, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180200000020702500000000002020207b1af8ff00000000bfa100000000000007010000dbffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4b, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8c}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r12, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r11, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r6, 0x0, 0xfffffffffffffffc}, 0x18) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 1.101570442s ago: executing program 3 (id=1061): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe2$watch_queue(0x0, 0x80) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0xdc) 1.097631302s ago: executing program 6 (id=1071): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r0, 0x90004) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) r2 = syz_io_uring_setup(0x12de, &(0x7f0000000300)={0x0, 0x2000, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r1, 0x80, &(0x7f0000000540)=@l2tp6={0xa, 0x0, 0x7, @mcast1, 0xbf6b}}) io_uring_enter(r2, 0x5b43, 0xaced, 0x20, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r8, 0x4b67, &(0x7f0000000040)={0x3ffffffffffffe96, &(0x7f0000000000)=[{0x2000, 0x5}]}) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) accept4(r0, 0x0, 0x0, 0x0) 753.3473ms ago: executing program 4 (id=1062): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000340), 0x10) listen(r1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) accept4$unix(r1, 0x0, 0x0, 0x80800) pselect6(0x40, &(0x7f0000000080)={0x5, 0x0, 0x120000000000, 0x2, 0x500, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f0000000180)={0x3fe, 0x7, 0x0, 0x9, 0x86, 0x800, 0x80000002}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 10.847319ms ago: executing program 2 (id=1063): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000040)={0x1, 0x0, 0x98, &(0x7f0000000140)={0x0, 0x1000, 0x1}}) 0s ago: executing program 2 (id=1064): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB], &(0x7f0000001700)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='contention_end\x00', r0}, 0x18) r1 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(r1, 0xc0347c03, &(0x7f00000001c0)={{0x80000000, 0x0, 0xe10faebb7221f0, [0xffffffff, 0xd]}, {0x80000000, 0x0, 0x7, [0x5, 0x836f]}, 0x2, [0x4000, 0x4]}) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x20, 0x5, &(0x7f0000000780)=ANY=[@ANYBLOB="18020000000000000000000000001d3a8500000017000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = fsmount(r6, 0x0, 0x18) symlinkat(&(0x7f00000001c0)='./file0\x00', r7, &(0x7f0000000140)='./file0\x00') openat2(r7, &(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000040)={0x0, 0x29, 0x8}, 0x18) fsetxattr$trusted_overlay_opaque(r5, 0x0, 0x0, 0x0, 0x3) ioctl$BLKPG(r2, 0x1269, &(0x7f0000000040)={0x1, 0x0, 0x98, &(0x7f0000000140)={0x0, 0x1000, 0x1}}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000500)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) kernel console output (not intermixed with test programs): 0 [ 34.412674][ T4043] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.413968][ T4043] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.415435][ T4043] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.418963][ T4051] device veth0_vlan entered promiscuous mode [ 34.420250][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 34.422039][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 34.423575][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 34.427300][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 34.428585][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 34.431765][ T4055] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.439729][ T4051] device veth1_vlan entered promiscuous mode [ 34.448293][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 34.449810][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 34.451361][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 34.454056][ T4046] device veth0_macvtap entered promiscuous mode [ 34.462925][ T4046] device veth1_macvtap entered promiscuous mode [ 34.480985][ T269] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 34.482521][ T269] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 34.483940][ T269] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 34.485300][ T269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 34.490100][ T269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 34.498738][ T4046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.500431][ T4046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.504882][ T4046] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.510100][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 34.511704][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 34.515974][ T4046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.518156][ T4046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.520676][ T4046] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.524881][ T4046] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.526851][ T4046] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.528222][ T4046] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.529539][ T4046] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.532896][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 34.534332][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 34.535933][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 34.538353][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 34.542145][ T4042] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.550811][ T4051] device veth0_macvtap entered promiscuous mode [ 34.565580][ T4051] device veth1_macvtap entered promiscuous mode [ 34.575013][ T351] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.576907][ T351] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.578523][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 34.580087][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 34.581505][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.600224][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 34.601844][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 34.604406][ T351] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.605716][ T351] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.608790][ T351] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.609957][ T351] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.610321][ T4055] device veth0_vlan entered promiscuous mode [ 34.614734][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.616113][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.618070][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 34.619640][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 34.621145][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 34.622569][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 34.624165][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 34.625860][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 34.633261][ T4055] device veth1_vlan entered promiscuous mode [ 34.638203][ T4051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.639908][ T4051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.641564][ T4051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.643213][ T4051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.645309][ T4051] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.648410][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 34.649895][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 34.651275][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 34.653311][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 34.664193][ T136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.665790][ T136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.666781][ T4042] device veth0_vlan entered promiscuous mode [ 34.669365][ T269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 34.670917][ T269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 34.672745][ T269] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.676418][ T269] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 34.678182][ T269] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 34.683205][ T4042] device veth1_vlan entered promiscuous mode [ 34.692709][ T4042] device veth0_macvtap entered promiscuous mode [ 34.704712][ T4051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.708134][ T4051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.709907][ T4051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.711559][ T4051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.713692][ T4051] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.715822][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 34.717383][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 34.718697][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 34.720721][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 34.722185][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 34.723995][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 34.726063][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 34.731333][ T4051] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.732741][ T4051] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.734040][ T4051] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.735504][ T4051] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.740201][ T4042] device veth1_macvtap entered promiscuous mode [ 34.745879][ T4042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.751120][ T4042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.752806][ T4042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.754463][ T4042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.755952][ T4042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.763420][ T4042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.977872][ T4159] loop0: detected capacity change from 0 to 256 [ 35.832583][ T4110] Bluetooth: hci3: command 0x041b tx timeout [ 35.842111][ T4042] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.520950][ T4123] Bluetooth: hci2: command 0x041b tx timeout [ 36.521983][ T4123] Bluetooth: hci1: command 0x041b tx timeout [ 36.522991][ T4123] Bluetooth: hci4: command 0x041b tx timeout [ 36.523954][ T4123] Bluetooth: hci0: command 0x041b tx timeout [ 36.528681][ T4055] device veth0_macvtap entered promiscuous mode [ 36.536879][ T4146] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 36.538371][ T4146] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 36.539720][ T4146] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 36.541565][ T4146] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 36.543101][ T4146] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 36.544645][ T4146] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 36.550164][ T4156] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 36.551511][ T4156] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 36.576448][ T4156] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 36.579959][ T4042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.583175][ T4042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.588862][ T4042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.590836][ T4042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.592366][ T4042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.594095][ T4042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.601681][ T4042] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.608633][ T4158] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 36.610668][ T4158] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 36.621674][ T4055] device veth1_macvtap entered promiscuous mode [ 36.630692][ T4042] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.632154][ T4042] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.669898][ T4042] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.211059][ T4168] loop0: detected capacity change from 0 to 256 [ 37.335892][ T4042] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.760375][ T4110] Bluetooth: hci3: command 0x040f tx timeout [ 38.762394][ T4110] Bluetooth: hci0: command 0x040f tx timeout [ 38.763818][ T4110] Bluetooth: hci4: command 0x040f tx timeout [ 38.764912][ T4110] Bluetooth: hci1: command 0x040f tx timeout [ 38.765919][ T4110] Bluetooth: hci2: command 0x040f tx timeout [ 38.778996][ T4055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.780582][ T4055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.782127][ T4055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.783731][ T4055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.791596][ T4055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.798590][ T4055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.800111][ T4055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.801671][ T4055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.803798][ T4055] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.862031][ T4183] loop1: detected capacity change from 0 to 256 [ 39.362302][ T4183] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18e64, utbl_chksum : 0xe619d30d) [ 39.817320][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.818497][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.838600][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 39.840185][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 39.841839][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 39.877155][ T4169] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.878324][ T4169] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.879716][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 39.895225][ T136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.896498][ T136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.898545][ T4169] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 40.075547][ T4191] loop3: detected capacity change from 0 to 256 [ 40.336669][ T4055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 40.339346][ T4055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.341763][ T4055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 40.343467][ T4055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.344771][ T4055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 40.347849][ T4055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.349410][ T4055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 40.351098][ T4055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.355037][ T4055] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.357407][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.358678][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.396487][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 40.398069][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 40.399585][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 40.404764][ T4191] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18e64, utbl_chksum : 0xe619d30d) [ 40.431836][ T4055] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.447773][ T4055] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.449318][ T4055] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.450739][ T4055] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.072297][ T4095] Bluetooth: hci2: command 0x0419 tx timeout [ 43.074547][ T4095] Bluetooth: hci1: command 0x0419 tx timeout [ 43.077501][ T4095] Bluetooth: hci4: command 0x0419 tx timeout [ 43.078667][ T4095] Bluetooth: hci0: command 0x0419 tx timeout [ 43.129700][ T4095] Bluetooth: hci3: command 0x0419 tx timeout [ 44.144006][ T4215] loop2: detected capacity change from 0 to 256 [ 45.656216][ C1] sched: RT throttling activated [ 45.685701][ T136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.685822][ T4219] loop1: detected capacity change from 0 to 1024 [ 45.687152][ T136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.687638][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 45.702233][ T4186] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.619943][ T4186] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.625458][ T4146] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 46.632626][ T4219] ======================================================= [ 46.632626][ T4219] WARNING: The mand mount option has been deprecated and [ 46.632626][ T4219] and is ignored by this kernel. Remove the mand [ 46.632626][ T4219] option from the mount to silence this warning. [ 46.632626][ T4219] ======================================================= [ 47.162706][ T4219] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 47.778474][ T4219] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.17: bg 0: block 393: padding at end of block bitmap is not set [ 49.137010][ T4246] loop2: detected capacity change from 0 to 256 [ 49.164839][ T4246] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18e64, utbl_chksum : 0xe619d30d) [ 54.095345][ T4268] loop1: detected capacity change from 0 to 256 [ 54.688649][ T4272] loop2: detected capacity change from 0 to 1024 [ 54.692569][ T4268] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18e64, utbl_chksum : 0xe619d30d) [ 55.037806][ T4274] loop0: detected capacity change from 0 to 256 [ 56.565422][ T4274] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18e64, utbl_chksum : 0xe619d30d) [ 56.672047][ T4272] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 56.818719][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 56.820137][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 57.211902][ T4286] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 57.214528][ T4281] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 393: padding at end of block bitmap is not set [ 57.219842][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 57.221429][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 57.241530][ T4169] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 1968 with error 117 [ 57.245325][ T4169] EXT4-fs (loop2): This should not happen!! Data will be lost [ 57.245325][ T4169] [ 57.255392][ T4169] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 1 with error 28 [ 57.257410][ T4287] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 57.257439][ T4169] EXT4-fs (loop2): This should not happen!! Data will be lost [ 57.257439][ T4169] [ 57.261700][ T4169] EXT4-fs (loop2): Total free blocks count 0 [ 57.263116][ T4169] EXT4-fs (loop2): Free/Dirty block details [ 57.264211][ T4169] EXT4-fs (loop2): free_blocks=0 [ 57.265033][ T4169] EXT4-fs (loop2): dirty_blocks=32 [ 57.265890][ T4169] EXT4-fs (loop2): Block reservation details [ 57.267327][ T4169] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 60.180631][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 60.216643][ T4306] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 60.714699][ T4319] loop4: detected capacity change from 0 to 512 [ 60.780190][ T4319] EXT4-fs error (device loop4): ext4_orphan_get:1401: inode #15: comm syz.4.38: casefold flag without casefold feature [ 60.782434][ T4319] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.38: couldn't read orphan inode 15 (err -117) [ 60.784600][ T4319] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpid,user_xattr,,errors=continue. Quota mode: writeback. [ 63.444497][ T4346] loop3: detected capacity change from 0 to 256 [ 63.639716][ T4346] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18e64, utbl_chksum : 0xe619d30d) [ 65.429126][ T4349] loop0: detected capacity change from 0 to 256 [ 65.861312][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 66.995023][ T4349] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18e64, utbl_chksum : 0xe619d30d) [ 66.996958][ T4347] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 69.086977][ T4375] device bridge1 entered promiscuous mode [ 69.609656][ T2063] ieee802154 phy0 wpan0: encryption failed: -22 [ 69.610838][ T2063] ieee802154 phy1 wpan1: encryption failed: -22 [ 69.633819][ T21] cfg80211: failed to load regulatory.db [ 70.956425][ T4389] sch_tbf: burst 9 is lower than device syzkaller0 mtu (1500) ! [ 72.682415][ T4408] loop3: detected capacity change from 0 to 256 [ 74.719319][ T4408] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18e64, utbl_chksum : 0xe619d30d) [ 75.537450][ T4419] loop2: detected capacity change from 0 to 256 [ 76.767538][ T4419] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18e64, utbl_chksum : 0xe619d30d) [ 77.752981][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 77.754997][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 78.048321][ T4431] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 78.150643][ T4440] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 79.801568][ T4440] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 80.519801][ T4446] loop0: detected capacity change from 0 to 256 [ 80.669967][ T4446] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18e64, utbl_chksum : 0xe619d30d) [ 84.081892][ T4449] loop3: detected capacity change from 0 to 256 [ 84.089665][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 84.122486][ T4455] loop2: detected capacity change from 0 to 512 [ 84.146794][ T4452] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 84.212156][ T4455] EXT4-fs error (device loop2): ext4_orphan_get:1401: inode #15: comm syz.2.70: casefold flag without casefold feature [ 84.214546][ T4455] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.70: couldn't read orphan inode 15 (err -117) [ 84.220707][ T4455] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpid,user_xattr,,errors=continue. Quota mode: writeback. [ 84.705785][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 84.734622][ T4462] loop4: detected capacity change from 0 to 512 [ 84.827395][ T4460] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 85.381998][ T4462] EXT4-fs error (device loop4): ext4_orphan_get:1401: inode #15: comm syz.4.72: casefold flag without casefold feature [ 85.384080][ T4462] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.72: couldn't read orphan inode 15 (err -117) [ 85.385944][ T4462] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpid,user_xattr,,errors=continue. Quota mode: writeback. [ 85.972213][ T4480] loop2: detected capacity change from 0 to 512 [ 85.994285][ T4480] EXT4-fs error (device loop2): ext4_orphan_get:1401: inode #15: comm syz.2.74: casefold flag without casefold feature [ 85.999613][ T4480] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.74: couldn't read orphan inode 15 (err -117) [ 86.001483][ T4480] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpid,user_xattr,,errors=continue. Quota mode: writeback. [ 88.196284][ T4499] loop0: detected capacity change from 0 to 256 [ 91.220139][ T4512] loop2: detected capacity change from 0 to 256 [ 92.487150][ T4514] loop0: detected capacity change from 0 to 1024 [ 92.497856][ T4520] loop3: detected capacity change from 0 to 512 [ 92.537707][ T4520] EXT4-fs error (device loop3): ext4_orphan_get:1401: inode #15: comm syz.3.84: casefold flag without casefold feature [ 92.539883][ T4520] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.84: couldn't read orphan inode 15 (err -117) [ 92.542101][ T4520] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,user_xattr,,errors=continue. Quota mode: writeback. [ 93.665424][ T4514] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 93.752351][ T4514] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.82: bg 0: block 393: padding at end of block bitmap is not set [ 93.772153][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 94.057330][ T4523] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 94.734155][ T4543] loop2: detected capacity change from 0 to 256 [ 94.793362][ T4543] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18e64, utbl_chksum : 0xe619d30d) [ 95.692924][ T4550] loop1: detected capacity change from 0 to 512 [ 96.982960][ T4550] EXT4-fs error (device loop1): ext4_orphan_get:1401: inode #15: comm syz.1.91: casefold flag without casefold feature [ 96.985101][ T4550] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.91: couldn't read orphan inode 15 (err -117) [ 96.988342][ T4550] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpid,user_xattr,,errors=continue. Quota mode: writeback. [ 97.007611][ T4555] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 97.077805][ T4555] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 98.715442][ T4575] loop4: detected capacity change from 0 to 256 [ 99.680137][ T4575] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18e64, utbl_chksum : 0xe619d30d) [ 101.378083][ T4588] loop4: detected capacity change from 0 to 512 [ 102.080713][ T4595] loop2: detected capacity change from 0 to 256 [ 102.124635][ T4596] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 103.607062][ T4596] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 103.640361][ T4595] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18e64, utbl_chksum : 0xe619d30d) [ 106.729453][ T4616] loop2: detected capacity change from 0 to 256 [ 107.016843][ T4616] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18e64, utbl_chksum : 0xe619d30d) [ 107.785376][ T4628] loop1: detected capacity change from 0 to 256 [ 108.649691][ T4630] loop0: detected capacity change from 0 to 256 [ 112.942288][ T4649] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 113.665771][ T4649] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 113.670515][ T4650] device bridge1 entered promiscuous mode [ 113.715884][ T4656] tipc: Started in network mode [ 113.730200][ T4656] tipc: Node identity 8ebf2e136abe, cluster identity 4711 [ 114.596295][ T4671] loop3: detected capacity change from 0 to 256 [ 115.246941][ T4656] tipc: Enabled bearer , priority 0 [ 115.260802][ T4666] device bridge1 entered promiscuous mode [ 115.805434][ T4661] device syzkaller0 entered promiscuous mode [ 116.707773][ T1968] tipc: Node number set to 3825282579 [ 117.675510][ T4658] tipc: Resetting bearer [ 117.759154][ T4658] tipc: Disabling bearer [ 118.668213][ T4704] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 118.726529][ T4704] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 119.759013][ T4710] 9pnet: Insufficient options for proto=fd [ 120.618202][ T4713] device bridge2 entered promiscuous mode [ 122.187201][ T4736] device bridge3 entered promiscuous mode [ 125.160046][ T4777] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 125.746466][ T4777] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 128.959313][ T4792] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 129.928253][ T4799] loop2: detected capacity change from 0 to 256 [ 129.946913][ T4792] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 130.060627][ T4799] FAT-fs (loop2): Directory bread(block 64) failed [ 130.061800][ T4799] FAT-fs (loop2): Directory bread(block 65) failed [ 130.062986][ T4799] FAT-fs (loop2): Directory bread(block 66) failed [ 130.064124][ T4799] FAT-fs (loop2): Directory bread(block 67) failed [ 130.065796][ T4799] FAT-fs (loop2): Directory bread(block 68) failed [ 130.078567][ T4799] FAT-fs (loop2): Directory bread(block 69) failed [ 130.457979][ T4799] FAT-fs (loop2): Directory bread(block 70) failed [ 130.459122][ T4799] FAT-fs (loop2): Directory bread(block 71) failed [ 130.466096][ T4799] FAT-fs (loop2): Directory bread(block 72) failed [ 130.469689][ T4799] FAT-fs (loop2): Directory bread(block 73) failed [ 131.677598][ T2063] ieee802154 phy0 wpan0: encryption failed: -22 [ 131.678703][ T2063] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.386470][ T4817] 9pnet: Insufficient options for proto=fd [ 134.954039][ T4848] fuse: Bad value for 'user_id' [ 135.394595][ T4853] tipc: Started in network mode [ 135.395577][ T4853] tipc: Node identity 261adf3817d9, cluster identity 4711 [ 135.400944][ T4853] tipc: Enabled bearer , priority 0 [ 135.404965][ T4853] Zero length message leads to an empty skb [ 135.411945][ T4853] tipc: Resetting bearer [ 135.420542][ T4845] tipc: Disabling bearer [ 138.104037][ T4888] loop4: detected capacity change from 0 to 256 [ 138.135990][ T4888] FAT-fs (loop4): Directory bread(block 64) failed [ 138.143522][ T4888] FAT-fs (loop4): Directory bread(block 65) failed [ 138.146574][ T4888] FAT-fs (loop4): Directory bread(block 66) failed [ 138.147810][ T4888] FAT-fs (loop4): Directory bread(block 67) failed [ 138.152041][ T4888] FAT-fs (loop4): Directory bread(block 68) failed [ 138.171180][ T4888] FAT-fs (loop4): Directory bread(block 69) failed [ 138.183974][ T4888] FAT-fs (loop4): Directory bread(block 70) failed [ 138.185027][ T4888] FAT-fs (loop4): Directory bread(block 71) failed [ 138.186077][ T4888] FAT-fs (loop4): Directory bread(block 72) failed [ 139.339708][ T4888] FAT-fs (loop4): Directory bread(block 73) failed [ 141.405606][ T4916] loop4: detected capacity change from 0 to 256 [ 141.497173][ T4916] FAT-fs (loop4): Directory bread(block 64) failed [ 141.501539][ T4916] FAT-fs (loop4): Directory bread(block 65) failed [ 141.505813][ T4916] FAT-fs (loop4): Directory bread(block 66) failed [ 141.508060][ T4916] FAT-fs (loop4): Directory bread(block 67) failed [ 141.511305][ T4916] FAT-fs (loop4): Directory bread(block 68) failed [ 141.514592][ T4916] FAT-fs (loop4): Directory bread(block 69) failed [ 141.517750][ T4916] FAT-fs (loop4): Directory bread(block 70) failed [ 141.520984][ T4916] FAT-fs (loop4): Directory bread(block 71) failed [ 141.524173][ T4916] FAT-fs (loop4): Directory bread(block 72) failed [ 141.527460][ T4916] FAT-fs (loop4): Directory bread(block 73) failed [ 149.383490][ T4991] device syzkaller0 entered promiscuous mode [ 153.018312][ T5015] tipc: Enabling of bearer rejected, failed to enable media [ 158.099952][ T5052] device syzkaller0 entered promiscuous mode [ 158.879804][ T4077] Bluetooth: hci2: command 0x0406 tx timeout [ 158.904013][ T4077] Bluetooth: hci1: command 0x0406 tx timeout [ 158.905083][ T4077] Bluetooth: hci3: command 0x0406 tx timeout [ 158.907648][ T4087] Bluetooth: hci4: command 0x0406 tx timeout [ 158.908640][ T4087] Bluetooth: hci0: command 0x0406 tx timeout [ 160.305679][ T5073] device syzkaller0 entered promiscuous mode [ 161.188637][ T4087] Bluetooth: hci5: command 0x0409 tx timeout [ 165.225036][ T5064] chnl_net:caif_netlink_parms(): no params data found [ 165.487979][ T5064] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.491442][ T5064] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.791843][ T4100] Bluetooth: hci5: command 0x041b tx timeout [ 165.800573][ T5064] device bridge_slave_0 entered promiscuous mode [ 165.803189][ T5064] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.804424][ T5064] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.806013][ T5064] device bridge_slave_1 entered promiscuous mode [ 165.814893][ T5064] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 165.822331][ T5064] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 165.832447][ T5064] team0: Port device team_slave_0 added [ 165.835028][ T5064] team0: Port device team_slave_1 added [ 165.846964][ T5064] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 165.848319][ T5064] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 165.852280][ T5064] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 165.854859][ T5064] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 165.856096][ T5064] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 165.864476][ T5064] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 166.059840][ T5064] device hsr_slave_0 entered promiscuous mode [ 166.136956][ T5064] device hsr_slave_1 entered promiscuous mode [ 167.157740][ T4876] Bluetooth: hci0: command 0x0409 tx timeout [ 167.166101][ T5064] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 167.176375][ T5064] Cannot create hsr debugfs directory [ 167.307901][ T5140] device syzkaller0 entered promiscuous mode [ 167.310811][ T5141] tipc: Started in network mode [ 167.311603][ T5141] tipc: Node identity 6e8f5f0803e6, cluster identity 4711 [ 167.312878][ T5141] tipc: Enabled bearer , priority 0 [ 167.327205][ T5141] device syzkaller0 entered promiscuous mode [ 167.353969][ T5141] tipc: Resetting bearer [ 167.362105][ T5138] tipc: Resetting bearer [ 167.365452][ T5138] tipc: Disabling bearer [ 167.425574][ T5064] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 167.846276][ T4463] Bluetooth: hci5: command 0x040f tx timeout [ 167.902405][ T5064] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 167.937382][ T5064] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 167.977847][ T5064] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 168.026596][ T5111] chnl_net:caif_netlink_parms(): no params data found [ 168.179002][ T5156] tipc: Enabled bearer , priority 0 [ 168.180513][ T5156] device syzkaller0 entered promiscuous mode [ 168.554358][ T5156] tipc: Resetting bearer [ 168.575141][ T5154] tipc: Resetting bearer [ 168.581668][ T5154] tipc: Disabling bearer [ 168.609387][ T5111] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.610899][ T5111] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.612510][ T5111] device bridge_slave_0 entered promiscuous mode [ 169.467402][ T5111] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.468602][ T5111] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.470313][ T5111] device bridge_slave_1 entered promiscuous mode [ 169.476901][ T1968] Bluetooth: hci0: command 0x041b tx timeout [ 169.562725][ T5064] 8021q: adding VLAN 0 to HW filter on device bond0 [ 169.570260][ T5064] 8021q: adding VLAN 0 to HW filter on device team0 [ 169.582654][ T5064] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 169.584111][ T5064] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 171.075410][ T5136] Bluetooth: hci5: command 0x0419 tx timeout [ 171.111306][ T5111] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 171.113921][ T5111] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 171.123993][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 171.125510][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 171.127559][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 171.129135][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 171.130611][ T4249] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.131754][ T4249] bridge0: port 1(bridge_slave_0) entered forwarding state [ 171.133185][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 171.134650][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 171.136156][ T4249] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.137268][ T4249] bridge0: port 2(bridge_slave_1) entered forwarding state [ 171.138829][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 171.140567][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 171.142150][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 171.143599][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 171.145111][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 171.156722][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 171.158294][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 171.159819][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 171.161800][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 171.163270][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 171.172420][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 171.173970][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 171.175390][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 171.234386][ T5111] team0: Port device team_slave_0 added [ 171.724095][ T5111] team0: Port device team_slave_1 added [ 171.731156][ T5111] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 171.732406][ T5111] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 171.736919][ T5111] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 171.739247][ T5111] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 171.740287][ T5111] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 171.747729][ T5111] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 173.001330][ T5111] device hsr_slave_0 entered promiscuous mode [ 173.047223][ T5111] device hsr_slave_1 entered promiscuous mode [ 173.106310][ T5111] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 173.107568][ T5111] Cannot create hsr debugfs directory [ 173.126396][ T7] Bluetooth: hci0: command 0x040f tx timeout [ 173.129124][ T5196] tipc: Enabled bearer , priority 0 [ 173.140287][ T4544] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 173.141722][ T4544] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 173.144731][ T5203] tipc: Enabling of bearer rejected, failed to enable media [ 173.146738][ T5064] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 173.150242][ T5203] device syzkaller0 entered promiscuous mode [ 173.152951][ T5200] tipc: Disabling bearer [ 174.346449][ T5111] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 175.667687][ T7] Bluetooth: hci0: command 0x0419 tx timeout [ 175.669358][ T5111] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 176.660561][ T5111] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 176.795697][ T5111] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 178.955164][ T4146] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 178.961993][ T4146] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 179.527274][ T5231] bridge0: port 3(syz_tun) entered blocking state [ 179.528414][ T5231] bridge0: port 3(syz_tun) entered disabled state [ 179.530044][ T5231] device syz_tun entered promiscuous mode [ 179.531378][ T5231] bridge0: port 3(syz_tun) entered blocking state [ 179.532352][ T5231] bridge0: port 3(syz_tun) entered forwarding state [ 179.689833][ T26] audit: type=1326 audit(179.669:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5239 comm="syz.4.251" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb83d0f28 code=0x7ffc0000 [ 179.695349][ T26] audit: type=1326 audit(179.669:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5239 comm="syz.4.251" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb83d0f28 code=0x7ffc0000 [ 179.700926][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 179.702615][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 179.707536][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 179.708914][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 179.717335][ T5064] device veth0_vlan entered promiscuous mode [ 179.720985][ T5064] device veth1_vlan entered promiscuous mode [ 180.079010][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 180.217451][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 180.219045][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 180.953121][ T5064] device veth0_macvtap entered promiscuous mode [ 180.955622][ T5064] device veth1_macvtap entered promiscuous mode [ 180.971587][ T5064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.973346][ T5064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.977405][ T5064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.979239][ T5064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.980699][ T5064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.982233][ T5064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.983663][ T5064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.985190][ T5064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.416308][ T5064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 181.418119][ T5064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.503832][ T5064] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 182.679053][ T5111] 8021q: adding VLAN 0 to HW filter on device bond0 [ 182.684764][ T5111] 8021q: adding VLAN 0 to HW filter on device team0 [ 182.697708][ T5111] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 182.699637][ T5111] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 182.741728][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 182.743324][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 182.744688][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 182.746284][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 182.747756][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 182.749115][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 182.750505][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 182.751942][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 182.753330][ T4249] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.754455][ T4249] bridge0: port 1(bridge_slave_0) entered forwarding state [ 182.755853][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 182.757521][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 182.758961][ T4249] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.760004][ T4249] bridge0: port 2(bridge_slave_1) entered forwarding state [ 182.761368][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 182.762951][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 182.764562][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 182.766204][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 182.778033][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 182.779887][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 182.781649][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 182.783218][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 182.784829][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 182.791450][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 182.793035][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 182.794627][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 182.796067][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 182.817094][ T5064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.818718][ T5064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.820201][ T5064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.821877][ T5064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.823458][ T5064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.825081][ T5064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.930110][ T5064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.931915][ T5064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.933458][ T5064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.935071][ T5064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.938986][ T5064] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 182.942054][ T5064] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.943651][ T5064] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.945098][ T5064] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.950269][ T5064] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.381836][ T4146] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 183.383632][ T4146] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 183.419615][ T4146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.421175][ T4146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.422847][ T4146] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 183.455842][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 183.458324][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 183.463429][ T5111] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 183.597707][ T4146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.600568][ T4146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.602761][ T4146] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 183.639578][ T26] audit: type=1326 audit(183.619:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5288 comm="syz.4.259" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb83d0f28 code=0x7ffc0000 [ 183.642976][ T26] audit: type=1326 audit(183.619:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5288 comm="syz.4.259" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb83d0f28 code=0x7ffc0000 [ 183.649525][ T26] audit: type=1326 audit(183.629:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5288 comm="syz.4.259" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffffb83d0f28 code=0x7ffc0000 [ 183.652698][ T26] audit: type=1326 audit(183.629:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5288 comm="syz.4.259" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb83d0f28 code=0x7ffc0000 [ 183.655666][ T26] audit: type=1326 audit(183.629:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5288 comm="syz.4.259" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb83d0f28 code=0x7ffc0000 [ 183.675377][ T26] audit: type=1326 audit(183.649:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5288 comm="syz.4.259" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffffb83d0f28 code=0x7ffc0000 [ 184.083526][ T5294] bridge0: port 3(syz_tun) entered blocking state [ 184.084792][ T5294] bridge0: port 3(syz_tun) entered disabled state [ 184.087334][ T5294] device syz_tun entered promiscuous mode [ 184.088279][ T5294] bridge0: port 3(syz_tun) entered blocking state [ 184.089313][ T5294] bridge0: port 3(syz_tun) entered forwarding state [ 184.095738][ T26] audit: type=1326 audit(183.649:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5288 comm="syz.4.259" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb83d0f28 code=0x7ffc0000 [ 184.099852][ T26] audit: type=1326 audit(183.649:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5288 comm="syz.4.259" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb83d0f28 code=0x7ffc0000 [ 184.104629][ T5289] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:1) [ 184.142762][ T5297] netlink: 8 bytes leftover after parsing attributes in process `syz.2.260'. [ 184.155965][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 184.157900][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 184.188706][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 184.190372][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 184.192340][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 184.195567][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 184.200961][ T5111] device veth0_vlan entered promiscuous mode [ 184.212884][ T5111] device veth1_vlan entered promiscuous mode [ 184.221851][ T5301] tipc: Enabled bearer , priority 0 [ 184.223436][ T5301] device syzkaller0 entered promiscuous mode [ 184.242609][ T5301] tipc: Resetting bearer [ 184.245487][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 184.249459][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 184.253408][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 184.256082][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 184.261343][ T5111] device veth0_macvtap entered promiscuous mode [ 184.265406][ T5111] device veth1_macvtap entered promiscuous mode [ 184.293158][ T5299] tipc: Resetting bearer [ 184.825387][ T5305] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 184.961819][ T5299] tipc: Disabling bearer [ 185.315404][ T5111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.317370][ T5111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.318879][ T5111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.320344][ T5111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.321813][ T5111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.323358][ T5111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.324791][ T5111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.326817][ T5111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.328472][ T5111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.330174][ T5111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.331778][ T5111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.333492][ T5111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.335726][ T5111] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 185.337185][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 185.338880][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 185.340242][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 185.341792][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 185.776440][ T5313] bridge0: port 3(syz_tun) entered blocking state [ 185.777602][ T5313] bridge0: port 3(syz_tun) entered disabled state [ 185.779208][ T5313] device syz_tun entered promiscuous mode [ 185.780309][ T5313] bridge0: port 3(syz_tun) entered blocking state [ 185.781332][ T5313] bridge0: port 3(syz_tun) entered forwarding state [ 186.305764][ T5111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.315359][ T5111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.320230][ T5111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.326166][ T5111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.333576][ T5111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.339502][ T5111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.341908][ T5111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.349226][ T5111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.359363][ T5111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.361068][ T5111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.362657][ T5111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.364625][ T5111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.367269][ T5111] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 186.811554][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 186.813427][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 186.957013][ T5111] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.958464][ T5111] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.959787][ T5111] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.961135][ T5111] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.442563][ T5336] bridge0: port 3(syz_tun) entered blocking state [ 187.443685][ T5336] bridge0: port 3(syz_tun) entered disabled state [ 187.445429][ T5336] device syz_tun entered promiscuous mode [ 187.446796][ T5336] bridge0: port 3(syz_tun) entered blocking state [ 187.447787][ T5336] bridge0: port 3(syz_tun) entered forwarding state [ 187.510479][ T136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.512093][ T136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.514380][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 187.524400][ T4275] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.525661][ T4275] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.528446][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 189.101941][ T5366] loop6: detected capacity change from 0 to 512 [ 190.052835][ T5366] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 190.160812][ T4057] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:201' [ 190.162517][ T4057] CPU: 0 PID: 4057 Comm: kworker/u5:6 Not tainted 5.15.189-syzkaller #0 [ 190.163711][ T4057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 190.165184][ T4057] Workqueue: hci5 hci_rx_work [ 190.165907][ T4057] Call trace: [ 190.166439][ T4057] dump_backtrace+0x0/0x43c [ 190.167173][ T4057] show_stack+0x2c/0x3c [ 190.167881][ T4057] __dump_stack+0x30/0x40 [ 190.168528][ T4057] dump_stack_lvl+0xf8/0x160 [ 190.169251][ T4057] dump_stack+0x1c/0x5c [ 190.169853][ T4057] sysfs_create_dir_ns+0x22c/0x24c [ 190.170728][ T4057] kobject_add_internal+0x590/0xc54 [ 190.171591][ T4057] kobject_add+0x134/0x1f8 [ 190.172297][ T4057] device_add+0x3f0/0xf94 [ 190.172937][ T4057] hci_conn_add_sysfs+0xbc/0x1cc [ 190.173709][ T4057] le_conn_complete_evt+0x9a4/0x11bc [ 190.174488][ T4057] hci_le_meta_evt+0x85c/0x3010 [ 190.175241][ T4057] hci_event_packet+0xd10/0x11bc [ 190.175969][ T4057] hci_rx_work+0x1cc/0x880 [ 190.176624][ T4057] process_one_work+0x79c/0x1140 [ 190.177335][ T4057] worker_thread+0x8f4/0x101c [ 190.178016][ T4057] kthread+0x374/0x454 [ 190.178622][ T4057] ret_from_fork+0x10/0x20 [ 190.185491][ T4057] kobject_add_internal failed for hci5:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 190.188246][ T4057] Bluetooth: hci5: failed to register connection device [ 191.006043][ T5389] fuse: Invalid rootmode [ 194.183525][ T2063] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.184657][ T2063] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.187479][ T4057] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 194.189051][ T4057] CPU: 1 PID: 4057 Comm: kworker/u5:6 Not tainted 5.15.189-syzkaller #0 [ 194.190204][ T4057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 194.191560][ T4057] Workqueue: hci4 hci_rx_work [ 194.192227][ T4057] Call trace: [ 194.192700][ T4057] dump_backtrace+0x0/0x43c [ 194.193321][ T4057] show_stack+0x2c/0x3c [ 194.193904][ T4057] __dump_stack+0x30/0x40 [ 194.194518][ T4057] dump_stack_lvl+0xf8/0x160 [ 194.195258][ T4057] dump_stack+0x1c/0x5c [ 194.195897][ T4057] sysfs_create_dir_ns+0x22c/0x24c [ 194.196716][ T4057] kobject_add_internal+0x590/0xc54 [ 194.197501][ T4057] kobject_add+0x134/0x1f8 [ 194.198143][ T4057] device_add+0x3f0/0xf94 [ 194.198871][ T4057] hci_conn_add_sysfs+0xbc/0x1cc [ 194.199651][ T4057] le_conn_complete_evt+0x9a4/0x11bc [ 194.200571][ T4057] hci_le_meta_evt+0x85c/0x3010 [ 194.201352][ T4057] hci_event_packet+0xd10/0x11bc [ 194.202148][ T4057] hci_rx_work+0x1cc/0x880 [ 194.202757][ T4057] process_one_work+0x79c/0x1140 [ 194.203475][ T4057] worker_thread+0x8f4/0x101c [ 194.204157][ T4057] kthread+0x374/0x454 [ 194.204839][ T4057] ret_from_fork+0x10/0x20 [ 194.207607][ T4057] kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 194.209689][ T4057] Bluetooth: hci4: failed to register connection device [ 194.610639][ T7] libceph: connect (1)[c::]:6789 error -101 [ 194.611793][ T7] libceph: mon0 (1)[c::]:6789 connect error [ 194.866850][ T7] libceph: connect (1)[c::]:6789 error -101 [ 194.867877][ T7] libceph: mon0 (1)[c::]:6789 connect error [ 195.144998][ T5422] ceph: No mds server is up or the cluster is laggy [ 195.659005][ T4052] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 195.660716][ T4052] CPU: 1 PID: 4052 Comm: kworker/u5:4 Not tainted 5.15.189-syzkaller #0 [ 195.661972][ T4052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 195.663464][ T4052] Workqueue: hci3 hci_rx_work [ 195.664136][ T4052] Call trace: [ 195.664566][ T4052] dump_backtrace+0x0/0x43c [ 195.665187][ T4052] show_stack+0x2c/0x3c [ 195.665795][ T4052] __dump_stack+0x30/0x40 [ 195.666418][ T4052] dump_stack_lvl+0xf8/0x160 [ 195.667139][ T4052] dump_stack+0x1c/0x5c [ 195.667767][ T4052] sysfs_create_dir_ns+0x22c/0x24c [ 195.668540][ T4052] kobject_add_internal+0x590/0xc54 [ 195.669276][ T4052] kobject_add+0x134/0x1f8 [ 195.669945][ T4052] device_add+0x3f0/0xf94 [ 195.670562][ T4052] hci_conn_add_sysfs+0xbc/0x1cc [ 195.671313][ T4052] le_conn_complete_evt+0x9a4/0x11bc [ 195.672058][ T4052] hci_le_meta_evt+0x85c/0x3010 [ 195.672740][ T4052] hci_event_packet+0xd10/0x11bc [ 195.673489][ T4052] hci_rx_work+0x1cc/0x880 [ 195.674116][ T4052] process_one_work+0x79c/0x1140 [ 195.674877][ T4052] worker_thread+0x8f4/0x101c [ 195.675591][ T4052] kthread+0x374/0x454 [ 195.676163][ T4052] ret_from_fork+0x10/0x20 [ 195.676998][ T4052] kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 195.678891][ T4052] Bluetooth: hci3: failed to register connection device [ 195.806714][ T4158] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.886797][ T4158] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.017730][ T4158] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.691894][ T4052] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:201' [ 196.694299][ T4052] CPU: 1 PID: 4052 Comm: kworker/u5:4 Not tainted 5.15.189-syzkaller #0 [ 196.695504][ T4052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 196.697025][ T4052] Workqueue: hci5 hci_rx_work [ 196.697778][ T4052] Call trace: [ 196.698248][ T4052] dump_backtrace+0x0/0x43c [ 196.698932][ T4052] show_stack+0x2c/0x3c [ 196.699522][ T4052] __dump_stack+0x30/0x40 [ 196.700193][ T4052] dump_stack_lvl+0xf8/0x160 [ 196.700878][ T4052] dump_stack+0x1c/0x5c [ 196.701531][ T4052] sysfs_create_dir_ns+0x22c/0x24c [ 196.702317][ T4052] kobject_add_internal+0x590/0xc54 [ 196.703133][ T4052] kobject_add+0x134/0x1f8 [ 196.703803][ T4052] device_add+0x3f0/0xf94 [ 196.704483][ T4052] hci_conn_add_sysfs+0xbc/0x1cc [ 196.705255][ T4052] le_conn_complete_evt+0x9a4/0x11bc [ 196.706093][ T4052] hci_le_meta_evt+0x85c/0x3010 [ 196.706766][ T4052] hci_event_packet+0xd10/0x11bc [ 196.707439][ T4052] hci_rx_work+0x1cc/0x880 [ 196.708067][ T4052] process_one_work+0x79c/0x1140 [ 196.708797][ T4052] worker_thread+0x8f4/0x101c [ 196.709493][ T4052] kthread+0x374/0x454 [ 196.710117][ T4052] ret_from_fork+0x10/0x20 [ 196.710877][ T4052] kobject_add_internal failed for hci5:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 196.712730][ T4052] Bluetooth: hci5: failed to register connection device [ 196.715565][ T5238] Bluetooth: hci5: command 0x0406 tx timeout [ 196.729669][ T21] libceph: connect (1)[c::]:6789 error -101 [ 196.730663][ T21] libceph: mon0 (1)[c::]:6789 connect error [ 196.817770][ T4158] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.457456][ T4052] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:201' [ 197.459233][ T4052] CPU: 0 PID: 4052 Comm: kworker/u5:4 Not tainted 5.15.189-syzkaller #0 [ 197.460431][ T4052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 197.461914][ T4052] Workqueue: hci5 hci_rx_work [ 197.462624][ T4052] Call trace: [ 197.463128][ T4052] dump_backtrace+0x0/0x43c [ 197.463818][ T4052] show_stack+0x2c/0x3c [ 197.464392][ T4052] __dump_stack+0x30/0x40 [ 197.465038][ T4052] dump_stack_lvl+0xf8/0x160 [ 197.465757][ T4052] dump_stack+0x1c/0x5c [ 197.466475][ T4052] sysfs_create_dir_ns+0x22c/0x24c [ 197.467255][ T4052] kobject_add_internal+0x590/0xc54 [ 197.468067][ T4052] kobject_add+0x134/0x1f8 [ 197.468790][ T4052] device_add+0x3f0/0xf94 [ 197.469477][ T4052] hci_conn_add_sysfs+0xbc/0x1cc [ 197.470270][ T4052] le_conn_complete_evt+0x9a4/0x11bc [ 197.471031][ T4052] hci_le_meta_evt+0x85c/0x3010 [ 197.471730][ T4052] hci_event_packet+0xd10/0x11bc [ 197.472447][ T4052] hci_rx_work+0x1cc/0x880 [ 197.473101][ T4052] process_one_work+0x79c/0x1140 [ 197.473853][ T4052] worker_thread+0x8f4/0x101c [ 197.474553][ T4052] kthread+0x374/0x454 [ 197.475184][ T4052] ret_from_fork+0x10/0x20 [ 197.479191][ T4052] kobject_add_internal failed for hci5:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 197.481811][ T4052] Bluetooth: hci5: failed to register connection device [ 197.806610][ T5464] ceph: No mds server is up or the cluster is laggy [ 197.809046][ T25] libceph: connect (1)[c::]:6789 error -101 [ 197.810033][ T25] libceph: mon0 (1)[c::]:6789 connect error [ 197.833068][ T25] libceph: connect (1)[c::]:6789 error -101 [ 197.836652][ T25] libceph: mon0 (1)[c::]:6789 connect error [ 197.899308][ T4158] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.939621][ T4158] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.948981][ T5468] ceph: No mds server is up or the cluster is laggy [ 197.995186][ T4158] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.115237][ T4158] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.533477][ T5503] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 199.311138][ T5543] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 200.577437][ T4057] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 200.604096][ T4057] CPU: 1 PID: 4057 Comm: kworker/u5:6 Not tainted 5.15.189-syzkaller #0 [ 200.605404][ T4057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 200.606853][ T4057] Workqueue: hci3 hci_rx_work [ 200.607597][ T4057] Call trace: [ 200.608062][ T4057] dump_backtrace+0x0/0x43c [ 200.608691][ T4057] show_stack+0x2c/0x3c [ 200.609288][ T4057] __dump_stack+0x30/0x40 [ 200.610008][ T4057] dump_stack_lvl+0xf8/0x160 [ 200.610666][ T4057] dump_stack+0x1c/0x5c [ 200.611292][ T4057] sysfs_create_dir_ns+0x22c/0x24c [ 200.612029][ T4057] kobject_add_internal+0x590/0xc54 [ 200.612742][ T4057] kobject_add+0x134/0x1f8 [ 200.613368][ T4057] device_add+0x3f0/0xf94 [ 200.613984][ T4057] hci_conn_add_sysfs+0xbc/0x1cc [ 200.614695][ T4057] le_conn_complete_evt+0x9a4/0x11bc [ 200.615417][ T4057] hci_le_meta_evt+0x85c/0x3010 [ 200.616081][ T4057] hci_event_packet+0xd10/0x11bc [ 200.616827][ T4057] hci_rx_work+0x1cc/0x880 [ 200.617485][ T4057] process_one_work+0x79c/0x1140 [ 200.618217][ T4057] worker_thread+0x8f4/0x101c [ 200.618918][ T4057] kthread+0x374/0x454 [ 200.619574][ T4057] ret_from_fork+0x10/0x20 [ 200.621221][ T4057] kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 200.623274][ T4057] Bluetooth: hci3: failed to register connection device [ 201.292250][ T4052] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 201.302890][ T4052] CPU: 1 PID: 4052 Comm: kworker/u5:4 Not tainted 5.15.189-syzkaller #0 [ 201.304181][ T4052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 201.305617][ T4052] Workqueue: hci3 hci_rx_work [ 201.306320][ T4052] Call trace: [ 201.306799][ T4052] dump_backtrace+0x0/0x43c [ 201.307439][ T4052] show_stack+0x2c/0x3c [ 201.308028][ T4052] __dump_stack+0x30/0x40 [ 201.308623][ T4052] dump_stack_lvl+0xf8/0x160 [ 201.309288][ T4052] dump_stack+0x1c/0x5c [ 201.309882][ T4052] sysfs_create_dir_ns+0x22c/0x24c [ 201.310654][ T4052] kobject_add_internal+0x590/0xc54 [ 201.311384][ T4052] kobject_add+0x134/0x1f8 [ 201.312010][ T4052] device_add+0x3f0/0xf94 [ 201.312661][ T4052] hci_conn_add_sysfs+0xbc/0x1cc [ 201.313407][ T4052] le_conn_complete_evt+0x9a4/0x11bc [ 201.314169][ T4052] hci_le_meta_evt+0x85c/0x3010 [ 201.314869][ T4052] hci_event_packet+0xd10/0x11bc [ 201.315544][ T4052] hci_rx_work+0x1cc/0x880 [ 201.316269][ T4052] process_one_work+0x79c/0x1140 [ 201.317135][ T4052] worker_thread+0x8f4/0x101c [ 201.317953][ T4052] kthread+0x374/0x454 [ 201.318657][ T4052] ret_from_fork+0x10/0x20 [ 201.320864][ T4052] kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 201.323047][ T4052] Bluetooth: hci3: failed to register connection device [ 201.324401][ T4052] Bluetooth: hci3: link tx timeout [ 201.325251][ T4052] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 201.845242][ T13] libceph: connect (1)[c::]:6789 error -101 [ 201.847107][ T13] libceph: mon0 (1)[c::]:6789 connect error [ 201.852872][ T13] libceph: connect (1)[c::]:6789 error -101 [ 201.853978][ T13] libceph: mon0 (1)[c::]:6789 connect error [ 202.106599][ T7] libceph: connect (1)[c::]:6789 error -101 [ 202.107804][ T7] libceph: mon0 (1)[c::]:6789 connect error [ 202.718343][ T4250] Bluetooth: hci3: command 0x0406 tx timeout [ 203.476111][ T7] libceph: connect (1)[c::]:6789 error -101 [ 203.477184][ T7] libceph: mon0 (1)[c::]:6789 connect error [ 203.481824][ T5602] ceph: No mds server is up or the cluster is laggy [ 203.572710][ T5662] tipc: Enabled bearer , priority 0 [ 203.574078][ T5662] device syzkaller0 entered promiscuous mode [ 203.597761][ T5662] tipc: Resetting bearer [ 203.600445][ T5661] tipc: Resetting bearer [ 203.604652][ T5661] tipc: Disabling bearer [ 203.649222][ T5674] tipc: Started in network mode [ 203.650055][ T5674] tipc: Node identity feec475382f8, cluster identity 4711 [ 203.651646][ T5674] tipc: Enabled bearer , priority 0 [ 203.653176][ T5674] device syzkaller0 entered promiscuous mode [ 203.686153][ T5670] tipc: Resetting bearer [ 203.697818][ T5670] tipc: Disabling bearer [ 203.714075][ T5680] tipc: Enabling of bearer rejected, failed to enable media [ 203.715639][ T5679] tipc: Enabled bearer , priority 0 [ 203.726133][ T5680] device syzkaller0 entered promiscuous mode [ 203.728707][ T5679] device syzkaller0 entered promiscuous mode [ 203.738017][ T5679] tipc: Resetting bearer [ 203.754315][ T5677] tipc: Resetting bearer [ 203.762090][ T5677] tipc: Disabling bearer [ 203.832275][ T5694] fuse: Bad value for 'rootmode' [ 203.999927][ T4077] Bluetooth: hci5: command 0x0406 tx timeout [ 205.258676][ T5778] tipc: Enabled bearer , priority 0 [ 205.262474][ T5778] device syzkaller0 entered promiscuous mode [ 205.291033][ T5778] tipc: Resetting bearer [ 205.329241][ T5777] tipc: Resetting bearer [ 205.334843][ T5777] tipc: Disabling bearer [ 205.791504][ T5787] tipc: Enabled bearer , priority 0 [ 205.801840][ T5787] device syzkaller0 entered promiscuous mode [ 205.814811][ T5786] tipc: Resetting bearer [ 205.816039][ T5790] fuse: Unknown parameter 'use00000000000000000000' [ 205.822342][ T5786] tipc: Disabling bearer [ 205.977545][ T5795] tipc: Enabling of bearer rejected, failed to enable media [ 205.979266][ T5795] device syzkaller0 entered promiscuous mode [ 206.404199][ T5815] tipc: Enabled bearer , priority 0 [ 206.467239][ T5812] tipc: Resetting bearer [ 206.472615][ T5806] tipc: Disabling bearer [ 207.688803][ T5518] Bluetooth: hci3: command 0x0406 tx timeout [ 207.835401][ T5873] fuse: Unknown parameter 'use00000000000000000000' [ 207.885911][ T5877] tipc: Enabled bearer , priority 0 [ 207.893978][ T5877] device syzkaller0 entered promiscuous mode [ 207.904745][ T5877] tipc: Resetting bearer [ 207.915115][ T5876] tipc: Resetting bearer [ 207.920984][ T5876] tipc: Disabling bearer [ 208.718915][ T5899] tipc: Enabling of bearer rejected, failed to enable media [ 208.720794][ T5899] device syzkaller0 entered promiscuous mode [ 208.840041][ T5904] tipc: Started in network mode [ 208.840845][ T5904] tipc: Node identity a292e0bb123d, cluster identity 4711 [ 208.842300][ T5904] tipc: Enabled bearer , priority 0 [ 208.843709][ T5904] device syzkaller0 entered promiscuous mode [ 208.854420][ T5904] tipc: Resetting bearer [ 208.857457][ T5903] tipc: Resetting bearer [ 208.911903][ T5903] tipc: Disabling bearer [ 209.434888][ T5916] device syzkaller0 entered promiscuous mode [ 209.482644][ T5927] fuse: Unknown parameter 'use00000000000000000000' [ 209.552351][ T4158] device hsr_slave_0 left promiscuous mode [ 209.596714][ T4158] device hsr_slave_1 left promiscuous mode [ 209.738138][ T4158] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 209.739411][ T4158] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 209.743865][ T4158] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 209.751595][ T4158] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 209.753173][ T4158] device bridge_slave_1 left promiscuous mode [ 209.754641][ T4158] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.218914][ T4158] device bridge_slave_0 left promiscuous mode [ 210.229653][ T4158] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.281639][ T4158] device hsr_slave_0 left promiscuous mode [ 210.319623][ T4158] device hsr_slave_1 left promiscuous mode [ 210.431561][ T4158] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 210.432854][ T4158] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 210.435345][ T4158] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 210.436558][ T4158] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 210.437891][ T4158] device bridge_slave_1 left promiscuous mode [ 210.438893][ T4158] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.476743][ T4158] device bridge_slave_0 left promiscuous mode [ 210.477855][ T4158] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.866479][ T4158] device veth1_macvtap left promiscuous mode [ 210.867688][ T4158] device veth0_macvtap left promiscuous mode [ 210.868803][ T4158] device veth1_vlan left promiscuous mode [ 210.869721][ T4158] device veth0_vlan left promiscuous mode [ 210.966359][ T4158] device veth1_macvtap left promiscuous mode [ 210.967412][ T4158] device veth0_macvtap left promiscuous mode [ 210.968459][ T4158] device veth1_vlan left promiscuous mode [ 210.969405][ T4158] device veth0_vlan left promiscuous mode [ 211.131716][ T4158] team0 (unregistering): Port device team_slave_1 removed [ 211.136425][ T4158] team0 (unregistering): Port device team_slave_0 removed [ 211.141217][ T4158] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 211.169895][ T4158] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 211.311980][ T4158] bond0 (unregistering): Released all slaves [ 212.015411][ T4158] team0 (unregistering): Port device team_slave_1 removed [ 212.021904][ T4158] team0 (unregistering): Port device team_slave_0 removed [ 212.025821][ T4158] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 212.070000][ T4158] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 212.094465][ T5976] fuse: Unknown parameter 'user_i00000000000000000000' [ 212.199651][ T4158] bond0 (unregistering): Released all slaves [ 212.611025][ T5939] tipc: Enabled bearer , priority 0 [ 212.633830][ T5939] tipc: Disabling bearer [ 213.874330][ T6034] fuse: Unknown parameter 'user_i00000000000000000000' [ 213.905014][ T6039] device syzkaller0 entered promiscuous mode [ 215.023614][ T6057] tipc: Enabled bearer , priority 0 [ 215.025719][ T6057] device syzkaller0 entered promiscuous mode [ 215.036845][ T6058] tipc: Enabled bearer , priority 0 [ 215.039111][ T6058] device syzkaller0 entered promiscuous mode [ 215.047312][ T6057] tipc: Resetting bearer [ 215.049475][ T6050] tipc: Resetting bearer [ 215.052859][ T6050] tipc: Disabling bearer [ 215.070534][ T6058] tipc: Resetting bearer [ 215.097624][ T6051] tipc: Resetting bearer [ 215.101107][ T6051] tipc: Disabling bearer [ 216.161737][ T4057] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 216.163241][ T4057] CPU: 1 PID: 4057 Comm: kworker/u5:6 Not tainted 5.15.189-syzkaller #0 [ 216.164486][ T4057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 216.166087][ T4057] Workqueue: hci0 hci_rx_work [ 216.166802][ T4057] Call trace: [ 216.167271][ T4057] dump_backtrace+0x0/0x43c [ 216.167938][ T4057] show_stack+0x2c/0x3c [ 216.168536][ T4057] __dump_stack+0x30/0x40 [ 216.169220][ T4057] dump_stack_lvl+0xf8/0x160 [ 216.169899][ T4057] dump_stack+0x1c/0x5c [ 216.170517][ T4057] sysfs_create_dir_ns+0x22c/0x24c [ 216.171263][ T4057] kobject_add_internal+0x590/0xc54 [ 216.172010][ T4057] kobject_add+0x134/0x1f8 [ 216.172680][ T4057] device_add+0x3f0/0xf94 [ 216.173337][ T4057] hci_conn_add_sysfs+0xbc/0x1cc [ 216.174100][ T4057] le_conn_complete_evt+0x9a4/0x11bc [ 216.174954][ T4057] hci_le_meta_evt+0x85c/0x3010 [ 216.175740][ T4057] hci_event_packet+0xd10/0x11bc [ 216.176523][ T4057] hci_rx_work+0x1cc/0x880 [ 216.177200][ T4057] process_one_work+0x79c/0x1140 [ 216.177927][ T4057] worker_thread+0x8f4/0x101c [ 216.178673][ T4057] kthread+0x374/0x454 [ 216.179230][ T4057] ret_from_fork+0x10/0x20 [ 216.183919][ T4057] kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 216.185905][ T4057] Bluetooth: hci0: failed to register connection device [ 216.626945][ T6085] fuse: Unknown parameter 'user_i00000000000000000000' [ 218.150968][ T6109] device syzkaller0 entered promiscuous mode [ 219.041155][ T6119] tipc: Enabling of bearer rejected, failed to enable media [ 219.239155][ T6139] capability: warning: `syz.2.405' uses deprecated v2 capabilities in a way that may be insecure [ 219.607161][ T6160] tipc: Enabled bearer , priority 0 [ 219.608721][ T6160] device syzkaller0 entered promiscuous mode [ 219.615791][ T6160] tipc: Resetting bearer [ 219.621944][ T6159] tipc: Resetting bearer [ 219.625622][ T6159] tipc: Disabling bearer [ 219.662150][ T6168] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 219.765711][ T6176] overlayfs: failed to resolve './file1': -2 [ 219.848277][ T6183] fuse: Unknown parameter 'user_id00000000000000000000' [ 221.344404][ T6242] device syzkaller0 entered promiscuous mode [ 221.693646][ T6255] tipc: Enabled bearer , priority 0 [ 221.709696][ T6255] device syzkaller0 entered promiscuous mode [ 221.754493][ T6252] tipc: Resetting bearer [ 221.774298][ T6252] tipc: Disabling bearer [ 222.021498][ T6270] fuse: Unknown parameter 'user_id00000000000000000000' [ 222.023243][ T6269] tipc: Enabled bearer , priority 0 [ 222.031972][ T6269] device syzkaller0 entered promiscuous mode [ 222.088787][ T6274] overlayfs: failed to resolve './file1': -2 [ 222.110981][ T6269] tipc: Resetting bearer [ 222.113062][ T6264] tipc: Resetting bearer [ 222.119493][ T6264] tipc: Disabling bearer [ 222.763159][ T3624] Bluetooth: hci0: command 0x0406 tx timeout [ 223.797651][ T6322] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 226.797086][ T6360] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:1) [ 227.127686][ T6359] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:1) [ 228.778605][ T6431] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 230.390275][ T6452] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 230.515450][ T6482] tipc: Enabling of bearer rejected, failed to enable media [ 230.517619][ T6482] device syzkaller0 entered promiscuous mode [ 230.623468][ T6483] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:1) [ 231.035274][ T6489] device syzkaller0 entered promiscuous mode [ 231.871673][ T6496] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 236.156354][ T6535] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:1) [ 237.028714][ T6548] device syzkaller0 entered promiscuous mode [ 237.214185][ T6556] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 237.874552][ T6562] tipc: Enabling of bearer rejected, failed to enable media [ 237.877641][ T6562] device syzkaller0 entered promiscuous mode [ 238.799645][ T6588] overlayfs: failed to resolve './file0': -2 [ 239.096133][ T6598] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:1) [ 239.983484][ T6599] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 240.469604][ T6606] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 240.510635][ T6610] device syzkaller0 entered promiscuous mode [ 242.950564][ T6634] overlayfs: failed to resolve './file0': -2 [ 243.826431][ T6647] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:1) [ 244.338120][ T6652] loop6: detected capacity change from 0 to 256 [ 244.479901][ T6657] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:1) [ 245.910471][ T6677] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 246.561517][ T6676] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:1) [ 247.668285][ T6692] device syzkaller0 entered promiscuous mode [ 247.702397][ T6695] fuse: Unknown parameter '0x0000000000000005' [ 251.339402][ T6736] fuse: Unknown parameter '0x0000000000000005' [ 251.379078][ T6739] netlink: 8 bytes leftover after parsing attributes in process `syz.3.517'. [ 251.420968][ T6741] device syzkaller0 entered promiscuous mode [ 254.043721][ T6778] fuse: Unknown parameter '0x0000000000000005' [ 254.191514][ T6782] device syzkaller0 entered promiscuous mode [ 255.743713][ T6813] fuse: Unknown parameter 'fd0x0000000000000005' [ 256.517115][ T6825] tipc: Enabled bearer , priority 0 [ 256.519042][ T6825] device syzkaller0 entered promiscuous mode [ 256.528740][ T6825] tipc: Resetting bearer [ 256.533631][ T6823] tipc: Resetting bearer [ 256.537830][ T6823] tipc: Disabling bearer [ 256.981294][ T6833] device syzkaller0 entered promiscuous mode [ 257.415045][ T6845] fuse: Unknown parameter 'fd0x0000000000000005' [ 257.879147][ T6856] tipc: Enabled bearer , priority 0 [ 257.880640][ T6856] device syzkaller0 entered promiscuous mode [ 257.885383][ T6851] overlayfs: failed to resolve './file1': -2 [ 257.885445][ T6855] tipc: Resetting bearer [ 257.894288][ T6855] tipc: Disabling bearer [ 259.263576][ T2063] ieee802154 phy0 wpan0: encryption failed: -22 [ 259.264726][ T2063] ieee802154 phy1 wpan1: encryption failed: -22 [ 259.288009][ T6880] fuse: Unknown parameter 'fd0x0000000000000005' [ 260.847139][ T6892] device syzkaller0 entered promiscuous mode [ 260.999282][ T6896] overlayfs: failed to resolve './file1': -2 [ 263.757522][ T6930] fuse: Bad value for 'fd' [ 263.974168][ T6952] overlayfs: failed to resolve './file1': -2 [ 265.912002][ T7005] overlayfs: failed to resolve './file1': -2 [ 265.961903][ T7007] tipc: Enabled bearer , priority 0 [ 265.972871][ T7007] tipc: Resetting bearer [ 265.984821][ T7006] tipc: Disabling bearer [ 268.578356][ T7052] overlayfs: failed to resolve './file1': -2 [ 269.141636][ T7064] tipc: Enabled bearer , priority 0 [ 269.160837][ T7064] tipc: Resetting bearer [ 269.165511][ T7062] tipc: Disabling bearer [ 275.537885][ T7150] tipc: Enabled bearer , priority 0 [ 275.539418][ T7150] device syzkaller0 entered promiscuous mode [ 275.543094][ T7146] tipc: Resetting bearer [ 275.549540][ T7146] tipc: Disabling bearer [ 277.835514][ T7172] loop6: detected capacity change from 0 to 256 [ 279.746042][ T7201] tipc: Enabled bearer , priority 0 [ 279.748834][ T7201] device syzkaller0 entered promiscuous mode [ 279.752958][ T7200] tipc: Resetting bearer [ 279.760352][ T7200] tipc: Disabling bearer [ 282.412801][ T4467] Bluetooth: hci5: command 0x0406 tx timeout [ 282.560360][ T7243] tipc: Enabled bearer , priority 0 [ 282.561805][ T7243] device syzkaller0 entered promiscuous mode [ 282.565498][ T7242] tipc: Resetting bearer [ 282.572289][ T7242] tipc: Disabling bearer [ 284.672229][ T7277] tipc: Enabled bearer , priority 0 [ 284.673746][ T7277] device syzkaller0 entered promiscuous mode [ 284.691593][ T7277] tipc: Resetting bearer [ 284.722569][ T7275] tipc: Resetting bearer [ 284.725952][ T7275] tipc: Disabling bearer [ 286.663732][ T7320] tipc: Enabled bearer , priority 0 [ 286.665193][ T7320] device syzkaller0 entered promiscuous mode [ 286.684346][ T7320] tipc: Resetting bearer [ 286.686666][ T7319] tipc: Resetting bearer [ 286.689967][ T7319] tipc: Disabling bearer [ 286.785154][ T7323] device syzkaller0 entered promiscuous mode [ 288.673415][ T7356] tipc: Enabled bearer , priority 0 [ 288.674817][ T7356] device syzkaller0 entered promiscuous mode [ 288.683994][ T7356] tipc: Resetting bearer [ 288.687024][ T7355] tipc: Resetting bearer [ 288.691127][ T7355] tipc: Disabling bearer [ 293.036577][ T5136] Bluetooth: hci0: command 0x0406 tx timeout [ 296.366366][ T7458] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(10) [ 296.367548][ T7458] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 296.370817][ T7458] vhci_hcd vhci_hcd.0: Device attached [ 296.479990][ T7458] vhci_hcd vhci_hcd.0: pdev(6) rhport(1) sockfd(12) [ 296.481041][ T7458] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 296.808123][ T7458] vhci_hcd vhci_hcd.0: Device attached [ 296.812424][ T7469] vhci_hcd vhci_hcd.0: pdev(6) rhport(2) sockfd(14) [ 296.813536][ T7469] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 296.815141][ T7469] vhci_hcd vhci_hcd.0: Device attached [ 296.837424][ T1968] vhci_hcd: vhci_device speed not set [ 296.878978][ T7469] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(20) [ 296.880057][ T7469] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 296.881330][ T7469] vhci_hcd vhci_hcd.0: Device attached [ 296.884738][ T7458] vhci_hcd vhci_hcd.0: pdev(6) rhport(3) sockfd(17) [ 296.885692][ T7458] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 296.893840][ T7469] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 296.894768][ T7458] vhci_hcd vhci_hcd.0: Device attached [ 296.904834][ T7458] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 296.907699][ T7458] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 296.910590][ T7458] vhci_hcd vhci_hcd.0: pdev(6) rhport(7) sockfd(27) [ 296.911557][ T7458] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 296.916502][ T1968] usb 14-1: new full-speed USB device number 2 using vhci_hcd [ 296.990520][ T7458] vhci_hcd vhci_hcd.0: Device attached [ 297.005589][ T7483] vhci_hcd: connection closed [ 297.009455][ T7477] vhci_hcd: connection closed [ 297.011114][ T4186] vhci_hcd: stop threads [ 297.012789][ T4186] vhci_hcd: release socket [ 297.013966][ T4186] vhci_hcd: disconnect device [ 297.015397][ T4186] vhci_hcd: stop threads [ 297.016034][ T4186] vhci_hcd: release socket [ 297.017595][ T4186] vhci_hcd: disconnect device [ 297.022236][ T7478] vhci_hcd: connection closed [ 297.023094][ T4251] vhci_hcd: stop threads [ 297.024718][ T4251] vhci_hcd: release socket [ 297.025441][ T4251] vhci_hcd: disconnect device [ 297.026670][ T7460] vhci_hcd: connection reset by peer [ 297.027691][ T7466] vhci_hcd: connection closed [ 297.027779][ T7475] vhci_hcd: connection closed [ 297.030451][ T4251] vhci_hcd: stop threads [ 297.032041][ T4251] vhci_hcd: release socket [ 297.032819][ T4251] vhci_hcd: disconnect device [ 297.183789][ T4251] vhci_hcd: stop threads [ 297.184830][ T4251] vhci_hcd: release socket [ 297.185947][ T4251] vhci_hcd: disconnect device [ 297.187594][ T4251] vhci_hcd: stop threads [ 297.188500][ T4251] vhci_hcd: release socket [ 297.189322][ T4251] vhci_hcd: disconnect device [ 302.653350][ T1968] vhci_hcd: vhci_device speed not set [ 303.963030][ T7620] tipc: Enabled bearer , priority 0 [ 303.964530][ T7620] device syzkaller0 entered promiscuous mode [ 303.975080][ T7620] tipc: Resetting bearer [ 303.978571][ T7617] tipc: Resetting bearer [ 303.982097][ T7617] tipc: Disabling bearer [ 305.014697][ T7633] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(10) [ 305.015812][ T7633] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 305.018512][ T7633] vhci_hcd vhci_hcd.0: Device attached [ 305.021292][ T7633] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(12) [ 305.022371][ T7633] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 305.023813][ T7633] vhci_hcd vhci_hcd.0: Device attached [ 305.030699][ T7633] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(15) [ 305.031789][ T7633] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 305.033245][ T7633] vhci_hcd vhci_hcd.0: Device attached [ 305.035848][ T7633] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(17) [ 305.036930][ T7633] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 305.038622][ T7633] vhci_hcd vhci_hcd.0: Device attached [ 305.041289][ T7633] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(19) [ 305.042380][ T7633] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 305.043867][ T7633] vhci_hcd vhci_hcd.0: Device attached [ 305.045691][ T7642] vhci_hcd: connection closed [ 305.046136][ T7640] vhci_hcd: connection closed [ 305.048102][ T7638] vhci_hcd: connection closed [ 305.049282][ T7636] vhci_hcd: connection closed [ 305.050229][ T4146] vhci_hcd: stop threads [ 305.051750][ T4146] vhci_hcd: release socket [ 305.052466][ T4146] vhci_hcd: disconnect device [ 305.053416][ T4146] vhci_hcd: stop threads [ 305.054096][ T4146] vhci_hcd: release socket [ 305.054859][ T4146] vhci_hcd: disconnect device [ 305.055715][ T4146] vhci_hcd: stop threads [ 305.057347][ T4146] vhci_hcd: release socket [ 305.058457][ T7634] vhci_hcd: connection closed [ 305.058781][ T4146] vhci_hcd: disconnect device [ 305.060343][ T4146] vhci_hcd: stop threads [ 305.060956][ T4146] vhci_hcd: release socket [ 305.061773][ T4146] vhci_hcd: disconnect device [ 305.062662][ T4146] vhci_hcd: stop threads [ 305.063394][ T4146] vhci_hcd: release socket [ 305.064033][ T4146] vhci_hcd: disconnect device [ 307.379678][ T7672] tipc: Enabled bearer , priority 0 [ 307.381067][ T7672] device syzkaller0 entered promiscuous mode [ 307.390172][ T7672] tipc: Resetting bearer [ 307.392602][ T7671] tipc: Resetting bearer [ 307.396037][ T7671] tipc: Disabling bearer [ 310.859258][ T7707] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:1) [ 311.073378][ T7720] tipc: Enabled bearer , priority 0 [ 311.075089][ T7720] device syzkaller0 entered promiscuous mode [ 311.083156][ T7720] tipc: Resetting bearer [ 311.085463][ T7719] tipc: Resetting bearer [ 311.089205][ T7719] tipc: Disabling bearer [ 314.453024][ T7763] tipc: Enabled bearer , priority 0 [ 314.454961][ T7763] device syzkaller0 entered promiscuous mode [ 314.467091][ T7763] tipc: Resetting bearer [ 314.469485][ T7762] tipc: Resetting bearer [ 314.473370][ T7762] tipc: Disabling bearer [ 314.774849][ T7777] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10) [ 314.775921][ T7777] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 314.778685][ T7777] vhci_hcd vhci_hcd.0: Device attached [ 314.781711][ T7777] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(12) [ 314.782840][ T7777] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 314.784192][ T7777] vhci_hcd vhci_hcd.0: Device attached [ 314.791714][ T7777] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(14) [ 314.792757][ T7777] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 314.795044][ T7777] vhci_hcd vhci_hcd.0: Device attached [ 314.798636][ T7777] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(16) [ 314.799703][ T7777] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 314.801227][ T7777] vhci_hcd vhci_hcd.0: Device attached [ 314.803227][ T7785] vhci_hcd: connection closed [ 314.803399][ T351] vhci_hcd: stop threads [ 314.804947][ T351] vhci_hcd: release socket [ 314.805715][ T351] vhci_hcd: disconnect device [ 314.809795][ T7783] vhci_hcd: connection closed [ 314.810058][ T351] vhci_hcd: stop threads [ 314.811454][ T351] vhci_hcd: release socket [ 314.812121][ T351] vhci_hcd: disconnect device [ 314.812979][ T7781] vhci_hcd: connection closed [ 314.813219][ T351] vhci_hcd: stop threads [ 314.814735][ T351] vhci_hcd: release socket [ 314.815504][ T351] vhci_hcd: disconnect device [ 315.017623][ T4100] vhci_hcd: vhci_device speed not set [ 315.086368][ T4100] usb 8-1: new full-speed USB device number 2 using vhci_hcd [ 315.180101][ T7779] vhci_hcd: connection reset by peer [ 315.181216][ T4252] vhci_hcd: stop threads [ 315.181856][ T4252] vhci_hcd: release socket [ 315.182653][ T4252] vhci_hcd: disconnect device [ 315.763221][ T7797] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:1) [ 316.704378][ T7808] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:1) [ 317.261098][ T7816] tipc: Enabled bearer , priority 0 [ 317.262622][ T7816] device syzkaller0 entered promiscuous mode [ 317.269407][ T7816] tipc: Resetting bearer [ 317.271529][ T7815] tipc: Resetting bearer [ 317.284591][ T7815] tipc: Disabling bearer [ 318.192250][ T7830] loop6: detected capacity change from 0 to 256 [ 320.487403][ T2063] ieee802154 phy0 wpan0: encryption failed: -22 [ 320.488545][ T2063] ieee802154 phy1 wpan1: encryption failed: -22 [ 320.537511][ T4100] vhci_hcd: vhci_device speed not set [ 321.491930][ T7874] tipc: Enabled bearer , priority 0 [ 321.493443][ T7874] device syzkaller0 entered promiscuous mode [ 321.500828][ T7874] tipc: Resetting bearer [ 321.503095][ T7867] tipc: Resetting bearer [ 321.507712][ T7867] tipc: Disabling bearer [ 321.787278][ T4057] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 321.788922][ T4057] CPU: 0 PID: 4057 Comm: kworker/u5:6 Not tainted 5.15.189-syzkaller #0 [ 321.790139][ T4057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 321.791840][ T4057] Workqueue: hci4 hci_rx_work [ 321.792636][ T4057] Call trace: [ 321.793181][ T4057] dump_backtrace+0x0/0x43c [ 321.793927][ T4057] show_stack+0x2c/0x3c [ 321.794541][ T4057] __dump_stack+0x30/0x40 [ 321.795221][ T4057] dump_stack_lvl+0xf8/0x160 [ 321.795883][ T4057] dump_stack+0x1c/0x5c [ 321.796472][ T4057] sysfs_create_dir_ns+0x22c/0x24c [ 321.797204][ T4057] kobject_add_internal+0x590/0xc54 [ 321.798029][ T4057] kobject_add+0x134/0x1f8 [ 321.798720][ T4057] device_add+0x3f0/0xf94 [ 321.799362][ T4057] hci_conn_add_sysfs+0xbc/0x1cc [ 321.800089][ T4057] le_conn_complete_evt+0x9a4/0x11bc [ 321.800871][ T4057] hci_le_meta_evt+0x85c/0x3010 [ 321.801555][ T4057] hci_event_packet+0xd10/0x11bc [ 321.802214][ T4057] hci_rx_work+0x1cc/0x880 [ 321.802874][ T4057] process_one_work+0x79c/0x1140 [ 321.803591][ T4057] worker_thread+0x8f4/0x101c [ 321.804298][ T4057] kthread+0x374/0x454 [ 321.804929][ T4057] ret_from_fork+0x10/0x20 [ 321.808760][ T4057] kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 321.810759][ T4057] Bluetooth: hci4: failed to register connection device [ 322.518621][ T7890] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:1) [ 322.809711][ T3624] libceph: connect (1)[c::]:6789 error -101 [ 322.810829][ T3624] libceph: mon0 (1)[c::]:6789 connect error [ 322.811884][ T3624] libceph: connect (1)[c::]:6789 error -101 [ 322.812863][ T3624] libceph: mon0 (1)[c::]:6789 connect error [ 322.825575][ T7886] ceph: No mds server is up or the cluster is laggy [ 323.510933][ T3624] libceph: connect (1)[c::]:6789 error -101 [ 323.511926][ T3624] libceph: mon0 (1)[c::]:6789 connect error [ 325.669516][ T7929] tipc: Enabling of bearer rejected, failed to enable media [ 327.209087][ T7954] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:1) [ 329.142761][ T4052] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:201' [ 329.144272][ T4052] CPU: 1 PID: 4052 Comm: kworker/u5:4 Not tainted 5.15.189-syzkaller #0 [ 329.145615][ T4052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 329.147211][ T4052] Workqueue: hci5 hci_rx_work [ 329.147981][ T4052] Call trace: [ 329.148495][ T4052] dump_backtrace+0x0/0x43c [ 329.149180][ T4052] show_stack+0x2c/0x3c [ 329.149823][ T4052] __dump_stack+0x30/0x40 [ 329.150499][ T4052] dump_stack_lvl+0xf8/0x160 [ 329.151185][ T4052] dump_stack+0x1c/0x5c [ 329.151810][ T4052] sysfs_create_dir_ns+0x22c/0x24c [ 329.152526][ T4052] kobject_add_internal+0x590/0xc54 [ 329.153272][ T4052] kobject_add+0x134/0x1f8 [ 329.153904][ T4052] device_add+0x3f0/0xf94 [ 329.154514][ T4052] hci_conn_add_sysfs+0xbc/0x1cc [ 329.155247][ T4052] le_conn_complete_evt+0x9a4/0x11bc [ 329.155961][ T4052] hci_le_meta_evt+0x85c/0x3010 [ 329.156628][ T4052] hci_event_packet+0xd10/0x11bc [ 329.157342][ T4052] hci_rx_work+0x1cc/0x880 [ 329.158034][ T4052] process_one_work+0x79c/0x1140 [ 329.158825][ T4052] worker_thread+0x8f4/0x101c [ 329.159563][ T4052] kthread+0x374/0x454 [ 329.160179][ T4052] ret_from_fork+0x10/0x20 [ 329.160904][ T4052] kobject_add_internal failed for hci5:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 329.162798][ T4052] Bluetooth: hci5: failed to register connection device [ 329.164673][ T3624] Bluetooth: hci4: command 0x0406 tx timeout [ 329.167372][ T4052] Bluetooth: hci5: link tx timeout [ 329.168240][ T4052] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 329.169416][ T4052] Bluetooth: hci5: link tx timeout [ 329.170202][ T4052] Bluetooth: hci5: killing stalled connection 00:00:00:00:00:00 [ 329.171954][ T4052] Bluetooth: hci5: killing stalled connection 00:00:00:00:00:00 [ 329.173242][ T4052] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 329.258082][ T3624] libceph: connect (1)[c::]:6789 error -101 [ 329.259281][ T3624] libceph: mon0 (1)[c::]:6789 connect error [ 329.260435][ T3624] libceph: connect (1)[c::]:6789 error -101 [ 329.261484][ T3624] libceph: mon0 (1)[c::]:6789 connect error [ 329.525330][ T3624] libceph: connect (1)[c::]:6789 error -101 [ 329.530492][ T3624] libceph: mon0 (1)[c::]:6789 connect error [ 329.647138][ T3624] libceph: connect (1)[c::]:6789 error -101 [ 329.648171][ T3624] libceph: mon0 (1)[c::]:6789 connect error [ 329.694043][ T7989] ceph: No mds server is up or the cluster is laggy [ 330.197053][ T4052] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 330.198704][ T4052] CPU: 1 PID: 4052 Comm: kworker/u5:4 Not tainted 5.15.189-syzkaller #0 [ 330.200063][ T4052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 330.201596][ T4052] Workqueue: hci0 hci_rx_work [ 330.202330][ T4052] Call trace: [ 330.202860][ T4052] dump_backtrace+0x0/0x43c [ 330.203579][ T4052] show_stack+0x2c/0x3c [ 330.204276][ T4052] __dump_stack+0x30/0x40 [ 330.204963][ T4052] dump_stack_lvl+0xf8/0x160 [ 330.205610][ T4052] dump_stack+0x1c/0x5c [ 330.206197][ T4052] sysfs_create_dir_ns+0x22c/0x24c [ 330.207018][ T4052] kobject_add_internal+0x590/0xc54 [ 330.207840][ T4052] kobject_add+0x134/0x1f8 [ 330.208605][ T4052] device_add+0x3f0/0xf94 [ 330.209303][ T4052] hci_conn_add_sysfs+0xbc/0x1cc [ 330.210076][ T4052] le_conn_complete_evt+0x9a4/0x11bc [ 330.210919][ T4052] hci_le_meta_evt+0x85c/0x3010 [ 330.211715][ T4052] hci_event_packet+0xd10/0x11bc [ 330.211985][ T7975] ceph: No mds server is up or the cluster is laggy [ 330.212458][ T4052] hci_rx_work+0x1cc/0x880 [ 330.214262][ T4052] process_one_work+0x79c/0x1140 [ 330.214997][ T4052] worker_thread+0x8f4/0x101c [ 330.215641][ T4052] kthread+0x374/0x454 [ 330.216289][ T4052] ret_from_fork+0x10/0x20 [ 330.217946][ T4868] libceph: connect (1)[c::]:6789 error -101 [ 330.218893][ T4868] libceph: mon0 (1)[c::]:6789 connect error [ 330.220455][ T4052] kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 330.222961][ T4052] Bluetooth: hci0: failed to register connection device [ 330.320415][ T4868] libceph: connect (1)[c::]:6789 error -101 [ 330.321531][ T4868] libceph: mon0 (1)[c::]:6789 connect error [ 330.375381][ T8003] ceph: No mds server is up or the cluster is laggy [ 330.508832][ T4052] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 330.510298][ T4052] CPU: 1 PID: 4052 Comm: kworker/u5:4 Not tainted 5.15.189-syzkaller #0 [ 330.511468][ T4052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 330.512941][ T4052] Workqueue: hci4 hci_rx_work [ 330.513655][ T4052] Call trace: [ 330.514164][ T4052] dump_backtrace+0x0/0x43c [ 330.514875][ T4052] show_stack+0x2c/0x3c [ 330.515528][ T4052] __dump_stack+0x30/0x40 [ 330.516173][ T4052] dump_stack_lvl+0xf8/0x160 [ 330.516902][ T4052] dump_stack+0x1c/0x5c [ 330.517589][ T4052] sysfs_create_dir_ns+0x22c/0x24c [ 330.518460][ T4052] kobject_add_internal+0x590/0xc54 [ 330.519361][ T4052] kobject_add+0x134/0x1f8 [ 330.520067][ T4052] device_add+0x3f0/0xf94 [ 330.520757][ T4052] hci_conn_add_sysfs+0xbc/0x1cc [ 330.521585][ T4052] le_conn_complete_evt+0x9a4/0x11bc [ 330.522413][ T4052] hci_le_meta_evt+0x85c/0x3010 [ 330.523139][ T4052] hci_event_packet+0xd10/0x11bc [ 330.523853][ T4052] hci_rx_work+0x1cc/0x880 [ 330.524472][ T4052] process_one_work+0x79c/0x1140 [ 330.525244][ T4052] worker_thread+0x8f4/0x101c [ 330.525978][ T4052] kthread+0x374/0x454 [ 330.526631][ T4052] ret_from_fork+0x10/0x20 [ 330.531177][ T4052] kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 331.096542][ T4052] Bluetooth: hci4: failed to register connection device [ 331.104385][ T4052] Bluetooth: hci4: link tx timeout [ 331.105318][ T4052] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 331.428246][ T5518] Bluetooth: hci5: command 0x0406 tx timeout [ 331.498817][ T8023] tipc: Enabling of bearer rejected, failed to enable media [ 332.349733][ T3624] libceph: connect (1)[c::]:6789 error -101 [ 332.351908][ T3624] libceph: mon0 (1)[c::]:6789 connect error [ 332.465126][ T8026] ceph: No mds server is up or the cluster is laggy [ 333.460643][ T5136] Bluetooth: hci5: command 0x0406 tx timeout [ 335.152832][ T8102] tipc: Enabled bearer , priority 0 [ 335.197368][ T8102] device syzkaller0 entered promiscuous mode [ 335.212655][ T8102] tipc: Resetting bearer [ 335.217347][ T8096] tipc: Resetting bearer [ 335.220754][ T8096] tipc: Disabling bearer [ 335.603487][ T5136] Bluetooth: hci5: command 0x0406 tx timeout [ 338.658108][ T5136] Bluetooth: hci0: command 0x0406 tx timeout [ 338.705121][ T5136] libceph: connect (1)[c::]:6789 error -101 [ 338.706048][ T5136] libceph: mon0 (1)[c::]:6789 connect error [ 338.780521][ T3624] Bluetooth: hci4: command 0x0406 tx timeout [ 339.867842][ T8162] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:1) [ 339.916082][ T8144] ceph: No mds server is up or the cluster is laggy [ 339.958884][ T4052] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 339.960658][ T4052] CPU: 1 PID: 4052 Comm: kworker/u5:4 Not tainted 5.15.189-syzkaller #0 [ 339.961975][ T4052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 339.963418][ T4052] Workqueue: hci4 hci_rx_work [ 339.964155][ T4052] Call trace: [ 339.964677][ T4052] dump_backtrace+0x0/0x43c [ 339.965444][ T4052] show_stack+0x2c/0x3c [ 339.966104][ T4052] __dump_stack+0x30/0x40 [ 339.966829][ T4052] dump_stack_lvl+0xf8/0x160 [ 339.967589][ T4052] dump_stack+0x1c/0x5c [ 339.968272][ T4052] sysfs_create_dir_ns+0x22c/0x24c [ 339.969082][ T4052] kobject_add_internal+0x590/0xc54 [ 339.969898][ T4052] kobject_add+0x134/0x1f8 [ 339.970619][ T4052] device_add+0x3f0/0xf94 [ 339.971246][ T4052] hci_conn_add_sysfs+0xbc/0x1cc [ 339.971955][ T4052] le_conn_complete_evt+0x9a4/0x11bc [ 339.972790][ T4052] hci_le_meta_evt+0x85c/0x3010 [ 339.973537][ T4052] hci_event_packet+0xd10/0x11bc [ 339.974261][ T4052] hci_rx_work+0x1cc/0x880 [ 339.974927][ T4052] process_one_work+0x79c/0x1140 [ 339.975685][ T4052] worker_thread+0x8f4/0x101c [ 339.976372][ T4052] kthread+0x374/0x454 [ 339.976971][ T4052] ret_from_fork+0x10/0x20 [ 340.182218][ T5136] libceph: connect (1)[c::]:6789 error -101 [ 340.184389][ T4052] kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 340.186475][ T4052] Bluetooth: hci4: failed to register connection device [ 340.187640][ T4052] Bluetooth: hci4: link tx timeout [ 340.188420][ T4052] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 340.212031][ T5136] libceph: mon0 (1)[c::]:6789 connect error [ 340.319991][ T8170] device syzkaller0 entered promiscuous mode [ 344.645997][ T8215] tipc: Enabled bearer , priority 0 [ 344.647836][ T8215] device syzkaller0 entered promiscuous mode [ 344.661063][ T8215] tipc: Resetting bearer [ 344.663722][ T8210] tipc: Resetting bearer [ 344.672021][ T8210] tipc: Disabling bearer [ 344.861253][ T8224] overlayfs: missing 'lowerdir' [ 345.688096][ T4052] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 345.689640][ T4052] CPU: 0 PID: 4052 Comm: kworker/u5:4 Not tainted 5.15.189-syzkaller #0 [ 345.690894][ T4052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 345.692435][ T4052] Workqueue: hci4 hci_rx_work [ 345.693178][ T4052] Call trace: [ 345.693709][ T4052] dump_backtrace+0x0/0x43c [ 345.694424][ T4052] show_stack+0x2c/0x3c [ 345.695048][ T4052] __dump_stack+0x30/0x40 [ 345.695733][ T4052] dump_stack_lvl+0xf8/0x160 [ 345.696470][ T4052] dump_stack+0x1c/0x5c [ 345.697123][ T4052] sysfs_create_dir_ns+0x22c/0x24c [ 345.697915][ T4052] kobject_add_internal+0x590/0xc54 [ 345.698775][ T4052] kobject_add+0x134/0x1f8 [ 345.699498][ T4052] device_add+0x3f0/0xf94 [ 345.700199][ T4052] hci_conn_add_sysfs+0xbc/0x1cc [ 345.700949][ T4052] le_conn_complete_evt+0x9a4/0x11bc [ 345.701735][ T4052] hci_le_meta_evt+0x85c/0x3010 [ 345.702477][ T4052] hci_event_packet+0xd10/0x11bc [ 345.703277][ T4052] hci_rx_work+0x1cc/0x880 [ 345.703970][ T4052] process_one_work+0x79c/0x1140 [ 345.704709][ T4052] worker_thread+0x8f4/0x101c [ 345.705433][ T4052] kthread+0x374/0x454 [ 345.706081][ T4052] ret_from_fork+0x10/0x20 [ 345.709877][ T4052] kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 345.711865][ T4052] Bluetooth: hci4: failed to register connection device [ 345.852170][ T4052] Bluetooth: hci4: link tx timeout [ 345.853011][ T4052] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 349.655921][ T8285] tipc: Enabled bearer , priority 0 [ 349.659748][ T8285] device syzkaller0 entered promiscuous mode [ 349.685186][ T8285] tipc: Resetting bearer [ 349.697730][ T8283] tipc: Resetting bearer [ 349.701093][ T8283] tipc: Disabling bearer [ 350.522536][ T8301] tipc: Enabling of bearer rejected, failed to enable media [ 350.524681][ T8301] device syzkaller0 entered promiscuous mode [ 351.089319][ T3624] libceph: connect (1)[c::]:6789 error -101 [ 351.090834][ T3624] libceph: mon0 (1)[c::]:6789 connect error [ 351.094858][ T3624] libceph: connect (1)[c::]:6789 error -101 [ 351.096001][ T3624] libceph: mon0 (1)[c::]:6789 connect error [ 351.188874][ T8318] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:1) [ 351.977375][ T4057] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 351.978999][ T4057] CPU: 0 PID: 4057 Comm: kworker/u5:6 Not tainted 5.15.189-syzkaller #0 [ 351.980373][ T4057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 351.981981][ T4057] Workqueue: hci4 hci_rx_work [ 351.982738][ T4057] Call trace: [ 351.983230][ T4057] dump_backtrace+0x0/0x43c [ 351.983991][ T4057] show_stack+0x2c/0x3c [ 351.984633][ T4057] __dump_stack+0x30/0x40 [ 351.985273][ T4057] dump_stack_lvl+0xf8/0x160 [ 351.986023][ T4057] dump_stack+0x1c/0x5c [ 351.986699][ T4057] sysfs_create_dir_ns+0x22c/0x24c [ 351.987488][ T4057] kobject_add_internal+0x590/0xc54 [ 351.988313][ T4057] kobject_add+0x134/0x1f8 [ 351.988978][ T4057] device_add+0x3f0/0xf94 [ 351.989637][ T4057] hci_conn_add_sysfs+0xbc/0x1cc [ 351.990467][ T4057] le_conn_complete_evt+0x9a4/0x11bc [ 351.991354][ T4057] hci_le_meta_evt+0x85c/0x3010 [ 351.992137][ T4057] hci_event_packet+0xd10/0x11bc [ 351.992934][ T4057] hci_rx_work+0x1cc/0x880 [ 351.993628][ T4057] process_one_work+0x79c/0x1140 [ 351.994438][ T4057] worker_thread+0x8f4/0x101c [ 351.995191][ T4057] kthread+0x374/0x454 [ 351.995823][ T4057] ret_from_fork+0x10/0x20 [ 351.996594][ T4057] kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 351.998504][ T4057] Bluetooth: hci4: failed to register connection device [ 351.999992][ T4057] Bluetooth: hci4: link tx timeout [ 352.000755][ T4057] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 352.030128][ T8309] ceph: No mds server is up or the cluster is laggy [ 352.053094][ T3624] libceph: connect (1)[c::]:6789 error -101 [ 352.054333][ T3624] libceph: mon0 (1)[c::]:6789 connect error [ 352.056514][ T4868] Bluetooth: hci4: command 0x0406 tx timeout [ 353.333139][ T8335] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:1) [ 353.373974][ T8337] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 353.414642][ T8340] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:1) [ 353.562302][ T8350] tipc: Enabled bearer , priority 0 [ 353.564753][ T8350] device syzkaller0 entered promiscuous mode [ 353.589442][ T8350] tipc: Resetting bearer [ 353.618676][ T8348] tipc: Resetting bearer [ 353.621059][ T8348] tipc: Disabling bearer [ 354.258692][ T8362] overlayfs: missing 'lowerdir' [ 354.487747][ T8369] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:1) [ 355.031179][ T8374] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 356.192367][ T8383] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 357.471993][ T8395] tipc: Enabled bearer , priority 0 [ 357.474564][ T8395] device syzkaller0 entered promiscuous mode [ 357.484900][ T8395] tipc: Resetting bearer [ 357.491598][ T8394] tipc: Resetting bearer [ 357.497880][ T8394] tipc: Disabling bearer [ 357.604880][ T8406] overlayfs: missing 'lowerdir' [ 358.642168][ T8412] tipc: Enabled bearer , priority 0 [ 358.656423][ T8412] device syzkaller0 entered promiscuous mode [ 358.681479][ T8412] tipc: Resetting bearer [ 358.683601][ T8407] tipc: Resetting bearer [ 358.690447][ T8407] tipc: Disabling bearer [ 360.317203][ T8428] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:1) [ 361.376424][ T8431] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:1) [ 363.197246][ T8449] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:1) [ 366.604308][ T8483] tipc: Enabled bearer , priority 0 [ 366.605782][ T8483] device syzkaller0 entered promiscuous mode [ 366.616116][ T8483] tipc: Resetting bearer [ 366.619016][ T8482] tipc: Resetting bearer [ 366.622463][ T8482] tipc: Disabling bearer [ 368.691185][ T8498] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 370.868122][ T8536] loop6: detected capacity change from 0 to 256 [ 371.253757][ T13] libceph: connect (1)[c::]:6789 error -101 [ 371.254760][ T13] libceph: mon0 (1)[c::]:6789 connect error [ 371.321657][ T8539] ceph: No mds server is up or the cluster is laggy [ 371.360717][ T8549] tipc: Enabled bearer , priority 0 [ 371.374930][ T8549] device syzkaller0 entered promiscuous mode [ 371.794490][ T8549] tipc: Resetting bearer [ 371.798686][ T8548] tipc: Resetting bearer [ 371.802001][ T8548] tipc: Disabling bearer [ 372.788743][ T8566] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 375.342729][ T8598] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:1) [ 376.728629][ T8612] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 376.735429][ T8612] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 377.681052][ T8621] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1019'. [ 378.089972][ T8624] udc-core: couldn't find an available UDC or it's busy [ 378.099700][ T8624] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 382.893207][ T4052] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 382.895140][ T4052] CPU: 1 PID: 4052 Comm: kworker/u5:4 Not tainted 5.15.189-syzkaller #0 [ 382.896426][ T4052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 382.898074][ T4052] Workqueue: hci0 hci_rx_work [ 382.898818][ T4052] Call trace: [ 382.899378][ T4052] dump_backtrace+0x0/0x43c [ 382.900112][ T4052] show_stack+0x2c/0x3c [ 382.900777][ T4052] __dump_stack+0x30/0x40 [ 382.901429][ T4052] dump_stack_lvl+0xf8/0x160 [ 382.902143][ T4052] dump_stack+0x1c/0x5c [ 382.902786][ T4052] sysfs_create_dir_ns+0x22c/0x24c [ 382.903591][ T4052] kobject_add_internal+0x590/0xc54 [ 382.904370][ T4052] kobject_add+0x134/0x1f8 [ 382.905038][ T4052] device_add+0x3f0/0xf94 [ 382.905694][ T4052] hci_conn_add_sysfs+0xbc/0x1cc [ 382.906450][ T4052] le_conn_complete_evt+0x9a4/0x11bc [ 382.907251][ T4052] hci_le_meta_evt+0x85c/0x3010 [ 382.907946][ T4052] hci_event_packet+0xd10/0x11bc [ 382.908649][ T4052] hci_rx_work+0x1cc/0x880 [ 382.909320][ T4052] process_one_work+0x79c/0x1140 [ 382.910049][ T4052] worker_thread+0x8f4/0x101c [ 382.910702][ T4052] kthread+0x374/0x454 [ 382.911276][ T4052] ret_from_fork+0x10/0x20 [ 382.925262][ T4052] kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 382.927591][ T4052] Bluetooth: hci0: failed to register connection device [ 382.928722][ T4052] Bluetooth: hci0: link tx timeout [ 382.929658][ T4052] Bluetooth: hci0: killing stalled connection 10:aa:aa:aa:aa:aa [ 382.930839][ T4052] Bluetooth: hci0: link tx timeout [ 382.931524][ T4052] Bluetooth: hci0: killing stalled connection 00:00:00:00:00:00 [ 382.932727][ T4052] Bluetooth: hci0: killing stalled connection 00:00:00:00:00:00 [ 382.933926][ T4052] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 384.866750][ T2063] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.867820][ T2063] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.966379][ T4095] Bluetooth: hci0: command 0x0406 tx timeout [ 386.597528][ T8710] tipc: Enabled bearer , priority 0 [ 386.599149][ T8710] device syzkaller0 entered promiscuous mode [ 386.612962][ T8710] tipc: Resetting bearer [ 386.636727][ T8709] tipc: Resetting bearer [ 386.640025][ T8709] tipc: Disabling bearer [ 386.661873][ T8715] overlayfs: missing 'workdir' [ 387.514741][ T8724] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:1) [ 387.862676][ T4052] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 387.864201][ T4052] CPU: 0 PID: 4052 Comm: kworker/u5:4 Not tainted 5.15.189-syzkaller #0 [ 387.865507][ T4052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 387.867185][ T4052] Workqueue: hci0 hci_rx_work [ 387.867935][ T4052] Call trace: [ 387.868426][ T4052] dump_backtrace+0x0/0x43c [ 387.869174][ T4052] show_stack+0x2c/0x3c [ 387.869829][ T4052] __dump_stack+0x30/0x40 [ 387.870499][ T4052] dump_stack_lvl+0xf8/0x160 [ 387.871219][ T4052] dump_stack+0x1c/0x5c [ 387.871907][ T4052] sysfs_create_dir_ns+0x22c/0x24c [ 387.872754][ T4052] kobject_add_internal+0x590/0xc54 [ 387.873574][ T4052] kobject_add+0x134/0x1f8 [ 387.874309][ T4052] device_add+0x3f0/0xf94 [ 387.875012][ T4052] hci_conn_add_sysfs+0xbc/0x1cc [ 387.875797][ T4052] le_conn_complete_evt+0x9a4/0x11bc [ 387.876654][ T4052] hci_le_meta_evt+0x85c/0x3010 [ 387.877507][ T4052] hci_event_packet+0xd10/0x11bc [ 387.878332][ T4052] hci_rx_work+0x1cc/0x880 [ 387.879037][ T4052] process_one_work+0x79c/0x1140 [ 387.879889][ T4052] worker_thread+0x8f4/0x101c [ 387.880595][ T4052] kthread+0x374/0x454 [ 387.881182][ T4052] ret_from_fork+0x10/0x20 [ 387.883639][ T4052] kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 387.885896][ T4052] Bluetooth: hci0: failed to register connection device [ 387.889693][ T4052] Bluetooth: hci0: link tx timeout [ 387.890792][ T4052] Bluetooth: hci0: killing stalled connection 10:aa:aa:aa:aa:aa [ 387.892037][ T4052] Bluetooth: hci0: link tx timeout [ 387.892832][ T4052] Bluetooth: hci0: killing stalled connection 00:00:00:00:00:00 [ 387.894234][ T4052] Bluetooth: hci0: killing stalled connection 00:00:00:00:00:00 [ 387.895489][ T4052] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 388.211612][ T8728] udc-core: couldn't find an available UDC or it's busy [ 388.212850][ T8728] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 389.760189][ T8757] overlayfs: missing 'workdir' [ 389.760546][ T8755] udc-core: couldn't find an available UDC or it's busy [ 389.762193][ T8755] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 390.011108][ T8763] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 390.839059][ T4052] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 390.841898][ T4052] CPU: 0 PID: 4052 Comm: kworker/u5:4 Not tainted 5.15.189-syzkaller #0 [ 390.843233][ T4052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 390.844748][ T4052] Workqueue: hci1 hci_rx_work [ 390.845464][ T4052] Call trace: [ 390.845970][ T4052] dump_backtrace+0x0/0x43c [ 390.846587][ T4052] show_stack+0x2c/0x3c [ 390.847155][ T4052] __dump_stack+0x30/0x40 [ 390.847895][ T4052] dump_stack_lvl+0xf8/0x160 [ 390.848636][ T4052] dump_stack+0x1c/0x5c [ 390.849296][ T4052] sysfs_create_dir_ns+0x22c/0x24c [ 390.850142][ T4052] kobject_add_internal+0x590/0xc54 [ 390.850945][ T4052] kobject_add+0x134/0x1f8 [ 390.851616][ T4052] device_add+0x3f0/0xf94 [ 390.852273][ T4052] hci_conn_add_sysfs+0xbc/0x1cc [ 390.853147][ T4052] le_conn_complete_evt+0x9a4/0x11bc [ 390.854035][ T4052] hci_le_meta_evt+0x85c/0x3010 [ 390.854784][ T4052] hci_event_packet+0xd10/0x11bc [ 390.855559][ T4052] hci_rx_work+0x1cc/0x880 [ 390.856270][ T4052] process_one_work+0x79c/0x1140 [ 390.857031][ T4052] worker_thread+0x8f4/0x101c [ 390.857794][ T4052] kthread+0x374/0x454 [ 390.858443][ T4052] ret_from_fork+0x10/0x20 [ 390.864228][ T4052] kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 390.868796][ T4052] Bluetooth: hci1: failed to register connection device [ 392.119477][ T4052] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 392.122342][ T4052] CPU: 0 PID: 4052 Comm: kworker/u5:4 Not tainted 5.15.189-syzkaller #0 [ 392.123686][ T4052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 392.125364][ T4052] Workqueue: hci0 hci_rx_work [ 392.126143][ T4052] Call trace: [ 392.126684][ T4052] dump_backtrace+0x0/0x43c [ 392.127424][ T4052] show_stack+0x2c/0x3c [ 392.128123][ T4052] __dump_stack+0x30/0x40 [ 392.128858][ T4052] dump_stack_lvl+0xf8/0x160 [ 392.129651][ T4052] dump_stack+0x1c/0x5c [ 392.130322][ T4052] sysfs_create_dir_ns+0x22c/0x24c [ 392.131142][ T4052] kobject_add_internal+0x590/0xc54 [ 392.131889][ T4052] kobject_add+0x134/0x1f8 [ 392.132572][ T4052] device_add+0x3f0/0xf94 [ 392.133198][ T4052] hci_conn_add_sysfs+0xbc/0x1cc [ 392.133905][ T4052] le_conn_complete_evt+0x9a4/0x11bc [ 392.134682][ T4052] hci_le_meta_evt+0x85c/0x3010 [ 392.135418][ T4052] hci_event_packet+0xd10/0x11bc [ 392.136148][ T4052] hci_rx_work+0x1cc/0x880 [ 392.136795][ T4052] process_one_work+0x79c/0x1140 [ 392.137577][ T4052] worker_thread+0x8f4/0x101c [ 392.138309][ T4052] kthread+0x374/0x454 [ 392.138905][ T4052] ret_from_fork+0x10/0x20 [ 392.140927][ T4052] kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 392.165362][ T4052] Bluetooth: hci0: failed to register connection device [ 392.626045][ T4052] ================================================================== [ 392.627434][ T4052] BUG: KASAN: use-after-free in l2cap_sock_new_connection_cb+0x224/0x304 [ 392.628805][ T4052] Read of size 8 at addr ffff0000f0ef2548 by task kworker/u5:4/4052 [ 392.630150][ T4052] [ 392.630513][ T4052] CPU: 1 PID: 4052 Comm: kworker/u5:4 Not tainted 5.15.189-syzkaller #0 [ 392.631838][ T4052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 392.633396][ T4052] Workqueue: hci0 hci_rx_work [ 392.634202][ T4052] Call trace: [ 392.634717][ T4052] dump_backtrace+0x0/0x43c [ 392.635474][ T4052] show_stack+0x2c/0x3c [ 392.636213][ T4052] __dump_stack+0x30/0x40 [ 392.636915][ T4052] dump_stack_lvl+0xf8/0x160 [ 392.637665][ T4052] print_address_description+0x78/0x30c [ 392.638576][ T4052] kasan_report+0xec/0x15c [ 392.639262][ T4052] __asan_report_load8_noabort+0x44/0x50 [ 392.640094][ T4052] l2cap_sock_new_connection_cb+0x224/0x304 [ 392.640944][ T4052] l2cap_connect_cfm+0x2d4/0xd64 [ 392.641753][ T4052] le_conn_complete_evt+0xa7c/0x11bc [ 392.642530][ T4052] hci_le_meta_evt+0x85c/0x3010 [ 392.643276][ T4052] hci_event_packet+0xd10/0x11bc [ 392.644012][ T4052] hci_rx_work+0x1cc/0x880 [ 392.644715][ T4052] process_one_work+0x79c/0x1140 [ 392.645500][ T4052] worker_thread+0x8f4/0x101c [ 392.646255][ T4052] kthread+0x374/0x454 [ 392.646893][ T4052] ret_from_fork+0x10/0x20 [ 392.647570][ T4052] [ 392.647928][ T4052] Allocated by task 4052: [ 392.648606][ T4052] __kasan_kmalloc+0xb0/0xf0 [ 392.649357][ T4052] __kmalloc+0x298/0x44c [ 392.650015][ T4052] sk_prot_alloc+0xc4/0x1f0 [ 392.650686][ T4052] sk_alloc+0x40/0x388 [ 392.651361][ T4052] l2cap_sock_new_connection_cb+0xe0/0x304 [ 392.652226][ T4052] l2cap_connect_cfm+0x2d4/0xd64 [ 392.652976][ T4052] le_conn_complete_evt+0xa7c/0x11bc [ 392.653759][ T4052] hci_le_meta_evt+0x85c/0x3010 [ 392.654525][ T4052] hci_event_packet+0xd10/0x11bc [ 392.655280][ T4052] hci_rx_work+0x1cc/0x880 [ 392.655976][ T4052] process_one_work+0x79c/0x1140 [ 392.656775][ T4052] worker_thread+0x8f4/0x101c [ 392.657519][ T4052] kthread+0x374/0x454 [ 392.658154][ T4052] ret_from_fork+0x10/0x20 [ 392.658830][ T4052] [ 392.659175][ T4052] Freed by task 8793: [ 392.659760][ T4052] kasan_set_track+0x4c/0x84 [ 392.660445][ T4052] kasan_set_free_info+0x28/0x4c [ 392.661165][ T4052] ____kasan_slab_free+0x118/0x164 [ 392.661903][ T4052] __kasan_slab_free+0x18/0x28 [ 392.662601][ T4052] slab_free_freelist_hook+0x128/0x1e8 [ 392.663455][ T4052] kfree+0x170/0x40c [ 392.664046][ T4052] __sk_destruct+0x41c/0x604 [ 392.664751][ T4052] __sk_free+0x320/0x430 [ 392.665423][ T4052] sk_free+0x68/0xdc [ 392.666031][ T4052] l2cap_sock_kill+0x114/0x228 [ 392.666753][ T4052] l2cap_sock_cleanup_listen+0xf4/0x28c [ 392.667621][ T4052] l2cap_sock_release+0x5c/0x1ac [ 392.668418][ T4052] sock_close+0xb4/0x1f8 [ 392.669064][ T4052] __fput+0x1c0/0x7f8 [ 392.669677][ T4052] ____fput+0x20/0x30 [ 392.670244][ T4052] task_work_run+0x12c/0x1e0 [ 392.670992][ T4052] get_signal+0x1240/0x1340 [ 392.671721][ T4052] do_notify_resume+0x35c/0x3128 [ 392.672516][ T4052] el0_svc+0xf0/0x1e0 [ 392.673153][ T4052] el0t_64_sync_handler+0xcc/0xe4 [ 392.673893][ T4052] el0t_64_sync+0x1a0/0x1a4 [ 392.674601][ T4052] [ 392.674915][ T4052] Last potentially related work creation: [ 392.675868][ T4052] kasan_save_stack+0x38/0x68 [ 392.676696][ T4052] kasan_record_aux_stack+0xcc/0x114 [ 392.677593][ T4052] kvfree_call_rcu+0xb8/0x66c [ 392.678381][ T4052] drop_sysctl_table+0x274/0x39c [ 392.679194][ T4052] unregister_sysctl_table+0x94/0x134 [ 392.679980][ T4052] unregister_net_sysctl_table+0x20/0x30 [ 392.680824][ T4052] addrconf_ifdown+0x12fc/0x1688 [ 392.681542][ T4052] addrconf_notify+0x2f4/0xc6c [ 392.682320][ T4052] raw_notifier_call_chain+0xd4/0x164 [ 392.683144][ T4052] unregister_netdevice_many+0xe10/0x17d0 [ 392.684046][ T4052] ip6gre_exit_batch_net+0x418/0x468 [ 392.684847][ T4052] cleanup_net+0x644/0xa98 [ 392.685535][ T4052] process_one_work+0x79c/0x1140 [ 392.686304][ T4052] worker_thread+0x8f4/0x101c [ 392.687045][ T4052] kthread+0x374/0x454 [ 392.687677][ T4052] ret_from_fork+0x10/0x20 [ 392.688394][ T4052] [ 392.688740][ T4052] The buggy address belongs to the object at ffff0000f0ef2000 [ 392.688740][ T4052] which belongs to the cache kmalloc-2k of size 2048 [ 392.691054][ T4052] The buggy address is located 1352 bytes inside of [ 392.691054][ T4052] 2048-byte region [ffff0000f0ef2000, ffff0000f0ef2800) [ 392.693202][ T4052] The buggy address belongs to the page: [ 392.694100][ T4052] page:00000000c6803c8b refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x130ef0 [ 392.695712][ T4052] head:00000000c6803c8b order:3 compound_mapcount:0 compound_pincount:0 [ 392.697120][ T4052] flags: 0x5ffc00000010200(slab|head|node=0|zone=2|lastcpupid=0x7ff) [ 392.698527][ T4052] raw: 05ffc00000010200 fffffc00039cf000 0000000200000002 ffff0000c0002900 [ 392.699909][ T4052] raw: 0000000000000000 0000000080080008 00000001ffffffff 0000000000000000 [ 392.701307][ T4052] page dumped because: kasan: bad access detected [ 392.702356][ T4052] [ 392.702739][ T4052] Memory state around the buggy address: [ 392.703616][ T4052] ffff0000f0ef2400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 392.704936][ T4052] ffff0000f0ef2480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 392.706237][ T4052] >ffff0000f0ef2500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 392.707498][ T4052] ^ [ 392.708512][ T4052] ffff0000f0ef2580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 392.709667][ T4052] ffff0000f0ef2600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 392.710840][ T4052] ================================================================== [ 392.711998][ T4052] Disabling lock debugging due to kernel taint [ 392.918394][ T4052] ------------[ cut here ]------------ [ 392.919479][ T4052] refcount_t: addition on 0; use-after-free. [ 392.920581][ T4052] WARNING: CPU: 0 PID: 4052 at lib/refcount.c:25 refcount_warn_saturate+0x134/0x1f8 [ 392.922055][ T4052] Modules linked in: [ 392.922682][ T4052] CPU: 0 PID: 4052 Comm: kworker/u5:4 Tainted: G B 5.15.189-syzkaller #0 [ 392.924261][ T4052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 392.925788][ T4052] Workqueue: hci0 hci_rx_work [ 392.926526][ T4052] pstate: 62400005 (nZCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 392.927788][ T4052] pc : refcount_warn_saturate+0x134/0x1f8 [ 392.928687][ T4052] lr : refcount_warn_saturate+0x134/0x1f8 [ 392.929541][ T4052] sp : ffff80001f0e7480 [ 392.930186][ T4052] x29: ffff80001f0e7480 x28: dfff800000000000 x27: 0000000000000000 [ 392.931355][ T4052] x26: 1fffe0001e1de207 x25: 1fffe0001a317600 x24: dfff800000000000 [ 392.932530][ T4052] x23: ffff0000d4774021 x22: 00000000ffffffff x21: ffff0000f0ef103f [ 392.933732][ T4052] x20: ffff0000f0ef1018 x19: ffff8000165b2000 x18: 0000000000000002 [ 392.934924][ T4052] x17: 0000000040000000 x16: ffff8000082d6448 x15: 0000000000000002 [ 392.936079][ T4052] x14: 0000000000ff0100 x13: ffffffffffffffff x12: 0000000000ff0100 [ 392.937314][ T4052] x11: 0000000000000000 x10: 0000000000000000 x9 : f0a5d96b902b4500 [ 392.938559][ T4052] x8 : f0a5d96b902b4500 x7 : 0000000000000000 x6 : ffff80000824599c [ 392.939742][ T4052] x5 : 0000000000000000 x4 : 0000000000000000 x3 : 0000000000000010 [ 392.940903][ T4052] x2 : 0000000000000008 x1 : 0000000100000000 x0 : 000000000000002a [ 392.942071][ T4052] Call trace: [ 392.942553][ T4052] refcount_warn_saturate+0x134/0x1f8 [ 392.943349][ T4052] l2cap_chan_hold+0xa4/0x13c [ 392.944050][ T4052] __l2cap_chan_add+0x278/0x6e4 [ 392.944844][ T4052] l2cap_connect_cfm+0x380/0xd64 [ 392.945618][ T4052] le_conn_complete_evt+0xa7c/0x11bc [ 392.946412][ T4052] hci_le_meta_evt+0x85c/0x3010 [ 392.947212][ T4052] hci_event_packet+0xd10/0x11bc [ 392.948003][ T4052] hci_rx_work+0x1cc/0x880 [ 392.948719][ T4052] process_one_work+0x79c/0x1140 [ 392.949523][ T4052] worker_thread+0x8f4/0x101c [ 392.950256][ T4052] kthread+0x374/0x454 [ 392.950837][ T4052] ret_from_fork+0x10/0x20 [ 392.951522][ T4052] irq event stamp: 9500 [ 392.952132][ T4052] hardirqs last enabled at (9499): [] finish_lock_switch+0xb0/0x1c4 [ 392.953520][ T4052] hardirqs last disabled at (9500): [] _raw_spin_lock_irqsave+0xfc/0x14c [ 392.955011][ T4052] softirqs last enabled at (9496): [] release_sock+0x1d0/0x258 [ 392.956348][ T4052] softirqs last disabled at (9492): [] release_sock+0x34/0x258 [ 392.957688][ T4052] ---[ end trace af1af01d84610be4 ]--- [ 392.958792][ T4052] Unable to handle kernel paging request at virtual address dfff800000000011 [ 392.960050][ T4052] Mem abort info: [ 392.960568][ T4052] ESR = 0x0000000096000006 [ 392.961232][ T4052] EC = 0x25: DABT (current EL), IL = 32 bits [ 392.962114][ T4052] SET = 0, FnV = 0 [ 392.962674][ T4052] EA = 0, S1PTW = 0 [ 392.963331][ T4052] FSC = 0x06: level 2 translation fault [ 392.964241][ T4052] Data abort info: [ 392.964825][ T4052] ISV = 0, ISS = 0x00000006 [ 392.965552][ T4052] CM = 0, WnR = 0 [ 392.966184][ T4052] [dfff800000000011] address between user and kernel address ranges [ 392.967353][ T4052] Internal error: Oops: 0000000096000006 [#1] PREEMPT SMP [ 392.968460][ T4052] Modules linked in: [ 392.969081][ T4052] CPU: 0 PID: 4052 Comm: kworker/u5:4 Tainted: G B W 5.15.189-syzkaller #0 [ 392.970538][ T4052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 392.972027][ T4052] Workqueue: hci0 hci_rx_work [ 392.972673][ T4052] pstate: 62400005 (nZCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 392.973773][ T4052] pc : do_raw_spin_lock+0x80/0x2f0 [ 392.974511][ T4052] lr : _raw_spin_lock_bh+0x11c/0x1b4 [ 392.975305][ T4052] sp : ffff80001f0e7240 [ 392.975865][ T4052] x29: ffff80001f0e72d0 x28: 1fffe0001e1de206 x27: dfff800000000000 [ 392.976982][ T4052] x26: ffff700003e1ce84 x25: 1fffe0001e1de200 x24: dfff800000000000 [ 392.978211][ T4052] x23: dfff800000000000 x22: 1ffff00003e1ce4c x21: ffff8000167a8000 [ 392.979455][ T4052] x20: 000000000000008c x19: 0000000000000088 x18: 0000000000000002 [ 392.980615][ T4052] x17: 0000000040000000 x16: ffff8000082d5f6c x15: 0000000000000002 [ 392.981739][ T4052] x14: 0000000000ff0100 x13: ffffffffffffffff x12: 0000000000ff0100 [ 392.982893][ T4052] x11: ffff80001f0e7260 x10: ffff800013a7cc50 x9 : f3f3f304f1f1f1f1 [ 392.984092][ T4052] x8 : 0000000000000011 x7 : 0000000000000000 x6 : ffff80000f69f014 [ 392.985336][ T4052] x5 : 0000000000000000 x4 : 0000000000000001 x3 : 0000000000000000 [ 392.986500][ T4052] x2 : 0000000000000000 x1 : ffff8000117c8460 x0 : 0000000000000088 [ 392.987673][ T4052] Call trace: [ 392.988153][ T4052] do_raw_spin_lock+0x80/0x2f0 [ 392.988945][ T4052] _raw_spin_lock_bh+0x11c/0x1b4 [ 392.989728][ T4052] lock_sock_nested+0xf4/0x1d4 [ 392.990529][ T4052] l2cap_sock_ready_cb+0x4c/0x130 [ 392.991383][ T4052] l2cap_le_start+0x56c/0x131c [ 392.992130][ T4052] l2cap_connect_cfm+0x578/0xd64 [ 392.992963][ T4052] le_conn_complete_evt+0xa7c/0x11bc [ 392.993802][ T4052] hci_le_meta_evt+0x85c/0x3010 [ 392.994606][ T4052] hci_event_packet+0xd10/0x11bc [ 392.995407][ T4052] hci_rx_work+0x1cc/0x880 [ 392.996105][ T4052] process_one_work+0x79c/0x1140 [ 392.996848][ T4052] worker_thread+0x8f4/0x101c [ 392.997580][ T4052] kthread+0x374/0x454 [ 392.998218][ T4052] ret_from_fork+0x10/0x20 [ 392.998925][ T4052] Code: f2de6089 aa0003f3 f2fe7e69 f8376ac9 (38f76908) [ 393.000049][ T4052] ---[ end trace af1af01d84610be5 ]--- [ 393.267455][ T4052] Kernel panic - not syncing: Oops: Fatal exception in interrupt [ 393.268730][ T4052] SMP: stopping secondary CPUs [ 393.269537][ T4052] Kernel Offset: disabled [ 393.270231][ T4052] CPU features: 0x8,000003c1,7d33ffd9 [ 393.271039][ T4052] Memory Limit: none [ 393.542512][ T4052] Rebooting in 86400 seconds..