last executing test programs: 2m56.681816764s ago: executing program 4 (id=748): r0 = io_uring_setup(0x1f1c, &(0x7f00000005c0)={0x0, 0x17d7, 0xa, 0x3, 0x283}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r2, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) r6 = socket(0x2a, 0x2, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r7, &(0x7f0000000000)="f20000000000008508003e6e8f86a32c824a706b81acdfadc6d16ef4d5a280f4247ac655ac2b24b07b829ac6b4ef9c0ea296b7", 0x33, 0x4000053, &(0x7f0000000200)={0x11, 0x8, r8, 0x1, 0x40, 0x6, @broadcast}, 0x14) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x3c}}, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x8, {0x6, 0x3, 0xffffffffffffeffe, 0xfffffffffffffffd, 0x0, 0x0, {0x40, 0x8, 0xb, 0xfffc, 0x0, 0x1, 0x0, 0x0, 0x120, 0x2000, 0x0, 0x0, 0x0, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SIOCSIFMTU(r6, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) shutdown(r2, 0x1) accept4(r1, 0x0, 0x0, 0x800) close_range(r0, 0xffffffffffffffff, 0x0) 2m55.407332031s ago: executing program 4 (id=753): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="f8000000160001000000000000000000fe80000000000000000000000000001eac1e00010000000000000000000000000000000000000000000080a000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000360000000023000000fe80000000000000000000000000000e0000000000000000000000000000000000000000000000000000000000000080ffffffffffffffffedffffffffffffff03000000000000000000000000000048890000000000000000000000000000000200000000000000fefffffffffffbff000000000000000096070000000000000000000000000002be0000000000000000000000b1a00100"], 0xf8}, 0x1, 0x0, 0x0, 0x40040}, 0x0) syz_mount_image$jfs(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x2010880, &(0x7f0000000700)=ANY=[@ANYBLOB='iocharset=cp737,umask=0\x00\x00\x00\x00\x00\x00\x00@0800d=', @ANYRESHEX=0x0, @ANYBLOB=',integity,errors=continue,discard,noquota\x00iocharset=cp850,grpquota,usrquota,uid=\x00', @ANYBLOB="423170a811445258", @ANYBLOB=',quota,gid=', @ANYRES8=r0, @ANYBLOB=',noquota,usrquota,gid=', @ANYRESHEX=0x0, @ANYBLOB="07cc39776030a6303cfb51e3fd04144e7cff37372bb915dded44", @ANYRESDEC=0x0, @ANYBLOB=',measure,\x00', @ANYRES8=0x0], 0x5, 0x615b, &(0x7f0000008b40)="$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") r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10) setsockopt$sock_int(r2, 0x1, 0x12, &(0x7f0000000100)=0xfffffffd, 0x4) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) r7 = dup(r6) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x5, @loopback, 0x5d96}], 0x1c) sendmsg$inet6(r7, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x3, @loopback, 0x52}, 0x1c, &(0x7f0000000d80)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x240480c3) r8 = dup(r7) read$FUSE(r8, &(0x7f0000000dc0)={0x2020}, 0x2020) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @empty}, 0x10) msgctl$IPC_SET(0x0, 0x1, 0x0) getgid() mknodat$null(r1, &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x103) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x184) 2m52.388539448s ago: executing program 4 (id=760): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xc5f2, 0xc20, 0x1, 0x364}, 0x0, 0x0, &(0x7f0000000000)) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000800)={r3, r3, r3}, 0x0, 0x0, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f00000000c0)=0x9200, 0x4) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0xb, &(0x7f0000002180)=""/4108, &(0x7f0000000000)=0x100c) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB='H\x00\x00\x00\n'], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 2m50.128597596s ago: executing program 4 (id=768): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000100), 0x2, 0x4600) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x34}, 0x8017, 0x3, 'wrr\x00', 0x10, 0x4, 0x77}, 0x2c) r5 = socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r6, 0x3000) sendmsg$sock(r5, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x7d, 0x8, 0x2, 0x6, 0x28, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast1, 0x10, 0x40, 0xfffffffb, 0xd5}}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)={0x1b, 0x0, 0x0, 0xc7000000, 0x0, r0, 0x66b5, '\x00', r7, 0xffffffffffffffff, 0x4, 0x4, 0x5}, 0x50) close(0x3) r8 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r8, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) r9 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r9, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) listen(r9, 0x80) accept$netrom(r9, 0x0, 0x0) 2m48.607406956s ago: executing program 4 (id=772): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) sendmmsg$inet(r0, &(0x7f0000001080)=[{{0x0, 0x0, &(0x7f00000002c0)=[{0x0}, {&(0x7f0000000140)="c2b5", 0x2}], 0x2}}], 0x1, 0x400c041) r1 = socket$inet_udp(0x2, 0x2, 0x0) syz_mount_image$jfs(&(0x7f0000000040), &(0x7f0000000380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x8, &(0x7f0000002740)=ANY=[], 0x1, 0x6001, &(0x7f0000006400)="$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") syz_open_dev$video(0x0, 0x3, 0x2000) readv(0xffffffffffffffff, &(0x7f0000000100)=[{0x0}], 0x1) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, 0x0) r6 = socket$inet(0x2b, 0x801, 0x0) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, 0x0, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0xc0045007, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff) unlinkat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703350000001f030000ef000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f6", 0x5a}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x10) fchown(r7, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x8, 0x3, 0x398, 0x0, 0x11, 0x148, 0x260, 0x0, 0x300, 0x2a8, 0x2a8, 0x300, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x8800, 0x200, 0x260, 0x0, {}, [@common=@unspec=@devgroup={{0x38}, {0x3, 0x6, 0x6, 0x8, 0x6e69}}, @common=@inet=@hashlimit3={{0x158}, {'ip6tnl0\x00', {0x10, 0x8, 0x40, 0x6, 0x0, 0x3, 0x5, 0x8, 0x0, 0x20}, {0x5}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x3, 0x4, 0x6, 0x6, 0x5, 0x6], 0x1}, {0xffffffffffffffff, [0x1, 0x6, 0x7, 0xe, 0x4, 0x3], 0x1, 0x6}}}}, {{@ip={@multicast2, @remote, 0x0, 0x0, 'vlan0\x00', 'macvlan1\x00', {}, {0xff}, 0x8}, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f8) 2m46.697750525s ago: executing program 4 (id=776): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000001000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0369e269b6, 0x8031, 0xffffffffffffffff, 0xfffff000) r4 = io_uring_setup(0x46eb, &(0x7f0000000100)={0x0, 0x1f8a, 0x0, 0x3, 0x28c}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) setrlimit(0x40000000000008, &(0x7f00000002c0)={0x0, 0x5}) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r4, 0x10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000002700)=""/4082, 0xff2}], 0x0, 0x1}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x400, 0xbf28, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='team_slave_0\x00', 0x10) sendto$inet6(r0, 0x0, 0x0, 0x800, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) getrandom(0x0, 0x0, 0x1) 2m27.225372161s ago: executing program 32 (id=776): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000001000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0369e269b6, 0x8031, 0xffffffffffffffff, 0xfffff000) r4 = io_uring_setup(0x46eb, &(0x7f0000000100)={0x0, 0x1f8a, 0x0, 0x3, 0x28c}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) setrlimit(0x40000000000008, &(0x7f00000002c0)={0x0, 0x5}) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r4, 0x10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000002700)=""/4082, 0xff2}], 0x0, 0x1}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x400, 0xbf28, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='team_slave_0\x00', 0x10) sendto$inet6(r0, 0x0, 0x0, 0x800, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) getrandom(0x0, 0x0, 0x1) 1m50.475715538s ago: executing program 0 (id=897): syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000240)='./bus\x00', 0x800c40, &(0x7f0000000980)={[{@numtail}, {@nonumtail}, {@shortname_win95}, {@utf8no}, {@fat=@codepage={'codepage', 0x3d, '1250'}}, {@rodir}, {@shortname_winnt}, {@shortname_mixed}, {@fat=@tz_utc}, {@shortname_lower}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'cp855'}}, {@uni_xlateno}, {@shortname_lower}]}, 0x1, 0x368, &(0x7f0000000600)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write(r4, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r5 = openat$sequencer(0xffffffffffffff9c, 0x0, 0xa0602, 0x0) writev(r5, &(0x7f0000000840)=[{0x0}], 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0x19) newfstatat(0xffffffffffffff9c, &(0x7f0000005200)='./bus\x00', 0x0, 0x6000) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=0000', @ANYRESDEC=0x0]) getresgid(&(0x7f0000005740), &(0x7f0000005780), &(0x7f00000057c0)) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000fc07ffff00000000000000008500000041000000850000000700000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r7, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1e, 0x0, 0x0, 0x0}, 0x40) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r8, 0x0, 0x7, 0x0, 0x0) 1m48.613758274s ago: executing program 0 (id=903): ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) setsockopt(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000002c0), 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0xffffd000) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r3 = socket(0x10, 0x2, 0x0) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, &(0x7f0000000100)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}, 0x1}) write(r3, &(0x7f0000000040), 0x0) recvmmsg(r3, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) 1m47.024992308s ago: executing program 0 (id=910): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0xc, 0x0, 0x0) connect$unix(r1, &(0x7f00000007c0)=@file={0x0, './file1/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet(0xa, 0x1, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl(r3, 0x8b2c, &(0x7f0000000040)) 1m44.357017717s ago: executing program 0 (id=917): ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) setsockopt(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000002c0), 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0xffffd000) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r3 = socket(0x10, 0x2, 0x0) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, &(0x7f0000000100)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}, 0x1}) write(r3, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f0000000000", 0x15) recvmmsg(r3, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) 1m43.171772509s ago: executing program 0 (id=920): ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) setsockopt(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000002c0), 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0xffffd000) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r3 = socket(0x10, 0x2, 0x0) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, &(0x7f0000000100)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}, 0x1}) write(r3, 0x0, 0x0) recvmmsg(r3, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) 1m42.216576599s ago: executing program 0 (id=924): socket$inet6(0xa, 0x2, 0x0) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)=@random={'system.', '-\xcc(-\x00'}, &(0x7f00000001c0)='GPL\x00', 0x4, 0x0) prlimit64(0x0, 0x6, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) sync() sync() sync() sync() sync() sync() sync() sync() sync() getrusage(0x0, 0x0) sync() sync() sync() sync() sync() getrusage(0x0, &(0x7f0000000580)) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x442000, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r2, {0x8}}, './file0\x00'}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 1m25.388023196s ago: executing program 33 (id=924): socket$inet6(0xa, 0x2, 0x0) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)=@random={'system.', '-\xcc(-\x00'}, &(0x7f00000001c0)='GPL\x00', 0x4, 0x0) prlimit64(0x0, 0x6, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) sync() sync() sync() sync() sync() sync() sync() sync() sync() getrusage(0x0, 0x0) sync() sync() sync() sync() sync() getrusage(0x0, &(0x7f0000000580)) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x442000, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r2, {0x8}}, './file0\x00'}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 3.311985698s ago: executing program 2 (id=1382): ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000001c0)={@private2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x38}}, @mcast2, 0x0, 0x2, 0x40, 0x100, 0x3ff, 0x140392}) syz_emit_ethernet(0x8d, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa3d1b82de082486dd611be70000572f00fe800bad7ad0000000000000000000bbfe8000000000000000000000000000aa0c2088be00060001bf3f030b7d2701008100fffd000b003e1f515cedcd1b8100008608"], 0x0) 3.163649535s ago: executing program 2 (id=1385): r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x2713, &(0x7f0000019580)=""/102392, &(0x7f0000000000)=0x18ff8) 3.159309275s ago: executing program 3 (id=1386): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000400000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000060000000060a010400000000000000000100000008000b400000000038000480340001800c0001007061796c6f6164002400028008000440000000000800034000000000080002400800000008000140000000030900010073797a30"], 0xd4}}, 0x0) 3.126192377s ago: executing program 2 (id=1387): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x5) r2 = msgget$private(0x0, 0x442) msgsnd(r2, &(0x7f00000013c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00y'], 0x4, 0x800) msgsnd(r2, &(0x7f0000003540)=ANY=[], 0xe8, 0x800) msgctl$IPC_RMID(r2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000006c0)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x400000}) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0xa, 0x4e21, 0x80000, @dev={0xfe, 0x80, '\x00', 0x42}, 0xfffffffe}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=[@dstopts_2292={{0x18, 0x29, 0x4, {0x3d}}}], 0x18}, 0x40e0) close(r3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000000c0)='./file4\x00', 0x80c406, &(0x7f0000002d40)=ANY=[@ANYBLOB="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", @ANYRES8, @ANYRES32], 0xfb, 0x2b1, &(0x7f0000000100)="$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") write$UHID_INPUT(r4, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x184a438, &(0x7f0000000280)=ANY=[], 0xa, 0x0, &(0x7f0000000180)) r5 = accept$alg(r3, 0x0, 0x0) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000200)=0x0) sendmsg$nfc_llcp(r6, &(0x7f0000000500)={&(0x7f0000000240)={0x27, r7, 0x0, 0x6, 0x5, 0x3, "50f6d4aab6455cd4c3333f69a72ccd76897aeb80c0941a1b2ddab4827930c1f7edc1a0328be053c3b90582f34c8ff033e0de6610191110788f3698be5e142c", 0x37}, 0x60, &(0x7f00000004c0)=[{&(0x7f00000002c0)="0d9b83ac46ad3127973ef9c9fc4cfad8fcd391c6e326151fe78f4f235bb3b42cbbcb27e86dc68e298f49d9713652a63179bb80bc98823aec2fde95f28673e15f0c29053ef629702eb81ecf98463b4040658f1e7492ea14484a2a920acbb5d578035adb3c3ed95268b0fe8e22f70a0663b2583ed822b3e10849fcde459909b933e3e98c8ae98359dcab2dc55154cf0ee69c56988c5a44fbbb269ba81d93339c51c528e029fef120f812", 0xa9}, {&(0x7f0000000380)="8c0845614938a44ef24c6443e05d8bc147d4a6f6d56b4efa3ab868527fd51fb24f5b97960206462a46f8e5f592650a963a21dafc80e98574ab5c865e37e2707ce0bdbcba91f042f6500f9842d81a9f217cae7559e943297f59739f00fb61b06ce71785b41fa321", 0x67}], 0x2, 0x0, 0x0, 0x20000000}, 0x8081) r8 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYBLOB="100a060009080100"], 0x34}, 0x1, 0x0, 0x0, 0x200080d0}, 0x14) accept(r5, 0x0, 0x0) sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={0x14, 0x0, 0x0, 0x78bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x20040040) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a050000000000000000000100fffc0900010073797a30000000002c000000030a050000000000000000000100ffff0c00024000000000000000020900010073797a30000000003c000000060a010400000000000000000100000014000480100001800a000100726564697200000008000b40000000000900010073797a3000000000140000001100010000000000000000000000000ab8ad3e2d204828151e5c96ddfc2cdd35f7afdac3aa8d42a92101cd4f2b7fc9b966261e516162d18e72d161"], 0xb0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 3.05830782s ago: executing program 3 (id=1388): ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = socket$pppoe(0x18, 0x1, 0x0) recvfrom(r1, 0x0, 0x0, 0x40010060, 0x0, 0x0) close(0x3) socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000140), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet_udp(0x2, 0x2, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000140)={&(0x7f0000001600)={0x2, 0x3, 0x0, 0x2, 0xd, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0x8, 0x0, "fd"}, @sadb_address={0x3, 0x6}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x9}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_x_nat_t_type={0x1}]}, 0x68}, 0x1, 0x7}, 0x0) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r7, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000080)={r7, 0x81}, &(0x7f00000000c0)=0x8) ioctl$BTRFS_IOC_QUOTA_CTL(r6, 0xc0109428, &(0x7f0000000240)={0x1, 0xff}) 3.039034212s ago: executing program 2 (id=1389): socket$xdp(0x2c, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) rt_tgsigqueueinfo(r0, r0, 0xe, &(0x7f0000000240)={0x6, 0xffffffff, 0xa7}) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x70, 0x30, 0x105, 0x70bd28, 0x0, {}, [{0x5c, 0x1, [@m_simple={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x2, 0xfffffff8, 0x1, 0x9, 0x7}}, @TCA_DEF_DATA={0xd, 0x3, ')+@$(:(\\\x00'}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r3 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f0000000380)=0x5, 0x4) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) 2.068766522s ago: executing program 3 (id=1392): read$FUSE(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1}}, 0x80001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f000000e0c0), 0x10010) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, 0x0, 0x0) sendfile(r3, r4, &(0x7f0000000100)=0x1010, 0x1f2) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x32) r5 = socket(0x28, 0x801, 0x0) connect$vsock_stream(r5, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x401) 1.991326696s ago: executing program 2 (id=1394): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$inet6(r0, &(0x7f0000000640)={&(0x7f00000000c0)={0xa, 0x4e22, 0x8, @ipv4={'\x00', '\xff\xff', @local}, 0x9}, 0x1c, &(0x7f00000005c0)=[{&(0x7f0000000100)}, {&(0x7f00000002c0)="c42f9f08073b506664ffee6ccdc1ddad776919481c75727a91f1f3ddb74ea263fa2a1f357e0ddab3c50c5acb5ae65a44a7128af70ff2749ddcaa469b2c7ab990df732afaa422164b738e7608938cfd46833a70c77e498ce10a2b43c53dd536ffb3da5abc878e60bd5f0efbc020c606c880890240302a7925c4f128c3cd2658d9695255a38888b0cf37244c847c7724caeef4d7a4c7907ae85d3805c067d5fefde9956511c9743ca8bbc230e73977c8c67d5de3d6a787d691abdbac433be923e6b9b3668bb9309c81090e1b8fd788526c87ae9d66838783f37c06d110e6285d31015120114d820dd423", 0xe9}, {&(0x7f0000000140)="097c262744602ae4d523e7fa703d4d7658e8e1fa697f1101241f", 0x1a}, {&(0x7f00000003c0)="e29f99178de6c11639ceb7a4", 0xc}, {&(0x7f00000004c0)="a3669d37e7bd78678c58226463d349c6ce56a4cbf9ceec7ec9e4f0c6d5bd826b300498cfe257c216ca95765339c0a2d3904b24e8722fea7bb3cd9a158a9f71325206", 0x42}, {&(0x7f0000000540)}], 0x6}, 0x801) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000680)={0x2, 0x5, 0x7, 0xf8, 0x40, 0x40, 0x81, 0xb, 0x8, 0x4, 0x4, 0x8, 0x4, 0xdc}, 0xe) r1 = dup(r0) getdents64(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = shmget(0x1, 0x4000, 0xa20, &(0x7f0000ffb000/0x4000)=nil) shmat(r5, &(0x7f0000ffd000/0x2000)=nil, 0x4000) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) listen(r6, 0x3) accept4$bt_l2cap(r6, &(0x7f0000000200), 0x0, 0x800) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e130100c900", @ANYBLOB], 0x16) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x5, @loopback, 0x5d96}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @empty}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000280)}, {&(0x7f0000000400)="f670c9b3415f2a08ae973f9c5ccc", 0xe}], 0x2}, 0x993a94c02b2971b9) dup(r1) socket$packet(0x11, 0x3, 0x300) 1.990634277s ago: executing program 5 (id=1395): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a300000000050000000060a010400000000000000000100000008000b400000000028000480240001800b000100736f636b65740000140002800800024000000015080001400000000e0900010073797a30"], 0xc4}}, 0x0) 1.55110214s ago: executing program 1 (id=1396): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a31000000008c000000060a010400000000000000000100000008000b400000000064000480140001800c000100636f756e74657200040002804c0001800b00010065787468647200003c000280080007400000001008000440000000020800064000000001080007400000000b080004400000006e080007400000000c08000340000000580900010073797a30"], 0x100}}, 0x0) 1.500398802s ago: executing program 5 (id=1397): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x11) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x13f}}, 0x20) 1.500210102s ago: executing program 5 (id=1398): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)={0x34, 0x5, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040880}, 0x40040) 1.255675474s ago: executing program 1 (id=1399): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x5) r2 = msgget$private(0x0, 0x442) msgsnd(r2, &(0x7f00000013c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00y'], 0x4, 0x800) msgsnd(r2, &(0x7f0000003540)=ANY=[], 0xe8, 0x800) msgctl$IPC_RMID(r2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000006c0)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x400000}) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0xa, 0x4e21, 0x80000, @dev={0xfe, 0x80, '\x00', 0x42}, 0xfffffffe}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=[@dstopts_2292={{0x18, 0x29, 0x4, {0x3d}}}], 0x18}, 0x40e0) close(r3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000000c0)='./file4\x00', 0x80c406, &(0x7f0000002d40)=ANY=[@ANYBLOB="646f74732c646f747300646d61736b3d30303030303030303003994db69d6fadd9fe8357bb9b326973636172642c0166733d6e6f7774066c655f726f2c6769643d8bde74b54a903862b1d491a0644fd032adf103782b3e6ab9bb8b7d5a0000008000000000831cac568a8781052c1f78a90d525fbffbbe712b3588cd20fd6b4fa30f99796b63d0000200006bf7964f30b515830fe521179cb856fcec51525e76986850e3c2079c07811902047009a8bd311ec4398a92a06f061a5a0ba1eb2b3db991e65cb55232662ecb874cb1ea47734fd6c56b06c03f20235fad7299622ac7c70fbb5466c8f69e506f15f9048273682c4abdddc8cbc849980b03000000000000000000000063e0c97554c132b6effff3b3e0c109c72f794db4da27b9108716f1877464f58d22d0ea6e75321d887a6a375c5cf8cce358a8df2720e76ce466c78c7901cc6071bc2eafaa394d4290e95d4db56b59ed5d9bd10d94b075a7ace6d3f19993baa452c9ecc39f61cc383b51b627ad3b736c045f8c784b64bbaac710f4372841998dee85b80f515bdeba72caeb00c76ae7cb06986d7e9f9fec03b990c1fc56d5161ae3c622a649f9f95781dd32bc8e4090861fcad6bed6a3be33f3602b136695e7543543b93f62312f5387cd4c6d1aa22271ec1be39d675c08f44ed601b6c8fbf92f448158194570618bfd504dfd0ff459eff7bc34e453816efefe372fcecc66f0956afbe155f1f53d0eff4872d6921804209e82af2ed0a588b8ebbef33bbbc3d495d110acf1a7537f33a8f7a82a29e2d6761b50d3db9dae0a9606eb4b0a92cdb504659776a21344b8fdc9ca3851a76938dd00e59cb1d1ad7ec9ac6e19d3244e209fd56e67caf895cf9f8507b063cac9ddc2ae46f7dff3f9b86b5b3838383015a502f3540a8a796580c78737b10f54977af5cee89e91cc54e21101973aed1e03820294e9811ef0c389ec53e04e14f226213fa4fd2f9c32cd317f936edcf16bffd78d69907336f1e4cf69c22d2e8f0a1caa2623483b45be9f59f1b74cd3f19a92db916f959d4bcb800c50bfabd4d63861e036ef6d614d46c31ab711ad2ead248d781e89017fc7c22d22be274e450e5f1837bf10921f4b117439ad4503f11682542bdba745be99695d4c3d64b96997f1a6f8f3145f94f227694be7682e8a2a1a288b69474164171c6dc00e770cb068702087467ee08643516fbc3f5f71715559152dbdb61082060c73a9338db0407ed89b6941d034f623a6643e39445697eb0d6867f0ddf0b4a45ce8687fc9", @ANYRES8, @ANYRES32], 0xfb, 0x2b1, &(0x7f0000000100)="$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") write$UHID_INPUT(r4, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x184a438, &(0x7f0000000280)=ANY=[], 0xa, 0x0, &(0x7f0000000180)) r5 = accept$alg(r3, 0x0, 0x0) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000200)=0x0) sendmsg$nfc_llcp(r6, &(0x7f0000000500)={&(0x7f0000000240)={0x27, r7, 0x0, 0x6, 0x5, 0x3, "50f6d4aab6455cd4c3333f69a72ccd76897aeb80c0941a1b2ddab4827930c1f7edc1a0328be053c3b90582f34c8ff033e0de6610191110788f3698be5e142c", 0x37}, 0x60, &(0x7f00000004c0)=[{&(0x7f00000002c0)="0d9b83ac46ad3127973ef9c9fc4cfad8fcd391c6e326151fe78f4f235bb3b42cbbcb27e86dc68e298f49d9713652a63179bb80bc98823aec2fde95f28673e15f0c29053ef629702eb81ecf98463b4040658f1e7492ea14484a2a920acbb5d578035adb3c3ed95268b0fe8e22f70a0663b2583ed822b3e10849fcde459909b933e3e98c8ae98359dcab2dc55154cf0ee69c56988c5a44fbbb269ba81d93339c51c528e029fef120f812", 0xa9}, {&(0x7f0000000380)="8c0845614938a44ef24c6443e05d8bc147d4a6f6d56b4efa3ab868527fd51fb24f5b97960206462a46f8e5f592650a963a21dafc80e98574ab5c865e37e2707ce0bdbcba91f042f6500f9842d81a9f217cae7559e943297f59739f00fb61b06ce71785b41fa321", 0x67}], 0x2, 0x0, 0x0, 0x20000000}, 0x8081) r8 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYBLOB="100a060009080100"], 0x34}, 0x1, 0x0, 0x0, 0x200080d0}, 0x14) accept(r5, 0x0, 0x0) sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={0x14, 0x0, 0x0, 0x78bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x20040040) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a050000000000000000000100fffc0900010073797a30000000002c000000030a050000000000000000000100ffff0c00024000000000000000020900010073797a30000000003c000000060a010400000000000000000100000014000480100001800a000100726564697200000008000b40000000000900010073797a3000000000140000001100010000000000000000000000000ab8ad3e2d204828151e5c96ddfc2cdd35f7afdac3aa8d42a92101cd4f2b7fc9b966261e516162d18e72d161"], 0xb0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 1.237303346s ago: executing program 5 (id=1400): r0 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x3ff1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000200)={r0, r0, r0}, 0x0, 0x0, 0x0) 1.217092547s ago: executing program 5 (id=1401): setsockopt(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$nl_rdma(0x10, 0x3, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfc409000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOGETCMAP(r3, 0x4604, &(0x7f0000000200)={0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0xd, 0x8, 0x0) mremap(&(0x7f00009d1000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f00002a0000/0x4000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) 1.195437958s ago: executing program 1 (id=1402): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$inet6(r0, &(0x7f0000000640)={&(0x7f00000000c0)={0xa, 0x4e22, 0x8, @ipv4={'\x00', '\xff\xff', @local}, 0x9}, 0x1c, &(0x7f00000005c0)=[{&(0x7f0000000100)}, {&(0x7f00000002c0)="c42f9f08073b506664ffee6ccdc1ddad776919481c75727a91f1f3ddb74ea263fa2a1f357e0ddab3c50c5acb5ae65a44a7128af70ff2749ddcaa469b2c7ab990df732afaa422164b738e7608938cfd46833a70c77e498ce10a2b43c53dd536ffb3da5abc878e60bd5f0efbc020c606c880890240302a7925c4f128c3cd2658d9695255a38888b0cf37244c847c7724caeef4d7a4c7907ae85d3805c067d5fefde9956511c9743ca8bbc230e73977c8c67d5de3d6a787d691abdbac433be923e6b9b3668bb9309c81090e1b8fd788526c87ae9d66838783f37c06d110e6285d31015120114d820dd423", 0xe9}, {&(0x7f0000000140)="097c262744602ae4d523e7fa703d4d7658e8e1fa697f1101241f", 0x1a}, {&(0x7f00000003c0)="e29f99178de6c11639ceb7a4", 0xc}, {&(0x7f00000004c0)="a3669d37e7bd78678c58226463d349c6ce56a4cbf9ceec7ec9e4f0c6d5bd826b300498cfe257c216ca95765339c0a2d3904b24e8722fea7bb3cd9a158a9f71325206", 0x42}, {&(0x7f0000000540)}], 0x6}, 0x801) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000680)={0x2, 0x5, 0x7, 0xf8, 0x40, 0x40, 0x81, 0xb, 0x8, 0x4, 0x4, 0x8, 0x4, 0xdc}, 0xe) r1 = dup(r0) getdents64(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x4000) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r5, &(0x7f0000000000)={0x1f, 0x8001, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x4, 0xfffffffffffffffe}, 0x4) listen(r5, 0x3) accept4$bt_l2cap(r5, &(0x7f0000000200), 0x0, 0x800) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e130100c900", @ANYBLOB], 0x16) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x5, @loopback, 0x5d96}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @empty}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000280)}, {&(0x7f0000000400)="f670c9b3415f2a08ae973f9c5ccc", 0xe}], 0x2}, 0x993a94c02b2971b9) dup(r1) socket$packet(0x11, 0x3, 0x300) 1.134161711s ago: executing program 3 (id=1403): ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = socket$pppoe(0x18, 0x1, 0x0) recvfrom(r1, 0x0, 0x0, 0x40010060, 0x0, 0x0) close(0x3) socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000140), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet_udp(0x2, 0x2, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000140)={&(0x7f0000001600)={0x2, 0x3, 0x0, 0x2, 0xd, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0x8, 0x0, "fd"}, @sadb_address={0x3, 0x6}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x9}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_x_nat_t_type={0x1}]}, 0x68}, 0x1, 0x7}, 0x0) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r7, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000080)={r7, 0x81}, &(0x7f00000000c0)=0x8) ioctl$BTRFS_IOC_QUOTA_CTL(r6, 0xc0109428, &(0x7f0000000240)={0x1, 0xff}) 762.09048ms ago: executing program 2 (id=1405): socket$xdp(0x2c, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) rt_tgsigqueueinfo(r0, r0, 0xe, &(0x7f0000000240)={0x6, 0xffffffff, 0xa7}) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x70, 0x30, 0x105, 0x70bd28, 0x0, {}, [{0x5c, 0x1, [@m_simple={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x2, 0xfffffff8, 0x1, 0x9, 0x7}}, @TCA_DEF_DATA={0xd, 0x3, ')+@$(:(\\\x00'}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r3 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f0000000380)=0x5, 0x4) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) 547.980541ms ago: executing program 6 (id=1406): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'syztnl1\x00', 0x0, 0x0, 0x8, 0x4, 0x40, 0x24, @ipv4={'\x00', '\xff\xff', @private=0xa018100}, @mcast2, 0x700, 0x80, 0x0, 0x1002}}) 436.402577ms ago: executing program 6 (id=1407): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$nci(r0, 0x0, 0xc) 326.103193ms ago: executing program 6 (id=1408): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xbc}}, 0x0) 265.590456ms ago: executing program 6 (id=1409): r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x4, 0xfb, 0x53, 0x3, 0x58, @empty, @mcast2={0xff, 0x5}, 0x8, 0x8000, 0xe3e1, 0xd04}}) 239.977958ms ago: executing program 1 (id=1410): r0 = syz_open_dev$media(&(0x7f00000000c0), 0x1, 0x20081) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000080)) 179.306741ms ago: executing program 1 (id=1411): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000002980), 0x80000, 0x0) ioctl$TIOCGDEV(r0, 0x80045432, 0x0) 178.469511ms ago: executing program 3 (id=1412): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x5) r2 = msgget$private(0x0, 0x442) msgsnd(r2, &(0x7f00000013c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00y'], 0x4, 0x800) msgsnd(r2, &(0x7f0000003540)=ANY=[], 0xe8, 0x800) msgctl$IPC_RMID(r2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000006c0)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x400000}) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0xa, 0x4e21, 0x80000, @dev={0xfe, 0x80, '\x00', 0x42}, 0xfffffffe}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=[@dstopts_2292={{0x18, 0x29, 0x4, {0x3d}}}], 0x18}, 0x40e0) close(r3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000000c0)='./file4\x00', 0x80c406, &(0x7f0000002d40)=ANY=[@ANYBLOB="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", @ANYRES8, @ANYRES32], 0xfb, 0x2b1, &(0x7f0000000100)="$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") write$UHID_INPUT(r4, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x184a438, &(0x7f0000000280)=ANY=[], 0xa, 0x0, &(0x7f0000000180)) r5 = accept$alg(r3, 0x0, 0x0) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000200)=0x0) sendmsg$nfc_llcp(r6, &(0x7f0000000500)={&(0x7f0000000240)={0x27, r7, 0x0, 0x6, 0x5, 0x3, "50f6d4aab6455cd4c3333f69a72ccd76897aeb80c0941a1b2ddab4827930c1f7edc1a0328be053c3b90582f34c8ff033e0de6610191110788f3698be5e142c", 0x37}, 0x60, &(0x7f00000004c0)=[{&(0x7f00000002c0)="0d9b83ac46ad3127973ef9c9fc4cfad8fcd391c6e326151fe78f4f235bb3b42cbbcb27e86dc68e298f49d9713652a63179bb80bc98823aec2fde95f28673e15f0c29053ef629702eb81ecf98463b4040658f1e7492ea14484a2a920acbb5d578035adb3c3ed95268b0fe8e22f70a0663b2583ed822b3e10849fcde459909b933e3e98c8ae98359dcab2dc55154cf0ee69c56988c5a44fbbb269ba81d93339c51c528e029fef120f812", 0xa9}, {&(0x7f0000000380)="8c0845614938a44ef24c6443e05d8bc147d4a6f6d56b4efa3ab868527fd51fb24f5b97960206462a46f8e5f592650a963a21dafc80e98574ab5c865e37e2707ce0bdbcba91f042f6500f9842d81a9f217cae7559e943297f59739f00fb61b06ce71785b41fa321", 0x67}], 0x2, 0x0, 0x0, 0x20000000}, 0x8081) r8 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYBLOB="100a060009080100"], 0x34}, 0x1, 0x0, 0x0, 0x200080d0}, 0x14) accept(r5, 0x0, 0x0) sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={0x14, 0x0, 0x0, 0x78bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x20040040) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a050000000000000000000100fffc0900010073797a30000000002c000000030a050000000000000000000100ffff0c00024000000000000000020900010073797a30000000003c000000060a010400000000000000000100000014000480100001800a000100726564697200000008000b40000000000900010073797a3000000000140000001100010000000000000000000000000ab8ad3e2d204828151e5c96ddfc2cdd35f7afdac3aa8d42a92101cd4f2b7fc9b966261e516162d18e72d161"], 0xb0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 165.687462ms ago: executing program 6 (id=1413): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @remote}, {0xa, 0x4e24, 0x0, @mcast2, 0x1}, 0xffffffffffffffff, {[0x1, 0x0, 0x0, 0x0, 0x9]}}, 0x5c) 112.283204ms ago: executing program 1 (id=1414): read$FUSE(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1}}, 0x80001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f000000e0c0), 0x10010) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, 0x0, 0x0) sendfile(r3, r4, &(0x7f0000000100)=0x1010, 0x1f2) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x32) r5 = socket(0x28, 0x801, 0x0) connect$vsock_stream(r5, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x401) 111.973924ms ago: executing program 6 (id=1415): socket$xdp(0x2c, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x70, 0x30, 0x105, 0x70bd28, 0x0, {}, [{0x5c, 0x1, [@m_simple={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x2, 0xfffffff8, 0x1, 0x9, 0x7}}, @TCA_DEF_DATA={0xd, 0x3, ')+@$(:(\\\x00'}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r5 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mtu(r5, 0x29, 0x17, &(0x7f0000000380)=0x5, 0x4) openat$cgroup_procs(r3, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) 2.57071ms ago: executing program 3 (id=1416): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=@newtaction={0x84, 0x30, 0xb, 0x5, 0x200, {}, [{0x70, 0x1, [@m_ct={0x6c, 0x1, 0x0, 0x0, {{0x7}, {0x44, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0x0, 0x0, 0x0, 0x400}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @private=0xa010102}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @initdev={0xac, 0x1e, 0x1, 0x0}}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e24}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e22}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x8890}, 0x40) 0s ago: executing program 5 (id=1417): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x4}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd4}}, 0x0) kernel console output (not intermixed with test programs): fff97f789e8 code=0x7ffc0000 [ 231.487006][ T27] audit: type=1326 audit(219.518:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7088 comm="syz.4.592" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff97f789e8 code=0x7ffc0000 [ 231.502433][ T27] audit: type=1326 audit(219.518:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7088 comm="syz.4.592" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=88 compat=0 ip=0xffff97f789e8 code=0x7ffc0000 [ 231.506809][ T27] audit: type=1326 audit(219.518:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7088 comm="syz.4.592" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff97f789e8 code=0x7ffc0000 [ 231.510995][ T27] audit: type=1326 audit(219.518:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7088 comm="syz.4.592" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff97f789e8 code=0x7ffc0000 [ 231.514693][ T27] audit: type=1326 audit(219.518:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7088 comm="syz.4.592" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff97f789e8 code=0x7ffc0000 [ 231.518240][ T27] audit: type=1326 audit(219.518:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7088 comm="syz.4.592" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff97f789e8 code=0x7ffc0000 [ 231.522127][ T27] audit: type=1326 audit(219.518:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7088 comm="syz.4.592" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff97f789e8 code=0x7ffc0000 [ 231.525806][ T27] audit: type=1326 audit(219.527:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7088 comm="syz.4.592" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff97f789e8 code=0x7ffc0000 [ 231.554518][ T7104] batadv0: mtu less than device minimum [ 231.557542][ T7104] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 231.560697][ T7104] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 231.563864][ T7104] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 231.567086][ T7104] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 231.570270][ T7104] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 231.573445][ T7104] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 231.576849][ T7104] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 231.580071][ T7104] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 231.583203][ T7104] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 232.555930][ T7112] loop4: detected capacity change from 0 to 512 [ 232.611661][ T7112] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 232.867039][ T7119] lo speed is unknown, defaulting to 1000 [ 233.581315][ T4332] EXT4-fs (loop4): unmounting filesystem. [ 233.988063][ T7120] loop3: detected capacity change from 0 to 8192 [ 234.084216][ T7120] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 234.086646][ T7120] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 234.088983][ T7120] REISERFS (device loop3): using ordered data mode [ 234.090050][ T7120] reiserfs: using flush barriers [ 234.094897][ T7120] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 234.097831][ T7120] REISERFS (device loop3): checking transaction log (loop3) [ 234.155645][ T7120] REISERFS (device loop3): Using r5 hash to sort names [ 234.157381][ T7120] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 234.689027][ T7134] netlink: 8 bytes leftover after parsing attributes in process `syz.1.598'. [ 234.690502][ T7134] netlink: 12 bytes leftover after parsing attributes in process `syz.1.598'. [ 236.925127][ T4336] Bluetooth: hci3: unknown advertising packet type: 0x75 [ 236.925158][ T4336] Bluetooth: hci3: unknown advertising packet type: 0x6c [ 236.927666][ T4336] Bluetooth: hci3: Malformed LE Event: 0x02 [ 237.175538][ T7175] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 237.177325][ T7175] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 237.178860][ T7175] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 237.180316][ T7175] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 238.112367][ T7188] loop3: detected capacity change from 0 to 128 [ 238.145890][ T7188] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 238.153683][ T7188] hpfs: filesystem error: improperly stopped [ 238.157084][ T7188] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 238.166382][ T7188] hpfs: You really don't want any checks? You are crazy... [ 238.175319][ T7188] hpfs: hpfs_map_sector(): read error [ 238.180393][ T7188] hpfs: code page support is disabled [ 238.255387][ T7188] hpfs: hpfs_map_4sectors(): unaligned read [ 238.262700][ T7188] hpfs: hpfs_map_4sectors(): unaligned read [ 238.265039][ T7188] hpfs: filesystem error: unable to find root dir [ 238.691816][ T4336] Bluetooth: hci1: unknown advertising packet type: 0x75 [ 238.691843][ T4336] Bluetooth: hci1: unknown advertising packet type: 0x6c [ 238.693080][ T4336] Bluetooth: hci1: Malformed LE Event: 0x02 [ 238.724971][ T7185] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 238.727651][ T7185] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 238.729311][ T7185] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 238.730628][ T7185] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 239.455826][ T7214] netlink: 56 bytes leftover after parsing attributes in process `syz.3.617'. [ 239.457640][ T7214] netlink: 92 bytes leftover after parsing attributes in process `syz.3.617'. [ 239.459362][ T7214] netlink: 8 bytes leftover after parsing attributes in process `syz.3.617'. [ 239.460954][ T7214] netlink: 8 bytes leftover after parsing attributes in process `syz.3.617'. [ 240.874206][ T7234] loop3: detected capacity change from 0 to 1764 [ 241.160481][ T4336] Bluetooth: hci1: unknown advertising packet type: 0x75 [ 241.160672][ T4336] Bluetooth: hci1: Malformed LE Event: 0x02 [ 242.203248][ T7257] netlink: 4 bytes leftover after parsing attributes in process `syz.2.626'. [ 242.625807][ T7264] hub 8-0:1.0: USB hub found [ 242.627225][ T7264] hub 8-0:1.0: 8 ports detected [ 243.189880][ T7279] netlink: 56 bytes leftover after parsing attributes in process `syz.4.635'. [ 243.191564][ T7279] netlink: 92 bytes leftover after parsing attributes in process `syz.4.635'. [ 243.193307][ T7279] netlink: 8 bytes leftover after parsing attributes in process `syz.4.635'. [ 243.194974][ T7279] netlink: 8 bytes leftover after parsing attributes in process `syz.4.635'. [ 243.719560][ T7275] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 243.721259][ T7275] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 243.722923][ T7275] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 243.724196][ T7275] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 244.983702][ T7291] net_ratelimit: 10 callbacks suppressed [ 244.983718][ T7291] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 00:85:08:00:3e:6e [ 246.187015][ T7318] wg1 speed is unknown, defaulting to 1000 [ 246.188132][ T7318] wg1 speed is unknown, defaulting to 1000 [ 246.190366][ T7318] wg1 speed is unknown, defaulting to 1000 [ 246.208593][ T7318] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 247.134117][ T7318] wg1 speed is unknown, defaulting to 1000 [ 247.139465][ T7318] wg1 speed is unknown, defaulting to 1000 [ 247.145120][ T7318] wg1 speed is unknown, defaulting to 1000 [ 247.149662][ T7318] wg1 speed is unknown, defaulting to 1000 [ 247.154716][ T7318] wg1 speed is unknown, defaulting to 1000 [ 247.689910][ T7332] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 247.692159][ T7332] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 247.693464][ T7332] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 251.354425][ T4336] Bluetooth: hci2: unknown advertising packet type: 0x75 [ 251.354457][ T4336] Bluetooth: hci2: Malformed LE Event: 0x02 [ 252.121471][ T7388] netlink: 4 bytes leftover after parsing attributes in process `syz.4.656'. [ 252.124195][ T7388] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 252.125754][ T7388] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 253.448538][ T7423] lo speed is unknown, defaulting to 1000 [ 253.450034][ T7423] wg1 speed is unknown, defaulting to 1000 [ 254.287178][ T7427] loop3: detected capacity change from 0 to 512 [ 254.776123][ T4336] Bluetooth: hci3: unknown advertising packet type: 0x75 [ 254.776154][ T4336] Bluetooth: hci3: unknown advertising packet type: 0x6c [ 254.777901][ T4336] Bluetooth: hci3: Malformed LE Event: 0x02 [ 254.871249][ T7427] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 255.082655][ T7437] lo speed is unknown, defaulting to 1000 [ 255.085379][ T7437] wg1 speed is unknown, defaulting to 1000 [ 256.472070][ T7446] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 256.473610][ T7446] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 256.599529][ T4336] Bluetooth: hci4: unknown advertising packet type: 0x75 [ 256.599669][ T4336] Bluetooth: hci4: unknown advertising packet type: 0x6c [ 256.601547][ T4336] Bluetooth: hci4: Malformed LE Event: 0x02 [ 256.911285][ T4320] EXT4-fs (loop3): unmounting filesystem. [ 257.642364][ T7457] device ip6erspan0 entered promiscuous mode [ 257.935716][ T7461] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 257.937565][ T7461] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 257.939270][ T7461] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 257.940502][ T7461] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 257.953145][ T7463] netlink: 'syz.3.667': attribute type 10 has an invalid length. [ 257.954478][ T7463] netlink: 40 bytes leftover after parsing attributes in process `syz.3.667'. [ 257.956001][ T7463] device team0 entered promiscuous mode [ 257.956885][ T7463] device team_slave_0 entered promiscuous mode [ 257.957952][ T7463] device team_slave_1 entered promiscuous mode [ 257.959353][ T7463] bridge0: port 4(team0) entered blocking state [ 257.960407][ T7463] bridge0: port 4(team0) entered disabled state [ 257.962327][ T7463] bridge0: port 4(team0) entered blocking state [ 257.963220][ T7463] bridge0: port 4(team0) entered forwarding state [ 259.282320][ T7479] NILFS (nullb0): couldn't find nilfs on the device [ 259.447824][ T7480] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 259.450028][ T7480] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 259.451529][ T7480] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 261.057612][ T7507] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 265.137522][ T2061] ieee802154 phy0 wpan0: encryption failed: -22 [ 265.138692][ T2061] ieee802154 phy1 wpan1: encryption failed: -22 [ 265.530941][ T7510] lo speed is unknown, defaulting to 1000 [ 265.532201][ T7510] wg1 speed is unknown, defaulting to 1000 [ 265.577741][ T7517] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 266.358832][ T7537] device ip6erspan0 entered promiscuous mode [ 266.889537][ T7541] lo speed is unknown, defaulting to 1000 [ 266.890846][ T7541] wg1 speed is unknown, defaulting to 1000 [ 268.472527][ T7554] netlink: 4 bytes leftover after parsing attributes in process `syz.0.689'. [ 269.163395][ T5003] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 269.518101][ T7567] lo speed is unknown, defaulting to 1000 [ 269.520634][ T7567] wg1 speed is unknown, defaulting to 1000 [ 269.650208][ T7568] lo speed is unknown, defaulting to 1000 [ 269.655679][ T7568] wg1 speed is unknown, defaulting to 1000 [ 271.814448][ T5003] usb 1-1: device descriptor read/all, error -71 [ 272.493495][ T7581] loop4: detected capacity change from 0 to 512 [ 272.647895][ T7585] netlink: 4 bytes leftover after parsing attributes in process `syz.0.706'. [ 272.918576][ T7581] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 273.344098][ T5003] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 273.628919][ T7593] lo speed is unknown, defaulting to 1000 [ 273.630987][ T7593] wg1 speed is unknown, defaulting to 1000 [ 274.453620][ T4332] EXT4-fs (loop4): unmounting filesystem. [ 274.846563][ T7600] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 274.848289][ T7600] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 274.849732][ T7600] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 274.851032][ T7600] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 274.955965][ T7605] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 274.957655][ T7605] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 276.730166][ T7617] device ip6erspan0 entered promiscuous mode [ 277.113125][ T27] kauditd_printk_skb: 211 callbacks suppressed [ 277.113136][ T27] audit: type=1326 audit(262.462:677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7621 comm="syz.0.703" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb79789e8 code=0x7ffc0000 [ 277.118179][ T27] audit: type=1326 audit(262.462:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7621 comm="syz.0.703" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb79789e8 code=0x7ffc0000 [ 277.142049][ T27] audit: type=1326 audit(262.462:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7621 comm="syz.0.703" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb79789e8 code=0x7ffc0000 [ 277.145828][ T27] audit: type=1326 audit(262.462:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7621 comm="syz.0.703" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb79789e8 code=0x7ffc0000 [ 277.201609][ T27] audit: type=1326 audit(262.462:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7621 comm="syz.0.703" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=88 compat=0 ip=0xffffb79789e8 code=0x7ffc0000 [ 277.205415][ T27] audit: type=1326 audit(262.462:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7621 comm="syz.0.703" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb79789e8 code=0x7ffc0000 [ 277.208896][ T27] audit: type=1326 audit(262.462:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7621 comm="syz.0.703" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb79789e8 code=0x7ffc0000 [ 277.212889][ T27] audit: type=1326 audit(262.462:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7621 comm="syz.0.703" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb79789e8 code=0x7ffc0000 [ 277.216692][ T27] audit: type=1326 audit(262.462:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7621 comm="syz.0.703" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb79789e8 code=0x7ffc0000 [ 277.222453][ T27] audit: type=1326 audit(262.462:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7621 comm="syz.0.703" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffb79789e8 code=0x7ffc0000 [ 278.138985][ T7648] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 278.140812][ T7648] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 278.142413][ T7648] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 278.143724][ T7648] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 278.269549][ T7656] loop3: detected capacity change from 0 to 256 [ 278.287632][ T7656] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 278.392999][ T7664] netlink: 4 bytes leftover after parsing attributes in process `syz.2.716'. [ 278.878860][ T7668] capability: warning: `syz.1.714' uses deprecated v2 capabilities in a way that may be insecure [ 281.898603][ T7695] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 282.763188][ T7700] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 282.764745][ T7700] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 283.180671][ T7701] fuse: Bad value for 'fd' [ 284.251891][ T7711] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 284.472405][ T7714] loop4: detected capacity change from 0 to 164 [ 285.515735][ T4336] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 285.517452][ T4336] CPU: 0 PID: 4336 Comm: kworker/u5:7 Not tainted syzkaller #0 [ 285.518685][ T4336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 285.520490][ T4336] Workqueue: hci2 hci_rx_work [ 285.521336][ T4336] Call trace: [ 285.521895][ T4336] dump_backtrace+0x1c0/0x1ec [ 285.522726][ T4336] show_stack+0x2c/0x3c [ 285.523430][ T4336] __dump_stack+0x30/0x40 [ 285.524179][ T4336] dump_stack_lvl+0xf4/0x15c [ 285.524969][ T4336] dump_stack+0x1c/0x5c [ 285.525650][ T4336] sysfs_create_dir_ns+0x244/0x264 [ 285.526533][ T4336] kobject_add_internal+0x598/0xb08 [ 285.527417][ T4336] kobject_add+0x140/0x20c [ 285.528170][ T4336] device_add+0x3f0/0xf90 [ 285.528872][ T4336] hci_conn_add_sysfs+0xbc/0x1c8 [ 285.529699][ T4336] le_conn_complete_evt+0xcc8/0x1244 [ 285.530624][ T4336] hci_le_conn_complete_evt+0x114/0x3f4 [ 285.531543][ T4336] hci_le_meta_evt+0x2c0/0x4a0 [ 285.532431][ T4336] hci_event_packet+0x6b8/0xf18 [ 285.533254][ T4336] hci_rx_work+0x328/0xa84 [ 285.534030][ T4336] process_one_work+0x7f8/0x13a4 [ 285.534883][ T4336] worker_thread+0x8c4/0xfec [ 285.535738][ T4336] kthread+0x250/0x2d8 [ 285.536510][ T4336] ret_from_fork+0x10/0x20 [ 285.554025][ T4336] kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 285.556368][ T4336] Bluetooth: hci2: failed to register connection device [ 286.106253][ T27] kauditd_printk_skb: 221 callbacks suppressed [ 286.106268][ T27] audit: type=1326 audit(270.893:908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7726 comm="syz.1.723" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8cb789e8 code=0x7ffc0000 [ 286.113230][ T27] audit: type=1326 audit(270.893:909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7726 comm="syz.1.723" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8cb789e8 code=0x7ffc0000 [ 286.117394][ T27] audit: type=1326 audit(270.893:910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7726 comm="syz.1.723" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=115 compat=0 ip=0xffff8cb5b8ac code=0x7ffc0000 [ 286.121627][ T27] audit: type=1326 audit(270.912:911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7726 comm="syz.1.723" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=115 compat=0 ip=0xffff8cb5b8ac code=0x7ffc0000 [ 286.125604][ T27] audit: type=1326 audit(270.912:912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7726 comm="syz.1.723" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=115 compat=0 ip=0xffff8cb5b8ac code=0x7ffc0000 [ 286.129587][ T27] audit: type=1326 audit(270.912:913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7726 comm="syz.1.723" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=115 compat=0 ip=0xffff8cb5b8ac code=0x7ffc0000 [ 286.133017][ T27] audit: type=1326 audit(270.912:914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7726 comm="syz.1.723" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=115 compat=0 ip=0xffff8cb5b8ac code=0x7ffc0000 [ 286.136712][ T27] audit: type=1326 audit(270.912:915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7726 comm="syz.1.723" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=115 compat=0 ip=0xffff8cb5b8ac code=0x7ffc0000 [ 286.140668][ T27] audit: type=1326 audit(270.912:916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7726 comm="syz.1.723" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=115 compat=0 ip=0xffff8cb5b8ac code=0x7ffc0000 [ 286.144266][ T27] audit: type=1326 audit(270.912:917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7726 comm="syz.1.723" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=115 compat=0 ip=0xffff8cb5b8ac code=0x7ffc0000 [ 286.407673][ T7738] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 286.409448][ T7738] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 286.410964][ T7738] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 286.412270][ T7738] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 286.569077][ T4336] Bluetooth: hci3: unknown advertising packet type: 0x75 [ 286.569266][ T4336] Bluetooth: hci3: unknown advertising packet type: 0x6c [ 286.570683][ T4336] Bluetooth: hci3: Malformed LE Event: 0x02 [ 287.539321][ T7759] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 287.540815][ T7759] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 287.549932][ T7759] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 287.551725][ T7759] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 287.601256][ T7759] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 287.785425][ T4336] Bluetooth: hci2: command 0x2016 tx timeout [ 288.536962][ T7771] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 288.546825][ T7771] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 288.550367][ T7771] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 288.552035][ T7771] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 288.769367][ T7786] lo speed is unknown, defaulting to 1000 [ 288.770717][ T7786] wg1 speed is unknown, defaulting to 1000 [ 289.198377][ T7797] siw: device registration error -23 [ 291.159412][ T7815] block device autoloading is deprecated and will be removed. [ 291.290408][ T4328] Bluetooth: hci3: unknown advertising packet type: 0x75 [ 291.290765][ T4328] Bluetooth: hci3: unknown advertising packet type: 0x6c [ 291.292399][ T4328] Bluetooth: hci3: Malformed LE Event: 0x02 [ 292.825141][ T27] kauditd_printk_skb: 374 callbacks suppressed [ 292.825153][ T27] audit: type=1326 audit(277.182:1292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7840 comm="syz.2.752" exe="/root/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffffb9f789e8 code=0x0 [ 294.011946][ T7845] loop4: detected capacity change from 0 to 32768 [ 295.825117][ T7868] read_mapping_page failed! [ 295.826701][ T7869] jfs_lookup: iget failed on inum 4 [ 296.320969][ T27] audit: type=1326 audit(280.457:1293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7870 comm="syz.3.761" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaed789e8 code=0x7ffc0000 [ 296.335754][ T27] audit: type=1326 audit(280.457:1294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7870 comm="syz.3.761" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaed789e8 code=0x7ffc0000 [ 296.346394][ T27] audit: type=1326 audit(280.457:1295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7870 comm="syz.3.761" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=243 compat=0 ip=0xffffaed789e8 code=0x7ffc0000 [ 296.363042][ T27] audit: type=1326 audit(280.457:1296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7870 comm="syz.3.761" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaed789e8 code=0x7ffc0000 [ 296.375727][ T27] audit: type=1326 audit(280.457:1297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7870 comm="syz.3.761" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaed789e8 code=0x7ffc0000 [ 296.400320][ T27] audit: type=1326 audit(280.467:1298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7870 comm="syz.3.761" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=88 compat=0 ip=0xffffaed789e8 code=0x7ffc0000 [ 296.410904][ T27] audit: type=1326 audit(280.467:1299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7870 comm="syz.3.761" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaed789e8 code=0x7ffc0000 [ 296.649887][ T27] audit: type=1326 audit(280.467:1300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7870 comm="syz.3.761" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaed789e8 code=0x7ffc0000 [ 296.662045][ T27] audit: type=1326 audit(280.467:1301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7870 comm="syz.3.761" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaed789e8 code=0x7ffc0000 [ 297.610541][ T7904] lo speed is unknown, defaulting to 1000 [ 297.611788][ T7904] wg1 speed is unknown, defaulting to 1000 [ 297.927756][ T7899] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 00:85:08:00:3e:6e [ 298.810761][ T7920] lo speed is unknown, defaulting to 1000 [ 298.812621][ T7920] wg1 speed is unknown, defaulting to 1000 [ 299.725510][ T7927] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 299.727400][ T7927] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 299.729512][ T7927] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 299.730835][ T7927] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 300.032688][ T7940] loop3: detected capacity change from 0 to 4096 [ 300.968980][ T7945] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 301.008417][ T7945] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 301.010036][ T7945] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 301.043465][ T7929] loop4: detected capacity change from 0 to 32768 [ 301.057007][ T7945] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 301.424687][ T7950] Cannot find add_set index 0 as target [ 301.539881][ T7948] read_mapping_page failed! [ 301.540849][ T7948] ialloc: diAlloc returned -5! [ 303.260330][ T7973] Illegal XDP return value 4294967274 on prog (id 15) dev syz_tun, expect packet loss! [ 304.202946][ T7987] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 304.210027][ T7987] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 304.212229][ T7987] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 304.214173][ T7987] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 305.162892][ T4328] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 305.164579][ T4328] CPU: 0 PID: 4328 Comm: kworker/u5:4 Not tainted syzkaller #0 [ 305.165847][ T4328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 305.167504][ T4328] Workqueue: hci1 hci_rx_work [ 305.168333][ T4328] Call trace: [ 305.168880][ T4328] dump_backtrace+0x1c0/0x1ec [ 305.169673][ T4328] show_stack+0x2c/0x3c [ 305.170345][ T4328] __dump_stack+0x30/0x40 [ 305.171073][ T4328] dump_stack_lvl+0xf4/0x15c [ 305.171845][ T4328] dump_stack+0x1c/0x5c [ 305.172495][ T4328] sysfs_create_dir_ns+0x244/0x264 [ 305.173343][ T4328] kobject_add_internal+0x598/0xb08 [ 305.174291][ T4328] kobject_add+0x140/0x20c [ 305.175097][ T4328] device_add+0x3f0/0xf90 [ 305.175834][ T4328] hci_conn_add_sysfs+0xbc/0x1c8 [ 305.176738][ T4328] le_conn_complete_evt+0xcc8/0x1244 [ 305.177640][ T4328] hci_le_conn_complete_evt+0x114/0x3f4 [ 305.178576][ T4328] hci_le_meta_evt+0x2c0/0x4a0 [ 305.179440][ T4328] hci_event_packet+0x6b8/0xf18 [ 305.180250][ T4328] hci_rx_work+0x328/0xa84 [ 305.181016][ T4328] process_one_work+0x7f8/0x13a4 [ 305.181848][ T4328] worker_thread+0x8c4/0xfec [ 305.182626][ T4328] kthread+0x250/0x2d8 [ 305.183323][ T4328] ret_from_fork+0x10/0x20 [ 305.185406][ T7998] IPv6: syztnl0: Disabled Multicast RS [ 305.189047][ T8004] lo speed is unknown, defaulting to 1000 [ 305.191493][ T8004] wg1 speed is unknown, defaulting to 1000 [ 305.217568][ T4328] kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 305.219850][ T4328] Bluetooth: hci1: failed to register connection device [ 306.991493][ T8017] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 306.993325][ T8017] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 306.994770][ T8017] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 306.995954][ T8017] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 307.284222][ T4328] Bluetooth: hci3: unknown advertising packet type: 0x75 [ 307.284293][ T4328] Bluetooth: hci3: unknown advertising packet type: 0x6c [ 307.285625][ T4328] Bluetooth: hci3: Malformed LE Event: 0x02 [ 307.394738][ T4328] Bluetooth: hci1: command 0x2016 tx timeout [ 307.971684][ T8031] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 307.973536][ T8031] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 307.980934][ T8031] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 307.982560][ T8031] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 308.099964][ T8031] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 309.552042][ T8049] netlink: 188 bytes leftover after parsing attributes in process `syz.3.800'. [ 309.627486][ T8049] lo speed is unknown, defaulting to 1000 [ 309.630372][ T8049] wg1 speed is unknown, defaulting to 1000 [ 310.679727][ T8058] lo speed is unknown, defaulting to 1000 [ 310.681005][ T8058] wg1 speed is unknown, defaulting to 1000 [ 313.141758][ T8060] lo speed is unknown, defaulting to 1000 [ 313.143127][ T8060] wg1 speed is unknown, defaulting to 1000 [ 314.027078][ T4328] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 314.031027][ T4328] CPU: 0 PID: 4328 Comm: kworker/u5:4 Not tainted syzkaller #0 [ 314.032358][ T4328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 314.034049][ T4328] Workqueue: hci3 hci_rx_work [ 314.034875][ T4328] Call trace: [ 314.035404][ T4328] dump_backtrace+0x1c0/0x1ec [ 314.036256][ T4328] show_stack+0x2c/0x3c [ 314.036992][ T4328] __dump_stack+0x30/0x40 [ 314.037718][ T4328] dump_stack_lvl+0xf4/0x15c [ 314.038538][ T4328] dump_stack+0x1c/0x5c [ 314.039217][ T4328] sysfs_create_dir_ns+0x244/0x264 [ 314.040072][ T4328] kobject_add_internal+0x598/0xb08 [ 314.040982][ T4328] kobject_add+0x140/0x20c [ 314.041757][ T4328] device_add+0x3f0/0xf90 [ 314.042515][ T4328] hci_conn_add_sysfs+0xbc/0x1c8 [ 314.043377][ T4328] le_conn_complete_evt+0xcc8/0x1244 [ 314.044271][ T4328] hci_le_conn_complete_evt+0x114/0x3f4 [ 314.045293][ T4328] hci_le_meta_evt+0x2c0/0x4a0 [ 314.046140][ T4328] hci_event_packet+0x6b8/0xf18 [ 314.047000][ T4328] hci_rx_work+0x328/0xa84 [ 314.047735][ T4328] process_one_work+0x7f8/0x13a4 [ 314.048649][ T4328] worker_thread+0x8c4/0xfec [ 314.049484][ T4328] kthread+0x250/0x2d8 [ 314.050254][ T4328] ret_from_fork+0x10/0x20 [ 314.159865][ T4328] kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 314.414072][ T4328] Bluetooth: hci3: failed to register connection device [ 315.654866][ T4336] Bluetooth: hci3: unknown advertising packet type: 0x75 [ 315.654954][ T4336] Bluetooth: hci3: unknown advertising packet type: 0x6c [ 315.656497][ T4336] Bluetooth: hci3: Malformed LE Event: 0x02 [ 316.605085][ T8103] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 316.608404][ T8103] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 316.610839][ T8103] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 316.612525][ T8103] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 316.683300][ T4336] Bluetooth: hci3: command 0x2016 tx timeout [ 317.429280][ T8120] lo speed is unknown, defaulting to 1000 [ 317.432589][ T8120] wg1 speed is unknown, defaulting to 1000 [ 320.547462][ T8123] loop3: detected capacity change from 0 to 512 [ 320.983328][ T8123] EXT4-fs error (device loop3): ext4_orphan_get:1405: inode #15: comm syz.3.813: inode has both inline data and extents flags [ 320.986247][ T8123] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.813: couldn't read orphan inode 15 (err -117) [ 320.988586][ T8123] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 322.075872][ T8133] lo speed is unknown, defaulting to 1000 [ 322.077443][ T8133] wg1 speed is unknown, defaulting to 1000 [ 322.264623][ T4336] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 322.271951][ T4336] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 322.274405][ T4336] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 322.277008][ T4336] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 322.280886][ T4336] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 322.282338][ T4336] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 322.287777][ T4320] EXT4-fs (loop3): unmounting filesystem. [ 324.605913][ T4336] Bluetooth: hci5: command 0x0409 tx timeout [ 324.636286][ T8135] lo speed is unknown, defaulting to 1000 [ 324.637545][ T8135] wg1 speed is unknown, defaulting to 1000 [ 325.450788][ T8135] chnl_net:caif_netlink_parms(): no params data found [ 325.570331][ T8172] loop3: detected capacity change from 0 to 128 [ 325.579780][ T8135] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.581095][ T8135] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.582795][ T8135] device bridge_slave_0 entered promiscuous mode [ 325.585022][ T8135] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.586150][ T8135] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.587736][ T8135] device bridge_slave_1 entered promiscuous mode [ 325.595522][ T8135] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 325.598225][ T8135] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 325.769752][ T8135] team0: Port device team_slave_0 added [ 325.912754][ T8135] team0: Port device team_slave_1 added [ 325.918581][ T8135] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 325.919818][ T8135] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 325.949166][ T8135] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 325.999388][ T8135] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 326.001137][ T8135] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 326.006525][ T8135] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 326.549394][ T8186] lo speed is unknown, defaulting to 1000 [ 326.550758][ T8186] wg1 speed is unknown, defaulting to 1000 [ 326.768157][ T4328] Bluetooth: hci5: command 0x041b tx timeout [ 327.367720][ T8195] siw: device registration error -23 [ 327.488258][ T8195] loop3: detected capacity change from 0 to 4096 [ 328.553916][ T8135] device hsr_slave_0 entered promiscuous mode [ 329.636173][ T4336] Bluetooth: hci5: command 0x040f tx timeout [ 330.056103][ T8195] __ntfs_error: 182 callbacks suppressed [ 330.056124][ T8195] ntfs: (device loop3): parse_options(): NLS character set 0xffffffffffffffff not found. [ 330.061465][ T8135] device hsr_slave_1 entered promiscuous mode [ 330.682987][ T8135] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 330.684215][ T8135] Cannot create hsr debugfs directory [ 330.845916][ T8198] lo speed is unknown, defaulting to 1000 [ 330.890315][ T8207] IPv6: syztnl0: Disabled Multicast RS [ 331.038673][ T8198] wg1 speed is unknown, defaulting to 1000 [ 331.722036][ T8217] fuse: Bad value for 'fd' [ 331.812231][ T4328] Bluetooth: hci5: command 0x0419 tx timeout [ 331.956298][ T8135] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 332.581908][ T4328] Bluetooth: hci2: unknown advertising packet type: 0x75 [ 332.582007][ T4328] Bluetooth: hci2: unknown advertising packet type: 0x6c [ 332.583342][ T4328] Bluetooth: hci2: Malformed LE Event: 0x02 [ 333.030425][ T8135] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 333.081686][ T8135] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 333.206142][ T8135] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 333.553409][ T8325] netlink: 188 bytes leftover after parsing attributes in process `syz.2.846'. [ 334.470752][ T8328] loop3: detected capacity change from 0 to 512 [ 334.703963][ T2061] ieee802154 phy0 wpan0: encryption failed: -22 [ 334.705088][ T2061] ieee802154 phy1 wpan1: encryption failed: -22 [ 334.766839][ T8135] 8021q: adding VLAN 0 to HW filter on device bond0 [ 334.772666][ T8135] 8021q: adding VLAN 0 to HW filter on device team0 [ 334.786021][ T8135] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 334.788063][ T8135] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 334.800884][ T8325] lo speed is unknown, defaulting to 1000 [ 334.802243][ T8325] wg1 speed is unknown, defaulting to 1000 [ 334.802354][ T8281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 334.856798][ T8281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 334.907049][ T8281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 334.919120][ T8281] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 334.951614][ T8281] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.952889][ T8281] bridge0: port 1(bridge_slave_0) entered forwarding state [ 334.969952][ T4328] Bluetooth: hci1: unknown advertising packet type: 0x75 [ 334.969979][ T4328] Bluetooth: hci1: unknown advertising packet type: 0x6c [ 334.971332][ T4328] Bluetooth: hci1: Malformed LE Event: 0x02 [ 334.994759][ T8281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 335.001310][ T8281] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 335.019423][ T8281] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.020704][ T8281] bridge0: port 2(bridge_slave_1) entered forwarding state [ 335.348156][ T8281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 335.355072][ T8281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 335.356878][ T8281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 335.358663][ T8281] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 335.364634][ T8281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 335.367434][ T8281] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 335.369380][ T8281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 335.382592][ T8281] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 335.384405][ T8281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 335.386082][ T8281] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 335.405376][ T8343] netlink: 16 bytes leftover after parsing attributes in process `syz.3.841'. [ 335.454195][ T8281] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 335.456179][ T8281] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 335.458101][ T8281] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 335.886752][ T8279] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 335.888213][ T8279] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 335.892680][ T8135] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 335.999438][ T8358] lo speed is unknown, defaulting to 1000 [ 336.001566][ T8358] wg1 speed is unknown, defaulting to 1000 [ 337.338697][ T4328] Bluetooth: hci1: unknown advertising packet type: 0x75 [ 337.338794][ T4328] Bluetooth: hci1: unknown advertising packet type: 0x6c [ 337.340264][ T4328] Bluetooth: hci1: Malformed LE Event: 0x02 [ 337.845762][ T8379] IPv6: syztnl0: Disabled Multicast RS [ 338.063550][ T8377] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 338.071810][ T8377] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 338.073326][ T8377] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 338.290568][ T8382] block device autoloading is deprecated and will be removed. [ 339.167580][ T8396] netlink: 188 bytes leftover after parsing attributes in process `syz.0.853'. [ 339.219298][ T8396] lo speed is unknown, defaulting to 1000 [ 339.221566][ T8396] wg1 speed is unknown, defaulting to 1000 [ 339.663654][ T8398] netlink: 16 bytes leftover after parsing attributes in process `syz.3.854'. [ 339.745965][ T8281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 339.747685][ T8281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 339.749545][ T8281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 339.751092][ T8281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 339.755514][ T8135] device veth0_vlan entered promiscuous mode [ 339.760819][ T8281] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 339.802699][ T8281] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 339.808179][ T8135] device veth1_vlan entered promiscuous mode [ 339.831992][ T8281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 339.833702][ T8281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 339.836699][ T8135] device veth0_macvtap entered promiscuous mode [ 339.846882][ T8135] device veth1_macvtap entered promiscuous mode [ 339.864365][ T8135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 339.866100][ T8135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.867606][ T8135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 339.874576][ T8135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.876269][ T8135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 339.877878][ T8135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.892129][ T8135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 339.893884][ T8135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.895484][ T8135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 339.906567][ T8135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.912887][ T8135] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 339.914175][ T8281] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 339.915648][ T8281] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 339.917108][ T8281] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 339.918632][ T8281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 339.929147][ T8135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 339.933513][ T8135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.935081][ T8135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 339.936878][ T8135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.938418][ T8135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 339.940093][ T8135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.941668][ T8135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 339.958715][ T8135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.960326][ T8135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 339.962086][ T8135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.974539][ T8135] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 339.975983][ T8281] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 339.977835][ T8281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 339.984099][ T8135] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.985528][ T8135] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.994921][ T8135] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.996349][ T8135] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.076992][ T8279] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 340.078427][ T8279] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 340.079788][ T8281] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 340.107896][ T8279] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 340.109442][ T8279] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 340.110729][ T8281] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 340.223500][ T8400] loop5: detected capacity change from 0 to 512 [ 340.255486][ T8400] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 341.072511][ T8415] lo speed is unknown, defaulting to 1000 [ 341.075467][ T8415] wg1 speed is unknown, defaulting to 1000 [ 341.988876][ T8421] loop3: detected capacity change from 0 to 512 [ 342.007082][ T8135] EXT4-fs (loop5): unmounting filesystem. [ 342.457906][ T8421] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 342.468936][ T8428] ufs: You didn't specify the type of your ufs filesystem [ 342.468936][ T8428] [ 342.468936][ T8428] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 342.468936][ T8428] [ 342.468936][ T8428] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 342.474582][ T8428] ufs: ufstype=old is supported read-only [ 342.480018][ T8428] I/O error, dev loop1, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 342.855888][ T8436] lo speed is unknown, defaulting to 1000 [ 342.858655][ T8436] wg1 speed is unknown, defaulting to 1000 [ 343.817111][ T8442] lo speed is unknown, defaulting to 1000 [ 343.818434][ T8442] wg1 speed is unknown, defaulting to 1000 [ 344.260694][ T4320] EXT4-fs (loop3): unmounting filesystem. [ 345.325140][ T8456] loop3: detected capacity change from 0 to 256 [ 345.380891][ T8456] FAT-fs (loop3): Directory bread(block 64) failed [ 345.452026][ T8456] FAT-fs (loop3): Directory bread(block 65) failed [ 345.453407][ T8456] FAT-fs (loop3): Directory bread(block 66) failed [ 345.454477][ T8456] FAT-fs (loop3): Directory bread(block 67) failed [ 345.455650][ T8456] FAT-fs (loop3): Directory bread(block 68) failed [ 345.456767][ T8456] FAT-fs (loop3): Directory bread(block 69) failed [ 345.460296][ T8456] FAT-fs (loop3): Directory bread(block 70) failed [ 345.461425][ T8456] FAT-fs (loop3): Directory bread(block 71) failed [ 345.462591][ T8456] FAT-fs (loop3): Directory bread(block 72) failed [ 345.463706][ T8456] FAT-fs (loop3): Directory bread(block 73) failed [ 345.885763][ T4328] Bluetooth: hci2: unknown advertising packet type: 0x75 [ 345.885791][ T4328] Bluetooth: hci2: unknown advertising packet type: 0x6c [ 345.887423][ T4328] Bluetooth: hci2: Malformed LE Event: 0x02 [ 346.976133][ T8479] siw: device registration error -23 [ 348.392322][ T8490] siw: device registration error -23 [ 348.534428][ T8490] loop5: detected capacity change from 0 to 4096 [ 349.113060][ T8490] ntfs: (device loop5): parse_options(): NLS character set 0xffffffffffffffff not found. [ 350.429501][ T8486] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 350.431308][ T8486] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 350.432854][ T8486] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 350.434162][ T8486] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 350.443160][ T8502] lo speed is unknown, defaulting to 1000 [ 350.444488][ T8502] wg1 speed is unknown, defaulting to 1000 [ 350.999259][ T8512] netlink: 28 bytes leftover after parsing attributes in process `syz.2.872'. [ 351.892622][ T4328] Bluetooth: hci2: unknown advertising packet type: 0x75 [ 351.892738][ T4328] Bluetooth: hci2: unknown advertising packet type: 0x6c [ 351.895161][ T4328] Bluetooth: hci2: Malformed LE Event: 0x02 [ 352.055647][ T8514] ufs: You didn't specify the type of your ufs filesystem [ 352.055647][ T8514] [ 352.055647][ T8514] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 352.055647][ T8514] [ 352.055647][ T8514] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 352.060931][ T8514] ufs: ufstype=old is supported read-only [ 352.063252][ T8514] I/O error, dev loop11, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 353.590356][ T4328] Bluetooth: hci5: unknown advertising packet type: 0x75 [ 353.590413][ T4328] Bluetooth: hci5: unknown advertising packet type: 0x6c [ 353.591913][ T4328] Bluetooth: hci5: Malformed LE Event: 0x02 [ 354.796124][ T8597] loop5: detected capacity change from 0 to 256 [ 354.803035][ T8597] exfat: Deprecated parameter 'namecase' [ 355.206228][ T8603] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 00:85:08:00:3e:6e [ 355.445116][ T8597] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x1cbb3694, utbl_chksum : 0xe619d30d) [ 355.930335][ T8614] input: syz0 as /devices/virtual/input/input2 [ 357.262748][ T8615] exFAT-fs (loop5): error, found bogus dentry(5) beyond unused empty group(4) (start_clu : 5, cur_clu : 5) [ 357.476099][ T8620] overlayfs: failed to clone upperpath [ 358.675232][ T8629] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 358.677188][ T8629] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 358.678766][ T8629] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 358.680025][ T8629] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 358.701565][ T8633] netlink: 8 bytes leftover after parsing attributes in process `syz.5.898'. [ 359.301648][ T4328] Bluetooth: hci1: unknown advertising packet type: 0x75 [ 359.301739][ T4328] Bluetooth: hci1: unknown advertising packet type: 0x6c [ 359.304221][ T4328] Bluetooth: hci1: Malformed LE Event: 0x02 [ 362.570099][ T8691] lo speed is unknown, defaulting to 1000 [ 362.571434][ T8691] wg1 speed is unknown, defaulting to 1000 [ 363.824386][ T8705] loop5: detected capacity change from 0 to 256 [ 363.845126][ T8705] FAT-fs (loop5): Directory bread(block 64) failed [ 363.846537][ T8705] FAT-fs (loop5): Directory bread(block 65) failed [ 363.847770][ T8705] FAT-fs (loop5): Directory bread(block 66) failed [ 363.853409][ T8705] FAT-fs (loop5): Directory bread(block 67) failed [ 363.855867][ T8705] FAT-fs (loop5): Directory bread(block 68) failed [ 363.857124][ T8705] FAT-fs (loop5): Directory bread(block 69) failed [ 363.858419][ T8705] FAT-fs (loop5): Directory bread(block 70) failed [ 363.868122][ T8705] FAT-fs (loop5): Directory bread(block 71) failed [ 363.871686][ T8705] FAT-fs (loop5): Directory bread(block 72) failed [ 363.872975][ T8705] FAT-fs (loop5): Directory bread(block 73) failed [ 365.467007][ T4328] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 365.471262][ T4328] CPU: 1 PID: 4328 Comm: kworker/u5:4 Not tainted syzkaller #0 [ 365.472497][ T4328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 365.474152][ T4328] Workqueue: hci3 hci_rx_work [ 365.474978][ T4328] Call trace: [ 365.475581][ T4328] dump_backtrace+0x1c0/0x1ec [ 365.476440][ T4328] show_stack+0x2c/0x3c [ 365.477104][ T4328] __dump_stack+0x30/0x40 [ 365.477838][ T4328] dump_stack_lvl+0xf4/0x15c [ 365.478637][ T4328] dump_stack+0x1c/0x5c [ 365.479348][ T4328] sysfs_create_dir_ns+0x244/0x264 [ 365.480230][ T4328] kobject_add_internal+0x598/0xb08 [ 365.481110][ T4328] kobject_add+0x140/0x20c [ 365.481861][ T4328] device_add+0x3f0/0xf90 [ 365.482604][ T4328] hci_conn_add_sysfs+0xbc/0x1c8 [ 365.483460][ T4328] le_conn_complete_evt+0xcc8/0x1244 [ 365.484358][ T4328] hci_le_conn_complete_evt+0x114/0x3f4 [ 365.485272][ T4328] hci_le_meta_evt+0x2c0/0x4a0 [ 365.486068][ T4328] hci_event_packet+0x6b8/0xf18 [ 365.486885][ T4328] hci_rx_work+0x328/0xa84 [ 365.487605][ T4328] process_one_work+0x7f8/0x13a4 [ 365.488393][ T4328] worker_thread+0x8c4/0xfec [ 365.489135][ T4328] kthread+0x250/0x2d8 [ 365.489768][ T4328] ret_from_fork+0x10/0x20 [ 365.497675][ T4328] kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 365.500155][ T4328] Bluetooth: hci3: failed to register connection device [ 366.622394][ T8750] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 366.624166][ T8750] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 366.625780][ T8750] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 366.627122][ T8750] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 366.856460][ T8752] lo speed is unknown, defaulting to 1000 [ 366.857647][ T8752] wg1 speed is unknown, defaulting to 1000 [ 368.322394][ T4328] Bluetooth: hci3: command 0x2016 tx timeout [ 368.927228][ T8770] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 368.935497][ T8770] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 368.936948][ T8770] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 369.285034][ T8774] netlink: 8 bytes leftover after parsing attributes in process `syz.1.930'. [ 369.896606][ T4336] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:201' [ 369.898358][ T4336] CPU: 1 PID: 4336 Comm: kworker/u5:7 Not tainted syzkaller #0 [ 369.899609][ T4336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 369.901347][ T4336] Workqueue: hci5 hci_rx_work [ 369.902143][ T4336] Call trace: [ 369.902723][ T4336] dump_backtrace+0x1c0/0x1ec [ 369.903549][ T4336] show_stack+0x2c/0x3c [ 369.904202][ T4336] __dump_stack+0x30/0x40 [ 369.904931][ T4336] dump_stack_lvl+0xf4/0x15c [ 369.905669][ T4336] dump_stack+0x1c/0x5c [ 369.906386][ T4336] sysfs_create_dir_ns+0x244/0x264 [ 369.907250][ T4336] kobject_add_internal+0x598/0xb08 [ 369.908100][ T4336] kobject_add+0x140/0x20c [ 369.908786][ T4336] device_add+0x3f0/0xf90 [ 369.909540][ T4336] hci_conn_add_sysfs+0xbc/0x1c8 [ 369.910362][ T4336] le_conn_complete_evt+0xcc8/0x1244 [ 369.911217][ T4336] hci_le_conn_complete_evt+0x114/0x3f4 [ 369.912188][ T4336] hci_le_meta_evt+0x2c0/0x4a0 [ 369.913125][ T4336] hci_event_packet+0x6b8/0xf18 [ 369.914005][ T4336] hci_rx_work+0x328/0xa84 [ 369.914744][ T4336] process_one_work+0x7f8/0x13a4 [ 369.915521][ T4336] worker_thread+0x8c4/0xfec [ 369.916314][ T4336] kthread+0x250/0x2d8 [ 369.916976][ T4336] ret_from_fork+0x10/0x20 [ 369.917977][ T4336] kobject_add_internal failed for hci5:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 369.920376][ T4336] Bluetooth: hci5: failed to register connection device [ 370.795584][ T8792] siw: device registration error -23 [ 372.103398][ T4328] Bluetooth: hci5: command 0x2016 tx timeout [ 372.296665][ T8806] lo speed is unknown, defaulting to 1000 [ 372.301912][ T8806] wg1 speed is unknown, defaulting to 1000 [ 372.902304][ T8810] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 372.904263][ T8810] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 372.905970][ T8810] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 372.907203][ T8810] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 373.454523][ T8823] netlink: 8 bytes leftover after parsing attributes in process `syz.5.943'. [ 374.484944][ T4328] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 374.487602][ T4328] CPU: 1 PID: 4328 Comm: kworker/u5:4 Not tainted syzkaller #0 [ 374.488817][ T4328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 374.490522][ T4328] Workqueue: hci3 hci_rx_work [ 374.491333][ T4328] Call trace: [ 374.491909][ T4328] dump_backtrace+0x1c0/0x1ec [ 374.492728][ T4328] show_stack+0x2c/0x3c [ 374.493440][ T4328] __dump_stack+0x30/0x40 [ 374.494151][ T4328] dump_stack_lvl+0xf4/0x15c [ 374.494830][ T4328] dump_stack+0x1c/0x5c [ 374.495512][ T4328] sysfs_create_dir_ns+0x244/0x264 [ 374.496286][ T4328] kobject_add_internal+0x598/0xb08 [ 374.497203][ T4328] kobject_add+0x140/0x20c [ 374.497989][ T4328] device_add+0x3f0/0xf90 [ 374.498701][ T4328] hci_conn_add_sysfs+0xbc/0x1c8 [ 374.499545][ T4328] le_conn_complete_evt+0xcc8/0x1244 [ 374.500430][ T4328] hci_le_conn_complete_evt+0x114/0x3f4 [ 374.501337][ T4328] hci_le_meta_evt+0x2c0/0x4a0 [ 374.502154][ T4328] hci_event_packet+0x6b8/0xf18 [ 374.502991][ T4328] hci_rx_work+0x328/0xa84 [ 374.503711][ T4328] process_one_work+0x7f8/0x13a4 [ 374.504514][ T4328] worker_thread+0x8c4/0xfec [ 374.505286][ T4328] kthread+0x250/0x2d8 [ 374.505971][ T4328] ret_from_fork+0x10/0x20 [ 374.511964][ T4328] kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 374.514900][ T4328] Bluetooth: hci3: failed to register connection device [ 376.704218][ T4328] Bluetooth: hci3: command 0x2016 tx timeout [ 376.803033][ T8884] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 376.804891][ T8884] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 376.806383][ T8884] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 376.807803][ T8884] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 378.618863][ T4336] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:201' [ 378.620782][ T4336] CPU: 0 PID: 4336 Comm: kworker/u5:7 Not tainted syzkaller #0 [ 378.622137][ T4336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 378.623832][ T4336] Workqueue: hci5 hci_rx_work [ 378.624721][ T4336] Call trace: [ 378.625298][ T4336] dump_backtrace+0x1c0/0x1ec [ 378.626064][ T4336] show_stack+0x2c/0x3c [ 378.626764][ T4336] __dump_stack+0x30/0x40 [ 378.627492][ T4336] dump_stack_lvl+0xf4/0x15c [ 378.628268][ T4336] dump_stack+0x1c/0x5c [ 378.629028][ T4336] sysfs_create_dir_ns+0x244/0x264 [ 378.629902][ T4336] kobject_add_internal+0x598/0xb08 [ 378.630750][ T4336] kobject_add+0x140/0x20c [ 378.631516][ T4336] device_add+0x3f0/0xf90 [ 378.632207][ T4336] hci_conn_add_sysfs+0xbc/0x1c8 [ 378.633018][ T4336] le_conn_complete_evt+0xcc8/0x1244 [ 378.633870][ T4336] hci_le_conn_complete_evt+0x114/0x3f4 [ 378.634790][ T4336] hci_le_meta_evt+0x2c0/0x4a0 [ 378.635554][ T4336] hci_event_packet+0x6b8/0xf18 [ 378.636298][ T4336] hci_rx_work+0x328/0xa84 [ 378.637019][ T4336] process_one_work+0x7f8/0x13a4 [ 378.637794][ T4336] worker_thread+0x8c4/0xfec [ 378.638521][ T4336] kthread+0x250/0x2d8 [ 378.639106][ T4336] ret_from_fork+0x10/0x20 [ 378.640524][ T4336] kobject_add_internal failed for hci5:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 378.643069][ T4336] Bluetooth: hci5: failed to register connection device [ 379.758218][ T4328] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 379.760335][ T4328] CPU: 1 PID: 4328 Comm: kworker/u5:4 Not tainted syzkaller #0 [ 379.761587][ T4328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 379.763312][ T4328] Workqueue: hci1 hci_rx_work [ 379.764146][ T4328] Call trace: [ 379.764707][ T4328] dump_backtrace+0x1c0/0x1ec [ 379.765498][ T4328] show_stack+0x2c/0x3c [ 379.766183][ T4328] __dump_stack+0x30/0x40 [ 379.766907][ T4328] dump_stack_lvl+0xf4/0x15c [ 379.767681][ T4328] dump_stack+0x1c/0x5c [ 379.768371][ T4328] sysfs_create_dir_ns+0x244/0x264 [ 379.769214][ T4328] kobject_add_internal+0x598/0xb08 [ 379.770062][ T4328] kobject_add+0x140/0x20c [ 379.770836][ T4328] device_add+0x3f0/0xf90 [ 379.771577][ T4328] hci_conn_add_sysfs+0xbc/0x1c8 [ 379.772427][ T4328] le_conn_complete_evt+0xcc8/0x1244 [ 379.773305][ T4328] hci_le_conn_complete_evt+0x114/0x3f4 [ 379.774214][ T4328] hci_le_meta_evt+0x2c0/0x4a0 [ 379.774893][ T4328] hci_event_packet+0x6b8/0xf18 [ 379.775637][ T4328] hci_rx_work+0x328/0xa84 [ 379.776287][ T4328] process_one_work+0x7f8/0x13a4 [ 379.777054][ T4328] worker_thread+0x8c4/0xfec [ 379.777792][ T4328] kthread+0x250/0x2d8 [ 379.778464][ T4328] ret_from_fork+0x10/0x20 [ 379.784308][ T4328] kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 379.786930][ T4328] Bluetooth: hci1: failed to register connection device [ 380.798665][ T4336] Bluetooth: hci5: command 0x2016 tx timeout [ 381.187560][ T8926] siw: device registration error -23 [ 381.300340][ T8935] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 381.302447][ T8935] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 381.303744][ T8935] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 382.004821][ T4328] Bluetooth: hci1: command 0x2016 tx timeout [ 383.040590][ T4328] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 383.044620][ T4328] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 383.046603][ T4328] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 383.048268][ T4328] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 383.049714][ T4328] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 383.055232][ T4328] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 383.223249][ T8974] lo speed is unknown, defaulting to 1000 [ 383.225682][ T8974] wg1 speed is unknown, defaulting to 1000 [ 383.489079][ T8963] lo speed is unknown, defaulting to 1000 [ 383.494757][ T8963] wg1 speed is unknown, defaulting to 1000 [ 383.781182][ T4336] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 383.782844][ T4336] CPU: 1 PID: 4336 Comm: kworker/u5:7 Not tainted syzkaller #0 [ 383.783933][ T4336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 383.785486][ T4336] Workqueue: hci3 hci_rx_work [ 383.786287][ T4336] Call trace: [ 383.786842][ T4336] dump_backtrace+0x1c0/0x1ec [ 383.787570][ T4336] show_stack+0x2c/0x3c [ 383.788268][ T4336] __dump_stack+0x30/0x40 [ 383.788964][ T4336] dump_stack_lvl+0xf4/0x15c [ 383.789728][ T4336] dump_stack+0x1c/0x5c [ 383.790425][ T4336] sysfs_create_dir_ns+0x244/0x264 [ 383.791327][ T4336] kobject_add_internal+0x598/0xb08 [ 383.792176][ T4336] kobject_add+0x140/0x20c [ 383.792867][ T4336] device_add+0x3f0/0xf90 [ 383.793584][ T4336] hci_conn_add_sysfs+0xbc/0x1c8 [ 383.794377][ T4336] le_conn_complete_evt+0xcc8/0x1244 [ 383.795247][ T4336] hci_le_conn_complete_evt+0x114/0x3f4 [ 383.796196][ T4336] hci_le_meta_evt+0x2c0/0x4a0 [ 383.797006][ T4336] hci_event_packet+0x6b8/0xf18 [ 383.797867][ T4336] hci_rx_work+0x328/0xa84 [ 383.798618][ T4336] process_one_work+0x7f8/0x13a4 [ 383.799462][ T4336] worker_thread+0x8c4/0xfec [ 383.800216][ T4336] kthread+0x250/0x2d8 [ 383.800905][ T4336] ret_from_fork+0x10/0x20 [ 383.802013][ T4336] kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 383.806661][ T4336] Bluetooth: hci3: failed to register connection device [ 383.894066][ T8963] chnl_net:caif_netlink_parms(): no params data found [ 383.947094][ T8963] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.948543][ T8963] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.951588][ T8963] device bridge_slave_0 entered promiscuous mode [ 383.954080][ T8963] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.955562][ T8963] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.957225][ T8963] device bridge_slave_1 entered promiscuous mode [ 384.422542][ T8963] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 384.425731][ T8963] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 384.525548][ T8963] team0: Port device team_slave_0 added [ 384.632058][ T9011] batman_adv: batadv0: Adding interface: dummy0 [ 384.633236][ T9011] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 384.637329][ T9011] batman_adv: batadv0: Interface activated: dummy0 [ 384.661718][ T9011] batadv0: mtu less than device minimum [ 384.664467][ T9011] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 384.667687][ T9011] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 384.670884][ T9011] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 384.674112][ T9011] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 384.677307][ T9011] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 384.680495][ T9011] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 384.683670][ T9011] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 384.686749][ T9011] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 384.689981][ T9011] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 384.869067][ T8963] team0: Port device team_slave_1 added [ 384.892938][ T8963] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 384.894120][ T8963] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 384.909765][ T8963] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 384.920553][ T8963] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 384.922605][ T8963] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 384.927027][ T8963] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 385.197611][ T4328] Bluetooth: hci3: unexpected subevent 0x0e length: 25 > 15 [ 385.245738][ T8963] device hsr_slave_0 entered promiscuous mode [ 385.253669][ T4328] Bluetooth: hci6: command 0x0409 tx timeout [ 385.285236][ T9026] siw: device registration error -23 [ 385.325625][ T8963] device hsr_slave_1 entered promiscuous mode [ 385.382406][ T8963] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 385.384629][ T8963] Cannot create hsr debugfs directory [ 386.075776][ T4328] Bluetooth: hci3: command 0x2016 tx timeout [ 386.253132][ T8963] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 386.459208][ T9038] lo speed is unknown, defaulting to 1000 [ 386.461544][ T9038] wg1 speed is unknown, defaulting to 1000 [ 386.474441][ T8963] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 386.558752][ T8963] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 386.848536][ T4336] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:201' [ 386.850639][ T4336] CPU: 1 PID: 4336 Comm: kworker/u5:7 Not tainted syzkaller #0 [ 386.851886][ T4336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 386.853611][ T4336] Workqueue: hci5 hci_rx_work [ 386.854437][ T4336] Call trace: [ 386.854710][ T8963] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 386.854966][ T4336] dump_backtrace+0x1c0/0x1ec [ 386.856831][ T4336] show_stack+0x2c/0x3c [ 386.857493][ T4336] __dump_stack+0x30/0x40 [ 386.858256][ T4336] dump_stack_lvl+0xf4/0x15c [ 386.859022][ T4336] dump_stack+0x1c/0x5c [ 386.859687][ T4336] sysfs_create_dir_ns+0x244/0x264 [ 386.860555][ T4336] kobject_add_internal+0x598/0xb08 [ 386.861344][ T4336] kobject_add+0x140/0x20c [ 386.862124][ T4336] device_add+0x3f0/0xf90 [ 386.862842][ T4336] hci_conn_add_sysfs+0xbc/0x1c8 [ 386.863701][ T4336] le_conn_complete_evt+0xcc8/0x1244 [ 386.864590][ T4336] hci_le_conn_complete_evt+0x114/0x3f4 [ 386.865516][ T4336] hci_le_meta_evt+0x2c0/0x4a0 [ 386.866327][ T4336] hci_event_packet+0x6b8/0xf18 [ 386.867166][ T4336] hci_rx_work+0x328/0xa84 [ 386.867913][ T4336] process_one_work+0x7f8/0x13a4 [ 386.868733][ T4336] worker_thread+0x8c4/0xfec [ 386.869512][ T4336] kthread+0x250/0x2d8 [ 386.870214][ T4336] ret_from_fork+0x10/0x20 [ 386.871877][ T4336] kobject_add_internal failed for hci5:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 386.874060][ T4336] Bluetooth: hci5: failed to register connection device [ 386.927319][ T9047] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 386.929338][ T9047] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 386.932349][ T9047] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 386.933821][ T9047] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 387.134986][ T4336] Bluetooth: hci3: unknown advertising packet type: 0x75 [ 387.135024][ T4336] Bluetooth: hci3: unknown advertising packet type: 0x6c [ 387.136404][ T4336] Bluetooth: hci3: Malformed LE Event: 0x02 [ 387.256794][ T8963] 8021q: adding VLAN 0 to HW filter on device bond0 [ 387.309677][ T8963] 8021q: adding VLAN 0 to HW filter on device team0 [ 387.333172][ T4712] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 387.334761][ T4712] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 387.336147][ T4712] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 387.340840][ T4712] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 387.379686][ T4712] bridge0: port 1(bridge_slave_0) entered blocking state [ 387.381018][ T4712] bridge0: port 1(bridge_slave_0) entered forwarding state [ 387.391685][ T4712] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 387.400106][ T4712] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 387.404476][ T4712] bridge0: port 2(bridge_slave_1) entered blocking state [ 387.405717][ T4712] bridge0: port 2(bridge_slave_1) entered forwarding state [ 387.408106][ T4712] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 387.444149][ T4712] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 387.449669][ T4712] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 387.487167][ T4336] Bluetooth: hci6: command 0x041b tx timeout [ 387.495001][ T4328] Bluetooth: hci3: unknown advertising packet type: 0x75 [ 387.495030][ T4328] Bluetooth: hci3: unknown advertising packet type: 0x6c [ 387.496441][ T4328] Bluetooth: hci3: Malformed LE Event: 0x02 [ 387.499804][ T4712] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 387.511898][ T4712] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 387.515795][ T4712] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 387.517509][ T4712] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 387.526104][ T4712] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 388.135045][ T9080] batman_adv: batadv0: Adding interface: dummy0 [ 388.136373][ T9080] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 388.140737][ T9080] batman_adv: batadv0: Interface activated: dummy0 [ 388.392492][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 388.394423][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 388.542691][ T9089] lo speed is unknown, defaulting to 1000 [ 388.545304][ T9089] wg1 speed is unknown, defaulting to 1000 [ 388.663579][ T8963] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 388.665569][ T8963] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 388.669460][ T8283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 388.671167][ T8283] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 389.052962][ T4328] Bluetooth: hci5: unknown advertising packet type: 0x75 [ 389.053063][ T4328] Bluetooth: hci5: unknown advertising packet type: 0x6c [ 389.055412][ T4328] Bluetooth: hci5: Malformed LE Event: 0x02 [ 389.089413][ T4328] Bluetooth: hci5: command 0x2016 tx timeout [ 389.214092][ T9104] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 389.215888][ T9104] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 389.217593][ T9104] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 389.218851][ T9104] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 389.257721][ T8963] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 389.280356][ T8308] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 389.282172][ T8308] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 389.838775][ T4336] Bluetooth: hci6: command 0x040f tx timeout [ 389.842124][ T4328] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 389.843735][ T4328] CPU: 1 PID: 4328 Comm: kworker/u5:4 Not tainted syzkaller #0 [ 389.845071][ T4328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 389.846869][ T4328] Workqueue: hci3 hci_rx_work [ 389.847678][ T4328] Call trace: [ 389.848294][ T4328] dump_backtrace+0x1c0/0x1ec [ 389.849067][ T4328] show_stack+0x2c/0x3c [ 389.849845][ T4328] __dump_stack+0x30/0x40 [ 389.850600][ T4328] dump_stack_lvl+0xf4/0x15c [ 389.851338][ T4328] dump_stack+0x1c/0x5c [ 389.852019][ T4328] sysfs_create_dir_ns+0x244/0x264 [ 389.852874][ T4328] kobject_add_internal+0x598/0xb08 [ 389.853766][ T4328] kobject_add+0x140/0x20c [ 389.854493][ T4328] device_add+0x3f0/0xf90 [ 389.855207][ T4328] hci_conn_add_sysfs+0xbc/0x1c8 [ 389.856050][ T4328] le_conn_complete_evt+0xcc8/0x1244 [ 389.856990][ T4328] hci_le_conn_complete_evt+0x114/0x3f4 [ 389.857971][ T4328] hci_le_meta_evt+0x2c0/0x4a0 [ 389.858866][ T4328] hci_event_packet+0x6b8/0xf18 [ 389.859743][ T4328] hci_rx_work+0x328/0xa84 [ 389.860491][ T4328] process_one_work+0x7f8/0x13a4 [ 389.861326][ T4328] worker_thread+0x8c4/0xfec [ 389.862115][ T4328] kthread+0x250/0x2d8 [ 389.862825][ T4328] ret_from_fork+0x10/0x20 [ 389.866270][ T4328] kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 389.869782][ T4328] Bluetooth: hci3: failed to register connection device [ 390.671352][ T9139] lo speed is unknown, defaulting to 1000 [ 390.672984][ T9139] wg1 speed is unknown, defaulting to 1000 [ 390.752200][ T4738] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 390.755057][ T4738] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 391.303892][ T8963] device veth0_vlan entered promiscuous mode [ 391.592717][ T8963] device veth1_vlan entered promiscuous mode [ 392.508083][ T4328] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:201' [ 392.509772][ T4328] CPU: 1 PID: 4328 Comm: kworker/u5:4 Not tainted syzkaller #0 [ 392.511030][ T4328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 392.512629][ T4328] Workqueue: hci5 hci_rx_work [ 392.513379][ T4328] Call trace: [ 392.513941][ T4328] dump_backtrace+0x1c0/0x1ec [ 392.514783][ T4328] show_stack+0x2c/0x3c [ 392.515471][ T4328] __dump_stack+0x30/0x40 [ 392.516233][ T4328] dump_stack_lvl+0xf4/0x15c [ 392.516999][ T4328] dump_stack+0x1c/0x5c [ 392.517665][ T4328] sysfs_create_dir_ns+0x244/0x264 [ 392.518470][ T4328] kobject_add_internal+0x598/0xb08 [ 392.519299][ T4328] kobject_add+0x140/0x20c [ 392.520010][ T4328] device_add+0x3f0/0xf90 [ 392.520685][ T4328] hci_conn_add_sysfs+0xbc/0x1c8 [ 392.521456][ T4328] le_conn_complete_evt+0xcc8/0x1244 [ 392.522259][ T4328] hci_le_conn_complete_evt+0x114/0x3f4 [ 392.523142][ T4328] hci_le_meta_evt+0x2c0/0x4a0 [ 392.523877][ T4328] hci_event_packet+0x6b8/0xf18 [ 392.524638][ T4326] Bluetooth: hci6: command 0x0419 tx timeout [ 392.524680][ T4328] hci_rx_work+0x328/0xa84 [ 392.525710][ T4326] Bluetooth: hci3: command 0x2016 tx timeout [ 392.526397][ T4328] process_one_work+0x7f8/0x13a4 [ 392.528095][ T4328] worker_thread+0x8c4/0xfec [ 392.528834][ T4328] kthread+0x250/0x2d8 [ 392.529510][ T4328] ret_from_fork+0x10/0x20 [ 392.530616][ T4328] kobject_add_internal failed for hci5:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 392.536105][ T4328] Bluetooth: hci5: failed to register connection device [ 392.551058][ T8963] device veth0_macvtap entered promiscuous mode [ 392.630401][ T4896] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 392.634585][ T4896] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 392.636339][ T4896] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 392.638447][ T4896] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 392.640040][ T4896] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 392.641728][ T4896] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 392.648459][ T4896] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 392.650521][ T4896] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 392.652064][ T4896] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 393.071507][ T9171] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 393.073368][ T9171] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 393.075013][ T9171] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 393.076301][ T9171] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 393.699918][ T8963] device veth1_macvtap entered promiscuous mode [ 393.729601][ T8963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 393.734799][ T8963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.739341][ T8963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 393.741227][ T8963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.746309][ T8963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 393.749116][ T8963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.750898][ T8963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 393.752697][ T8963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.754500][ T8963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 393.756396][ T8963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.758077][ T8963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 394.161189][ T4328] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 394.163610][ T4328] CPU: 1 PID: 4328 Comm: kworker/u5:4 Not tainted syzkaller #0 [ 394.164775][ T4328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 394.166465][ T4328] Workqueue: hci1 hci_rx_work [ 394.167260][ T4328] Call trace: [ 394.167822][ T4328] dump_backtrace+0x1c0/0x1ec [ 394.168592][ T4328] show_stack+0x2c/0x3c [ 394.169291][ T4328] __dump_stack+0x30/0x40 [ 394.169981][ T4328] dump_stack_lvl+0xf4/0x15c [ 394.170756][ T4328] dump_stack+0x1c/0x5c [ 394.171462][ T4328] sysfs_create_dir_ns+0x244/0x264 [ 394.172347][ T4328] kobject_add_internal+0x598/0xb08 [ 394.173332][ T4328] kobject_add+0x140/0x20c [ 394.174109][ T4328] device_add+0x3f0/0xf90 [ 394.174873][ T4328] hci_conn_add_sysfs+0xbc/0x1c8 [ 394.175722][ T4328] le_conn_complete_evt+0xcc8/0x1244 [ 394.176689][ T4328] hci_le_conn_complete_evt+0x114/0x3f4 [ 394.177668][ T4328] hci_le_meta_evt+0x2c0/0x4a0 [ 394.178516][ T4328] hci_event_packet+0x6b8/0xf18 [ 394.179371][ T4328] hci_rx_work+0x328/0xa84 [ 394.180121][ T4328] process_one_work+0x7f8/0x13a4 [ 394.180965][ T4328] worker_thread+0x8c4/0xfec [ 394.181734][ T4328] kthread+0x250/0x2d8 [ 394.182436][ T4328] ret_from_fork+0x10/0x20 [ 394.183414][ T8963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.193069][ T4328] kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 394.195506][ T4328] Bluetooth: hci1: failed to register connection device [ 394.288898][ T8963] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 394.424765][ T9188] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 394.426547][ T9188] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 394.428270][ T9188] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 394.429568][ T9188] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 394.441362][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 394.445723][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 394.450795][ T8963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 394.452736][ T8963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.456078][ T8963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 394.457962][ T8963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.459804][ T8963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 394.461837][ T8963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.463583][ T8963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 394.474237][ T8963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.568821][ T4328] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:201' [ 394.570720][ T4328] CPU: 0 PID: 4328 Comm: kworker/u5:4 Not tainted syzkaller #0 [ 394.572029][ T4328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 394.573748][ T4328] Workqueue: hci5 hci_rx_work [ 394.574587][ T4328] Call trace: [ 394.575170][ T4328] dump_backtrace+0x1c0/0x1ec [ 394.576024][ T4328] show_stack+0x2c/0x3c [ 394.576731][ T4328] __dump_stack+0x30/0x40 [ 394.577450][ T4328] dump_stack_lvl+0xf4/0x15c [ 394.578245][ T4328] dump_stack+0x1c/0x5c [ 394.578982][ T4328] sysfs_create_dir_ns+0x244/0x264 [ 394.579852][ T4328] kobject_add_internal+0x598/0xb08 [ 394.580691][ T4328] kobject_add+0x140/0x20c [ 394.581448][ T4328] device_add+0x3f0/0xf90 [ 394.582189][ T4328] hci_conn_add_sysfs+0xbc/0x1c8 [ 394.583032][ T4328] le_conn_complete_evt+0xcc8/0x1244 [ 394.583938][ T4328] hci_le_conn_complete_evt+0x114/0x3f4 [ 394.584928][ T4328] hci_le_meta_evt+0x2c0/0x4a0 [ 394.585770][ T4328] hci_event_packet+0x6b8/0xf18 [ 394.586591][ T4328] hci_rx_work+0x328/0xa84 [ 394.587378][ T4328] process_one_work+0x7f8/0x13a4 [ 394.588274][ T4328] worker_thread+0x8c4/0xfec [ 394.589093][ T4328] kthread+0x250/0x2d8 [ 394.589839][ T4328] ret_from_fork+0x10/0x20 [ 394.591077][ T4328] kobject_add_internal failed for hci5:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 394.593744][ T4328] Bluetooth: hci5: failed to register connection device [ 394.731683][ T4328] Bluetooth: hci5: command 0x2016 tx timeout [ 394.738338][ T8963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 394.741735][ T8963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.745350][ T8963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 394.747040][ T8963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.763259][ T8963] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 395.116800][ T8308] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 395.119677][ T8308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 395.126284][ T8963] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.134091][ T8963] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.142615][ T8963] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.170219][ T8963] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.325508][ T8332] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 395.420279][ T8332] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 395.610446][ T9205] lo speed is unknown, defaulting to 1000 [ 395.611881][ T9205] wg1 speed is unknown, defaulting to 1000 [ 395.658935][ T4808] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 396.108161][ T4411] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 396.109630][ T4411] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 396.111357][ T8332] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 396.777620][ T4328] Bluetooth: hci1: command 0x2016 tx timeout [ 396.829294][ T4336] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:201' [ 396.832199][ T4336] CPU: 0 PID: 4336 Comm: kworker/u5:7 Not tainted syzkaller #0 [ 396.833421][ T4336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 396.835204][ T4336] Workqueue: hci5 hci_rx_work [ 396.836064][ T4336] Call trace: [ 396.836633][ T4336] dump_backtrace+0x1c0/0x1ec [ 396.837421][ T4336] show_stack+0x2c/0x3c [ 396.838069][ T4336] __dump_stack+0x30/0x40 [ 396.838871][ T4336] dump_stack_lvl+0xf4/0x15c [ 396.839740][ T4336] dump_stack+0x1c/0x5c [ 396.840461][ T4336] sysfs_create_dir_ns+0x244/0x264 [ 396.841327][ T4336] kobject_add_internal+0x598/0xb08 [ 396.842249][ T4336] kobject_add+0x140/0x20c [ 396.843012][ T4336] device_add+0x3f0/0xf90 [ 396.843782][ T4336] hci_conn_add_sysfs+0xbc/0x1c8 [ 396.844635][ T4336] le_conn_complete_evt+0xcc8/0x1244 [ 396.845624][ T4336] hci_le_conn_complete_evt+0x114/0x3f4 [ 396.846575][ T4336] hci_le_meta_evt+0x2c0/0x4a0 [ 396.847397][ T4336] hci_event_packet+0x6b8/0xf18 [ 396.848225][ T4336] hci_rx_work+0x328/0xa84 [ 396.848981][ T4336] process_one_work+0x7f8/0x13a4 [ 396.849809][ T4336] worker_thread+0x8c4/0xfec [ 396.850566][ T4336] kthread+0x250/0x2d8 [ 396.851232][ T4336] ret_from_fork+0x10/0x20 [ 396.858490][ T4336] kobject_add_internal failed for hci5:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 396.860790][ T4336] Bluetooth: hci5: failed to register connection device [ 396.955016][ T4336] Bluetooth: hci5: command 0x2016 tx timeout [ 399.750483][ T4336] Bluetooth: hci5: command 0x2016 tx timeout [ 399.751851][ T2061] ieee802154 phy0 wpan0: encryption failed: -22 [ 399.755901][ T2061] ieee802154 phy1 wpan1: encryption failed: -22 [ 399.788847][ T9230] lo speed is unknown, defaulting to 1000 [ 399.790116][ T9230] wg1 speed is unknown, defaulting to 1000 [ 399.803299][ T9234] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 399.805397][ T9234] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 399.806765][ T9234] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 400.664243][ T9247] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 400.669409][ T9247] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 400.671052][ T9247] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 401.094910][ T4336] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 401.096824][ T4336] CPU: 1 PID: 4336 Comm: kworker/u5:7 Not tainted syzkaller #0 [ 401.098014][ T4336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 401.099755][ T4336] Workqueue: hci3 hci_rx_work [ 401.100582][ T4336] Call trace: [ 401.101139][ T4336] dump_backtrace+0x1c0/0x1ec [ 401.101981][ T4336] show_stack+0x2c/0x3c [ 401.102682][ T4336] __dump_stack+0x30/0x40 [ 401.103347][ T4336] dump_stack_lvl+0xf4/0x15c [ 401.104109][ T4336] dump_stack+0x1c/0x5c [ 401.104725][ T4336] sysfs_create_dir_ns+0x244/0x264 [ 401.105661][ T4336] kobject_add_internal+0x598/0xb08 [ 401.106575][ T4336] kobject_add+0x140/0x20c [ 401.107336][ T4336] device_add+0x3f0/0xf90 [ 401.108055][ T4336] hci_conn_add_sysfs+0xbc/0x1c8 [ 401.108947][ T4336] le_conn_complete_evt+0xcc8/0x1244 [ 401.109817][ T4336] hci_le_conn_complete_evt+0x114/0x3f4 [ 401.110787][ T4336] hci_le_meta_evt+0x2c0/0x4a0 [ 401.111580][ T4336] hci_event_packet+0x6b8/0xf18 [ 401.112410][ T4336] hci_rx_work+0x328/0xa84 [ 401.113149][ T4336] process_one_work+0x7f8/0x13a4 [ 401.113985][ T4336] worker_thread+0x8c4/0xfec [ 401.114742][ T4336] kthread+0x250/0x2d8 [ 401.115490][ T4336] ret_from_fork+0x10/0x20 [ 401.121699][ T4336] kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 401.124501][ T4336] Bluetooth: hci3: failed to register connection device [ 401.896953][ T9266] lo speed is unknown, defaulting to 1000 [ 401.898437][ T9266] wg1 speed is unknown, defaulting to 1000 [ 402.800080][ T4332] jfs_flush_journal: synclist not empty [ 402.907563][ T4332] metapage: 00000000596683f9: 00001000 00000000 0000376c 00000000 [ 402.950354][ T4332] metapage: 0000000031d43682: 1fe29230 ffff8000 df96ea28 ffff0000 [ 402.959412][ T4332] metapage: 00000000fa2e3521: 00000004 00000000 00000000 00000000 [ 402.966560][ T4332] metapage: 00000000330f070f: d9b04000 ffff0000 0000001c 00000000 [ 402.978552][ T4332] metapage: 0000000043d62d87: 00000000 dead4ead ffffffff 00000000 [ 403.013129][ T4332] metapage: 000000002572b162: ffffffff ffffffff 1c5cef40 ffff8000 [ 403.014422][ T4332] metapage: 00000000ed06b7dd: 17f733c0 ffff8000 00000000 00000000 [ 403.015608][ T4332] metapage: 000000007350bb0e: 11f14720 ffff8000 00000200 00000000 [ 403.016875][ T4332] metapage: 00000000c490f48b: f7a92368 ffff0000 f7a92368 ffff0000 [ 403.018345][ T4332] metapage: 000000004cf8d085: 0366c100 fffffc00 f1ea0000 ffff0000 [ 403.024383][ T4332] metapage: 0000000092a6707c: 00001000 00000000 00000002 00000000 [ 403.027370][ T4332] metapage: 000000007169f58a: df96e800 ffff0000 [ 403.029698][ T4332] page: 00000000de463f71: 05ffd60000002056 fffffc00034bb288 [ 403.031996][ T4332] page: 000000003bb94739: fffffc0003e5e088 ffff0000e2335058 [ 403.034775][ T4332] page: 00000000bf57cbb4: 000000000000001c ffff0000f7a922e8 [ 403.036316][ T4332] page: 00000000f9b3399c: 00000002ffffffff ffff0000cea22000 [ 403.037551][ T4332] tblock:000000000e5e0bc1: 03040800 00000000 0000376c 00000000 [ 403.038844][ T4332] tblock:00000000360b638c: 1fe29120 ffff8000 f7a922f8 ffff0000 [ 403.040131][ T4332] tblock:000000006f9a5e93: f1ea0000 ffff0000 00040004 00000000 [ 403.041550][ T4332] tblock:0000000034515e7a: 00000000 dead4ead ffffffff 00000000 [ 403.042879][ T4332] tblock:00000000e66e59f4: ffffffff ffffffff 1c5cf140 ffff8000 [ 403.044208][ T4332] tblock:0000000014c4c735: 17f73fc0 ffff8000 00000000 00000000 [ 403.050567][ T4332] tblock:0000000021176377: 11f15c00 ffff8000 00000200 00000000 [ 403.051846][ T4332] tblock:0000000080803ad4: 1fe29290 ffff8000 1fe29290 ffff8000 [ 403.053071][ T4332] tblock:000000003fd51e1c: 00000002 00000000 1c5cf2a0 ffff8000 [ 403.054280][ T4332] tblock:00000000ead90e7d: 1c5cf2a0 ffff8000 00003988 00000000 [ 403.055611][ T4332] tblock:0000000049db18b1: de6be600 ffff0000 00000003 00000988 [ 403.075119][ T4332] tblock:00000000fde45c82: 00000000 dead4ead ffffffff 00000000 [ 403.083522][ T4332] tblock:00000000c11997ca: ffffffff ffffffff 1c5cf120 ffff8000 [ 403.087974][ T4332] tblock:00000000d80ddd10: 00000000 00000000 00000000 00000000 [ 403.089292][ T4332] tblock:000000002aa96345: 11f15bc0 ffff8000 00000200 00000000 [ 403.090691][ T4332] tblock:000000002e7d3ac9: 1fe29310 ffff8000 1fe29310 ffff8000 [ 403.092045][ T4332] tblock:00000000cca0e565: 00000000 00000000 00000000 00000000 [ 403.093353][ T4332] tblock:000000002c25e4b5: 03040910 00000000 0000376c 00000000 [ 403.094613][ T4332] tblock:000000007941ad0c: df96ea28 ffff0000 1fe29230 ffff8000 [ 403.095850][ T4332] tblock:00000000830f9045: f1ea0000 ffff0000 00010003 00000000 [ 403.097109][ T4332] tblock:000000002691cb32: 00000000 dead4ead ffffffff 00000000 [ 403.098369][ T4332] tblock:000000006e128440: ffffffff ffffffff 1c5cf140 ffff8000 [ 403.100068][ T4332] tblock:0000000055dd703b: 17f73fc0 ffff8000 00000000 00000000 [ 403.101272][ T4332] tblock:00000000fadcbaa6: 11f15c00 ffff8000 00000200 00000000 [ 403.102561][ T4332] tblock:00000000cf2ef13d: 1fe29180 ffff8000 1fe29180 ffff8000 [ 403.103816][ T4332] tblock:00000000e6525f8f: 00000001 00000000 00000100 dead0000 [ 403.105106][ T4332] tblock:00000000f7df4036: 00000122 dead0000 000038bc 00000000 [ 403.106413][ T4332] tblock:0000000016854c7f: de6be600 ffff0000 00000003 000008bc [ 403.107626][ T4332] tblock:0000000030694e38: 00000000 dead4ead ffffffff 00000000 [ 403.108894][ T4332] tblock:000000004e762186: ffffffff ffffffff 1c5cf120 ffff8000 [ 403.111475][ T4332] tblock:000000002999f5ce: 17f748c0 ffff8000 00000000 00000000 [ 403.112702][ T4332] tblock:00000000f4a0d3eb: 11f15bc0 ffff8000 00000200 00000000 [ 403.114080][ T4332] tblock:000000008e2a442f: 1fe29200 ffff8000 1fe29200 ffff8000 [ 403.115330][ T4332] tblock:00000000d39f7dee: e212ce30 ffff0000 00000007 00000000 [ 403.446118][ T9286] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 403.450342][ T9286] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 403.453776][ T9286] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 403.455643][ T9286] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 403.503143][ T4336] Bluetooth: hci3: command 0x2016 tx timeout [ 403.966523][ T9297] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 403.970621][ T9297] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 403.973841][ T9297] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 403.975760][ T9297] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 404.492822][ T4326] Bluetooth: min 255 > max 0 [ 404.647360][ T9312] lo speed is unknown, defaulting to 1000 [ 404.648841][ T9312] wg1 speed is unknown, defaulting to 1000 [ 405.748080][ T4336] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci6/hci6:201' [ 405.750169][ T4336] CPU: 0 PID: 4336 Comm: kworker/u5:7 Not tainted syzkaller #0 [ 405.751402][ T4336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 405.753064][ T4336] Workqueue: hci6 hci_rx_work [ 405.753915][ T4336] Call trace: [ 405.754483][ T4336] dump_backtrace+0x1c0/0x1ec [ 405.755230][ T4336] show_stack+0x2c/0x3c [ 405.755920][ T4336] __dump_stack+0x30/0x40 [ 405.756669][ T4336] dump_stack_lvl+0xf4/0x15c [ 405.757440][ T4336] dump_stack+0x1c/0x5c [ 405.758134][ T4336] sysfs_create_dir_ns+0x244/0x264 [ 405.759002][ T4336] kobject_add_internal+0x598/0xb08 [ 405.759881][ T4336] kobject_add+0x140/0x20c [ 405.760615][ T4336] device_add+0x3f0/0xf90 [ 405.761280][ T4336] hci_conn_add_sysfs+0xbc/0x1c8 [ 405.762119][ T4336] le_conn_complete_evt+0xcc8/0x1244 [ 405.763012][ T4336] hci_le_conn_complete_evt+0x114/0x3f4 [ 405.763947][ T4336] hci_le_meta_evt+0x2c0/0x4a0 [ 405.764817][ T4336] hci_event_packet+0x6b8/0xf18 [ 405.765708][ T4336] hci_rx_work+0x328/0xa84 [ 405.766493][ T4336] process_one_work+0x7f8/0x13a4 [ 405.767369][ T4336] worker_thread+0x8c4/0xfec [ 405.768168][ T4336] kthread+0x250/0x2d8 [ 405.768879][ T4336] ret_from_fork+0x10/0x20 [ 405.771662][ T4336] kobject_add_internal failed for hci6:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 405.774021][ T4336] Bluetooth: hci6: failed to register connection device [ 406.035522][ T9328] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 406.038648][ T9328] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 406.041149][ T9328] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 406.042662][ T9328] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 406.943968][ T4326] Bluetooth: hci6: command 0x2021 tx timeout [ 406.945358][ T4326] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci6/hci6:201' [ 406.947397][ T4326] CPU: 0 PID: 4326 Comm: kworker/u5:3 Not tainted syzkaller #0 [ 406.948671][ T4326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 406.950480][ T4326] Workqueue: hci6 hci_rx_work [ 406.951290][ T4326] Call trace: [ 406.951862][ T4326] dump_backtrace+0x1c0/0x1ec [ 406.952621][ T4326] show_stack+0x2c/0x3c [ 406.953333][ T4326] __dump_stack+0x30/0x40 [ 406.954094][ T4326] dump_stack_lvl+0xf4/0x15c [ 406.954898][ T4326] dump_stack+0x1c/0x5c [ 406.955574][ T4326] sysfs_create_dir_ns+0x244/0x264 [ 406.956441][ T4326] kobject_add_internal+0x598/0xb08 [ 406.957297][ T4326] kobject_add+0x140/0x20c [ 406.958044][ T4326] device_add+0x3f0/0xf90 [ 406.958823][ T4326] hci_conn_add_sysfs+0xbc/0x1c8 [ 406.959624][ T4326] le_conn_complete_evt+0xcc8/0x1244 [ 406.960525][ T4326] hci_le_conn_complete_evt+0x114/0x3f4 [ 406.961500][ T4326] hci_le_meta_evt+0x2c0/0x4a0 [ 406.962307][ T4326] hci_event_packet+0x6b8/0xf18 [ 406.963169][ T4326] hci_rx_work+0x328/0xa84 [ 406.963933][ T4326] process_one_work+0x7f8/0x13a4 [ 406.964758][ T4326] worker_thread+0x8c4/0xfec [ 406.965506][ T4326] kthread+0x250/0x2d8 [ 406.966207][ T4326] ret_from_fork+0x10/0x20 [ 406.967948][ T4326] kobject_add_internal failed for hci6:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 406.971416][ T4326] Bluetooth: hci6: failed to register connection device [ 407.069501][ T9343] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 407.072874][ T9343] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 407.075926][ T9343] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 407.077342][ T9343] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 408.226740][ T9362] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 408.230344][ T9362] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 408.233129][ T9362] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 408.234796][ T9362] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 408.626486][ T9370] loop6: detected capacity change from 0 to 512 [ 408.791692][ T9378] lo speed is unknown, defaulting to 1000 [ 408.794005][ T9378] wg1 speed is unknown, defaulting to 1000 [ 409.209580][ T4326] Bluetooth: hci6: command 0x2016 tx timeout [ 409.280101][ T9370] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 411.119940][ T4326] Bluetooth: hci3: Invalid connection link type handle 0x00c8 [ 411.131292][ T9385] lo speed is unknown, defaulting to 1000 [ 411.132568][ T9385] wg1 speed is unknown, defaulting to 1000 [ 411.227138][ T8963] EXT4-fs (loop6): unmounting filesystem. [ 411.293221][ T4326] Bluetooth: hci3: ACL packet too small [ 411.529348][ T4326] Bluetooth: hci6: command 0x2016 tx timeout [ 412.012444][ T4336] Bluetooth: hci3: unknown advertising packet type: 0x75 [ 412.012474][ T4336] Bluetooth: hci3: unknown advertising packet type: 0x6c [ 412.012536][ T4326] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:201' [ 412.015155][ T4336] Bluetooth: hci3: Malformed LE Event: 0x02 [ 412.018109][ T4326] CPU: 1 PID: 4326 Comm: kworker/u5:3 Not tainted syzkaller #0 [ 412.019426][ T4326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 412.021081][ T4326] Workqueue: hci5 hci_rx_work [ 412.021877][ T4326] Call trace: [ 412.022415][ T4326] dump_backtrace+0x1c0/0x1ec [ 412.023175][ T4326] show_stack+0x2c/0x3c [ 412.023863][ T4326] __dump_stack+0x30/0x40 [ 412.024600][ T4326] dump_stack_lvl+0xf4/0x15c [ 412.025371][ T4326] dump_stack+0x1c/0x5c [ 412.026053][ T4326] sysfs_create_dir_ns+0x244/0x264 [ 412.026863][ T4326] kobject_add_internal+0x598/0xb08 [ 412.027716][ T4326] kobject_add+0x140/0x20c [ 412.028482][ T4326] device_add+0x3f0/0xf90 [ 412.029150][ T4326] hci_conn_add_sysfs+0xbc/0x1c8 [ 412.029918][ T4326] le_conn_complete_evt+0xcc8/0x1244 [ 412.030723][ T4326] hci_le_conn_complete_evt+0x114/0x3f4 [ 412.031654][ T4326] hci_le_meta_evt+0x2c0/0x4a0 [ 412.032417][ T4326] hci_event_packet+0x6b8/0xf18 [ 412.033236][ T4326] hci_rx_work+0x328/0xa84 [ 412.033980][ T4326] process_one_work+0x7f8/0x13a4 [ 412.034849][ T4326] worker_thread+0x8c4/0xfec [ 412.035602][ T4326] kthread+0x250/0x2d8 [ 412.036289][ T4326] ret_from_fork+0x10/0x20 [ 412.039755][ T4326] kobject_add_internal failed for hci5:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 412.042161][ T4326] Bluetooth: hci5: failed to register connection device [ 412.045591][ T9406] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 412.047318][ T9406] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 412.048928][ T9406] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 412.050165][ T9406] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 412.821417][ T4326] Bluetooth: hci5: unknown advertising packet type: 0x75 [ 412.821468][ T4326] Bluetooth: hci5: unknown advertising packet type: 0x6c [ 412.822707][ T4326] Bluetooth: hci5: Malformed LE Event: 0x02 [ 413.578862][ T9436] lo speed is unknown, defaulting to 1000 [ 413.581011][ T9436] wg1 speed is unknown, defaulting to 1000 [ 414.157654][ T9455] loop6: detected capacity change from 0 to 512 [ 414.603566][ T9455] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 414.975532][ T4326] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 414.977257][ T4326] CPU: 1 PID: 4326 Comm: kworker/u5:3 Not tainted syzkaller #0 [ 414.978545][ T4326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 414.980248][ T4326] Workqueue: hci3 hci_rx_work [ 414.981108][ T4326] Call trace: [ 414.981657][ T4326] dump_backtrace+0x1c0/0x1ec [ 414.982486][ T4326] show_stack+0x2c/0x3c [ 414.983170][ T4326] __dump_stack+0x30/0x40 [ 414.983905][ T4326] dump_stack_lvl+0xf4/0x15c [ 414.984695][ T4326] dump_stack+0x1c/0x5c [ 414.985458][ T4326] sysfs_create_dir_ns+0x244/0x264 [ 414.986285][ T4326] kobject_add_internal+0x598/0xb08 [ 414.987187][ T4326] kobject_add+0x140/0x20c [ 414.987945][ T4326] device_add+0x3f0/0xf90 [ 414.988672][ T4326] hci_conn_add_sysfs+0xbc/0x1c8 [ 414.989456][ T4326] le_conn_complete_evt+0xcc8/0x1244 [ 414.990317][ T4326] hci_le_conn_complete_evt+0x114/0x3f4 [ 414.991262][ T4326] hci_le_meta_evt+0x2c0/0x4a0 [ 414.992016][ T4326] hci_event_packet+0x6b8/0xf18 [ 414.992805][ T4326] hci_rx_work+0x328/0xa84 [ 414.993548][ T4326] process_one_work+0x7f8/0x13a4 [ 414.994389][ T4326] worker_thread+0x8c4/0xfec [ 414.995138][ T4326] kthread+0x250/0x2d8 [ 414.995848][ T4326] ret_from_fork+0x10/0x20 [ 414.997436][ T4326] kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 414.999855][ T4326] Bluetooth: hci3: failed to register connection device [ 415.221715][ T9470] lo speed is unknown, defaulting to 1000 [ 415.222982][ T9470] wg1 speed is unknown, defaulting to 1000 [ 416.009864][ T8963] EXT4-fs (loop6): unmounting filesystem. [ 416.878056][ T9491] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 416.883630][ T9491] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 416.885578][ T9491] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 417.225600][ T4336] Bluetooth: hci3: command 0x2016 tx timeout [ 417.586398][ T9516] lo speed is unknown, defaulting to 1000 [ 417.587751][ T9516] wg1 speed is unknown, defaulting to 1000 [ 418.524884][ T9542] loop6: detected capacity change from 0 to 64 [ 418.527598][ T9542] hfs: umask requires a value [ 418.528483][ T9542] hfs: unable to parse mount options [ 418.542301][ T4336] Bluetooth: hci5: unknown advertising packet type: 0x75 [ 418.542329][ T4336] Bluetooth: hci5: unknown advertising packet type: 0x6c [ 418.543626][ T4336] Bluetooth: hci5: Malformed LE Event: 0x02 [ 418.614353][ T9546] loop6: detected capacity change from 0 to 8 [ 418.643740][ T9546] unable to read id index table [ 419.081909][ T9556] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 419.089304][ T9556] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 419.091290][ T9556] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 419.191866][ T4336] Bluetooth: hci1: command 0x2021 tx timeout [ 420.037414][ T9574] lo speed is unknown, defaulting to 1000 [ 420.039597][ T9574] wg1 speed is unknown, defaulting to 1000 [ 422.650364][ T9619] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 422.654123][ T9619] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 422.657442][ T9619] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 422.659408][ T9619] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 423.901116][ T9652] loop6: detected capacity change from 0 to 128 [ 424.191270][ T4336] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 424.193234][ T4336] CPU: 1 PID: 4336 Comm: kworker/u5:7 Not tainted syzkaller #0 [ 424.194451][ T4336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 424.196161][ T4336] Workqueue: hci1 hci_rx_work [ 424.196867][ T4336] Call trace: [ 424.197418][ T4336] dump_backtrace+0x1c0/0x1ec [ 424.198207][ T4336] show_stack+0x2c/0x3c [ 424.198925][ T4336] __dump_stack+0x30/0x40 [ 424.199655][ T4336] dump_stack_lvl+0xf4/0x15c [ 424.200496][ T4336] dump_stack+0x1c/0x5c [ 424.201232][ T4336] sysfs_create_dir_ns+0x244/0x264 [ 424.202085][ T4336] kobject_add_internal+0x598/0xb08 [ 424.202861][ T4336] kobject_add+0x140/0x20c [ 424.203559][ T4336] device_add+0x3f0/0xf90 [ 424.204238][ T4336] hci_conn_add_sysfs+0xbc/0x1c8 [ 424.205080][ T4336] le_conn_complete_evt+0xcc8/0x1244 [ 424.205959][ T4336] hci_le_conn_complete_evt+0x114/0x3f4 [ 424.206953][ T4336] hci_le_meta_evt+0x2c0/0x4a0 [ 424.207834][ T4336] hci_event_packet+0x6b8/0xf18 [ 424.208706][ T4336] hci_rx_work+0x328/0xa84 [ 424.209497][ T4336] process_one_work+0x7f8/0x13a4 [ 424.210279][ T4336] worker_thread+0x8c4/0xfec [ 424.211025][ T4336] kthread+0x250/0x2d8 [ 424.211674][ T4336] ret_from_fork+0x10/0x20 [ 424.212627][ T4336] kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 424.214868][ T4336] Bluetooth: hci1: failed to register connection device [ 424.248403][ T4336] Bluetooth: hci3: unknown advertising packet type: 0x75 [ 424.248427][ T4336] Bluetooth: hci3: unknown advertising packet type: 0x6c [ 424.249842][ T4336] Bluetooth: hci3: Malformed LE Event: 0x02 [ 424.857945][ T9680] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 424.861333][ T9680] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 424.863877][ T9680] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 424.865557][ T9680] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 425.280976][ T9684] loop6: detected capacity change from 0 to 256 [ 425.287228][ T9684] exfat: Deprecated parameter 'utf8' [ 425.291690][ T9684] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x47dfe6af, utbl_chksum : 0xe619d30d) [ 425.296018][ T9684] exFAT-fs (loop6): failed to load alloc-bitmap [ 425.297230][ T9684] exFAT-fs (loop6): failed to recognize exfat type [ 425.793811][ T9693] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 425.798230][ T9693] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 425.801556][ T9693] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 425.803374][ T9693] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 426.796627][ T9703] lo speed is unknown, defaulting to 1000 [ 426.798098][ T9703] wg1 speed is unknown, defaulting to 1000 [ 426.805463][ T9702] lo speed is unknown, defaulting to 1000 [ 426.806747][ T9702] wg1 speed is unknown, defaulting to 1000 [ 429.645384][ T4336] Bluetooth: hci1: command 0x2016 tx timeout [ 429.646547][ T4336] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 429.647990][ T4336] Bluetooth: hci5: Injecting HCI hardware error event [ 429.649466][ T4336] Bluetooth: hci5: hardware error 0x00 [ 430.397865][ T9732] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 430.401224][ T9732] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 430.403990][ T9732] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 430.405645][ T9732] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 430.876858][ T9722] loop6: detected capacity change from 0 to 32768 [ 430.882590][ T9722] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 scanned by syz.6.1183 (9722) [ 430.887756][ T9722] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 430.889423][ T9722] BTRFS info (device loop6): using crc32c (crc32c-generic) checksum algorithm [ 430.890998][ T9722] BTRFS error (device loop6): unrecognized metadata_ratio value 0x7fffffffffffffff [ 430.897727][ T9722] BTRFS error (device loop6): open_ctree failed: -34 [ 431.584007][ T9749] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 431.587744][ T9749] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 431.590994][ T9749] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 431.592832][ T9749] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 432.133116][ T9750] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 432.137332][ T9750] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 432.140803][ T9750] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 432.142505][ T9750] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 432.228121][ T9733] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 scanned by udevd (9733) [ 432.476067][ T9758] lo speed is unknown, defaulting to 1000 [ 432.478551][ T9758] wg1 speed is unknown, defaulting to 1000 [ 432.622684][ T9761] lo speed is unknown, defaulting to 1000 [ 432.624262][ T9761] wg1 speed is unknown, defaulting to 1000 [ 433.591176][ T4336] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 434.189841][ T9772] lo speed is unknown, defaulting to 1000 [ 434.192419][ T9772] wg1 speed is unknown, defaulting to 1000 [ 438.194719][ T9808] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 438.196468][ T9808] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 438.198025][ T9808] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 438.199356][ T9808] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 438.338317][ T9804] lo speed is unknown, defaulting to 1000 [ 438.339660][ T9804] wg1 speed is unknown, defaulting to 1000 [ 438.422266][ T9813] loop6: detected capacity change from 0 to 512 [ 438.576032][ T9813] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 438.879737][ T9832] lo speed is unknown, defaulting to 1000 [ 438.882329][ T9832] wg1 speed is unknown, defaulting to 1000 [ 439.693731][ T9841] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 439.706049][ T9841] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 439.707725][ T9841] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 439.721712][ T9841] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 439.729179][ T9841] device geneve2 entered promiscuous mode [ 439.734364][ T8963] EXT4-fs (loop6): unmounting filesystem. [ 440.191284][ T9851] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 440.194955][ T9851] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 440.197939][ T9851] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 440.199382][ T9851] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 440.643475][ T4336] Bluetooth: hci3: unknown advertising packet type: 0x75 [ 440.643508][ T4336] Bluetooth: hci3: unknown advertising packet type: 0x6c [ 440.645048][ T4336] Bluetooth: hci3: Malformed LE Event: 0x02 [ 441.699068][ T9874] lo speed is unknown, defaulting to 1000 [ 441.701272][ T9874] wg1 speed is unknown, defaulting to 1000 [ 443.169691][ T9906] netlink: 'syz.3.1239': attribute type 16 has an invalid length. [ 443.171157][ T9906] netlink: 'syz.3.1239': attribute type 17 has an invalid length. [ 443.172817][ T9906] netlink: 'syz.3.1239': attribute type 27 has an invalid length. [ 443.771625][ T4336] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 443.774234][ T4336] CPU: 1 PID: 4336 Comm: kworker/u5:7 Not tainted syzkaller #0 [ 443.775381][ T4336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 443.776821][ T4336] Workqueue: hci3 hci_rx_work [ 443.777535][ T4336] Call trace: [ 443.778020][ T4336] dump_backtrace+0x1c0/0x1ec [ 443.778740][ T4336] show_stack+0x2c/0x3c [ 443.779365][ T4336] __dump_stack+0x30/0x40 [ 443.780042][ T4336] dump_stack_lvl+0xf4/0x15c [ 443.780742][ T4336] dump_stack+0x1c/0x5c [ 443.781350][ T4336] sysfs_create_dir_ns+0x244/0x264 [ 443.782121][ T4336] kobject_add_internal+0x598/0xb08 [ 443.782891][ T4336] kobject_add+0x140/0x20c [ 443.783602][ T4336] device_add+0x3f0/0xf90 [ 443.784266][ T4336] hci_conn_add_sysfs+0xbc/0x1c8 [ 443.785047][ T4336] le_conn_complete_evt+0xcc8/0x1244 [ 443.785877][ T4336] hci_le_conn_complete_evt+0x114/0x3f4 [ 443.786732][ T4336] hci_le_meta_evt+0x2c0/0x4a0 [ 443.787473][ T4336] hci_event_packet+0x6b8/0xf18 [ 443.788330][ T4336] hci_rx_work+0x328/0xa84 [ 443.789088][ T4336] process_one_work+0x7f8/0x13a4 [ 443.789951][ T4336] worker_thread+0x8c4/0xfec [ 443.790720][ T4336] kthread+0x250/0x2d8 [ 443.791403][ T4336] ret_from_fork+0x10/0x20 [ 443.795598][ T4336] kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 443.799913][ T4336] Bluetooth: hci3: failed to register connection device [ 443.843119][ T9921] netlink: 92 bytes leftover after parsing attributes in process `syz.6.1242'. [ 444.066754][ T9925] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 444.070694][ T9925] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 444.073623][ T9925] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 444.075186][ T9925] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 445.046263][ T9943] lo speed is unknown, defaulting to 1000 [ 445.048822][ T9943] wg1 speed is unknown, defaulting to 1000 [ 445.383728][ T4336] Bluetooth: hci3: unknown advertising packet type: 0x75 [ 445.383754][ T4336] Bluetooth: hci3: unknown advertising packet type: 0x6c [ 445.386615][ T4336] Bluetooth: hci3: Malformed LE Event: 0x02 [ 446.035230][ T4336] Bluetooth: hci3: command 0x2016 tx timeout [ 447.841554][T10016] lo speed is unknown, defaulting to 1000 [ 447.843065][T10016] wg1 speed is unknown, defaulting to 1000 [ 449.848921][T10049] loop6: detected capacity change from 0 to 256 [ 449.939134][T10053] lo speed is unknown, defaulting to 1000 [ 449.941364][T10053] wg1 speed is unknown, defaulting to 1000 [ 450.043952][T10049] FAT-fs (loop6): Directory bread(block 64) failed [ 450.047489][T10049] FAT-fs (loop6): Directory bread(block 65) failed [ 450.054320][T10049] FAT-fs (loop6): Directory bread(block 66) failed [ 450.055652][T10049] FAT-fs (loop6): Directory bread(block 67) failed [ 450.056825][T10049] FAT-fs (loop6): Directory bread(block 68) failed [ 450.058174][T10049] FAT-fs (loop6): Directory bread(block 69) failed [ 450.059374][T10049] FAT-fs (loop6): Directory bread(block 70) failed [ 450.060623][T10049] FAT-fs (loop6): Directory bread(block 71) failed [ 450.061735][T10049] FAT-fs (loop6): Directory bread(block 72) failed [ 450.062979][T10049] FAT-fs (loop6): Directory bread(block 73) failed [ 452.506131][T10100] loop6: detected capacity change from 0 to 164 [ 453.088736][T10110] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 453.090668][T10110] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 453.092340][T10110] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 453.093685][T10110] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 453.102832][T10108] lo speed is unknown, defaulting to 1000 [ 453.104197][T10108] wg1 speed is unknown, defaulting to 1000 [ 453.338559][T10129] netlink: 'syz.1.1316': attribute type 17 has an invalid length. [ 453.571728][T10129] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1316'. [ 453.684430][T10137] lo speed is unknown, defaulting to 1000 [ 453.686595][T10137] wg1 speed is unknown, defaulting to 1000 [ 454.817421][T10162] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1327'. [ 455.040849][T10174] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1332'. [ 455.258781][ T4326] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 455.260674][ T4326] CPU: 0 PID: 4326 Comm: kworker/u5:3 Not tainted syzkaller #0 [ 455.261979][ T4326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 455.263647][ T4326] Workqueue: hci3 hci_rx_work [ 455.264481][ T4326] Call trace: [ 455.265046][ T4326] dump_backtrace+0x1c0/0x1ec [ 455.265837][ T4326] show_stack+0x2c/0x3c [ 455.266545][ T4326] __dump_stack+0x30/0x40 [ 455.267231][ T4326] dump_stack_lvl+0xf4/0x15c [ 455.268023][ T4326] dump_stack+0x1c/0x5c [ 455.268783][ T4326] sysfs_create_dir_ns+0x244/0x264 [ 455.269667][ T4326] kobject_add_internal+0x598/0xb08 [ 455.270636][ T4326] kobject_add+0x140/0x20c [ 455.271366][ T4326] device_add+0x3f0/0xf90 [ 455.272118][ T4326] hci_conn_add_sysfs+0xbc/0x1c8 [ 455.272963][ T4326] le_conn_complete_evt+0xcc8/0x1244 [ 455.273796][ T4326] hci_le_conn_complete_evt+0x114/0x3f4 [ 455.274751][ T4326] hci_le_meta_evt+0x2c0/0x4a0 [ 455.275630][ T4326] hci_event_packet+0x6b8/0xf18 [ 455.276459][ T4326] hci_rx_work+0x328/0xa84 [ 455.277225][ T4326] process_one_work+0x7f8/0x13a4 [ 455.278034][ T4326] worker_thread+0x8c4/0xfec [ 455.278823][ T4326] kthread+0x250/0x2d8 [ 455.279529][ T4326] ret_from_fork+0x10/0x20 [ 455.284699][ T4326] kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 455.287546][ T4326] Bluetooth: hci3: failed to register connection device [ 455.464385][ T4326] Bluetooth: hci1: unknown advertising packet type: 0x75 [ 455.464409][ T4326] Bluetooth: hci1: unknown advertising packet type: 0x6c [ 455.466878][ T4326] Bluetooth: hci1: Malformed LE Event: 0x02 [ 455.835294][T10190] lo speed is unknown, defaulting to 1000 [ 455.837468][T10190] wg1 speed is unknown, defaulting to 1000 [ 456.662804][T10191] loop6: detected capacity change from 0 to 64 [ 457.195561][T10208] loop6: detected capacity change from 0 to 2048 [ 457.208189][T10208] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 1024) [ 457.227770][T10208] syz.6.1341: attempt to access beyond end of device [ 457.227770][T10208] loop6: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 457.231101][T10209] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 457.261925][T10208] syz.6.1341: attempt to access beyond end of device [ 457.261925][T10208] loop6: rw=0, sector=33554430, nr_sectors = 2 limit=2048 [ 457.270498][T10208] NILFS (loop6): I/O error reading meta-data file (ino=6, block-offset=3) [ 457.272128][T10208] NILFS (loop6): error -5 reading inode: ino=12 [ 457.503503][ T4326] Bluetooth: hci3: command 0x2016 tx timeout [ 457.904805][T10222] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 457.906372][T10222] IPv6: NLM_F_CREATE should be set when creating new route [ 457.907681][T10222] IPv6: NLM_F_CREATE should be set when creating new route [ 457.991427][T10223] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 457.995699][T10223] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 457.999009][T10223] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 458.000490][T10223] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 458.328247][T10227] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1349'. [ 458.395744][T10229] loop6: detected capacity change from 0 to 512 [ 458.415176][T10231] device bridge1 entered promiscuous mode [ 458.446433][T10229] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 458.693060][T10244] lo speed is unknown, defaulting to 1000 [ 458.694309][T10244] wg1 speed is unknown, defaulting to 1000 [ 459.547269][T10253] lo speed is unknown, defaulting to 1000 [ 459.548519][T10253] wg1 speed is unknown, defaulting to 1000 [ 460.499775][ T8963] EXT4-fs (loop6): unmounting filesystem. [ 460.550592][T10270] rdma_rxe: rxe_register_device failed with error -23 [ 460.551925][T10270] rdma_rxe: failed to add vxcan1 [ 461.409700][T10299] lo speed is unknown, defaulting to 1000 [ 461.420918][T10299] wg1 speed is unknown, defaulting to 1000 [ 461.597652][T10300] lo speed is unknown, defaulting to 1000 [ 461.598933][T10300] wg1 speed is unknown, defaulting to 1000 [ 464.946598][ T2061] ieee802154 phy0 wpan0: encryption failed: -22 [ 464.947766][ T2061] ieee802154 phy1 wpan1: encryption failed: -22 [ 465.155508][T10337] loop6: detected capacity change from 0 to 4096 [ 465.203615][T10337] ntfs3: loop6: Different NTFS' sector size (2048) and media sector size (512) [ 465.836702][T10355] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1390'. [ 466.837527][ T4336] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 466.839326][ T4336] CPU: 0 PID: 4336 Comm: kworker/u5:7 Not tainted syzkaller #0 [ 466.840629][ T4336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 466.842283][ T4336] Workqueue: hci3 hci_rx_work [ 466.843128][ T4336] Call trace: [ 466.843686][ T4336] dump_backtrace+0x1c0/0x1ec [ 466.844428][ T4336] show_stack+0x2c/0x3c [ 466.845125][ T4336] __dump_stack+0x30/0x40 [ 466.845875][ T4336] dump_stack_lvl+0xf4/0x15c [ 466.846704][ T4336] dump_stack+0x1c/0x5c [ 466.847385][ T4336] sysfs_create_dir_ns+0x244/0x264 [ 466.848276][ T4336] kobject_add_internal+0x598/0xb08 [ 466.849146][ T4336] kobject_add+0x140/0x20c [ 466.849864][ T4336] device_add+0x3f0/0xf90 [ 466.850594][ T4336] hci_conn_add_sysfs+0xbc/0x1c8 [ 466.851416][ T4336] le_conn_complete_evt+0xcc8/0x1244 [ 466.852284][ T4336] hci_le_conn_complete_evt+0x114/0x3f4 [ 466.853175][ T4336] hci_le_meta_evt+0x2c0/0x4a0 [ 466.854012][ T4336] hci_event_packet+0x6b8/0xf18 [ 466.854835][ T4336] hci_rx_work+0x328/0xa84 [ 466.855569][ T4336] process_one_work+0x7f8/0x13a4 [ 466.856469][ T4336] worker_thread+0x8c4/0xfec [ 466.857325][ T4336] kthread+0x250/0x2d8 [ 466.858039][ T4336] ret_from_fork+0x10/0x20 [ 466.859228][ T4336] kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 466.861642][ T4336] Bluetooth: hci3: failed to register connection device [ 467.062224][T10384] MPI: mpi too large (124808 bits) [ 467.472009][ T4336] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 467.473900][ T4336] CPU: 0 PID: 4336 Comm: kworker/u5:7 Not tainted syzkaller #0 [ 467.475086][ T4336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 467.476866][ T4336] Workqueue: hci1 hci_rx_work [ 467.477719][ T4336] Call trace: [ 467.478310][ T4336] dump_backtrace+0x1c0/0x1ec [ 467.479199][ T4336] show_stack+0x2c/0x3c [ 467.479914][ T4336] __dump_stack+0x30/0x40 [ 467.480705][ T4336] dump_stack_lvl+0xf4/0x15c [ 467.481535][ T4336] dump_stack+0x1c/0x5c [ 467.482261][ T4336] sysfs_create_dir_ns+0x244/0x264 [ 467.483107][ T4336] kobject_add_internal+0x598/0xb08 [ 467.483973][ T4336] kobject_add+0x140/0x20c [ 467.484688][ T4336] device_add+0x3f0/0xf90 [ 467.485392][ T4336] hci_conn_add_sysfs+0xbc/0x1c8 [ 467.486218][ T4336] le_conn_complete_evt+0xcc8/0x1244 [ 467.487143][ T4336] hci_le_conn_complete_evt+0x114/0x3f4 [ 467.488030][ T4336] hci_le_meta_evt+0x2c0/0x4a0 [ 467.488852][ T4336] hci_event_packet+0x6b8/0xf18 [ 467.489665][ T4336] hci_rx_work+0x328/0xa84 [ 467.490382][ T4336] process_one_work+0x7f8/0x13a4 [ 467.491197][ T4336] worker_thread+0x8c4/0xfec [ 467.492061][ T4336] kthread+0x250/0x2d8 [ 467.492747][ T4336] ret_from_fork+0x10/0x20 [ 467.495826][ T4336] kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 467.498259][ T4336] Bluetooth: hci1: failed to register connection device [ 467.539499][T10394] loop6: detected capacity change from 0 to 128 [ 468.728075][ T28] INFO: task jfsCommit:92 blocked for more than 143 seconds. [ 468.744568][ T28] Not tainted syzkaller #0 [ 468.754887][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 468.772327][ T28] task:jfsCommit state:D stack:0 pid:92 ppid:2 flags:0x00000008 [ 468.930494][ T28] Call trace: [ 468.933411][ T28] __switch_to+0x2f4/0x550 [ 468.934194][ T28] __schedule+0xdd0/0x1b0c [ 468.935002][ T28] schedule+0xc4/0x170 [ 468.938425][ T28] io_schedule+0x84/0x154 [ 468.939196][ T28] __lock_metapage+0x180/0x418 [ 468.941242][ T28] __get_metapage+0x900/0xfac [ 468.942063][ T28] diIAGRead+0xe4/0x14c [ 468.942893][ T28] diFree+0x6f4/0x1e00 [ 468.943561][ T28] jfs_evict_inode+0x2c4/0x3e4 [ 468.944538][ T28] evict+0x3e0/0x828 [ 468.945222][ T28] iput+0x754/0x7e4 [ 468.945952][ T28] txUpdateMap+0x674/0x794 [ 468.951806][ T28] jfs_lazycommit+0x354/0x908 [ 468.952791][ T28] kthread+0x250/0x2d8 [ 468.953589][ T28] ret_from_fork+0x10/0x20 [ 468.954495][ T28] [ 468.954495][ T28] Showing all locks held in the system: [ 468.955968][ T28] 1 lock held by rcu_tasks_kthre/12: [ 468.956927][ T28] #0: ffff8000153f7c30 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x40/0xbb4 [ 468.959017][ T28] 1 lock held by rcu_tasks_trace/13: [ 468.959960][ T28] #0: ffff8000153f8450 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x40/0xbb4 [ 468.962020][ T28] 1 lock held by khungtaskd/28: [ 468.962838][ T28] #0: ffff8000153f72c0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0xc/0x44 [ 468.964514][ T28] 2 locks held by jfsCommit/92: [ 468.965355][ T28] #0: ffff0000fb2f8920 (&(imap->im_aglock[index])){+.+.}-{3:3}, at: diFree+0x244/0x1e00 [ 468.967125][ T28] #1: ffff0000e2337038 (&jfs_ip->rdwrlock/1){++++}-{3:3}, at: diFree+0x258/0x1e00 [ 468.969202][ T28] 2 locks held by getty/4079: [ 468.969958][ T28] #0: ffff0000d7045098 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3c/0x4c [ 468.972067][ T28] #1: ffff80001cfe62f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x2ec/0xfa0 [ 468.973858][ T28] 2 locks held by syz-executor/4332: [ 468.974729][ T28] #0: ffff0000f1ea00e0 (&type->s_umount_key#57){++++}-{3:3}, at: deactivate_super+0xdc/0x104 [ 468.976492][ T28] #1: ffff8000157df1e8 (jfs_log_mutex){+.+.}-{3:3}, at: lmLogClose+0xb0/0x4c8 [ 468.980811][ T28] 3 locks held by kworker/u4:14/4712: [ 468.981852][ T28] #0: ffff00019f545198 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x2b8/0x1b0c [ 468.983497][ T28] #1: ffff00019f531bc8 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x2ec/0x608 [ 468.985548][ T28] #2: ffff00019f532798 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x11c/0x224 [ 468.987257][ T28] 1 lock held by syz.0.924/8739: [ 468.988066][ T28] #0: ffff0000f1ea00e0 (&type->s_umount_key#57){++++}-{3:3}, at: iterate_supers+0xa8/0x1d0 [ 468.990254][ T28] 1 lock held by syz.0.924/8741: [ 468.991137][ T28] #0: ffff0000f1ea00e0 (&type->s_umount_key#57){++++}-{3:3}, at: iterate_supers+0xa8/0x1d0 [ 468.992846][ T28] 1 lock held by syz.0.924/8742: [ 468.993698][ T28] #0: ffff0000f1ea00e0 (&type->s_umount_key#57){++++}-{3:3}, at: iterate_supers+0xa8/0x1d0 [ 468.995573][ T28] 1 lock held by syz.0.924/8748: [ 468.996444][ T28] #0: ffff0000f1ea00e0 (&type->s_umount_key#57){++++}-{3:3}, at: iterate_supers+0xa8/0x1d0 [ 468.998263][ T28] 1 lock held by syz.0.924/8749: [ 468.999031][ T28] #0: ffff0000f1ea00e0 (&type->s_umount_key#57){++++}-{3:3}, at: iterate_supers+0xa8/0x1d0 [ 469.002596][ T28] 1 lock held by syz.0.924/8753: [ 469.003392][ T28] #0: ffff0000f1ea00e0 (&type->s_umount_key#57){++++}-{3:3}, at: iterate_supers+0xa8/0x1d0 [ 469.005241][ T28] 1 lock held by syz.0.924/8754: [ 469.006020][ T28] #0: ffff0000f1ea00e0 (&type->s_umount_key#57){++++}-{3:3}, at: iterate_supers+0xa8/0x1d0 [ 469.007915][ T28] 1 lock held by syz.0.924/8761: [ 469.008660][ T28] #0: ffff0000f1ea00e0 (&type->s_umount_key#57){++++}-{3:3}, at: iterate_supers+0xa8/0x1d0 [ 469.010655][ T28] [ 469.011020][ T28] ============================================= [ 469.011020][ T28] [ 469.012422][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 469.013565][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted syzkaller #0 [ 469.014886][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 469.016623][ T28] Call trace: [ 469.017175][ T28] dump_backtrace+0x1c0/0x1ec [ 469.017942][ T28] show_stack+0x2c/0x3c [ 469.018634][ T28] __dump_stack+0x30/0x40 [ 469.019346][ T28] dump_stack_lvl+0xf4/0x15c [ 469.020124][ T28] dump_stack+0x1c/0x5c [ 469.020798][ T28] panic+0x2f8/0x7ac [ 469.021437][ T28] hung_task_panic+0x0/0x2c [ 469.022189][ T28] kthread+0x250/0x2d8 [ 469.022883][ T28] ret_from_fork+0x10/0x20 [ 469.023650][ T28] SMP: stopping secondary CPUs [ 469.024468][ T28] Kernel Offset: disabled [ 469.025211][ T28] CPU features: 0x080000,000f0097,a65bfea7 [ 469.026153][ T28] Memory Limit: none [ 469.347762][ T28] Rebooting in 86400 seconds..