last executing test programs: 9m25.942922281s ago: executing program 32 (id=1533): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = epoll_create1(0x0) close(r3) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xf7, 0x485, &(0x7f0000001040)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x42, 0x0) pwritev2(r5, &(0x7f00000000c0)=[{&(0x7f0000000200)="df", 0xff00}], 0x1, 0x7ffffe, 0x0, 0x0) fallocate(r5, 0x3, 0x7, 0x8000c62) mount(0x0, &(0x7f0000000200)='.\x00', 0x0, 0x10001, &(0x7f0000000240)=',\xb3(,\x00\x00\x00\x00_\\(\xf2Y\xe9{\xa22\x84$(\x89yy\xbf\x88\x97\xc9\x16\xc6\x01\xdc\xb5B\x10\xa5\xbf43\x13\xb9\xac\xff\xda\x8e#n\x1d\x9f\nC\xff\xbfNv\xc8\x91\x02AI\x10\xf3\xdf\'y\x05c\xdc\xbdD2\x1d#\xd1\xf2\xc3\x9bE\x8d\x00~R\f`\xaa6>\xcc\xa3^#\xffK\xc63\xe8(\xb0\xb5\xf1\x0f\x83r1Vq\x19\xcc\x18%\n3\xfcAx\xcc\x9d\x85\xa9ZU:\xeb(\xbai\xc3B\xf8K\x13(2\xcd\xec\xb7\x89\xc5\x115\r\xe2j4\xbd\x9e\x02\x00\x00\x00\x00\x00\x00\x00\xa3x\t\x84Y\xa4X\xd9\xd1\xa28\xe7o\x7f\xae\xbd\xc2\x1f)1\xad\x1d\xa8s\x16\x04\x16\x03c$j\xf9\x19\x86\x93(\xd7jcW\x85\xb6\xd1t_\xad\x9b\xeb\x8b\x1d\x86\xf5\xfe\xcf.7|\x00\x00\x00\x00\x00\x00\x00\x00\x00KR\xba\x8bHK)\xbaE\xbe\x97<\x97[\"\x1b\x1a\x1a\xc5\xda\x1c\xbbs\xee\x80\xa4y\x16\xda0\xa1\xfa\x9fX\xed3m\x1d\xe0\x10\x9bq\xc7\x13\xf6\x84\x9f\xd0e\xaf=\xab\xf1Wu\xfe\x02\x97\x84\xe1.\xdf\xf6|:\xc9\x97~xp~\x1d\x85\xf6\xff\x91\x9e\xdf6\xd1\xd2\xc1\x92\x13\xbf\xfeq\x91\x17\x92\xacF;\xe4\x80^\xf6\xbd\xdd\xef\xbe@\x0fi\x8c\xc0+\xae\x93c\xe3U*[\\\xda\xeeX\xbf\x84\xa6\xee\xd3\f9\xf0\x83\x9e]\x95\x10\xc6\na\xc6\xb6\xd7\x16\xbf\x05i\x12\tM!\xd9\xa6\xac\xa3I\xa3\xd1d!\x87\x90^\xc7A') bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000540), &(0x7f00000010c0)='./file1\x00', 0x818c14, &(0x7f00000003c0)=ANY=[@ANYBLOB="756e695f786c6174653d312c73686f72746e616d653d77696e39352c726f6442af3143ec69722c6e6f636173652c696f636861727365743d63703933362c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e39352c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e39352c696f636861727365743d69736f383835392d322c757466383d302c6e6f6e756d7461696c3d302c757466"], 0x81, 0x29b, &(0x7f00000015c0)="$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") 8m59.352515215s ago: executing program 1 (id=1600): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x30, 0x8b}, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='source', 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000180)={@private0, 0x8000000, 0x0, 0xff, 0x1, 0xffff}, 0x20) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x28011, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c00000002060101000000000000000000000000050005000a000000050001000700000005000400030000000900020073797a310000000011000300686173683a6e65742c6e65740000000054abe411f697cbe9ce", @ANYRES8=0x0], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 8m57.202367712s ago: executing program 1 (id=1602): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendmmsg$inet(r0, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000001800)="e9d7b200bf6ecf325e1a9c0dccd8c357998ad687717f392aab546e2ad010fb16c3120d5c20a62654dfa7da737faea449d323a40f6b39ce3ccea07331a90678979abfde57efde701f4c14b7897b8ef0530b2eecee7536d3c0186c646980b6c78eaf6f4d9d55d211f1d5a38fe9f95f95e72127a07b02bd5f5b3bcb265680ae107e6cf387fb56fca7ecd4e7257f1dc5a9ac14a40036a3f8675e691f6f6e9067617ffa6045157cf5b7562f68838b5e13843d24469663f76355633256edfdebaeee1320c3303b3d6a0611350504", 0xcb}], 0x1}}, {{0x0, 0x0, &(0x7f0000001d00)=[{&(0x7f0000001ac0)="6c5b0b3e474f01bac640e7eb9064ec8e2ccac8b36c7d9ab464dc0bd7221bbae89e38ef0efc78f3e2f90e6236ad1ad1fb3dbd3e4fd8f2de84e526dfafb354837ff3958d97c8366471850ce9c14b83bb6e9a7c282a1d3e03cdfb675b61e1dbacc6ebcd08e105d4df684f2cd13262d10ffb8b0794f39b3e490416530423da29406a6a4b5a356dc898052883f1e54fd041e5a82247a4bbb784ce30ce321a2805b28d308a12c659df7f1d8ba12b3ac50605cda86b262fc1d8", 0xb6}, {&(0x7f0000001b80)="66a7d24b8451d3e0201a73aaabe1e3fe371dfbf029efdbc2de3742c687d72207cab9988bc15b9e27135be8e1d84bbeb01ccf943eb163a18b6a02c752c829c5f24ccd2c02f1c208e64deb4d916ff1727fe172cb09868b90", 0x57}, {&(0x7f0000001c00)="811e3e8966b4199496dc8329eca81fa24aedba0078949553b10b0df3cc25de83324cb3fb6672cbb763e260abad0adca5ab04cf5988b6c9a912e96ba01b3508", 0x3f}], 0x3}}, {{0x0, 0x0, &(0x7f0000004180)=[{&(0x7f0000002f00)="5f97b46d7adb8b68ff35da0f147fef1c6c6c60db5c1fb54496a27c9eeb14cf97ceed1ac5e9d95d093d6400f4996e3c5f73fa7edad49015f697bdc1a17f731cd7b4e404954a2fbc069f73e9fa86cab27babb16a9004571326e20d84cb662973ba616c4ba4126e45ad1a7230b6c86c600a3dd01872c0f5823fadc0eb8b73f3d98c63881cd2131d63411f51e40a122182507d2d4be44f5fdec44f415e3448ebda832a6831bbd48324e11fe96400d92fae40f4a9ed9f376c56e6c6c703fe76dac9c3b4aed05a81b2b2adadc3e2ba8fd5cfc361420e61014782eeb5a921fd042bdc9cbfff5dac3df5711d5710e1d0a11d6e637dddd79ccd700dbc4924e22f8a50f0f43b6082b706c748e6d552178aa8d5959d8a3a175bf1d2b61b363fbad94b53505fb7ac302a0dec14a19141120d958b484f6e5e6f087267680eecfc91d11295a6bbd062cb7c99299681481a9ee65f157852aa46b21936e52611dbd9a8019b7566ec79b5fe8db94259c20842af9384aaf33dfafd15bb97d051743f467399caa4ee74394664c3de94449b4597bb90787c75a468f320be5e8faa11d13b589231eca2f9f4072cd44f0a1cbc874233a71901f5e027fc301caeadbe77f76206257f006e483b6b78b9319b57399a0f736f01df368726ee362c6224aaef36cff42bf221a2e03fb153bcdc240b594b22a043adc163f9004ed1ef0f152f0d960a58a18d709236df500abd672436b916c67c7e6fe7508530fe05b040c7cbeb2645f43259f3a142583a3051ea146281b901f732ba819f84050007c5f07e3848ddb7de602171525c7df8427475137a845796f12214b69dc7fb8cd458e9f2fac518b9dc84da1a13d8e95eb32cf4c14d2647b6e8bd808a91d258da905bac6e87ef6485e19ba85442c12b15c2fe95f5da8fd93f3b0c080703626eb7213954f38bdb5806393b0394532a886d896bed1b964984ba35de5de4674eab5e97312b6331fec90b0e9ad08cbb564d73a0428af45ad9ea2719cf92df0aab1853dd38afb3db05f9869be763db6b990f43c04a4ac665ca401bda074d7571200e8a96a21cbae95a9baa57e82e88458d623209a67334f64ef7fa0a32d13cb086dfccef412abe0afc8019c5f25939aa053301588663f27479ae0900830729b70385679b32996d02182adafefb5e961e5f8362ad44bb619b9059bf877f7e8fd5cf39549410e482d0c3a83ac67b7304aad8277d43da1f31d8d017304384596fb79d1201baa4feabdd8365028f3410d1e9497f88049e47c110193176927726f0a3b0209a1d3566fd04c68b6a114ea2aec2d3c43a34ba63eb75d3f6f7ed98517be6fd703b87bf50132d72222dbcd153c3d0e104a9ec507385263940799f9244c3c9b653622f3813dc689a205dc1e473815443f27d17bccdf34e219db5161364d97fd48d2f011fdaf5d7370698ad0cf3f06f66273a5fe6ad3877719dce5170e923686d89924eb85332acedb1fd208a323f84ecf2588621dd82f7a50bf489c6d28fc1d1f36a2ebbab0de2aa49a335f2a5aa09f7b5d8237757a4c74e3bca1eabbdc18f1ead5551bc59eb6f319ab16015f010c6b41f4412fc351b3be68a25b93663c389dbd72d2e84a2eb1dfe150b639d78fbb210d74352a4b8612c96845d3549b5b055ef4a864ef51c800aedd00fd7b3e8794c20a8630e9349e1825b5d7c8d25043f75be6098921eac5eb08e8dd27bc7b36453cf5c23687c809d3a74280beb3c5ce59629bb950499bffb758abe221447e78785f4cc1661c42dee6b41d9", 0x4e9}], 0x1}}], 0x3, 0x40000) 8m57.135310405s ago: executing program 1 (id=1603): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = epoll_create1(0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r3, &(0x7f0000000140)={0x77540947ad9a168d}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xf7, 0x485, &(0x7f0000001040)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x42, 0x0) pwritev2(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)="df", 0xff00}], 0x1, 0x7ffffe, 0x0, 0x0) fallocate(r4, 0x3, 0x7, 0x8000c62) mount(0x0, &(0x7f0000000200)='.\x00', 0x0, 0x10001, &(0x7f0000000240)=',\xb3(,\x00\x00\x00\x00_\\(\xf2Y\xe9{\xa22\x84$(\x89yy\xbf\x88\x97\xc9\x16\xc6\x01\xdc\xb5B\x10\xa5\xbf43\x13\xb9\xac\xff\xda\x8e#n\x1d\x9f\nC\xff\xbfNv\xc8\x91\x02AI\x10\xf3\xdf\'y\x05c\xdc\xbdD2\x1d#\xd1\xf2\xc3\x9bE\x8d\x00~R\f`\xaa6>\xcc\xa3^#\xffK\xc63\xe8(\xb0\xb5\xf1\x0f\x83r1Vq\x19\xcc\x18%\n3\xfcAx\xcc\x9d\x85\xa9ZU:\xeb(\xbai\xc3B\xf8K\x13(2\xcd\xec\xb7\x89\xc5\x115\r\xe2j4\xbd\x9e\x02\x00\x00\x00\x00\x00\x00\x00\xa3x\t\x84Y\xa4X\xd9\xd1\xa28\xe7o\x7f\xae\xbd\xc2\x1f)1\xad\x1d\xa8s\x16\x04\x16\x03c$j\xf9\x19\x86\x93(\xd7jcW\x85\xb6\xd1t_\xad\x9b\xeb\x8b\x1d\x86\xf5\xfe\xcf.7|\x00\x00\x00\x00\x00\x00\x00\x00\x00KR\xba\x8bHK)\xbaE\xbe\x97<\x97[\"\x1b\x1a\x1a\xc5\xda\x1c\xbbs\xee\x80\xa4y\x16\xda0\xa1\xfa\x9fX\xed3m\x1d\xe0\x10\x9bq\xc7\x13\xf6\x84\x9f\xd0e\xaf=\xab\xf1Wu\xfe\x02\x97\x84\xe1.\xdf\xf6|:\xc9\x97~xp~\x1d\x85\xf6\xff\x91\x9e\xdf6\xd1\xd2\xc1\x92\x13\xbf\xfeq\x91\x17\x92\xacF;\xe4\x80^\xf6\xbd\xdd\xef\xbe@\x0fi\x8c\xc0+\xae\x93c\xe3U*[\\\xda\xeeX\xbf\x84\xa6\xee\xd3\f9\xf0\x83\x9e]\x95\x10\xc6\na\xc6\xb6\xd7\x16\xbf\x05i\x12\tM!\xd9\xa6\xac\xa3I\xa3\xd1d!\x87\x90^\xc7A') bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000540), &(0x7f00000010c0)='./file1\x00', 0x818c14, &(0x7f00000003c0)=ANY=[@ANYBLOB="756e695f786c6174653d312c73686f72746e616d653d77696e39352c726f6442af3143ec69722c6e6f636173652c696f636861727365743d63703933362c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e39352c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e39352c696f636861727365743d69736f383835392d322c757466383d302c6e6f6e756d7461696c3d302c757466"], 0x81, 0x29b, &(0x7f00000015c0)="$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") 8m54.64917132s ago: executing program 1 (id=1607): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0x106f) r4 = socket(0x26, 0x6, 0xffff6d9a) sendmsg$nl_route_sched(r4, 0x0, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a18010000060a0b0400000000000000000200000034000480300001800a0001006d617463680000002000028008000240000000030b000100736f636b"], 0x140}, 0x1, 0x0, 0x0, 0x40480e0}, 0x4008014) syz_usb_connect(0x0, 0x59, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0a"], 0x22) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$media(&(0x7f0000000040), 0x7fdffffe, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r5, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000000)={0xf010000, 0x0, 0x0, r6, 0x0, 0x0}) 8m50.893161177s ago: executing program 1 (id=1615): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0x106f) r4 = socket(0x26, 0x6, 0xffff6d9a) sendmsg$nl_route_sched(r4, 0x0, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a18010000060a0b0400000000000000000200000034000480300001800a0001006d617463680000002000028008000240000000030b000100736f636b"], 0x140}, 0x1, 0x0, 0x0, 0x40480e0}, 0x4008014) syz_usb_connect(0x0, 0x59, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0a"], 0x22) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$media(&(0x7f0000000040), 0x7fdffffe, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r5, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) socket$alg(0x26, 0x5, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x8810) r7 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r7, 0xc0205648, &(0x7f0000000000)={0xf010000, 0x0, 0x0, r6, 0x0, 0x0}) 8m47.754331243s ago: executing program 1 (id=1619): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) close(r0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) write$sndseq(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000140)={0x16f, @tick=0x7, 0x0, {0x0, 0x7}}) getsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, 0x0, &(0x7f00000003c0)) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x48) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r2, 0x0, 0x48881) setsockopt(r1, 0x84, 0x80, &(0x7f0000000000)="1400000009000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @ipv4={'\x00', '\xff\xff', @empty}}], 0x1c) sendmsg$inet(r1, &(0x7f00000000c0)={&(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000100)="ff", 0x1}], 0x1}, 0x815) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="24000000210001000000000000000000020000000000000000"], 0x24}}, 0x0) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e23, @loopback}}}, 0x84) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x51, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 8m36.654371746s ago: executing program 33 (id=1605): sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x14, 0x0, 0x4, 0x0, 0x25dfdbfe}, 0x14}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}]}, 0x3c}, 0x1, 0xba01, 0x0, 0x6000000}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x1c}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0xbe8}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 8m31.695531343s ago: executing program 34 (id=1619): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) close(r0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) write$sndseq(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000140)={0x16f, @tick=0x7, 0x0, {0x0, 0x7}}) getsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, 0x0, &(0x7f00000003c0)) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x48) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r2, 0x0, 0x48881) setsockopt(r1, 0x84, 0x80, &(0x7f0000000000)="1400000009000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @ipv4={'\x00', '\xff\xff', @empty}}], 0x1c) sendmsg$inet(r1, &(0x7f00000000c0)={&(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000100)="ff", 0x1}], 0x1}, 0x815) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="24000000210001000000000000000000020000000000000000"], 0x24}}, 0x0) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e23, @loopback}}}, 0x84) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x51, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 7m50.054850658s ago: executing program 7 (id=1697): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x100, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x2, @loopback, 0xfffffffd}}, 0x0, 0x0, 0x500, 0x0, 0x54, 0xa}, 0x9c) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x50, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x0) 7m46.972604831s ago: executing program 7 (id=1701): r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$COMEDI_INSN(0xffffffffffffffff, 0x8028640c, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140003"], 0x34}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) 7m45.089429455s ago: executing program 7 (id=1706): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x10, 0x0, &(0x7f0000000080)) socket$inet6_sctp(0xa, 0x5, 0x84) add_key$keyring(&(0x7f0000000400), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = socket$l2tp6(0xa, 0x2, 0x73) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x80000000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xf}, 0x1c) syz_emit_ethernet(0x1f, &(0x7f0000000140)={@local, @random="c4bc9cac9686", @void, {@llc_tr={0x11, {@snap={0xaa, 0x0, "bf", "d700", 0x0, "0b1cf062df4821f260"}}}}}, 0x0) ioctl$KDFONTOP_SET(r3, 0x4b72, &(0x7f0000000180)={0x0, 0x1, 0x12, 0x6, 0x200, &(0x7f0000000880)="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"}) 7m42.870406936s ago: executing program 7 (id=1708): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x40, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1, 0x442d, &(0x7f0000004480)="$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") socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) truncate(&(0x7f00000000c0)='./file1\x00', 0x2) 7m41.022049937s ago: executing program 7 (id=1715): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x10, 0x0, &(0x7f0000000080)) socket$inet6_sctp(0xa, 0x5, 0x84) add_key$keyring(&(0x7f0000000400), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = socket$l2tp6(0xa, 0x2, 0x73) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x80000000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xf}, 0x1c) syz_emit_ethernet(0x1f, &(0x7f0000000140)={@local, @random="c4bc9cac9686", @void, {@llc_tr={0x11, {@snap={0xaa, 0x0, "bf", "d700", 0x0, "0b1cf062df4821f260"}}}}}, 0x0) ioctl$KDFONTOP_SET(r3, 0x4b72, &(0x7f0000000180)={0x0, 0x1, 0x12, 0x6, 0x200, &(0x7f0000000880)="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"}) 7m37.927244192s ago: executing program 7 (id=1727): socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002640)=@newtaction={0xe68, 0x30, 0x3f, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0xfffffffc, 0x0, 0x0, 0x0, 0x100}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x5943}, {0x0, 0x800000, 0x0, 0xfffffffc}, {}, {}, {0x0, 0x0, 0x0, 0x10}, {}, {}, {0x0, 0xa2}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x1cbe}, {0x0, 0x0, 0x0, 0x5}, {}, {}, {}, {0x2}, {0x8}, {}, {0x0, 0xfffffffe, 0x400000}, {0x0, 0xfffffffc}, {}, {0x80}, {}, {0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0x4, 0xffffff6a}, {0x0, 0x3, 0x0, 0x0, 0x5}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0x100}, {}, {}, {0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x800000}, {0x0, 0x0, 0x0, 0xe54b}, {0x0, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x7fffffff}, {0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x27a}, {0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {0x0, 0x0, 0x0, 0x9}, {0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0xfffffff7, 0xfffffffc, 0x0, 0x0, 0xfffffffc}, {}, {0x0, 0x2}, {}, {}, {}, {0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0xc}, {}, {0x0, 0x0, 0x2b7f}, {0x3ff, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x6}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0xcfc, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x70}, {}, {0xfffffffd, 0x0, 0x0, 0x0, 0xa92}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x40000000, 0x1, 0x0, 0x10001}, {0x0, 0x0, 0x20}, {}, {0x80000}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, {0xfffffffc}, {}, {}, {}, {0x0, 0xa, 0xfffffffc}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x40, 0x0, 0x0, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1, 0x2}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x2}, {0x5}, {}, {}, {}, {}, {}, {0x7, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) 7m22.161683898s ago: executing program 35 (id=1727): socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002640)=@newtaction={0xe68, 0x30, 0x3f, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0xfffffffc, 0x0, 0x0, 0x0, 0x100}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x5943}, {0x0, 0x800000, 0x0, 0xfffffffc}, {}, {}, {0x0, 0x0, 0x0, 0x10}, {}, {}, {0x0, 0xa2}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x1cbe}, {0x0, 0x0, 0x0, 0x5}, {}, {}, {}, {0x2}, {0x8}, {}, {0x0, 0xfffffffe, 0x400000}, {0x0, 0xfffffffc}, {}, {0x80}, {}, {0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0x4, 0xffffff6a}, {0x0, 0x3, 0x0, 0x0, 0x5}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0x100}, {}, {}, {0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x800000}, {0x0, 0x0, 0x0, 0xe54b}, {0x0, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x7fffffff}, {0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x27a}, {0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {0x0, 0x0, 0x0, 0x9}, {0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0xfffffff7, 0xfffffffc, 0x0, 0x0, 0xfffffffc}, {}, {0x0, 0x2}, {}, {}, {}, {0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0xc}, {}, {0x0, 0x0, 0x2b7f}, {0x3ff, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x6}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0xcfc, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x70}, {}, {0xfffffffd, 0x0, 0x0, 0x0, 0xa92}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x40000000, 0x1, 0x0, 0x10001}, {0x0, 0x0, 0x20}, {}, {0x80000}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, {0xfffffffc}, {}, {}, {}, {0x0, 0xa, 0xfffffffc}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x40, 0x0, 0x0, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1, 0x2}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x2}, {0x5}, {}, {}, {}, {}, {}, {0x7, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) 5m55.832934067s ago: executing program 2 (id=1892): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002640)=@newtaction={0xe68, 0x30, 0x3f, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0xfffffffc, 0x0, 0x0, 0x0, 0x100}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x5943}, {0x0, 0x800000, 0x0, 0xfffffffc}, {}, {}, {0x0, 0x0, 0x0, 0x10}, {}, {}, {0x0, 0xa2}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x1cbe}, {0x0, 0x0, 0x0, 0x5}, {}, {}, {}, {0x2}, {0x8}, {}, {0x0, 0xfffffffe, 0x400000}, {0x0, 0xfffffffc}, {}, {0x80}, {}, {0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0x4, 0xffffff6a}, {0x0, 0x3, 0x0, 0x0, 0x5}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0x100}, {}, {}, {0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x800000}, {0x0, 0x0, 0x0, 0xe54b}, {0x0, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x7fffffff}, {0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x27a}, {0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {0x0, 0x0, 0x0, 0x9}, {0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0xfffffff7, 0xfffffffc, 0x0, 0x0, 0xfffffffc}, {}, {0x0, 0x2}, {}, {}, {}, {0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0xc}, {}, {0x0, 0x0, 0x2b7f}, {0x3ff, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x6}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0xcfc, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x70}, {}, {0xfffffffd, 0x0, 0x0, 0x0, 0xa92}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x40000000, 0x1, 0x0, 0x10001}, {0x0, 0x0, 0x20}, {}, {0x80000}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, {0xfffffffc}, {}, {}, {}, {0x0, 0xa, 0xfffffffc}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x40, 0x0, 0x0, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1, 0x2}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x2}, {0x5}, {}, {}, {}, {}, {}, {0x7, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) mbind(&(0x7f00001fa000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, 0x0, 0x0) mount$9p_virtio(0x0, 0x0, &(0x7f00000004c0), 0x8c, 0x0) openat$sndseq(0xffffff9c, &(0x7f0000001240), 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001a000100000000000000000002000000750200060030000008000100ac1414ff"], 0x24}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) 5m51.668946925s ago: executing program 2 (id=1897): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x400000009) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) 5m51.485821654s ago: executing program 2 (id=1898): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xb, 0xe, &(0x7f0000003fc0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) socket$kcm(0x10, 0x2, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[], 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r3, 0x0, &(0x7f0000000040)=""/73}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, 0x0) ioctl$vim2m_VIDIOC_QBUF(r5, 0xc058560f, &(0x7f0000000180)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'y)\x00'}, 0x0, 0x1, {0x0}, 0xea}) close_range(r4, 0xffffffffffffffff, 0x0) 5m50.15559527s ago: executing program 2 (id=1910): bind$llc(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$tipc(0xffffffffffffffff, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) r4 = socket(0x1e, 0x1, 0x0) sendmmsg$sock(r4, &(0x7f0000000600)=[{{&(0x7f0000000000)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1000000}}, {{&(0x7f0000000080)=@tipc=@name={0x1e, 0x2, 0x1, {{0x42}}}, 0x80, 0x0}}], 0x2, 0x0) 5m49.221752517s ago: executing program 2 (id=1905): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xb, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) socket$kcm(0x10, 0x2, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000180)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'y)\x00'}, 0x0, 0x1, {0x0}, 0xea}) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000080)=0x2) close_range(r3, 0xffffffffffffffff, 0x0) 5m48.192897368s ago: executing program 2 (id=1907): syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb000000010902"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f0000000340)=ANY=[], &(0x7f0000000100)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000140), 0x5}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000440)="e43006ea3eb060409f11616b0ff107c8b5c84a2513725dd800704d068c0a1d6565ec464eaa", 0x0, 0x3}, 0x38) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) syz_usb_connect$cdc_ecm(0x0, 0x56, 0x0, 0x0) ioctl$TCFLSH(r4, 0x400455c8, 0x400000009) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4008855}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="14000000100001f500000000000000000100000a14000000020a497f75241d4e1deb00000500000614000000110001"], 0x3c}, 0x1, 0x0, 0x0, 0x2004c040}, 0xc050) sendmsg$NFT_BATCH(r3, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x40081100}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)=ANY=[@ANYBLOB="1400a5e31000010000000000000000000d00000a140000001100010000000000000000000300000a"], 0x28}, 0x1, 0x0, 0x0, 0x84}, 0x1) socket$inet6_sctp(0xa, 0x1, 0x84) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x26) 5m31.832643853s ago: executing program 36 (id=1907): syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb000000010902"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f0000000340)=ANY=[], &(0x7f0000000100)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000140), 0x5}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000440)="e43006ea3eb060409f11616b0ff107c8b5c84a2513725dd800704d068c0a1d6565ec464eaa", 0x0, 0x3}, 0x38) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) syz_usb_connect$cdc_ecm(0x0, 0x56, 0x0, 0x0) ioctl$TCFLSH(r4, 0x400455c8, 0x400000009) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4008855}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="14000000100001f500000000000000000100000a14000000020a497f75241d4e1deb00000500000614000000110001"], 0x3c}, 0x1, 0x0, 0x0, 0x2004c040}, 0xc050) sendmsg$NFT_BATCH(r3, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x40081100}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)=ANY=[@ANYBLOB="1400a5e31000010000000000000000000d00000a140000001100010000000000000000000300000a"], 0x28}, 0x1, 0x0, 0x0, 0x84}, 0x1) socket$inet6_sctp(0xa, 0x1, 0x84) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x26) 4m51.239506236s ago: executing program 8 (id=2022): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0x106f) r4 = socket(0x26, 0x6, 0xffff6d9a) sendmsg$nl_route_sched(r4, 0x0, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4008014) syz_usb_connect(0x0, 0x59, 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x3b, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$media(&(0x7f0000000040), 0x7fdffffe, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r5, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000000)={0xf010000, 0x0, 0x0, r6, 0x0, 0x0}) 4m48.171724488s ago: executing program 8 (id=2023): openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x20002, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="60000000090603000000000000000000050000000900020073797a3100000000050001000700000038000780060004404e21000005000700110000000c000180080001400a0101010c00028008000140e00000020c001480"], 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 4m48.170545828s ago: executing program 8 (id=2025): syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb000000010902"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f0000000340)=ANY=[], &(0x7f0000000100)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000140), 0x5}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000440)="e43006ea3eb060409f11616b0ff107c8b5c84a2513725dd800704d068c0a1d6565ec464eaa", 0x0, 0x3}, 0x38) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) syz_usb_connect$cdc_ecm(0x0, 0x56, 0x0, 0x0) ioctl$TCFLSH(r4, 0x400455c8, 0x400000009) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4008855}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x40081100}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)=ANY=[@ANYBLOB="1400a5e31000010000000000000000000d00000a140000001100010000000000000000000300000a"], 0x28}, 0x1, 0x0, 0x0, 0x84}, 0x1) socket$inet6_sctp(0xa, 0x1, 0x84) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x26) 4m42.095235481s ago: executing program 8 (id=2031): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002640)=@newtaction={0xe68, 0x30, 0x3f, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0xfffffffc, 0x0, 0x0, 0x0, 0x100}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x5943}, {0x0, 0x800000, 0x0, 0xfffffffc}, {}, {}, {0x0, 0x0, 0x0, 0x10}, {}, {}, {0x0, 0xa2}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x1cbe}, {0x0, 0x0, 0x0, 0x5}, {}, {}, {}, {0x2}, {0x8}, {}, {0x0, 0xfffffffe, 0x400000}, {0x0, 0xfffffffc}, {}, {0x80}, {}, {0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0x4, 0xffffff6a}, {0x0, 0x3, 0x0, 0x0, 0x5}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0x100}, {}, {}, {0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x800000}, {0x0, 0x0, 0x0, 0xe54b}, {0x0, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x7fffffff}, {0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x27a}, {0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {0x0, 0x0, 0x0, 0x9}, {0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0xfffffff7, 0xfffffffc, 0x0, 0x0, 0xfffffffc}, {}, {0x0, 0x2}, {}, {}, {}, {0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0xc}, {}, {0x0, 0x0, 0x2b7f}, {0x3ff, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x6}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0xcfc, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x70}, {}, {0xfffffffd, 0x0, 0x0, 0x0, 0xa92}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x40000000, 0x1, 0x0, 0x10001}, {0x0, 0x0, 0x20}, {}, {0x80000}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, {0xfffffffc}, {}, {}, {}, {0x0, 0xa, 0xfffffffc}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x40, 0x0, 0x0, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1, 0x2}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x2}, {0x5}, {}, {}, {}, {}, {}, {0x7, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, 0x0, 0x0) openat$sndseq(0xffffff9c, &(0x7f0000001240), 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001a000100000000000000000002000000750200060030000008000100ac1414ff"], 0x24}}, 0x0) socket$tipc(0x1e, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) 4m38.001571274s ago: executing program 8 (id=2036): openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x20002, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="60000000090603000000000000000000050000000900020073797a3100000000050001000700000038000780060004404e21000005000700110000000c000180080001400a0101010c00028008000140e00000020c001480080001"], 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 4m37.867880371s ago: executing program 8 (id=2039): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002640)=@newtaction={0xe68, 0x30, 0x3f, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0xfffffffc, 0x0, 0x0, 0x0, 0x100}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x5943}, {0x0, 0x800000, 0x0, 0xfffffffc}, {}, {}, {0x0, 0x0, 0x0, 0x10}, {}, {}, {0x0, 0xa2}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x1cbe}, {0x0, 0x0, 0x0, 0x5}, {}, {}, {}, {0x2}, {0x8}, {}, {0x0, 0xfffffffe, 0x400000}, {0x0, 0xfffffffc}, {}, {0x80}, {}, {0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0x4, 0xffffff6a}, {0x0, 0x3, 0x0, 0x0, 0x5}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0x100}, {}, {}, {0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x800000}, {0x0, 0x0, 0x0, 0xe54b}, {0x0, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x7fffffff}, {0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x27a}, {0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {0x0, 0x0, 0x0, 0x9}, {0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0xfffffff7, 0xfffffffc, 0x0, 0x0, 0xfffffffc}, {}, {0x0, 0x2}, {}, {}, {}, {0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0xc}, {}, {0x0, 0x0, 0x2b7f}, {0x3ff, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x6}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0xcfc, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x70}, {}, {0xfffffffd, 0x0, 0x0, 0x0, 0xa92}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x40000000, 0x1, 0x0, 0x10001}, {0x0, 0x0, 0x20}, {}, {0x80000}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, {0xfffffffc}, {}, {}, {}, {0x0, 0xa, 0xfffffffc}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x40, 0x0, 0x0, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1, 0x2}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x2}, {0x5}, {}, {}, {}, {}, {}, {0x7, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) mbind(&(0x7f00001fa000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, 0x0, 0x0) openat$sndseq(0xffffff9c, &(0x7f0000001240), 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001a000100000000000000000002000000750200060030000008000100ac1414ff"], 0x24}}, 0x0) socket$tipc(0x1e, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) 4m22.120697206s ago: executing program 37 (id=2039): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002640)=@newtaction={0xe68, 0x30, 0x3f, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0xfffffffc, 0x0, 0x0, 0x0, 0x100}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x5943}, {0x0, 0x800000, 0x0, 0xfffffffc}, {}, {}, {0x0, 0x0, 0x0, 0x10}, {}, {}, {0x0, 0xa2}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x1cbe}, {0x0, 0x0, 0x0, 0x5}, {}, {}, {}, {0x2}, {0x8}, {}, {0x0, 0xfffffffe, 0x400000}, {0x0, 0xfffffffc}, {}, {0x80}, {}, {0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0x4, 0xffffff6a}, {0x0, 0x3, 0x0, 0x0, 0x5}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0x100}, {}, {}, {0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x800000}, {0x0, 0x0, 0x0, 0xe54b}, {0x0, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x7fffffff}, {0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x27a}, {0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {0x0, 0x0, 0x0, 0x9}, {0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0xfffffff7, 0xfffffffc, 0x0, 0x0, 0xfffffffc}, {}, {0x0, 0x2}, {}, {}, {}, {0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0xc}, {}, {0x0, 0x0, 0x2b7f}, {0x3ff, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x6}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0xcfc, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x70}, {}, {0xfffffffd, 0x0, 0x0, 0x0, 0xa92}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x40000000, 0x1, 0x0, 0x10001}, {0x0, 0x0, 0x20}, {}, {0x80000}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, {0xfffffffc}, {}, {}, {}, {0x0, 0xa, 0xfffffffc}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x40, 0x0, 0x0, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1, 0x2}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x2}, {0x5}, {}, {}, {}, {}, {}, {0x7, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) mbind(&(0x7f00001fa000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, 0x0, 0x0) openat$sndseq(0xffffff9c, &(0x7f0000001240), 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001a000100000000000000000002000000750200060030000008000100ac1414ff"], 0x24}}, 0x0) socket$tipc(0x1e, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) 3m20.650976307s ago: executing program 3 (id=2167): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(0xffffffffffffffff) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3000003, 0x4082172, 0xffffffffffffffff, 0x418a4000) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) r3 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f0000002dc0)=@userptr={0x2, 0x1, 0x4, 0x800, 0x3, {}, {0x2, 0xc, 0x9, 0xc, 0x6, 0x8, "bf240fef"}, 0x3, 0x2, {&(0x7f00000002c0)}, 0x96000}) fsopen(0x0, 0x0) 3m18.883855405s ago: executing program 3 (id=2169): socketpair$unix(0x1, 0xfc9de515cc7fee49, 0x0, 0x0) syz_open_procfs$namespace(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x40002000) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendfile(r1, r2, 0x0, 0x106f) 3m18.764079271s ago: executing program 3 (id=2171): socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = fsopen(0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000b00), 0x0, 0x0) ioctl$TIOCSIG(r2, 0x40045436, 0x14) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(&(0x7f00000004c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='.\x00', &(0x7f0000000140)='smb3\x00', 0x0, 0x0) mremap(&(0x7f0000532000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000190000/0x1000)=nil) r5 = socket(0x40000000015, 0x5, 0x0) getsockopt(r5, 0x200000000114, 0x271c, 0x0, &(0x7f0000000040)) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) munmap(&(0x7f0000006000/0x4000)=nil, 0x4000) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r6 = syz_create_resource$binfmt(&(0x7f0000000100)='./file1\x00') execveat$binfmt(0xffffffffffffff9c, r6, 0x0, &(0x7f0000004780)={[], 0xf000}, 0x1000) 3m14.213778468s ago: executing program 3 (id=2176): open(0x0, 0x1, 0x104) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1700"], 0x48) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$sock_timeval(r3, 0x1, 0xa, 0x0, &(0x7f0000000080)) socket$xdp(0x2c, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) syz_open_procfs$namespace(r0, &(0x7f0000000040)='ns/user\x00') r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r5}, 0x4) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x19, &(0x7f00000003c0)=@framed={{0x18, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}]}, &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) 3m10.325196421s ago: executing program 3 (id=2191): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) getpeername$netrom(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup(r3) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)={0x9c, 0x0, 0x800, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xa}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1450}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x31}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x3}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15b8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xffffffff}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]]}, 0x9c}, 0x1, 0x0, 0x0, 0x20040840}, 0xc000) read(0xffffffffffffffff, &(0x7f0000000040)=""/138, 0x8a) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x1c, 0x4, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x28000080) 3m8.189175308s ago: executing program 3 (id=2198): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x20008800}, 0x0) socket(0x10, 0x80805, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000003fc0), 0x840, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) close(0x3) r3 = socket$kcm(0x2b, 0x1, 0x0) r4 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xa43d, 0x80, 0x2, 0x3b9}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r4, 0x47f6, 0x0, 0x2, 0x0, 0x0) sendmsg$inet(r3, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000c08d) shutdown(r3, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) r7 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x8b6000, 0x40) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r7, 0xc008551b, &(0x7f0000000040)={0x3, 0x8, [0xfffff8a8, 0x5]}) 2m52.837946043s ago: executing program 38 (id=2198): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x20008800}, 0x0) socket(0x10, 0x80805, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000003fc0), 0x840, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) close(0x3) r3 = socket$kcm(0x2b, 0x1, 0x0) r4 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xa43d, 0x80, 0x2, 0x3b9}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r4, 0x47f6, 0x0, 0x2, 0x0, 0x0) sendmsg$inet(r3, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000c08d) shutdown(r3, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) r7 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x8b6000, 0x40) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r7, 0xc008551b, &(0x7f0000000040)={0x3, 0x8, [0xfffff8a8, 0x5]}) 5.316412444s ago: executing program 6 (id=2647): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@gettclass={0x24, 0x25, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x6}, {0x0, 0xfff1}, {0x0, 0x9}}}, 0x24}}, 0x40c0) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x11fe, 0x0, 0x9, 0x40, "1ae39b5a4e3b8a00b20100dab240794233a5bd", 0x0, 0x2}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(0xffffffffffffffff, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x10, "3eccd8000000000000000010000000040100"}) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000180)=0xf9) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f00000001c0)=0xd) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000280)=0xb3) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000100)=0x3) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000200)=0x5) 5.177636071s ago: executing program 6 (id=2650): syz_usb_connect(0x2, 0x0, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) sendmsg$TIPC_CMD_SET_NODE_ADDR(r5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x11}, 0x20040010) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r3, 0x100000000) io_setup(0x1, &(0x7f0000002500)=0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) io_submit(r6, 0x2, &(0x7f00000011c0)=[0x0, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x1, 0x453, r3, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x3}]) socket$nl_route(0x10, 0x3, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3000009, 0x46031, 0xffffffffffffffff, 0x0) 5.124773593s ago: executing program 5 (id=2651): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@gettclass={0x24, 0x25, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x6}, {0x0, 0xfff1}, {0x0, 0x9}}}, 0x24}}, 0x40c0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r0, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x10, "3eccd8000000000000000010000000040100"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0xf9) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000001c0)=0xd) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000280)=0xb3) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x3) 5.092646025s ago: executing program 5 (id=2652): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x30, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x99}]}, 0x30}}, 0x0) 4.694783785s ago: executing program 5 (id=2653): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getpeername$netrom(r3, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = dup(r4) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)={0x9c, 0x0, 0x800, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xa}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1450}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x31}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x3}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15b8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xffffffff}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]]}, 0x9c}, 0x1, 0x0, 0x0, 0x20040840}, 0xc000) read(0xffffffffffffffff, &(0x7f0000000040)=""/138, 0x8a) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x1c, 0x4, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x28000080) 3.344005612s ago: executing program 0 (id=2670): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x30, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x99}]}, 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, 0x0, 0x8) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) 3.237396108s ago: executing program 0 (id=2671): socket$nl_netfilter(0x10, 0x3, 0xc) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSIG(r1, 0x40045436, 0x14) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000140)='smb3\x00', 0x0, 0x0) socket(0x40000000015, 0x5, 0x0) munmap(&(0x7f0000006000/0x4000)=nil, 0x4000) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) syz_create_resource$binfmt(&(0x7f0000000100)='./file1\x00') setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000005c0)=@mangle={'mangle\x00', 0x2, 0x6, 0x580, 0x0, 0x310, 0x0, 0x0, 0x1d8, 0x4b0, 0x4b0, 0x4b0, 0x4b0, 0x4b0, 0x6, 0x0, {[{{@ipv6={@mcast2, @ipv4={'\x00', '\xff\xff', @remote}, [0x0, 0xff, 0xff000000, 0xff000000], [0x0, 0xffffff00, 0xffffff00, 0xffffffff], 'gretap0\x00', 'batadv_slave_0\x00', {}, {0xff}, 0x2b, 0x5, 0x1, 0x18}, 0x0, 0xd0, 0xf8, 0x0, {0x7a00000010000000}, [@inet=@rpfilter={{0x28}, {0x1}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0xfc, 0x6}}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0xb4}, @initdev={0xfe, 0x88, '\x00', 0xfd, 0x0}, [0xff], [0xffffff00], '\x00', 'bond_slave_0\x00', {}, {0xff}}, 0x0, 0xf0, 0x138, 0x48000000, {}, [@common=@dst={{0x48}, {0xff, 0x4, 0x0, [0x1, 0x7a, 0xfffd, 0x3f4, 0x0, 0x3, 0x5, 0x0, 0x8, 0x30, 0xe5, 0x4, 0x1, 0x6, 0x0, 0x1], 0x6}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, 'ip6gre0\x00', {0x4}}}}, {{@ipv6={@remote, @dev={0xfe, 0x80, '\x00', 0xd}, [0x0, 0xffff00, 0xffffffff], [0xffffff00, 0xffffff00, 0xffffff00, 0xff000000], 'nr0\x00', 'vxcan1\x00', {}, {}, 0x62, 0x5, 0x3, 0x20}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x2, 0xf}}}, {{@ipv6={@mcast1, @private0, [0xff000000, 0xffffff, 0x0, 0xffffff00], [0xffffff00, 0xffffff00, 0xff, 0xff000000], 'pim6reg1\x00', 'hsr0\x00', {}, {}, 0x6c, 0x80, 0x5, 0x61}, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5e0) 2.652011877s ago: executing program 5 (id=2673): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b921, 0x80000, {0x0, 0x0, 0x0, r10, {0x0, 0x3}, {0xfff1, 0xb}, {0x9, 0x6}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7f}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4010040}, 0x4000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2.650622197s ago: executing program 9 (id=2683): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getpeername$netrom(r3, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = dup(r4) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)={0x9c, 0x0, 0x800, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xa}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1450}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x31}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x3}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15b8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xffffffff}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]]}, 0x9c}, 0x1, 0x0, 0x0, 0x20040840}, 0xc000) read(0xffffffffffffffff, &(0x7f0000000040)=""/138, 0x8a) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x1c, 0x4, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x28000080) 2.003397419s ago: executing program 6 (id=2674): ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x11fe, 0x0, 0x9, 0x40, "1ae39b5a4e3b8a00b20100dab240794233a5bd", 0x0, 0x2}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r0, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x10, "3eccd8000000000000000010000000040100"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0xf9) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000001c0)=0xd) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000280)=0xb3) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x3) 1.701568884s ago: executing program 0 (id=2675): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r1, 0x6, 0x9, 0x0, &(0x7f0000000040)) 1.545944322s ago: executing program 0 (id=2676): ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x11fe, 0x0, 0x9, 0x40, "1ae39b5a4e3b8a00b20100dab240794233a5bd", 0x0, 0x2}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TCSETS(r0, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x10, "3eccd8000000000000000010000000040100"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0xf9) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000001c0)=0xd) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000280)=0xb3) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x3) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000200)=0x5) 1.505343554s ago: executing program 0 (id=2677): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x30, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x99}]}, 0x30}}, 0x0) 1.369670311s ago: executing program 9 (id=2678): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x10040) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000200)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010001, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x3, 0x10000}]}}}}}}}, 0x0) 1.353343932s ago: executing program 6 (id=2679): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c000000130001000400"/20, @ANYRES32=0x0, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32, @ANYBLOB="1400350064756d6d7930"], 0x3c}, 0x1, 0x0, 0x0, 0x8004010}, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r3, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) 1.332818893s ago: executing program 9 (id=2680): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000180)="e1", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x0, @private=0xa010102}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000100)="a7", 0x1}], 0x1}}, {{&(0x7f0000000400)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x30}}, 0x10, &(0x7f0000000b40)=[{&(0x7f0000000500)="b5", 0x1}], 0x1}}], 0x3, 0x0) 1.276826806s ago: executing program 4 (id=2681): ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r1, @ANYBLOB="00001700000000001c0037800b0001006970768a616e08000c0002800600"], 0x44}, 0x1, 0x0, 0x0, 0x4008010}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) 1.244517228s ago: executing program 0 (id=2682): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x6, 0x0, 0x9, 0x0, 0x8014}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x6, 0xec6, 0x64, 0x0, 0xb, 0x4, 0x0, @rand_addr=0x64010104, @broadcast}, "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"}}, 0xed4) 1.244397177s ago: executing program 9 (id=2684): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@gettclass={0x24, 0x25, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x6}, {0x0, 0xfff1}, {0x0, 0x9}}}, 0x24}}, 0x40c0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r0, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x10, "3eccd8000000000000000010000000040100"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0xf9) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000001c0)=0xd) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000280)=0xb3) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x3) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000200)=0x5) 1.224079649s ago: executing program 6 (id=2685): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b921, 0x80000, {0x0, 0x0, 0x0, r9, {0x0, 0x3}, {0xfff1, 0xb}, {0x9, 0x6}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7f}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4010040}, 0x4000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.214996499s ago: executing program 5 (id=2686): socket$nl_netfilter(0x10, 0x3, 0xc) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSIG(r1, 0x40045436, 0x14) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000140)='smb3\x00', 0x0, 0x0) socket(0x40000000015, 0x5, 0x0) munmap(&(0x7f0000006000/0x4000)=nil, 0x4000) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) close(0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000005c0)=@mangle={'mangle\x00', 0x2, 0x6, 0x580, 0x0, 0x310, 0x0, 0x0, 0x1d8, 0x4b0, 0x4b0, 0x4b0, 0x4b0, 0x4b0, 0x6, 0x0, {[{{@ipv6={@mcast2, @ipv4={'\x00', '\xff\xff', @remote}, [0x0, 0xff, 0xff000000, 0xff000000], [0x0, 0xffffff00, 0xffffff00, 0xffffffff], 'gretap0\x00', 'batadv_slave_0\x00', {}, {0xff}, 0x2b, 0x5, 0x1, 0x18}, 0x0, 0xd0, 0xf8, 0x0, {0x7a00000010000000}, [@inet=@rpfilter={{0x28}, {0x1}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0xfc, 0x6}}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0xb4}, @initdev={0xfe, 0x88, '\x00', 0xfd, 0x0}, [0xff], [0xffffff00], '\x00', 'bond_slave_0\x00', {}, {0xff}}, 0x0, 0xf0, 0x138, 0x48000000, {}, [@common=@dst={{0x48}, {0xff, 0x4, 0x0, [0x1, 0x7a, 0xfffd, 0x3f4, 0x0, 0x3, 0x5, 0x0, 0x8, 0x30, 0xe5, 0x4, 0x1, 0x6, 0x0, 0x1], 0x6}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, 'ip6gre0\x00', {0x4}}}}, {{@ipv6={@remote, @dev={0xfe, 0x80, '\x00', 0xd}, [0x0, 0xffff00, 0xffffffff], [0xffffff00, 0xffffff00, 0xffffff00, 0xff000000], 'nr0\x00', 'vxcan1\x00', {}, {}, 0x62, 0x5, 0x3, 0x20}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x2, 0xf}}}, {{@ipv6={@mcast1, @private0, [0xff000000, 0xffffff, 0x0, 0xffffff00], [0xffffff00, 0xffffff00, 0xff, 0xff000000], 'pim6reg1\x00', 'hsr0\x00', {}, {}, 0x6c, 0x80, 0x5, 0x61}, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5e0) 1.20543647s ago: executing program 9 (id=2687): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r1, 0x6, 0x9, 0x0, &(0x7f0000000040)) 1.152388712s ago: executing program 4 (id=2688): ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x11fe, 0x0, 0x9, 0x40, "1ae39b5a4e3b8a00b20100dab240794233a5bd", 0x0, 0x2}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TCSETS(r0, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x10, "3eccd8000000000000000010000000040100"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0xf9) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000001c0)=0xd) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000280)=0xb3) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x3) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000200)=0x5) 1.041360417s ago: executing program 9 (id=2689): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getpeername$netrom(r3, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = dup(r4) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)={0x9c, 0x0, 0x800, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xa}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1450}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x31}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x3}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15b8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xffffffff}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]]}, 0x9c}, 0x1, 0x0, 0x0, 0x20040840}, 0xc000) read(0xffffffffffffffff, &(0x7f0000000040)=""/138, 0x8a) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x1c, 0x4, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x28000080) 1.011118939s ago: executing program 4 (id=2690): ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r0, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x10, "3eccd8000000000000000010000000040100"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0xf9) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000001c0)=0xd) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000280)=0xb3) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x3) 233.784178ms ago: executing program 4 (id=2691): r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x5) 180.911671ms ago: executing program 6 (id=2692): syz_usb_connect(0x2, 0x0, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x5, 0x6576, 0x9}) 93.978295ms ago: executing program 4 (id=2693): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, 0x0, 0x0, 0x0) 24.662449ms ago: executing program 5 (id=2694): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x30, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x99}]}, 0x30}}, 0x0) 0s ago: executing program 4 (id=2695): syz_mount_image$btrfs(&(0x7f00000051c0), &(0x7f00000000c0)='./file0\x00', 0x2, &(0x7f0000005240), 0x1, 0x51aa, &(0x7f0000005280)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, 0x0) kernel console output (not intermixed with test programs): 443809][T10931] chnl_net:caif_netlink_parms(): no params data found [ 571.495001][T10931] bridge0: port 1(bridge_slave_0) entered blocking state [ 571.498370][T10931] bridge0: port 1(bridge_slave_0) entered disabled state [ 571.501978][T10931] device bridge_slave_0 entered promiscuous mode [ 571.510779][T10931] bridge0: port 2(bridge_slave_1) entered blocking state [ 571.513967][T10931] bridge0: port 2(bridge_slave_1) entered disabled state [ 571.516948][T10931] device bridge_slave_1 entered promiscuous mode [ 571.540417][T10931] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 571.547302][T10931] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 571.572161][T10931] team0: Port device team_slave_0 added [ 571.580508][T10931] team0: Port device team_slave_1 added [ 571.612789][ T4330] Bluetooth: hci2: command 0x0409 tx timeout [ 571.642214][ T4450] usb 1-1: config 0 has no interfaces? [ 571.643349][ T4450] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 571.644887][ T4450] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 571.656213][T10931] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 571.657504][T10931] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 571.678218][T10991] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 571.681204][ T4450] usb 1-1: config 0 descriptor?? [ 571.684221][T10991] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 571.686208][T10931] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 571.739123][T10931] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 571.740255][T10931] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 571.744336][T10931] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 572.141067][ T4760] Bluetooth: hci5: Frame reassembly failed (-84) [ 572.980226][T10931] device hsr_slave_0 entered promiscuous mode [ 573.032314][T10931] device hsr_slave_1 entered promiscuous mode [ 573.101542][T10931] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 573.102866][T10931] Cannot create hsr debugfs directory [ 573.689872][T10195] Bluetooth: hci2: command 0x041b tx timeout [ 574.169938][ T4327] Bluetooth: hci5: command 0xfc11 tx timeout [ 574.171307][ T4330] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 574.321168][T10989] loop3: detected capacity change from 0 to 32768 [ 574.335319][T10989] JBD2: Ignoring recovery information on journal [ 574.377630][T10989] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 574.425278][T10931] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 574.437320][ T4320] ocfs2: Unmounting device (7,3) on (node local) [ 574.460300][T10931] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 574.479811][T10931] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 574.500412][T10931] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 574.712374][T11013] fuse: Bad value for 'fd' [ 575.008114][T10931] 8021q: adding VLAN 0 to HW filter on device bond0 [ 575.022940][T10931] 8021q: adding VLAN 0 to HW filter on device team0 [ 575.042769][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 575.044498][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 575.046041][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 575.047627][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 575.050756][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 575.051948][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 575.055553][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 575.058422][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 575.064390][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 575.065661][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 575.074828][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 575.079772][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 575.094031][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 575.116146][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 575.277731][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 575.355623][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 575.412497][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 575.449132][ T4336] Bluetooth: hci6: Entering manufacturer mode failed (-110) [ 575.619712][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 575.663460][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 575.718903][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 575.765527][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 575.768771][ T4336] Bluetooth: hci2: command 0x040f tx timeout [ 575.863568][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 575.980025][ T9663] usb 1-1: USB disconnect, device number 2 [ 576.165139][T11031] device syzkaller1 entered promiscuous mode [ 579.350000][ T4336] Bluetooth: hci2: command 0x0419 tx timeout [ 579.478504][ T4728] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 579.480112][ T4728] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 579.491871][T10931] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 581.790638][ T619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 581.792697][ T619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 581.881885][T11117] lo speed is unknown, defaulting to 1000 [ 581.883727][T11117] lo speed is unknown, defaulting to 1000 [ 581.889564][T11117] lo speed is unknown, defaulting to 1000 [ 581.897447][T11117] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 581.905978][T11117] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 581.935339][T11117] lo speed is unknown, defaulting to 1000 [ 581.938946][T11117] lo speed is unknown, defaulting to 1000 [ 581.941145][T11117] lo speed is unknown, defaulting to 1000 [ 581.943147][T11117] lo speed is unknown, defaulting to 1000 [ 581.945260][T11117] lo speed is unknown, defaulting to 1000 [ 581.947339][T11117] lo speed is unknown, defaulting to 1000 [ 582.192895][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 582.194588][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 582.196164][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 582.197652][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 582.203217][T10931] device veth0_vlan entered promiscuous mode [ 582.208126][T10931] device veth1_vlan entered promiscuous mode [ 582.229744][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 582.231396][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 582.233240][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 582.235093][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 582.238424][T10931] device veth0_macvtap entered promiscuous mode [ 582.251806][T10931] device veth1_macvtap entered promiscuous mode [ 582.274298][T10931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 582.281931][T10931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 582.286276][T10931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 582.287758][T10931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 582.295359][T10931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 582.297263][T10931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 582.311437][T10931] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 583.529931][ T4336] Bluetooth: hci5: command 0xfc11 tx timeout [ 583.531359][ T4327] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 583.670291][ T4443] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 583.921609][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 583.931827][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 583.939453][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 584.019085][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 584.193106][T10931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 584.194846][T10931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 584.196478][T10931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 584.198274][T10931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 584.212757][T10931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 584.214843][T10931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 584.299713][T10931] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 584.314558][T10931] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 584.317489][T10931] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 586.680822][T10931] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 586.682456][T10931] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 586.885994][ T4443] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.888721][ T4805] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 586.890576][ T4805] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 586.903344][T11161] device syzkaller1 entered promiscuous mode [ 590.881846][T11185] siw: device registration error -23 [ 591.184329][ T4443] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.344198][ T619] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 591.345328][ T619] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 591.369657][ T4366] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 591.370993][ T4366] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 591.379921][ T5240] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 591.537928][T11197] siw: device registration error -23 [ 591.829722][ T5240] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 593.572666][ T4443] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.056200][T11223] siw: device registration error -23 [ 596.313624][T11228] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 596.315286][T11228] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 599.278853][ T4327] Bluetooth: hci5: command 0xfc11 tx timeout [ 599.280927][ T4336] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 599.639522][T11256] siw: device registration error -23 [ 600.325291][T11271] device syzkaller1 entered promiscuous mode [ 604.529941][T11305] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 604.531540][T11305] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 608.883282][T11349] siw: device registration error -23 [ 609.520966][ T4336] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 609.522468][ T4330] Bluetooth: hci5: command 0xfc11 tx timeout [ 609.958791][T11360] fuse: Bad value for 'fd' [ 614.452434][T11405] fuse: Bad value for 'fd' [ 615.401495][ T5104] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 1 [ 615.409014][ T7542] Bluetooth: hci5: Frame reassembly failed (-84) [ 615.545011][T11423] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 615.548795][ T4450] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 615.565256][T11423] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 617.181186][ T4450] usb 1-1: config 0 has no interfaces? [ 617.182239][ T4450] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 617.183798][ T4450] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 617.186934][ T4450] usb 1-1: config 0 descriptor?? [ 617.449141][ T4336] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 617.491881][ T2060] ieee802154 phy0 wpan0: encryption failed: -22 [ 617.493275][ T2060] ieee802154 phy1 wpan1: encryption failed: -22 [ 618.178809][ T4327] Bluetooth: hci6: Entering manufacturer mode failed (-110) [ 618.181564][ T4336] Bluetooth: hci6: command 0xfc11 tx timeout [ 619.529203][ T4327] Bluetooth: hci3: command 0x0406 tx timeout [ 620.089804][ T4327] Bluetooth: hci5: command 0xfc11 tx timeout [ 620.089830][ T4330] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 620.588007][ T4451] usb 1-1: USB disconnect, device number 3 [ 620.720944][T11465] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 620.722482][T11465] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 621.000029][ T4443] device hsr_slave_0 left promiscuous mode [ 621.038999][ T4443] device hsr_slave_1 left promiscuous mode [ 621.168753][ T4443] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 621.170093][ T4443] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 621.172109][ T4443] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 621.173486][ T4443] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 621.174917][ T4443] device bridge_slave_1 left promiscuous mode [ 622.059078][ T4443] bridge0: port 2(bridge_slave_1) entered disabled state [ 622.303624][ T4443] device bridge_slave_0 left promiscuous mode [ 622.304766][ T4443] bridge0: port 1(bridge_slave_0) entered disabled state [ 622.511980][ T4443] device veth1_macvtap left promiscuous mode [ 622.513173][ T4443] device veth0_macvtap left promiscuous mode [ 622.514206][ T4443] device veth1_vlan left promiscuous mode [ 622.515235][ T4443] device veth0_vlan left promiscuous mode [ 622.701695][T11498] fuse: Bad value for 'fd' [ 623.609835][ T4330] Bluetooth: hci5: command 0xfc11 tx timeout [ 623.611090][ T4327] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 625.043374][ T4330] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:0' [ 625.045192][ T4330] CPU: 1 PID: 4330 Comm: kworker/u5:4 Not tainted syzkaller #0 [ 625.046396][ T4330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026 [ 625.048213][ T4330] Workqueue: hci0 hci_rx_work [ 625.049094][ T4330] Call trace: [ 625.049725][ T4330] dump_backtrace+0x1c0/0x1ec [ 625.050468][ T4330] show_stack+0x2c/0x3c [ 625.051216][ T4330] __dump_stack+0x30/0x40 [ 625.051984][ T4330] dump_stack_lvl+0xf4/0x15c [ 625.052797][ T4330] dump_stack+0x1c/0x5c [ 625.053514][ T4330] sysfs_create_dir_ns+0x244/0x264 [ 625.054355][ T4330] kobject_add_internal+0x598/0xb08 [ 625.055157][ T4330] kobject_add+0x140/0x20c [ 625.055901][ T4330] device_add+0x3f0/0xf90 [ 625.056634][ T4330] hci_conn_add_sysfs+0xbc/0x1c8 [ 625.057482][ T4330] le_conn_complete_evt+0xcc8/0x1244 [ 625.058414][ T4330] hci_le_enh_conn_complete_evt+0x114/0x3f4 [ 625.059378][ T4330] hci_le_meta_evt+0x2c0/0x4a0 [ 625.060182][ T4330] hci_event_packet+0x6b8/0xf18 [ 625.060982][ T4330] hci_rx_work+0x324/0xa80 [ 625.061686][ T4330] process_one_work+0x7f8/0x13a4 [ 625.062537][ T4330] worker_thread+0x8c4/0xfec [ 625.063342][ T4330] kthread+0x250/0x2d8 [ 625.064021][ T4330] ret_from_fork+0x10/0x20 [ 625.069140][ T4330] kobject_add_internal failed for hci0:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 625.071569][ T4330] Bluetooth: hci0: failed to register connection device [ 625.385910][T11520] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 625.388469][T11520] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 627.128834][ T4327] Bluetooth: hci0: command 0x2016 tx timeout [ 628.105308][ T4327] Bluetooth: hci5: command 0xfc11 tx timeout [ 628.106766][ T4330] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 629.403175][ T4443] team0 (unregistering): Port device team_slave_1 removed [ 629.589551][ T4443] team0 (unregistering): Port device team_slave_0 removed [ 629.749939][ T4443] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 630.259531][ T4728] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 1 [ 630.299517][ T4366] Bluetooth: hci5: Frame reassembly failed (-84) [ 630.306324][ T4443] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 632.248715][ T4327] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 632.248745][ T4330] Bluetooth: hci5: command 0x1003 tx timeout [ 632.391850][T11560] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 632.393213][T11560] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 633.308363][ T4443] bond0 (unregistering): Released all slaves [ 634.444592][T11466] device syzkaller1 entered promiscuous mode [ 635.048715][ T4327] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 635.497346][T11590] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 635.499181][T11590] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 635.762073][ T7452] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 1 [ 635.764273][ T7452] Bluetooth: hci5: Frame reassembly failed (-84) [ 637.324115][ T4336] Bluetooth: hci2: command 0x2016 tx timeout [ 638.865271][ T4327] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 638.866682][ T4336] Bluetooth: hci5: command 0x1003 tx timeout [ 639.114594][T11644] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 639.198528][T11644] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 640.888751][ T4330] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 641.462256][T11657] fuse: Bad value for 'fd' [ 644.055791][T11640] Bluetooth: hci5: command 0xfc11 tx timeout [ 644.057647][ T4330] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 644.654137][T11688] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 644.655608][T11688] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 645.607271][ T4330] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:0' [ 645.609259][ T4330] CPU: 1 PID: 4330 Comm: kworker/u5:4 Not tainted syzkaller #0 [ 645.610385][ T4330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026 [ 645.612164][ T4330] Workqueue: hci2 hci_rx_work [ 645.613020][ T4330] Call trace: [ 645.613619][ T4330] dump_backtrace+0x1c0/0x1ec [ 645.614493][ T4330] show_stack+0x2c/0x3c [ 645.615235][ T4330] __dump_stack+0x30/0x40 [ 645.616016][ T4330] dump_stack_lvl+0xf4/0x15c [ 645.616778][ T4330] dump_stack+0x1c/0x5c [ 645.617461][ T4330] sysfs_create_dir_ns+0x244/0x264 [ 645.618324][ T4330] kobject_add_internal+0x598/0xb08 [ 645.619117][ T4330] kobject_add+0x140/0x20c [ 645.619817][ T4330] device_add+0x3f0/0xf90 [ 645.620510][ T4330] hci_conn_add_sysfs+0xbc/0x1c8 [ 645.621304][ T4330] le_conn_complete_evt+0xcc8/0x1244 [ 645.622174][ T4330] hci_le_enh_conn_complete_evt+0x114/0x3f4 [ 645.623176][ T4330] hci_le_meta_evt+0x2c0/0x4a0 [ 645.623940][ T4330] hci_event_packet+0x6b8/0xf18 [ 645.624733][ T4330] hci_rx_work+0x324/0xa80 [ 645.625517][ T4330] process_one_work+0x7f8/0x13a4 [ 645.626359][ T4330] worker_thread+0x8c4/0xfec [ 645.627137][ T4330] kthread+0x250/0x2d8 [ 645.627826][ T4330] ret_from_fork+0x10/0x20 [ 645.630998][ T4330] kobject_add_internal failed for hci2:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 645.633475][ T4330] Bluetooth: hci2: failed to register connection device [ 645.688085][ T9757] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 1 [ 645.701333][ T9757] Bluetooth: hci5: Frame reassembly failed (-84) [ 647.638720][T11640] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 647.644320][T10195] Bluetooth: hci5: command 0x1003 tx timeout [ 647.688820][T11640] Bluetooth: hci2: command 0x2016 tx timeout [ 648.169792][ T4330] Bluetooth: hci6: Entering manufacturer mode failed (-110) [ 649.994113][T11733] fuse: Bad value for 'fd' [ 650.049766][T11738] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 650.051398][T11738] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 650.052564][ T4366] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 1 [ 650.054642][ T4366] Bluetooth: hci5: Frame reassembly failed (-84) [ 650.328792][ T4456] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 650.487809][T11747] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 650.501952][T11747] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 650.511154][ T4456] usb 1-1: config 0 has no interfaces? [ 650.512265][ T4456] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 650.513679][ T4456] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 650.517223][ T4456] usb 1-1: config 0 descriptor?? [ 652.285772][T10195] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 652.287767][T11640] Bluetooth: hci5: command 0x1003 tx timeout [ 654.693636][ T4330] Bluetooth: hci6: Entering manufacturer mode failed (-110) [ 654.709710][ T4330] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:0' [ 654.711843][ T4330] CPU: 1 PID: 4330 Comm: kworker/u5:4 Not tainted syzkaller #0 [ 654.713010][ T4330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026 [ 654.714695][ T4330] Workqueue: hci0 hci_rx_work [ 654.715481][ T4330] Call trace: [ 654.716002][ T4330] dump_backtrace+0x1c0/0x1ec [ 654.716755][ T4330] show_stack+0x2c/0x3c [ 654.717447][ T4330] __dump_stack+0x30/0x40 [ 654.718158][ T4330] dump_stack_lvl+0xf4/0x15c [ 654.718971][ T4330] dump_stack+0x1c/0x5c [ 654.719621][ T4330] sysfs_create_dir_ns+0x244/0x264 [ 654.720527][ T4330] kobject_add_internal+0x598/0xb08 [ 654.721406][ T4330] kobject_add+0x140/0x20c [ 654.722119][ T4330] device_add+0x3f0/0xf90 [ 654.722891][ T4330] hci_conn_add_sysfs+0xbc/0x1c8 [ 654.723715][ T4330] le_conn_complete_evt+0xcc8/0x1244 [ 654.724506][ T4330] hci_le_enh_conn_complete_evt+0x114/0x3f4 [ 654.725378][ T4330] hci_le_meta_evt+0x2c0/0x4a0 [ 654.726248][ T4330] hci_event_packet+0x6b8/0xf18 [ 654.727065][ T4330] hci_rx_work+0x324/0xa80 [ 654.727782][ T4330] process_one_work+0x7f8/0x13a4 [ 654.728637][ T4330] worker_thread+0x8c4/0xfec [ 654.729475][ T4330] kthread+0x250/0x2d8 [ 654.730187][ T4330] ret_from_fork+0x10/0x20 [ 654.746748][ T4330] kobject_add_internal failed for hci0:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 654.749178][ T4330] Bluetooth: hci0: failed to register connection device [ 657.468512][T11640] Bluetooth: hci5: command 0xfc11 tx timeout [ 657.518770][T10195] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 657.578916][T10195] Bluetooth: hci0: command 0x2016 tx timeout [ 657.580863][T11814] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 657.582210][T11814] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 660.017744][ T5382] Bluetooth: hci5: Frame reassembly failed (-84) [ 660.308961][T11866] fuse: Bad value for 'fd' [ 661.515221][ T4451] usb 1-1: USB disconnect, device number 4 [ 662.169205][T10195] Bluetooth: hci5: command 0xfc11 tx timeout [ 662.188747][ T4330] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 663.233540][ T4330] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:0' [ 663.235152][ T4330] CPU: 1 PID: 4330 Comm: kworker/u5:4 Not tainted syzkaller #0 [ 663.236420][ T4330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026 [ 663.238066][ T4330] Workqueue: hci2 hci_rx_work [ 663.238898][ T4330] Call trace: [ 663.239468][ T4330] dump_backtrace+0x1c0/0x1ec [ 663.240233][ T4330] show_stack+0x2c/0x3c [ 663.240869][ T4330] __dump_stack+0x30/0x40 [ 663.241548][ T4330] dump_stack_lvl+0xf4/0x15c [ 663.242259][ T4330] dump_stack+0x1c/0x5c [ 663.242891][ T4330] sysfs_create_dir_ns+0x244/0x264 [ 663.243745][ T4330] kobject_add_internal+0x598/0xb08 [ 663.244554][ T4330] kobject_add+0x140/0x20c [ 663.245293][ T4330] device_add+0x3f0/0xf90 [ 663.246036][ T4330] hci_conn_add_sysfs+0xbc/0x1c8 [ 663.246881][ T4330] le_conn_complete_evt+0xcc8/0x1244 [ 663.247677][ T4330] hci_le_enh_conn_complete_evt+0x114/0x3f4 [ 663.248621][ T4330] hci_le_meta_evt+0x2c0/0x4a0 [ 663.249397][ T4330] hci_event_packet+0x6b8/0xf18 [ 663.250164][ T4330] hci_rx_work+0x324/0xa80 [ 663.250980][ T4330] process_one_work+0x7f8/0x13a4 [ 663.251759][ T4330] worker_thread+0x8c4/0xfec [ 663.252440][ T4330] kthread+0x250/0x2d8 [ 663.253075][ T4330] ret_from_fork+0x10/0x20 [ 663.257125][ T4330] kobject_add_internal failed for hci2:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 663.259292][ T4330] Bluetooth: hci2: failed to register connection device [ 663.534890][T11928] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 663.536494][T11928] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 663.684626][ T55] Bluetooth: hci6: Frame reassembly failed (-84) [ 665.288750][ T4327] Bluetooth: hci2: command 0x2016 tx timeout [ 665.609112][ T4330] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 665.688838][T10195] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 665.690889][ T4330] Bluetooth: hci6: command 0x1003 tx timeout [ 667.380797][T11640] Bluetooth: hci7: Entering manufacturer mode failed (-110) [ 669.444626][ T4336] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:0' [ 669.446166][ T4336] CPU: 0 PID: 4336 Comm: kworker/u5:7 Not tainted syzkaller #0 [ 669.447266][ T4336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026 [ 669.448935][ T4336] Workqueue: hci1 hci_rx_work [ 669.449666][ T4336] Call trace: [ 669.450172][ T4336] dump_backtrace+0x1c0/0x1ec [ 669.450886][ T4336] show_stack+0x2c/0x3c [ 669.451557][ T4336] __dump_stack+0x30/0x40 [ 669.452232][ T4336] dump_stack_lvl+0xf4/0x15c [ 669.452958][ T4336] dump_stack+0x1c/0x5c [ 669.453645][ T4336] sysfs_create_dir_ns+0x244/0x264 [ 669.454475][ T4336] kobject_add_internal+0x598/0xb08 [ 669.455321][ T4336] kobject_add+0x140/0x20c [ 669.456027][ T4336] device_add+0x3f0/0xf90 [ 669.456665][ T4336] hci_conn_add_sysfs+0xbc/0x1c8 [ 669.457455][ T4336] le_conn_complete_evt+0xcc8/0x1244 [ 669.458441][ T4336] hci_le_enh_conn_complete_evt+0x114/0x3f4 [ 669.459434][ T4336] hci_le_meta_evt+0x2c0/0x4a0 [ 669.460258][ T4336] hci_event_packet+0x6b8/0xf18 [ 669.461052][ T4336] hci_rx_work+0x324/0xa80 [ 669.461823][ T4336] process_one_work+0x7f8/0x13a4 [ 669.462601][ T4336] worker_thread+0x8c4/0xfec [ 669.463395][ T4336] kthread+0x250/0x2d8 [ 669.464112][ T4336] ret_from_fork+0x10/0x20 [ 669.466135][ T4336] kobject_add_internal failed for hci1:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 669.468209][ T4336] Bluetooth: hci1: failed to register connection device [ 669.703535][T12036] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 669.706884][T12036] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 671.916963][T11640] Bluetooth: hci1: command 0x2016 tx timeout [ 675.581595][ T4336] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:0' [ 675.583273][ T4336] CPU: 0 PID: 4336 Comm: kworker/u5:7 Not tainted syzkaller #0 [ 675.584513][ T4336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026 [ 675.586068][ T4336] Workqueue: hci1 hci_rx_work [ 675.586857][ T4336] Call trace: [ 675.587479][ T4336] dump_backtrace+0x1c0/0x1ec [ 675.588308][ T4336] show_stack+0x2c/0x3c [ 675.589023][ T4336] __dump_stack+0x30/0x40 [ 675.589784][ T4336] dump_stack_lvl+0xf4/0x15c [ 675.590601][ T4336] dump_stack+0x1c/0x5c [ 675.591317][ T4336] sysfs_create_dir_ns+0x244/0x264 [ 675.592168][ T4336] kobject_add_internal+0x598/0xb08 [ 675.592913][ T4336] kobject_add+0x140/0x20c [ 675.593637][ T4336] device_add+0x3f0/0xf90 [ 675.594360][ T4336] hci_conn_add_sysfs+0xbc/0x1c8 [ 675.595228][ T4336] le_conn_complete_evt+0xcc8/0x1244 [ 675.595994][ T4336] hci_le_enh_conn_complete_evt+0x114/0x3f4 [ 675.596915][ T4336] hci_le_meta_evt+0x2c0/0x4a0 [ 675.597576][ T4336] hci_event_packet+0x6b8/0xf18 [ 675.598284][ T4336] hci_rx_work+0x324/0xa80 [ 675.598858][ T4336] process_one_work+0x7f8/0x13a4 [ 675.599646][ T4336] worker_thread+0x8c4/0xfec [ 675.600456][ T4336] kthread+0x250/0x2d8 [ 675.601165][ T4336] ret_from_fork+0x10/0x20 [ 675.605673][ T4336] kobject_add_internal failed for hci1:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 675.607954][ T4336] Bluetooth: hci1: failed to register connection device [ 677.889059][ T4336] Bluetooth: hci1: command 0x2016 tx timeout [ 678.048676][ T5198] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 1 [ 678.050134][ T5198] Bluetooth: hci5: Frame reassembly failed (-84) [ 678.491337][T12121] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 678.492834][T12121] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 678.903588][ T2060] ieee802154 phy0 wpan0: encryption failed: -22 [ 678.904681][ T2060] ieee802154 phy1 wpan1: encryption failed: -22 [ 679.938777][ T4336] Bluetooth: hci5: command 0x1003 tx timeout [ 679.940866][T11640] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 679.987600][T11640] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 679.989913][T11640] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 679.991696][T11640] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 679.994646][T11640] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 679.996667][T11640] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 679.997985][T11640] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 680.396485][ T4805] Bluetooth: hci6: Frame reassembly failed (-84) [ 680.405030][ T4805] Bluetooth: hci6: Frame reassembly failed (-84) [ 680.577716][T12136] lo speed is unknown, defaulting to 1000 [ 680.664150][T12136] chnl_net:caif_netlink_parms(): no params data found [ 681.142850][T12136] bridge0: port 1(bridge_slave_0) entered blocking state [ 681.144567][T12136] bridge0: port 1(bridge_slave_0) entered disabled state [ 681.146302][T12136] device bridge_slave_0 entered promiscuous mode [ 681.155452][T12136] bridge0: port 2(bridge_slave_1) entered blocking state [ 681.161583][T12136] bridge0: port 2(bridge_slave_1) entered disabled state [ 681.163286][T12136] device bridge_slave_1 entered promiscuous mode [ 681.186445][T12136] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 681.481624][T12136] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 681.547833][T12136] team0: Port device team_slave_0 added [ 681.562350][T12136] team0: Port device team_slave_1 added [ 681.572331][T12136] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 681.573458][T12136] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 681.577641][T12136] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 681.592836][T12136] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 681.594049][T12136] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 681.597968][T12136] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 681.954228][T12136] device hsr_slave_0 entered promiscuous mode [ 681.999032][T12136] device hsr_slave_1 entered promiscuous mode [ 682.018924][T11640] Bluetooth: hci5: command 0x0409 tx timeout [ 682.064628][T12136] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 682.066197][T12136] Cannot create hsr debugfs directory [ 682.209021][ T4330] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:0' [ 682.214847][ T4330] CPU: 1 PID: 4330 Comm: kworker/u5:4 Not tainted syzkaller #0 [ 682.216081][ T4330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026 [ 682.217724][ T4330] Workqueue: hci2 hci_rx_work [ 682.218468][ T4330] Call trace: [ 682.218965][ T4330] dump_backtrace+0x1c0/0x1ec [ 682.219709][ T4330] show_stack+0x2c/0x3c [ 682.220354][ T4330] __dump_stack+0x30/0x40 [ 682.221078][ T4330] dump_stack_lvl+0xf4/0x15c [ 682.221869][ T4330] dump_stack+0x1c/0x5c [ 682.222495][ T4330] sysfs_create_dir_ns+0x244/0x264 [ 682.223272][ T4330] kobject_add_internal+0x598/0xb08 [ 682.224081][ T4330] kobject_add+0x140/0x20c [ 682.224814][ T4330] device_add+0x3f0/0xf90 [ 682.225614][ T4330] hci_conn_add_sysfs+0xbc/0x1c8 [ 682.226457][ T4330] le_conn_complete_evt+0xcc8/0x1244 [ 682.227305][ T4330] hci_le_enh_conn_complete_evt+0x114/0x3f4 [ 682.228271][ T4330] hci_le_meta_evt+0x2c0/0x4a0 [ 682.229005][ T4330] hci_event_packet+0x6b8/0xf18 [ 682.229796][ T4330] hci_rx_work+0x324/0xa80 [ 682.230589][ T4330] process_one_work+0x7f8/0x13a4 [ 682.231478][ T4330] worker_thread+0x8c4/0xfec [ 682.232276][ T4330] kthread+0x250/0x2d8 [ 682.232982][ T4330] ret_from_fork+0x10/0x20 [ 682.244489][ T4330] kobject_add_internal failed for hci2:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 682.275490][ T4330] Bluetooth: hci2: failed to register connection device [ 682.408793][ T4336] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 683.904679][T12219] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 683.906261][T12219] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 684.162851][ T4330] Bluetooth: hci5: command 0x041b tx timeout [ 684.328699][ T4330] Bluetooth: hci2: command 0x2016 tx timeout [ 686.249791][ T4336] Bluetooth: hci5: command 0x040f tx timeout [ 686.451769][ T6080] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 687.429711][ T6080] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 687.795301][ T6080] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 688.741251][ T4336] Bluetooth: hci5: command 0x0419 tx timeout [ 688.769340][T12136] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 688.774153][ T4678] Bluetooth: hci4: Frame reassembly failed (-84) [ 688.830477][ T6080] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 688.833148][T12136] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 688.903376][T12136] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 689.010033][T12136] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 690.363752][T12298] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 690.375115][T12298] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 690.857513][ T4330] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 690.858568][T11640] Bluetooth: hci4: command 0x1003 tx timeout [ 690.909332][T11640] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:0' [ 690.911456][T11640] CPU: 1 PID: 11640 Comm: kworker/u5:1 Not tainted syzkaller #0 [ 690.912638][T11640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026 [ 690.914214][T11640] Workqueue: hci2 hci_rx_work [ 690.914962][T11640] Call trace: [ 690.915480][T11640] dump_backtrace+0x1c0/0x1ec [ 690.916236][T11640] show_stack+0x2c/0x3c [ 690.916902][T11640] __dump_stack+0x30/0x40 [ 690.917616][T11640] dump_stack_lvl+0xf4/0x15c [ 690.918371][T11640] dump_stack+0x1c/0x5c [ 690.919080][T11640] sysfs_create_dir_ns+0x244/0x264 [ 690.919898][T11640] kobject_add_internal+0x598/0xb08 [ 690.920761][T11640] kobject_add+0x140/0x20c [ 690.921496][T11640] device_add+0x3f0/0xf90 [ 690.922218][T11640] hci_conn_add_sysfs+0xbc/0x1c8 [ 690.922976][T11640] le_conn_complete_evt+0xcc8/0x1244 [ 690.924037][T11640] hci_le_enh_conn_complete_evt+0x114/0x3f4 [ 690.924973][T11640] hci_le_meta_evt+0x2c0/0x4a0 [ 690.925695][T11640] hci_event_packet+0x6b8/0xf18 [ 690.926421][T11640] hci_rx_work+0x324/0xa80 [ 690.927049][T11640] process_one_work+0x7f8/0x13a4 [ 690.927763][T11640] worker_thread+0x8c4/0xfec [ 690.928489][T11640] kthread+0x250/0x2d8 [ 690.929147][T11640] ret_from_fork+0x10/0x20 [ 691.921845][T11640] kobject_add_internal failed for hci2:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 691.925266][T11640] Bluetooth: hci2: failed to register connection device [ 692.857181][T12136] 8021q: adding VLAN 0 to HW filter on device bond0 [ 692.908169][T12136] 8021q: adding VLAN 0 to HW filter on device team0 [ 692.928072][T12136] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 692.932060][T12136] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 692.943793][ T5399] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 692.945410][ T5399] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 692.946836][ T5399] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 692.948424][ T5399] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 692.953538][ T5399] bridge0: port 1(bridge_slave_0) entered blocking state [ 692.954777][ T5399] bridge0: port 1(bridge_slave_0) entered forwarding state [ 692.956210][ T5399] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 692.968080][ T5399] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 692.975133][ T5399] bridge0: port 2(bridge_slave_1) entered blocking state [ 692.976379][ T5399] bridge0: port 2(bridge_slave_1) entered forwarding state [ 692.983542][ T5399] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 692.988540][ T5399] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 692.993919][ T5399] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 692.997893][ T5399] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 693.003663][ T5399] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 693.005574][ T5399] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 693.007198][ T5399] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 693.009228][ T5399] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 693.010937][ T5399] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 693.012514][ T5399] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 693.025481][ T5399] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 693.027516][ T5399] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 693.734957][ T5399] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 693.795539][ T6080] tipc: Left network mode [ 693.857533][T12329] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 693.859622][T12329] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 693.928844][T11640] Bluetooth: hci6: command 0xfc11 tx timeout [ 693.931099][ T4336] Bluetooth: hci6: Entering manufacturer mode failed (-110) [ 694.173071][ T4336] Bluetooth: hci2: command 0x2016 tx timeout [ 696.250054][ T4330] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 696.251548][T11640] Bluetooth: hci4: command 0xfc11 tx timeout [ 696.322656][ T9757] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 696.324167][ T9757] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 696.331864][T12136] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 697.208901][ T4330] Bluetooth: hci2: command 0x0406 tx timeout [ 698.599536][ T4330] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:0' [ 698.601649][ T4330] CPU: 0 PID: 4330 Comm: kworker/u5:4 Not tainted syzkaller #0 [ 698.602896][ T4330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026 [ 698.604736][ T4330] Workqueue: hci0 hci_rx_work [ 698.605512][ T4330] Call trace: [ 698.606070][ T4330] dump_backtrace+0x1c0/0x1ec [ 698.607080][ T4330] show_stack+0x2c/0x3c [ 698.607834][ T4330] __dump_stack+0x30/0x40 [ 698.608598][ T4330] dump_stack_lvl+0xf4/0x15c [ 698.609496][ T4330] dump_stack+0x1c/0x5c [ 698.610246][ T4330] sysfs_create_dir_ns+0x244/0x264 [ 698.611140][ T4330] kobject_add_internal+0x598/0xb08 [ 698.612001][ T4330] kobject_add+0x140/0x20c [ 698.612749][ T4330] device_add+0x3f0/0xf90 [ 698.613493][ T4330] hci_conn_add_sysfs+0xbc/0x1c8 [ 698.614299][ T4330] le_conn_complete_evt+0xcc8/0x1244 [ 698.615243][ T4330] hci_le_enh_conn_complete_evt+0x114/0x3f4 [ 698.616262][ T4330] hci_le_meta_evt+0x2c0/0x4a0 [ 698.617019][ T4330] hci_event_packet+0x6b8/0xf18 [ 698.617788][ T4330] hci_rx_work+0x324/0xa80 [ 698.618522][ T4330] process_one_work+0x7f8/0x13a4 [ 698.619365][ T4330] worker_thread+0x8c4/0xfec [ 698.620127][ T4330] kthread+0x250/0x2d8 [ 698.620749][ T4330] ret_from_fork+0x10/0x20 [ 698.714221][ T4330] kobject_add_internal failed for hci0:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 698.716706][ T4330] Bluetooth: hci0: failed to register connection device [ 699.023382][ T4805] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 699.425573][ T4805] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 699.475343][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 699.477167][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 699.478908][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 699.480767][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 699.483365][T12136] device veth0_vlan entered promiscuous mode [ 699.488176][T12136] device veth1_vlan entered promiscuous mode [ 699.510379][ T4805] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 699.512107][ T4805] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 699.513782][ T4805] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 699.515532][ T4805] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 699.562960][T12136] device veth0_macvtap entered promiscuous mode [ 699.568606][T12136] device veth1_macvtap entered promiscuous mode [ 699.581613][T12136] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 699.584698][T12136] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 699.586290][T12136] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 699.588207][T12136] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 699.590087][T12136] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 699.591933][T12136] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 699.594413][T12136] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 699.595937][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 699.597631][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 699.599661][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 699.601561][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 699.604435][T12136] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 699.606735][T12136] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 699.613267][T12136] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 699.615037][T12136] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 699.616756][T12136] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 699.619477][T12136] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 699.622069][T12136] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 699.625467][T12136] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 699.637622][T12136] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 699.640910][T12136] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 699.644687][T12136] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 699.681651][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 699.683664][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 699.718900][ T4448] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 699.796015][ T5104] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 699.797341][ T5104] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 699.798596][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 699.822736][ T5104] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 699.823944][ T5104] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 699.825327][ T5104] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 699.940694][ T4448] usb 1-1: config 0 has no interfaces? [ 699.941774][ T4448] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 699.943354][ T4448] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 699.945718][ T4448] usb 1-1: config 0 descriptor?? [ 700.794341][ T4330] Bluetooth: hci0: command 0x2016 tx timeout [ 703.575635][ T4336] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 705.171249][ T9651] usb 1-1: USB disconnect, device number 5 [ 705.230380][T12470] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 705.357334][T12470] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 707.474977][T12489] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 707.476775][T12489] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 710.162196][ T4336] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 710.165631][T11640] Bluetooth: hci4: command 0xfc11 tx timeout [ 710.817877][T12507] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 710.888616][T12507] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 712.169832][ T4336] Bluetooth: hci6: command 0xfc11 tx timeout [ 712.171159][ T4330] Bluetooth: hci6: Entering manufacturer mode failed (-110) [ 712.646518][T12524] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 712.648739][T12524] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 712.707206][ T6080] device hsr_slave_0 left promiscuous mode [ 715.953184][T10195] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 715.955145][ T4330] Bluetooth: hci4: command 0xfc11 tx timeout [ 716.202979][ T9651] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 716.329015][ T6080] device hsr_slave_1 left promiscuous mode [ 718.406386][ T4330] Bluetooth: hci6: command 0xfc11 tx timeout [ 718.406413][ T4336] Bluetooth: hci6: Entering manufacturer mode failed (-110) [ 718.742869][ T6080] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 718.744116][ T6080] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 719.549537][ T6080] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 719.550785][ T6080] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 719.559194][ T6080] device bridge_slave_1 left promiscuous mode [ 719.565570][ T6080] bridge0: port 2(bridge_slave_1) entered disabled state [ 719.579703][ T6080] device bridge_slave_0 left promiscuous mode [ 719.580800][ T6080] bridge0: port 1(bridge_slave_0) entered disabled state [ 720.070174][ T6080] device veth1_macvtap left promiscuous mode [ 720.071494][ T6080] device veth0_macvtap left promiscuous mode [ 720.072791][ T6080] device veth1_vlan left promiscuous mode [ 720.074537][ T6080] device veth0_vlan left promiscuous mode [ 722.682464][ T6080] team0 (unregistering): Port device team_slave_1 removed [ 722.860374][ T6080] team0 (unregistering): Port device team_slave_0 removed [ 723.029568][ T6080] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 723.241558][ T6080] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 723.542938][T12568] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 723.545226][T12568] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 725.195431][T12573] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 725.197275][T12573] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 726.709925][ T6080] bond0 (unregistering): Released all slaves [ 727.081488][T12583] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 727.083866][T12583] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 727.289664][ T4330] Bluetooth: hci4: command 0xfc11 tx timeout [ 729.068516][ T4336] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 733.676354][T12624] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 733.678111][T12624] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 736.296572][T12651] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2038'. [ 736.565035][ T4330] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 736.580047][T12652] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2040'. [ 738.125006][T12678] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 738.128604][T12678] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 740.097365][T12707] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2049'. [ 740.330912][ T2060] ieee802154 phy0 wpan0: encryption failed: -22 [ 740.332418][ T2060] ieee802154 phy1 wpan1: encryption failed: -22 [ 742.409274][T12740] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2062'. [ 742.860769][ T4330] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 744.320860][T12755] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 744.339002][T12755] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 745.876143][ T4330] Bluetooth: hci5: command 0x2016 tx timeout [ 745.878166][ T4336] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:0' [ 745.880043][ T4336] CPU: 1 PID: 4336 Comm: kworker/u5:7 Not tainted syzkaller #0 [ 745.881218][ T4336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026 [ 745.882843][ T4336] Workqueue: hci1 hci_rx_work [ 745.883648][ T4336] Call trace: [ 745.884200][ T4336] dump_backtrace+0x1c0/0x1ec [ 745.884996][ T4336] show_stack+0x2c/0x3c [ 745.885721][ T4336] __dump_stack+0x30/0x40 [ 745.886538][ T4336] dump_stack_lvl+0xf4/0x15c [ 745.887324][ T4336] dump_stack+0x1c/0x5c [ 745.888044][ T4336] sysfs_create_dir_ns+0x244/0x264 [ 745.888925][ T4336] kobject_add_internal+0x598/0xb08 [ 745.889775][ T4336] kobject_add+0x140/0x20c [ 745.890383][ T4336] device_add+0x3f0/0xf90 [ 745.891044][ T4336] hci_conn_add_sysfs+0xbc/0x1c8 [ 745.891778][ T4336] le_conn_complete_evt+0xcc8/0x1244 [ 745.892668][ T4336] hci_le_enh_conn_complete_evt+0x114/0x3f4 [ 745.893540][ T4336] hci_le_meta_evt+0x2c0/0x4a0 [ 745.894193][ T4336] hci_event_packet+0x6b8/0xf18 [ 745.894880][ T4336] hci_rx_work+0x324/0xa80 [ 745.895626][ T4336] process_one_work+0x7f8/0x13a4 [ 745.896389][ T4336] worker_thread+0x8c4/0xfec [ 745.897102][ T4336] kthread+0x250/0x2d8 [ 745.897779][ T4336] ret_from_fork+0x10/0x20 [ 745.911059][ T4336] kobject_add_internal failed for hci1:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 745.914798][ T4336] Bluetooth: hci1: failed to register connection device [ 748.290754][T12775] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2057'. [ 749.000738][ T4330] Bluetooth: hci1: command 0x2016 tx timeout [ 749.536860][T12783] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2055'. [ 750.409755][T10195] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 750.411985][T10195] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 750.413610][T10195] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 750.415694][T10195] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 750.417027][T10195] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 750.419266][T10195] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 750.488833][T12808] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2064'. [ 751.267589][ T4336] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 751.333985][T12809] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2066'. [ 752.868722][T12826] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2067'. [ 753.028899][ T4336] Bluetooth: hci6: command 0x0409 tx timeout [ 754.739412][T10195] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:0' [ 754.741365][T10195] CPU: 1 PID: 10195 Comm: kworker/u5:0 Not tainted syzkaller #0 [ 754.742697][T10195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026 [ 754.744358][T10195] Workqueue: hci5 hci_rx_work [ 754.745224][T10195] Call trace: [ 754.745779][T10195] dump_backtrace+0x1c0/0x1ec [ 754.746596][T10195] show_stack+0x2c/0x3c [ 754.747311][T10195] __dump_stack+0x30/0x40 [ 754.748100][T10195] dump_stack_lvl+0xf4/0x15c [ 754.748948][T10195] dump_stack+0x1c/0x5c [ 754.749665][T10195] sysfs_create_dir_ns+0x244/0x264 [ 754.750510][T10195] kobject_add_internal+0x598/0xb08 [ 754.751431][T10195] kobject_add+0x140/0x20c [ 754.752208][T10195] device_add+0x3f0/0xf90 [ 754.752973][T10195] hci_conn_add_sysfs+0xbc/0x1c8 [ 754.753878][T10195] le_conn_complete_evt+0xcc8/0x1244 [ 754.754720][T10195] hci_le_enh_conn_complete_evt+0x114/0x3f4 [ 754.755684][T10195] hci_le_meta_evt+0x2c0/0x4a0 [ 754.756533][T10195] hci_event_packet+0x6b8/0xf18 [ 754.757359][T10195] hci_rx_work+0x324/0xa80 [ 754.758126][T10195] process_one_work+0x7f8/0x13a4 [ 754.758943][T10195] worker_thread+0x8c4/0xfec [ 754.759724][T10195] kthread+0x250/0x2d8 [ 754.760418][T10195] ret_from_fork+0x10/0x20 [ 754.766168][T10195] kobject_add_internal failed for hci5:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 754.768648][T10195] Bluetooth: hci5: failed to register connection device [ 755.236016][T10195] Bluetooth: hci6: command 0x041b tx timeout [ 755.405749][T12838] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2072'. [ 756.274148][T12851] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2073'. [ 756.822029][T10195] Bluetooth: hci5: command 0x2016 tx timeout [ 757.332468][T10195] Bluetooth: hci6: command 0x040f tx timeout [ 758.054764][T12806] lo speed is unknown, defaulting to 1000 [ 758.226003][T12872] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2079'. [ 759.309012][ T4336] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:0' [ 759.312806][ T4336] CPU: 1 PID: 4336 Comm: kworker/u5:7 Not tainted syzkaller #0 [ 759.314044][ T4336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026 [ 759.315683][ T4336] Workqueue: hci0 hci_rx_work [ 759.316511][ T4336] Call trace: [ 759.317034][ T4336] dump_backtrace+0x1c0/0x1ec [ 759.317851][ T4336] show_stack+0x2c/0x3c [ 759.318574][ T4336] __dump_stack+0x30/0x40 [ 759.319308][ T4336] dump_stack_lvl+0xf4/0x15c [ 759.320060][ T4336] dump_stack+0x1c/0x5c [ 759.320739][ T4336] sysfs_create_dir_ns+0x244/0x264 [ 759.321577][ T4336] kobject_add_internal+0x598/0xb08 [ 759.322504][ T4336] kobject_add+0x140/0x20c [ 759.323262][ T4336] device_add+0x3f0/0xf90 [ 759.324021][ T4336] hci_conn_add_sysfs+0xbc/0x1c8 [ 759.324932][ T4336] le_conn_complete_evt+0xcc8/0x1244 [ 759.325722][ T4336] hci_le_enh_conn_complete_evt+0x114/0x3f4 [ 759.326796][ T4336] hci_le_meta_evt+0x2c0/0x4a0 [ 759.327643][ T4336] hci_event_packet+0x6b8/0xf18 [ 759.328553][ T4336] hci_rx_work+0x324/0xa80 [ 759.329233][ T4336] process_one_work+0x7f8/0x13a4 [ 759.330060][ T4336] worker_thread+0x8c4/0xfec [ 759.330822][ T4336] kthread+0x250/0x2d8 [ 759.331488][ T4336] ret_from_fork+0x10/0x20 [ 759.346864][ T4336] kobject_add_internal failed for hci0:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 759.350129][ T4336] Bluetooth: hci0: failed to register connection device [ 759.369698][ T4336] Bluetooth: hci6: command 0x0419 tx timeout [ 759.711168][ T4309] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 760.106077][ T4309] usb 1-1: config 0 has no interfaces? [ 760.107828][ T4309] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 760.108383][T12907] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2085'. [ 760.109739][ T4309] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 760.121137][ T4309] usb 1-1: config 0 descriptor?? [ 760.194492][ T4411] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 760.200318][T12806] chnl_net:caif_netlink_parms(): no params data found [ 760.340284][ T4411] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 760.357212][T12806] bridge0: port 1(bridge_slave_0) entered blocking state [ 760.358945][T12806] bridge0: port 1(bridge_slave_0) entered disabled state [ 760.360641][T12806] device bridge_slave_0 entered promiscuous mode [ 760.363047][T12806] bridge0: port 2(bridge_slave_1) entered blocking state [ 760.364494][T12806] bridge0: port 2(bridge_slave_1) entered disabled state [ 760.366050][T12806] device bridge_slave_1 entered promiscuous mode [ 760.375050][T12806] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 760.378022][T12806] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 760.775671][T12806] team0: Port device team_slave_0 added [ 760.779791][T12806] team0: Port device team_slave_1 added [ 760.786250][T12806] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 760.787705][T12806] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 760.819643][T12806] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 761.369894][ T4336] Bluetooth: hci0: command 0x2016 tx timeout [ 762.013219][ T9780] usb 1-1: USB disconnect, device number 7 [ 762.041949][ T4411] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 762.057856][T12806] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 762.060169][T12806] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 762.064633][T12806] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 762.624599][ T11] Bluetooth: hci2: received HCILL_GO_TO_SLEEP_ACK in state 1 [ 762.642889][ T11] Bluetooth: hci2: Frame reassembly failed (-84) [ 762.809678][ T4411] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 762.913350][T12806] device hsr_slave_0 entered promiscuous mode [ 764.942811][T10195] Bluetooth: hci2: command 0x1003 tx timeout [ 764.944325][ T4336] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 764.950372][T12345] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 765.180955][T12806] device hsr_slave_1 entered promiscuous mode [ 765.250007][T12806] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 765.251275][T12806] Cannot create hsr debugfs directory [ 765.255811][T12944] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2091'. [ 766.637246][T12965] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 766.642206][T12965] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 768.452431][T12981] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2097'. [ 769.048914][T10195] Bluetooth: hci2: Entering manufacturer mode failed (-110) [ 769.050479][ T4336] Bluetooth: hci2: command 0xfc11 tx timeout [ 769.489446][T10195] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:0' [ 769.491258][T10195] CPU: 0 PID: 10195 Comm: kworker/u5:0 Not tainted syzkaller #0 [ 769.492505][T10195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026 [ 769.494142][T10195] Workqueue: hci1 hci_rx_work [ 769.494932][T10195] Call trace: [ 769.495489][T10195] dump_backtrace+0x1c0/0x1ec [ 769.496289][T10195] show_stack+0x2c/0x3c [ 769.496949][T10195] __dump_stack+0x30/0x40 [ 769.497677][T10195] dump_stack_lvl+0xf4/0x15c [ 769.498492][T10195] dump_stack+0x1c/0x5c [ 769.499202][T10195] sysfs_create_dir_ns+0x244/0x264 [ 769.500057][T10195] kobject_add_internal+0x598/0xb08 [ 769.500926][T10195] kobject_add+0x140/0x20c [ 769.501637][T10195] device_add+0x3f0/0xf90 [ 769.502309][T10195] hci_conn_add_sysfs+0xbc/0x1c8 [ 769.503164][T10195] le_conn_complete_evt+0xcc8/0x1244 [ 769.504039][T10195] hci_le_enh_conn_complete_evt+0x114/0x3f4 [ 769.505009][T10195] hci_le_meta_evt+0x2c0/0x4a0 [ 769.505745][T10195] hci_event_packet+0x6b8/0xf18 [ 769.506459][T10195] hci_rx_work+0x324/0xa80 [ 769.507124][T10195] process_one_work+0x7f8/0x13a4 [ 769.508022][T10195] worker_thread+0x8c4/0xfec [ 769.508812][T10195] kthread+0x250/0x2d8 [ 769.509504][T10195] ret_from_fork+0x10/0x20 [ 769.511840][T10195] kobject_add_internal failed for hci1:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 769.514141][T10195] Bluetooth: hci1: failed to register connection device [ 769.662242][T13009] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 769.664758][T13009] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 771.528716][T10195] Bluetooth: hci1: command 0x2016 tx timeout [ 771.555673][T10833] Bluetooth: hci2: received HCILL_GO_TO_SLEEP_ACK in state 1 [ 771.557758][T10833] Bluetooth: hci2: Frame reassembly failed (-84) [ 771.644552][T13022] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 771.646542][T13022] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 773.092981][T12806] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 774.031229][ T4330] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:0' [ 774.032866][ T4330] CPU: 1 PID: 4330 Comm: kworker/u5:4 Not tainted syzkaller #0 [ 774.034066][ T4330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026 [ 774.035879][ T4330] Workqueue: hci5 hci_rx_work [ 774.036663][ T4330] Call trace: [ 774.037200][ T4330] dump_backtrace+0x1c0/0x1ec [ 774.038080][ T4330] show_stack+0x2c/0x3c [ 774.038719][ T4330] __dump_stack+0x30/0x40 [ 774.039525][ T4330] dump_stack_lvl+0xf4/0x15c [ 774.040316][ T4330] dump_stack+0x1c/0x5c [ 774.040995][ T4330] sysfs_create_dir_ns+0x244/0x264 [ 774.041802][ T4330] kobject_add_internal+0x598/0xb08 [ 774.042685][ T4330] kobject_add+0x140/0x20c [ 774.043343][ T4330] device_add+0x3f0/0xf90 [ 774.044180][ T4330] hci_conn_add_sysfs+0xbc/0x1c8 [ 774.045000][ T4330] le_conn_complete_evt+0xcc8/0x1244 [ 774.045841][ T4330] hci_le_enh_conn_complete_evt+0x114/0x3f4 [ 774.046831][ T4330] hci_le_meta_evt+0x2c0/0x4a0 [ 774.047501][ T4330] hci_event_packet+0x6b8/0xf18 [ 774.048156][ T4330] hci_rx_work+0x324/0xa80 [ 774.048747][ T4330] process_one_work+0x7f8/0x13a4 [ 774.049416][ T4330] worker_thread+0x8c4/0xfec [ 774.050138][ T4330] kthread+0x250/0x2d8 [ 774.050797][ T4330] ret_from_fork+0x10/0x20 [ 774.054046][T11640] Bluetooth: hci2: command 0x1003 tx timeout [ 774.056054][ T4336] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 774.057397][T10195] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 774.059673][T11640] Bluetooth: hci4: command 0xfc11 tx timeout [ 774.081347][T12806] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 774.096600][ T4330] kobject_add_internal failed for hci5:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 774.101650][ T4330] Bluetooth: hci5: failed to register connection device [ 774.180537][T13044] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2106'. [ 774.212934][T12806] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 774.308965][T12806] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 774.928463][T12806] 8021q: adding VLAN 0 to HW filter on device bond0 [ 774.990922][ T4678] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 774.993082][ T4678] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 774.998432][T12806] 8021q: adding VLAN 0 to HW filter on device team0 [ 775.004792][ T4678] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 775.006715][ T4678] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 775.008363][ T4678] bridge0: port 1(bridge_slave_0) entered blocking state [ 775.009562][ T4678] bridge0: port 1(bridge_slave_0) entered forwarding state [ 775.014188][ T4678] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 775.015826][ T4678] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 775.017673][ T4678] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 775.023215][ T4678] bridge0: port 2(bridge_slave_1) entered blocking state [ 775.024493][ T4678] bridge0: port 2(bridge_slave_1) entered forwarding state [ 775.327905][T13082] fuse: Bad value for 'fd' [ 775.701595][ T4678] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 775.703829][ T4678] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 776.005010][ T4678] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 776.024500][ T4678] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 776.029470][ T4678] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 776.033253][ T4678] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 776.140420][ T4411] device hsr_slave_0 left promiscuous mode [ 776.169588][T13046] Bluetooth: hci5: command 0x2016 tx timeout [ 776.610642][ T4411] device hsr_slave_1 left promiscuous mode [ 777.420725][T13101] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 777.422458][T13101] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 777.538837][ T4411] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 777.540117][ T4411] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 777.542791][ T4411] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 777.543963][ T4411] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 777.655900][ T4411] device bridge_slave_1 left promiscuous mode [ 777.659188][ T4411] bridge0: port 2(bridge_slave_1) entered disabled state [ 778.569438][ T4411] device bridge_slave_0 left promiscuous mode [ 778.570662][ T4411] bridge0: port 1(bridge_slave_0) entered disabled state [ 779.339210][ T4411] device veth1_macvtap left promiscuous mode [ 779.340547][ T4411] device veth0_macvtap left promiscuous mode [ 779.347911][ T4411] device veth1_vlan left promiscuous mode [ 779.361544][ T4411] device veth0_vlan left promiscuous mode [ 780.047818][T13046] Bluetooth: hci2: command 0xfc11 tx timeout [ 780.139176][ T4327] Bluetooth: hci2: Entering manufacturer mode failed (-110) [ 780.648683][ T24] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 780.829981][ T24] usb 1-1: config 0 has no interfaces? [ 780.831007][ T24] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 780.832746][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 780.835978][ T24] usb 1-1: config 0 descriptor?? [ 782.564329][ T4330] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:0' [ 782.567732][ T4330] CPU: 1 PID: 4330 Comm: kworker/u5:4 Not tainted syzkaller #0 [ 782.568950][ T4330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026 [ 782.570596][ T4330] Workqueue: hci0 hci_rx_work [ 782.571363][ T4330] Call trace: [ 782.571886][ T4330] dump_backtrace+0x1c0/0x1ec [ 782.572760][ T4330] show_stack+0x2c/0x3c [ 782.573474][ T4330] __dump_stack+0x30/0x40 [ 782.574205][ T4330] dump_stack_lvl+0xf4/0x15c [ 782.575018][ T4330] dump_stack+0x1c/0x5c [ 782.575723][ T4330] sysfs_create_dir_ns+0x244/0x264 [ 782.576560][ T4330] kobject_add_internal+0x598/0xb08 [ 782.577404][ T4330] kobject_add+0x140/0x20c [ 782.578176][ T4330] device_add+0x3f0/0xf90 [ 782.578863][ T4330] hci_conn_add_sysfs+0xbc/0x1c8 [ 782.579695][ T4330] le_conn_complete_evt+0xcc8/0x1244 [ 782.580573][ T4330] hci_le_enh_conn_complete_evt+0x114/0x3f4 [ 782.581504][ T4330] hci_le_meta_evt+0x2c0/0x4a0 [ 782.582259][ T4330] hci_event_packet+0x6b8/0xf18 [ 782.583122][ T4330] hci_rx_work+0x324/0xa80 [ 782.583791][ T4330] process_one_work+0x7f8/0x13a4 [ 782.584606][ T4330] worker_thread+0x8c4/0xfec [ 782.585396][ T4330] kthread+0x250/0x2d8 [ 782.586077][ T4330] ret_from_fork+0x10/0x20 [ 782.612367][ T4330] kobject_add_internal failed for hci0:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 782.617159][ T4330] Bluetooth: hci0: failed to register connection device [ 784.678008][ T4330] Bluetooth: hci2: command 0xfc11 tx timeout [ 784.680228][ T4327] Bluetooth: hci2: Entering manufacturer mode failed (-110) [ 784.708774][T13046] Bluetooth: hci0: command 0x2016 tx timeout [ 784.725210][ T4458] usb 1-1: USB disconnect, device number 9 [ 784.797777][T13143] fuse: Bad value for 'fd' [ 785.221556][ T4411] team0 (unregistering): Port device team_slave_1 removed [ 785.449619][ T4411] team0 (unregistering): Port device team_slave_0 removed [ 785.529999][T13150] Malformed UNC in devname [ 785.529999][T13150] [ 785.531400][T13150] CIFS: VFS: Malformed UNC in devname [ 785.833718][ T4411] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 786.360320][ T4411] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 788.823087][ T4411] bond0 (unregistering): Released all slaves [ 789.424358][ T4678] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 789.426053][ T4678] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 789.430597][ T4678] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 789.432155][ T4678] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 789.435852][ T4678] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 789.480200][T12806] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 791.160599][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 791.161975][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 791.166599][T12806] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 791.998599][T13195] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 792.000284][T13195] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 793.608095][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 793.610139][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 793.642202][T12806] device veth0_vlan entered promiscuous mode [ 793.643767][ T619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 793.645597][ T619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 793.647524][ T619] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 793.653063][ T619] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 793.657394][T12806] device veth1_vlan entered promiscuous mode [ 793.666665][ T619] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 793.668420][ T619] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 793.673282][ T619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 794.036055][ T619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 794.042279][T12806] device veth0_macvtap entered promiscuous mode [ 794.044607][T12806] device veth1_macvtap entered promiscuous mode [ 794.075974][T12806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 794.077968][T12806] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 794.080031][T12806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 794.084905][T12806] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 794.095735][T12806] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 794.098405][ T619] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 794.123676][ T619] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 794.132156][ T619] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 794.134432][ T619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 794.150283][T12806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 794.153018][T12806] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 794.154769][T12806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 794.156551][T12806] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 794.163516][T12806] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 794.167137][ T619] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 794.169018][ T619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 794.187031][T12806] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 794.204101][T12806] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 794.205992][T12806] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 794.207595][T12806] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 794.260012][T12503] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 794.263542][T12503] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 794.268257][T12503] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 794.275649][ T619] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 794.277074][ T619] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 794.280665][ T5198] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 795.654646][ T4327] Bluetooth: hci2: Entering manufacturer mode failed (-110) [ 803.231603][ T2060] ieee802154 phy0 wpan0: encryption failed: -22 [ 803.232790][ T2060] ieee802154 phy1 wpan1: encryption failed: -22 [ 805.501791][T13046] Bluetooth: hci5: command 0x0406 tx timeout [ 815.707792][T13395] Malformed UNC in devname [ 815.707792][T13395] [ 815.709067][T13395] CIFS: VFS: Malformed UNC in devname [ 815.736641][T13395] process 'syz.9.2172' launched './file1' with NULL argv: empty string added [ 815.977907][T13399] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 815.982125][T13399] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 816.226243][T13413] Malformed UNC in devname [ 816.226243][T13413] [ 816.247900][T13413] CIFS: VFS: Malformed UNC in devname [ 818.651121][T13046] Bluetooth: hci2: command 0xfc11 tx timeout [ 818.653337][ T4327] Bluetooth: hci2: Entering manufacturer mode failed (-110) [ 821.947882][T13494] Malformed UNC in devname [ 821.947882][T13494] [ 821.949232][T13494] CIFS: VFS: Malformed UNC in devname [ 824.752299][T13546] Malformed UNC in devname [ 824.752299][T13546] [ 824.753453][T13546] CIFS: VFS: Malformed UNC in devname [ 826.995285][ T4458] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 827.184934][ T4458] usb 1-1: config 0 has no interfaces? [ 827.186674][ T4458] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 827.308169][ T4458] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 828.000154][ T4458] usb 1-1: config 0 descriptor?? [ 830.768468][ T4330] Bluetooth: hci2: command 0xfc11 tx timeout [ 830.770532][ T4327] Bluetooth: hci2: Entering manufacturer mode failed (-110) [ 830.821701][T10552] usb 1-1: USB disconnect, device number 10 [ 834.744532][T10552] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 835.852762][T10552] usb 1-1: config 0 has no interfaces? [ 835.853687][T10552] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 835.856732][T10552] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 835.863526][T10552] usb 1-1: config 0 descriptor?? [ 835.956252][T13678] Malformed UNC in devname [ 835.956252][T13678] [ 835.957459][T13678] CIFS: VFS: Malformed UNC in devname [ 838.903068][ T4330] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 838.907011][ T4330] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 838.909126][ T4330] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 838.911598][ T4330] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 838.913167][ T4330] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 838.915022][ T4330] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 838.996965][T13692] lo speed is unknown, defaulting to 1000 [ 839.033200][T13692] chnl_net:caif_netlink_parms(): no params data found [ 839.053297][T13692] bridge0: port 1(bridge_slave_0) entered blocking state [ 839.054696][T13692] bridge0: port 1(bridge_slave_0) entered disabled state [ 839.056287][T13692] device bridge_slave_0 entered promiscuous mode [ 839.058530][T13692] bridge0: port 2(bridge_slave_1) entered blocking state [ 839.060118][T13692] bridge0: port 2(bridge_slave_1) entered disabled state [ 839.061744][T13692] device bridge_slave_1 entered promiscuous mode [ 839.070560][T13692] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 839.073458][T13692] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 839.083428][T13692] team0: Port device team_slave_0 added [ 839.085360][T13692] team0: Port device team_slave_1 added [ 839.092043][T13692] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 839.093264][T13692] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 839.097390][T13692] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 839.100092][T13692] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 839.101325][T13692] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 839.105595][T13692] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 839.150676][T13692] device hsr_slave_0 entered promiscuous mode [ 839.188960][T13692] device hsr_slave_1 entered promiscuous mode [ 839.228733][T13692] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 839.230412][T13692] Cannot create hsr debugfs directory [ 840.418582][ T4327] Bluetooth: hci2: Entering manufacturer mode failed (-110) [ 840.559452][ T24] usb 1-1: USB disconnect, device number 11 [ 841.027801][ T4327] Bluetooth: hci4: command 0x0409 tx timeout [ 843.508772][T13046] Bluetooth: hci4: command 0x041b tx timeout [ 846.145862][ T4327] Bluetooth: hci4: command 0x040f tx timeout [ 849.344706][ T4327] Bluetooth: hci4: command 0x0419 tx timeout [ 852.967303][ T5399] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 855.126399][ T5399] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 855.760682][ T5399] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 855.939863][ T5399] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 857.048204][T13692] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 858.072298][T13692] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 859.430195][T13692] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 859.565163][T13692] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 860.065840][T13961] Malformed UNC in devname [ 860.065840][T13961] [ 860.067350][T13961] CIFS: VFS: Malformed UNC in devname [ 860.098171][T13961] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 860.100440][T13961] Cannot find add_set index 0 as target [ 860.685089][T13692] 8021q: adding VLAN 0 to HW filter on device bond0 [ 860.707102][ T5399] tipc: Left network mode [ 860.707136][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 860.709709][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 860.713425][T13692] 8021q: adding VLAN 0 to HW filter on device team0 [ 860.716258][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 860.717959][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 860.720446][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 860.721576][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 860.723675][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 860.727149][ T5198] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 860.729405][ T5198] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 860.731693][ T5198] bridge0: port 2(bridge_slave_1) entered blocking state [ 860.732983][ T5198] bridge0: port 2(bridge_slave_1) entered forwarding state [ 860.736347][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 860.768421][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 860.774391][T12622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 860.777257][T12622] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 860.788012][T12622] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 860.790225][T12622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 860.792064][T12622] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 860.798277][T12622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 860.804132][T12622] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 860.805987][T12622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 860.807813][T12622] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 860.813639][T13692] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 862.230224][T13996] Malformed UNC in devname [ 862.230224][T13996] [ 862.231440][T13996] CIFS: VFS: Malformed UNC in devname [ 862.278947][T13996] SET target dimension over the limit! [ 862.954015][ T5104] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 862.955473][ T5104] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 862.964412][T13692] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 863.338335][ T4728] Bluetooth: hci2: received HCILL_GO_TO_SLEEP_ACK in state 1 [ 863.340659][ T4760] Bluetooth: hci2: Frame reassembly failed (-84) [ 863.510872][ T4760] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 863.512816][ T4760] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 863.516229][ T4760] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 863.518042][ T4760] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 863.520478][ T4760] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 863.524476][ T4760] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 863.528160][T13692] device veth0_vlan entered promiscuous mode [ 863.535019][T13692] device veth1_vlan entered promiscuous mode [ 863.549930][ T4728] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 863.551730][ T4728] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 863.553577][ T4728] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 863.555195][ T4728] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 863.560278][T13692] device veth0_macvtap entered promiscuous mode [ 863.608863][T13046] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 863.610057][ T4330] Bluetooth: hci0: command 0x1003 tx timeout [ 863.653488][T13692] device veth1_macvtap entered promiscuous mode [ 863.668970][T13692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 863.675853][T13692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 863.679058][T13692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 863.681916][T13692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 863.685741][T13692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 863.687825][T13692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 863.694185][T13692] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 863.697884][ T5198] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 863.699989][ T5198] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 863.701718][ T5198] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 863.703545][ T5198] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 863.784073][T13692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 863.785783][T13692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 863.787408][T13692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 863.789799][T13692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 863.791428][T13692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 863.793265][T13692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 863.795828][T13692] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 863.798594][T13692] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 863.800198][T13692] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 863.801546][T13692] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 863.803089][T13692] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 864.126451][ T4760] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 864.128214][ T4760] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 864.253227][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 864.254688][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 864.258451][ T4760] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 864.268401][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 864.269770][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 864.272330][ T5104] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 865.318783][ T4327] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 867.320762][T14061] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 867.322416][T14061] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 868.329642][ T2060] ieee802154 phy0 wpan0: encryption failed: -22 [ 868.331088][ T2060] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.659056][T14090] Malformed UNC in devname [ 870.659056][T14090] [ 870.660134][T14090] CIFS: VFS: Malformed UNC in devname [ 870.761069][T14090] Cannot find add_set index 0 as target [ 871.219688][T13046] Bluetooth: hci0: command 0xfc11 tx timeout [ 871.221221][ T4327] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 871.490391][T14100] Cannot find add_set index 0 as target [ 871.510479][T14097] SET target dimension over the limit! [ 871.547232][T14099] Malformed UNC in devname [ 871.547232][T14099] [ 871.548446][T14099] CIFS: VFS: Malformed UNC in devname [ 873.605305][T14127] Cannot find add_set index 0 as target [ 873.629115][T14128] Malformed UNC in devname [ 873.629115][T14128] [ 873.630679][T14128] CIFS: VFS: Malformed UNC in devname [ 875.401505][ T4805] Bluetooth: hci0: received HCILL_GO_TO_SLEEP_ACK in state 1 [ 875.408340][ T7452] Bluetooth: hci0: Frame reassembly failed (-84) [ 875.544636][ T5399] device hsr_slave_0 left promiscuous mode [ 876.508491][ T5399] device hsr_slave_1 left promiscuous mode [ 876.728782][ T4330] Bluetooth: hci6: command 0x0406 tx timeout [ 877.288414][T14170] Malformed UNC in devname [ 877.288414][T14170] [ 877.290206][T14170] CIFS: VFS: Malformed UNC in devname [ 877.317603][T14167] Cannot find add_set index 0 as target [ 877.613190][ T4330] Bluetooth: hci0: command 0x1003 tx timeout [ 877.615009][T13046] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 878.570021][T14183] Cannot find add_set index 0 as target [ 878.713826][T14189] Cannot find add_set index 0 as target [ 878.720633][ T5399] device veth1_macvtap left promiscuous mode [ 878.851906][ T5399] device veth0_macvtap left promiscuous mode [ 878.855357][ T5399] device veth1_vlan left promiscuous mode [ 878.858418][ T5399] device veth0_vlan left promiscuous mode [ 879.092041][T14196] Malformed UNC in devname [ 879.092041][T14196] [ 879.093191][T14196] CIFS: VFS: Malformed UNC in devname [ 879.110492][T14196] Cannot find add_set index 0 as target [ 879.258995][ T4330] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 879.262959][ T4330] CPU: 0 PID: 4330 Comm: kworker/u5:4 Not tainted syzkaller #0 [ 879.264124][ T4330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026 [ 879.265769][ T4330] Workqueue: hci3 hci_rx_work [ 879.266642][ T4330] Call trace: [ 879.267212][ T4330] dump_backtrace+0x1c0/0x1ec [ 879.268047][ T4330] show_stack+0x2c/0x3c [ 879.268744][ T4330] __dump_stack+0x30/0x40 [ 879.269477][ T4330] dump_stack_lvl+0xf4/0x15c [ 879.270233][ T4330] dump_stack+0x1c/0x5c [ 879.270936][ T4330] sysfs_create_dir_ns+0x244/0x264 [ 879.271790][ T4330] kobject_add_internal+0x598/0xb08 [ 879.272669][ T4330] kobject_add+0x140/0x20c [ 879.273449][ T4330] device_add+0x3f0/0xf90 [ 879.274178][ T4330] hci_conn_add_sysfs+0xbc/0x1c8 [ 879.274951][ T4330] le_conn_complete_evt+0xcc8/0x1244 [ 879.275815][ T4330] hci_le_enh_conn_complete_evt+0x114/0x3f4 [ 879.276697][ T4330] hci_le_meta_evt+0x2c0/0x4a0 [ 879.277457][ T4330] hci_event_packet+0x6b8/0xf18 [ 879.278235][ T4330] hci_rx_work+0x324/0xa80 [ 879.278982][ T4330] process_one_work+0x7f8/0x13a4 [ 879.279765][ T4330] worker_thread+0x8c4/0xfec [ 879.280508][ T4330] kthread+0x250/0x2d8 [ 879.281206][ T4330] ret_from_fork+0x10/0x20 [ 879.358336][ T4330] kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 879.363780][ T4330] Bluetooth: hci3: failed to register connection device [ 879.848913][T14204] Malformed UNC in devname [ 879.848913][T14204] [ 879.850187][T14204] CIFS: VFS: Malformed UNC in devname [ 879.935023][T14204] Cannot find add_set index 0 as target [ 881.498848][ T4330] Bluetooth: hci3: command 0x2016 tx timeout [ 883.997351][ T4728] Bluetooth: hci0: received HCILL_GO_TO_SLEEP_ACK in state 1 [ 884.027080][T12622] Bluetooth: hci0: Frame reassembly failed (-84) [ 886.009818][T13046] Bluetooth: hci0: command 0x1003 tx timeout [ 886.011711][ T4330] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 887.455698][T14263] Malformed UNC in devname [ 887.455698][T14263] [ 887.456843][T14263] CIFS: VFS: Malformed UNC in devname [ 887.468063][T14263] SET target dimension over the limit! [ 888.562052][T14276] Cannot find add_set index 0 as target [ 890.527361][T12622] Bluetooth: hci0: received HCILL_GO_TO_SLEEP_ACK in state 1 [ 890.567637][T12622] Bluetooth: hci0: Frame reassembly failed (-84) [ 891.156625][ T11] Bluetooth: hci2: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 891.190500][ T4872] Bluetooth: hci2: Frame reassembly failed (-84) [ 892.216200][ T4872] Bluetooth: hci7: received HCILL_GO_TO_SLEEP_ACK in state 1 [ 892.225768][ T4872] Bluetooth: hci7: Frame reassembly failed (-84) [ 892.587344][ T4330] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 892.589956][T10195] Bluetooth: hci0: command 0x1003 tx timeout [ 893.208749][T10195] Bluetooth: hci2: command 0x1003 tx timeout [ 893.211086][ T4327] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 893.299636][T14310] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 893.301137][T14310] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 893.589033][T14315] Malformed UNC in devname [ 893.589033][T14315] [ 893.590251][T14315] CIFS: VFS: Malformed UNC in devname [ 894.023234][ T4330] Bluetooth: hci0: sending frame failed (-49) [ 894.026061][ T4327] Bluetooth: hci0: Entering manufacturer mode failed (-49) [ 894.248820][T13046] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 894.489816][ T4330] Bluetooth: hci8: command 0xfc11 tx timeout [ 894.489846][T11640] Bluetooth: hci8: Entering manufacturer mode failed (-110) [ 895.469383][T14331] Malformed UNC in devname [ 895.469383][T14331] [ 895.470458][T14331] CIFS: VFS: Malformed UNC in devname [ 895.487573][T14325] SET target dimension over the limit! [ 895.491964][T14330] Malformed UNC in devname [ 895.491964][T14330] [ 895.493201][T14330] CIFS: VFS: Malformed UNC in devname [ 895.542942][T14330] Cannot find add_set index 0 as target [ 898.422159][T12503] Bluetooth: hci0: received HCILL_GO_TO_SLEEP_ACK in state 1 [ 898.426546][T12503] Bluetooth: hci0: Frame reassembly failed (-84) [ 899.809125][ T9811] Bluetooth: hci2: received HCILL_GO_TO_SLEEP_ACK in state 1 [ 899.824525][ T9811] Bluetooth: hci2: Frame reassembly failed (-84) [ 900.062063][T14374] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 900.063527][T14374] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 900.290349][ T5399] bond0 (unregistering): Released all slaves [ 900.408685][ T4327] Bluetooth: hci0: command 0x1003 tx timeout [ 900.411744][ T4330] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 902.155066][T11640] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 902.175551][ T9780] lo speed is unknown, defaulting to 1000 [ 902.177717][ T4330] Bluetooth: hci2: command 0x1003 tx timeout [ 902.550855][T13046] Bluetooth: hci7: Entering manufacturer mode failed (-110) [ 902.552653][T11640] Bluetooth: hci7: command 0xfc11 tx timeout [ 902.875539][T14411] Malformed UNC in devname [ 902.875539][T14411] [ 902.876761][T14411] CIFS: VFS: Malformed UNC in devname [ 903.128436][T14411] SET target dimension over the limit! [ 904.168911][T10195] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 904.170829][T11640] Bluetooth: hci0: command 0x1003 tx timeout [ 907.021996][T14501] Malformed UNC in devname [ 907.021996][T14501] [ 907.023306][T14501] CIFS: VFS: Malformed UNC in devname [ 907.929670][T13046] Bluetooth: hci0: command 0x1003 tx timeout [ 907.929694][T10195] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 908.855266][ T9757] Bluetooth: hci0: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 908.860410][ T9757] Bluetooth: hci0: Frame reassembly failed (-84) [ 908.945495][T14544] Malformed UNC in devname [ 908.945495][T14544] [ 908.946796][T14544] CIFS: VFS: Malformed UNC in devname [ 908.973030][T14544] Cannot find add_set index 0 as target [ 909.769742][T11640] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 909.771672][T10195] Bluetooth: hci2: command 0x1003 tx timeout [ 909.834990][T14579] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 909.839966][T14579] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 910.472368][ T5399] Bluetooth: hci2: Frame reassembly failed (-84) [ 910.910924][ T4327] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 910.914284][T13046] Bluetooth: hci0: command 0x1003 tx timeout [ 911.530397][ T5399] Bluetooth: hci0: received HCILL_GO_TO_SLEEP_ACK in state 1 [ 911.539582][ T5399] Bluetooth: hci0: Frame reassembly failed (-84) [ 912.488787][T11640] Bluetooth: hci2: Entering manufacturer mode failed (-110) [ 912.488976][T13046] Bluetooth: hci2: command 0xfc11 tx timeout [ 913.559368][T11640] Bluetooth: hci0: command 0x1003 tx timeout [ 913.559881][ T4327] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 913.579334][T14667] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 913.580792][T14667] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 914.815388][ T7542] Bluetooth: hci2: received HCILL_GO_TO_SLEEP_ACK in state 1 [ 914.818538][ T619] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 914.844829][ T7542] Bluetooth: hci2: Frame reassembly failed (-84) [ 914.846279][ T7542] Bluetooth: hci2: Frame reassembly failed (-84) [ 916.422248][T12503] Bluetooth: hci7: received HCILL_GO_TO_SLEEP_ACK in state 1 [ 916.425668][T12503] Bluetooth: hci7: Frame reassembly failed (-84) [ 916.808831][ T4327] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 916.809648][T13046] Bluetooth: hci2: command 0x1003 tx timeout [ 916.810424][ T4330] Bluetooth: hci0: command 0xfc11 tx timeout [ 916.813595][T10195] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 917.202793][ T4411] Bluetooth: hci0: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 917.314064][ T5198] Bluetooth: hci0: Frame reassembly failed (-84) [ 918.489014][ T4327] Bluetooth: hci7: command 0x1003 tx timeout [ 918.489830][T11640] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 918.557323][T14803] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 918.563505][T14803] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 919.221588][ T4330] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 920.811527][ T5382] Bluetooth: hci0: received HCILL_GO_TO_SLEEP_ACK in state 1 [ 920.843674][ T5382] Bluetooth: hci0: Frame reassembly failed (-84) [ 921.446450][T10195] Bluetooth: hci2: command 0xfc11 tx timeout [ 921.473566][T11640] Bluetooth: hci2: Entering manufacturer mode failed (-110) [ 922.640733][ T7452] Bluetooth: hci2: received HCILL_GO_TO_SLEEP_ACK in state 1 [ 922.644041][ T7452] Bluetooth: hci2: Frame reassembly failed (-84) [ 922.808727][ T4330] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 922.808910][T10195] Bluetooth: hci0: command 0x1003 tx timeout [ 924.936646][T11640] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 925.012874][ T11] Bluetooth: hci7: received HCILL_GO_TO_SLEEP_ACK in state 1 [ 925.023301][ T4385] Bluetooth: hci7: Frame reassembly failed (-84) [ 925.024417][ T4385] Bluetooth: hci7: Frame reassembly failed (-84) [ 925.032280][ T4385] Bluetooth: hci7: Frame reassembly failed (-84) [ 925.288933][ T4330] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 927.048811][T10195] Bluetooth: hci7: command 0x1003 tx timeout [ 927.048833][T11640] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 928.088946][ T4330] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 928.539684][T15000] binder: 14992:15000 ERROR: BC_REGISTER_LOOPER called without request [ 928.541274][T15000] binder: 14992:15000 ERROR: BC_REGISTER_LOOPER called without request [ 928.542689][T15000] binder: 14992:15000 BC_INCREFS_DONE u0000000000000002 no match [ 928.543967][T15000] binder: 14992:15000 BC_CLEAR_DEATH_NOTIFICATION invalid ref 3 [ 928.545360][T15000] binder: 15000 RLIMIT_NICE not set [ 928.579652][T15000] netlink: 'syz.6.2391': attribute type 10 has an invalid length. [ 928.585374][T15000] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 928.591628][T15000] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 929.527444][T10269] Bluetooth: hci0: received HCILL_GO_TO_SLEEP_ACK in state 1 [ 929.553306][T10269] Bluetooth: hci0: Frame reassembly failed (-84) [ 929.770263][ T2060] ieee802154 phy0 wpan0: encryption failed: -22 [ 929.771329][ T2060] ieee802154 phy1 wpan1: encryption failed: -22 [ 930.985433][ T4729] Bluetooth: hci2: Frame reassembly failed (-84) [ 931.618833][ T4327] Bluetooth: hci0: command 0x1003 tx timeout [ 931.621771][ T4330] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 933.049277][T11640] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 933.641874][T15133] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 933.646677][T15133] CIFS mount error: No usable UNC path provided in device string! [ 933.646677][T15133] [ 933.648441][T15133] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 938.632141][T15277] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 938.633914][T15277] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 938.711294][T15281] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 938.712849][T15281] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 939.998401][T11640] Bluetooth: hci0: command 0x1003 tx timeout [ 939.998425][ T4327] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 942.089001][ T4327] Bluetooth: hci2: Entering manufacturer mode failed (-110) [ 942.090567][ T4330] Bluetooth: hci2: command 0xfc11 tx timeout [ 943.896465][ T4330] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 943.898065][ T4330] CPU: 0 PID: 4330 Comm: kworker/u5:4 Not tainted syzkaller #0 [ 943.899203][ T4330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026 [ 943.900916][ T4330] Workqueue: hci3 hci_rx_work [ 943.901756][ T4330] Call trace: [ 943.902283][ T4330] dump_backtrace+0x1c0/0x1ec [ 943.903069][ T4330] show_stack+0x2c/0x3c [ 943.903763][ T4330] __dump_stack+0x30/0x40 [ 943.904567][ T4330] dump_stack_lvl+0xf4/0x15c [ 943.905390][ T4330] dump_stack+0x1c/0x5c [ 943.906105][ T4330] sysfs_create_dir_ns+0x244/0x264 [ 943.907019][ T4330] kobject_add_internal+0x598/0xb08 [ 943.907893][ T4330] kobject_add+0x140/0x20c [ 943.908614][ T4330] device_add+0x3f0/0xf90 [ 943.909285][ T4330] hci_conn_add_sysfs+0xbc/0x1c8 [ 943.910142][ T4330] le_conn_complete_evt+0xcc8/0x1244 [ 943.911008][ T4330] hci_le_enh_conn_complete_evt+0x114/0x3f4 [ 943.911939][ T4330] hci_le_meta_evt+0x2c0/0x4a0 [ 943.912650][ T4330] hci_event_packet+0x6b8/0xf18 [ 943.913506][ T4330] hci_rx_work+0x324/0xa80 [ 943.914278][ T4330] process_one_work+0x7f8/0x13a4 [ 943.915193][ T4330] worker_thread+0x8c4/0xfec [ 943.915928][ T4330] kthread+0x250/0x2d8 [ 943.916629][ T4330] ret_from_fork+0x10/0x20 [ 943.918517][ T4330] kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 943.920778][ T4330] Bluetooth: hci3: failed to register connection device [ 945.205811][T15423] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 945.207462][T15423] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 946.019008][ T4330] Bluetooth: hci3: command 0x2016 tx timeout [ 947.809241][ T4330] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:0' [ 947.811138][ T4330] CPU: 1 PID: 4330 Comm: kworker/u5:4 Not tainted syzkaller #0 [ 947.812329][ T4330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026 [ 947.814052][ T4330] Workqueue: hci1 hci_rx_work [ 947.814887][ T4330] Call trace: [ 947.815424][ T4330] dump_backtrace+0x1c0/0x1ec [ 947.816191][ T4330] show_stack+0x2c/0x3c [ 947.816828][ T4330] __dump_stack+0x30/0x40 [ 947.817541][ T4330] dump_stack_lvl+0xf4/0x15c [ 947.818325][ T4330] dump_stack+0x1c/0x5c [ 947.819061][ T4330] sysfs_create_dir_ns+0x244/0x264 [ 947.819931][ T4330] kobject_add_internal+0x598/0xb08 [ 947.820819][ T4330] kobject_add+0x140/0x20c [ 947.821551][ T4330] device_add+0x3f0/0xf90 [ 947.822273][ T4330] hci_conn_add_sysfs+0xbc/0x1c8 [ 947.823062][ T4330] le_conn_complete_evt+0xcc8/0x1244 [ 947.823874][ T4330] hci_le_enh_conn_complete_evt+0x114/0x3f4 [ 947.824821][ T4330] hci_le_meta_evt+0x2c0/0x4a0 [ 947.825598][ T4330] hci_event_packet+0x6b8/0xf18 [ 947.826367][ T4330] hci_rx_work+0x324/0xa80 [ 947.827061][ T4330] process_one_work+0x7f8/0x13a4 [ 947.827873][ T4330] worker_thread+0x8c4/0xfec [ 947.828600][ T4330] kthread+0x250/0x2d8 [ 947.829301][ T4330] ret_from_fork+0x10/0x20 [ 947.834059][ T4330] kobject_add_internal failed for hci1:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 947.836177][ T4330] Bluetooth: hci1: failed to register connection device [ 948.112177][T15494] CIFS mount error: No usable UNC path provided in device string! [ 948.112177][T15494] [ 948.114095][T15494] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 948.408887][ T4327] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 948.409394][ T4330] Bluetooth: hci0: command 0xfc11 tx timeout [ 949.643201][T15516] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 949.648616][T15516] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 950.161134][ T4327] Bluetooth: hci1: command 0x2016 tx timeout [ 953.291476][T15543] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 953.293140][T15543] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 955.002115][T15562] CIFS mount error: No usable UNC path provided in device string! [ 955.002115][T15562] [ 955.003829][T15562] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 956.260716][ T7452] Bluetooth: hci7: received HCILL_GO_TO_SLEEP_ACK in state 1 [ 956.265189][T10195] Bluetooth: hci6: command 0x2016 tx timeout [ 956.348691][ T7452] Bluetooth: hci7: Frame reassembly failed (-84) [ 956.814559][T10195] Bluetooth: hci0: command 0xfc11 tx timeout [ 956.814946][ T4330] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 957.510375][ T4336] Bluetooth: hci2: command 0xfc11 tx timeout [ 957.523859][ T4327] Bluetooth: hci2: Entering manufacturer mode failed (-110) [ 958.365220][ T4327] Bluetooth: hci7: command 0x1003 tx timeout [ 958.416806][T11640] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 959.700375][ T4330] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 959.706076][ T4330] Bluetooth: hci8: command 0x1003 tx timeout [ 959.731259][T10195] Bluetooth: hci8: Opcode 0x1003 failed: -110 [ 959.920648][T10195] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:0' [ 959.922438][T10195] CPU: 1 PID: 10195 Comm: kworker/u5:0 Not tainted syzkaller #0 [ 959.923718][T10195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026 [ 959.925427][T10195] Workqueue: hci1 hci_rx_work [ 959.926293][T10195] Call trace: [ 959.926842][T10195] dump_backtrace+0x1c0/0x1ec [ 959.927649][T10195] show_stack+0x2c/0x3c [ 959.928391][T10195] __dump_stack+0x30/0x40 [ 959.929101][T10195] dump_stack_lvl+0xf4/0x15c [ 959.929892][T10195] dump_stack+0x1c/0x5c [ 959.930589][T10195] sysfs_create_dir_ns+0x244/0x264 [ 959.931430][T10195] kobject_add_internal+0x598/0xb08 [ 959.932337][T10195] kobject_add+0x140/0x20c [ 959.933072][T10195] device_add+0x3f0/0xf90 [ 959.933759][T10195] hci_conn_add_sysfs+0xbc/0x1c8 [ 959.934555][T10195] le_conn_complete_evt+0xcc8/0x1244 [ 959.935451][T10195] hci_le_enh_conn_complete_evt+0x114/0x3f4 [ 959.936396][T10195] hci_le_meta_evt+0x2c0/0x4a0 [ 959.937145][T10195] hci_event_packet+0x6b8/0xf18 [ 959.937919][T10195] hci_rx_work+0x324/0xa80 [ 959.938674][T10195] process_one_work+0x7f8/0x13a4 [ 959.939537][T10195] worker_thread+0x8c4/0xfec [ 959.940307][T10195] kthread+0x250/0x2d8 [ 959.940978][T10195] ret_from_fork+0x10/0x20 [ 959.942214][T10195] kobject_add_internal failed for hci1:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 959.944397][T10195] Bluetooth: hci1: failed to register connection device [ 960.222691][T12503] Bluetooth: hci0: received HCILL_GO_TO_SLEEP_ACK in state 1 [ 960.224808][T12503] Bluetooth: hci0: Frame reassembly failed (-84) [ 960.475426][T15639] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 960.476926][T15639] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 962.008690][ T4330] Bluetooth: hci1: command 0x2016 tx timeout [ 962.168763][ T4330] Bluetooth: hci0: command 0x1003 tx timeout [ 962.170785][T11640] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 963.283445][T11640] Bluetooth: hci4: command 0x0406 tx timeout [ 963.569726][T11640] Bluetooth: hci2: command 0xfc11 tx timeout [ 963.571821][T10195] Bluetooth: hci2: Entering manufacturer mode failed (-110) [ 964.489758][T13046] Bluetooth: hci0: command 0xfc11 tx timeout [ 964.489788][ T4330] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 965.815203][ T7452] Bluetooth: hci0: received HCILL_GO_TO_SLEEP_ACK in state 1 [ 965.816675][ T5198] Bluetooth: hci0: Frame reassembly failed (-84) [ 966.143115][ T4330] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:0' [ 966.144749][ T4330] CPU: 0 PID: 4330 Comm: kworker/u5:4 Not tainted syzkaller #0 [ 966.145947][ T4330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026 [ 966.147721][ T4330] Workqueue: hci5 hci_rx_work [ 966.148532][ T4330] Call trace: [ 966.149043][ T4330] dump_backtrace+0x1c0/0x1ec [ 966.149778][ T4330] show_stack+0x2c/0x3c [ 966.150478][ T4330] __dump_stack+0x30/0x40 [ 966.151256][ T4330] dump_stack_lvl+0xf4/0x15c [ 966.152006][ T4330] dump_stack+0x1c/0x5c [ 966.152724][ T4330] sysfs_create_dir_ns+0x244/0x264 [ 966.153647][ T4330] kobject_add_internal+0x598/0xb08 [ 966.154516][ T4330] kobject_add+0x140/0x20c [ 966.155297][ T4330] device_add+0x3f0/0xf90 [ 966.156035][ T4330] hci_conn_add_sysfs+0xbc/0x1c8 [ 966.156884][ T4330] le_conn_complete_evt+0xcc8/0x1244 [ 966.157823][ T4330] hci_le_enh_conn_complete_evt+0x114/0x3f4 [ 966.158897][ T4330] hci_le_meta_evt+0x2c0/0x4a0 [ 966.159726][ T4330] hci_event_packet+0x6b8/0xf18 [ 966.160570][ T4330] hci_rx_work+0x324/0xa80 [ 966.161327][ T4330] process_one_work+0x7f8/0x13a4 [ 966.162226][ T4330] worker_thread+0x8c4/0xfec [ 966.163041][ T4330] kthread+0x250/0x2d8 [ 966.163732][ T4330] ret_from_fork+0x10/0x20 [ 966.168199][ T4330] kobject_add_internal failed for hci5:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 966.170958][ T4330] Bluetooth: hci5: failed to register connection device [ 966.328800][ T4330] Bluetooth: hci2: command 0xfc11 tx timeout [ 966.329170][T10195] Bluetooth: hci2: Entering manufacturer mode failed (-110) [ 966.416217][T15771] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 966.417863][T15771] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 967.735494][ T7452] Bluetooth: hci7: received HCILL_GO_TO_SLEEP_ACK in state 1 [ 967.750720][ T7452] Bluetooth: hci7: Frame reassembly failed (-84) [ 967.848928][T11640] Bluetooth: hci0: command 0x1003 tx timeout [ 967.848991][T13046] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 968.007553][T15810] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 968.016973][T15810] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 968.258721][ T4327] Bluetooth: hci5: command 0x2016 tx timeout [ 968.889082][T10195] Bluetooth: hci2: Entering manufacturer mode failed (-110) [ 969.688830][ T4330] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 970.264661][ T4330] Bluetooth: hci0: command 0xfc11 tx timeout [ 970.266854][T13046] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 973.650244][T16011] device syzkaller0 entered promiscuous mode [ 973.878603][T16016] tipc: Started in network mode [ 973.879980][T16016] tipc: Node identity 828752612d29, cluster identity 4711 [ 973.881392][T16016] tipc: Enabled bearer , priority 0 [ 973.883851][T16016] device syzkaller0 entered promiscuous mode [ 973.895213][T16016] tipc: Resetting bearer [ 973.901179][T16015] tipc: Resetting bearer [ 973.969483][T16015] tipc: Disabling bearer [ 977.481099][T16096] CIFS mount error: No usable UNC path provided in device string! [ 977.481099][T16096] [ 977.482756][T16096] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 977.562617][T16100] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 977.566717][T16100] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 978.888831][ T4330] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 978.890146][T10195] Bluetooth: hci0: command 0x1003 tx timeout [ 980.088784][ T4330] Bluetooth: hci2: command 0xfc11 tx timeout [ 980.090792][T13046] Bluetooth: hci2: Entering manufacturer mode failed (-110) [ 982.313671][T16165] device syzkaller0 entered promiscuous mode [ 983.971994][ T5198] Bluetooth: hci0: received HCILL_GO_TO_SLEEP_ACK in state 1 [ 983.981790][ T5198] Bluetooth: hci0: Frame reassembly failed (-84) [ 984.638843][T16201] CIFS mount error: No usable UNC path provided in device string! [ 984.638843][T16201] [ 984.640827][T16201] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 985.187314][T10195] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:0' [ 985.189360][T10195] CPU: 1 PID: 10195 Comm: kworker/u5:0 Not tainted syzkaller #0 [ 985.190487][T10195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026 [ 985.191921][T10195] Workqueue: hci1 hci_rx_work [ 985.192644][T10195] Call trace: [ 985.193142][T10195] dump_backtrace+0x1c0/0x1ec [ 985.193904][T10195] show_stack+0x2c/0x3c [ 985.194523][T10195] __dump_stack+0x30/0x40 [ 985.195182][T10195] dump_stack_lvl+0xf4/0x15c [ 985.195881][T10195] dump_stack+0x1c/0x5c [ 985.196488][T10195] sysfs_create_dir_ns+0x244/0x264 [ 985.197230][T10195] kobject_add_internal+0x598/0xb08 [ 985.197974][T10195] kobject_add+0x140/0x20c [ 985.198614][T10195] device_add+0x3f0/0xf90 [ 985.199259][T10195] hci_conn_add_sysfs+0xbc/0x1c8 [ 985.199974][T10195] le_conn_complete_evt+0xcc8/0x1244 [ 985.200766][T10195] hci_le_enh_conn_complete_evt+0x114/0x3f4 [ 985.201626][T10195] hci_le_meta_evt+0x2c0/0x4a0 [ 985.202434][T10195] hci_event_packet+0x6b8/0xf18 [ 985.203212][T10195] hci_rx_work+0x324/0xa80 [ 985.203909][T10195] process_one_work+0x7f8/0x13a4 [ 985.204682][T10195] worker_thread+0x8c4/0xfec [ 985.205385][T10195] kthread+0x250/0x2d8 [ 985.206010][T10195] ret_from_fork+0x10/0x20 [ 985.531721][T10195] kobject_add_internal failed for hci1:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 985.534076][T10195] Bluetooth: hci1: failed to register connection device [ 986.008895][T13046] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 986.122823][T16252] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2550'. [ 987.053831][T16299] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 987.061715][T16299] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 987.609031][T13046] Bluetooth: hci1: command 0x2016 tx timeout [ 988.108797][T16321] device syzkaller0 entered promiscuous mode [ 988.616748][T16327] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 988.624670][T16327] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 990.009848][T10195] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 990.011395][T13046] Bluetooth: hci0: command 0xfc11 tx timeout [ 990.620745][T16366] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2564'. [ 990.648798][T10195] Bluetooth: hci2: command 0xfc11 tx timeout [ 990.648821][ T4330] Bluetooth: hci2: Entering manufacturer mode failed (-110) [ 991.210363][ T2060] ieee802154 phy0 wpan0: encryption failed: -22 [ 991.213081][ T2060] ieee802154 phy1 wpan1: encryption failed: -22 [ 991.846829][ T4330] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci6/hci6:0' [ 991.848524][ T4330] CPU: 1 PID: 4330 Comm: kworker/u5:4 Not tainted syzkaller #0 [ 991.849599][ T4330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026 [ 991.851048][ T4330] Workqueue: hci6 hci_rx_work [ 991.851842][ T4330] Call trace: [ 991.852345][ T4330] dump_backtrace+0x1c0/0x1ec [ 991.853083][ T4330] show_stack+0x2c/0x3c [ 991.853751][ T4330] __dump_stack+0x30/0x40 [ 991.854381][ T4330] dump_stack_lvl+0xf4/0x15c [ 991.855020][ T4330] dump_stack+0x1c/0x5c [ 991.855566][ T4330] sysfs_create_dir_ns+0x244/0x264 [ 991.856333][ T4330] kobject_add_internal+0x598/0xb08 [ 991.857090][ T4330] kobject_add+0x140/0x20c [ 991.857771][ T4330] device_add+0x3f0/0xf90 [ 991.858486][ T4330] hci_conn_add_sysfs+0xbc/0x1c8 [ 991.859206][ T4330] le_conn_complete_evt+0xcc8/0x1244 [ 991.859986][ T4330] hci_le_enh_conn_complete_evt+0x114/0x3f4 [ 991.860819][ T4330] hci_le_meta_evt+0x2c0/0x4a0 [ 991.861547][ T4330] hci_event_packet+0x6b8/0xf18 [ 991.862264][ T4330] hci_rx_work+0x324/0xa80 [ 991.863009][ T4330] process_one_work+0x7f8/0x13a4 [ 991.863773][ T4330] worker_thread+0x8c4/0xfec [ 991.864518][ T4330] kthread+0x250/0x2d8 [ 991.865173][ T4330] ret_from_fork+0x10/0x20 [ 991.867529][ T4330] kobject_add_internal failed for hci6:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 991.870104][ T4330] Bluetooth: hci6: failed to register connection device [ 994.121602][ T4330] Bluetooth: hci6: command 0x2016 tx timeout [ 995.014827][ T9757] Bluetooth: hci0: received HCILL_GO_TO_SLEEP_ACK in state 1 [ 995.016788][ T9757] Bluetooth: hci0: Frame reassembly failed (-84) [ 995.191435][T16481] fuse: root generation should be zero [ 995.928518][T16519] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2583'. [ 996.848816][T13046] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 996.850765][ T4330] Bluetooth: hci0: command 0x1003 tx timeout [ 996.962248][T16557] CIFS mount error: No usable UNC path provided in device string! [ 996.962248][T16557] [ 996.964078][T16557] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 997.192773][T13046] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 997.194408][T13046] CPU: 0 PID: 13046 Comm: kworker/u5:2 Not tainted syzkaller #0 [ 997.195509][T13046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026 [ 997.197028][T13046] Workqueue: hci3 hci_rx_work [ 997.197771][T13046] Call trace: [ 997.198273][T13046] dump_backtrace+0x1c0/0x1ec [ 997.199024][T13046] show_stack+0x2c/0x3c [ 997.199659][T13046] __dump_stack+0x30/0x40 [ 997.200425][T13046] dump_stack_lvl+0xf4/0x15c [ 997.201174][T13046] dump_stack+0x1c/0x5c [ 997.201848][T13046] sysfs_create_dir_ns+0x244/0x264 [ 997.202691][T13046] kobject_add_internal+0x598/0xb08 [ 997.203525][T13046] kobject_add+0x140/0x20c [ 997.204271][T13046] device_add+0x3f0/0xf90 [ 997.204977][T13046] hci_conn_add_sysfs+0xbc/0x1c8 [ 997.205760][T13046] le_conn_complete_evt+0xcc8/0x1244 [ 997.206671][T13046] hci_le_enh_conn_complete_evt+0x114/0x3f4 [ 997.207551][T13046] hci_le_meta_evt+0x2c0/0x4a0 [ 997.208324][T13046] hci_event_packet+0x6b8/0xf18 [ 997.209163][T13046] hci_rx_work+0x324/0xa80 [ 997.209864][T13046] process_one_work+0x7f8/0x13a4 [ 997.210669][T13046] worker_thread+0x8c4/0xfec [ 997.211399][T13046] kthread+0x250/0x2d8 [ 997.212030][T13046] ret_from_fork+0x10/0x20 [ 997.212886][T13046] kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 997.214823][T13046] Bluetooth: hci3: failed to register connection device [ 999.018147][T16584] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2599'. [ 999.298694][T13046] Bluetooth: hci3: command 0x2016 tx timeout [ 1000.354426][T16603] CIFS mount error: No usable UNC path provided in device string! [ 1000.354426][T16603] [ 1000.356451][T16603] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1001.350974][T10195] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 1001.352613][T10195] CPU: 0 PID: 10195 Comm: kworker/u5:0 Not tainted syzkaller #0 [ 1001.353787][T10195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026 [ 1001.355394][T10195] Workqueue: hci3 hci_rx_work [ 1001.356231][T10195] Call trace: [ 1001.356728][T10195] dump_backtrace+0x1c0/0x1ec [ 1001.357498][T10195] show_stack+0x2c/0x3c [ 1001.358165][T10195] __dump_stack+0x30/0x40 [ 1001.358851][T10195] dump_stack_lvl+0xf4/0x15c [ 1001.359558][T10195] dump_stack+0x1c/0x5c [ 1001.360200][T10195] sysfs_create_dir_ns+0x244/0x264 [ 1001.361007][T10195] kobject_add_internal+0x598/0xb08 [ 1001.361805][T10195] kobject_add+0x140/0x20c [ 1001.362494][T10195] device_add+0x3f0/0xf90 [ 1001.363163][T10195] hci_conn_add_sysfs+0xbc/0x1c8 [ 1001.364024][T10195] le_conn_complete_evt+0xcc8/0x1244 [ 1001.364879][T10195] hci_le_enh_conn_complete_evt+0x114/0x3f4 [ 1001.365828][T10195] hci_le_meta_evt+0x2c0/0x4a0 [ 1001.366562][T10195] hci_event_packet+0x6b8/0xf18 [ 1001.367335][T10195] hci_rx_work+0x324/0xa80 [ 1001.368040][T10195] process_one_work+0x7f8/0x13a4 [ 1001.368819][T10195] worker_thread+0x8c4/0xfec [ 1001.369544][T10195] kthread+0x250/0x2d8 [ 1001.370190][T10195] ret_from_fork+0x10/0x20 [ 1001.372572][T10195] kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 1001.374795][T10195] Bluetooth: hci3: failed to register connection device [ 1002.552815][T16649] CIFS mount error: No usable UNC path provided in device string! [ 1002.552815][T16649] [ 1002.554688][T16649] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1003.448741][T10195] Bluetooth: hci3: command 0x2016 tx timeout [ 1004.817180][T16677] fuse: Unknown parameter 'user_i00000000000000000000' [ 1005.151463][T16687] device syzkaller0 entered promiscuous mode [ 1005.343792][T16691] CIFS mount error: No usable UNC path provided in device string! [ 1005.343792][T16691] [ 1005.345539][T16691] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1005.755334][T16693] tipc: Started in network mode [ 1005.756383][T16693] tipc: Node identity 8682b8c51c28, cluster identity 4711 [ 1005.757699][T16693] tipc: Enabled bearer , priority 0 [ 1005.765097][T16693] device syzkaller0 entered promiscuous mode [ 1005.785481][T16693] tipc: Resetting bearer [ 1005.791067][T16692] tipc: Resetting bearer [ 1005.850293][T16692] tipc: Disabling bearer [ 1005.900422][T16695] device syzkaller0 entered promiscuous mode [ 1005.939359][T16697] device syzkaller1 entered promiscuous mode [ 1006.082542][T16699] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2639'. [ 1006.118147][T16699] netlink: 'syz.6.2639': attribute type 1 has an invalid length. [ 1006.119715][T16699] netlink: 'syz.6.2639': attribute type 2 has an invalid length. [ 1006.254908][T16707] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2643'. [ 1006.300710][T16707] netlink: 'syz.0.2643': attribute type 1 has an invalid length. [ 1006.302064][T16707] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2643'. [ 1006.435789][T16720] device syzkaller1 entered promiscuous mode [ 1007.098264][T16739] CIFS mount error: No usable UNC path provided in device string! [ 1007.098264][T16739] [ 1007.102514][T16739] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1007.245538][T16742] fuse: Unknown parameter 'user_i00000000000000000000' [ 1007.346748][T16748] device syzkaller0 entered promiscuous mode [ 1008.266810][T16773] fuse: Unknown parameter 'user_i00000000000000000000' [ 1008.661959][T16786] CIFS mount error: No usable UNC path provided in device string! [ 1008.661959][T16786] [ 1008.663852][T16786] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1009.040870][T16789] device syzkaller0 entered promiscuous mode [ 1010.421382][T16812] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2681'. [ 1010.480655][T16812] netlink: 'syz.4.2681': attribute type 1 has an invalid length. [ 1010.487283][T16812] netlink: 'syz.4.2681': attribute type 2 has an invalid length. [ 1010.496088][T16819] tipc: Started in network mode [ 1010.496905][T16819] tipc: Node identity 4e3188e7f957, cluster identity 4711 [ 1010.498594][T16819] tipc: Enabled bearer , priority 0 [ 1010.509487][T16819] device syzkaller0 entered promiscuous mode [ 1010.523751][T16819] tipc: Resetting bearer [ 1010.533529][T16817] tipc: Resetting bearer [ 1010.679381][T16817] tipc: Disabling bearer [ 1010.733981][T16834] CIFS mount error: No usable UNC path provided in device string! [ 1010.733981][T16834] [ 1010.735735][T16834] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1011.223201][T16815] device syzkaller1 entered promiscuous mode [ 1012.028095][ C0] ------------[ cut here ]------------ [ 1012.029319][ C0] WARNING: CPU: 0 PID: 16833 at net/mac80211/tx.c:4944 __ieee80211_beacon_get+0xf60/0x12bc [ 1012.031027][ C0] Modules linked in: [ 1012.031696][ C0] CPU: 0 PID: 16833 Comm: syz.9.2689 Not tainted syzkaller #0 [ 1012.032900][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026 [ 1012.034482][ C0] pstate: 42400005 (nZcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 1012.035773][ C0] pc : __ieee80211_beacon_get+0xf60/0x12bc [ 1012.036709][ C0] lr : __ieee80211_beacon_get+0xf60/0x12bc [ 1012.037680][ C0] sp : ffff800008007a90 [ 1012.038359][ C0] x29: ffff800008007ad0 x28: ffffffffffffe520 x27: 0000000000000001 [ 1012.039729][ C0] x26: 0000000000000041 x25: ffff0000d1c8c800 x24: 0000000000000000 [ 1012.041025][ C0] x23: ffff0000c3f48ea0 x22: ffff800008007b3c x21: ffff0000f5d26228 [ 1012.042288][ C0] x20: dfff800000000000 x19: ffff0000f5d26760 x18: ffff800011b8bf60 [ 1012.043618][ C0] x17: 00000000ffff0000 x16: ffff8000082d7ca0 x15: 0000000000000000 [ 1012.044852][ C0] x14: 0000000000000007 x13: 0000000000ff0100 x12: 0000000000ff0100 [ 1012.046098][ C0] x11: ff0080001130cbdc x10: 0000000000000000 x9 : ffff80001130cbdc [ 1012.047299][ C0] x8 : ffff0000f99a1bc0 x7 : 0000000000000000 x6 : 0000000000000000 [ 1012.048503][ C0] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80001130bed4 [ 1012.049659][ C0] x2 : 000000000000000a x1 : 0000000000000000 x0 : 0000000000000000 [ 1012.050833][ C0] Call trace: [ 1012.051320][ C0] __ieee80211_beacon_get+0xf60/0x12bc [ 1012.052155][ C0] ieee80211_beacon_get_tim+0x70/0x44c [ 1012.052997][ C0] mac80211_hwsim_beacon_tx+0x1e8/0x914 [ 1012.053933][ C0] __iterate_interfaces+0x204/0x484 [ 1012.054911][ C0] ieee80211_iterate_active_interfaces_atomic+0xd4/0x180 [ 1012.055962][ C0] mac80211_hwsim_beacon+0xc8/0x1b8 [ 1012.056842][ C0] __hrtimer_run_queues+0x438/0xc3c [ 1012.057711][ C0] hrtimer_run_softirq+0x160/0x400 [ 1012.058507][ C0] handle_softirqs+0x318/0xc60 [ 1012.059359][ C0] __do_softirq+0x14/0x20 [ 1012.060112][ C0] ____do_softirq+0x14/0x20 [ 1012.060884][ C0] call_on_irq_stack+0x30/0x48 [ 1012.061646][ C0] do_softirq_own_stack+0x20/0x2c [ 1012.062350][ C0] __irq_exit_rcu+0x23c/0x438 [ 1012.063122][ C0] irq_exit_rcu+0x14/0x84 [ 1012.063953][ C0] el1_interrupt+0x38/0x54 [ 1012.064676][ C0] el1h_64_irq_handler+0x18/0x24 [ 1012.065500][ C0] el1h_64_irq+0x64/0x68 [ 1012.066321][ C0] _raw_spin_unlock_irqrestore+0x58/0xac [ 1012.067239][ C0] __skb_try_recv_datagram+0x12c/0x3fc [ 1012.068133][ C0] __unix_dgram_recvmsg+0x230/0xb04 [ 1012.069033][ C0] unix_dgram_recvmsg+0xd0/0xe8 [ 1012.069821][ C0] ____sys_recvmsg+0x678/0x768 [ 1012.070707][ C0] do_recvmmsg+0x388/0xa0c [ 1012.071505][ C0] __arm64_sys_recvmmsg+0x17c/0x23c [ 1012.072401][ C0] invoke_syscall+0x98/0x2b4 [ 1012.073163][ C0] el0_svc_common+0x138/0x258 [ 1012.073968][ C0] do_el0_svc+0x58/0x130 [ 1012.074729][ C0] el0_svc+0x58/0x128 [ 1012.075424][ C0] el0t_64_sync_handler+0x84/0xf0 [ 1012.076290][ C0] el0t_64_sync+0x18c/0x190 [ 1012.077031][ C0] irq event stamp: 517081 [ 1012.077761][ C0] hardirqs last enabled at (517080): [] _raw_spin_unlock_irqrestore+0x48/0xac [ 1012.079364][ C0] hardirqs last disabled at (517081): [] el1_dbg+0x24/0x80 [ 1012.080859][ C0] softirqs last enabled at (509918): [] handle_softirqs+0xaec/0xc60 [ 1012.082398][ C0] softirqs last disabled at (517025): [] __do_softirq+0x14/0x20 [ 1012.084027][ C0] ---[ end trace 0000000000000000 ]--- [ 1012.414957][T16850] loop4: detected capacity change from 0 to 32768 [ 1012.417108][T16850] BTRFS: device fsid 34a2da50-e117-4d40-8878-8e0fb0127b5f devid 1 transid 8 /dev/loop4 scanned by syz.4.2695 (16850) [ 1012.425571][T16850] BTRFS info (device loop4): first mount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f [ 1012.427452][T16850] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 1012.429128][T16850] BTRFS info (device loop4): using free space tree [ 1012.438165][T16850] BTRFS info (device loop4): enabling ssd optimizations [ 1012.498611][T12806] BTRFS info (device loop4): last unmount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f