last executing test programs: 6m24.491221039s ago: executing program 3 (id=3827): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x108) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x81c0, 0x8103) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x2, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r3}, &(0x7f0000000000), &(0x7f0000000200)=r4}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sched_switch\x00', r4}, 0x18) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffff05850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r5}, 0x10) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) r6 = socket(0x10, 0x3, 0x9) syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000240)) sendmsg$NFT_BATCH(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000013c0)=ANY=[@ANYBLOB="14000000f4f5a40c7b3653fc770000000000070000000000000000e8ffffffffffffff0000000000"], 0x28}, 0x1, 0x0, 0x0, 0x20064841}, 0x40000) unshare(0x46000200) 6m22.33191353s ago: executing program 3 (id=3828): bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(ecb-aes-aesni)\x00'}, 0x58) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-384\x00'}, 0x58) sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000002c0)=ANY=[], 0x20}}, 0x4040000) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB], 0x6f4}}, 0x0) 6m21.41223211s ago: executing program 3 (id=3831): socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a0"], 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000240001"], 0x1c}}, 0x8004) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_procfs(0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r5) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='timerslack_ns\x00') ioctl$VHOST_SET_OWNER(r6, 0xaf01, 0x0) read$msr(r6, &(0x7f0000002140)=""/207, 0xbd) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x30, r7, 0x65aebf9dafbebb59, 0x70bd28, 0x1, {{}, {@val={0x8, 0x12b, 0xffffffff}, @val={0x8}, @val={0xc, 0x99, {0x6, 0x13}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x400c080}, 0x24048840) 6m15.684203925s ago: executing program 3 (id=3840): r0 = getpgid(0x0) r1 = syz_pidfd_open(r0, 0x0) r2 = pidfd_getfd(r1, r1, 0x0) setns(r2, 0x66020000) mount$9p_fd(0x0, &(0x7f0000000980)='.\x00', 0x0, 0x104000, 0x0) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) r3 = getpid() sched_setscheduler(r3, 0x2, 0x0) ioctl$IOMMU_DESTROY$ioas(r2, 0x3b80, &(0x7f0000000100)={0x8}) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x1000002, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) umount2(&(0x7f0000000040)='.\x00', 0x2) 6m12.916916518s ago: executing program 3 (id=3848): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) getpriority(0x2, r1) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB, @ANYRES32=0x1, @ANYRESOCT=r1, @ANYRES32=0x0, @ANYRESOCT=r3, @ANYBLOB="0400000001000000000000000200"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0xc, &(0x7f00000009c0)=ANY=[@ANYBLOB="f68c6446d8622b31ce8233b272a28f3fc8c46bccfde821b32b053aae3cd112a24ed21377f0d357c34663149d7a66eabedc3c0dc00cbf0e1736610fde8f5323e83a53cd92a1fffe9c5680adf1dd8f1bf90d2b585b14f88fadfac888c758d60ccd48edc60bd97bc4b9fdebd1d0bbc3eaac71b62e1c31ccf8b6319479e4b1f3108294c875659fbb08ddd3d946a4a3a6df616c0d05e1eca6560b9b06649431def09928355c82fb1f05f2c2ad3df2f06093895f", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000680)={{r4}, &(0x7f0000000600), 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000001f80)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FLAGS={0x6, 0x8, 0x3f}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @loopback}]}}}]}, 0x40}}, 0x4048084) 6m11.084123056s ago: executing program 3 (id=3850): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(r0, 0xd, 0x0, &(0x7f0000000100)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x11, 0x80a, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@getnetconf={0x14, 0x52, 0x4, 0x70bd29, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x91}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYRESHEX=0x0, @ANYRESOCT=r5], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB], 0xa8}}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="780000001000010400"/20, @ANYRES32=r6, @ANYBLOB="60300300001400005800128009000100626f6e6400000000480002802c0008"], 0x78}, 0x1, 0x0, 0x0, 0x4000}, 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) socket$packet(0x11, 0x2, 0x300) 5m54.936319721s ago: executing program 32 (id=3850): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(r0, 0xd, 0x0, &(0x7f0000000100)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x11, 0x80a, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@getnetconf={0x14, 0x52, 0x4, 0x70bd29, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x91}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYRESHEX=0x0, @ANYRESOCT=r5], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB], 0xa8}}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="780000001000010400"/20, @ANYRES32=r6, @ANYBLOB="60300300001400005800128009000100626f6e6400000000480002802c0008"], 0x78}, 0x1, 0x0, 0x0, 0x4000}, 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) socket$packet(0x11, 0x2, 0x300) 8.744188513s ago: executing program 1 (id=5089): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000016c0)=ANY=[@ANYBLOB="b4050000000000006110880000000000008ee7a62e915782d326a57237a682ba964a53d511dc1483226339d7f497f5a31edf762feb4cca3b79d72b6bffffe7f91715da03dad4db583966edebee535b2fe95009ebbdce28f51bed01d3d9486f741ac6ae430109a9ab53e0fb50dcae2d0dc0ccf242f3545e320ceb0ced945803acd8a795ba0c586237d6b8222dc7ef8c3034f0e7c3e8b47eb8b69725acbf4aaab9fd5df6007a6713d701"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc9, &(0x7f0000001480)=""/201, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x4}, 0x94) syz_mount_image$xfs(&(0x7f0000000100), &(0x7f0000000400)='./file1\x00', 0x4004000, &(0x7f0000001880)={[{@logbufs={'logbufs', 0x3d, 0x8}}, {@nodiscard}, {@nouuid}, {@noalign}, {@prjquota}, {@gquota}, {@dax}, {@usrquota}, {@gqnoenforce}, {}], [{@uid_lt}]}, 0x1, 0x9796, &(0x7f0000020fc0)="$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") r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000000c0)={0x0, 0x747, 0x3, 0x4, 0xfb, 0x8, 0x101}, 0xc) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) r2 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x29, 0x17, 0x0, 0x1300) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB="88020000", @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="6102330050300100080211000001080211000000505050505050"], 0x288}, 0x1, 0x0, 0x0, 0x800}, 0x0) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001640), 0x200442, 0x0) ioctl$SNDCTL_SEQ_THRESHOLD(r4, 0x4004510d, &(0x7f0000001680)=0x8) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$igmp(0x2, 0x3, 0x2) epoll_create(0x1) ioctl$SIOCGETSGCNT_IN6(r7, 0x89e1, &(0x7f0000000340)={@empty, @loopback}) r8 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000001580)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r8, 0x83, 0x10, &(0x7f0000001600)=@ready={0x0, 0x0, 0x8, "fb15abc8", {0x1, 0x540, 0x76a2, 0x0, 0x4}}) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), r9) r11 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r11, 0x6, 0x16, &(0x7f00000016c0), 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="61123000000000006113100000000000bf2020000000000016000200071b48013f030100000000009500000000000000bc26000000000000bf67000000000000070200000fff07006702000003000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000001780), 0x2, 0x0) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r9, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)={0x14, r10, 0x72b}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) r12 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r12, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000480)=""/4087, 0xff7}], 0x1, 0x0, 0x0, 0x804}, 0x8800) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000000203050000000000000000010000000000000015c7000000"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="24000000020301fd0000000000000001000000002495c1a926d58fa32d3349c1f8908345be82dfd12986ed1e9ea2998284d0ab721b80e36cbbd3e137db17b91e61191427ac12640668e7813dd7acd31f90dae6e81063c1a63860a050462644d83d665bf5ca842ae32462a1f555565fd297f5a38b09a27c3b6c974cc4fdc642f72236671a29cbfc107b739e14a036401289bc8b3d86d84a824042bb1a727346aac4edaa44692b23eaa9b6208f35cf8af981feb363010e2efd27abec5d77"], 0x24}}, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080), &(0x7f0000000880)=ANY=[], 0xbfe, 0x0) 7.010052183s ago: executing program 4 (id=5094): socket$inet6_sctp(0xa, 0x1, 0x84) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) syz_emit_ethernet(0x4a, &(0x7f0000000740)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd608a37f200142c00fe8000000000000000000000000000bb9db64dd98703bae37bf41cb668fe8000000000000000000000000000aa000300006c9a74e8b29d790c8fc98eabcc3dc524f916df53655d73562bed239f6fe4a717970acab62f746b0c0cb56c7985b27c6277cdde139cc1469dbc38135807f0887795d6122c239b19d0079023ab327dad01cf7813654f8e3815144960d69cabdbc15cef02fb1846f86723caeb70b8688160e6fd5d3682d7f98fbf56f94fa3c8045d258529537f51809982f026fc5e92c93975b9e8853913a112b86b6d2469af81cce2b68bb35e8a96d7e153b79c2de2c487d9824b3ae22cb3f5f590e8f40ce6581134", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000240), 0x5c, 0x8011) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095fdb2959c152186bc9121fda519db2d8acea6662d34df2160cd5906f00181e3465a8100f0bd45e233468becc81f779330a1425c46b4eed2bb9c8f9d10"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000240), 0x0, 0x10002, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000000)=0x6) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000002f40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40001}, 0x4000000) listen(r4, 0x0) r5 = signalfd4(0xffffffffffffffff, &(0x7f00000000c0), 0x8, 0x0) setgroups(0x0, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xee00]) setregid(0x0, r6) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffffffb}]}) linkat(r7, &(0x7f0000000040)='\x00', 0xffffffffffffff9c, 0x0, 0x1000) faccessat2(r5, &(0x7f0000001400)='\x00', 0x0, 0x1100) 6.893000629s ago: executing program 2 (id=5095): prctl$PR_PAC_RESET_KEYS(0x36, 0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x548, 0x0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x478, 0xffffffff, 0xffffffff, 0x478, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x0, 0x24, 0x1, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @private2, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xff, 0xffffffff, 0xff000000], 'netpci0\x00', 'ipvlan0\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x1f, 0x1, 0x1, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a8) 6.596183769s ago: executing program 2 (id=5098): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, 0x0, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_SPEED(r6, 0xc0045002, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_CHANNELS(r6, 0xc0045006, 0x0) ioctl$SNDCTL_DSP_SETFMT(r6, 0xc0045005, &(0x7f0000000640)=0x10) close(r6) 6.507798971s ago: executing program 5 (id=5100): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000580)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r3, @ANYBLOB="000024000000000024001200140001006272696467655f736c617665800000000c000500080005"], 0x3}, 0x1, 0x0, 0x0, 0x8001}, 0x0) r4 = dup(r2) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) r6 = getpgrp(0x0) r7 = syz_clone(0x16040000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r7, 0x0) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f0000000400)=0x0) r9 = getpid() sched_setscheduler(r9, 0x1, &(0x7f0000000200)=0x7) r10 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) ioctl$CEC_S_MODE(0xffffffffffffffff, 0x40046109, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=ANY=[@ANYBLOB="142500000000000000000000000000000000000a20000000080a01000000350700000000020000030900010073797a3000000000140000001100010000000000000000000000000a"], 0x48}}, 0x48094) ptrace(0x4206, r10) waitid(0x1, r10, 0x0, 0x8, 0x0) r12 = getpid() r13 = getpid() ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000440)=0x0) syz_clone3(&(0x7f0000000500)={0x80, &(0x7f0000000040), &(0x7f0000000140), &(0x7f0000000200), {0x6}, &(0x7f0000000240)=""/150, 0x96, &(0x7f0000000300)=""/75, &(0x7f0000000480)=[r6, r7, r8, 0x0, r9, r10, r12, r13, r14], 0x9, {r0}}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be7d6a14fc29", 0xb) 5.944752003s ago: executing program 4 (id=5102): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) chroot(0x0) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04436978ef0f834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200008c0) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x3f, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) fstat(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000340)=0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000380)={{0x3, 0xee01, 0x0, r3, 0x0, 0x189, 0xa}, 0x0, 0x0, 0xfffffffffffffffd, 0x5, 0x6ced, 0x1, 0xef9, 0xffff, 0xe, 0x2, r4}) close(r2) 5.56372193s ago: executing program 2 (id=5103): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) chroot(0x0) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04436978ef0f834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200008c0) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x3f, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) (fail_nth: 1) fstat(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000340)=0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000380)={{0x3, 0xee01, 0x0, r3, 0x0, 0x189, 0xa}, 0x0, 0x0, 0xfffffffffffffffd, 0x5, 0x6ced, 0x1, 0xef9, 0xffff, 0xe, 0x2, r4}) close(r2) 5.547473117s ago: executing program 5 (id=5104): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_io_uring_setup(0x1370, &(0x7f00000000c0)={0x0, 0x49fa, 0x10, 0x0, 0x4e}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x6) openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120101025b0e8c10ef170c729051010203010902120001000000e708"], 0x0) 4.629669354s ago: executing program 1 (id=5106): syz_mount_image$nilfs2(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x1080c, &(0x7f0000000440)=ANY=[@ANYRES64=0x0, @ANYRES8=0x0, @ANYRES8, @ANYBLOB="d1794da8c0ccda034276e28a25c45c8e1eb8b595a37ffdfe7d2a8c3972a6931d2cbb0d8dc920bbde15d8790d46ccb3a5f36ff412236251d86334f17545ccae88", @ANYRES32, @ANYRES32, @ANYBLOB="e5f0986a95b4a041c6140884aa3ee1b8a51a2f195aca4ce79a3b534f3fa12c4e1790181917f9b22d45f7d86339c33c4a5e4f7224ec19", @ANYRESOCT=0x0, @ANYRESDEC=0x0, @ANYRESOCT, @ANYRESOCT], 0x1, 0xa7a, &(0x7f0000000980)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_usb_connect(0x2, 0x56, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000c9d1c40899040a50b7e70102030109024400020000000009049700010dd5ce0008240201000000000905000000000000000705a3f6d2fb5b09040000014106cf0008240201000000000905c926"], 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r0, 0x80186e82, &(0x7f0000000800)={@desc={0x1, 0x0, @desc4}}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) ioctl$VIDIOC_S_OUTPUT(0xffffffffffffffff, 0xc004562f, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xe3d08660d3cd4684, 0x1}) r4 = add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x2}, &(0x7f00000002c0)="f5", 0x30, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r5, r4}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(0xffffffffffffffff, 0xc0945662, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x8, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f00000001c0)=""/4096, 0x1000) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socket$unix(0x1, 0x5, 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000413b88400819151300000000000109022b00001000000009046efd82deca6b0f12"], 0x0) 4.524111011s ago: executing program 0 (id=5107): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8041, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x48e02, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYBLOB=',grou', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000010300)={0x2020}, 0x2074) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) pwritev2(r1, 0x0, 0x0, 0x5415, 0x0, 0x2) socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="8510000004000020950000000000000018000000000000000000000000000000950000000000000085100000fcffffff9500000000"], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ustat(0x801, &(0x7f0000000300)) listen(0xffffffffffffffff, 0x90004) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e130100c900"], 0x16) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) 3.549918055s ago: executing program 0 (id=5108): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYRESOCT=r0, @ANYRES32=0x41424344, @ANYBLOB], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) syz_emit_vhci(0x0, 0x9) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) open(0x0, 0x14927e, 0x0) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x94, &(0x7f0000000300)='trans=rdma,') r2 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x2100, 0x700, 0x0, 0x0, {{0x7, 0x4, 0x0, 0x0, 0x1c, 0x60, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0xfe, 0x0}, {[@generic={0x83, 0x5, "f75fae"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000000)={'tunl0\x00', r3, 0x20, 0x40, 0x1001000, 0x6, {{0x5, 0x4, 0x2, 0x6, 0x14, 0x67, 0x0, 0xf9, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0xfe, 0x0}}}}}) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000280)={r4, r4, 0x1, 0x0, 0x0, 0x48, 0x41, 0x1000, 0x8, 0x8, 0x1, 0x0, 'syz0\x00'}) ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000007840)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00'}, 0x94) 2.932237734s ago: executing program 2 (id=5109): r0 = fsopen(&(0x7f0000000040)='binfmt_misc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) unshare(0x40400) fsmount(r0, 0x1, 0x3) socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket(0x10, 0x3, 0x9) connect$netlink(r1, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) 2.928110065s ago: executing program 4 (id=5110): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\v\x00\x00\x00\a\x00\x00\x00\b\x00\x00\x00\b'], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="01"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000f80)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000a000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x4800) 2.909836096s ago: executing program 2 (id=5111): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\v\x00\x00\x00\a\x00\x00\x00\b\x00\x00\x00\b\x00\x00\x00'], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000a000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x4800) 2.865168543s ago: executing program 0 (id=5112): r0 = signalfd4(0xffffffffffffffff, &(0x7f00000000c0), 0x8, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffffffb}]}) linkat(r1, &(0x7f0000000040)='\x00', 0xffffffffffffff9c, 0x0, 0x1000) faccessat2(r0, &(0x7f0000001400)='\x00', 0x0, 0x1100) 2.82933291s ago: executing program 4 (id=5113): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, 0x0, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_CHANNELS(r5, 0xc0045006, 0x0) ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f0000000640)=0x10) close(r5) 2.810258893s ago: executing program 2 (id=5114): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0x8}, 0x1c) socket$packet(0x11, 0x3, 0x300) r6 = syz_open_dev$evdev(&(0x7f0000000280), 0x2, 0x862b01) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYRESDEC=r6], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2689064c6588a8", 0x0, 0xd01, 0x2a0, 0xfffffffffffffdf6, 0x0, 0x0, 0x0, 0x2}, 0x48) bind$can_j1939(r3, &(0x7f0000000340)={0x1d, r4, 0x0, {0x1, 0xf0, 0x4}, 0xfe}, 0x18) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1f, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffd}, 0x39) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x74, r4, {0xfff3, 0x1}, {0xfff1, 0xa}, {0x2, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x44010}, 0x40050) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r9, 0x5000943f, &(0x7f0000001480)={{}, 0x0, 0x10, @inherit={0x0, 0x0}, @name="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"}) ioctl$TIOCSERGETLSR(r9, 0x5459, &(0x7f0000000380)) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0x10, 0xf}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x38, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x44, 0x0, 0x6, 0x6, 0x3, 0x2}, {0x3, 0x2, 0x7, 0x4, 0x0, 0x6}, 0x90000000, 0x82b8ca3e, 0x1d24}}, @TCA_TBF_PRATE64={0xc, 0x5, 0x9b4e7c312ffd1ff5}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@getqdisc={0x24, 0x26, 0x1, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r11, {}, {0xfff1, 0xb}, {0xa, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) r12 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r12, 0x1, 0x54, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4481ffe2b41b93ff", @ANYRES16=r1, @ANYBLOB="00012abd7000fcdbdf2512000000680001801400020069703665727370616e300000000000000800030000000000140002007866726d30000000000000000000000008000100", @ANYRES32=r11, @ANYBLOB="08000300000000000800030001000000140002006e72300000000000000000000000000008000100", @ANYRES32=r11, @ANYBLOB="08000900ff0f000008000800600000002000018008000100", @ANYRES32=r4, @ANYBLOB="140002007665746830000000000000000000000008000800ed5c00007c00018008000100", @ANYRES32=r11, @ANYBLOB="140002007465616d5f736c6176655f30000000000800030003000000140002007663616e300000000000000000000000140002007465616d5f736c6176655f3000000000080003000100000008000300030000001400020077673000000000000000000000000000080003000100000008000700ce0000000c0001800800030001000000"], 0x144}, 0x1, 0x0, 0x0, 0x24000004}, 0x0) syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000000)='./file1\x00', 0x810, &(0x7f00000001c0), 0x1, 0x50f3, &(0x7f000000a2c0)="$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") r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r13, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="0100000000000000000017000000500006804c00040067636d28616573290000000000000000000000000000000000001805542d9244fb770000e3de3d7b01d07ec3ee777de774fc7987cca4198931842a256bfcd91d3c8d8749a6bb026c"], 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000140)=ANY=[], 0x841, 0x1) 2.752126192s ago: executing program 0 (id=5115): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x28, r4, 0x301, 0x70bd2c, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0xd0}, 0x20008000) connect$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}, 0xee0000b0}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001100)="15b26f226e2966667482d50903b0a8d92ccd9e69d5cc4cb3d467a670b237a9225fb56c0f7ea725dee27c4bb43bb50c6748c83b71d59f0537405dfab648c096607340fac939a2efd31cbe2f8ca29c409e87ea0974b7bceff9afef5d07d691575f5115f2f961ad488e3386036913e98181a6034febaab853a3e928b9035b0e3a8e1cb393c70f6d0448970e0af2476f8b923ee09c19deca55d58f70e8eeff55dda6381cb96afe97196c0af0a8fd450a1447a1a521e2c211fb84cbcf4aebd31298972ec6bea1764fbde550", 0xc9}, {0x0}], 0x2}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="a6", 0x1}], 0x1}}], 0x3, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x2}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c80)=@newtaction={0x78, 0x30, 0xb, 0x0, 0x0, {}, [{0x64, 0x1, [@m_ct={0x60, 0x1, 0x0, 0x0, {{0x7}, {0x38, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xfdb}}, @TCA_CT_MARK={0x8, 0x10}, @TCA_CT_LABELS={0x14, 0x7, "b4c069143122e33e22f7e8b566780204"}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x20004000}, 0x10000000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000150081fb7059ae08060c04000aff0f1100000004001101", 0x1b}], 0x1}, 0x0) 1.672202278s ago: executing program 5 (id=5116): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @cgroup_sock=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.659015416s ago: executing program 0 (id=5117): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp256-generic\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$sock(r1, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000340)="8224aca5f41b9e0ec5e7a706c919e7c0e343f0cd0a779c17e7f992396b09252009d2d1", 0x23}, {&(0x7f00000005c0)="f2b314c96d500b66f7fd46493862d9eb11d188464208592330ac482436286448", 0x20}], 0x2}}], 0x1, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0x128, 0x29, 0x4, {0x4, 0x21, '\x00', [@calipso={0x7, 0x10, {0x1, 0x2, 0x9, 0x9f, [0x8]}}, @generic={0xfe, 0x72, "f4a4a3142ee1e12b9826287997a6b33d89f3d60da1641d9fe3896c3c1b6c130ef4f01be8f5836d417874540898619050b14420ab124b11de36afb16ef4fc1cf3f4e4fa0e647cd1b07b068d3894180b6aa7527a4a8252f6836a0d67a7782c675a838ea989e567e4774de1f52d188e0b0888c5"}, @generic={0x80, 0x14, "09e12e5f0b6bdcf72f2ec7008a15fa88b025e0ad"}, @calipso={0x7, 0x40, {0x1, 0xe, 0x7a, 0x8001, [0x5, 0x9, 0x4, 0x6, 0x4, 0x400, 0xb]}}, @ra={0x5, 0x2, 0xa7e}, @pad1, @ra={0x5, 0x2, 0xbf4}, @hao={0xc9, 0x10, @private2}, @generic={0x93, 0x11, "e80ee304ecb784ec4655260cecea14e498"}]}}}, @hoplimit={{0x14}}, @hopopts={{0x140, 0x29, 0x36, {0x5e, 0x24, '\x00', [@generic={0xff, 0x45, "50d650847249ad288702ebd0d654b985e8908defb7ec6c5ff115c58e128b9e3a21c34b45ef9de99984e143ca7c3509a971b2ec429ee1edc0bb903fe94b32c28f70dac43574"}, @pad1, @pad1, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x40, {0x3, 0xe, 0x0, 0xfff, [0x2, 0x4, 0x966, 0x7, 0xfffffffffffffff7, 0x1, 0x1]}}, @calipso={0x7, 0x10, {0x0, 0x2, 0x7, 0x6, [0x7fff]}}, @generic={0x8, 0x55, "c8a110995d439fbfac9716a99c357bcb2d59a850490739734f6b321d19b3754df39cc2dc26cf263cbebbddb9a7f17b6771f74c46623f9e38bd23e6f0a2fd3a9a017f66738394aca44d1a9f0b35d9df0a964360ab09"}, @calipso={0x7, 0x20, {0x3, 0x6, 0x3, 0x7, [0x0, 0x8000, 0xffffffffffffff04]}}, @generic={0x1}]}}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x73, 0x0, '\x00', [@pad1]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @rthdr={{0x18}}, @rthdr_2292={{0x28, 0x29, 0x39, {0x3a, 0x2, 0x2, 0x70, 0x0, [@mcast2]}}}], 0x328}}], 0x1, 0x810) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 1.460203366s ago: executing program 1 (id=5118): r0 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) lseek(r2, 0x0, 0x0) 1.459043049s ago: executing program 4 (id=5119): removexattr(&(0x7f0000000040)='./bus\x00', &(0x7f0000000080)=@known='system.advise\x00') syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./bus\x00', 0x804, &(0x7f00000006c0)=ANY=[@ANYBLOB='rodir,nonumtail=0,utf8=0,uni_xlate=0,shortname=mixed,shortname=mixed,iocharset=cp860,iocharset=macturkish,utf8=0,codepage=949,check=strict,utf8=1,shortname=winnt,iocharset=koi8-r,utf8=0,nonumtail=0,\x00'/213], 0x9, 0x27f, &(0x7f0000000880)="$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") (async) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./bus\x00', 0x804, &(0x7f00000006c0)=ANY=[@ANYBLOB='rodir,nonumtail=0,utf8=0,uni_xlate=0,shortname=mixed,shortname=mixed,iocharset=cp860,iocharset=macturkish,utf8=0,codepage=949,check=strict,utf8=1,shortname=winnt,iocharset=koi8-r,utf8=0,nonumtail=0,\x00'/213], 0x9, 0x27f, &(0x7f0000000880)="$eJzs3cFqK1UYAOB/mqRJdJEsXInQAV24Kq1P0CIVxIKgZKEutNgUJAmFFgJVMXblE/gEPohP4EZ8AR9AcWcX4lzSmaTpZZKS3rQp937fpof//P+c/8wM7WpOv3pr0Ds+PT+5/P7PaDSS2NiLvbhKoh0bMfFjlPrj7/I4APDEXWVZ/JPl6nno4nZGbU5ldePBmwMAHsTs3/919wIAPI5PP/v8o/3Dw4NP0rQRMfhp2Eki/5nP75/EN9GPbuxEK/6LyKby8QcfHh5ENR1rxzuD0bAzrhx8+Vtx/f2/Iq7rd6MV7fL63TQ3Uz8admrxWrH+Xj+6H/8SrXijvP69kvrobMa7b8/0vx2t+P3rOI1+HBe9Tep/2E3T97Of//3ui3F0XJ+Mhp36NK/IrjzqgwEAAAAAAAAAAAAAAAAAAAAA4KW2nU61b5+/Mzn4f8H8gvOBRjPn8+ykaZolef5NfTXerEZ1nXsHAAAAAAAAAAAAAAAAAACAp+L84tveUb/fPVvZ4NfoHU0+6y/Jif9vR+oRcf9Ft5atikrRWj+JWG6tWtSvK+9Oriy5i+a4n+5ZUo3VPYtkGmnOTm1FvtY40swHM5EXXr0R14PJ29U7Su56uI2yl2QFg6zk9avMrdp8PtIsdlCS3Fyw+ubr9+o5a82ZSiKiNr2Zi69TW+09fLzfQQAAAAAAAAAAAAAAAAAAQO7mo9+Sycs1NAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAa3Dz//+XGIyK4nk5WWU8qEYRWfMWAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeAU8CwAA///P/me2") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) 1.368528096s ago: executing program 0 (id=5120): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x2}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) ioctl$MON_IOCX_GETX(r0, 0x4018920a, &(0x7f00000000c0)={0x0, 0x0}) 1.367585275s ago: executing program 5 (id=5121): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xc4, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0xfffffffffffffffc}, {0x0, 0xacb0, 0x400000000}, 0x400}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x4c050) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x8001, 0x2, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x1}, [@tmpl={0x84, 0x5, [{{@in=@local, 0x0, 0x33}, 0x0, @in=@loopback, 0x0, 0x1, 0x3}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x3c}, 0x0, @in=@multicast1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7}]}]}, 0x163}}, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0xc0, 0x8, 0xfa04, 0xc0, 0x6c02, 0x178, 0x194, 0x194, 0x178, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x0, 'erspan0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98, 0x0, {0x0, 0x74020000}}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0xffff, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r7 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r6, 0x0, 0x20) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000002b80)='system.posix_acl_access\x00', &(0x7f0000000400)=ANY=[@ANYBLOB="020000000100070000000000040002000000000010000600"], 0x24, 0x3) epoll_create1(0x0) 1.021797293s ago: executing program 1 (id=5122): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f00000003c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) sendmsg$RDMA_NLDEV_CMD_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="100000001b1401"], 0x10}}, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) syz_emit_vhci(&(0x7f00000024c0)=ANY=[@ANYBLOB="05c9"], 0xe) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x1c, 0x5, 0x0, 0x1, @meta={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0xa8}}, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x2018000, &(0x7f00000000c0)={[{@verity_off}], [{@permit_directio}]}) 1.021186191s ago: executing program 4 (id=5123): gettid() r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000700)={0x3c, r1, 0x1, 0x0, 0x0, {0x36}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73}}}]}, 0x3c}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xd9}, 0x50) r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x39, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xf0, 0x20, [{{0x9, 0x4, 0x0, 0x1, 0xfe, 0x3, 0x0, 0x81657b94fb2d95c8, 0x0, {0x9, 0x21, 0x7f, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0xfd, 0xfc, 0x4}}}}}]}}]}}, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) r4 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40) mmap(&(0x7f0000190000/0x1000)=nil, 0x1000, 0x4, 0x10012, r3, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) fchown(0xffffffffffffffff, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, 0x0}, &(0x7f0000000300)=0xc) getgroups(0x1, &(0x7f0000000380)=[0x0]) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r9, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r9, &(0x7f000000b1c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0xfffffffffffffff5, 0xffffffffffffffff, {0x0, 0x0, 0x0, 0x8, 0x80002, 0x5, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x4, 0x0, 0x6000, 0xd, r10, 0x0, 0x800000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x3, {0x5, 0x0, 0xd04, 0xfffffffffffffffc, 0x0, 0x100000, {0x0, 0x8, 0xfffffffffffffffd, 0x3, 0x0, 0x0, 0x4, 0x4, 0x4, 0x2000, 0x101, r10, r11, 0xf0ee, 0xb}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x6, &(0x7f00000003c0)=[0x0, 0x0, 0x0, r7, r8, r11]) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) close_range(r6, 0xffffffffffffffff, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0022070000000bd25e6fa6f41b8c66f1caa7"], 0x0}, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) 311.622966ms ago: executing program 5 (id=5124): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\v\x00\x00\x00\a\x00\x00\x00\b\x00\x00\x00\b\x00\x00\x00'], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000a000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x4800) 236.971863ms ago: executing program 1 (id=5125): r0 = signalfd4(0xffffffffffffffff, &(0x7f00000000c0), 0x8, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffffffb}]}) faccessat2(r0, &(0x7f0000001400)='\x00', 0x0, 0x1100) 91.989624ms ago: executing program 5 (id=5126): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x10) syz_init_net_socket$netrom(0x6, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) openat$sysfs(0xffffffffffffff9c, 0x0, 0xa0042, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) getpid() syz_mount_image$romfs(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x0, &(0x7f00000001c0)=ANY=[], 0x1, 0x171, &(0x7f0000000480)="$eJzs2rFKw0AYB/DParEUn8Cp0Ax1aJMmWgV3QXDyAcTQ3tXQxEgiSDsFX0BxiI/g6qqbj9DZzU1dXB0kkvRq2zsXCxLB/29o/vTLfXcJ4aarB77X5GGdaC262n8uBL5XaVmbbd7kNo3sElElDcMkuW6Q4vCrPkyihnJD9V5ca9147447LjPVHgAAAAAAAAAAAAAAAAAAAAAA/0T1RYTyUezfcMdlzalq2B/0bNdlQTj+RyNxRod47G9zR2PWTL/aO5GWnd9x4p3ztJ8xU9fSTqUk80byfPqpd6KH/UHd8ewu67Jj07RaxrphbJh61kuXO2qXYk1EpfRnQXo+7XZynujRUM8TUXl0WVp14ouzrHtRfv4CBZMX8YMQzTUKIcdAEdEfWIYIT69E35dK4gNlQVic/lYXR/dsHWSlnBb/keT/6n47yPsHdZat6kO6fzTavttR9k8pjEfPM3lBjO3ZK+kUyo4GkJPPAAAA///+VynD") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x111d81, 0x1d5) getdents64(r2, 0x0, 0x22) r3 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, 0x0) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000880)=@newqdisc={0xc94, 0x24, 0xd0f, 0x70bd28, 0x0, {0x60, 0x0, 0x0, r7, {0x1, 0xa}, {0x4, 0xffff}, {0x3, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0xc68, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x8352}, @TCA_TBF_PARMS={0x28, 0x1, {{0x8, 0x0, 0x6, 0x6, 0x1, 0x6}, {0x3, 0x1, 0x3, 0x7, 0x0, 0x5}, 0xff, 0x44, 0x140b}}, @TCA_TBF_RTAB={0x404, 0x2, [0xa8c, 0xe166, 0xc4, 0x6, 0xfffffff7, 0x80000000, 0x4, 0x3, 0x0, 0x7, 0xd4bf, 0x2, 0x4, 0x8000, 0xffff, 0x0, 0x8, 0x401, 0x8000, 0xc2e0, 0x7, 0x7, 0x8, 0x9, 0x6, 0x2, 0x80000001, 0x5, 0x2, 0x7e7, 0x9, 0x9b24, 0xffff, 0x2, 0x80000000, 0x9, 0xfc04, 0x5cd1, 0x1000, 0x6, 0x8001, 0x2, 0x0, 0xfffffffc, 0x4, 0x9, 0x3efd4543, 0x6, 0xd, 0x2, 0x7fffffff, 0x1ff, 0x5, 0x7, 0x3, 0x2, 0x3, 0x9, 0x7, 0x7fffffff, 0xd, 0x9, 0xffff8001, 0xd, 0xb, 0xb, 0x1, 0x0, 0x4dc2, 0xffff, 0x3, 0x8, 0x10001, 0xfffffffb, 0x1, 0x7, 0x401, 0x1, 0x5, 0x1000000, 0x4, 0x400, 0x6, 0xac63, 0xa0, 0x1445, 0x4, 0x8e000, 0x10001, 0x1ff, 0xe, 0x4, 0x8, 0x101, 0xab06, 0x2, 0x8, 0x7fff, 0x4, 0x0, 0x7, 0x81, 0x5, 0xe, 0x7, 0x3, 0x5, 0x1, 0x4, 0x1, 0x800, 0x6, 0x1, 0x4, 0x4, 0x4, 0xea41, 0xfffffffe, 0x1, 0x4, 0x7, 0x2, 0x3cb, 0x9a81, 0x2, 0x101, 0x9d, 0xd, 0x400, 0x2, 0x0, 0x4, 0xffff, 0x402c, 0x7, 0x9, 0xfc9, 0x7f, 0x6, 0x0, 0x5e08, 0x80000001, 0xd, 0x3, 0x9, 0x20000, 0x2, 0x8, 0x1, 0x8, 0x3, 0x6000000, 0x1, 0x4, 0x0, 0x7, 0x9, 0x72c76994, 0x38, 0x4, 0x5, 0x8, 0xdad, 0x0, 0xc21f, 0x9, 0x6, 0x8, 0x1ff, 0x1, 0x9, 0x5, 0x10, 0x6, 0x0, 0x7, 0x5, 0x40, 0x0, 0x0, 0x8, 0x6, 0x4, 0x6, 0x8, 0x5810, 0x564, 0x80000000, 0x8000, 0x80, 0x7e, 0x2, 0x0, 0x101, 0x9, 0x9, 0x6bb9, 0x2, 0x0, 0x8, 0x2, 0xa3, 0x3, 0x8, 0x4, 0xa97, 0x2, 0x81, 0x10000, 0x1, 0x8, 0x1, 0xfff, 0x0, 0x822, 0x8, 0xd, 0x1, 0x5, 0x9, 0x200, 0x8, 0x3, 0x8, 0x9, 0x6, 0x92e1, 0xd, 0x470f, 0x9, 0x3, 0x3, 0x2, 0x800, 0x5, 0x0, 0x3, 0x80, 0x9, 0x400, 0x800, 0x3, 0x5, 0x1, 0x9, 0x8001, 0x0, 0x2, 0x2ecc, 0x0, 0x2, 0x9, 0x4, 0x0, 0xdf, 0x9]}, @TCA_TBF_PTAB={0x404, 0x3, [0xc187, 0x7, 0x0, 0x1, 0x2, 0xfffffffc, 0x5, 0x9, 0x7b, 0x658, 0x6, 0xffffffff, 0x1, 0x10, 0x4, 0x9, 0x4d4, 0x5, 0x100, 0x1a, 0x5, 0x471, 0x0, 0x10000, 0x80000000, 0x4, 0x2, 0x3, 0x8000, 0x2, 0x2, 0x7, 0x9, 0x9, 0x0, 0x2, 0x9, 0x40, 0x6, 0xfff, 0xd60, 0x0, 0xfffff1f6, 0x8b, 0x7, 0x9, 0xb5, 0xfffff001, 0x9, 0xe, 0x0, 0x80000001, 0x3, 0x8, 0x9f, 0x4, 0x400, 0x4, 0x3, 0xb7, 0xfff, 0x6, 0x2, 0x4, 0x7f, 0x2, 0x9, 0x5, 0x7, 0x1, 0x0, 0x6, 0x8, 0x8, 0xffffe98c, 0xfffffff3, 0xff, 0x7fff, 0x6, 0x7, 0x5, 0xc17, 0x7, 0x2, 0x7, 0x6, 0x2, 0xffffffff, 0x0, 0x0, 0x9, 0x10000, 0xfffffffd, 0x0, 0x3, 0xe, 0x9, 0x7, 0x200, 0x77a8193f, 0x5, 0x7, 0x6000000, 0xffff92be, 0xfffffffa, 0x1, 0xffff, 0x3ff, 0x0, 0x4, 0x10001, 0x4db75283, 0x4, 0x1, 0x80, 0xfffffe01, 0x7fff, 0x2, 0x5, 0x0, 0x2, 0x0, 0x5, 0x0, 0x7, 0x5, 0x3ff, 0xb, 0x7, 0x8, 0xfffffff7, 0x2, 0x2ed7, 0x800, 0x6, 0x4, 0x8, 0xcc, 0x5, 0x3, 0x28ba360a, 0x800, 0xa60, 0x6, 0x80000000, 0x2, 0xd1cf, 0x5, 0xffff, 0xffffff81, 0x6184, 0x2, 0x6, 0x35, 0x3, 0x0, 0xa63, 0x9, 0xffffffff, 0x5, 0x2, 0x5, 0x8, 0xe, 0x9, 0x3, 0x7, 0x3, 0xfff, 0x9c, 0x1, 0x95c4, 0x0, 0x7, 0x5, 0x0, 0x1, 0x4, 0x101, 0xfffffe39, 0xa03, 0x3, 0x1, 0x7, 0x2, 0xb, 0x48, 0x6, 0x0, 0x401, 0x8001, 0x8, 0x4000, 0x3, 0x4, 0x31b, 0x4, 0x8, 0x0, 0x400, 0x2000000, 0x0, 0x101, 0x4, 0x9, 0xff0000, 0x2b1, 0x1, 0x7, 0x8, 0x100, 0x970, 0x6, 0x9, 0x9, 0x6, 0x8, 0xda3f, 0x65, 0x80, 0x52fe, 0x7, 0xd8, 0x401, 0x1, 0x7, 0x80, 0x5, 0x2, 0x7, 0x4, 0xb1, 0x9, 0x1, 0x1, 0x7, 0x1, 0x2, 0xa, 0x2, 0x3, 0x8, 0x5, 0x0, 0x80000000, 0x1, 0x4, 0x4, 0x0, 0x1, 0xe, 0x8, 0x5, 0x6, 0x5, 0x3c]}, @TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x2, 0x7, 0x4000000, 0x9, 0x0, 0x6, 0x8, 0x5, 0x3, 0x1, 0x4, 0x7, 0x4277, 0x24, 0x80, 0x1, 0x9, 0x9e, 0x0, 0x7fffffff, 0x7, 0xff, 0x0, 0x72, 0x5adf, 0x8, 0xc5, 0x81, 0x1168, 0xe2, 0x7, 0x7f, 0x7, 0x3c, 0x8001, 0x7ff, 0x7fffffff, 0xa3, 0x654e, 0x7, 0xffff, 0x0, 0x2, 0x6, 0xd, 0x46, 0x2, 0x20, 0x3, 0x2, 0x4, 0x1, 0xfd, 0x2, 0x5d3, 0x4, 0x3, 0x9, 0x5, 0x5, 0x40, 0x4, 0x8, 0x2, 0x9, 0x0, 0x2, 0xfff, 0x467d, 0xfffffffd, 0xf, 0x4, 0x6, 0x2, 0x281, 0x9, 0x8707, 0x7344, 0x8, 0x6, 0x52b3, 0x80, 0x3, 0x7, 0x7, 0xfffffff9, 0x800, 0xffff7537, 0x4, 0x3c, 0x0, 0xb8b, 0xb, 0xd7eb, 0x7, 0x7, 0x8, 0x9, 0x6, 0x1ff, 0x8, 0x4, 0xf39, 0x0, 0x4, 0x4, 0x7, 0x7f, 0xffffffff, 0x5, 0x4, 0x5, 0x7fffffff, 0x6, 0x3, 0x8, 0x7ff, 0xdc04, 0x3, 0x0, 0x2, 0x8, 0x66a, 0x6, 0x1, 0x1, 0x400, 0xd, 0x6, 0x4, 0x0, 0x69, 0x0, 0xff, 0x1558, 0x2, 0x4, 0x3fa9, 0xf, 0x6, 0x5, 0x0, 0x9, 0x6, 0x0, 0xfffffffa, 0x7, 0x6, 0x4, 0x29fb, 0x6, 0x81, 0x1, 0x7, 0x9e, 0xa7, 0xfffffc00, 0x5, 0x1c7, 0x5b57, 0x7, 0x1a45, 0x4, 0x6, 0x5, 0xffff, 0x3, 0x0, 0x77b, 0x6, 0x2, 0x1, 0x802, 0x6, 0x2, 0x1, 0x6, 0x400, 0xfff, 0x0, 0x10, 0xfff, 0x7, 0xe61, 0x5, 0x100, 0x40, 0x7f, 0xffff, 0x0, 0x3, 0x2, 0x3, 0x10001, 0x9, 0xf5, 0xff, 0x2, 0x800, 0x9b, 0x6, 0x96, 0x5, 0x7e, 0x6, 0x8, 0x10001, 0x0, 0x2, 0x80000000, 0x52, 0x3ff, 0xc4e, 0x0, 0x8, 0x0, 0x0, 0x10000, 0xc, 0x40000000, 0x6, 0xfffffffa, 0x2, 0x3ff, 0x80000001, 0x1000, 0x7, 0xff, 0x152, 0x75e3, 0xa, 0x2, 0x9fff, 0x9, 0x2, 0x7, 0xa5, 0xcf56, 0x3, 0x1, 0x3, 0x8, 0x7, 0xbf7a, 0x80, 0x8001, 0x101, 0x5, 0x0, 0x6, 0x80000001, 0x9, 0x6, 0x1, 0x49d]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x2, 0x800, 0x4, 0x6, 0x5}, {0x5, 0x1, 0x7, 0x0, 0x0, 0x2}, 0x81, 0x1, 0x325}}]}}]}, 0xc94}, 0x1, 0x0, 0x0, 0x20000000}, 0x44080) 0s ago: executing program 1 (id=5127): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x28, r4, 0x301, 0x70bd2c, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0xd0}, 0x20008000) connect$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}, 0xee0000b0}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001100)="15b26f226e2966667482d50903b0a8d92ccd9e69d5cc4cb3d467a670b237a9225fb56c0f7ea725dee27c4bb43bb50c6748c83b71d59f0537405dfab648c096607340fac939a2efd31cbe2f8ca29c409e87ea0974b7bceff9afef5d07d691575f5115f2f961ad488e3386036913e98181a6034febaab853a3e928b9035b0e3a8e1cb393c70f6d0448970e0af2476f8b923ee09c19deca55d58f70e8eeff55dda6381cb96afe97196c0af0a8fd450a1447a1a521e2c211fb84cbcf4aebd31298972ec6bea1764fbde550", 0xc9}, {0x0}], 0x2}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="a6", 0x1}], 0x1}}], 0x3, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x2}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c80)=@newtaction={0x78, 0x30, 0xb, 0x0, 0x0, {}, [{0x64, 0x1, [@m_ct={0x60, 0x1, 0x0, 0x0, {{0x7}, {0x38, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xfdb}}, @TCA_CT_MARK={0x8, 0x10}, @TCA_CT_LABELS={0x14, 0x7, "b4c069143122e33e22f7e8b566780204"}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x20004000}, 0x10000000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000150081fb7059ae08060c04000aff0f1100000004001101", 0x1b}], 0x1}, 0x0) kernel console output (not intermixed with test programs): ange from 0 to 128 [ 1235.385227][T19988] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4136'. [ 1236.680016][T19998] fuse: Unknown parameter 'group_id00000000000000000000' [ 1237.546329][T14943] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 1237.556129][T14943] CPU: 1 UID: 0 PID: 14943 Comm: kworker/u9:2 Not tainted syzkaller #0 PREEMPT(full) [ 1237.556157][T14943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1237.556170][T14943] Workqueue: hci0 hci_rx_work [ 1237.556198][T14943] Call Trace: [ 1237.556207][T14943] [ 1237.556218][T14943] dump_stack_lvl+0x189/0x250 [ 1237.556247][T14943] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1237.556268][T14943] ? __pfx__printk+0x10/0x10 [ 1237.556307][T14943] ? kernfs_path_from_node+0x250/0x290 [ 1237.556327][T14943] ? kernfs_path_from_node+0x2f/0x290 [ 1237.556351][T14943] sysfs_create_dir_ns+0x259/0x280 [ 1237.556374][T14943] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1237.556396][T14943] ? do_raw_spin_unlock+0x122/0x240 [ 1237.556425][T14943] kobject_add_internal+0x6ab/0xcc0 [ 1237.556459][T14943] kobject_add+0x155/0x220 [ 1237.556489][T14943] ? __pfx_kobject_add+0x10/0x10 [ 1237.556513][T14943] ? _raw_spin_unlock+0x3f/0x50 [ 1237.556537][T14943] ? get_device_parent+0x366/0x3a0 [ 1237.556562][T14943] device_add+0x408/0xb80 [ 1237.556586][T14943] hci_conn_add_sysfs+0xd5/0x210 [ 1237.556611][T14943] le_conn_complete_evt+0xf1d/0x1420 [ 1237.556649][T14943] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1237.556671][T14943] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 1237.556691][T14943] ? __asan_memcpy+0x40/0x70 [ 1237.556722][T14943] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1237.556742][T14943] ? skb_pull_data+0xfb/0x200 [ 1237.556773][T14943] hci_le_conn_complete_evt+0x187/0x480 [ 1237.556806][T14943] hci_event_packet+0x78f/0x1260 [ 1237.556832][T14943] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1237.556859][T14943] ? __pfx_hci_event_packet+0x10/0x10 [ 1237.556887][T14943] ? kcov_remote_start+0x2e/0x7f0 [ 1237.556913][T14943] ? hci_send_to_monitor+0xe2/0x590 [ 1237.556935][T14943] hci_rx_work+0x3ee/0x1060 [ 1237.556969][T14943] ? process_one_work+0x868/0x15a0 [ 1237.556986][T14943] process_one_work+0x93a/0x15a0 [ 1237.557030][T14943] ? __pfx_process_one_work+0x10/0x10 [ 1237.557057][T14943] ? assign_work+0x3a1/0x410 [ 1237.557081][T14943] worker_thread+0x9b0/0xee0 [ 1237.557132][T14943] kthread+0x711/0x8a0 [ 1237.557158][T14943] ? __pfx_worker_thread+0x10/0x10 [ 1237.557177][T14943] ? __pfx_kthread+0x10/0x10 [ 1237.557203][T14943] ? _raw_spin_unlock_irq+0x23/0x50 [ 1237.557222][T14943] ? lockdep_hardirqs_on+0x98/0x140 [ 1237.557239][T14943] ? __pfx_kthread+0x10/0x10 [ 1237.557258][T14943] ret_from_fork+0x599/0xb30 [ 1237.557279][T14943] ? __pfx_ret_from_fork+0x10/0x10 [ 1237.557316][T14943] ? __switch_to_asm+0x39/0x70 [ 1237.557337][T14943] ? __switch_to_asm+0x33/0x70 [ 1237.557358][T14943] ? __pfx_kthread+0x10/0x10 [ 1237.557382][T14943] ret_from_fork_asm+0x1a/0x30 [ 1237.557424][T14943] [ 1237.846090][T14943] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1237.861380][T14943] Bluetooth: hci0: failed to register connection device [ 1239.058511][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.065974][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1240.082717][T14943] Bluetooth: hci0: command 0x2016 tx timeout [ 1240.368476][T20030] fuse: Bad value for 'user_id' [ 1240.403176][T20030] fuse: Bad value for 'user_id' [ 1240.716092][T20035] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4152'. [ 1241.953358][T14943] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 1241.964442][T14943] CPU: 0 UID: 0 PID: 14943 Comm: kworker/u9:2 Not tainted syzkaller #0 PREEMPT(full) [ 1241.964470][T14943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1241.964484][T14943] Workqueue: hci1 hci_rx_work [ 1241.964511][T14943] Call Trace: [ 1241.964518][T14943] [ 1241.964527][T14943] dump_stack_lvl+0x189/0x250 [ 1241.964555][T14943] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1241.964577][T14943] ? __pfx__printk+0x10/0x10 [ 1241.964609][T14943] ? kernfs_path_from_node+0x250/0x290 [ 1241.964626][T14943] ? kernfs_path_from_node+0x2f/0x290 [ 1241.964650][T14943] sysfs_create_dir_ns+0x259/0x280 [ 1241.964672][T14943] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1241.964694][T14943] ? do_raw_spin_unlock+0x122/0x240 [ 1241.964725][T14943] kobject_add_internal+0x6ab/0xcc0 [ 1241.964759][T14943] kobject_add+0x155/0x220 [ 1241.964803][T14943] ? __pfx_kobject_add+0x10/0x10 [ 1241.964833][T14943] ? _raw_spin_unlock+0x3f/0x50 [ 1241.964857][T14943] ? get_device_parent+0x366/0x3a0 [ 1241.964887][T14943] device_add+0x408/0xb80 [ 1241.964911][T14943] hci_conn_add_sysfs+0xd5/0x210 [ 1241.964936][T14943] le_conn_complete_evt+0xf1d/0x1420 [ 1241.964973][T14943] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1241.964997][T14943] ? irqentry_exit+0x5dd/0x660 [ 1241.965017][T14943] ? rcu_is_watching+0x15/0xb0 [ 1241.965053][T14943] hci_le_conn_complete_evt+0x187/0x480 [ 1241.965085][T14943] hci_event_packet+0x78f/0x1260 [ 1241.965111][T14943] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1241.965138][T14943] ? __pfx_hci_event_packet+0x10/0x10 [ 1241.965162][T14943] ? kcov_remote_start+0x4d3/0x7f0 [ 1241.965188][T14943] ? lockdep_hardirqs_on+0x98/0x140 [ 1241.965213][T14943] ? hci_send_to_monitor+0xe2/0x590 [ 1241.965234][T14943] hci_rx_work+0x3ee/0x1060 [ 1241.965266][T14943] ? process_one_work+0x868/0x15a0 [ 1241.965283][T14943] process_one_work+0x93a/0x15a0 [ 1241.965326][T14943] ? __pfx_process_one_work+0x10/0x10 [ 1241.965355][T14943] ? assign_work+0x3a1/0x410 [ 1241.965379][T14943] worker_thread+0x9b0/0xee0 [ 1241.965427][T14943] kthread+0x711/0x8a0 [ 1241.965454][T14943] ? __pfx_worker_thread+0x10/0x10 [ 1241.965472][T14943] ? __pfx_kthread+0x10/0x10 [ 1241.965496][T14943] ? _raw_spin_unlock_irq+0x23/0x50 [ 1241.965515][T14943] ? lockdep_hardirqs_on+0x98/0x140 [ 1241.965534][T14943] ? __pfx_kthread+0x10/0x10 [ 1241.965557][T14943] ret_from_fork+0x599/0xb30 [ 1241.965578][T14943] ? __pfx_ret_from_fork+0x10/0x10 [ 1241.965607][T14943] ? __switch_to_asm+0x39/0x70 [ 1241.965627][T14943] ? __switch_to_asm+0x33/0x70 [ 1241.965645][T14943] ? __pfx_kthread+0x10/0x10 [ 1241.965669][T14943] ret_from_fork_asm+0x1a/0x30 [ 1241.965710][T14943] [ 1241.966009][T14943] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1242.087519][T20039] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4154'. [ 1242.100497][T14943] Bluetooth: hci1: failed to register connection device [ 1242.172787][T19379] Bluetooth: hci0: command 0x2016 tx timeout [ 1242.786912][T19379] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 1242.805243][T19379] CPU: 1 UID: 0 PID: 19379 Comm: kworker/u9:3 Not tainted syzkaller #0 PREEMPT(full) [ 1242.805270][T19379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1242.805283][T19379] Workqueue: hci4 hci_rx_work [ 1242.805309][T19379] Call Trace: [ 1242.805319][T19379] [ 1242.805328][T19379] dump_stack_lvl+0x189/0x250 [ 1242.805356][T19379] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1242.805377][T19379] ? __pfx__printk+0x10/0x10 [ 1242.805409][T19379] ? kernfs_path_from_node+0x250/0x290 [ 1242.805427][T19379] ? kernfs_path_from_node+0x2f/0x290 [ 1242.805451][T19379] sysfs_create_dir_ns+0x259/0x280 [ 1242.805473][T19379] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1242.805494][T19379] ? do_raw_spin_unlock+0x122/0x240 [ 1242.805532][T19379] kobject_add_internal+0x6ab/0xcc0 [ 1242.805567][T19379] kobject_add+0x155/0x220 [ 1242.805600][T19379] ? __pfx_kobject_add+0x10/0x10 [ 1242.805624][T19379] ? _raw_spin_unlock+0x3f/0x50 [ 1242.805647][T19379] ? get_device_parent+0x366/0x3a0 [ 1242.805671][T19379] device_add+0x408/0xb80 [ 1242.805694][T19379] hci_conn_add_sysfs+0xd5/0x210 [ 1242.805720][T19379] le_conn_complete_evt+0xf1d/0x1420 [ 1242.805755][T19379] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1242.805777][T19379] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 1242.805806][T19379] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1242.805826][T19379] ? skb_pull_data+0xfb/0x200 [ 1242.805856][T19379] hci_le_conn_complete_evt+0x187/0x480 [ 1242.805889][T19379] hci_event_packet+0x78f/0x1260 [ 1242.805913][T19379] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1242.805940][T19379] ? __pfx_hci_event_packet+0x10/0x10 [ 1242.805966][T19379] ? kcov_remote_start+0x2e/0x7f0 [ 1242.805993][T19379] ? hci_send_to_monitor+0xe2/0x590 [ 1242.806014][T19379] hci_rx_work+0x3ee/0x1060 [ 1242.806046][T19379] ? process_one_work+0x868/0x15a0 [ 1242.806063][T19379] process_one_work+0x93a/0x15a0 [ 1242.806105][T19379] ? __pfx_process_one_work+0x10/0x10 [ 1242.806134][T19379] ? assign_work+0x3a1/0x410 [ 1242.806158][T19379] worker_thread+0x9b0/0xee0 [ 1242.806205][T19379] kthread+0x711/0x8a0 [ 1242.806232][T19379] ? __pfx_worker_thread+0x10/0x10 [ 1242.806250][T19379] ? __pfx_kthread+0x10/0x10 [ 1242.806275][T19379] ? _raw_spin_unlock_irq+0x23/0x50 [ 1242.806294][T19379] ? lockdep_hardirqs_on+0x98/0x140 [ 1242.806313][T19379] ? __pfx_kthread+0x10/0x10 [ 1242.806336][T19379] ret_from_fork+0x599/0xb30 [ 1242.806357][T19379] ? __pfx_ret_from_fork+0x10/0x10 [ 1242.806387][T19379] ? __switch_to_asm+0x39/0x70 [ 1242.806408][T19379] ? __switch_to_asm+0x33/0x70 [ 1242.806428][T19379] ? __pfx_kthread+0x10/0x10 [ 1242.806451][T19379] ret_from_fork_asm+0x1a/0x30 [ 1242.806491][T19379] [ 1242.806746][T19379] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1243.092220][T19379] Bluetooth: hci4: failed to register connection device [ 1244.217422][ T5148] Bluetooth: hci1: command 0x2016 tx timeout [ 1244.349581][T20074] fuse: Bad value for 'user_id' [ 1244.354573][T20074] fuse: Bad value for 'user_id' [ 1245.177333][ T5148] Bluetooth: hci4: command 0x2016 tx timeout [ 1245.382775][T20096] netlink: 'syz.5.4168': attribute type 72 has an invalid length. [ 1246.303547][T19379] Bluetooth: hci1: command 0x2016 tx timeout [ 1247.257373][T14943] Bluetooth: hci4: command 0x2016 tx timeout [ 1247.541642][T14943] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 1247.551531][T14943] CPU: 0 UID: 0 PID: 14943 Comm: kworker/u9:2 Not tainted syzkaller #0 PREEMPT(full) [ 1247.551558][T14943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1247.551572][T14943] Workqueue: hci0 hci_rx_work [ 1247.551598][T14943] Call Trace: [ 1247.551607][T14943] [ 1247.551617][T14943] dump_stack_lvl+0x189/0x250 [ 1247.551645][T14943] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1247.551667][T14943] ? __pfx__printk+0x10/0x10 [ 1247.551699][T14943] ? kernfs_path_from_node+0x250/0x290 [ 1247.551718][T14943] ? kernfs_path_from_node+0x2f/0x290 [ 1247.551742][T14943] sysfs_create_dir_ns+0x259/0x280 [ 1247.551764][T14943] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1247.551785][T14943] ? do_raw_spin_unlock+0x122/0x240 [ 1247.551823][T14943] kobject_add_internal+0x6ab/0xcc0 [ 1247.551859][T14943] kobject_add+0x155/0x220 [ 1247.551890][T14943] ? __pfx_kobject_add+0x10/0x10 [ 1247.551914][T14943] ? _raw_spin_unlock+0x3f/0x50 [ 1247.551939][T14943] ? get_device_parent+0x366/0x3a0 [ 1247.551963][T14943] device_add+0x408/0xb80 [ 1247.551987][T14943] hci_conn_add_sysfs+0xd5/0x210 [ 1247.552012][T14943] le_conn_complete_evt+0xf1d/0x1420 [ 1247.552049][T14943] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1247.552072][T14943] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 1247.552109][T14943] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1247.552139][T14943] ? skb_pull_data+0xfb/0x200 [ 1247.552178][T14943] hci_le_conn_complete_evt+0x187/0x480 [ 1247.552211][T14943] hci_event_packet+0x78f/0x1260 [ 1247.552238][T14943] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1247.552264][T14943] ? __pfx_hci_event_packet+0x10/0x10 [ 1247.552292][T14943] ? kcov_remote_start+0x2e/0x7f0 [ 1247.552319][T14943] ? hci_send_to_monitor+0xe2/0x590 [ 1247.552339][T14943] hci_rx_work+0x3ee/0x1060 [ 1247.552372][T14943] ? process_one_work+0x868/0x15a0 [ 1247.552390][T14943] process_one_work+0x93a/0x15a0 [ 1247.552433][T14943] ? __pfx_process_one_work+0x10/0x10 [ 1247.552461][T14943] ? assign_work+0x3a1/0x410 [ 1247.552485][T14943] worker_thread+0x9b0/0xee0 [ 1247.552533][T14943] kthread+0x711/0x8a0 [ 1247.552560][T14943] ? __pfx_worker_thread+0x10/0x10 [ 1247.552578][T14943] ? __pfx_kthread+0x10/0x10 [ 1247.552612][T14943] ? _raw_spin_unlock_irq+0x23/0x50 [ 1247.552631][T14943] ? lockdep_hardirqs_on+0x98/0x140 [ 1247.552651][T14943] ? __pfx_kthread+0x10/0x10 [ 1247.552675][T14943] ret_from_fork+0x599/0xb30 [ 1247.552696][T14943] ? __pfx_ret_from_fork+0x10/0x10 [ 1247.552727][T14943] ? __switch_to_asm+0x39/0x70 [ 1247.552748][T14943] ? __switch_to_asm+0x33/0x70 [ 1247.552768][T14943] ? __pfx_kthread+0x10/0x10 [ 1247.552792][T14943] ret_from_fork_asm+0x1a/0x30 [ 1247.552831][T14943] [ 1247.553031][T14943] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1247.838108][T14943] Bluetooth: hci0: failed to register connection device [ 1249.236025][T20117] loop0: detected capacity change from 0 to 2048 [ 1249.367189][T20117] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1250.020546][ T5148] Bluetooth: hci0: command 0x2016 tx timeout [ 1250.756265][T20124] fuse: Bad value for 'user_id' [ 1250.767359][T20124] fuse: Bad value for 'user_id' [ 1251.264281][T20133] netlink: 180 bytes leftover after parsing attributes in process `syz.1.4173'. [ 1251.997535][T20138] fuse: Unknown parameter 'grou00000000000000000000' [ 1252.005305][T20136] netlink: 'syz.5.4179': attribute type 72 has an invalid length. [ 1252.067759][ T5148] Bluetooth: hci0: command 0x2016 tx timeout [ 1252.635802][T14943] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 1252.647754][T14943] CPU: 1 UID: 0 PID: 14943 Comm: kworker/u9:2 Not tainted syzkaller #0 PREEMPT(full) [ 1252.647781][T14943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1252.647795][T14943] Workqueue: hci3 hci_rx_work [ 1252.647822][T14943] Call Trace: [ 1252.647830][T14943] [ 1252.647839][T14943] dump_stack_lvl+0x189/0x250 [ 1252.647868][T14943] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1252.647889][T14943] ? __pfx__printk+0x10/0x10 [ 1252.647925][T14943] ? kernfs_path_from_node+0x250/0x290 [ 1252.647943][T14943] ? kernfs_path_from_node+0x2f/0x290 [ 1252.647966][T14943] sysfs_create_dir_ns+0x259/0x280 [ 1252.647988][T14943] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1252.648009][T14943] ? do_raw_spin_unlock+0x122/0x240 [ 1252.648038][T14943] kobject_add_internal+0x6ab/0xcc0 [ 1252.648071][T14943] kobject_add+0x155/0x220 [ 1252.648099][T14943] ? __pfx_kobject_add+0x10/0x10 [ 1252.648123][T14943] ? _raw_spin_unlock+0x3f/0x50 [ 1252.648146][T14943] ? get_device_parent+0x366/0x3a0 [ 1252.648170][T14943] device_add+0x408/0xb80 [ 1252.648194][T14943] hci_conn_add_sysfs+0xd5/0x210 [ 1252.648219][T14943] le_conn_complete_evt+0xf1d/0x1420 [ 1252.648244][T14943] ? irqentry_exit+0x5dd/0x660 [ 1252.648274][T14943] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1252.648307][T14943] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 1252.648336][T14943] hci_le_conn_complete_evt+0x187/0x480 [ 1252.648369][T14943] hci_event_packet+0x78f/0x1260 [ 1252.648394][T14943] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1252.648421][T14943] ? __pfx_hci_event_packet+0x10/0x10 [ 1252.648448][T14943] ? kcov_remote_start+0x2e/0x7f0 [ 1252.648472][T14943] ? hci_send_to_monitor+0xe2/0x590 [ 1252.648493][T14943] hci_rx_work+0x3ee/0x1060 [ 1252.648526][T14943] ? process_one_work+0x868/0x15a0 [ 1252.648543][T14943] process_one_work+0x93a/0x15a0 [ 1252.648586][T14943] ? __pfx_process_one_work+0x10/0x10 [ 1252.648614][T14943] ? assign_work+0x3a1/0x410 [ 1252.648637][T14943] worker_thread+0x9b0/0xee0 [ 1252.648685][T14943] kthread+0x711/0x8a0 [ 1252.648717][T14943] ? __pfx_worker_thread+0x10/0x10 [ 1252.648735][T14943] ? __pfx_kthread+0x10/0x10 [ 1252.648760][T14943] ? _raw_spin_unlock_irq+0x23/0x50 [ 1252.648778][T14943] ? lockdep_hardirqs_on+0x98/0x140 [ 1252.648797][T14943] ? __pfx_kthread+0x10/0x10 [ 1252.648821][T14943] ret_from_fork+0x599/0xb30 [ 1252.648843][T14943] ? __pfx_ret_from_fork+0x10/0x10 [ 1252.648873][T14943] ? __switch_to_asm+0x39/0x70 [ 1252.648893][T14943] ? __switch_to_asm+0x33/0x70 [ 1252.648913][T14943] ? __pfx_kthread+0x10/0x10 [ 1252.648937][T14943] ret_from_fork_asm+0x1a/0x30 [ 1252.648978][T14943] [ 1252.649217][T14943] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1252.753809][T20147] loop5: detected capacity change from 0 to 128 [ 1252.759975][T14943] Bluetooth: hci3: failed to register connection device [ 1253.427395][T14943] Bluetooth: hci0: unexpected event for opcode 0x0c47 [ 1255.385733][ T5148] Bluetooth: hci3: command 0x2016 tx timeout [ 1257.048364][T20176] can: request_module (can-proto-3) failed. [ 1257.427376][ T5148] Bluetooth: hci3: command 0x2016 tx timeout [ 1258.107596][T20187] netlink: 'syz.0.4192': attribute type 72 has an invalid length. [ 1259.216256][T20192] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4194'. [ 1259.407934][ T5148] Bluetooth: hci1: unexpected event for opcode 0x0c47 [ 1259.860012][T20208] netlink: 180 bytes leftover after parsing attributes in process `syz.0.4197'. [ 1260.058373][T15810] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1260.450998][T15810] usb 6-1: Using ep0 maxpacket: 32 [ 1260.488167][T15810] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1260.517908][T15810] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1260.541659][T15810] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1260.560911][T15810] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1260.588420][T20212] 9p: Bad value for 'source' [ 1260.595326][T15810] usb 6-1: config 0 descriptor?? [ 1260.816388][T20204] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4199'. [ 1261.193632][T20227] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.4204'. [ 1262.736178][ T5881] usb 6-1: USB disconnect, device number 2 [ 1263.979348][T20238] fuse: Bad value for 'fd' [ 1265.904077][T20257] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4212'. [ 1267.777190][T20268] 9p: Bad value for 'source' [ 1267.787105][T20266] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4214'. [ 1268.410482][T20279] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.4217'. [ 1268.489263][T20283] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4219'. [ 1268.571290][ T5148] Bluetooth: hci3: unexpected event for opcode 0x0c47 [ 1268.613659][T15810] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 1269.196886][T20289] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4218'. [ 1269.351481][T15810] usb 6-1: config 0 has an invalid interface number: 113 but max is 0 [ 1269.360738][T15810] usb 6-1: config 0 has no interface number 0 [ 1269.367190][T15810] usb 6-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0x14, changing to 0x4 [ 1269.416120][T15810] usb 6-1: config 0 interface 113 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1269.617535][T15810] usb 6-1: config 0 interface 113 has no altsetting 0 [ 1269.673212][T15810] usb 6-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 1269.692260][T15810] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1270.386039][T15810] usb 6-1: Product: syz [ 1270.391382][T15810] usb 6-1: Manufacturer: syz [ 1270.397494][T15810] usb 6-1: SerialNumber: syz [ 1270.406602][T15810] usb 6-1: config 0 descriptor?? [ 1270.434436][ C1] usb 6-1: NFC: Urb failure (status -71) [ 1270.443310][T15810] usb 6-1: NFC: Unable to get FW version [ 1270.450628][T15810] pn533_usb 6-1:0.113: probe with driver pn533_usb failed with error -90 [ 1271.285509][T20298] can: request_module (can-proto-3) failed. [ 1271.731637][T20311] veth3: left promiscuous mode [ 1272.441064][T20323] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4226'. [ 1273.291200][T15310] usb 6-1: USB disconnect, device number 3 [ 1273.500593][T20330] netlink: 96 bytes leftover after parsing attributes in process `syz.5.4228'. [ 1276.446130][T20352] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4235'. [ 1278.437107][T20374] netlink: 300 bytes leftover after parsing attributes in process `syz.4.4239'. [ 1281.586744][T20418] can: request_module (can-proto-3) failed. [ 1282.061574][ T5148] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 1282.080001][ T5148] CPU: 1 UID: 0 PID: 5148 Comm: kworker/u9:1 Not tainted syzkaller #0 PREEMPT(full) [ 1282.080030][ T5148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1282.080044][ T5148] Workqueue: hci1 hci_rx_work [ 1282.080071][ T5148] Call Trace: [ 1282.080080][ T5148] [ 1282.080089][ T5148] dump_stack_lvl+0x189/0x250 [ 1282.080117][ T5148] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1282.080139][ T5148] ? __pfx__printk+0x10/0x10 [ 1282.080168][ T5148] ? kernfs_path_from_node+0x250/0x290 [ 1282.080186][ T5148] ? kernfs_path_from_node+0x2f/0x290 [ 1282.080209][ T5148] sysfs_create_dir_ns+0x259/0x280 [ 1282.080232][ T5148] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1282.080254][ T5148] ? do_raw_spin_unlock+0x122/0x240 [ 1282.080284][ T5148] kobject_add_internal+0x6ab/0xcc0 [ 1282.080318][ T5148] kobject_add+0x155/0x220 [ 1282.080345][ T5148] ? __pfx_kobject_add+0x10/0x10 [ 1282.080367][ T5148] ? _raw_spin_unlock+0x28/0x50 [ 1282.080388][ T5148] ? get_device_parent+0x366/0x3a0 [ 1282.080412][ T5148] device_add+0x408/0xb80 [ 1282.080435][ T5148] hci_conn_add_sysfs+0xd5/0x210 [ 1282.080459][ T5148] le_conn_complete_evt+0xf1d/0x1420 [ 1282.080494][ T5148] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1282.080516][ T5148] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 1282.080537][ T5148] ? __asan_memcpy+0x40/0x70 [ 1282.080568][ T5148] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1282.080588][ T5148] ? skb_pull_data+0xfb/0x200 [ 1282.080619][ T5148] hci_le_conn_complete_evt+0x187/0x480 [ 1282.080652][ T5148] hci_event_packet+0x78f/0x1260 [ 1282.080677][ T5148] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1282.080704][ T5148] ? __pfx_hci_event_packet+0x10/0x10 [ 1282.080729][ T5148] ? kcov_remote_start+0x4d3/0x7f0 [ 1282.080752][ T5148] ? lockdep_hardirqs_on+0x98/0x140 [ 1282.080785][ T5148] ? hci_send_to_monitor+0xe2/0x590 [ 1282.080806][ T5148] hci_rx_work+0x3ee/0x1060 [ 1282.080839][ T5148] ? process_one_work+0x868/0x15a0 [ 1282.080857][ T5148] process_one_work+0x93a/0x15a0 [ 1282.080900][ T5148] ? __pfx_process_one_work+0x10/0x10 [ 1282.080929][ T5148] ? assign_work+0x3a1/0x410 [ 1282.080954][ T5148] worker_thread+0x9b0/0xee0 [ 1282.081001][ T5148] kthread+0x711/0x8a0 [ 1282.081027][ T5148] ? __pfx_worker_thread+0x10/0x10 [ 1282.081047][ T5148] ? __pfx_kthread+0x10/0x10 [ 1282.081069][ T5148] ? _raw_spin_unlock_irq+0x23/0x50 [ 1282.081086][ T5148] ? lockdep_hardirqs_on+0x98/0x140 [ 1282.081103][ T5148] ? __pfx_kthread+0x10/0x10 [ 1282.081127][ T5148] ret_from_fork+0x599/0xb30 [ 1282.081148][ T5148] ? __pfx_ret_from_fork+0x10/0x10 [ 1282.081176][ T5148] ? __switch_to_asm+0x39/0x70 [ 1282.081196][ T5148] ? __switch_to_asm+0x33/0x70 [ 1282.081214][ T5148] ? __pfx_kthread+0x10/0x10 [ 1282.081237][ T5148] ret_from_fork_asm+0x1a/0x30 [ 1282.081277][ T5148] [ 1282.378075][ T5148] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1282.392563][ T5148] Bluetooth: hci1: failed to register connection device [ 1282.810300][ T7621] bridge_slave_1: left allmulticast mode [ 1282.816000][ T7621] bridge_slave_1: left promiscuous mode [ 1282.822296][ T7621] bridge0: port 2(bridge_slave_1) entered disabled state [ 1282.885155][ T7621] bridge_slave_0: left allmulticast mode [ 1282.914754][ T7621] bridge_slave_0: left promiscuous mode [ 1282.923854][ T7621] bridge0: port 1(bridge_slave_0) entered disabled state [ 1283.002201][T20440] can: request_module (can-proto-3) failed. [ 1283.862442][ T7621] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 1284.130180][T20456] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4267'. [ 1284.262976][ T7621] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1284.289758][ T7621] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1284.305269][ T7621] bond0 (unregistering): Released all slaves [ 1284.335923][T20439] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4263'. [ 1284.361033][T20443] netlink: 96 bytes leftover after parsing attributes in process `syz.2.4265'. [ 1284.546092][T14943] Bluetooth: hci1: command 0x2016 tx timeout [ 1284.587784][ T7621] tipc: Left network mode [ 1284.682021][T20465] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4269'. [ 1286.707772][T14943] Bluetooth: hci1: command 0x2016 tx timeout [ 1287.107013][ T7621] hsr_slave_0: left promiscuous mode [ 1287.133415][ T7621] hsr_slave_1: left promiscuous mode [ 1287.218625][ T7621] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1287.238300][T20491] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4278'. [ 1287.260521][ T7621] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1287.302618][T20488] can: request_module (can-proto-3) failed. [ 1288.545418][ T5148] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 1288.555075][ T5148] CPU: 1 UID: 0 PID: 5148 Comm: kworker/u9:1 Not tainted syzkaller #0 PREEMPT(full) [ 1288.555091][ T5148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1288.555100][ T5148] Workqueue: hci4 hci_rx_work [ 1288.555117][ T5148] Call Trace: [ 1288.555123][ T5148] [ 1288.555129][ T5148] dump_stack_lvl+0x189/0x250 [ 1288.555152][ T5148] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1288.555168][ T5148] ? __pfx__printk+0x10/0x10 [ 1288.555187][ T5148] ? kernfs_path_from_node+0x250/0x290 [ 1288.555198][ T5148] ? kernfs_path_from_node+0x2f/0x290 [ 1288.555211][ T5148] sysfs_create_dir_ns+0x259/0x280 [ 1288.555224][ T5148] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1288.555235][ T5148] ? do_raw_spin_unlock+0x122/0x240 [ 1288.555253][ T5148] kobject_add_internal+0x6ab/0xcc0 [ 1288.555272][ T5148] kobject_add+0x155/0x220 [ 1288.555287][ T5148] ? __pfx_kobject_add+0x10/0x10 [ 1288.555300][ T5148] ? _raw_spin_unlock+0x28/0x50 [ 1288.555313][ T5148] ? get_device_parent+0x366/0x3a0 [ 1288.555326][ T5148] device_add+0x408/0xb80 [ 1288.555338][ T5148] hci_conn_add_sysfs+0xd5/0x210 [ 1288.555352][ T5148] le_conn_complete_evt+0xf1d/0x1420 [ 1288.555373][ T5148] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1288.555386][ T5148] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 1288.555397][ T5148] ? __asan_memcpy+0x40/0x70 [ 1288.555415][ T5148] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1288.555426][ T5148] ? skb_pull_data+0xfb/0x200 [ 1288.555443][ T5148] hci_le_conn_complete_evt+0x187/0x480 [ 1288.555462][ T5148] hci_event_packet+0x78f/0x1260 [ 1288.555476][ T5148] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1288.555490][ T5148] ? __pfx_hci_event_packet+0x10/0x10 [ 1288.555503][ T5148] ? kcov_remote_start+0x4d3/0x7f0 [ 1288.555517][ T5148] ? lockdep_hardirqs_on+0x98/0x140 [ 1288.555530][ T5148] ? hci_send_to_monitor+0xe2/0x590 [ 1288.555541][ T5148] hci_rx_work+0x3ee/0x1060 [ 1288.555559][ T5148] ? process_one_work+0x868/0x15a0 [ 1288.555569][ T5148] process_one_work+0x93a/0x15a0 [ 1288.555591][ T5148] ? __pfx_process_one_work+0x10/0x10 [ 1288.555606][ T5148] ? assign_work+0x3a1/0x410 [ 1288.555619][ T5148] worker_thread+0x9b0/0xee0 [ 1288.555643][ T5148] kthread+0x711/0x8a0 [ 1288.555658][ T5148] ? __pfx_worker_thread+0x10/0x10 [ 1288.555669][ T5148] ? __pfx_kthread+0x10/0x10 [ 1288.555682][ T5148] ? _raw_spin_unlock_irq+0x23/0x50 [ 1288.555692][ T5148] ? lockdep_hardirqs_on+0x98/0x140 [ 1288.555703][ T5148] ? __pfx_kthread+0x10/0x10 [ 1288.555737][ T5148] ret_from_fork+0x599/0xb30 [ 1288.555758][ T5148] ? __pfx_ret_from_fork+0x10/0x10 [ 1288.555786][ T5148] ? __switch_to_asm+0x39/0x70 [ 1288.555807][ T5148] ? __switch_to_asm+0x33/0x70 [ 1288.555825][ T5148] ? __pfx_kthread+0x10/0x10 [ 1288.555846][ T5148] ret_from_fork_asm+0x1a/0x30 [ 1288.555885][ T5148] [ 1288.619250][ T5148] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1288.847312][ T5148] Bluetooth: hci4: failed to register connection device [ 1289.134926][T20505] can: request_module (can-proto-3) failed. [ 1289.744320][T20524] netlink: 300 bytes leftover after parsing attributes in process `syz.4.4283'. [ 1290.235508][ T7621] team0 (unregistering): Port device team_slave_1 removed [ 1290.269520][T20519] can: request_module (can-proto-3) failed. [ 1290.582106][ T7621] team0 (unregistering): Port device team_slave_0 removed [ 1290.615410][T20528] can: request_module (can-proto-3) failed. [ 1290.947351][ T5148] Bluetooth: hci4: command 0x2016 tx timeout [ 1293.017713][ T5148] Bluetooth: hci4: command 0x2016 tx timeout [ 1293.053376][T20549] can: request_module (can-proto-3) failed. [ 1293.402135][T20566] can: request_module (can-proto-3) failed. [ 1293.576376][T20571] can: request_module (can-proto-3) failed. [ 1294.400535][T20583] can: request_module (can-proto-3) failed. [ 1295.328993][T20596] fuse: Bad value for 'rootmode' [ 1295.333507][T20593] can: request_module (can-proto-3) failed. [ 1295.854889][T20617] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4305'. [ 1296.052925][T20619] can: request_module (can-proto-3) failed. [ 1296.083971][T20622] netlink: 96 bytes leftover after parsing attributes in process `syz.5.4309'. [ 1296.668286][T20634] fuse: Bad value for 'rootmode' [ 1299.715385][T20660] can: request_module (can-proto-3) failed. [ 1300.108600][T20666] can: request_module (can-proto-3) failed. [ 1300.276122][T20676] fuse: Bad value for 'rootmode' [ 1300.371551][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.384029][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1302.397488][ T5148] Bluetooth: hci0: command 0x2016 tx timeout [ 1302.897971][T14943] Bluetooth: hci2: unexpected event for opcode 0x0c47 [ 1304.559630][T20714] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4331'. [ 1305.631029][T20724] can: request_module (can-proto-3) failed. [ 1305.648567][T20727] fuse: Unknown parameter 'use00000000000000000000' [ 1307.140604][T20755] can: request_module (can-proto-3) failed. [ 1307.147824][T20757] can: request_module (can-proto-3) failed. [ 1308.416725][T20781] can: request_module (can-proto-3) failed. [ 1308.735457][T14943] Bluetooth: hci4: unexpected event for opcode 0x0c47 [ 1314.912044][T20810] can: request_module (can-proto-3) failed. [ 1314.943854][T20816] can: request_module (can-proto-3) failed. [ 1315.078927][T20822] netlink: 96 bytes leftover after parsing attributes in process `syz.5.4358'. [ 1315.536433][T20831] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4359'. [ 1316.915714][T20837] can: request_module (can-proto-3) failed. [ 1317.521567][T20848] can: request_module (can-proto-3) failed. [ 1319.147463][T20871] can: request_module (can-proto-3) failed. [ 1323.071001][T20894] can: request_module (can-proto-3) failed. [ 1323.090471][T14943] Bluetooth: hci0: unexpected event for opcode 0x0c47 [ 1323.687453][T20904] can: request_module (can-proto-3) failed. [ 1323.701169][T20909] can: request_module (can-proto-3) failed. [ 1324.331257][T20927] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4379'. [ 1325.078057][T20932] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4380'. [ 1325.985362][T20936] can: request_module (can-proto-3) failed. [ 1330.622645][T20972] can: request_module (can-proto-3) failed. [ 1331.069395][T20987] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4391'. [ 1331.788336][T20991] netlink: 180 bytes leftover after parsing attributes in process `syz.1.4387'. [ 1332.299845][T20993] can: request_module (can-proto-3) failed. [ 1332.706793][T21001] can: request_module (can-proto-3) failed. [ 1332.938142][T14943] Bluetooth: hci0: unexpected event for opcode 0x0c47 [ 1334.088818][T21016] can: request_module (can-proto-3) failed. [ 1334.541097][T20241] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1334.678881][T21029] loop0: detected capacity change from 0 to 256 [ 1334.727511][T20241] usb 6-1: Using ep0 maxpacket: 32 [ 1334.746896][T20241] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1334.761048][T20241] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1334.770175][T20241] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1334.783963][T20241] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1334.803675][T20241] usb 6-1: config 0 descriptor?? [ 1335.200387][T21023] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4397'. [ 1337.288905][ T5998] usb 6-1: USB disconnect, device number 4 [ 1338.748754][T14943] Bluetooth: hci2: unexpected event for opcode 0x0c47 [ 1340.310159][T21070] fuse: Bad value for 'fd' [ 1341.791380][T21077] can: request_module (can-proto-3) failed. [ 1341.884114][T21079] can: request_module (can-proto-3) failed. [ 1343.700166][T21103] fuse: Unknown parameter 'user_id00000000000000000000' [ 1343.825054][T21107] can: request_module (can-proto-3) failed. [ 1344.103130][T21110] can: request_module (can-proto-3) failed. [ 1344.304147][T21123] can: request_module (can-proto-3) failed. [ 1345.467655][T21137] can: request_module (can-proto-3) failed. [ 1346.437466][T14943] Bluetooth: hci4: unexpected event for opcode 0x0c47 [ 1346.961796][T14943] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 1346.972923][T14943] CPU: 1 UID: 0 PID: 14943 Comm: kworker/u9:2 Not tainted syzkaller #0 PREEMPT(full) [ 1346.972951][T14943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1346.972965][T14943] Workqueue: hci0 hci_rx_work [ 1346.972993][T14943] Call Trace: [ 1346.973001][T14943] [ 1346.973010][T14943] dump_stack_lvl+0x189/0x250 [ 1346.973046][T14943] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1346.973067][T14943] ? __pfx__printk+0x10/0x10 [ 1346.973097][T14943] ? kernfs_path_from_node+0x250/0x290 [ 1346.973116][T14943] ? kernfs_path_from_node+0x2f/0x290 [ 1346.973139][T14943] sysfs_create_dir_ns+0x259/0x280 [ 1346.973169][T14943] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1346.973191][T14943] ? do_raw_spin_unlock+0x122/0x240 [ 1346.973219][T14943] kobject_add_internal+0x6ab/0xcc0 [ 1346.973252][T14943] kobject_add+0x155/0x220 [ 1346.973279][T14943] ? __pfx_kobject_add+0x10/0x10 [ 1346.973302][T14943] ? _raw_spin_unlock+0x28/0x50 [ 1346.973324][T14943] ? get_device_parent+0x366/0x3a0 [ 1346.973347][T14943] device_add+0x408/0xb80 [ 1346.973370][T14943] hci_conn_add_sysfs+0xd5/0x210 [ 1346.973393][T14943] le_conn_complete_evt+0xf1d/0x1420 [ 1346.973421][T14943] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1346.973435][T14943] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 1346.973447][T14943] ? __asan_memcpy+0x40/0x70 [ 1346.973466][T14943] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1346.973478][T14943] ? skb_pull_data+0xfb/0x200 [ 1346.973496][T14943] hci_le_conn_complete_evt+0x187/0x480 [ 1346.973514][T14943] hci_event_packet+0x78f/0x1260 [ 1346.973528][T14943] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1346.973544][T14943] ? __pfx_hci_event_packet+0x10/0x10 [ 1346.973557][T14943] ? kcov_remote_start+0x4d3/0x7f0 [ 1346.973571][T14943] ? lockdep_hardirqs_on+0x98/0x140 [ 1346.973585][T14943] ? hci_send_to_monitor+0xe2/0x590 [ 1346.973596][T14943] hci_rx_work+0x3ee/0x1060 [ 1346.973615][T14943] ? process_one_work+0x868/0x15a0 [ 1346.973624][T14943] process_one_work+0x93a/0x15a0 [ 1346.973646][T14943] ? __pfx_process_one_work+0x10/0x10 [ 1346.973661][T14943] ? assign_work+0x3a1/0x410 [ 1346.973674][T14943] worker_thread+0x9b0/0xee0 [ 1346.973698][T14943] kthread+0x711/0x8a0 [ 1346.973713][T14943] ? __pfx_worker_thread+0x10/0x10 [ 1346.973723][T14943] ? __pfx_kthread+0x10/0x10 [ 1346.973736][T14943] ? _raw_spin_unlock_irq+0x23/0x50 [ 1346.973747][T14943] ? lockdep_hardirqs_on+0x98/0x140 [ 1346.973757][T14943] ? __pfx_kthread+0x10/0x10 [ 1346.973770][T14943] ret_from_fork+0x599/0xb30 [ 1346.973782][T14943] ? __pfx_ret_from_fork+0x10/0x10 [ 1346.973797][T14943] ? __switch_to_asm+0x39/0x70 [ 1346.973809][T14943] ? __switch_to_asm+0x33/0x70 [ 1346.973820][T14943] ? __pfx_kthread+0x10/0x10 [ 1346.973833][T14943] ret_from_fork_asm+0x1a/0x30 [ 1346.973855][T14943] [ 1346.973931][T14943] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1347.264633][T14943] Bluetooth: hci0: failed to register connection device [ 1347.512358][T21168] can: request_module (can-proto-3) failed. [ 1347.907949][T21176] fuse: Unknown parameter 'user_id00000000000000000000' [ 1348.131332][T21188] netlink: 96 bytes leftover after parsing attributes in process `syz.5.4433'. [ 1348.165521][ T30] audit: type=1326 audit(1764765382.608:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21187 comm="syz.0.4434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18deb8f749 code=0x7ffc0000 [ 1348.370931][ T30] audit: type=1326 audit(1764765382.608:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21187 comm="syz.0.4434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18deb8f749 code=0x7ffc0000 [ 1348.420255][ T30] audit: type=1326 audit(1764765382.638:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21187 comm="syz.0.4434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18deb8f749 code=0x7ffc0000 [ 1348.452464][ T30] audit: type=1326 audit(1764765382.638:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21187 comm="syz.0.4434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18deb8f749 code=0x7ffc0000 [ 1348.476865][ T30] audit: type=1326 audit(1764765382.638:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21187 comm="syz.0.4434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f18deb8f749 code=0x7ffc0000 [ 1348.500192][ T30] audit: type=1326 audit(1764765382.658:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21187 comm="syz.0.4434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18deb8f749 code=0x7ffc0000 [ 1348.632358][ T30] audit: type=1326 audit(1764765382.668:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21187 comm="syz.0.4434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18deb8f749 code=0x7ffc0000 [ 1348.655318][ T30] audit: type=1326 audit(1764765382.668:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21187 comm="syz.0.4434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18deb8f749 code=0x7ffc0000 [ 1349.345742][T14943] Bluetooth: hci0: command 0x2016 tx timeout [ 1349.462883][ T30] audit: type=1326 audit(1764765382.668:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21187 comm="syz.0.4434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f18deb8f749 code=0x7ffc0000 [ 1349.607353][ T30] audit: type=1326 audit(1764765382.668:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21187 comm="syz.0.4434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18deb8f749 code=0x7ffc0000 [ 1349.745521][T21204] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4439'. [ 1350.424911][T21214] fuse: Bad value for 'fd' [ 1350.492796][T21217] netlink: 'syz.1.4444': attribute type 10 has an invalid length. [ 1350.505570][T21217] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1350.533562][T21219] netlink: 96 bytes leftover after parsing attributes in process `syz.4.4443'. [ 1350.737301][T21223] can: request_module (can-proto-3) failed. [ 1351.578647][ T5148] Bluetooth: hci0: command 0x2016 tx timeout [ 1351.740350][T21237] sg_write: data in/out 49276/1 bytes for SCSI command 0x6-- guessing data in; [ 1351.740350][T21237] program syz.5.4449 not setting count and/or reply_len properly [ 1352.030798][ T5148] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 1352.047413][ T5148] CPU: 0 UID: 0 PID: 5148 Comm: kworker/u9:1 Not tainted syzkaller #0 PREEMPT(full) [ 1352.047442][ T5148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1352.047457][ T5148] Workqueue: hci2 hci_rx_work [ 1352.047484][ T5148] Call Trace: [ 1352.047493][ T5148] [ 1352.047502][ T5148] dump_stack_lvl+0x189/0x250 [ 1352.047531][ T5148] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1352.047554][ T5148] ? __pfx__printk+0x10/0x10 [ 1352.047586][ T5148] ? kernfs_path_from_node+0x250/0x290 [ 1352.047604][ T5148] ? kernfs_path_from_node+0x2f/0x290 [ 1352.047628][ T5148] sysfs_create_dir_ns+0x259/0x280 [ 1352.047650][ T5148] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1352.047671][ T5148] ? do_raw_spin_unlock+0x122/0x240 [ 1352.047701][ T5148] kobject_add_internal+0x6ab/0xcc0 [ 1352.047740][ T5148] kobject_add+0x155/0x220 [ 1352.047769][ T5148] ? __pfx_kobject_add+0x10/0x10 [ 1352.047794][ T5148] ? _raw_spin_unlock+0x28/0x50 [ 1352.047817][ T5148] ? get_device_parent+0x366/0x3a0 [ 1352.047841][ T5148] device_add+0x408/0xb80 [ 1352.047867][ T5148] hci_conn_add_sysfs+0xd5/0x210 [ 1352.047891][ T5148] le_conn_complete_evt+0xf1d/0x1420 [ 1352.047928][ T5148] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1352.047951][ T5148] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 1352.047971][ T5148] ? __asan_memcpy+0x40/0x70 [ 1352.048002][ T5148] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1352.048022][ T5148] ? skb_pull_data+0xfb/0x200 [ 1352.048051][ T5148] hci_le_conn_complete_evt+0x187/0x480 [ 1352.048083][ T5148] hci_event_packet+0x78f/0x1260 [ 1352.048108][ T5148] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1352.048135][ T5148] ? __pfx_hci_event_packet+0x10/0x10 [ 1352.048161][ T5148] ? kcov_remote_start+0x4d3/0x7f0 [ 1352.048186][ T5148] ? lockdep_hardirqs_on+0x98/0x140 [ 1352.048211][ T5148] ? hci_send_to_monitor+0xe2/0x590 [ 1352.048233][ T5148] hci_rx_work+0x3ee/0x1060 [ 1352.048266][ T5148] ? process_one_work+0x868/0x15a0 [ 1352.048284][ T5148] process_one_work+0x93a/0x15a0 [ 1352.048328][ T5148] ? __pfx_process_one_work+0x10/0x10 [ 1352.048356][ T5148] ? assign_work+0x3a1/0x410 [ 1352.048381][ T5148] worker_thread+0x9b0/0xee0 [ 1352.048429][ T5148] kthread+0x711/0x8a0 [ 1352.048456][ T5148] ? __pfx_worker_thread+0x10/0x10 [ 1352.048475][ T5148] ? __pfx_kthread+0x10/0x10 [ 1352.048499][ T5148] ? _raw_spin_unlock_irq+0x23/0x50 [ 1352.048519][ T5148] ? lockdep_hardirqs_on+0x98/0x140 [ 1352.048538][ T5148] ? __pfx_kthread+0x10/0x10 [ 1352.048563][ T5148] ret_from_fork+0x599/0xb30 [ 1352.048585][ T5148] ? __pfx_ret_from_fork+0x10/0x10 [ 1352.048615][ T5148] ? __switch_to_asm+0x39/0x70 [ 1352.048636][ T5148] ? __switch_to_asm+0x33/0x70 [ 1352.048656][ T5148] ? __pfx_kthread+0x10/0x10 [ 1352.048681][ T5148] ret_from_fork_asm+0x1a/0x30 [ 1352.048722][ T5148] [ 1352.048761][ T5148] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1352.337379][ T5148] Bluetooth: hci2: failed to register connection device [ 1352.642464][T21247] can: request_module (can-proto-3) failed. [ 1352.824939][T21253] can: request_module (can-proto-3) failed. [ 1353.266105][T21265] can: request_module (can-proto-3) failed. [ 1353.971110][T21274] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4455'. [ 1354.377373][T14943] Bluetooth: hci2: command 0x0406 tx timeout [ 1354.483491][T21276] fuse: Bad value for 'fd' [ 1354.738912][T21282] netlink: 'syz.0.4459': attribute type 10 has an invalid length. [ 1354.747155][T21280] can: request_module (can-proto-3) failed. [ 1356.458488][T14943] Bluetooth: hci2: command 0x0406 tx timeout [ 1356.780942][T21319] fuse: Bad value for 'fd' [ 1357.026747][T14943] Bluetooth: hci0: unexpected event for opcode 0x0c47 [ 1357.424601][T21331] 9p: Bad value for 'source' [ 1358.447258][T21343] can: request_module (can-proto-3) failed. [ 1358.728212][T21348] can: request_module (can-proto-3) failed. [ 1358.781962][T21364] netlink: 'syz.4.4480': attribute type 10 has an invalid length. [ 1358.866287][T21364] bridge0: port 2(bridge_slave_1) entered disabled state [ 1358.873879][T21364] bridge0: port 1(bridge_slave_0) entered disabled state [ 1359.364137][ T6037] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1359.683726][ T6037] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1359.702294][T21375] can: request_module (can-proto-3) failed. [ 1359.731449][ T6037] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1359.748629][ T6037] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1359.776227][ T6037] usb 6-1: Product: syz [ 1359.787550][ T6037] usb 6-1: Manufacturer: syz [ 1359.802705][ T6037] usb 6-1: SerialNumber: syz [ 1359.839696][ T6037] usb 6-1: config 0 descriptor?? [ 1361.084609][T21369] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4479'. [ 1361.220487][T21388] can: request_module (can-proto-3) failed. [ 1361.391664][T21396] 9p: Bad value for 'source' [ 1361.675249][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.684083][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1363.537949][T19305] usb 6-1: USB disconnect, device number 5 [ 1363.878557][T14943] Bluetooth: hci3: unexpected event for opcode 0x0c47 [ 1364.071010][T21421] sg_write: data in/out 49276/1 bytes for SCSI command 0x6-- guessing data in; [ 1364.071010][T21421] program syz.5.4493 not setting count and/or reply_len properly [ 1364.149589][T21410] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1364.198103][T21410] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1364.413540][T21424] sg_write: data in/out 49276/1 bytes for SCSI command 0x6-- guessing data in; [ 1364.413540][T21424] program syz.5.4494 not setting count and/or reply_len properly [ 1365.263096][ T8127] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1365.280874][ T8127] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1365.334077][ T8127] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1365.367291][ T8127] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1365.405657][T21434] fuse: Unknown parameter 'grou00000000000000000000' [ 1365.694305][T14943] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 1365.706290][T14943] CPU: 0 UID: 0 PID: 14943 Comm: kworker/u9:2 Not tainted syzkaller #0 PREEMPT(full) [ 1365.706318][T14943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1365.706333][T14943] Workqueue: hci2 hci_rx_work [ 1365.706360][T14943] Call Trace: [ 1365.706368][T14943] [ 1365.706379][T14943] dump_stack_lvl+0x189/0x250 [ 1365.706408][T14943] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1365.706430][T14943] ? __pfx__printk+0x10/0x10 [ 1365.706464][T14943] ? kernfs_path_from_node+0x250/0x290 [ 1365.706483][T14943] ? kernfs_path_from_node+0x2f/0x290 [ 1365.706507][T14943] sysfs_create_dir_ns+0x259/0x280 [ 1365.706530][T14943] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1365.706552][T14943] ? do_raw_spin_unlock+0x122/0x240 [ 1365.706591][T14943] kobject_add_internal+0x6ab/0xcc0 [ 1365.706627][T14943] kobject_add+0x155/0x220 [ 1365.706657][T14943] ? __pfx_kobject_add+0x10/0x10 [ 1365.706683][T14943] ? _raw_spin_unlock+0x3f/0x50 [ 1365.706708][T14943] ? get_device_parent+0x366/0x3a0 [ 1365.706734][T14943] device_add+0x408/0xb80 [ 1365.706759][T14943] hci_conn_add_sysfs+0xd5/0x210 [ 1365.706785][T14943] le_conn_complete_evt+0xf1d/0x1420 [ 1365.706821][T14943] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1365.706863][T14943] hci_le_conn_complete_evt+0x187/0x480 [ 1365.706897][T14943] hci_event_packet+0x78f/0x1260 [ 1365.706923][T14943] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1365.706951][T14943] ? __pfx_hci_event_packet+0x10/0x10 [ 1365.706970][T14943] ? __hci_send_to_channel+0x241/0x2f0 [ 1365.706999][T14943] ? kasan_check_range+0x9f/0x2c0 [ 1365.707028][T14943] ? hci_send_to_monitor+0xe2/0x590 [ 1365.707050][T14943] hci_rx_work+0x3ee/0x1060 [ 1365.707084][T14943] ? process_one_work+0x868/0x15a0 [ 1365.707102][T14943] process_one_work+0x93a/0x15a0 [ 1365.707152][T14943] ? __pfx_process_one_work+0x10/0x10 [ 1365.707180][T14943] ? assign_work+0x3a1/0x410 [ 1365.707202][T14943] worker_thread+0x9b0/0xee0 [ 1365.707242][T14943] kthread+0x711/0x8a0 [ 1365.707266][T14943] ? __pfx_worker_thread+0x10/0x10 [ 1365.707285][T14943] ? __pfx_kthread+0x10/0x10 [ 1365.707311][T14943] ? _raw_spin_unlock_irq+0x23/0x50 [ 1365.707332][T14943] ? lockdep_hardirqs_on+0x98/0x140 [ 1365.707352][T14943] ? __pfx_kthread+0x10/0x10 [ 1365.707377][T14943] ret_from_fork+0x599/0xb30 [ 1365.707399][T14943] ? __pfx_ret_from_fork+0x10/0x10 [ 1365.707430][T14943] ? __switch_to_asm+0x39/0x70 [ 1365.707451][T14943] ? __switch_to_asm+0x33/0x70 [ 1365.707472][T14943] ? __pfx_kthread+0x10/0x10 [ 1365.707496][T14943] ret_from_fork_asm+0x1a/0x30 [ 1365.707538][T14943] [ 1365.997519][T14943] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1366.012099][T14943] Bluetooth: hci2: failed to register connection device [ 1366.329721][T21450] 9p: Bad value for 'source' [ 1366.386299][T21446] can: request_module (can-proto-3) failed. [ 1367.331276][T21464] sg_write: data in/out 49276/1 bytes for SCSI command 0x6-- guessing data in; [ 1367.331276][T21464] program syz.5.4502 not setting count and/or reply_len properly [ 1367.693618][T21462] 9p: Bad value for 'source' [ 1368.057756][ T5148] Bluetooth: hci2: command 0x0406 tx timeout [ 1369.023711][T21471] can: request_module (can-proto-3) failed. [ 1369.565412][T14943] Bluetooth: hci2: unexpected event for opcode 0x0c47 [ 1370.489162][T21496] fuse: Bad value for 'fd' [ 1370.741611][T21498] netlink: 300 bytes leftover after parsing attributes in process `syz.2.4512'. [ 1371.972973][T21503] bridge0: port 2(bridge_slave_1) entered disabled state [ 1371.980853][T21503] bridge0: port 1(bridge_slave_0) entered disabled state [ 1373.921298][T21525] 9p: Bad value for 'source' [ 1374.190351][T21503] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1374.334205][T21503] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1374.464021][T21535] 9p: Bad value for 'source' [ 1374.556675][ T7043] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1374.586866][ T7043] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1374.632963][ T7043] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1374.652383][ T7043] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1375.660399][T21548] 9p: Bad value for 'source' [ 1377.193860][T21559] fuse: Unknown parameter '00000000000000000000' [ 1377.609056][T21564] sg_write: data in/out 49276/1 bytes for SCSI command 0x6-- guessing data in; [ 1377.609056][T21564] program syz.0.4531 not setting count and/or reply_len properly [ 1378.179578][T21570] netlink: 96 bytes leftover after parsing attributes in process `syz.0.4534'. [ 1378.347988][T21573] 9p: Bad value for 'source' [ 1378.556184][T21579] 9p: Bad value for 'source' [ 1378.647451][T15810] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1378.952638][T15810] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1380.284969][T15810] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1380.308863][T15810] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1380.316907][T15810] usb 6-1: Product: syz [ 1380.324254][T15810] usb 6-1: Manufacturer: syz [ 1380.331489][T15810] usb 6-1: SerialNumber: syz [ 1380.339128][T15810] usb 6-1: config 0 descriptor?? [ 1380.633596][T21596] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4541'. [ 1381.054691][T21606] 9p: Bad value for 'source' [ 1381.472405][T21617] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4538'. [ 1382.240220][T15810] usb 6-1: USB disconnect, device number 6 [ 1382.577583][T21627] 9p: Bad value for 'source' [ 1383.204365][T21634] fuse: Unknown parameter '0x0000000000000003' [ 1383.809183][T21649] fuse: Unknown parameter 'grou00000000000000000000' [ 1384.064704][ T5148] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 1384.087453][ T5148] CPU: 0 UID: 0 PID: 5148 Comm: kworker/u9:1 Not tainted syzkaller #0 PREEMPT(full) [ 1384.087483][ T5148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1384.087497][ T5148] Workqueue: hci1 hci_rx_work [ 1384.087525][ T5148] Call Trace: [ 1384.087542][ T5148] [ 1384.087551][ T5148] dump_stack_lvl+0x189/0x250 [ 1384.087582][ T5148] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1384.087605][ T5148] ? __pfx__printk+0x10/0x10 [ 1384.087638][ T5148] ? kernfs_path_from_node+0x250/0x290 [ 1384.087658][ T5148] ? kernfs_path_from_node+0x2f/0x290 [ 1384.087682][ T5148] sysfs_create_dir_ns+0x259/0x280 [ 1384.087705][ T5148] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1384.087727][ T5148] ? do_raw_spin_unlock+0x122/0x240 [ 1384.087757][ T5148] kobject_add_internal+0x6ab/0xcc0 [ 1384.087792][ T5148] kobject_add+0x155/0x220 [ 1384.087822][ T5148] ? __pfx_kobject_add+0x10/0x10 [ 1384.087847][ T5148] ? _raw_spin_unlock+0x3f/0x50 [ 1384.087871][ T5148] ? get_device_parent+0x366/0x3a0 [ 1384.087896][ T5148] device_add+0x408/0xb80 [ 1384.087921][ T5148] hci_conn_add_sysfs+0xd5/0x210 [ 1384.087947][ T5148] le_conn_complete_evt+0xf1d/0x1420 [ 1384.087985][ T5148] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1384.088011][ T5148] ? irqentry_exit+0x5dd/0x660 [ 1384.088034][ T5148] ? rcu_is_watching+0x15/0xb0 [ 1384.088070][ T5148] hci_le_conn_complete_evt+0x187/0x480 [ 1384.088103][ T5148] hci_event_packet+0x78f/0x1260 [ 1384.088129][ T5148] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1384.088157][ T5148] ? __pfx_hci_event_packet+0x10/0x10 [ 1384.088184][ T5148] ? hci_rx_work+0xd1/0x1060 [ 1384.088202][ T5148] ? hci_rx_work+0xd0/0x1060 [ 1384.088225][ T5148] ? kasan_check_range+0x9f/0x2c0 [ 1384.088253][ T5148] hci_rx_work+0x3ee/0x1060 [ 1384.088285][ T5148] ? process_one_work+0x868/0x15a0 [ 1384.088303][ T5148] process_one_work+0x93a/0x15a0 [ 1384.088346][ T5148] ? __pfx_process_one_work+0x10/0x10 [ 1384.088375][ T5148] ? assign_work+0x3a1/0x410 [ 1384.088399][ T5148] worker_thread+0x9b0/0xee0 [ 1384.088447][ T5148] kthread+0x711/0x8a0 [ 1384.088474][ T5148] ? __pfx_worker_thread+0x10/0x10 [ 1384.088494][ T5148] ? __pfx_kthread+0x10/0x10 [ 1384.088519][ T5148] ? _raw_spin_unlock_irq+0x23/0x50 [ 1384.088545][ T5148] ? lockdep_hardirqs_on+0x98/0x140 [ 1384.088565][ T5148] ? __pfx_kthread+0x10/0x10 [ 1384.088589][ T5148] ret_from_fork+0x599/0xb30 [ 1384.088611][ T5148] ? __pfx_ret_from_fork+0x10/0x10 [ 1384.088642][ T5148] ? __switch_to_asm+0x39/0x70 [ 1384.088663][ T5148] ? __switch_to_asm+0x33/0x70 [ 1384.088684][ T5148] ? __pfx_kthread+0x10/0x10 [ 1384.088708][ T5148] ret_from_fork_asm+0x1a/0x30 [ 1384.088750][ T5148] [ 1384.089043][ T5148] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1384.306581][ T6037] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1384.360080][ T5148] Bluetooth: hci1: failed to register connection device [ 1384.576681][T21656] 9p: Bad value for 'source' [ 1384.610151][ T6037] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1384.787251][ T6037] usb 6-1: config 0 has no interfaces? [ 1384.792818][ T6037] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1384.822443][ T6037] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1384.846818][ T6037] usb 6-1: config 0 descriptor?? [ 1385.572075][T21667] fuse: Unknown parameter '0x0000000000000003' [ 1385.664629][T21670] can: request_module (can-proto-3) failed. [ 1385.672864][T21674] 9p: Bad value for 'source' [ 1385.786588][T21686] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4567'. [ 1386.275478][ T5148] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 1386.285177][ T5148] CPU: 1 UID: 0 PID: 5148 Comm: kworker/u9:1 Not tainted syzkaller #0 PREEMPT(full) [ 1386.285194][ T5148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1386.285202][ T5148] Workqueue: hci2 hci_rx_work [ 1386.285220][ T5148] Call Trace: [ 1386.285227][ T5148] [ 1386.285234][ T5148] dump_stack_lvl+0x189/0x250 [ 1386.285251][ T5148] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1386.285264][ T5148] ? __pfx__printk+0x10/0x10 [ 1386.285285][ T5148] ? kernfs_path_from_node+0x250/0x290 [ 1386.285303][ T5148] ? kernfs_path_from_node+0x2f/0x290 [ 1386.285325][ T5148] sysfs_create_dir_ns+0x259/0x280 [ 1386.285355][ T5148] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1386.285377][ T5148] ? do_raw_spin_unlock+0x122/0x240 [ 1386.285403][ T5148] kobject_add_internal+0x6ab/0xcc0 [ 1386.285440][ T5148] kobject_add+0x155/0x220 [ 1386.285470][ T5148] ? __pfx_kobject_add+0x10/0x10 [ 1386.285496][ T5148] ? _raw_spin_unlock+0x28/0x50 [ 1386.285520][ T5148] ? get_device_parent+0x366/0x3a0 [ 1386.285543][ T5148] device_add+0x408/0xb80 [ 1386.285563][ T5148] hci_conn_add_sysfs+0xd5/0x210 [ 1386.285585][ T5148] le_conn_complete_evt+0xf1d/0x1420 [ 1386.285617][ T5148] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1386.285639][ T5148] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 1386.285661][ T5148] ? __asan_memcpy+0x40/0x70 [ 1386.285692][ T5148] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1386.285714][ T5148] ? skb_pull_data+0xfb/0x200 [ 1386.285745][ T5148] hci_le_conn_complete_evt+0x187/0x480 [ 1386.285778][ T5148] hci_event_packet+0x78f/0x1260 [ 1386.285805][ T5148] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1386.285833][ T5148] ? __pfx_hci_event_packet+0x10/0x10 [ 1386.285859][ T5148] ? kcov_remote_start+0x4d3/0x7f0 [ 1386.285884][ T5148] ? lockdep_hardirqs_on+0x98/0x140 [ 1386.285925][ T5148] ? hci_send_to_monitor+0xe2/0x590 [ 1386.285946][ T5148] hci_rx_work+0x3ee/0x1060 [ 1386.285978][ T5148] ? process_one_work+0x868/0x15a0 [ 1386.285996][ T5148] process_one_work+0x93a/0x15a0 [ 1386.286040][ T5148] ? __pfx_process_one_work+0x10/0x10 [ 1386.286069][ T5148] ? assign_work+0x3a1/0x410 [ 1386.286094][ T5148] worker_thread+0x9b0/0xee0 [ 1386.286142][ T5148] kthread+0x711/0x8a0 [ 1386.286169][ T5148] ? __pfx_worker_thread+0x10/0x10 [ 1386.286188][ T5148] ? __pfx_kthread+0x10/0x10 [ 1386.286213][ T5148] ? _raw_spin_unlock_irq+0x23/0x50 [ 1386.286233][ T5148] ? lockdep_hardirqs_on+0x98/0x140 [ 1386.286253][ T5148] ? __pfx_kthread+0x10/0x10 [ 1386.286277][ T5148] ret_from_fork+0x599/0xb30 [ 1386.286299][ T5148] ? __pfx_ret_from_fork+0x10/0x10 [ 1386.286328][ T5148] ? __switch_to_asm+0x39/0x70 [ 1386.286358][ T5148] ? __switch_to_asm+0x33/0x70 [ 1386.286377][ T5148] ? __pfx_kthread+0x10/0x10 [ 1386.286398][ T5148] ret_from_fork_asm+0x1a/0x30 [ 1386.286436][ T5148] [ 1386.286474][ T5148] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1386.469894][T19379] Bluetooth: hci1: command 0x2016 tx timeout [ 1386.470713][ T5148] Bluetooth: hci2: failed to register connection device [ 1386.800414][ T6037] usb 6-1: USB disconnect, device number 7 [ 1387.292256][T21705] loop5: detected capacity change from 0 to 32768 [ 1387.307418][T21705] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1387.389289][T21705] XFS (loop5): Ending clean mount [ 1387.401947][T21705] XFS (loop5): Quotacheck needed: Please wait. [ 1387.442479][T21705] XFS (loop5): Quotacheck: Done. [ 1387.506585][T19077] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1387.933509][T21725] fuse: Unknown parameter 'fd0x0000000000000003' [ 1388.003601][T21729] 9p: Bad value for 'source' [ 1388.600418][ T5148] Bluetooth: hci1: command 0x2016 tx timeout [ 1388.619241][T14943] Bluetooth: hci2: command 0x0406 tx timeout [ 1388.930896][T21733] IPv6: sit1: Disabled Multicast RS [ 1389.202595][T21735] can: request_module (can-proto-3) failed. [ 1390.305056][ T5148] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 1390.315998][ T5148] CPU: 1 UID: 0 PID: 5148 Comm: kworker/u9:1 Not tainted syzkaller #0 PREEMPT(full) [ 1390.316113][ T5148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1390.316124][ T5148] Workqueue: hci3 hci_rx_work [ 1390.316143][ T5148] Call Trace: [ 1390.316152][ T5148] [ 1390.316160][ T5148] dump_stack_lvl+0x189/0x250 [ 1390.316177][ T5148] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1390.316190][ T5148] ? __pfx__printk+0x10/0x10 [ 1390.316220][ T5148] ? kernfs_path_from_node+0x250/0x290 [ 1390.316231][ T5148] ? kernfs_path_from_node+0x2f/0x290 [ 1390.316244][ T5148] sysfs_create_dir_ns+0x259/0x280 [ 1390.316256][ T5148] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1390.316268][ T5148] ? do_raw_spin_unlock+0x122/0x240 [ 1390.316287][ T5148] kobject_add_internal+0x6ab/0xcc0 [ 1390.316307][ T5148] kobject_add+0x155/0x220 [ 1390.316323][ T5148] ? __pfx_kobject_add+0x10/0x10 [ 1390.316337][ T5148] ? _raw_spin_unlock+0x28/0x50 [ 1390.316351][ T5148] ? get_device_parent+0x366/0x3a0 [ 1390.316365][ T5148] device_add+0x408/0xb80 [ 1390.316378][ T5148] hci_conn_add_sysfs+0xd5/0x210 [ 1390.316395][ T5148] le_conn_complete_evt+0xf1d/0x1420 [ 1390.316416][ T5148] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1390.316429][ T5148] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 1390.316440][ T5148] ? __asan_memcpy+0x40/0x70 [ 1390.316460][ T5148] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1390.316472][ T5148] ? skb_pull_data+0xfb/0x200 [ 1390.316490][ T5148] hci_le_conn_complete_evt+0x187/0x480 [ 1390.316508][ T5148] hci_event_packet+0x78f/0x1260 [ 1390.316523][ T5148] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1390.316539][ T5148] ? __pfx_hci_event_packet+0x10/0x10 [ 1390.316552][ T5148] ? kcov_remote_start+0x4d3/0x7f0 [ 1390.316565][ T5148] ? lockdep_hardirqs_on+0x98/0x140 [ 1390.316579][ T5148] ? hci_send_to_monitor+0xe2/0x590 [ 1390.316591][ T5148] hci_rx_work+0x3ee/0x1060 [ 1390.316663][ T5148] ? process_one_work+0x868/0x15a0 [ 1390.316675][ T5148] process_one_work+0x93a/0x15a0 [ 1390.316698][ T5148] ? __pfx_process_one_work+0x10/0x10 [ 1390.316715][ T5148] ? assign_work+0x3a1/0x410 [ 1390.316728][ T5148] worker_thread+0x9b0/0xee0 [ 1390.316754][ T5148] kthread+0x711/0x8a0 [ 1390.316769][ T5148] ? __pfx_worker_thread+0x10/0x10 [ 1390.316780][ T5148] ? __pfx_kthread+0x10/0x10 [ 1390.316794][ T5148] ? _raw_spin_unlock_irq+0x23/0x50 [ 1390.316805][ T5148] ? lockdep_hardirqs_on+0x98/0x140 [ 1390.316816][ T5148] ? __pfx_kthread+0x10/0x10 [ 1390.316829][ T5148] ret_from_fork+0x599/0xb30 [ 1390.316842][ T5148] ? __pfx_ret_from_fork+0x10/0x10 [ 1390.316857][ T5148] ? __switch_to_asm+0x39/0x70 [ 1390.316878][ T5148] ? __switch_to_asm+0x33/0x70 [ 1390.316907][ T5148] ? __pfx_kthread+0x10/0x10 [ 1390.316921][ T5148] ret_from_fork_asm+0x1a/0x30 [ 1390.316945][ T5148] [ 1390.316973][ T5148] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1390.602656][ T5148] Bluetooth: hci3: failed to register connection device [ 1390.697362][T14943] Bluetooth: hci2: command 0x0406 tx timeout [ 1390.898183][T21759] fuse: Unknown parameter 'fd0x0000000000000003' [ 1390.959831][T21763] netlink: 'syz.4.4590': attribute type 10 has an invalid length. [ 1391.069107][T21762] bridge0: vlan filtering disabled, automatically disabling multicast vlan snooping [ 1391.101982][T21767] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4592'. [ 1391.158815][T21768] netlink: 'syz.0.4592': attribute type 10 has an invalid length. [ 1391.307970][T21774] fuse: Unknown parameter 'grou00000000000000000000' [ 1391.477483][T21776] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4596'. [ 1391.676754][T14943] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 1391.686476][T14943] CPU: 1 UID: 0 PID: 14943 Comm: kworker/u9:2 Not tainted syzkaller #0 PREEMPT(full) [ 1391.686503][T14943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1391.686518][T14943] Workqueue: hci4 hci_rx_work [ 1391.686544][T14943] Call Trace: [ 1391.686554][T14943] [ 1391.686565][T14943] dump_stack_lvl+0x189/0x250 [ 1391.686594][T14943] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1391.686617][T14943] ? __pfx__printk+0x10/0x10 [ 1391.686648][T14943] ? kernfs_path_from_node+0x250/0x290 [ 1391.686667][T14943] ? kernfs_path_from_node+0x2f/0x290 [ 1391.686692][T14943] sysfs_create_dir_ns+0x259/0x280 [ 1391.686715][T14943] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1391.686737][T14943] ? do_raw_spin_unlock+0x122/0x240 [ 1391.686775][T14943] kobject_add_internal+0x6ab/0xcc0 [ 1391.686810][T14943] kobject_add+0x155/0x220 [ 1391.686841][T14943] ? __pfx_kobject_add+0x10/0x10 [ 1391.686867][T14943] ? _raw_spin_unlock+0x3f/0x50 [ 1391.686890][T14943] ? get_device_parent+0x366/0x3a0 [ 1391.686916][T14943] device_add+0x408/0xb80 [ 1391.686941][T14943] hci_conn_add_sysfs+0xd5/0x210 [ 1391.686966][T14943] le_conn_complete_evt+0xf1d/0x1420 [ 1391.686993][T14943] ? irqentry_exit+0x5dd/0x660 [ 1391.687022][T14943] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1391.687056][T14943] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 1391.687087][T14943] hci_le_conn_complete_evt+0x187/0x480 [ 1391.687120][T14943] hci_event_packet+0x78f/0x1260 [ 1391.687150][T14943] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1391.687173][T14943] ? __pfx_hci_event_packet+0x10/0x10 [ 1391.687191][T14943] ? __hci_send_to_channel+0x241/0x2f0 [ 1391.687215][T14943] ? kasan_check_range+0x9f/0x2c0 [ 1391.687239][T14943] ? hci_send_to_monitor+0xe2/0x590 [ 1391.687258][T14943] hci_rx_work+0x3ee/0x1060 [ 1391.687291][T14943] ? process_one_work+0x868/0x15a0 [ 1391.687310][T14943] process_one_work+0x93a/0x15a0 [ 1391.687353][T14943] ? __pfx_process_one_work+0x10/0x10 [ 1391.687382][T14943] ? assign_work+0x3a1/0x410 [ 1391.687407][T14943] worker_thread+0x9b0/0xee0 [ 1391.687455][T14943] kthread+0x711/0x8a0 [ 1391.687482][T14943] ? __pfx_worker_thread+0x10/0x10 [ 1391.687500][T14943] ? __pfx_kthread+0x10/0x10 [ 1391.687525][T14943] ? _raw_spin_unlock_irq+0x23/0x50 [ 1391.687545][T14943] ? lockdep_hardirqs_on+0x98/0x140 [ 1391.687565][T14943] ? __pfx_kthread+0x10/0x10 [ 1391.687590][T14943] ret_from_fork+0x599/0xb30 [ 1391.687612][T14943] ? __pfx_ret_from_fork+0x10/0x10 [ 1391.687643][T14943] ? __switch_to_asm+0x39/0x70 [ 1391.687665][T14943] ? __switch_to_asm+0x33/0x70 [ 1391.687686][T14943] ? __pfx_kthread+0x10/0x10 [ 1391.687710][T14943] ret_from_fork_asm+0x1a/0x30 [ 1391.687759][T14943] [ 1391.977131][T14943] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1391.993930][T14943] Bluetooth: hci4: failed to register connection device [ 1392.123958][T21785] 9p: Bad value for 'source' [ 1392.617248][T14943] Bluetooth: hci3: command 0x2016 tx timeout [ 1392.845473][T21798] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4597'. [ 1393.193460][T21803] netlink: 96 bytes leftover after parsing attributes in process `syz.2.4602'. [ 1393.369961][T21807] fuse: Unknown parameter 'fd0x0000000000000003' [ 1393.974091][T21827] fuse: Unknown parameter 'group_id00000000000000000000' [ 1394.074550][T19379] Bluetooth: hci4: command 0x2016 tx timeout [ 1394.626099][T21847] fuse: Bad value for 'fd' [ 1394.735742][T21853] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4620'. [ 1394.777324][T14943] Bluetooth: hci3: command 0x2016 tx timeout [ 1394.831014][T21855] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4619'. [ 1395.095591][T21866] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4624'. [ 1395.182974][T21868] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4625'. [ 1395.978857][ T5148] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 1395.989205][ T5148] CPU: 1 UID: 0 PID: 5148 Comm: kworker/u9:1 Not tainted syzkaller #0 PREEMPT(full) [ 1395.989234][ T5148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1395.989248][ T5148] Workqueue: hci1 hci_rx_work [ 1395.989275][ T5148] Call Trace: [ 1395.989284][ T5148] [ 1395.989293][ T5148] dump_stack_lvl+0x189/0x250 [ 1395.989323][ T5148] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1395.989345][ T5148] ? __pfx__printk+0x10/0x10 [ 1395.989377][ T5148] ? kernfs_path_from_node+0x250/0x290 [ 1395.989396][ T5148] ? kernfs_path_from_node+0x2f/0x290 [ 1395.989420][ T5148] sysfs_create_dir_ns+0x259/0x280 [ 1395.989442][ T5148] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1395.989464][ T5148] ? do_raw_spin_unlock+0x122/0x240 [ 1395.989493][ T5148] kobject_add_internal+0x6ab/0xcc0 [ 1395.989526][ T5148] kobject_add+0x155/0x220 [ 1395.989553][ T5148] ? __pfx_kobject_add+0x10/0x10 [ 1395.989576][ T5148] ? _raw_spin_unlock+0x28/0x50 [ 1395.989599][ T5148] ? get_device_parent+0x366/0x3a0 [ 1395.989624][ T5148] device_add+0x408/0xb80 [ 1395.989648][ T5148] hci_conn_add_sysfs+0xd5/0x210 [ 1395.989673][ T5148] le_conn_complete_evt+0xf1d/0x1420 [ 1395.989708][ T5148] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1395.989730][ T5148] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 1395.989750][ T5148] ? __asan_memcpy+0x40/0x70 [ 1395.989782][ T5148] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1395.989802][ T5148] ? skb_pull_data+0xfb/0x200 [ 1395.989832][ T5148] hci_le_conn_complete_evt+0x187/0x480 [ 1395.989865][ T5148] hci_event_packet+0x78f/0x1260 [ 1395.989890][ T5148] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1395.989917][ T5148] ? __pfx_hci_event_packet+0x10/0x10 [ 1395.989944][ T5148] ? kcov_remote_start+0x2e/0x7f0 [ 1395.989969][ T5148] ? hci_send_to_monitor+0xe2/0x590 [ 1395.989990][ T5148] hci_rx_work+0x3ee/0x1060 [ 1395.990023][ T5148] ? process_one_work+0x868/0x15a0 [ 1395.990042][ T5148] process_one_work+0x93a/0x15a0 [ 1395.990096][ T5148] ? __pfx_process_one_work+0x10/0x10 [ 1395.990126][ T5148] ? assign_work+0x3a1/0x410 [ 1395.990155][ T5148] worker_thread+0x9b0/0xee0 [ 1395.990202][ T5148] kthread+0x711/0x8a0 [ 1395.990229][ T5148] ? __pfx_worker_thread+0x10/0x10 [ 1395.990248][ T5148] ? __pfx_kthread+0x10/0x10 [ 1395.990283][ T5148] ? _raw_spin_unlock_irq+0x23/0x50 [ 1395.990304][ T5148] ? lockdep_hardirqs_on+0x98/0x140 [ 1395.990324][ T5148] ? __pfx_kthread+0x10/0x10 [ 1395.990347][ T5148] ret_from_fork+0x599/0xb30 [ 1395.990369][ T5148] ? __pfx_ret_from_fork+0x10/0x10 [ 1395.990398][ T5148] ? __switch_to_asm+0x39/0x70 [ 1395.990419][ T5148] ? __switch_to_asm+0x33/0x70 [ 1395.990439][ T5148] ? __pfx_kthread+0x10/0x10 [ 1395.990463][ T5148] ret_from_fork_asm+0x1a/0x30 [ 1395.990503][ T5148] [ 1395.990598][ T5148] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1396.147377][T14943] Bluetooth: hci4: command 0x2016 tx timeout [ 1396.152358][ T5148] Bluetooth: hci1: failed to register connection device [ 1396.564088][T21890] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4633'. [ 1396.677385][T21892] can: request_module (can-proto-3) failed. [ 1398.385803][T14943] Bluetooth: hci1: unexpected event for opcode 0x0c47 [ 1398.568443][T21914] 9p: Bad value for 'source' [ 1398.668347][T21917] 9p: Bad value for 'source' [ 1399.186974][ T5148] Bluetooth: hci4: unexpected event for opcode 0x0c47 [ 1400.618219][T14943] Bluetooth: hci1: command 0x2016 tx timeout [ 1401.683541][T14943] Bluetooth: hci3: unexpected event for opcode 0x0c47 [ 1402.286048][T21968] 9p: Bad value for 'source' [ 1402.527405][T21976] netlink: 300 bytes leftover after parsing attributes in process `syz.0.4659'. [ 1402.600412][T21978] 9p: Bad value for 'source' [ 1402.786361][T21984] can: request_module (can-proto-3) failed. [ 1402.968647][T21992] 9p: Bad value for 'source' [ 1404.428915][T22010] fuse: Bad value for 'fd' [ 1404.680613][T22012] can: request_module (can-proto-3) failed. [ 1405.467810][T22026] netlink: 300 bytes leftover after parsing attributes in process `syz.0.4672'. [ 1405.733774][T22032] 9p: Bad value for 'source' [ 1406.068255][T14943] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 1406.077996][T14943] CPU: 0 UID: 0 PID: 14943 Comm: kworker/u9:2 Not tainted syzkaller #0 PREEMPT(full) [ 1406.078024][T14943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1406.078038][T14943] Workqueue: hci2 hci_rx_work [ 1406.078063][T14943] Call Trace: [ 1406.078071][T14943] [ 1406.078079][T14943] dump_stack_lvl+0x189/0x250 [ 1406.078104][T14943] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1406.078136][T14943] ? __pfx__printk+0x10/0x10 [ 1406.078166][T14943] ? kernfs_path_from_node+0x250/0x290 [ 1406.078184][T14943] ? kernfs_path_from_node+0x2f/0x290 [ 1406.078209][T14943] sysfs_create_dir_ns+0x259/0x280 [ 1406.078232][T14943] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1406.078252][T14943] ? do_raw_spin_unlock+0x122/0x240 [ 1406.078281][T14943] kobject_add_internal+0x6ab/0xcc0 [ 1406.078316][T14943] kobject_add+0x155/0x220 [ 1406.078346][T14943] ? __pfx_kobject_add+0x10/0x10 [ 1406.078370][T14943] ? _raw_spin_unlock+0x28/0x50 [ 1406.078393][T14943] ? get_device_parent+0x366/0x3a0 [ 1406.078419][T14943] device_add+0x408/0xb80 [ 1406.078444][T14943] hci_conn_add_sysfs+0xd5/0x210 [ 1406.078468][T14943] le_conn_complete_evt+0xf1d/0x1420 [ 1406.078505][T14943] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1406.078528][T14943] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 1406.078549][T14943] ? __asan_memcpy+0x40/0x70 [ 1406.078580][T14943] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1406.078601][T14943] ? skb_pull_data+0xfb/0x200 [ 1406.078630][T14943] hci_le_conn_complete_evt+0x187/0x480 [ 1406.078677][T14943] hci_event_packet+0x78f/0x1260 [ 1406.078705][T14943] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1406.078733][T14943] ? __pfx_hci_event_packet+0x10/0x10 [ 1406.078757][T14943] ? kcov_remote_start+0x4d3/0x7f0 [ 1406.078780][T14943] ? lockdep_hardirqs_on+0x98/0x140 [ 1406.078805][T14943] ? hci_send_to_monitor+0xe2/0x590 [ 1406.078827][T14943] hci_rx_work+0x3ee/0x1060 [ 1406.078861][T14943] ? process_one_work+0x868/0x15a0 [ 1406.078880][T14943] process_one_work+0x93a/0x15a0 [ 1406.078922][T14943] ? __pfx_process_one_work+0x10/0x10 [ 1406.078951][T14943] ? assign_work+0x3a1/0x410 [ 1406.078975][T14943] worker_thread+0x9b0/0xee0 [ 1406.079019][T14943] kthread+0x711/0x8a0 [ 1406.079046][T14943] ? __pfx_worker_thread+0x10/0x10 [ 1406.079064][T14943] ? __pfx_kthread+0x10/0x10 [ 1406.079087][T14943] ? _raw_spin_unlock_irq+0x23/0x50 [ 1406.079116][T14943] ? lockdep_hardirqs_on+0x98/0x140 [ 1406.079137][T14943] ? __pfx_kthread+0x10/0x10 [ 1406.079160][T14943] ret_from_fork+0x599/0xb30 [ 1406.079179][T14943] ? __pfx_ret_from_fork+0x10/0x10 [ 1406.079205][T14943] ? __switch_to_asm+0x39/0x70 [ 1406.079226][T14943] ? __switch_to_asm+0x33/0x70 [ 1406.079247][T14943] ? __pfx_kthread+0x10/0x10 [ 1406.079269][T14943] ret_from_fork_asm+0x1a/0x30 [ 1406.079309][T14943] [ 1406.079340][T14943] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1406.384680][T14943] Bluetooth: hci2: failed to register connection device [ 1406.404175][T22041] 9p: Bad value for 'source' [ 1406.416149][T22040] can: request_module (can-proto-3) failed. [ 1407.859977][T22058] can: request_module (can-proto-3) failed. [ 1408.457645][T14943] Bluetooth: hci2: command 0x0406 tx timeout [ 1409.907777][T22069] can: request_module (can-proto-3) failed. [ 1410.250138][T22084] netlink: 300 bytes leftover after parsing attributes in process `syz.2.4685'. [ 1410.333483][T22085] can: request_module (can-proto-3) failed. [ 1410.453069][T22092] 9p: Bad value for 'source' [ 1410.554463][T14943] Bluetooth: hci2: command 0x0406 tx timeout [ 1412.670262][T22117] 9p: Bad value for 'source' [ 1413.504876][ T5148] Bluetooth: hci0: unexpected event for opcode 0x0c47 [ 1414.322751][T22132] 9p: Bad value for 'source' [ 1415.269014][T22142] netlink: 292 bytes leftover after parsing attributes in process `syz.5.4698'. [ 1415.299947][T22138] fuse: Unknown parameter '0xffffffffffffffff' [ 1416.452260][T22157] 9p: Bad value for 'source' [ 1416.546329][ T5148] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 1416.556057][ T5148] CPU: 1 UID: 0 PID: 5148 Comm: kworker/u9:1 Not tainted syzkaller #0 PREEMPT(full) [ 1416.556084][ T5148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1416.556098][ T5148] Workqueue: hci3 hci_rx_work [ 1416.556125][ T5148] Call Trace: [ 1416.556136][ T5148] [ 1416.556147][ T5148] dump_stack_lvl+0x189/0x250 [ 1416.556177][ T5148] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1416.556199][ T5148] ? __pfx__printk+0x10/0x10 [ 1416.556232][ T5148] ? kernfs_path_from_node+0x250/0x290 [ 1416.556251][ T5148] ? kernfs_path_from_node+0x2f/0x290 [ 1416.556275][ T5148] sysfs_create_dir_ns+0x259/0x280 [ 1416.556297][ T5148] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1416.556318][ T5148] ? do_raw_spin_unlock+0x122/0x240 [ 1416.556348][ T5148] kobject_add_internal+0x6ab/0xcc0 [ 1416.556382][ T5148] kobject_add+0x155/0x220 [ 1416.556412][ T5148] ? __pfx_kobject_add+0x10/0x10 [ 1416.556438][ T5148] ? _raw_spin_unlock+0x3f/0x50 [ 1416.556461][ T5148] ? get_device_parent+0x366/0x3a0 [ 1416.556487][ T5148] device_add+0x408/0xb80 [ 1416.556511][ T5148] hci_conn_add_sysfs+0xd5/0x210 [ 1416.556537][ T5148] le_conn_complete_evt+0xf1d/0x1420 [ 1416.556573][ T5148] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1416.556599][ T5148] ? irqentry_exit+0x5dd/0x660 [ 1416.556618][ T5148] ? rcu_is_watching+0x15/0xb0 [ 1416.556653][ T5148] hci_le_conn_complete_evt+0x187/0x480 [ 1416.556686][ T5148] hci_event_packet+0x78f/0x1260 [ 1416.556713][ T5148] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1416.556740][ T5148] ? __pfx_hci_event_packet+0x10/0x10 [ 1416.556767][ T5148] ? kcov_remote_start+0x2e/0x7f0 [ 1416.556794][ T5148] ? hci_send_to_monitor+0xe2/0x590 [ 1416.556817][ T5148] hci_rx_work+0x3ee/0x1060 [ 1416.556850][ T5148] ? process_one_work+0x868/0x15a0 [ 1416.556868][ T5148] process_one_work+0x93a/0x15a0 [ 1416.556912][ T5148] ? __pfx_process_one_work+0x10/0x10 [ 1416.556941][ T5148] ? assign_work+0x3a1/0x410 [ 1416.556966][ T5148] worker_thread+0x9b0/0xee0 [ 1416.557014][ T5148] kthread+0x711/0x8a0 [ 1416.557048][ T5148] ? __pfx_worker_thread+0x10/0x10 [ 1416.557068][ T5148] ? __pfx_kthread+0x10/0x10 [ 1416.557093][ T5148] ? _raw_spin_unlock_irq+0x23/0x50 [ 1416.557112][ T5148] ? lockdep_hardirqs_on+0x98/0x140 [ 1416.557135][ T5148] ? __pfx_kthread+0x10/0x10 [ 1416.557155][ T5148] ret_from_fork+0x599/0xb30 [ 1416.557176][ T5148] ? __pfx_ret_from_fork+0x10/0x10 [ 1416.557207][ T5148] ? __switch_to_asm+0x39/0x70 [ 1416.557228][ T5148] ? __switch_to_asm+0x33/0x70 [ 1416.557248][ T5148] ? __pfx_kthread+0x10/0x10 [ 1416.557272][ T5148] ret_from_fork_asm+0x1a/0x30 [ 1416.557314][ T5148] [ 1416.814265][ T5148] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1416.838341][ T5148] Bluetooth: hci3: failed to register connection device [ 1416.944421][T22160] can: request_module (can-proto-3) failed. [ 1417.145924][T22172] fuse: Unknown parameter 'grou00000000000000000000' [ 1417.189254][T22175] 9p: Bad value for 'source' [ 1417.460766][ T5148] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 1417.471059][ T5148] CPU: 1 UID: 0 PID: 5148 Comm: kworker/u9:1 Not tainted syzkaller #0 PREEMPT(full) [ 1417.471087][ T5148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1417.471101][ T5148] Workqueue: hci0 hci_rx_work [ 1417.471128][ T5148] Call Trace: [ 1417.471139][ T5148] [ 1417.471149][ T5148] dump_stack_lvl+0x189/0x250 [ 1417.471179][ T5148] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1417.471201][ T5148] ? __pfx__printk+0x10/0x10 [ 1417.471233][ T5148] ? kernfs_path_from_node+0x250/0x290 [ 1417.471252][ T5148] ? kernfs_path_from_node+0x2f/0x290 [ 1417.471276][ T5148] sysfs_create_dir_ns+0x259/0x280 [ 1417.471299][ T5148] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1417.471321][ T5148] ? do_raw_spin_unlock+0x122/0x240 [ 1417.471351][ T5148] kobject_add_internal+0x6ab/0xcc0 [ 1417.471385][ T5148] kobject_add+0x155/0x220 [ 1417.471415][ T5148] ? __pfx_kobject_add+0x10/0x10 [ 1417.471440][ T5148] ? _raw_spin_unlock+0x3f/0x50 [ 1417.471464][ T5148] ? get_device_parent+0x366/0x3a0 [ 1417.471489][ T5148] device_add+0x408/0xb80 [ 1417.471514][ T5148] hci_conn_add_sysfs+0xd5/0x210 [ 1417.471540][ T5148] le_conn_complete_evt+0xf1d/0x1420 [ 1417.471566][ T5148] ? lockdep_hardirqs_on+0x98/0x140 [ 1417.471597][ T5148] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1417.471627][ T5148] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1417.471651][ T5148] ? skb_pull_data+0xfb/0x200 [ 1417.471683][ T5148] hci_le_conn_complete_evt+0x187/0x480 [ 1417.471716][ T5148] hci_event_packet+0x78f/0x1260 [ 1417.471742][ T5148] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1417.471770][ T5148] ? __pfx_hci_event_packet+0x10/0x10 [ 1417.471798][ T5148] ? kcov_remote_start+0x2e/0x7f0 [ 1417.471826][ T5148] ? hci_send_to_monitor+0xe2/0x590 [ 1417.471848][ T5148] hci_rx_work+0x3ee/0x1060 [ 1417.471881][ T5148] ? process_one_work+0x868/0x15a0 [ 1417.471899][ T5148] process_one_work+0x93a/0x15a0 [ 1417.471942][ T5148] ? __pfx_process_one_work+0x10/0x10 [ 1417.471971][ T5148] ? assign_work+0x3a1/0x410 [ 1417.472002][ T5148] worker_thread+0x9b0/0xee0 [ 1417.472050][ T5148] kthread+0x711/0x8a0 [ 1417.472077][ T5148] ? __pfx_worker_thread+0x10/0x10 [ 1417.472098][ T5148] ? __pfx_kthread+0x10/0x10 [ 1417.472123][ T5148] ? _raw_spin_unlock_irq+0x23/0x50 [ 1417.472142][ T5148] ? lockdep_hardirqs_on+0x98/0x140 [ 1417.472162][ T5148] ? __pfx_kthread+0x10/0x10 [ 1417.472187][ T5148] ret_from_fork+0x599/0xb30 [ 1417.472209][ T5148] ? __pfx_ret_from_fork+0x10/0x10 [ 1417.472237][ T5148] ? __switch_to_asm+0x39/0x70 [ 1417.472259][ T5148] ? __switch_to_asm+0x33/0x70 [ 1417.472280][ T5148] ? __pfx_kthread+0x10/0x10 [ 1417.472304][ T5148] ret_from_fork_asm+0x1a/0x30 [ 1417.472346][ T5148] [ 1417.472559][ T5148] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1417.778056][ T5148] Bluetooth: hci0: failed to register connection device [ 1418.133891][T22183] can: request_module (can-proto-3) failed. [ 1418.859906][T14943] Bluetooth: hci3: command 0x2016 tx timeout [ 1419.501816][T22211] 9p: Bad value for 'source' [ 1419.522603][T22207] can: request_module (can-proto-3) failed. [ 1419.817290][T19379] Bluetooth: hci0: command 0x2016 tx timeout [ 1421.479831][T22232] 9p: Bad value for 'source' [ 1421.486435][ T5148] Bluetooth: hci4: unexpected event for opcode 0x0c47 [ 1421.487303][T14943] Bluetooth: hci3: command 0x2016 tx timeout [ 1421.907302][T19379] Bluetooth: hci0: command 0x2016 tx timeout [ 1422.763737][T22264] can: request_module (can-proto-3) failed. [ 1423.077771][T19379] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 1423.088785][T19379] CPU: 0 UID: 0 PID: 19379 Comm: kworker/u9:3 Not tainted syzkaller #0 PREEMPT(full) [ 1423.088813][T19379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1423.088822][T19379] Workqueue: hci3 hci_rx_work [ 1423.088841][T19379] Call Trace: [ 1423.088846][T19379] [ 1423.088851][T19379] dump_stack_lvl+0x189/0x250 [ 1423.088869][T19379] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1423.088881][T19379] ? __pfx__printk+0x10/0x10 [ 1423.088909][T19379] ? kernfs_path_from_node+0x250/0x290 [ 1423.088928][T19379] ? kernfs_path_from_node+0x2f/0x290 [ 1423.088950][T19379] sysfs_create_dir_ns+0x259/0x280 [ 1423.088972][T19379] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1423.088994][T19379] ? do_raw_spin_unlock+0x122/0x240 [ 1423.089023][T19379] kobject_add_internal+0x6ab/0xcc0 [ 1423.089106][T19379] kobject_add+0x155/0x220 [ 1423.089134][T19379] ? __pfx_kobject_add+0x10/0x10 [ 1423.089150][T19379] ? _raw_spin_unlock+0x28/0x50 [ 1423.089180][T19379] ? get_device_parent+0x366/0x3a0 [ 1423.089195][T19379] device_add+0x408/0xb80 [ 1423.089208][T19379] hci_conn_add_sysfs+0xd5/0x210 [ 1423.089223][T19379] le_conn_complete_evt+0xf1d/0x1420 [ 1423.089245][T19379] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1423.089258][T19379] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 1423.089270][T19379] ? __asan_memcpy+0x40/0x70 [ 1423.089289][T19379] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1423.089300][T19379] ? skb_pull_data+0xfb/0x200 [ 1423.089387][T19379] hci_le_conn_complete_evt+0x187/0x480 [ 1423.089406][T19379] hci_event_packet+0x78f/0x1260 [ 1423.089421][T19379] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1423.089450][T19379] ? __pfx_hci_event_packet+0x10/0x10 [ 1423.089464][T19379] ? kcov_remote_start+0x4d3/0x7f0 [ 1423.089482][T19379] ? lockdep_hardirqs_on+0x98/0x140 [ 1423.089503][T19379] ? hci_send_to_monitor+0xe2/0x590 [ 1423.089516][T19379] hci_rx_work+0x3ee/0x1060 [ 1423.089535][T19379] ? process_one_work+0x868/0x15a0 [ 1423.089547][T19379] process_one_work+0x93a/0x15a0 [ 1423.089575][T19379] ? __pfx_process_one_work+0x10/0x10 [ 1423.089592][T19379] ? assign_work+0x3a1/0x410 [ 1423.089605][T19379] worker_thread+0x9b0/0xee0 [ 1423.089631][T19379] kthread+0x711/0x8a0 [ 1423.089647][T19379] ? __pfx_worker_thread+0x10/0x10 [ 1423.089657][T19379] ? __pfx_kthread+0x10/0x10 [ 1423.089671][T19379] ? _raw_spin_unlock_irq+0x23/0x50 [ 1423.089683][T19379] ? lockdep_hardirqs_on+0x98/0x140 [ 1423.089693][T19379] ? __pfx_kthread+0x10/0x10 [ 1423.089706][T19379] ret_from_fork+0x599/0xb30 [ 1423.089718][T19379] ? __pfx_ret_from_fork+0x10/0x10 [ 1423.089734][T19379] ? __switch_to_asm+0x39/0x70 [ 1423.089746][T19379] ? __switch_to_asm+0x33/0x70 [ 1423.089757][T19379] ? __pfx_kthread+0x10/0x10 [ 1423.089771][T19379] ret_from_fork_asm+0x1a/0x30 [ 1423.089796][T19379] [ 1423.089914][T19379] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1423.122878][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.123984][T19379] Bluetooth: hci3: failed to register connection device [ 1423.127186][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1424.784434][T22294] 9p: Bad value for 'source' [ 1425.177350][T19379] Bluetooth: hci3: command 0x2016 tx timeout [ 1426.005744][T19305] kernel write not supported for file bpf-prog (pid: 19305 comm: kworker/1:7) [ 1426.360606][T22333] can: request_module (can-proto-3) failed. [ 1426.714304][T22347] 9p: Bad value for 'source' [ 1427.267336][T22240] Bluetooth: hci3: command 0x2016 tx timeout [ 1428.542669][T22375] 9p: Bad value for 'source' [ 1428.617461][T22377] can: request_module (can-proto-3) failed. [ 1429.018844][T22395] 9p: Bad value for 'source' [ 1429.211538][ T30] kauditd_printk_skb: 76 callbacks suppressed [ 1429.212112][ T30] audit: type=1326 audit(1764765463.658:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22403 comm="syz.4.4773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04bfb8f749 code=0x7ffc0000 [ 1429.418590][ T30] audit: type=1326 audit(1764765463.658:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22403 comm="syz.4.4773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04bfb8f749 code=0x7ffc0000 [ 1429.518569][ T30] audit: type=1326 audit(1764765463.748:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22403 comm="syz.4.4773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=117 compat=0 ip=0x7f04bfb8f749 code=0x7ffc0000 [ 1429.582061][ T30] audit: type=1326 audit(1764765463.748:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22403 comm="syz.4.4773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04bfb8f749 code=0x7ffc0000 [ 1429.618871][ T30] audit: type=1326 audit(1764765463.748:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22403 comm="syz.4.4773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04bfb8f749 code=0x7ffc0000 [ 1429.691019][ T30] audit: type=1326 audit(1764765463.798:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22403 comm="syz.4.4773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f04bfb8f749 code=0x7ffc0000 [ 1429.742044][ T30] audit: type=1326 audit(1764765463.798:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22403 comm="syz.4.4773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f04bfb8f783 code=0x7ffc0000 [ 1429.765684][ T30] audit: type=1326 audit(1764765463.838:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22403 comm="syz.4.4773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f04bfb8e1ff code=0x7ffc0000 [ 1429.807512][ T30] audit: type=1326 audit(1764765463.838:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22403 comm="syz.4.4773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f04bfb8f7d7 code=0x7ffc0000 [ 1429.855062][ T30] audit: type=1326 audit(1764765463.838:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22403 comm="syz.4.4773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f04bfb8df90 code=0x7ffc0000 [ 1430.035523][T22417] sctp: [Deprecated]: syz.5.4778 (pid 22417) Use of int in max_burst socket option. [ 1430.035523][T22417] Use struct sctp_assoc_value instead [ 1431.233005][T22434] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4776'. [ 1431.242470][T22434] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4776'. [ 1431.333457][T22437] lo: entered allmulticast mode [ 1431.362106][T22435] lo: left allmulticast mode [ 1431.455077][T22439] lo: entered allmulticast mode [ 1431.492398][T22439] lo: left allmulticast mode [ 1432.594319][T22467] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4790'. [ 1432.670431][T22469] 9p: Bad value for 'source' [ 1432.814351][T22478] 9p: Bad value for 'source' [ 1432.836340][T22481] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4799'. [ 1432.868218][T22481] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4799'. [ 1435.088477][T22522] 9p: Bad value for 'source' [ 1436.449526][T22562] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvtap0, syncid = 5, id = 0 [ 1436.509998][T22564] lo speed is unknown, defaulting to 1000 [ 1436.533063][T22564] lo speed is unknown, defaulting to 1000 [ 1436.563037][T22564] lo speed is unknown, defaulting to 1000 [ 1436.612333][T22564] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 1436.639880][T22564] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1436.703422][T22564] lo speed is unknown, defaulting to 1000 [ 1436.711264][T22571] 9p: Bad value for 'source' [ 1436.723088][T22564] lo speed is unknown, defaulting to 1000 [ 1436.739066][T22564] lo speed is unknown, defaulting to 1000 [ 1436.760560][T22564] lo speed is unknown, defaulting to 1000 [ 1436.774336][T22564] lo speed is unknown, defaulting to 1000 [ 1438.104698][T22617] netlink: 180 bytes leftover after parsing attributes in process `syz.2.4845'. [ 1441.308036][T22649] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4848'. [ 1442.810212][T22678] netlink: get zone limit has 4 unknown bytes [ 1443.170733][T22690] openvswitch: netlink: Duplicate or invalid key (type 0). [ 1443.197550][T22690] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1444.028768][T22682] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4872'. [ 1444.311017][T22707] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4883'. [ 1444.831449][T22725] 9p: Bad value for 'wfdno' [ 1444.952703][T22731] netlink: 300 bytes leftover after parsing attributes in process `syz.1.4894'. [ 1444.983272][T22737] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4896'. [ 1445.000099][T22734] netlink: zone id is out of range [ 1445.014129][T22734] netlink: zone id is out of range [ 1445.020221][T22734] netlink: zone id is out of range [ 1445.026068][T22734] netlink: set zone limit has 8 unknown bytes [ 1446.298732][T22769] netlink: 300 bytes leftover after parsing attributes in process `syz.1.4909'. [ 1446.839316][T19379] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 1446.849042][T19379] CPU: 0 UID: 0 PID: 19379 Comm: kworker/u9:3 Not tainted syzkaller #0 PREEMPT(full) [ 1446.849072][T19379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1446.849086][T19379] Workqueue: hci1 hci_rx_work [ 1446.849113][T19379] Call Trace: [ 1446.849123][T19379] [ 1446.849133][T19379] dump_stack_lvl+0x189/0x250 [ 1446.849161][T19379] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1446.849184][T19379] ? __pfx__printk+0x10/0x10 [ 1446.849215][T19379] ? kernfs_path_from_node+0x250/0x290 [ 1446.849234][T19379] ? kernfs_path_from_node+0x2f/0x290 [ 1446.849258][T19379] sysfs_create_dir_ns+0x259/0x280 [ 1446.849281][T19379] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1446.849303][T19379] ? do_raw_spin_unlock+0x122/0x240 [ 1446.849333][T19379] kobject_add_internal+0x6ab/0xcc0 [ 1446.849367][T19379] kobject_add+0x155/0x220 [ 1446.849396][T19379] ? __pfx_kobject_add+0x10/0x10 [ 1446.849422][T19379] ? _raw_spin_unlock+0x3f/0x50 [ 1446.849446][T19379] ? get_device_parent+0x366/0x3a0 [ 1446.849471][T19379] device_add+0x408/0xb80 [ 1446.849495][T19379] hci_conn_add_sysfs+0xd5/0x210 [ 1446.849521][T19379] le_conn_complete_evt+0xf1d/0x1420 [ 1446.849558][T19379] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1446.849584][T19379] ? irqentry_exit+0x5dd/0x660 [ 1446.849604][T19379] ? rcu_is_watching+0x15/0xb0 [ 1446.849640][T19379] hci_le_conn_complete_evt+0x187/0x480 [ 1446.849673][T19379] hci_event_packet+0x78f/0x1260 [ 1446.849699][T19379] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1446.849727][T19379] ? __pfx_hci_event_packet+0x10/0x10 [ 1446.849752][T19379] ? kcov_remote_start+0x4d3/0x7f0 [ 1446.849776][T19379] ? lockdep_hardirqs_on+0x98/0x140 [ 1446.849800][T19379] ? hci_send_to_monitor+0xe2/0x590 [ 1446.849823][T19379] hci_rx_work+0x3ee/0x1060 [ 1446.849856][T19379] ? process_one_work+0x868/0x15a0 [ 1446.849874][T19379] process_one_work+0x93a/0x15a0 [ 1446.849917][T19379] ? __pfx_process_one_work+0x10/0x10 [ 1446.849946][T19379] ? assign_work+0x3a1/0x410 [ 1446.849976][T19379] worker_thread+0x9b0/0xee0 [ 1446.850024][T19379] kthread+0x711/0x8a0 [ 1446.850050][T19379] ? __pfx_worker_thread+0x10/0x10 [ 1446.850070][T19379] ? __pfx_kthread+0x10/0x10 [ 1446.850096][T19379] ? _raw_spin_unlock_irq+0x23/0x50 [ 1446.850116][T19379] ? lockdep_hardirqs_on+0x98/0x140 [ 1446.850136][T19379] ? __pfx_kthread+0x10/0x10 [ 1446.850161][T19379] ret_from_fork+0x599/0xb30 [ 1446.850182][T19379] ? __pfx_ret_from_fork+0x10/0x10 [ 1446.850212][T19379] ? __switch_to_asm+0x39/0x70 [ 1446.850233][T19379] ? __switch_to_asm+0x33/0x70 [ 1446.850253][T19379] ? __pfx_kthread+0x10/0x10 [ 1446.850277][T19379] ret_from_fork_asm+0x1a/0x30 [ 1446.850319][T19379] [ 1446.850717][T19379] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1447.124144][T19379] Bluetooth: hci1: failed to register connection device [ 1447.162981][T22781] tipc: Started in network mode [ 1447.185074][T22781] tipc: Node identity ac1414aa, cluster identity 4711 [ 1447.211826][T22781] tipc: Enabled bearer , priority 10 [ 1447.580321][T22788] netlink: 'syz.1.4917': attribute type 10 has an invalid length. [ 1447.648534][T22788] batman_adv: batadv0: Adding interface: netdevsim0 [ 1447.680746][T22788] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1447.839299][T19379] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 1447.849203][T19379] CPU: 0 UID: 0 PID: 19379 Comm: kworker/u9:3 Not tainted syzkaller #0 PREEMPT(full) [ 1447.849229][T19379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1447.849244][T19379] Workqueue: hci4 hci_rx_work [ 1447.849270][T19379] Call Trace: [ 1447.849279][T19379] [ 1447.849290][T19379] dump_stack_lvl+0x189/0x250 [ 1447.849318][T19379] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1447.849341][T19379] ? __pfx__printk+0x10/0x10 [ 1447.849373][T19379] ? kernfs_path_from_node+0x250/0x290 [ 1447.849392][T19379] ? kernfs_path_from_node+0x2f/0x290 [ 1447.849416][T19379] sysfs_create_dir_ns+0x259/0x280 [ 1447.849439][T19379] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1447.849461][T19379] ? do_raw_spin_unlock+0x122/0x240 [ 1447.849490][T19379] kobject_add_internal+0x6ab/0xcc0 [ 1447.849524][T19379] kobject_add+0x155/0x220 [ 1447.849554][T19379] ? __pfx_kobject_add+0x10/0x10 [ 1447.849579][T19379] ? _raw_spin_unlock+0x3f/0x50 [ 1447.849603][T19379] ? get_device_parent+0x366/0x3a0 [ 1447.849628][T19379] device_add+0x408/0xb80 [ 1447.849652][T19379] hci_conn_add_sysfs+0xd5/0x210 [ 1447.849678][T19379] le_conn_complete_evt+0xf1d/0x1420 [ 1447.849715][T19379] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1447.849758][T19379] hci_le_conn_complete_evt+0x187/0x480 [ 1447.849792][T19379] hci_event_packet+0x78f/0x1260 [ 1447.849818][T19379] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1447.849845][T19379] ? __pfx_hci_event_packet+0x10/0x10 [ 1447.849873][T19379] ? kcov_remote_start+0x2e/0x7f0 [ 1447.849899][T19379] ? hci_send_to_monitor+0xe2/0x590 [ 1447.849922][T19379] hci_rx_work+0x3ee/0x1060 [ 1447.849965][T19379] ? process_one_work+0x868/0x15a0 [ 1447.849985][T19379] process_one_work+0x93a/0x15a0 [ 1447.850029][T19379] ? __pfx_process_one_work+0x10/0x10 [ 1447.850059][T19379] ? assign_work+0x3a1/0x410 [ 1447.850084][T19379] worker_thread+0x9b0/0xee0 [ 1447.850132][T19379] kthread+0x711/0x8a0 [ 1447.850159][T19379] ? __pfx_worker_thread+0x10/0x10 [ 1447.850180][T19379] ? __pfx_kthread+0x10/0x10 [ 1447.850204][T19379] ? _raw_spin_unlock_irq+0x23/0x50 [ 1447.850224][T19379] ? lockdep_hardirqs_on+0x98/0x140 [ 1447.850243][T19379] ? __pfx_kthread+0x10/0x10 [ 1447.850267][T19379] ret_from_fork+0x599/0xb30 [ 1447.850290][T19379] ? __pfx_ret_from_fork+0x10/0x10 [ 1447.850320][T19379] ? __switch_to_asm+0x39/0x70 [ 1447.850341][T19379] ? __switch_to_asm+0x33/0x70 [ 1447.850362][T19379] ? __pfx_kthread+0x10/0x10 [ 1447.850385][T19379] ret_from_fork_asm+0x1a/0x30 [ 1447.850427][T19379] [ 1447.850688][T19379] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1448.072348][T22788] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 1448.072735][T19379] Bluetooth: hci4: failed to register connection device [ 1448.330339][T19305] tipc: Node number set to 2886997162 [ 1448.431234][T22801] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 1448.443110][T22803] netlink: 300 bytes leftover after parsing attributes in process `syz.2.4921'. [ 1448.453116][T22801] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1449.190008][T22240] Bluetooth: hci1: command 0x2016 tx timeout [ 1449.307678][T22819] can: request_module (can-proto-3) failed. [ 1449.494970][T22837] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4924'. [ 1450.137509][T14832] Bluetooth: hci4: command 0x2016 tx timeout [ 1450.247031][T22848] netlink: 300 bytes leftover after parsing attributes in process `syz.5.4934'. [ 1451.327178][T22240] Bluetooth: hci1: command 0x2016 tx timeout [ 1451.775211][T22885] netlink: 300 bytes leftover after parsing attributes in process `syz.1.4946'. [ 1452.217193][T22240] Bluetooth: hci4: command 0x2016 tx timeout [ 1454.304588][T22927] overlayfs: failed to clone lowerpath [ 1454.468564][T22932] netlink: 300 bytes leftover after parsing attributes in process `syz.5.4962'. [ 1456.639309][T22980] 9p: Bad value for 'source' [ 1456.739384][T22985] 9p: Bad value for 'source' [ 1457.249030][T22991] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4978'. [ 1457.327555][T22991] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4978'. [ 1458.662856][T23024] mmap: syz.0.4992 (23024) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 1460.207048][T23042] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4998'. [ 1460.428257][T23066] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5005'. [ 1461.018808][T23076] 9p: Bad value for 'source' [ 1461.803429][T23111] fuse: Unknown parameter 'gr00000000000000000000' [ 1462.104864][T22240] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 1462.114704][T22240] CPU: 0 UID: 0 PID: 22240 Comm: kworker/u9:4 Not tainted syzkaller #0 PREEMPT(full) [ 1462.114731][T22240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1462.114745][T22240] Workqueue: hci3 hci_rx_work [ 1462.114774][T22240] Call Trace: [ 1462.114784][T22240] [ 1462.114794][T22240] dump_stack_lvl+0x189/0x250 [ 1462.114823][T22240] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1462.114846][T22240] ? __pfx__printk+0x10/0x10 [ 1462.114879][T22240] ? kernfs_path_from_node+0x250/0x290 [ 1462.114898][T22240] ? kernfs_path_from_node+0x2f/0x290 [ 1462.114922][T22240] sysfs_create_dir_ns+0x259/0x280 [ 1462.114944][T22240] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1462.114966][T22240] ? do_raw_spin_unlock+0x122/0x240 [ 1462.114996][T22240] kobject_add_internal+0x6ab/0xcc0 [ 1462.115029][T22240] kobject_add+0x155/0x220 [ 1462.115058][T22240] ? __pfx_kobject_add+0x10/0x10 [ 1462.115083][T22240] ? _raw_spin_unlock+0x3f/0x50 [ 1462.115106][T22240] ? get_device_parent+0x366/0x3a0 [ 1462.115131][T22240] device_add+0x408/0xb80 [ 1462.115156][T22240] hci_conn_add_sysfs+0xd5/0x210 [ 1462.115181][T22240] le_conn_complete_evt+0xf1d/0x1420 [ 1462.115218][T22240] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1462.115241][T22240] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 1462.115271][T22240] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1462.115292][T22240] ? skb_pull_data+0xfb/0x200 [ 1462.115323][T22240] hci_le_conn_complete_evt+0x187/0x480 [ 1462.115356][T22240] hci_event_packet+0x78f/0x1260 [ 1462.115382][T22240] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1462.115409][T22240] ? __pfx_hci_event_packet+0x10/0x10 [ 1462.115484][T22240] ? kcov_remote_start+0x2e/0x7f0 [ 1462.115512][T22240] ? hci_send_to_monitor+0xe2/0x590 [ 1462.115534][T22240] hci_rx_work+0x3ee/0x1060 [ 1462.115572][T22240] ? process_one_work+0x868/0x15a0 [ 1462.115590][T22240] process_one_work+0x93a/0x15a0 [ 1462.115633][T22240] ? __pfx_process_one_work+0x10/0x10 [ 1462.115662][T22240] ? assign_work+0x3a1/0x410 [ 1462.115685][T22240] worker_thread+0x9b0/0xee0 [ 1462.115732][T22240] kthread+0x711/0x8a0 [ 1462.115759][T22240] ? __pfx_worker_thread+0x10/0x10 [ 1462.115778][T22240] ? __pfx_kthread+0x10/0x10 [ 1462.115803][T22240] ? _raw_spin_unlock_irq+0x23/0x50 [ 1462.115823][T22240] ? lockdep_hardirqs_on+0x98/0x140 [ 1462.115843][T22240] ? __pfx_kthread+0x10/0x10 [ 1462.115867][T22240] ret_from_fork+0x599/0xb30 [ 1462.115889][T22240] ? __pfx_ret_from_fork+0x10/0x10 [ 1462.115919][T22240] ? __switch_to_asm+0x39/0x70 [ 1462.115940][T22240] ? __switch_to_asm+0x33/0x70 [ 1462.115960][T22240] ? __pfx_kthread+0x10/0x10 [ 1462.115984][T22240] ret_from_fork_asm+0x1a/0x30 [ 1462.116026][T22240] [ 1462.116271][T22240] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1462.387733][T22240] Bluetooth: hci3: failed to register connection device [ 1462.496977][T23116] ip6t_srh: unknown srh invflags 4000 [ 1462.861493][T23120] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5021'. [ 1463.844876][T23133] netlink: 180 bytes leftover after parsing attributes in process `syz.4.5025'. [ 1464.457282][T14832] Bluetooth: hci3: command 0x2016 tx timeout [ 1465.486486][T23148] fuse: Unknown parameter 'gro00000000000000000000' [ 1465.743656][T22240] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 1465.753733][T22240] CPU: 1 UID: 0 PID: 22240 Comm: kworker/u9:4 Not tainted syzkaller #0 PREEMPT(full) [ 1465.753761][T22240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1465.753775][T22240] Workqueue: hci0 hci_rx_work [ 1465.753803][T22240] Call Trace: [ 1465.753813][T22240] [ 1465.753824][T22240] dump_stack_lvl+0x189/0x250 [ 1465.753854][T22240] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1465.753877][T22240] ? __pfx__printk+0x10/0x10 [ 1465.753909][T22240] ? kernfs_path_from_node+0x250/0x290 [ 1465.753928][T22240] ? kernfs_path_from_node+0x2f/0x290 [ 1465.753952][T22240] sysfs_create_dir_ns+0x259/0x280 [ 1465.753974][T22240] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1465.753997][T22240] ? do_raw_spin_unlock+0x122/0x240 [ 1465.754026][T22240] kobject_add_internal+0x6ab/0xcc0 [ 1465.754058][T22240] kobject_add+0x155/0x220 [ 1465.754088][T22240] ? __pfx_kobject_add+0x10/0x10 [ 1465.754112][T22240] ? _raw_spin_unlock+0x3f/0x50 [ 1465.754136][T22240] ? get_device_parent+0x366/0x3a0 [ 1465.754162][T22240] device_add+0x408/0xb80 [ 1465.754186][T22240] hci_conn_add_sysfs+0xd5/0x210 [ 1465.754212][T22240] le_conn_complete_evt+0xf1d/0x1420 [ 1465.754250][T22240] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1465.754275][T22240] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 1465.754306][T22240] ? __asan_memcpy+0x40/0x70 [ 1465.754338][T22240] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1465.754360][T22240] ? skb_pull_data+0xfb/0x200 [ 1465.754392][T22240] hci_le_conn_complete_evt+0x187/0x480 [ 1465.754426][T22240] hci_event_packet+0x78f/0x1260 [ 1465.754453][T22240] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1465.754481][T22240] ? __pfx_hci_event_packet+0x10/0x10 [ 1465.754509][T22240] ? kcov_remote_start+0x2e/0x7f0 [ 1465.754536][T22240] ? hci_send_to_monitor+0xe2/0x590 [ 1465.754558][T22240] hci_rx_work+0x3ee/0x1060 [ 1465.754592][T22240] ? process_one_work+0x868/0x15a0 [ 1465.754610][T22240] process_one_work+0x93a/0x15a0 [ 1465.754653][T22240] ? __pfx_process_one_work+0x10/0x10 [ 1465.754683][T22240] ? assign_work+0x3a1/0x410 [ 1465.754708][T22240] worker_thread+0x9b0/0xee0 [ 1465.754754][T22240] kthread+0x711/0x8a0 [ 1465.754782][T22240] ? __pfx_worker_thread+0x10/0x10 [ 1465.754801][T22240] ? __pfx_kthread+0x10/0x10 [ 1465.754826][T22240] ? _raw_spin_unlock_irq+0x23/0x50 [ 1465.754846][T22240] ? lockdep_hardirqs_on+0x98/0x140 [ 1465.754866][T22240] ? __pfx_kthread+0x10/0x10 [ 1465.754891][T22240] ret_from_fork+0x599/0xb30 [ 1465.754913][T22240] ? __pfx_ret_from_fork+0x10/0x10 [ 1465.754944][T22240] ? __switch_to_asm+0x39/0x70 [ 1465.754965][T22240] ? __switch_to_asm+0x33/0x70 [ 1465.754986][T22240] ? __pfx_kthread+0x10/0x10 [ 1465.755010][T22240] ret_from_fork_asm+0x1a/0x30 [ 1465.755050][T22240] [ 1465.755571][T22240] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1466.038835][T22240] Bluetooth: hci0: failed to register connection device [ 1466.537264][T14832] Bluetooth: hci3: command 0x2016 tx timeout [ 1467.639327][T23184] fuse: Unknown parameter 'gro00000000000000000000' [ 1467.899749][T22240] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 1467.909754][T22240] CPU: 1 UID: 0 PID: 22240 Comm: kworker/u9:4 Not tainted syzkaller #0 PREEMPT(full) [ 1467.909783][T22240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1467.909797][T22240] Workqueue: hci0 hci_rx_work [ 1467.909823][T22240] Call Trace: [ 1467.909831][T22240] [ 1467.909854][T22240] dump_stack_lvl+0x189/0x250 [ 1467.909884][T22240] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1467.909907][T22240] ? __pfx__printk+0x10/0x10 [ 1467.909940][T22240] ? kernfs_path_from_node+0x250/0x290 [ 1467.909959][T22240] ? kernfs_path_from_node+0x2f/0x290 [ 1467.909983][T22240] sysfs_create_dir_ns+0x259/0x280 [ 1467.910006][T22240] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1467.910028][T22240] ? do_raw_spin_unlock+0x122/0x240 [ 1467.910058][T22240] kobject_add_internal+0x6ab/0xcc0 [ 1467.910090][T22240] kobject_add+0x155/0x220 [ 1467.910119][T22240] ? __pfx_kobject_add+0x10/0x10 [ 1467.910144][T22240] ? _raw_spin_unlock+0x3f/0x50 [ 1467.910169][T22240] ? get_device_parent+0x366/0x3a0 [ 1467.910193][T22240] device_add+0x408/0xb80 [ 1467.910218][T22240] hci_conn_add_sysfs+0xd5/0x210 [ 1467.910243][T22240] le_conn_complete_evt+0xf1d/0x1420 [ 1467.910268][T22240] ? lockdep_hardirqs_on+0x98/0x140 [ 1467.910299][T22240] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1467.910330][T22240] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1467.910355][T22240] ? skb_pull_data+0xfb/0x200 [ 1467.910394][T22240] hci_le_conn_complete_evt+0x187/0x480 [ 1467.910429][T22240] hci_event_packet+0x78f/0x1260 [ 1467.910456][T22240] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1467.910484][T22240] ? __pfx_hci_event_packet+0x10/0x10 [ 1467.910513][T22240] ? kcov_remote_start+0x2e/0x7f0 [ 1467.910540][T22240] ? hci_send_to_monitor+0xe2/0x590 [ 1467.910562][T22240] hci_rx_work+0x3ee/0x1060 [ 1467.910596][T22240] ? process_one_work+0x868/0x15a0 [ 1467.910615][T22240] process_one_work+0x93a/0x15a0 [ 1467.910659][T22240] ? __pfx_process_one_work+0x10/0x10 [ 1467.910687][T22240] ? assign_work+0x3a1/0x410 [ 1467.910721][T22240] worker_thread+0x9b0/0xee0 [ 1467.910771][T22240] kthread+0x711/0x8a0 [ 1467.910799][T22240] ? __pfx_worker_thread+0x10/0x10 [ 1467.910819][T22240] ? __pfx_kthread+0x10/0x10 [ 1467.910850][T22240] ? _raw_spin_unlock_irq+0x23/0x50 [ 1467.910870][T22240] ? lockdep_hardirqs_on+0x98/0x140 [ 1467.910889][T22240] ? __pfx_kthread+0x10/0x10 [ 1467.910914][T22240] ret_from_fork+0x599/0xb30 [ 1467.910936][T22240] ? __pfx_ret_from_fork+0x10/0x10 [ 1467.910967][T22240] ? __switch_to_asm+0x39/0x70 [ 1467.910989][T22240] ? __switch_to_asm+0x33/0x70 [ 1467.911011][T22240] ? __pfx_kthread+0x10/0x10 [ 1467.911035][T22240] ret_from_fork_asm+0x1a/0x30 [ 1467.911078][T22240] [ 1467.911269][T22240] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1468.188012][T22240] Bluetooth: hci0: failed to register connection device [ 1468.195714][T22240] Bluetooth: hci0: command 0x2016 tx timeout [ 1468.823688][T23204] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5049'. [ 1469.011845][T15868] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1469.042672][T15868] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1469.083508][T15868] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1469.118247][T15868] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1470.141384][T23225] can: request_module (can-proto-3) failed. [ 1470.229566][T19379] Bluetooth: hci0: command 0x2016 tx timeout [ 1470.332582][T23236] fuse: Unknown parameter 'gro00000000000000000000' [ 1470.630697][T19379] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 1470.647848][T19379] CPU: 0 UID: 0 PID: 19379 Comm: kworker/u9:3 Not tainted syzkaller #0 PREEMPT(full) [ 1470.647878][T19379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1470.647892][T19379] Workqueue: hci2 hci_rx_work [ 1470.647920][T19379] Call Trace: [ 1470.647929][T19379] [ 1470.647939][T19379] dump_stack_lvl+0x189/0x250 [ 1470.647967][T19379] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1470.647990][T19379] ? __pfx__printk+0x10/0x10 [ 1470.648023][T19379] ? kernfs_path_from_node+0x250/0x290 [ 1470.648042][T19379] ? kernfs_path_from_node+0x2f/0x290 [ 1470.648066][T19379] sysfs_create_dir_ns+0x259/0x280 [ 1470.648089][T19379] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1470.648111][T19379] ? do_raw_spin_unlock+0x122/0x240 [ 1470.648142][T19379] kobject_add_internal+0x6ab/0xcc0 [ 1470.648176][T19379] kobject_add+0x155/0x220 [ 1470.648205][T19379] ? __pfx_kobject_add+0x10/0x10 [ 1470.648230][T19379] ? _raw_spin_unlock+0x3f/0x50 [ 1470.648255][T19379] ? get_device_parent+0x366/0x3a0 [ 1470.648280][T19379] device_add+0x408/0xb80 [ 1470.648305][T19379] hci_conn_add_sysfs+0xd5/0x210 [ 1470.648331][T19379] le_conn_complete_evt+0xf1d/0x1420 [ 1470.648368][T19379] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1470.648411][T19379] hci_le_conn_complete_evt+0x187/0x480 [ 1470.648445][T19379] hci_event_packet+0x78f/0x1260 [ 1470.648471][T19379] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1470.648499][T19379] ? __pfx_hci_event_packet+0x10/0x10 [ 1470.648527][T19379] ? kcov_remote_start+0x2e/0x7f0 [ 1470.648553][T19379] ? hci_send_to_monitor+0xe2/0x590 [ 1470.648578][T19379] hci_rx_work+0x3ee/0x1060 [ 1470.648613][T19379] ? process_one_work+0x868/0x15a0 [ 1470.648631][T19379] process_one_work+0x93a/0x15a0 [ 1470.648674][T19379] ? __pfx_process_one_work+0x10/0x10 [ 1470.648703][T19379] ? assign_work+0x3a1/0x410 [ 1470.648727][T19379] worker_thread+0x9b0/0xee0 [ 1470.648776][T19379] kthread+0x711/0x8a0 [ 1470.648808][T19379] ? __pfx_worker_thread+0x10/0x10 [ 1470.648828][T19379] ? __pfx_kthread+0x10/0x10 [ 1470.648855][T19379] ? _raw_spin_unlock_irq+0x23/0x50 [ 1470.648875][T19379] ? lockdep_hardirqs_on+0x98/0x140 [ 1470.648896][T19379] ? __pfx_kthread+0x10/0x10 [ 1470.648920][T19379] ret_from_fork+0x599/0xb30 [ 1470.648943][T19379] ? __pfx_ret_from_fork+0x10/0x10 [ 1470.648973][T19379] ? __switch_to_asm+0x39/0x70 [ 1470.648995][T19379] ? __switch_to_asm+0x33/0x70 [ 1470.649015][T19379] ? __pfx_kthread+0x10/0x10 [ 1470.649040][T19379] ret_from_fork_asm+0x1a/0x30 [ 1470.649082][T19379] [ 1470.649337][T19379] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1470.918171][T19379] Bluetooth: hci2: failed to register connection device [ 1471.912051][T23259] overlayfs: failed to resolve './file0/../file0': -2 [ 1472.357262][T19379] Bluetooth: hci0: command 0x2016 tx timeout [ 1472.711311][T23270] fuse: Bad value for 'user_id' [ 1472.716223][T23270] fuse: Bad value for 'user_id' [ 1472.900792][T23273] 9p: Bad value for 'source' [ 1472.937601][T22240] Bluetooth: hci2: command 0x0406 tx timeout [ 1473.004583][T22240] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 1473.014235][T22240] CPU: 1 UID: 0 PID: 22240 Comm: kworker/u9:4 Not tainted syzkaller #0 PREEMPT(full) [ 1473.014263][T22240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1473.014276][T22240] Workqueue: hci3 hci_rx_work [ 1473.014303][T22240] Call Trace: [ 1473.014312][T22240] [ 1473.014322][T22240] dump_stack_lvl+0x189/0x250 [ 1473.014351][T22240] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1473.014373][T22240] ? __pfx__printk+0x10/0x10 [ 1473.014407][T22240] ? kernfs_path_from_node+0x250/0x290 [ 1473.014426][T22240] ? kernfs_path_from_node+0x2f/0x290 [ 1473.014451][T22240] sysfs_create_dir_ns+0x259/0x280 [ 1473.014475][T22240] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1473.014497][T22240] ? do_raw_spin_unlock+0x122/0x240 [ 1473.014527][T22240] kobject_add_internal+0x6ab/0xcc0 [ 1473.014561][T22240] kobject_add+0x155/0x220 [ 1473.014597][T22240] ? __pfx_kobject_add+0x10/0x10 [ 1473.014622][T22240] ? _raw_spin_unlock+0x3f/0x50 [ 1473.014647][T22240] ? get_device_parent+0x366/0x3a0 [ 1473.014672][T22240] device_add+0x408/0xb80 [ 1473.014697][T22240] hci_conn_add_sysfs+0xd5/0x210 [ 1473.014723][T22240] le_conn_complete_evt+0xf1d/0x1420 [ 1473.014761][T22240] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1473.014786][T22240] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 1473.014807][T22240] ? __asan_memcpy+0x40/0x70 [ 1473.014839][T22240] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1473.014860][T22240] ? skb_pull_data+0xfb/0x200 [ 1473.014891][T22240] hci_le_conn_complete_evt+0x187/0x480 [ 1473.014925][T22240] hci_event_packet+0x78f/0x1260 [ 1473.014952][T22240] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1473.014979][T22240] ? __pfx_hci_event_packet+0x10/0x10 [ 1473.015008][T22240] ? kcov_remote_start+0x2e/0x7f0 [ 1473.015036][T22240] ? hci_send_to_monitor+0xe2/0x590 [ 1473.015058][T22240] hci_rx_work+0x3ee/0x1060 [ 1473.015093][T22240] ? process_one_work+0x868/0x15a0 [ 1473.015111][T22240] process_one_work+0x93a/0x15a0 [ 1473.015155][T22240] ? __pfx_process_one_work+0x10/0x10 [ 1473.015184][T22240] ? assign_work+0x3a1/0x410 [ 1473.015209][T22240] worker_thread+0x9b0/0xee0 [ 1473.015258][T22240] kthread+0x711/0x8a0 [ 1473.015285][T22240] ? __pfx_worker_thread+0x10/0x10 [ 1473.015305][T22240] ? __pfx_kthread+0x10/0x10 [ 1473.015330][T22240] ? _raw_spin_unlock_irq+0x23/0x50 [ 1473.015350][T22240] ? lockdep_hardirqs_on+0x98/0x140 [ 1473.015369][T22240] ? __pfx_kthread+0x10/0x10 [ 1473.015394][T22240] ret_from_fork+0x599/0xb30 [ 1473.015416][T22240] ? __pfx_ret_from_fork+0x10/0x10 [ 1473.015447][T22240] ? __switch_to_asm+0x39/0x70 [ 1473.015468][T22240] ? __switch_to_asm+0x33/0x70 [ 1473.015489][T22240] ? __pfx_kthread+0x10/0x10 [ 1473.015514][T22240] ret_from_fork_asm+0x1a/0x30 [ 1473.015557][T22240] [ 1473.015770][T22240] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1473.291196][T22240] Bluetooth: hci3: failed to register connection device [ 1473.560203][T19305] IPVS: starting estimator thread 0... [ 1473.570941][T23292] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5078'. [ 1473.687327][T23291] IPVS: using max 34 ests per chain, 81600 per kthread [ 1473.964797][T23301] netlink: 180 bytes leftover after parsing attributes in process `syz.0.5080'. [ 1474.627920][T14832] Bluetooth: hci0: command 0x2016 tx timeout [ 1474.958846][T23304] netlink: 300 bytes leftover after parsing attributes in process `syz.0.5081'. [ 1475.037724][T14832] Bluetooth: hci2: command 0x0406 tx timeout [ 1475.142885][T23307] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5083'. [ 1475.191708][T23307] team1: entered promiscuous mode [ 1475.196940][T23307] team1: entered allmulticast mode [ 1475.226802][T23307] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5083'. [ 1475.239876][T23307] bridge_slave_1: left allmulticast mode [ 1475.245555][T23307] bridge_slave_1: left promiscuous mode [ 1475.253684][T23307] bridge0: port 2(bridge_slave_1) entered disabled state [ 1475.282528][T23317] can: request_module (can-proto-3) failed. [ 1475.290105][T23307] bridge_slave_0: left allmulticast mode [ 1475.295935][T23307] bridge_slave_0: left promiscuous mode [ 1475.307572][T23307] bridge0: port 1(bridge_slave_0) entered disabled state [ 1475.337725][T19379] Bluetooth: hci3: command 0x2016 tx timeout [ 1475.357752][T23307] bond0: (slave bridge0): Releasing backup interface [ 1475.404338][T23328] fuse: Bad value for 'user_id' [ 1475.467788][T23328] fuse: Bad value for 'user_id' [ 1475.707729][T22240] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 1475.717442][T22240] CPU: 1 UID: 0 PID: 22240 Comm: kworker/u9:4 Not tainted syzkaller #0 PREEMPT(full) [ 1475.717469][T22240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1475.717484][T22240] Workqueue: hci3 hci_rx_work [ 1475.717511][T22240] Call Trace: [ 1475.717521][T22240] [ 1475.717532][T22240] dump_stack_lvl+0x189/0x250 [ 1475.717562][T22240] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1475.717585][T22240] ? __pfx__printk+0x10/0x10 [ 1475.717617][T22240] ? kernfs_path_from_node+0x250/0x290 [ 1475.717636][T22240] ? kernfs_path_from_node+0x2f/0x290 [ 1475.717661][T22240] sysfs_create_dir_ns+0x259/0x280 [ 1475.717684][T22240] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1475.717706][T22240] ? do_raw_spin_unlock+0x122/0x240 [ 1475.717736][T22240] kobject_add_internal+0x6ab/0xcc0 [ 1475.717771][T22240] kobject_add+0x155/0x220 [ 1475.717800][T22240] ? __pfx_kobject_add+0x10/0x10 [ 1475.717826][T22240] ? _raw_spin_unlock+0x28/0x50 [ 1475.717850][T22240] ? get_device_parent+0x366/0x3a0 [ 1475.717875][T22240] device_add+0x408/0xb80 [ 1475.717900][T22240] hci_conn_add_sysfs+0xd5/0x210 [ 1475.717925][T22240] le_conn_complete_evt+0xf1d/0x1420 [ 1475.717962][T22240] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1475.717987][T22240] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 1475.718008][T22240] ? __asan_memcpy+0x40/0x70 [ 1475.718039][T22240] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1475.718069][T22240] ? skb_pull_data+0xfb/0x200 [ 1475.718102][T22240] hci_le_conn_complete_evt+0x187/0x480 [ 1475.718136][T22240] hci_event_packet+0x78f/0x1260 [ 1475.718163][T22240] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1475.718191][T22240] ? __pfx_hci_event_packet+0x10/0x10 [ 1475.718217][T22240] ? kcov_remote_start+0x4d3/0x7f0 [ 1475.718246][T22240] ? lockdep_hardirqs_on+0x98/0x140 [ 1475.718273][T22240] ? hci_send_to_monitor+0xe2/0x590 [ 1475.718295][T22240] hci_rx_work+0x3ee/0x1060 [ 1475.718329][T22240] ? process_one_work+0x868/0x15a0 [ 1475.718348][T22240] process_one_work+0x93a/0x15a0 [ 1475.718391][T22240] ? __pfx_process_one_work+0x10/0x10 [ 1475.718419][T22240] ? assign_work+0x3a1/0x410 [ 1475.718444][T22240] worker_thread+0x9b0/0xee0 [ 1475.718492][T22240] kthread+0x711/0x8a0 [ 1475.718519][T22240] ? __pfx_worker_thread+0x10/0x10 [ 1475.718538][T22240] ? __pfx_kthread+0x10/0x10 [ 1475.718563][T22240] ? _raw_spin_unlock_irq+0x23/0x50 [ 1475.718583][T22240] ? lockdep_hardirqs_on+0x98/0x140 [ 1475.718602][T22240] ? __pfx_kthread+0x10/0x10 [ 1475.718625][T22240] ret_from_fork+0x599/0xb30 [ 1475.718647][T22240] ? __pfx_ret_from_fork+0x10/0x10 [ 1475.718678][T22240] ? __switch_to_asm+0x39/0x70 [ 1475.718699][T22240] ? __switch_to_asm+0x33/0x70 [ 1475.718719][T22240] ? __pfx_kthread+0x10/0x10 [ 1475.718743][T22240] ret_from_fork_asm+0x1a/0x30 [ 1475.718784][T22240] [ 1475.718816][T22240] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1476.015404][T22240] Bluetooth: hci3: failed to register connection device [ 1476.444725][T23337] netlink: 180 bytes leftover after parsing attributes in process `syz.2.5092'. [ 1477.417330][T22240] Bluetooth: hci3: command 0x2016 tx timeout [ 1477.666122][T23326] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5089'. [ 1478.161280][T23361] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5089'. [ 1478.334862][T23364] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5089'. [ 1478.824419][T23383] netlink: 180 bytes leftover after parsing attributes in process `syz.0.5105'. [ 1479.498361][T22240] Bluetooth: hci3: command 0x2016 tx timeout [ 1479.553124][T23387] fuse: Bad value for 'user_id' [ 1479.715773][T23387] fuse: Bad value for 'user_id' [ 1480.446627][T22240] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 1480.456818][T22240] CPU: 1 UID: 0 PID: 22240 Comm: kworker/u9:4 Not tainted syzkaller #0 PREEMPT(full) [ 1480.456836][T22240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1480.456844][T22240] Workqueue: hci3 hci_rx_work [ 1480.456863][T22240] Call Trace: [ 1480.456869][T22240] [ 1480.456874][T22240] dump_stack_lvl+0x189/0x250 [ 1480.456891][T22240] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1480.456904][T22240] ? __pfx__printk+0x10/0x10 [ 1480.456922][T22240] ? kernfs_path_from_node+0x250/0x290 [ 1480.456933][T22240] ? kernfs_path_from_node+0x2f/0x290 [ 1480.456946][T22240] sysfs_create_dir_ns+0x259/0x280 [ 1480.456959][T22240] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1480.456970][T22240] ? do_raw_spin_unlock+0x122/0x240 [ 1480.456987][T22240] kobject_add_internal+0x6ab/0xcc0 [ 1480.457006][T22240] kobject_add+0x155/0x220 [ 1480.457022][T22240] ? __pfx_kobject_add+0x10/0x10 [ 1480.457036][T22240] ? _raw_spin_unlock+0x28/0x50 [ 1480.457050][T22240] ? get_device_parent+0x366/0x3a0 [ 1480.457063][T22240] device_add+0x408/0xb80 [ 1480.457076][T22240] hci_conn_add_sysfs+0xd5/0x210 [ 1480.457090][T22240] le_conn_complete_evt+0xf1d/0x1420 [ 1480.457122][T22240] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1480.457145][T22240] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 1480.457166][T22240] ? __asan_memcpy+0x40/0x70 [ 1480.457185][T22240] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1480.457197][T22240] ? skb_pull_data+0xfb/0x200 [ 1480.457214][T22240] hci_le_conn_complete_evt+0x187/0x480 [ 1480.457232][T22240] hci_event_packet+0x78f/0x1260 [ 1480.457246][T22240] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1480.457261][T22240] ? __pfx_hci_event_packet+0x10/0x10 [ 1480.457274][T22240] ? kcov_remote_start+0x4d3/0x7f0 [ 1480.457288][T22240] ? lockdep_hardirqs_on+0x98/0x140 [ 1480.457301][T22240] ? hci_send_to_monitor+0xe2/0x590 [ 1480.457313][T22240] hci_rx_work+0x3ee/0x1060 [ 1480.457331][T22240] ? process_one_work+0x868/0x15a0 [ 1480.457340][T22240] process_one_work+0x93a/0x15a0 [ 1480.457362][T22240] ? __pfx_process_one_work+0x10/0x10 [ 1480.457377][T22240] ? assign_work+0x3a1/0x410 [ 1480.457390][T22240] worker_thread+0x9b0/0xee0 [ 1480.457414][T22240] kthread+0x711/0x8a0 [ 1480.457429][T22240] ? __pfx_worker_thread+0x10/0x10 [ 1480.457439][T22240] ? __pfx_kthread+0x10/0x10 [ 1480.457452][T22240] ? _raw_spin_unlock_irq+0x23/0x50 [ 1480.457463][T22240] ? lockdep_hardirqs_on+0x98/0x140 [ 1480.457473][T22240] ? __pfx_kthread+0x10/0x10 [ 1480.457486][T22240] ret_from_fork+0x599/0xb30 [ 1480.457498][T22240] ? __pfx_ret_from_fork+0x10/0x10 [ 1480.457514][T22240] ? __switch_to_asm+0x39/0x70 [ 1480.457525][T22240] ? __switch_to_asm+0x33/0x70 [ 1480.457536][T22240] ? __pfx_kthread+0x10/0x10 [ 1480.457549][T22240] ret_from_fork_asm+0x1a/0x30 [ 1480.457571][T22240] [ 1480.720506][T22240] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1480.734756][T22240] Bluetooth: hci3: failed to register connection device [ 1482.173407][T22240] Bluetooth: hci3: command 0x2016 tx timeout [ 1482.302244][T23417] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5114'. [ 1484.217573][T22240] Bluetooth: hci3: command 0x2016 tx timeout [ 1484.951390][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.957826][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1589.987096][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1589.994098][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P19934/1:b..l [ 1590.002663][ C0] rcu: (detected by 0, t=10502 jiffies, g=105721, q=227 ncpus=2) [ 1590.010481][ C0] task:kworker/u8:7 state:R running task stack:22960 pid:19934 tgid:19934 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1590.025274][ C0] Workqueue: iou_exit io_ring_exit_work [ 1590.030853][ C0] Call Trace: [ 1590.034140][ C0] [ 1590.037076][ C0] __schedule+0x14bc/0x5000 [ 1590.041616][ C0] ? __pfx___schedule+0x10/0x10 [ 1590.046480][ C0] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1590.052377][ C0] ? lockdep_hardirqs_on+0x98/0x140 [ 1590.057593][ C0] ? preempt_schedule_irq+0xaa/0x150 [ 1590.062889][ C0] preempt_schedule_irq+0xb5/0x150 [ 1590.068003][ C0] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 1590.073740][ C0] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 1590.079555][ C0] irqentry_exit+0x5d8/0x660 [ 1590.084157][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1590.090152][ C0] RIP: 0010:lock_acquire+0x16c/0x340 [ 1590.095447][ C0] Code: 00 00 00 00 9c 8f 44 24 30 f7 44 24 30 00 02 00 00 0f 85 cd 00 00 00 f7 44 24 08 00 02 00 00 74 01 fb 65 48 8b 05 74 f7 de 10 <48> 3b 44 24 58 0f 85 e5 00 00 00 48 83 c4 60 5b 41 5c 41 5d 41 5e [ 1590.115055][ C0] RSP: 0018:ffffc9000489f178 EFLAGS: 00000206 [ 1590.121130][ C0] RAX: 331af02ac4933400 RBX: 0000000000000000 RCX: 331af02ac4933400 [ 1590.129106][ C0] RDX: 0000000065ca8263 RSI: ffffffff8d96cfa5 RDI: ffffffff8bc027e0 [ 1590.137076][ C0] RBP: ffffffff81743f85 R08: ffffffff81743f85 R09: ffffffff8df419e0 [ 1590.145046][ C0] R10: ffffc9000489f348 R11: fffff52000913e75 R12: 0000000000000002 [ 1590.153018][ C0] R13: ffffffff8df419e0 R14: 0000000000000000 R15: 0000000000000246 [ 1590.160997][ C0] ? unwind_next_frame+0xa5/0x2390 [ 1590.166116][ C0] ? unwind_next_frame+0xa5/0x2390 [ 1590.171242][ C0] ? __lock_acquire+0x6b6/0x2cf0 [ 1590.176178][ C0] ? __unwind_start+0xf8/0x760 [ 1590.180948][ C0] ? unwind_next_frame+0xa5/0x2390 [ 1590.186061][ C0] unwind_next_frame+0xc2/0x2390 [ 1590.191001][ C0] ? unwind_next_frame+0xa5/0x2390 [ 1590.196475][ C0] ? get_stack_info_noinstr+0x1b/0x130 [ 1590.201947][ C0] __unwind_start+0x5b9/0x760 [ 1590.206632][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1590.212797][ C0] arch_stack_walk+0xe4/0x150 [ 1590.217485][ C0] ? __unwind_start+0xf8/0x760 [ 1590.222256][ C0] stack_trace_save+0x9c/0xe0 [ 1590.226944][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1590.232347][ C0] kasan_save_stack+0x3e/0x60 [ 1590.237077][ C0] kasan_record_aux_stack+0xbd/0xd0 [ 1590.242281][ C0] ? __pfx_slab_free_after_rcu_debug+0x10/0x10 [ 1590.248436][ C0] call_rcu+0x157/0x9c0 [ 1590.252610][ C0] ? __pfx_call_rcu+0x10/0x10 [ 1590.257304][ C0] kmem_cache_free+0x488/0x620 [ 1590.262071][ C0] ? __io_req_caches_free+0x1c1/0x270 [ 1590.267464][ C0] __io_req_caches_free+0x1c1/0x270 [ 1590.272690][ C0] io_req_caches_free+0x21/0x60 [ 1590.277565][ C0] io_ring_exit_work+0x3b3/0x8d0 [ 1590.282534][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1590.287954][ C0] ? __pfx_io_ring_exit_work+0x10/0x10 [ 1590.293445][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1590.298660][ C0] ? process_one_work+0x868/0x15a0 [ 1590.303866][ C0] process_one_work+0x93a/0x15a0 [ 1590.308838][ C0] ? __pfx_process_one_work+0x10/0x10 [ 1590.314227][ C0] ? assign_work+0x3a1/0x410 [ 1590.318828][ C0] worker_thread+0x9b0/0xee0 [ 1590.323447][ C0] kthread+0x711/0x8a0 [ 1590.327541][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1590.332654][ C0] ? __pfx_kthread+0x10/0x10 [ 1590.337253][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1590.342456][ C0] ? lockdep_hardirqs_on+0x98/0x140 [ 1590.347655][ C0] ? __pfx_kthread+0x10/0x10 [ 1590.352256][ C0] ret_from_fork+0x599/0xb30 [ 1590.356856][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1590.361977][ C0] ? __switch_to_asm+0x39/0x70 [ 1590.366747][ C0] ? __switch_to_asm+0x33/0x70 [ 1590.371518][ C0] ? __pfx_kthread+0x10/0x10 [ 1590.376118][ C0] ret_from_fork_asm+0x1a/0x30 [ 1590.380909][ C0] [ 1590.383933][ C0] rcu: rcu_preempt kthread starved for 10513 jiffies! g105721 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 1590.395210][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1590.405176][ C0] rcu: RCU grace-period kthread stack dump: [ 1590.411059][ C0] task:rcu_preempt state:R running task stack:27280 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 1590.424556][ C0] Call Trace: [ 1590.427837][ C0] [ 1590.430772][ C0] __schedule+0x14bc/0x5000 [ 1590.435316][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1590.441211][ C0] ? __pfx___schedule+0x10/0x10 [ 1590.446074][ C0] ? schedule+0x91/0x360 [ 1590.450329][ C0] schedule+0x165/0x360 [ 1590.454488][ C0] schedule_timeout+0x12b/0x270 [ 1590.459338][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 1590.464715][ C0] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1590.470629][ C0] ? __pfx_process_timeout+0x10/0x10 [ 1590.475929][ C0] ? prepare_to_swait_event+0x341/0x380 [ 1590.481486][ C0] rcu_gp_fqs_loop+0x301/0x1540 [ 1590.486352][ C0] ? lockdep_hardirqs_on+0x98/0x140 [ 1590.491564][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 1590.497721][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1590.503008][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1590.508216][ C0] ? finish_swait+0xcd/0x1f0 [ 1590.512813][ C0] rcu_gp_kthread+0x99/0x390 [ 1590.517412][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1590.522696][ C0] ? __kthread_parkme+0x7b/0x200 [ 1590.527639][ C0] ? __kthread_parkme+0x1a1/0x200 [ 1590.532673][ C0] kthread+0x711/0x8a0 [ 1590.536751][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1590.541954][ C0] ? __pfx_kthread+0x10/0x10 [ 1590.546548][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1590.551746][ C0] ? lockdep_hardirqs_on+0x98/0x140 [ 1590.556949][ C0] ? __pfx_kthread+0x10/0x10 [ 1590.561546][ C0] ret_from_fork+0x599/0xb30 [ 1590.566137][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1590.571256][ C0] ? __switch_to_asm+0x39/0x70 [ 1590.576021][ C0] ? __switch_to_asm+0x33/0x70 [ 1590.580785][ C0] ? __pfx_kthread+0x10/0x10 [ 1590.585392][ C0] ret_from_fork_asm+0x1a/0x30 [ 1590.590181][ C0] [ 1590.593197][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 1590.599516][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 1590.608449][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1590.618501][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 1590.624233][ C0] Code: 13 ee 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 73 50 0e 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 1590.644016][ C0] RSP: 0018:ffffffff8dc07d80 EFLAGS: 000002c6 [ 1590.650087][ C0] RAX: d072ff9970735400 RBX: ffffffff8197913a RCX: d072ff9970735400 [ 1590.658066][ C0] RDX: 0000000000000001 RSI: ffffffff8d78649e RDI: ffffffff8bc027e0 [ 1590.666214][ C0] RBP: ffffffff8dc07ea8 R08: ffff8880b86336db R09: 1ffff110170c66db [ 1590.674186][ C0] R10: dffffc0000000000 R11: ffffed10170c66dc R12: ffffffff8f815a70 [ 1590.682160][ C0] R13: 1ffffffff1b92a68 R14: 0000000000000000 R15: 0000000000000000 [ 1590.690131][ C0] FS: 0000000000000000(0000) GS:ffff888125e49000(0000) knlGS:0000000000000000 [ 1590.699063][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1590.705643][ C0] CR2: 00007f429dfc8d58 CR3: 000000000dd3a000 CR4: 00000000003526f0 [ 1590.713620][ C0] Call Trace: [ 1590.716897][ C0] [ 1590.719825][ C0] default_idle+0x13/0x20 [ 1590.724161][ C0] default_idle_call+0x73/0xb0 [ 1590.728932][ C0] do_idle+0x1ea/0x520 [ 1590.733003][ C0] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1590.738636][ C0] ? lockdep_hardirqs_on+0x98/0x140 [ 1590.743837][ C0] ? __pfx_do_idle+0x10/0x10 [ 1590.748437][ C0] ? do_idle+0x5/0x520 [ 1590.752512][ C0] cpu_startup_entry+0x44/0x60 [ 1590.757280][ C0] rest_init+0x2de/0x300 [ 1590.761530][ C0] start_kernel+0x3a7/0x400 [ 1590.766042][ C0] x86_64_start_reservations+0x24/0x30 [ 1590.771539][ C0] x86_64_start_kernel+0x143/0x1c0 [ 1590.776657][ C0] common_startup_64+0x13e/0x147 [ 1590.781615][ C0] [ 1595.651962][ T29] rcu_tasks_wait_gp: rcu_tasks_trace grace period number 149 (since boot) is 11162 jiffies old. [ 1595.737242][T22240] Bluetooth: hci3: command 0x2016 tx timeout