last executing test programs: 55.671947271s ago: executing program 4 (id=5037): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r1, &(0x7f0000002380)=""/102392, 0x18ff8) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f000001b380)={0x2, 0x4e20, @multicast2}, 0x10) connect$inet(r0, &(0x7f000001b400)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$inet(r0, &(0x7f000001b480)={0x0, 0x0, &(0x7f000001b4c0)=[{&(0x7f000001b500)=' ', 0x1}], 0x1}, 0x0) 54.089937254s ago: executing program 4 (id=5043): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, 0x62) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000300)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f00000003c0), 0x171}}], 0x400000000000172, 0x4001c00) 53.16763225s ago: executing program 4 (id=5050): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000000000)={0x3, {{0xa, 0x4e22, 0x0, @mcast2, 0x9}}, {{0xa, 0x4e23, 0x6df, @empty, 0x5}}}, 0x108) getsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xf9) 49.790117439s ago: executing program 1 (id=5064): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000140)=0x8) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000380)={0x0, 0x0}) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000380), 0x318, 0x0) recvmmsg(r1, &(0x7f00000003c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000400)=0x2) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) r4 = dup(0xffffffffffffffff) setsockopt$sock_int(r4, 0x1, 0x7, &(0x7f0000001440)=0xfff, 0x4) r5 = open(&(0x7f0000001480)='./file0\x00', 0x1298c2, 0x10) ftruncate(r5, 0x200004) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="8800000000010104000000000000000002000000240001801400018008000100ac1e000108000200ac1414000c0002800500010000000000240002800c00028005000100000000001400018008000100ac1e01010800020000000000080007400000000024000e801400018008000100ac14142a08000200ac141438"], 0x88}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x2, 0x16, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f00000013c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000001400), 0x8}, 0x94) 49.528360316s ago: executing program 4 (id=5065): socket$igmp(0x2, 0x3, 0x2) mkdir(&(0x7f0000003e40)='./file0\x00', 0x100) mount$bind(&(0x7f0000001b40)='.\x00', &(0x7f0000001b80)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(0x0, &(0x7f0000001bc0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000001c00)='./file0/../file0\x00', &(0x7f0000001c40)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000001c80)='./file0/../file0\x00', &(0x7f0000001cc0)='./file0/file0\x00', 0x0, 0x18d883, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000001d00)='.\x00', 0x89901) move_mount(r0, &(0x7f0000001d40)='.\x00', 0xffffffffffffff9c, &(0x7f0000001d80)='./file0/../file0\x00', 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001dc0)='mountinfo\x00') read$FUSE(r1, &(0x7f0000001e00)={0x2020}, 0x2020) 48.756116176s ago: executing program 4 (id=5069): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f0000000100)={0xbe, 0x0, 0x1}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000280)={{0xeeee8000, 0x25d800, 0xc, 0x6, 0x4, 0xa, 0x3, 0xa, 0x0, 0x1, 0x3, 0x3}, {0xa000, 0x1000, 0xe, 0x13, 0x1, 0x8, 0x3, 0x8, 0x0, 0x46, 0x6}, {0x1, 0x315a4c100da1da58, 0x4, 0xf1, 0x5, 0xff, 0xc3, 0x6, 0x3, 0x6, 0x4c, 0x3}, {0x3000, 0x4000, 0x1a, 0xc, 0x7f, 0x6, 0x8, 0x7f, 0x9, 0x2, 0xf, 0x6}, {0x9000, 0x8000000, 0x8, 0xd, 0x59, 0x2d, 0x5, 0xc, 0xfc, 0x0, 0x3, 0xe5}, {0x2, 0x8092000, 0x8, 0xbd, 0x6, 0x7, 0x12, 0x1, 0xbf, 0x18, 0x2, 0x4}, {0x1, 0x1, 0xc, 0x9, 0x0, 0xf, 0x10, 0x3, 0x4, 0x0, 0x80, 0x9}, {0x26000, 0xffff, 0x10, 0x4, 0x3, 0x3, 0x0, 0xf9, 0x1, 0xfc, 0x0, 0xfe}, {0x4, 0xedd8}, {0xffff1000, 0x17}, 0x4004000f, 0x0, 0xd000, 0x100, 0x100000002, 0x0, 0xdddd1000, [0x5, 0x3, 0x4000000000000009, 0x7]}) syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, &(0x7f00000002c0)=[@code={0xa, 0x5d, {"b8010000000f01c166bad104ec0fdb4d70b99f030000b8feffffffba000000000f300f20578f292098953200000066baf80cb8e68af88def66bafc0c66ed2666420fc737ff4d49c4c155f3e9"}}], 0x5d}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 48.392196064s ago: executing program 4 (id=5072): timer_create(0x3, 0x0, &(0x7f0000000100)=0x0) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) timer_gettime(r0, 0x0) 48.226509511s ago: executing program 32 (id=5072): timer_create(0x3, 0x0, &(0x7f0000000100)=0x0) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) timer_gettime(r0, 0x0) 46.925437786s ago: executing program 1 (id=5076): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000000000)={0x3, {{0xa, 0x4e22, 0x0, @mcast2, 0x9}}, {{0xa, 0x4e23, 0x6df, @empty, 0x5}}}, 0x108) getsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xf9) 46.624679597s ago: executing program 1 (id=5077): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x2d7dc0c}]}}}]}, 0x40}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r0], 0x4c}}, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) connect$inet6(r2, &(0x7f00000003c0)={0xa, 0x4e24, 0x3000000, @mcast2, 0x4}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x18, 0x4, 0x44, 0x0, 0x1, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x8, 0x1c, 0x0, &(0x7f0000000500)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) write(r2, &(0x7f00000000c0)="8f2a0a65bd8c3a2b0304000e0580a7b6070d63e286a5cefe", 0x5ac) 45.686335524s ago: executing program 1 (id=5080): socket$igmp(0x2, 0x3, 0x2) mkdir(&(0x7f0000003e40)='./file0\x00', 0x100) mount$bind(&(0x7f0000001b40)='.\x00', &(0x7f0000001b80)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(0x0, &(0x7f0000001bc0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000001c00)='./file0/../file0\x00', &(0x7f0000001c40)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000001c80)='./file0/../file0\x00', &(0x7f0000001cc0)='./file0/file0\x00', 0x0, 0x18d883, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000001d00)='.\x00', 0x89901) move_mount(r0, &(0x7f0000001d40)='.\x00', 0xffffffffffffff9c, &(0x7f0000001d80)='./file0/../file0\x00', 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001dc0)='mountinfo\x00') read$FUSE(r1, &(0x7f0000001e00)={0x2020}, 0x2020) 45.52490199s ago: executing program 1 (id=5083): syz_io_uring_setup(0x2202, &(0x7f0000000400)={0x0, 0xba32, 0x1, 0x2, 0xb3}, 0x0, 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x6004, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000440)={'\x00', 0x9, 0x3, 0x5, 0x1000000003, 0x40000000008}) 42.939939158s ago: executing program 1 (id=5090): gettid() mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e40)={0x1f, 0x1, 0x0, 0x0, 0x545, 0x0, 0x0, 0x40f00, 0x34}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x1, 0xc, &(0x7f0000001000)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x100000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$alg(0x26, 0x5, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[0x0, 0xffff], [0x0, 0xffff], 0x0, 0x2, 0x2}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x578}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) r3 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r3, &(0x7f00000008c0)={0xa, 0x4e22, 0x0, @mcast2, 0x3}, 0x1c) 42.638132249s ago: executing program 33 (id=5090): gettid() mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e40)={0x1f, 0x1, 0x0, 0x0, 0x545, 0x0, 0x0, 0x40f00, 0x34}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x1, 0xc, &(0x7f0000001000)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x100000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$alg(0x26, 0x5, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[0x0, 0xffff], [0x0, 0xffff], 0x0, 0x2, 0x2}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x578}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) r3 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r3, &(0x7f00000008c0)={0xa, 0x4e22, 0x0, @mcast2, 0x3}, 0x1c) 42.288223195s ago: executing program 2 (id=5099): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x7ff, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x10, 0x10, &(0x7f0000000600)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x3801}, {0x2c}}, [@generic={0x1d, 0x0, 0x6, 0xfffa, 0x2}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000680)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94) 37.466431784s ago: executing program 2 (id=5109): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r1, &(0x7f0000002380)=""/102392, 0x18ff8) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f000001b380)={0x2, 0x4e20, @multicast2}, 0x10) connect$inet(r0, &(0x7f000001b400)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$inet(r0, &(0x7f000001b480)={0x0, 0x0, &(0x7f000001b4c0)=[{&(0x7f000001b500)=' ', 0x1}], 0x1}, 0x0) 35.896151307s ago: executing program 6 (id=5101): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x4, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x4}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x8000}}}, @TCA_TBF_PTAB={0x404, 0x3, [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xfffffffd, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}]}}]}, 0x45c}}, 0x0) r2 = msgget(0x0, 0x1e8) msgsnd(r2, 0x0, 0x82, 0x0) 34.21670086s ago: executing program 2 (id=5105): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) lchown(0x0, 0x0, 0xffffffffffffffff) 33.744206829s ago: executing program 2 (id=5106): socket$igmp(0x2, 0x3, 0x2) mkdir(&(0x7f0000003e40)='./file0\x00', 0x100) mount$bind(&(0x7f0000001b40)='.\x00', &(0x7f0000001b80)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(0x0, &(0x7f0000001bc0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000001c00)='./file0/../file0\x00', &(0x7f0000001c40)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000001c80)='./file0/../file0\x00', &(0x7f0000001cc0)='./file0/file0\x00', 0x0, 0x18d883, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000001d00)='.\x00', 0x89901) move_mount(r0, &(0x7f0000001d40)='.\x00', 0xffffffffffffff9c, &(0x7f0000001d80)='./file0/../file0\x00', 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001dc0)='mountinfo\x00') read$FUSE(r1, &(0x7f0000001e00)={0x2020}, 0x2020) 33.696959324s ago: executing program 2 (id=5107): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x17, 0x3, &(0x7f0000000600)=@framed, &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) r1 = fsopen(&(0x7f0000000680)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000006c0)={@cgroup=r2, r0, 0x12, 0x2}, 0x10) 32.787539598s ago: executing program 6 (id=5115): r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000140)=0xffffffc3, 0x4) sendmmsg(r0, &(0x7f0000000180)=[{{&(0x7f00000001c0)=@l2tp6={0xa, 0x0, 0x7080000, @mcast2, 0x200, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="080100000000000029"], 0x108}}], 0x1, 0xc040) 32.732980794s ago: executing program 6 (id=5116): r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e24, 0x5, @initdev={0xfe, 0x88, '\x00', 0xfd, 0x0}, 0x2}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000d00)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000d40)=0x7) r1 = getpid() ptrace$getenv(0x4201, 0x0, 0x8000000000000001, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000dc0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000e40)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000ec0), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000f00), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000f40)=0x6) r4 = socket$inet(0x2, 0x1, 0x0) bind$inet(r4, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000006d40)=[{{&(0x7f00000003c0)={0x2, 0x4e23, @local}, 0x10, &(0x7f0000002400)=[{&(0x7f0000000500)="1fd4787488b1f24058b8199d33a8178ba1174e104ae1b3abb3faffaeb1a08aaeb8993c5fefff92daa06a331e595157761f72d282866c198c75e5f4c1f114555440e2c923df89b8a29cf82b51cddfc9f6855b9358722868848277b2ffaa380219e2103ad94a5c527d277624d6e0957baa3bbba59334916fb41475e5e891320186c1ee0e2a48e51a93311a4d776025dafd266c7cff569c60e008e76b2c734411ad8c57", 0xa2}, {&(0x7f00000005c0)="a2e1f75a5acb51fba68f72d473a1438b2fa6aee9bc10efc70b7f16e654f340c9fd9b40fcd7c2f55583cf7a2ca7be4c18b181cd1ccf007f5650ff7e01c64ccd85f8d4ed226e4ca0399034a0a45619339ff79f9c8ced0dfced5782fa0ce482417b8e9343ed19679dda57256a0078754e47388b9b107af79c32c54fc29793a2d05dd1f732e60ede", 0x86}, {&(0x7f0000000000)="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"/417, 0x1a1}, {&(0x7f0000001040)="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", 0x2bc}], 0x4, &(0x7f0000000840)=[@ip_retopts={{0x30, 0x0, 0x7, {[@noop, @timestamp_addr={0x44, 0x1c, 0xdf, 0x1, 0x8, [{@rand_addr=0x64010102, 0x3}, {@local, 0x9}, {@remote, 0x7}]}]}}}], 0x30}}], 0x1, 0x0) 32.660130041s ago: executing program 2 (id=5117): r0 = gettid() rt_sigqueueinfo(r0, 0x22, &(0x7f0000000080)={0x1b, 0x9, 0x80}) 31.792832591s ago: executing program 34 (id=5117): r0 = gettid() rt_sigqueueinfo(r0, 0x22, &(0x7f0000000080)={0x1b, 0x9, 0x80}) 31.773450323s ago: executing program 6 (id=5120): socket$igmp(0x2, 0x3, 0x2) mkdir(&(0x7f0000003e40)='./file0\x00', 0x100) mount$bind(&(0x7f0000001b40)='.\x00', &(0x7f0000001b80)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(0x0, &(0x7f0000001bc0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000001c00)='./file0/../file0\x00', &(0x7f0000001c40)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000001c80)='./file0/../file0\x00', &(0x7f0000001cc0)='./file0/file0\x00', 0x0, 0x18d883, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000001d00)='.\x00', 0x89901) move_mount(r0, &(0x7f0000001d40)='.\x00', 0xffffffffffffff9c, &(0x7f0000001d80)='./file0/../file0\x00', 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001dc0)='mountinfo\x00') read$FUSE(r1, &(0x7f0000001e00)={0x2020}, 0x2020) 31.603082361s ago: executing program 6 (id=5121): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x6) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000140)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000180)={0xa0000001}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, 0xffffffffffffffff, 0x1000) epoll_pwait(r3, &(0x7f00000001c0)=[{}], 0x1, 0xff, 0x0, 0x0) 29.833254994s ago: executing program 6 (id=5132): unshare(0x6020400) r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e21, 0x5, @mcast2, 0x9}, 0x1c) 29.712982366s ago: executing program 35 (id=5132): unshare(0x6020400) r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e21, 0x5, @mcast2, 0x9}, 0x1c) 6.742934722s ago: executing program 3 (id=5215): mknodat$md(0xffffffffffffff9c, &(0x7f0000000000)='./md0\x00', 0x6180, 0x0) r0 = openat$md_node(0xffffffffffffff9c, &(0x7f0000000080)='./md0\x00', 0x2, 0x0) timer_create(0x1, &(0x7f00000010c0)={0x0, 0x21, 0x4}, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000001140)={0x0, 0x0, 0x3ed4, 0x5}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$GET_BITMAP_FILE(r0, 0x90000915, &(0x7f00000000c0)) 5.778034432s ago: executing program 0 (id=5227): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r1, &(0x7f0000002380)=""/102392, 0x18ff8) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f000001b380)={0x2, 0x4e20, @multicast2}, 0x10) connect$inet(r0, &(0x7f000001b400)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$inet(r0, &(0x7f000001b480)={0x0, 0x0, &(0x7f000001b4c0)=[{&(0x7f000001b500)=' ', 0x1}], 0x1}, 0x0) 4.911040872s ago: executing program 3 (id=5228): r0 = syz_create_resource$futex(&(0x7f0000000280)=0x1) futex(r0, 0xd, 0x2, 0x0, 0x0, 0x2) futex(r0, 0x5, 0x2, 0x0, r0, 0x800000) futex(r0, 0xd, 0x2, 0x0, 0x0, 0x2) 4.842236889s ago: executing program 0 (id=5230): r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x8, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000d00)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000d40)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000d80)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000dc0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000e40), 0x651, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x10, @loopback, 0x1}, 0x1c) recvmmsg(r2, &(0x7f0000000e80), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000ec0)=0x6) bpf$MAP_CREATE(0x0, &(0x7f0000001280)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3}, 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001340)={0xffffffffffffffff, 0x0}, 0x20) mremap(&(0x7f0000532000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000190000/0x1000)=nil) mlock(&(0x7f0000626000/0x5000)=nil, 0x5000) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_vhci(&(0x7f0000001000)=ANY=[@ANYBLOB="043e1f0a00c9000201"], 0x22) landlock_create_ruleset(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioprio_set$pid(0x1, r1, 0x6000) 3.96580579s ago: executing program 3 (id=5238): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000003080)={0x2, 0x4e21, @local}, 0x47) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000030c0)=0x40, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000003100)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000003140)=0x2, 0x4) connect$inet(r0, &(0x7f0000003180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000031c0)=[@mss, @timestamp, @window={0x3, 0x62f3, 0x1}, @mss, @sack_perm, @mss={0x2, 0x6}, @timestamp, @sack_perm], 0x8) sendmsg(r0, &(0x7f0000003200)={0x0, 0x0, &(0x7f0000003240)=[{&(0x7f0000003280)="29966a0967c22af40cad573dc960cbd2e81b9cce935222ced97c0905153288e3afb00cca2f42f1e8ea01eb6c942de24afb", 0x31}], 0x1}, 0x4000800) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000032c0), 0x4) sendto$inet(r0, &(0x7f0000003300)='<', 0xfdef, 0x805, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f00000090c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000000) 3.327306186s ago: executing program 7 (id=5240): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r1, &(0x7f0000002380)=""/102392, 0x18ff8) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f000001b380)={0x2, 0x4e20, @multicast2}, 0x10) connect$inet(r0, &(0x7f000001b400)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$inet(r0, &(0x7f000001b480)={0x0, 0x0, &(0x7f000001b4c0)=[{&(0x7f000001b500)=' ', 0x1}], 0x1}, 0x0) 2.132985559s ago: executing program 3 (id=5243): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) r3 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x200008, &(0x7f0000000140)=ANY=[@ANYRES8=r3, @ANYRES32, @ANYRESOCT], 0x1, 0x392, &(0x7f0000000280)="$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") r4 = landlock_create_ruleset(&(0x7f0000000640)={0x100}, 0x18, 0x0) landlock_restrict_self(r4, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000680)='./file1\x00', 0x101842, 0x1) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r5, &(0x7f0000000340), &(0x7f0000000000)=""/3, 0x2}, 0x20) openat$nsim_port_qreset(0xffffffffffffff9c, &(0x7f0000000180)={'/sys/kernel/debug/netdevsim/netdevsim', 0x0, '/ports/', 0x31}, 0x1, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x3, 0xfff1}, {0x4, 0xa}, {0x0, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x4048080}, 0x0) 2.130726069s ago: executing program 7 (id=5244): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x1c, 0x1, 0x4, 0x3, 0x0, 0x0, {0xa, 0x0, 0x210}, [@NFULA_CFG_CMD={0x5, 0x1, 0x3}]}, 0x1c}}, 0x26088888) 2.129837849s ago: executing program 7 (id=5253): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = getpid() fcntl$setownex(r1, 0xf, &(0x7f0000000280)={0x1, r2}) ioctl$int_in(r1, 0x5452, &(0x7f00000002c0)=0x1) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x400c000}, 0x1) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r1) sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x14, r3, 0x200, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x20000090}, 0x41) 2.12491871s ago: executing program 5 (id=5254): r0 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000940)={0x11, 0x800, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) r2 = socket(0x200000000000011, 0x2, 0xd) bind$packet(r2, &(0x7f00000009c0)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) r3 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bind$packet(r3, &(0x7f00000001c0)={0x11, 0x800, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) bind$packet(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x32, &(0x7f00000002c0)={@random="e904a200", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e21, 0x0, 0x10, 0x0, @gue={{0x2, 0x1, 0x1, 0x4}}}}}}}, 0x0) 1.913702932s ago: executing program 3 (id=5245): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa9\xed\xcf\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffe8f, 0x0, 0x0, &(0x7f0000000840), 0x100}, 0x20) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x901800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xa, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="7b87f20f", @ANYRES64=r4], &(0x7f00000000c0)='syzkaller\x00', 0x100000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.913558182s ago: executing program 5 (id=5246): r0 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000040)={0x0, 0x0}) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000100)) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x38d, 0x0, 0x333}]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.903237193s ago: executing program 7 (id=5257): r0 = syz_open_dev$loop(&(0x7f0000000300), 0x7, 0xa882) r1 = syz_open_dev$loop(&(0x7f00000006c0), 0x8f, 0x402c0) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000700)={r0, 0x0, {0x2a12, 0x80010000, 0x0, 0x1, 0x4, 0x0, 0x0, 0xe, 0x1d, "fee8a2ab789f3a47a42fb0286100ac27ca64c6a4b4e00d9683dda1af01000000def712001000000000000000000000000008000000000000000000000000ed00", "2809e8dbe1b22d0000b420a1a93c7540f476779e0117613dd4070000ebff08000000000000711300000000000000000000faffffff05cd00", "e7460000102000000000e44400000020e40000008bd02800", [0xde, 0x8000000000000001]}}) 1.74419056s ago: executing program 7 (id=5247): mknod$loop(&(0x7f0000000640)='./file0\x00', 0xfff, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0), &(0x7f0000000700), 0xfe1c, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780), 0x0, 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f00000007c0)='./file0\x00', 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x2, 0x80805, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x8000000000000001) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1.74268364s ago: executing program 5 (id=5260): openat$kvm(0xffffffffffffff9c, 0x0, 0x2803, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000340)={'syzkaller1\x00', @multicast}) write$tun(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) 1.64249322s ago: executing program 8 (id=5248): r0 = syz_create_resource$futex(&(0x7f0000000280)=0x1) futex(r0, 0xd, 0x2, 0x0, 0x0, 0x2) futex(r0, 0x5, 0x2, 0x0, r0, 0x800000) futex(r0, 0xd, 0x2, 0x0, 0x0, 0x2) 1.64226517s ago: executing program 7 (id=5249): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000140)=0x8) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000380)={0x0, 0x0}) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000380), 0x318, 0x0) recvmmsg(r1, &(0x7f00000003c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000400)=0x2) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) r4 = dup(0xffffffffffffffff) setsockopt$sock_int(r4, 0x1, 0x7, &(0x7f0000001440)=0xfff, 0x4) r5 = open(&(0x7f0000001480)='./file0\x00', 0x1298c2, 0x10) ftruncate(r5, 0x200004) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="8800000000010104000000000000000002000000240001801400018008000100ac1e000108000200ac1414000c0002800500010000000000240002800c00028005000100000000001400018008000100ac1e01010800020000000000080007400000000024000e801400018008000100ac14142a08000200ac1414380c0002"], 0x88}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x2, 0x16, 0x0, &(0x7f00000013c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000001400), 0x8}, 0x94) 1.432184572s ago: executing program 5 (id=5250): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000080)=[@in={0x2, 0x4e21, @private=0xa010102}], 0x10) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x4, @dev={0xfe, 0x80, '\x00', 0x41}, 0x8}, 0x1c) readv(r0, &(0x7f0000000600)=[{&(0x7f0000000180)=""/135, 0x87}], 0x1) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) 1.207643635s ago: executing program 0 (id=5251): syz_kvm_add_vcpu$x86(0x0, &(0x7f00000001c0)={0x0, &(0x7f0000000200)=[@code={0xa, 0x75, {"f326460f019f00200000420f01c5470f01c248b8f61e0000000000000f23c80f21f835080030000f23f8c462bd9791040000000f07c7442400e3420000c744240264000000c7442406000000000f011c24c421e3d040000f009f082c000066660f388000"}}], 0x75}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x1, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000300)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x68ff, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x3, 0x0, 0x6, 0x6, 0x40}, {0xffffffff, 0x8080000, 0x1e, 0x3, 0x2, 0x0, 0x0, 0x0, 0x3, 0xff}, {0x2000, 0x1000, 0xc, 0x0, 0x7, 0xc4, 0x0, 0x0, 0x48, 0x3, 0x0, 0xfc}, {0xeeef0000, 0x33331000, 0x8, 0x0, 0x1, 0x0, 0x9, 0xfc, 0x8, 0xfe, 0x4}, {0x6000, 0xffff1000, 0xe, 0x0, 0x0, 0x4, 0x0, 0xfd, 0x0, 0x3c}, {0x4, 0x0, 0xb, 0x78, 0x5, 0x80, 0x0, 0x0, 0x3, 0xff, 0x1}, {0x0, 0x3333d000, 0xa, 0x4, 0x0, 0x0, 0xa1, 0x20, 0x0, 0x0, 0x8, 0xfc}, {0xfec00000, 0x6000, 0xc, 0x0, 0x0, 0x7, 0x8, 0x40, 0x23, 0x0, 0x0, 0x2}, {0x80a0000, 0x8cc}, {0xdddd1000}, 0xddf8ffdb, 0x0, 0x0, 0x114, 0x0, 0x0, 0x0, [0x80000001, 0x0, 0x7]}) mmap$KVM_VCPU(&(0x7f0000000000/0x1000)=nil, 0x930, 0x0, 0x40032, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.102973356s ago: executing program 0 (id=5252): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') getdents64(r0, &(0x7f0000000080)=""/119, 0x77) getdents64(r0, 0x0, 0xffffffff00000018) 1.102675666s ago: executing program 5 (id=5255): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r1, &(0x7f0000002380)=""/102392, 0x18ff8) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f000001b380)={0x2, 0x4e20, @multicast2}, 0x10) connect$inet(r0, &(0x7f000001b400)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$inet(r0, &(0x7f000001b480)={0x0, 0x0, &(0x7f000001b4c0)=[{&(0x7f000001b500)=' ', 0x1}], 0x1}, 0x0) 1.000615926s ago: executing program 0 (id=5256): add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) timer_gettime(0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000640)={0x2, 0x4e26, @local}, 0x10) connect$inet(r0, &(0x7f0000000680)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r0, &(0x7f00000006c0), 0x800001d, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000700)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000740)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000000780), 0x800001d, 0x0) 700.762957ms ago: executing program 8 (id=5258): sysinfo(&(0x7f0000000840)=""/59) 472.243901ms ago: executing program 8 (id=5259): mknod$loop(&(0x7f0000000000)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) 314.960257ms ago: executing program 8 (id=5261): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000003, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0x3, 0x20000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 259.803323ms ago: executing program 3 (id=5262): syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000480)='./file0\x00', 0x4000, &(0x7f0000000640)=ANY=[@ANYBLOB="73686f72746e616d653d77696e6e742c757466383d302c636865636b3d7374726963742c646973636172642c757466383d312c6e66732c73686f72746e616d653d77696e39352c73686f72746e616d653d6c6f7765722c756e695f786c6174653d302c0036b573262ed88dfec7618c03371693a5173bd0bf12d29c0180500a87e3789adea802a90933b243ca225dacfc27597d6e1ce3d9fdc12409748ba4fbde6f1d76e116fd437b79bbcea7fdc682fd0b90334eed137d03ce386950f5e50ff2516eb2b500a9b99e04f2a41864e44cb46101a23835877342485260d4510fa3240a2c9756d388e5861cdeaf4c88bca74fe3ce71eef72c"], 0xfd, 0x2b6, &(0x7f0000000740)="$eJzs3E9rE08YwPGnaZOmKW1y+PEDBfFBL3pZ2vgKgrQgBpTaiHoQpnajIWtSsjESEdubV19H8ehNsL6BXrx5Fy9FELz0IF3pbtYkZaV/NN22+X6g7HRnnszM7iY8u7Czde/N02rZtcqmKYm0SkJkTbZFcruljpHONuGXU9JrTa5O/vh84c79BzcLxeLcgup8YfFaXlWnL354/vLtpY/Nybvvpt+Py2bu4db3/JfN/zfPbe0shp9eb6rRpXq9aZYcW5crbtVSve3YxrW1UnPtRl992amvrLTV1JanMisN23XV1NpatdvarGuz0Vbz2FRqalmWTmVk2IweOqK0vrBgCgMZDOIwEbWz0SiY0cjK0vpxDAoAAJwsg8j/Rw6Q/z+puFpxtbZf/p8Q8v/B8fP/ncikEWdDcvcGoGAyne9vP/J/AAAAAAAAAAAAAAAAAAAAAABOg23Py3qelw234d+4iKRFJPw/7nFiMI5w/kdiHC7+sZ4X99IizutWqVUKtkF9oSwVccSWmaTIT/966AjK8zeKczPqy8mGs9qJ918SHA/jQ7no+NkgXnviV1ulpGR6+89LVv6Ljs/viU+KSKuUkiuXe+ItycqnR1IXR5b967ob/2pW9fqt4p7+J/x2AAAAAACcBZb+luu//w1Wk7QsDZcN2VMf7Ow+H5DsPs8HVDZS0o0fk/Nj8c0bAAAAAIBh4rZfVI3j2I3TWkh2JnLcvR/10KVE5IQcukMXrHRwrCOq0hLu8TxvdbfR33eaEJGYZvrtz1dU+NDqpJyUwxS+PgvGfpDGcfwaAQAAABikbtIf90gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABheB108LGx/lLXHerob7e998hhnCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMTvVwAAAP//G5URgQ==") sched_setscheduler(0x0, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000d00)='./file2\x00', 0xa0c42, 0x100) 235.251316ms ago: executing program 5 (id=5263): syz_clone(0x94114200, 0x0, 0x0, 0x0, 0x0, 0x0) io_setup(0x2, &(0x7f0000000000)) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000180), 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, 0x0, 0x0) close(r0) syz_clone(0x80881000, 0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x26) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1d0000000400000008000000000000000100"/48, @ANYRES32=r1, @ANYBLOB="0100000002"], 0x40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r2}, &(0x7f00000003c0), &(0x7f0000000400)=r0}, 0x20) 108.218618ms ago: executing program 8 (id=5264): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)=""/124, 0xffffff23}], 0x4d, 0x5, 0x0) 28.994917ms ago: executing program 8 (id=5265): r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x8, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000cc0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000d40)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000d80)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000dc0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000e40), 0x651, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x10, @loopback, 0x1}, 0x1c) recvmmsg(r2, &(0x7f0000000e80), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000ec0)=0x6) bpf$MAP_CREATE(0x0, &(0x7f0000001280)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3}, 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001340)={0xffffffffffffffff, 0x0}, 0x20) mremap(&(0x7f0000532000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000190000/0x1000)=nil) mlock(&(0x7f0000626000/0x5000)=nil, 0x5000) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_vhci(&(0x7f0000001000)=ANY=[@ANYBLOB="043e1f0a00c9000201"], 0x22) landlock_create_ruleset(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioprio_set$pid(0x1, r1, 0x6000) 0s ago: executing program 0 (id=5266): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x5, 0x4, 0x6, 0xf, 0x101}, 0x50) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000500)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x19, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r2, r0}, 0xc) kernel console output (not intermixed with test programs): linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=290 compat=0 ip=0x7f27e30a8559 code=0x7ffc0000 [ 1609.769249][ T26] audit: type=1326 audit(1793353354.143:5337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22650 comm="syz.0.4827" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27e30a8559 code=0x7ffc0000 [ 1609.782207][T22659] EXT4-fs (loop1): mounted filesystem without journal. Opts: stripe=0x0000000000000003,discard,i_version,mb_optimize_scan=0x0000000000000001,max_dir_size_kb=0x0000000000000007,,errors=continue. Quota mode: none. [ 1609.795730][ T26] audit: type=1326 audit(1793353354.143:5338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22650 comm="syz.0.4827" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f27e30a8559 code=0x7ffc0000 [ 1609.839663][T22659] ext4 filesystem being mounted at /398/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1609.871294][ T26] audit: type=1326 audit(1793353354.143:5339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22650 comm="syz.0.4827" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f27e30a8559 code=0x7ffc0000 [ 1610.768493][T22687] loop1: detected capacity change from 0 to 1024 [ 1611.259972][T22694] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4838'. [ 1611.342033][T22694] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4838'. [ 1611.370788][T22696] loop4: detected capacity change from 0 to 128 [ 1611.441358][T22696] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 1611.507605][T19545] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 1611.517283][T19545] CPU: 1 PID: 19545 Comm: kworker/u5:2 Not tainted syzkaller #0 [ 1611.524930][T19545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1611.534992][T19545] Workqueue: hci3 hci_rx_work [ 1611.539683][T19545] Call Trace: [ 1611.542961][T19545] [ 1611.545891][T19545] dump_stack_lvl+0x188/0x250 [ 1611.550577][T19545] ? show_regs_print_info+0x20/0x20 [ 1611.555782][T19545] ? load_image+0x410/0x410 [ 1611.560307][T19545] sysfs_create_dir_ns+0x26a/0x290 [ 1611.565446][T19545] ? sysfs_warn_dup+0xa0/0xa0 [ 1611.570126][T19545] ? kthread+0x42e/0x520 [ 1611.574402][T19545] ? do_raw_spin_unlock+0x11d/0x230 [ 1611.579613][T19545] kobject_add_internal+0x5ba/0xcd0 [ 1611.584825][T19545] kobject_add+0x160/0x230 [ 1611.589254][T19545] ? kobject_init+0x1c0/0x1c0 [ 1611.593945][T19545] ? __raw_spin_lock_init+0x41/0x100 [ 1611.599235][T19545] ? klist_children_get+0x50/0x50 [ 1611.604272][T19545] ? get_device_parent+0x121/0x3e0 [ 1611.609429][T19545] device_add+0x470/0x1050 [ 1611.613851][T19545] ? device_initialize+0x2a5/0x4d0 [ 1611.618969][T19545] hci_conn_add_sysfs+0xd1/0x1e0 [ 1611.623916][T19545] le_conn_complete_evt+0xc55/0x14d0 [ 1611.629216][T19545] ? cs_le_create_conn+0x5e0/0x5e0 [ 1611.634342][T19545] ? __mutex_trylock_common+0x15c/0x260 [ 1611.639909][T19545] hci_le_meta_evt+0xd36/0x3ca0 [ 1611.644774][T19545] ? hci_event_packet+0x363/0x1310 [ 1611.649895][T19545] ? __lock_acquire+0x7d40/0x7d40 [ 1611.654939][T19545] ? hci_remote_host_features_evt+0x240/0x240 [ 1611.661016][T19545] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 1611.666654][T19545] ? mark_lock+0x94/0x320 [ 1611.670990][T19545] ? mutex_unlock+0x10/0x10 [ 1611.675590][T19545] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1611.681581][T19545] ? lock_chain_count+0x20/0x20 [ 1611.686437][T19545] ? __rwlock_init+0x140/0x140 [ 1611.691208][T19545] hci_event_packet+0xe0b/0x1310 [ 1611.696151][T19545] ? _raw_spin_unlock+0x40/0x40 [ 1611.701003][T19545] ? rcu_lock_release+0x20/0x20 [ 1611.705865][T19545] ? hci_send_to_monitor+0x9c/0x4a0 [ 1611.711069][T19545] hci_rx_work+0x255/0xa10 [ 1611.715500][T19545] process_one_work+0x867/0xff0 [ 1611.720368][T19545] ? worker_detach_from_pool+0x240/0x240 [ 1611.726005][T19545] ? lockdep_hardirqs_off+0x70/0x100 [ 1611.731297][T19545] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1611.736323][T19545] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1611.741878][T19545] ? wq_worker_running+0x97/0x170 [ 1611.746912][T19545] worker_thread+0xad7/0x12a0 [ 1611.751608][T19545] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1611.757515][T19545] kthread+0x42e/0x520 [ 1611.761588][T19545] ? rcu_lock_release+0x20/0x20 [ 1611.766442][T19545] ? kthread_blkcg+0xd0/0xd0 [ 1611.771045][T19545] ret_from_fork+0x1f/0x30 [ 1611.775500][T19545] [ 1611.797798][T19545] kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1611.811341][T19545] Bluetooth: hci3: failed to register connection device [ 1612.291526][ T145] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 1612.623560][T22713] loop3: detected capacity change from 0 to 128 [ 1613.503135][T22713] EXT4-fs (loop3): mounted filesystem without journal. Opts: stripe=0x0000000000000003,discard,i_version,mb_optimize_scan=0x0000000000000001,max_dir_size_kb=0x0000000000000007,,errors=continue. Quota mode: none. [ 1613.523902][T22713] ext4 filesystem being mounted at /278/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1613.871591][ T21] usb 3-1: new full-speed USB device number 61 using dummy_hcd [ 1614.381772][ T21] usb 3-1: config 252 has an invalid descriptor of length 0, skipping remainder of the config [ 1614.651530][ T21] usb 3-1: New USB device found, idVendor=057c, idProduct=2200, bcdDevice=46.29 [ 1614.692497][ T21] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1614.787773][T22735] loop1: detected capacity change from 0 to 128 [ 1615.240935][T22735] EXT4-fs (loop1): mounted filesystem without journal. Opts: stripe=0x0000000000000003,discard,i_version,mb_optimize_scan=0x0000000000000001,max_dir_size_kb=0x0000000000000007,,errors=continue. Quota mode: none. [ 1615.261834][T22735] ext4 filesystem being mounted at /402/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1615.370325][ T21] usb 3-1: Product: syz [ 1615.374677][ T21] usb 3-1: Manufacturer: syz [ 1615.379369][ T21] usb 3-1: SerialNumber: syz [ 1615.523763][ T21] bfusb: probe of 3-1:252.0 failed with error -5 [ 1615.765189][ T21] usb 3-1: USB disconnect, device number 61 [ 1617.066200][T22762] loop2: detected capacity change from 0 to 1024 [ 1618.713288][T22780] loop4: detected capacity change from 0 to 128 [ 1619.265077][T22780] EXT4-fs (loop4): mounted filesystem without journal. Opts: stripe=0x0000000000000003,discard,i_version,mb_optimize_scan=0x0000000000000001,max_dir_size_kb=0x0000000000000007,,errors=continue. Quota mode: none. [ 1619.285915][T22780] ext4 filesystem being mounted at /501/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1619.985971][T22793] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4865'. [ 1620.156448][T22793] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4865'. [ 1620.404093][T22800] loop2: detected capacity change from 0 to 128 [ 1620.575556][T22800] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 1620.793313][T21591] usb 4-1: new full-speed USB device number 61 using dummy_hcd [ 1621.443981][T22806] loop1: detected capacity change from 0 to 128 [ 1621.468086][ T7161] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 1621.686349][T22806] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 1621.712043][T21591] usb 4-1: config 252 has an invalid descriptor of length 0, skipping remainder of the config [ 1622.031685][T21591] usb 4-1: New USB device found, idVendor=057c, idProduct=2200, bcdDevice=46.29 [ 1622.224291][T21591] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1622.240938][T21591] usb 4-1: Product: syz [ 1622.249600][T21591] usb 4-1: Manufacturer: syz [ 1622.256367][T21591] usb 4-1: SerialNumber: syz [ 1622.721843][ T151] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 1622.736086][T21591] bfusb: probe of 4-1:252.0 failed with error -5 [ 1623.422694][ T1344] usb 4-1: USB disconnect, device number 61 [ 1623.807744][T22828] loop4: detected capacity change from 0 to 128 [ 1624.090369][T22828] EXT4-fs (loop4): mounted filesystem without journal. Opts: stripe=0x0000000000000003,discard,i_version,mb_optimize_scan=0x0000000000000001,max_dir_size_kb=0x0000000000000007,,errors=continue. Quota mode: none. [ 1624.114014][T22828] ext4 filesystem being mounted at /505/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1624.727658][T22839] loop3: detected capacity change from 0 to 1024 [ 1624.830870][T22852] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4882'. [ 1627.696428][T14826] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 1627.708553][T14826] CPU: 0 PID: 14826 Comm: kworker/u5:1 Not tainted syzkaller #0 [ 1627.716235][T14826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1627.726689][T14826] Workqueue: hci0 hci_rx_work [ 1627.731390][T14826] Call Trace: [ 1627.734678][T14826] [ 1627.737617][T14826] dump_stack_lvl+0x188/0x250 [ 1627.742324][T14826] ? show_regs_print_info+0x20/0x20 [ 1627.747541][T14826] ? load_image+0x410/0x410 [ 1627.752102][T14826] sysfs_create_dir_ns+0x26a/0x290 [ 1627.757232][T14826] ? sysfs_warn_dup+0xa0/0xa0 [ 1627.761921][T14826] ? kthread+0x42e/0x520 [ 1627.766181][T14826] ? do_raw_spin_unlock+0x11d/0x230 [ 1627.771395][T14826] kobject_add_internal+0x5ba/0xcd0 [ 1627.776616][T14826] kobject_add+0x160/0x230 [ 1627.781055][T14826] ? kobject_init+0x1c0/0x1c0 [ 1627.785761][T14826] ? __raw_spin_lock_init+0x41/0x100 [ 1627.791074][T14826] ? klist_children_get+0x50/0x50 [ 1627.796123][T14826] ? get_device_parent+0x121/0x3e0 [ 1627.801255][T14826] device_add+0x470/0x1050 [ 1627.805687][T14826] ? device_initialize+0x2a5/0x4d0 [ 1627.810822][T14826] hci_conn_add_sysfs+0xd1/0x1e0 [ 1627.815785][T14826] le_conn_complete_evt+0xc55/0x14d0 [ 1627.821101][T14826] ? cs_le_create_conn+0x5e0/0x5e0 [ 1627.826232][T14826] ? preempt_schedule_common+0xa5/0xd0 [ 1627.831717][T14826] ? preempt_schedule+0xbc/0xd0 [ 1627.836589][T14826] ? schedule_preempt_disabled+0x20/0x20 [ 1627.842237][T14826] hci_le_meta_evt+0xd36/0x3ca0 [ 1627.847103][T14826] ? hci_event_packet+0x363/0x1310 [ 1627.852237][T14826] ? __lock_acquire+0x7d40/0x7d40 [ 1627.857293][T14826] ? hci_remote_host_features_evt+0x240/0x240 [ 1627.863381][T14826] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 1627.869029][T14826] ? mark_lock+0x94/0x320 [ 1627.873393][T14826] ? mutex_unlock+0x10/0x10 [ 1627.877910][T14826] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1627.883913][T14826] ? lock_chain_count+0x20/0x20 [ 1627.888781][T14826] ? __rwlock_init+0x140/0x140 [ 1627.893554][T14826] hci_event_packet+0xe0b/0x1310 [ 1627.898513][T14826] ? _raw_spin_unlock+0x40/0x40 [ 1627.903384][T14826] ? rcu_lock_release+0x20/0x20 [ 1627.908257][T14826] ? hci_send_to_monitor+0x9c/0x4a0 [ 1627.913476][T14826] hci_rx_work+0x255/0xa10 [ 1627.917930][T14826] process_one_work+0x867/0xff0 [ 1627.922811][T14826] ? worker_detach_from_pool+0x240/0x240 [ 1627.928501][T14826] ? lockdep_hardirqs_off+0x70/0x100 [ 1627.933805][T14826] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1627.938849][T14826] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1627.944411][T14826] ? wq_worker_running+0x97/0x170 [ 1627.949448][T14826] worker_thread+0xad7/0x12a0 [ 1627.954154][T14826] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1627.960073][T14826] kthread+0x42e/0x520 [ 1627.964158][T14826] ? rcu_lock_release+0x20/0x20 [ 1627.969022][T14826] ? kthread_blkcg+0xd0/0xd0 [ 1627.973635][T14826] ret_from_fork+0x1f/0x30 [ 1627.978075][T14826] [ 1627.989325][T14826] kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1628.002787][T14826] Bluetooth: hci0: failed to register connection device [ 1628.611546][ T4268] usb 3-1: new full-speed USB device number 62 using dummy_hcd [ 1629.002176][ T4268] usb 3-1: config 252 has an invalid descriptor of length 0, skipping remainder of the config [ 1629.172816][ T4268] usb 3-1: New USB device found, idVendor=057c, idProduct=2200, bcdDevice=46.29 [ 1629.186211][ T4268] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1629.211178][ T4268] usb 3-1: Product: syz [ 1629.224998][ T4268] usb 3-1: Manufacturer: syz [ 1629.234955][ T4268] usb 3-1: SerialNumber: syz [ 1629.295029][ T4268] bfusb: probe of 3-1:252.0 failed with error -5 [ 1630.177121][T20777] usb 3-1: USB disconnect, device number 62 [ 1630.915628][T22907] loop3: detected capacity change from 0 to 128 [ 1630.980416][T22907] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 1631.872417][T14885] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 1631.990270][ T26] audit: type=1326 audit(1793353377.353:5340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22916 comm="syz.1.4901" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dc8cea559 code=0x7ffc0000 [ 1632.073328][T22919] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4899'. [ 1632.103311][ T26] audit: type=1326 audit(1793353377.353:5341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22916 comm="syz.1.4901" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dc8cea559 code=0x7ffc0000 [ 1632.177305][ T26] audit: type=1326 audit(1793353377.383:5342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22916 comm="syz.1.4901" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dc8cea559 code=0x7ffc0000 [ 1632.233455][ T26] audit: type=1326 audit(1793353377.383:5343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22916 comm="syz.1.4901" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dc8cea559 code=0x7ffc0000 [ 1632.258305][ T26] audit: type=1326 audit(1793353377.383:5344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22916 comm="syz.1.4901" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f0dc8cea559 code=0x7ffc0000 [ 1632.282660][ T26] audit: type=1326 audit(1793353377.383:5345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22916 comm="syz.1.4901" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dc8cea559 code=0x7ffc0000 [ 1632.307099][ T26] audit: type=1326 audit(1793353377.383:5346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22916 comm="syz.1.4901" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dc8cea559 code=0x7ffc0000 [ 1632.369086][T22923] loop3: detected capacity change from 0 to 128 [ 1632.391011][ T26] audit: type=1326 audit(1793353377.383:5347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22916 comm="syz.1.4901" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f0dc8cea559 code=0x7ffc0000 [ 1632.649575][T22923] EXT4-fs (loop3): mounted filesystem without journal. Opts: stripe=0x0000000000000003,discard,i_version,mb_optimize_scan=0x0000000000000001,max_dir_size_kb=0x0000000000000007,,errors=continue. Quota mode: none. [ 1632.670874][T22923] ext4 filesystem being mounted at /285/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1632.848751][ T26] audit: type=1326 audit(1793353377.383:5348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22916 comm="syz.1.4901" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f0dc8cea559 code=0x7ffc0000 [ 1634.729680][T22953] loop2: detected capacity change from 0 to 1024 [ 1634.896424][T10841] usb 4-1: new full-speed USB device number 62 using dummy_hcd [ 1635.040299][T22957] loop1: detected capacity change from 0 to 128 [ 1635.140897][T22957] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 1635.791265][T10841] usb 4-1: config 252 has an invalid descriptor of length 0, skipping remainder of the config [ 1636.126881][ T4937] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 1636.223538][T10841] usb 4-1: New USB device found, idVendor=057c, idProduct=2200, bcdDevice=46.29 [ 1636.235928][T10841] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1636.246420][T10841] usb 4-1: Product: syz [ 1636.250606][T10841] usb 4-1: Manufacturer: syz [ 1636.258727][T10841] usb 4-1: SerialNumber: syz [ 1636.299094][T19545] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 1636.309232][T19545] CPU: 0 PID: 19545 Comm: kworker/u5:2 Not tainted syzkaller #0 [ 1636.316886][T19545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1636.326962][T19545] Workqueue: hci1 hci_rx_work [ 1636.331662][T19545] Call Trace: [ 1636.334949][T19545] [ 1636.337882][T19545] dump_stack_lvl+0x188/0x250 [ 1636.342575][T19545] ? show_regs_print_info+0x20/0x20 [ 1636.347786][T19545] ? load_image+0x410/0x410 [ 1636.352318][T19545] sysfs_create_dir_ns+0x26a/0x290 [ 1636.357443][T19545] ? sysfs_warn_dup+0xa0/0xa0 [ 1636.362127][T19545] ? kthread+0x42e/0x520 [ 1636.366378][T19545] ? do_raw_spin_unlock+0x11d/0x230 [ 1636.371588][T19545] kobject_add_internal+0x5ba/0xcd0 [ 1636.376799][T19545] kobject_add+0x160/0x230 [ 1636.381231][T19545] ? kobject_init+0x1c0/0x1c0 [ 1636.385913][T19545] ? __raw_spin_lock_init+0x41/0x100 [ 1636.391205][T19545] ? klist_children_get+0x50/0x50 [ 1636.396236][T19545] ? get_device_parent+0x121/0x3e0 [ 1636.401359][T19545] device_add+0x470/0x1050 [ 1636.405781][T19545] ? device_initialize+0x2a5/0x4d0 [ 1636.410908][T19545] hci_conn_add_sysfs+0xd1/0x1e0 [ 1636.415862][T19545] le_conn_complete_evt+0xc55/0x14d0 [ 1636.421164][T19545] ? cs_le_create_conn+0x5e0/0x5e0 [ 1636.426295][T19545] ? __mutex_trylock_common+0x15c/0x260 [ 1636.431859][T19545] hci_le_meta_evt+0xd36/0x3ca0 [ 1636.436727][T19545] ? hci_event_packet+0x363/0x1310 [ 1636.441853][T19545] ? __lock_acquire+0x7d40/0x7d40 [ 1636.446898][T19545] ? hci_remote_host_features_evt+0x240/0x240 [ 1636.452982][T19545] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 1636.458626][T19545] ? mark_lock+0x94/0x320 [ 1636.462985][T19545] ? mutex_unlock+0x10/0x10 [ 1636.467495][T19545] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1636.473485][T19545] ? lock_chain_count+0x20/0x20 [ 1636.478350][T19545] ? __rwlock_init+0x140/0x140 [ 1636.483121][T19545] hci_event_packet+0xe0b/0x1310 [ 1636.488081][T19545] ? _raw_spin_unlock+0x40/0x40 [ 1636.492942][T19545] ? rcu_lock_release+0x20/0x20 [ 1636.497809][T19545] ? hci_send_to_monitor+0x9c/0x4a0 [ 1636.503008][T19545] hci_rx_work+0x255/0xa10 [ 1636.507453][T19545] process_one_work+0x867/0xff0 [ 1636.512330][T19545] ? worker_detach_from_pool+0x240/0x240 [ 1636.517981][T19545] ? lockdep_hardirqs_off+0x70/0x100 [ 1636.523284][T19545] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1636.528318][T19545] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1636.533874][T19545] ? wq_worker_running+0x97/0x170 [ 1636.538909][T19545] worker_thread+0xad7/0x12a0 [ 1636.543611][T19545] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1636.549522][T19545] kthread+0x42e/0x520 [ 1636.553601][T19545] ? rcu_lock_release+0x20/0x20 [ 1636.558456][T19545] ? kthread_blkcg+0xd0/0xd0 [ 1636.563052][T19545] ret_from_fork+0x1f/0x30 [ 1636.567484][T19545] [ 1636.573808][T10841] bfusb: probe of 4-1:252.0 failed with error -5 [ 1636.581344][T19545] kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1636.594711][T19545] Bluetooth: hci1: failed to register connection device [ 1636.813820][ T4268] usb 4-1: USB disconnect, device number 62 [ 1637.837763][T22986] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4920'. [ 1639.251559][T23007] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4924'. [ 1639.779046][T23013] loop2: detected capacity change from 0 to 128 [ 1640.032125][T23013] EXT4-fs (loop2): mounted filesystem without journal. Opts: stripe=0x0000000000000003,discard,i_version,mb_optimize_scan=0x0000000000000001,max_dir_size_kb=0x0000000000000007,,errors=continue. Quota mode: none. [ 1640.052850][T23013] ext4 filesystem being mounted at /313/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1640.589211][T23030] loop2: detected capacity change from 0 to 128 [ 1640.675196][T23030] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 1641.723399][ T4363] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 1642.021621][T20777] usb 5-1: new full-speed USB device number 64 using dummy_hcd [ 1642.801664][T20777] usb 5-1: config 252 has an invalid descriptor of length 0, skipping remainder of the config [ 1643.152766][T20777] usb 5-1: New USB device found, idVendor=057c, idProduct=2200, bcdDevice=46.29 [ 1643.201275][T20777] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1643.209346][T20777] usb 5-1: Product: syz [ 1643.308446][T20777] usb 5-1: Manufacturer: syz [ 1643.328727][T20777] usb 5-1: SerialNumber: syz [ 1643.403487][T20777] bfusb: probe of 5-1:252.0 failed with error -5 [ 1643.699758][T20777] usb 5-1: USB disconnect, device number 64 [ 1644.003628][T23066] loop2: detected capacity change from 0 to 512 [ 1648.431304][ T26] audit: type=1326 audit(1793353393.783:5349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23131 comm="syz.0.4958" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f27e30a8559 code=0x0 [ 1648.721338][ T1344] usb 5-1: new full-speed USB device number 65 using dummy_hcd [ 1649.281667][ T1344] usb 5-1: config 252 has an invalid descriptor of length 0, skipping remainder of the config [ 1649.462687][ T1344] usb 5-1: New USB device found, idVendor=057c, idProduct=2200, bcdDevice=46.29 [ 1649.506328][ T1344] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1649.544997][ T1344] usb 5-1: Product: syz [ 1649.556674][ T1344] usb 5-1: Manufacturer: syz [ 1649.658505][ T1344] usb 5-1: SerialNumber: syz [ 1649.751819][ T1344] bfusb: probe of 5-1:252.0 failed with error -5 [ 1649.785077][T19545] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 1649.794784][T19545] CPU: 0 PID: 19545 Comm: kworker/u5:2 Not tainted syzkaller #0 [ 1649.802421][T19545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1649.812480][T19545] Workqueue: hci2 hci_rx_work [ 1649.817161][T19545] Call Trace: [ 1649.820435][T19545] [ 1649.823364][T19545] dump_stack_lvl+0x188/0x250 [ 1649.828045][T19545] ? show_regs_print_info+0x20/0x20 [ 1649.833253][T19545] ? load_image+0x410/0x410 [ 1649.837771][T19545] sysfs_create_dir_ns+0x26a/0x290 [ 1649.842892][T19545] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 1649.848548][T19545] ? sysfs_warn_dup+0xa0/0xa0 [ 1649.853243][T19545] kobject_add_internal+0x5ba/0xcd0 [ 1649.858459][T19545] kobject_add+0x160/0x230 [ 1649.862888][T19545] ? kobject_init+0x1c0/0x1c0 [ 1649.867574][T19545] ? __raw_spin_lock_init+0x41/0x100 [ 1649.872947][T19545] ? klist_children_get+0x50/0x50 [ 1649.877973][T19545] ? get_device_parent+0x121/0x3e0 [ 1649.883088][T19545] device_add+0x470/0x1050 [ 1649.887509][T19545] hci_conn_add_sysfs+0xd1/0x1e0 [ 1649.892451][T19545] le_conn_complete_evt+0xc55/0x14d0 [ 1649.897763][T19545] ? cs_le_create_conn+0x5e0/0x5e0 [ 1649.902877][T19545] ? lockdep_hardirqs_on+0x94/0x140 [ 1649.908087][T19545] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 1649.913736][T19545] hci_le_meta_evt+0xd36/0x3ca0 [ 1649.918595][T19545] ? hci_event_packet+0x363/0x1310 [ 1649.923711][T19545] ? __lock_acquire+0x7d40/0x7d40 [ 1649.928742][T19545] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1649.934729][T19545] ? lock_chain_count+0x20/0x20 [ 1649.939586][T19545] ? hci_remote_host_features_evt+0x240/0x240 [ 1649.945657][T19545] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 1649.951292][T19545] ? mutex_unlock+0x10/0x10 [ 1649.955793][T19545] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 1649.961437][T19545] hci_event_packet+0xe0b/0x1310 [ 1649.966383][T19545] ? _raw_spin_unlock+0x40/0x40 [ 1649.971230][T19545] ? rcu_lock_release+0x20/0x20 [ 1649.976087][T19545] ? hci_send_to_monitor+0x9c/0x4a0 [ 1649.981283][T19545] hci_rx_work+0x255/0xa10 [ 1649.985720][T19545] process_one_work+0x867/0xff0 [ 1649.990583][T19545] ? worker_detach_from_pool+0x240/0x240 [ 1649.996210][T19545] ? lockdep_hardirqs_off+0x70/0x100 [ 1650.001499][T19545] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1650.006523][T19545] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1650.012067][T19545] ? wq_worker_running+0x97/0x170 [ 1650.017096][T19545] worker_thread+0xad7/0x12a0 [ 1650.021792][T19545] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1650.027697][T19545] kthread+0x42e/0x520 [ 1650.031763][T19545] ? rcu_lock_release+0x20/0x20 [ 1650.036612][T19545] ? kthread_blkcg+0xd0/0xd0 [ 1650.041202][T19545] ret_from_fork+0x1f/0x30 [ 1650.045628][T19545] [ 1650.061586][T19545] kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1650.075403][T19545] Bluetooth: hci2: failed to register connection device [ 1650.661512][T23167] loop3: detected capacity change from 0 to 128 [ 1650.769569][T20777] usb 5-1: USB disconnect, device number 65 [ 1651.482158][T23167] EXT4-fs (loop3): mounted filesystem without journal. Opts: stripe=0x0000000000000003,discard,i_version,mb_optimize_scan=0x0000000000000001,max_dir_size_kb=0x0000000000000007,,errors=continue. Quota mode: none. [ 1651.502953][T23167] ext4 filesystem being mounted at /297/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1651.654001][T23187] netlink: 'syz.1.4976': attribute type 1 has an invalid length. [ 1651.711153][T23187] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1651.790696][T23188] bond2: (slave gretap1): Enslaving as a backup interface with an up link [ 1651.832337][ T4956] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1651.859576][T14885] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 1652.485825][T14885] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1652.580975][T23204] bridge0: port 1(bridge_slave_0) entered disabled state [ 1652.951708][T23220] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4986'. [ 1652.960698][T23220] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4986'. [ 1653.144498][T23220] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4986'. [ 1653.288891][T23225] loop1: detected capacity change from 0 to 128 [ 1653.549862][T23225] EXT4-fs (loop1): mounted filesystem without journal. Opts: stripe=0x0000000000000003,discard,i_version,mb_optimize_scan=0x0000000000000001,max_dir_size_kb=0x0000000000000007,,errors=continue. Quota mode: none. [ 1653.571037][T23225] ext4 filesystem being mounted at /429/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1653.984032][T23206] bridge0: port 2(bridge_slave_1) entered disabled state [ 1653.991447][T23206] bridge0: port 1(bridge_slave_0) entered disabled state [ 1654.264803][T23228] fuse: root generation should be zero [ 1654.385045][T19545] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 1654.395265][T19545] CPU: 0 PID: 19545 Comm: kworker/u5:2 Not tainted syzkaller #0 [ 1654.402947][T19545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1654.413097][T19545] Workqueue: hci2 hci_rx_work [ 1654.417788][T19545] Call Trace: [ 1654.421075][T19545] [ 1654.424007][T19545] dump_stack_lvl+0x188/0x250 [ 1654.428694][T19545] ? show_regs_print_info+0x20/0x20 [ 1654.433897][T19545] ? load_image+0x410/0x410 [ 1654.438423][T19545] sysfs_create_dir_ns+0x26a/0x290 [ 1654.443556][T19545] ? sysfs_warn_dup+0xa0/0xa0 [ 1654.448256][T19545] kobject_add_internal+0x5ba/0xcd0 [ 1654.453467][T19545] kobject_add+0x160/0x230 [ 1654.457897][T19545] ? kobject_init+0x1c0/0x1c0 [ 1654.462582][T19545] ? __raw_spin_lock_init+0x41/0x100 [ 1654.467872][T19545] ? klist_children_get+0x50/0x50 [ 1654.472902][T19545] ? get_device_parent+0x121/0x3e0 [ 1654.478021][T19545] device_add+0x470/0x1050 [ 1654.482441][T19545] ? device_initialize+0x2a5/0x4d0 [ 1654.487561][T19545] hci_conn_add_sysfs+0xd1/0x1e0 [ 1654.492507][T19545] le_conn_complete_evt+0xc55/0x14d0 [ 1654.497814][T19545] ? cs_le_create_conn+0x5e0/0x5e0 [ 1654.502942][T19545] hci_le_meta_evt+0xd36/0x3ca0 [ 1654.507804][T19545] ? mark_lock+0x94/0x320 [ 1654.512136][T19545] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1654.518120][T19545] ? __cond_resched+0xd0/0xd0 [ 1654.522812][T19545] ? lock_chain_count+0x20/0x20 [ 1654.527676][T19545] ? hci_remote_host_features_evt+0x240/0x240 [ 1654.533754][T19545] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 1654.539396][T19545] ? lockdep_hardirqs_on+0x94/0x140 [ 1654.544608][T19545] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 1654.550253][T19545] ? hci_event_packet+0x5b7/0x1310 [ 1654.555376][T19545] hci_event_packet+0xe0b/0x1310 [ 1654.560333][T19545] ? _raw_spin_unlock+0x40/0x40 [ 1654.565189][T19545] ? rcu_lock_release+0x20/0x20 [ 1654.570041][T19545] ? lock_acquire+0x209/0x400 [ 1654.574731][T19545] ? hci_send_to_monitor+0x9c/0x4a0 [ 1654.579939][T19545] hci_rx_work+0x255/0xa10 [ 1654.584374][T19545] process_one_work+0x867/0xff0 [ 1654.589247][T19545] ? worker_detach_from_pool+0x240/0x240 [ 1654.594880][T19545] ? lockdep_hardirqs_off+0x70/0x100 [ 1654.600182][T19545] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1654.605211][T19545] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1654.610765][T19545] ? wq_worker_running+0x97/0x170 [ 1654.615796][T19545] worker_thread+0xad7/0x12a0 [ 1654.620497][T19545] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1654.626411][T19545] kthread+0x42e/0x520 [ 1654.630483][T19545] ? rcu_lock_release+0x20/0x20 [ 1654.635348][T19545] ? kthread_blkcg+0xd0/0xd0 [ 1654.639965][T19545] ret_from_fork+0x1f/0x30 [ 1654.644406][T19545] [ 1654.659860][T19545] kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1654.673615][T19545] Bluetooth: hci2: failed to register connection device [ 1655.391032][T23243] md: md2 stopped. [ 1656.510161][T23206] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1656.923069][T23206] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1657.320020][T23206] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1657.335356][T23206] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1657.344649][T23206] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1657.364546][T23206] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1657.405498][T23278] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5003'. [ 1657.421341][T23278] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5003'. [ 1657.455528][T23278] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5003'. [ 1658.634093][T23288] md: md3 stopped. [ 1658.732382][T19545] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 1658.743922][T19545] CPU: 0 PID: 19545 Comm: kworker/u5:2 Not tainted syzkaller #0 [ 1658.751588][T19545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1658.761649][T19545] Workqueue: hci4 hci_rx_work [ 1658.766338][T19545] Call Trace: [ 1658.769624][T19545] [ 1658.772555][T19545] dump_stack_lvl+0x188/0x250 [ 1658.777246][T19545] ? show_regs_print_info+0x20/0x20 [ 1658.782453][T19545] ? load_image+0x410/0x410 [ 1658.786975][T19545] sysfs_create_dir_ns+0x26a/0x290 [ 1658.792094][T19545] ? sysfs_warn_dup+0xa0/0xa0 [ 1658.796788][T19545] kobject_add_internal+0x5ba/0xcd0 [ 1658.802000][T19545] kobject_add+0x160/0x230 [ 1658.806426][T19545] ? kobject_init+0x1c0/0x1c0 [ 1658.811114][T19545] ? __raw_spin_lock_init+0x41/0x100 [ 1658.816405][T19545] ? klist_children_get+0x50/0x50 [ 1658.821436][T19545] ? get_device_parent+0x121/0x3e0 [ 1658.826558][T19545] device_add+0x470/0x1050 [ 1658.830987][T19545] hci_conn_add_sysfs+0xd1/0x1e0 [ 1658.835933][T19545] le_conn_complete_evt+0xc55/0x14d0 [ 1658.841230][T19545] ? cs_le_create_conn+0x5e0/0x5e0 [ 1658.846365][T19545] hci_le_meta_evt+0xd36/0x3ca0 [ 1658.851229][T19545] ? mark_lock+0x94/0x320 [ 1658.855563][T19545] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1658.861640][T19545] ? lock_chain_count+0x20/0x20 [ 1658.866495][T19545] ? hci_remote_host_features_evt+0x240/0x240 [ 1658.872573][T19545] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 1658.878289][T19545] ? lockdep_hardirqs_on+0x94/0x140 [ 1658.883502][T19545] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 1658.889151][T19545] ? hci_event_packet+0x372/0x1310 [ 1658.894274][T19545] hci_event_packet+0xe0b/0x1310 [ 1658.899224][T19545] ? _raw_spin_unlock+0x40/0x40 [ 1658.904080][T19545] ? rcu_lock_release+0x20/0x20 [ 1658.908940][T19545] ? lock_acquire+0x209/0x400 [ 1658.913629][T19545] ? hci_send_to_monitor+0x9c/0x4a0 [ 1658.918835][T19545] hci_rx_work+0x255/0xa10 [ 1658.923267][T19545] process_one_work+0x867/0xff0 [ 1658.928143][T19545] ? worker_detach_from_pool+0x240/0x240 [ 1658.933781][T19545] ? lockdep_hardirqs_off+0x70/0x100 [ 1658.939073][T19545] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1658.944111][T19545] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1658.949664][T19545] ? wq_worker_running+0x97/0x170 [ 1658.954693][T19545] worker_thread+0xad7/0x12a0 [ 1658.959392][T19545] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1658.965297][T19545] kthread+0x42e/0x520 [ 1658.969367][T19545] ? rcu_lock_release+0x20/0x20 [ 1658.974215][T19545] ? kthread_blkcg+0xd0/0xd0 [ 1658.978807][T19545] ret_from_fork+0x1f/0x30 [ 1658.983241][T19545] [ 1659.012299][T19545] kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1659.029442][T19545] Bluetooth: hci4: failed to register connection device [ 1659.060349][T23252] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 1659.608079][T23305] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 1661.140340][T23335] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5019'. [ 1661.167562][T23336] md: md4 stopped. [ 1662.499434][T23327] bridge0: port 2(bridge_slave_1) entered disabled state [ 1662.506805][T23327] bridge0: port 1(bridge_slave_0) entered disabled state [ 1663.099632][T23355] futex_wake_op: syz.3.5025 tries to shift op by 144; fix this program [ 1663.154134][T23355] futex_wake_op: syz.3.5025 tries to shift op by 144; fix this program [ 1663.511885][T23364] fuse: Bad value for 'fd' [ 1663.672530][T19545] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 1663.683025][T19545] CPU: 0 PID: 19545 Comm: kworker/u5:2 Not tainted syzkaller #0 [ 1663.690677][T19545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1663.700739][T19545] Workqueue: hci0 hci_rx_work [ 1663.705434][T19545] Call Trace: [ 1663.708716][T19545] [ 1663.711646][T19545] dump_stack_lvl+0x188/0x250 [ 1663.716335][T19545] ? show_regs_print_info+0x20/0x20 [ 1663.721537][T19545] ? load_image+0x410/0x410 [ 1663.726062][T19545] sysfs_create_dir_ns+0x26a/0x290 [ 1663.731183][T19545] ? sysfs_warn_dup+0xa0/0xa0 [ 1663.736422][T19545] ? do_raw_spin_unlock+0x11d/0x230 [ 1663.741643][T19545] kobject_add_internal+0x5ba/0xcd0 [ 1663.746862][T19545] kobject_add+0x160/0x230 [ 1663.751286][T19545] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 1663.756937][T19545] ? kobject_init+0x1c0/0x1c0 [ 1663.761625][T19545] ? get_device_parent+0x3c7/0x3e0 [ 1663.766743][T19545] ? get_device_parent+0x121/0x3e0 [ 1663.771870][T19545] device_add+0x470/0x1050 [ 1663.776288][T19545] ? device_initialize+0x2a5/0x4d0 [ 1663.781405][T19545] hci_conn_add_sysfs+0xd1/0x1e0 [ 1663.786353][T19545] le_conn_complete_evt+0xc55/0x14d0 [ 1663.791649][T19545] ? cs_le_create_conn+0x5e0/0x5e0 [ 1663.796761][T19545] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 1663.802413][T19545] hci_le_meta_evt+0xd36/0x3ca0 [ 1663.807272][T19545] ? hci_event_packet+0x363/0x1310 [ 1663.812400][T19545] ? __lock_acquire+0x7d40/0x7d40 [ 1663.817456][T19545] ? hci_remote_host_features_evt+0x240/0x240 [ 1663.823543][T19545] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 1663.829189][T19545] ? mutex_unlock+0x10/0x10 [ 1663.833702][T19545] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1663.839699][T19545] ? lock_chain_count+0x20/0x20 [ 1663.844561][T19545] hci_event_packet+0xe0b/0x1310 [ 1663.849518][T19545] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 1663.855163][T19545] ? rcu_lock_release+0x20/0x20 [ 1663.860028][T19545] ? hci_rx_work+0x248/0xa10 [ 1663.864627][T19545] ? hci_event_packet+0x1/0x1310 [ 1663.869575][T19545] hci_rx_work+0x255/0xa10 [ 1663.874012][T19545] process_one_work+0x867/0xff0 [ 1663.878913][T19545] ? worker_detach_from_pool+0x240/0x240 [ 1663.884547][T19545] ? lockdep_hardirqs_off+0x70/0x100 [ 1663.889840][T19545] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1663.895076][T19545] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1663.900633][T19545] ? wq_worker_running+0x97/0x170 [ 1663.905802][T19545] worker_thread+0xad7/0x12a0 [ 1663.910503][T19545] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1663.916430][T19545] kthread+0x42e/0x520 [ 1663.920515][T19545] ? rcu_lock_release+0x20/0x20 [ 1663.925389][T19545] ? kthread_blkcg+0xd0/0xd0 [ 1663.929996][T19545] ret_from_fork+0x1f/0x30 [ 1663.934439][T19545] [ 1663.947327][T19545] kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1663.961197][T19545] Bluetooth: hci0: failed to register connection device [ 1664.049828][T23327] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1664.068999][T23327] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1664.745907][T23327] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1664.771185][T23327] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1664.780999][T23327] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1664.800953][T23327] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1664.883679][T23380] md: md0 stopped. [ 1665.974429][T23339] bridge2: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 1667.617908][T23407] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5039'. [ 1668.497639][T23434] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5053'. [ 1668.753512][ T1435] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.758798][T23438] bridge2: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 1668.759840][ T1435] ieee802154 phy1 wpan1: encryption failed: -22 [ 1668.777809][T23442] md: md1 stopped. [ 1669.836612][T23436] bridge0: port 2(bridge_slave_1) entered disabled state [ 1670.338257][T23436] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1670.405850][T23436] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1670.532597][T19545] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 1670.543783][T19545] CPU: 1 PID: 19545 Comm: kworker/u5:2 Not tainted syzkaller #0 [ 1670.551454][T19545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1670.561604][T19545] Workqueue: hci2 hci_rx_work [ 1670.566293][T19545] Call Trace: [ 1670.569570][T19545] [ 1670.572498][T19545] dump_stack_lvl+0x188/0x250 [ 1670.577194][T19545] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 1670.582840][T19545] ? show_regs_print_info+0x20/0x20 [ 1670.588055][T19545] ? load_image+0x410/0x410 [ 1670.592568][T19545] ? ret_from_fork+0x1f/0x30 [ 1670.597200][T19545] ? sysfs_create_dir_ns+0x23f/0x290 [ 1670.602494][T19545] sysfs_create_dir_ns+0x26a/0x290 [ 1670.607616][T19545] ? sysfs_warn_dup+0xa0/0xa0 [ 1670.612302][T19545] ? do_raw_spin_unlock+0x11d/0x230 [ 1670.617508][T19545] kobject_add_internal+0x5ba/0xcd0 [ 1670.622749][T19545] kobject_add+0x160/0x230 [ 1670.627174][T19545] ? kobject_init+0x1c0/0x1c0 [ 1670.631861][T19545] ? __raw_spin_lock_init+0x41/0x100 [ 1670.637147][T19545] ? klist_children_get+0x50/0x50 [ 1670.642171][T19545] ? get_device_parent+0x121/0x3e0 [ 1670.647289][T19545] device_add+0x470/0x1050 [ 1670.651710][T19545] ? device_initialize+0x2a5/0x4d0 [ 1670.656828][T19545] hci_conn_add_sysfs+0xd1/0x1e0 [ 1670.661777][T19545] le_conn_complete_evt+0xc55/0x14d0 [ 1670.667073][T19545] ? cs_le_create_conn+0x5e0/0x5e0 [ 1670.672201][T19545] hci_le_meta_evt+0xd36/0x3ca0 [ 1670.677107][T19545] ? mark_lock+0x94/0x320 [ 1670.681438][T19545] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1670.687427][T19545] ? lock_chain_count+0x20/0x20 [ 1670.692279][T19545] ? hci_remote_host_features_evt+0x240/0x240 [ 1670.698352][T19545] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 1670.703994][T19545] ? lockdep_hardirqs_on+0x94/0x140 [ 1670.709205][T19545] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 1670.714853][T19545] ? hci_event_packet+0x372/0x1310 [ 1670.719977][T19545] hci_event_packet+0xe0b/0x1310 [ 1670.724931][T19545] ? _raw_spin_unlock+0x40/0x40 [ 1670.729791][T19545] ? rcu_lock_release+0x20/0x20 [ 1670.734660][T19545] ? hci_send_to_monitor+0x9c/0x4a0 [ 1670.739866][T19545] hci_rx_work+0x255/0xa10 [ 1670.744299][T19545] process_one_work+0x867/0xff0 [ 1670.749169][T19545] ? worker_detach_from_pool+0x240/0x240 [ 1670.754801][T19545] ? lockdep_hardirqs_off+0x70/0x100 [ 1670.760097][T19545] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1670.765123][T19545] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1670.770726][T19545] ? wq_worker_running+0x97/0x170 [ 1670.775767][T19545] worker_thread+0xad7/0x12a0 [ 1670.780501][T19545] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1670.786420][T19545] kthread+0x42e/0x520 [ 1670.790506][T19545] ? rcu_lock_release+0x20/0x20 [ 1670.795370][T19545] ? kthread_blkcg+0xd0/0xd0 [ 1670.799984][T19545] ret_from_fork+0x1f/0x30 [ 1670.804428][T19545] [ 1670.810413][T19545] kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1670.824829][T19545] Bluetooth: hci2: failed to register connection device [ 1670.884846][T23469] loop1: detected capacity change from 0 to 256 [ 1671.381181][T23436] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1671.390427][T23436] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1671.399656][T23436] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1671.462719][T23436] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1672.336303][T23482] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5064'. [ 1673.302006][T23490] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 1673.336860][T23490] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 1673.470245][ T7161] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1673.593089][ T7161] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1673.715168][ T7161] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1673.826883][ T7161] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1674.234822][T23506] rxe_eth0 speed is unknown, defaulting to 1000 [ 1675.368544][T23523] bridge2: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 1676.181535][T21591] Bluetooth: hci4: command 0x0409 tx timeout [ 1676.661453][T23548] bridge0: port 2(bridge_slave_1) entered disabled state [ 1676.669413][T23548] bridge0: port 1(bridge_slave_0) entered disabled state [ 1676.901851][T23561] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5085'. [ 1677.505362][T23548] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1677.560657][T23548] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1677.950049][T23548] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1677.959859][T23548] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1677.971273][T23548] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1677.980336][T23548] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1678.210096][T23506] chnl_net:caif_netlink_parms(): no params data found [ 1678.328015][ T6247] Bluetooth: hci4: command 0x041b tx timeout [ 1678.368262][T23566] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 1679.069260][T23506] bridge0: port 1(bridge_slave_0) entered blocking state [ 1679.122201][T23506] bridge0: port 1(bridge_slave_0) entered disabled state [ 1679.156550][T23506] device bridge_slave_0 entered promiscuous mode [ 1679.375882][T23580] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 1679.409556][T23506] bridge0: port 2(bridge_slave_1) entered blocking state [ 1679.441484][T23506] bridge0: port 2(bridge_slave_1) entered disabled state [ 1679.470524][T23506] device bridge_slave_1 entered promiscuous mode [ 1679.654929][T23604] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5098'. [ 1679.972794][T23506] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1680.003725][T23506] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1680.078863][T23606] rxe_eth0 speed is unknown, defaulting to 1000 [ 1680.171734][T23506] team0: Port device team_slave_0 added [ 1680.232186][T23506] team0: Port device team_slave_1 added [ 1680.295360][T23506] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1680.321328][T23506] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1680.391277][T23506] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1680.431336][ T4265] Bluetooth: hci4: command 0x040f tx timeout [ 1680.440328][ T7161] device hsr_slave_0 left promiscuous mode [ 1680.457128][ T7161] device hsr_slave_1 left promiscuous mode [ 1680.480913][ T7161] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1680.490933][ T7161] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1680.514157][ T7161] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1680.545578][ T7161] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1680.558965][ T7161] device bridge_slave_1 left promiscuous mode [ 1680.565353][ T7161] bridge0: port 2(bridge_slave_1) entered disabled state [ 1680.574090][ T7161] device bridge_slave_0 left promiscuous mode [ 1680.580502][ T7161] bridge0: port 1(bridge_slave_0) entered disabled state [ 1680.598552][ T7161] device veth1_macvtap left promiscuous mode [ 1680.608814][ T7161] device veth0_macvtap left promiscuous mode [ 1680.618002][ T7161] device veth1_vlan left promiscuous mode [ 1680.628697][ T7161] device veth0_vlan left promiscuous mode [ 1680.742248][ T7161] bond1 (unregistering): (slave bridge1): Releasing active interface [ 1680.756335][ T7161] bond1 (unregistering): Released all slaves [ 1680.827599][ T7161] team0 (unregistering): Port device team_slave_1 removed [ 1680.839294][ T7161] team0 (unregistering): Port device team_slave_0 removed [ 1680.850243][ T7161] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1680.867155][ T7161] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1680.923708][ T7161] bond0 (unregistering): Released all slaves [ 1680.940270][T23506] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1680.947293][T23506] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1680.973377][T23506] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1681.074116][T23506] device hsr_slave_0 entered promiscuous mode [ 1681.088107][T23506] device hsr_slave_1 entered promiscuous mode [ 1681.105396][T23506] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1681.113807][T23506] Cannot create hsr debugfs directory [ 1681.301170][T23606] chnl_net:caif_netlink_parms(): no params data found [ 1681.407078][T23506] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1681.429497][T23506] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1681.478112][T23506] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1681.491665][T23506] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1681.571911][T23606] bridge0: port 1(bridge_slave_0) entered blocking state [ 1681.579028][T23606] bridge0: port 1(bridge_slave_0) entered disabled state [ 1681.598864][T23606] device bridge_slave_0 entered promiscuous mode [ 1681.630914][T23606] bridge0: port 2(bridge_slave_1) entered blocking state [ 1681.638143][T23606] bridge0: port 2(bridge_slave_1) entered disabled state [ 1681.646299][T23606] device bridge_slave_1 entered promiscuous mode [ 1681.669957][T23606] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1681.681895][T23606] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1681.736123][T23606] team0: Port device team_slave_0 added [ 1681.753351][T23606] team0: Port device team_slave_1 added [ 1681.797802][ T4265] Bluetooth: hci3: command 0x0409 tx timeout [ 1681.798205][T23606] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1681.811116][T23606] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1681.849108][T23606] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1681.864149][T23506] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1681.871804][T23606] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1681.878765][T23606] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1681.905298][T23606] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1681.940786][ T4956] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1681.962774][ T4956] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1681.983948][T23506] 8021q: adding VLAN 0 to HW filter on device team0 [ 1682.012280][ T4956] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1682.031708][ T4956] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1682.051595][ T4956] bridge0: port 1(bridge_slave_0) entered blocking state [ 1682.058703][ T4956] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1682.081668][ T4956] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1682.101668][ T4956] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1682.111708][ T4956] bridge0: port 2(bridge_slave_1) entered blocking state [ 1682.118797][ T4956] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1682.159022][ T4956] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1682.184096][ T4956] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1682.193979][ T4956] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1682.203495][ T4956] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1682.213491][ T4956] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1682.226132][T23606] device hsr_slave_0 entered promiscuous mode [ 1682.233638][T23606] device hsr_slave_1 entered promiscuous mode [ 1682.240370][T23606] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1682.248635][T23606] Cannot create hsr debugfs directory [ 1682.259054][ T4956] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1682.268488][ T4956] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1682.277566][ T4956] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1682.332821][ T5250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1682.341786][ T5250] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1682.350236][ T5250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1682.359189][ T5250] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1682.370191][T23506] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1682.509112][ T5226] Bluetooth: hci4: command 0x0419 tx timeout [ 1682.511187][T23606] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1682.543718][T23606] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1682.556910][T23606] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1682.577975][T23606] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1682.690630][T23606] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1682.716387][ T5250] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1682.728160][ T5250] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1682.744119][T23506] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1682.758197][T23606] 8021q: adding VLAN 0 to HW filter on device team0 [ 1682.768560][ T5250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1682.777465][ T5250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1682.804737][ T5250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1682.814143][ T5250] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1682.823650][ T5250] bridge0: port 1(bridge_slave_0) entered blocking state [ 1682.830715][ T5250] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1682.839807][ T5250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1682.852389][ T5250] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1682.871502][ T5250] bridge0: port 2(bridge_slave_1) entered blocking state [ 1682.878603][ T5250] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1682.898388][ T5250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1682.907715][ T5250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1682.933848][ T5250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1682.942969][ T5250] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1682.970658][T23606] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1683.001292][T23606] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1683.028958][ T5250] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1683.055907][ T5250] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1683.064544][ T5250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1683.080936][ T5250] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1683.098424][ T5250] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1683.122417][ T5250] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1683.145206][ T5250] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1683.321544][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1683.330978][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1683.367275][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1683.398642][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1683.418990][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1683.442403][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1683.470881][T23506] device veth0_vlan entered promiscuous mode [ 1683.499338][T23606] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1683.517727][T23506] device veth1_vlan entered promiscuous mode [ 1683.536862][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1683.562095][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1683.569916][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1683.623129][ T4956] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1683.658985][ T4956] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1683.678532][ T4956] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1683.689491][T23506] device veth0_macvtap entered promiscuous mode [ 1683.711017][T23506] device veth1_macvtap entered promiscuous mode [ 1683.748950][T23506] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1683.769645][ T4956] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1683.783205][ T4956] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1683.792455][ T4956] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1683.800977][ T4956] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1683.818336][T23506] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1683.838519][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1683.853330][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1683.871020][T23506] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1683.880058][T20575] Bluetooth: hci3: command 0x041b tx timeout [ 1683.880597][T23506] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1683.901965][T23506] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1683.910706][T23506] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1683.943987][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1683.962132][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1684.020315][ T4956] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1684.033294][ T4956] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1684.045147][ T4956] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1684.057117][ T4956] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1684.074786][T23606] device veth0_vlan entered promiscuous mode [ 1684.109521][T23606] device veth1_vlan entered promiscuous mode [ 1684.124553][ T145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1684.138717][ T145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1684.155743][ T5250] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1684.205247][ T5250] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1684.215897][ T5250] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1684.231386][T23606] device veth0_macvtap entered promiscuous mode [ 1684.239585][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1684.247991][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1684.264111][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1684.279032][T23606] device veth1_macvtap entered promiscuous mode [ 1684.332312][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1684.351765][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1684.375683][T23606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1684.386879][T23606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1684.398771][T23606] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1684.423104][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1684.440126][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1684.479173][T23606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1684.500255][T23606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1684.572058][T23606] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1684.615252][T23606] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1684.681568][T23606] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1684.711338][T23606] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1684.728370][T23606] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1684.804642][T14826] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 1684.815673][T14826] CPU: 1 PID: 14826 Comm: kworker/u5:1 Not tainted syzkaller #0 [ 1684.823343][T14826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1684.833420][T14826] Workqueue: hci4 hci_rx_work [ 1684.838125][T14826] Call Trace: [ 1684.841414][T14826] [ 1684.844345][T14826] dump_stack_lvl+0x188/0x250 [ 1684.849038][T14826] ? show_regs_print_info+0x20/0x20 [ 1684.854259][T14826] ? load_image+0x410/0x410 [ 1684.858802][T14826] sysfs_create_dir_ns+0x26a/0x290 [ 1684.863926][T14826] ? sysfs_warn_dup+0xa0/0xa0 [ 1684.868641][T14826] ? do_raw_spin_unlock+0x11d/0x230 [ 1684.873854][T14826] kobject_add_internal+0x5ba/0xcd0 [ 1684.879072][T14826] kobject_add+0x160/0x230 [ 1684.883512][T14826] ? kobject_init+0x1c0/0x1c0 [ 1684.888199][T14826] ? __raw_spin_lock_init+0x41/0x100 [ 1684.893492][T14826] ? klist_children_get+0x50/0x50 [ 1684.898561][T14826] ? get_device_parent+0x121/0x3e0 [ 1684.903682][T14826] device_add+0x470/0x1050 [ 1684.908118][T14826] ? device_initialize+0x2a5/0x4d0 [ 1684.913239][T14826] hci_conn_add_sysfs+0xd1/0x1e0 [ 1684.918192][T14826] le_conn_complete_evt+0xc55/0x14d0 [ 1684.923534][T14826] ? cs_le_create_conn+0x5e0/0x5e0 [ 1684.928672][T14826] hci_le_meta_evt+0xd36/0x3ca0 [ 1684.933538][T14826] ? mark_lock+0x94/0x320 [ 1684.937875][T14826] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1684.943886][T14826] ? lock_chain_count+0x20/0x20 [ 1684.948743][T14826] ? hci_remote_host_features_evt+0x240/0x240 [ 1684.954826][T14826] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 1684.960469][T14826] ? lockdep_hardirqs_on+0x94/0x140 [ 1684.965680][T14826] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 1684.971329][T14826] ? hci_event_packet+0x372/0x1310 [ 1684.976456][T14826] hci_event_packet+0xe0b/0x1310 [ 1684.981404][T14826] ? __hci_send_to_channel+0x201/0x280 [ 1684.986876][T14826] ? hci_send_to_monitor+0x27/0x4a0 [ 1684.992095][T14826] ? rcu_lock_release+0x20/0x20 [ 1684.996957][T14826] ? kasan_check_range+0x7d/0x290 [ 1685.002042][T14826] ? hci_send_to_monitor+0x9c/0x4a0 [ 1685.007265][T14826] hci_rx_work+0x255/0xa10 [ 1685.011713][T14826] process_one_work+0x867/0xff0 [ 1685.016591][T14826] ? worker_detach_from_pool+0x240/0x240 [ 1685.022354][T14826] ? lockdep_hardirqs_off+0x70/0x100 [ 1685.027681][T14826] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1685.032784][T14826] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1685.038374][T14826] ? wq_worker_running+0x97/0x170 [ 1685.043441][T14826] worker_thread+0xad7/0x12a0 [ 1685.048148][T14826] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1685.054077][T14826] kthread+0x42e/0x520 [ 1685.058177][T14826] ? rcu_lock_release+0x20/0x20 [ 1685.063086][T14826] ? kthread_blkcg+0xd0/0xd0 [ 1685.067696][T14826] ret_from_fork+0x1f/0x30 [ 1685.072980][T14826] [ 1685.122582][T14826] kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1685.136141][T14826] Bluetooth: hci4: failed to register connection device [ 1685.178427][T22771] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1685.201122][T22771] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1685.377096][T23734] rxe_eth0 speed is unknown, defaulting to 1000 [ 1685.534124][ T5250] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1685.561390][ T5250] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1685.582432][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1685.633119][T22771] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1685.643708][T22771] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1685.655911][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1685.941395][T13283] Bluetooth: hci3: command 0x040f tx timeout [ 1686.580244][T23746] bridge0: port 2(bridge_slave_1) entered disabled state [ 1686.590885][T23746] bridge0: port 1(bridge_slave_0) entered disabled state [ 1686.659846][T23761] fuse: Bad value for 'fd' [ 1687.687624][ T21] Bluetooth: hci0: command 0x0409 tx timeout [ 1688.031092][T23746] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1688.055975][T20575] Bluetooth: hci3: command 0x0419 tx timeout [ 1688.082432][T23746] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1688.617513][T23746] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1688.662573][T14826] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 1688.672796][T14826] CPU: 0 PID: 14826 Comm: kworker/u5:1 Not tainted syzkaller #0 [ 1688.680581][T14826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1688.691238][T14826] Workqueue: hci2 hci_rx_work [ 1688.696054][T14826] Call Trace: [ 1688.699347][T14826] [ 1688.702282][T14826] dump_stack_lvl+0x188/0x250 [ 1688.707407][T14826] ? show_regs_print_info+0x20/0x20 [ 1688.713089][T14826] ? load_image+0x410/0x410 [ 1688.717756][T14826] sysfs_create_dir_ns+0x26a/0x290 [ 1688.722994][T14826] ? sysfs_warn_dup+0xa0/0xa0 [ 1688.727871][T14826] kobject_add_internal+0x5ba/0xcd0 [ 1688.733082][T14826] kobject_add+0x160/0x230 [ 1688.737604][T14826] ? kobject_init+0x1c0/0x1c0 [ 1688.742289][T14826] ? __raw_spin_lock_init+0x41/0x100 [ 1688.747585][T14826] ? klist_children_get+0x50/0x50 [ 1688.752614][T14826] ? get_device_parent+0x121/0x3e0 [ 1688.757844][T14826] device_add+0x470/0x1050 [ 1688.762265][T14826] ? device_initialize+0x2a5/0x4d0 [ 1688.767563][T14826] hci_conn_add_sysfs+0xd1/0x1e0 [ 1688.773057][T14826] le_conn_complete_evt+0xc55/0x14d0 [ 1688.778511][T14826] ? cs_le_create_conn+0x5e0/0x5e0 [ 1688.783647][T14826] ? lockdep_hardirqs_on+0x94/0x140 [ 1688.789135][T14826] hci_le_meta_evt+0xd36/0x3ca0 [ 1688.794009][T14826] ? hci_event_packet+0x363/0x1310 [ 1688.799160][T14826] ? __lock_acquire+0x7d40/0x7d40 [ 1688.804218][T14826] ? hci_remote_host_features_evt+0x240/0x240 [ 1688.810739][T14826] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 1688.816386][T14826] ? mark_lock+0x94/0x320 [ 1688.820736][T14826] ? mutex_unlock+0x10/0x10 [ 1688.825258][T14826] ? mark_lock+0x94/0x320 [ 1688.829695][T14826] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1688.835683][T14826] ? __cond_resched+0xd0/0xd0 [ 1688.840420][T14826] hci_event_packet+0xe0b/0x1310 [ 1688.845576][T14826] ? rcu_lock_release+0x20/0x20 [ 1688.850450][T14826] ? hci_rx_work+0x248/0xa10 [ 1688.855045][T14826] hci_rx_work+0x255/0xa10 [ 1688.859473][T14826] process_one_work+0x867/0xff0 [ 1688.864350][T14826] ? worker_detach_from_pool+0x240/0x240 [ 1688.869987][T14826] ? lockdep_hardirqs_off+0x70/0x100 [ 1688.875283][T14826] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1688.880919][T14826] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1688.886477][T14826] ? wq_worker_running+0x97/0x170 [ 1688.891605][T14826] worker_thread+0xad7/0x12a0 [ 1688.896478][T14826] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1688.902388][T14826] kthread+0x42e/0x520 [ 1688.904717][T23746] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1688.906636][T14826] ? rcu_lock_release+0x20/0x20 [ 1688.920835][T14826] ? kthread_blkcg+0xd0/0xd0 [ 1688.925470][T14826] ret_from_fork+0x1f/0x30 [ 1688.926641][T23746] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1688.929908][T14826] [ 1688.951463][T14826] kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1688.953047][T23746] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1688.964893][T14826] Bluetooth: hci2: failed to register connection device [ 1689.068074][T23748] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 1689.313862][T23734] chnl_net:caif_netlink_parms(): no params data found [ 1690.030596][ T23] Bluetooth: hci0: command 0x041b tx timeout [ 1690.261394][T23734] bridge0: port 1(bridge_slave_0) entered blocking state [ 1690.268533][T23734] bridge0: port 1(bridge_slave_0) entered disabled state [ 1690.331849][T23734] device bridge_slave_0 entered promiscuous mode [ 1690.352501][T23734] bridge0: port 2(bridge_slave_1) entered blocking state [ 1690.381380][T23734] bridge0: port 2(bridge_slave_1) entered disabled state [ 1690.389533][T23734] device bridge_slave_1 entered promiscuous mode [ 1690.585033][T23734] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1690.615435][T23818] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 1690.664400][T23734] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1690.711039][T23816] rxe_eth0 speed is unknown, defaulting to 1000 [ 1690.760798][ T7161] bond2: (slave gretap1): Removing an active aggregator [ 1690.784912][ T7161] bond2: (slave gretap1): Releasing backup interface [ 1690.834320][T23734] team0: Port device team_slave_0 added [ 1690.854497][T23734] team0: Port device team_slave_1 added [ 1690.944135][T23734] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1690.951113][T23734] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1691.191991][T23734] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1691.263371][T10868] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 1691.564215][T10868] CPU: 0 PID: 10868 Comm: kworker/u5:0 Not tainted syzkaller #0 [ 1691.572124][T10868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1691.582182][T10868] Workqueue: hci2 hci_rx_work [ 1691.586869][T10868] Call Trace: [ 1691.590149][T10868] [ 1691.593095][T10868] dump_stack_lvl+0x188/0x250 [ 1691.597884][T10868] ? show_regs_print_info+0x20/0x20 [ 1691.603096][T10868] ? load_image+0x410/0x410 [ 1691.607717][T10868] sysfs_create_dir_ns+0x26a/0x290 [ 1691.612841][T10868] ? sysfs_warn_dup+0xa0/0xa0 [ 1691.617578][T10868] kobject_add_internal+0x5ba/0xcd0 [ 1691.622822][T10868] kobject_add+0x160/0x230 [ 1691.627301][T10868] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 1691.633055][T10868] ? kobject_init+0x1c0/0x1c0 [ 1691.637732][T10868] ? __raw_spin_lock_init+0x41/0x100 [ 1691.643021][T10868] ? klist_children_get+0x50/0x50 [ 1691.648068][T10868] ? get_device_parent+0x121/0x3e0 [ 1691.653202][T10868] device_add+0x470/0x1050 [ 1691.657798][T10868] ? device_initialize+0x2a5/0x4d0 [ 1691.662916][T10868] hci_conn_add_sysfs+0xd1/0x1e0 [ 1691.667868][T10868] le_conn_complete_evt+0xc55/0x14d0 [ 1691.673167][T10868] ? cs_le_create_conn+0x5e0/0x5e0 [ 1691.678277][T10868] ? lockdep_hardirqs_on+0x94/0x140 [ 1691.683487][T10868] ? hci_le_meta_evt+0xa6/0x3ca0 [ 1691.688423][T10868] hci_le_meta_evt+0xd36/0x3ca0 [ 1691.693272][T10868] ? hci_event_packet+0x363/0x1310 [ 1691.698396][T10868] ? __lock_acquire+0x7d40/0x7d40 [ 1691.703411][T10868] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1691.709641][T10868] ? lock_chain_count+0x20/0x20 [ 1691.714513][T10868] ? hci_remote_host_features_evt+0x240/0x240 [ 1691.720578][T10868] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 1691.726290][T10868] ? mutex_unlock+0x10/0x10 [ 1691.730777][T10868] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 1691.736412][T10868] hci_event_packet+0xe0b/0x1310 [ 1691.741343][T10868] ? _raw_spin_unlock+0x40/0x40 [ 1691.746208][T10868] ? rcu_lock_release+0x20/0x20 [ 1691.751153][T10868] ? lock_acquire+0x209/0x400 [ 1691.755866][T10868] ? hci_send_to_monitor+0x9c/0x4a0 [ 1691.761074][T10868] hci_rx_work+0x255/0xa10 [ 1691.765493][T10868] process_one_work+0x867/0xff0 [ 1691.770347][T10868] ? worker_detach_from_pool+0x240/0x240 [ 1691.776087][T10868] ? lockdep_hardirqs_off+0x70/0x100 [ 1691.781387][T10868] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1691.786428][T10868] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1691.791970][T10868] ? wq_worker_running+0x97/0x170 [ 1691.797076][T10868] worker_thread+0xad7/0x12a0 [ 1691.801955][T10868] kthread+0x42e/0x520 [ 1691.806028][T10868] ? rcu_lock_release+0x20/0x20 [ 1691.810867][T10868] ? kthread_blkcg+0xd0/0xd0 [ 1691.815536][T10868] ret_from_fork+0x1f/0x30 [ 1691.819949][T10868] [ 1691.826772][T10868] kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1691.840210][T10868] Bluetooth: hci2: failed to register connection device [ 1691.853435][T23734] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1691.866806][T23734] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1691.902833][T23734] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1691.937466][T23734] device hsr_slave_0 entered promiscuous mode [ 1691.944592][T23734] device hsr_slave_1 entered promiscuous mode [ 1691.951291][T23734] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1691.959017][T23734] Cannot create hsr debugfs directory [ 1692.101638][ T4265] Bluetooth: hci0: command 0x040f tx timeout [ 1692.294238][T23816] chnl_net:caif_netlink_parms(): no params data found [ 1692.663098][T23816] bridge0: port 1(bridge_slave_0) entered blocking state [ 1692.671341][T13283] Bluetooth: hci1: command 0x0409 tx timeout [ 1692.682538][T23816] bridge0: port 1(bridge_slave_0) entered disabled state [ 1692.690313][T23816] device bridge_slave_0 entered promiscuous mode [ 1692.820499][T23816] bridge0: port 2(bridge_slave_1) entered blocking state [ 1692.862950][T23816] bridge0: port 2(bridge_slave_1) entered disabled state [ 1692.888089][T23816] device bridge_slave_1 entered promiscuous mode [ 1692.914838][T23872] rxe_eth0 speed is unknown, defaulting to 1000 [ 1692.935390][T23816] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1692.982417][T23816] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1693.089734][T23816] team0: Port device team_slave_0 added [ 1693.154996][T23816] team0: Port device team_slave_1 added [ 1693.173874][T23734] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1693.239162][T23734] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1693.278788][T23816] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1693.302137][T23816] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1693.371320][T23816] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1693.412425][T23734] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1693.462793][T23816] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1693.469764][T23816] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1693.549216][T23816] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1693.571569][T23734] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1693.687328][ T7161] device hsr_slave_0 left promiscuous mode [ 1693.713693][ T7161] device hsr_slave_1 left promiscuous mode [ 1693.731682][ T7161] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1693.754540][ T7161] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1694.481352][ T5567] Bluetooth: hci0: command 0x0419 tx timeout [ 1694.504627][ T26] audit: type=1326 audit(1793353439.873:5350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23899 comm="syz.0.5139" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27e30a8559 code=0x7ffc0000 [ 1694.529607][ T7161] device bridge_slave_1 left promiscuous mode [ 1694.547603][ T7161] bridge0: port 2(bridge_slave_1) entered disabled state [ 1694.568902][ T7161] device bridge_slave_0 left promiscuous mode [ 1694.578678][ T26] audit: type=1326 audit(1793353439.873:5351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23899 comm="syz.0.5139" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27e30a8559 code=0x7ffc0000 [ 1694.601718][ T7161] bridge0: port 1(bridge_slave_0) entered disabled state [ 1694.612606][ T26] audit: type=1326 audit(1793353439.873:5352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23899 comm="syz.0.5139" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27e30a8559 code=0x7ffc0000 [ 1694.637284][ T26] audit: type=1326 audit(1793353439.873:5353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23899 comm="syz.0.5139" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27e30a8559 code=0x7ffc0000 [ 1694.661395][T23373] Bluetooth: hci3: command 0x0409 tx timeout [ 1694.663796][ T26] audit: type=1326 audit(1793353439.873:5354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23899 comm="syz.0.5139" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f27e30a8559 code=0x7ffc0000 [ 1694.693300][ T26] audit: type=1326 audit(1793353439.873:5355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23899 comm="syz.0.5139" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27e30a8559 code=0x7ffc0000 [ 1694.718201][ T7161] device hsr_slave_0 left promiscuous mode [ 1694.718527][ T26] audit: type=1326 audit(1793353439.873:5356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23899 comm="syz.0.5139" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27e30a8559 code=0x7ffc0000 [ 1694.741308][ T5567] Bluetooth: hci1: command 0x041b tx timeout [ 1694.749118][ T26] audit: type=1326 audit(1793353439.873:5357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23899 comm="syz.0.5139" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27e30a8559 code=0x7ffc0000 [ 1694.779893][ T7161] device hsr_slave_1 left promiscuous mode [ 1694.785667][ T26] audit: type=1326 audit(1793353439.873:5358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23899 comm="syz.0.5139" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27e30a8559 code=0x7ffc0000 [ 1694.812177][ T26] audit: type=1326 audit(1793353439.873:5359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23899 comm="syz.0.5139" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f27e30a8559 code=0x7ffc0000 [ 1694.845401][ T7161] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1694.858726][ T7161] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1694.875434][ T7161] device bridge_slave_1 left promiscuous mode [ 1694.886312][ T7161] bridge0: port 2(bridge_slave_1) entered disabled state [ 1694.899209][ T7161] device bridge_slave_0 left promiscuous mode [ 1694.910056][ T7161] bridge0: port 1(bridge_slave_0) entered disabled state [ 1694.947486][ T7161] bond1 (unregistering): (slave bridge1): Releasing active interface [ 1694.970504][ T7161] bond1 (unregistering): Released all slaves [ 1695.101710][T19545] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 1695.111901][T19545] CPU: 0 PID: 19545 Comm: kworker/u5:2 Not tainted syzkaller #0 [ 1695.119550][T19545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1695.129616][T19545] Workqueue: hci4 hci_rx_work [ 1695.134312][T19545] Call Trace: [ 1695.137597][T19545] [ 1695.140528][T19545] dump_stack_lvl+0x188/0x250 [ 1695.145226][T19545] ? show_regs_print_info+0x20/0x20 [ 1695.150456][T19545] ? load_image+0x410/0x410 [ 1695.154993][T19545] sysfs_create_dir_ns+0x26a/0x290 [ 1695.160125][T19545] ? sysfs_warn_dup+0xa0/0xa0 [ 1695.164984][T19545] ? kthread+0x42e/0x520 [ 1695.169298][T19545] ? do_raw_spin_unlock+0x11d/0x230 [ 1695.174602][T19545] kobject_add_internal+0x5ba/0xcd0 [ 1695.179832][T19545] kobject_add+0x160/0x230 [ 1695.184309][T19545] ? kobject_init+0x1c0/0x1c0 [ 1695.188997][T19545] ? __raw_spin_lock_init+0x41/0x100 [ 1695.194313][T19545] ? klist_children_get+0x50/0x50 [ 1695.199372][T19545] ? get_device_parent+0x121/0x3e0 [ 1695.204737][T19545] device_add+0x470/0x1050 [ 1695.209171][T19545] ? device_initialize+0x2a5/0x4d0 [ 1695.214382][T19545] hci_conn_add_sysfs+0xd1/0x1e0 [ 1695.219343][T19545] le_conn_complete_evt+0xc55/0x14d0 [ 1695.224647][T19545] ? cs_le_create_conn+0x5e0/0x5e0 [ 1695.229767][T19545] ? preempt_schedule_common+0xa5/0xd0 [ 1695.235236][T19545] ? preempt_schedule+0xbc/0xd0 [ 1695.240095][T19545] ? schedule_preempt_disabled+0x20/0x20 [ 1695.245742][T19545] ? __mutex_trylock_common+0x15c/0x260 [ 1695.251389][T19545] hci_le_meta_evt+0xd36/0x3ca0 [ 1695.256246][T19545] ? hci_event_packet+0x363/0x1310 [ 1695.261480][T19545] ? __lock_acquire+0x7d40/0x7d40 [ 1695.266529][T19545] ? release_firmware_map_entry+0x190/0x190 [ 1695.272436][T19545] ? hci_remote_host_features_evt+0x240/0x240 [ 1695.278518][T19545] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 1695.284161][T19545] ? mark_lock+0x94/0x320 [ 1695.288495][T19545] ? mutex_unlock+0x10/0x10 [ 1695.293001][T19545] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1695.298987][T19545] ? lock_chain_count+0x20/0x20 [ 1695.303841][T19545] ? __rwlock_init+0x140/0x140 [ 1695.308616][T19545] hci_event_packet+0xe0b/0x1310 [ 1695.313562][T19545] ? _raw_spin_unlock+0x40/0x40 [ 1695.318416][T19545] ? rcu_lock_release+0x20/0x20 [ 1695.323267][T19545] ? lock_acquire+0x209/0x400 [ 1695.328041][T19545] ? hci_send_to_monitor+0x9c/0x4a0 [ 1695.333246][T19545] hci_rx_work+0x255/0xa10 [ 1695.337681][T19545] process_one_work+0x867/0xff0 [ 1695.342556][T19545] ? worker_detach_from_pool+0x240/0x240 [ 1695.348196][T19545] ? lockdep_hardirqs_off+0x70/0x100 [ 1695.353488][T19545] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1695.358523][T19545] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1695.364287][T19545] ? wq_worker_running+0x97/0x170 [ 1695.369430][T19545] worker_thread+0xad7/0x12a0 [ 1695.374137][T19545] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1695.380072][T19545] kthread+0x42e/0x520 [ 1695.384159][T19545] ? rcu_lock_release+0x20/0x20 [ 1695.389033][T19545] ? kthread_blkcg+0xd0/0xd0 [ 1695.393644][T19545] ret_from_fork+0x1f/0x30 [ 1695.398087][T19545] [ 1695.404722][T19545] kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1695.412401][ T7161] team0 (unregistering): Port device team_slave_1 removed [ 1695.418120][T19545] Bluetooth: hci4: failed to register connection device [ 1695.443322][ T7161] team0 (unregistering): Port device team_slave_0 removed [ 1695.455746][ T7161] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1695.472230][ T7161] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1695.535833][ T7161] bond0 (unregistering): Released all slaves [ 1695.558034][ T7161] bond2 (unregistering): Released all slaves [ 1695.568515][ T7161] bond1 (unregistering): (slave bridge1): Releasing active interface [ 1695.580141][ T7161] bond1 (unregistering): Released all slaves [ 1695.660113][ T7161] team0 (unregistering): Port device team_slave_1 removed [ 1695.675851][ T7161] team0 (unregistering): Port device team_slave_0 removed [ 1695.689085][ T7161] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1695.704173][ T7161] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1695.764185][ T7161] bond0 (unregistering): Released all slaves [ 1695.898490][T23816] device hsr_slave_0 entered promiscuous mode [ 1695.920607][T23816] device hsr_slave_1 entered promiscuous mode [ 1696.049140][T23734] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1696.450199][ T4956] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1696.492016][ T4956] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1696.722642][T23734] 8021q: adding VLAN 0 to HW filter on device team0 [ 1696.741347][T23371] Bluetooth: hci3: command 0x041b tx timeout [ 1696.905601][T23872] chnl_net:caif_netlink_parms(): no params data found [ 1696.913890][ T5567] Bluetooth: hci1: command 0x040f tx timeout [ 1696.964700][ T4956] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1696.973568][ T4956] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1696.991641][ T4956] bridge0: port 1(bridge_slave_0) entered blocking state [ 1696.998741][ T4956] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1697.040502][ T4956] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1697.082945][ T4956] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1697.093611][ T4956] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1697.102614][ T4956] bridge0: port 2(bridge_slave_1) entered blocking state [ 1697.109707][ T4956] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1697.117604][ T4956] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1697.126717][ T4956] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1697.136079][ T4956] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1697.147708][ T4956] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1697.156658][ T4956] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1697.183181][T23816] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1697.220634][T23816] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1697.245710][T23816] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1697.267133][ T4956] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1697.284749][ T4956] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1697.297438][ T4956] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1697.306277][ T4956] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1697.314877][ T4956] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1697.329788][ T4956] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1697.340404][T23734] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1697.365728][T23872] bridge0: port 1(bridge_slave_0) entered blocking state [ 1697.373335][T23872] bridge0: port 1(bridge_slave_0) entered disabled state [ 1697.381939][T23872] device bridge_slave_0 entered promiscuous mode [ 1697.391121][T23872] bridge0: port 2(bridge_slave_1) entered blocking state [ 1697.398921][T23872] bridge0: port 2(bridge_slave_1) entered disabled state [ 1697.407634][T23872] device bridge_slave_1 entered promiscuous mode [ 1697.415366][T23816] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1697.484806][T23872] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1697.523639][T23872] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1697.592922][T23872] team0: Port device team_slave_0 added [ 1697.600732][T23872] team0: Port device team_slave_1 added [ 1697.652425][T23816] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1697.660783][T23872] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1697.677371][T23872] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1697.742758][T23872] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1697.764971][ T4956] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1697.773689][ T4956] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1697.810568][T23872] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1697.818426][T23872] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1697.848701][T23872] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1697.876991][T23816] 8021q: adding VLAN 0 to HW filter on device team0 [ 1697.890146][T23734] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1697.911587][T20810] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1697.919272][T20810] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1697.952412][T20810] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1697.961966][T20810] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1697.977639][T20810] bridge0: port 1(bridge_slave_0) entered blocking state [ 1697.984775][T20810] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1698.000578][T20810] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1698.009568][T20810] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1698.026585][T20810] bridge0: port 2(bridge_slave_1) entered blocking state [ 1698.033749][T20810] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1698.049882][T20810] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1698.073042][T23872] device hsr_slave_0 entered promiscuous mode [ 1698.080103][T23872] device hsr_slave_1 entered promiscuous mode [ 1698.095706][T23872] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1698.106863][T23872] Cannot create hsr debugfs directory [ 1698.167301][ T4956] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1698.182581][ T4956] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1698.193300][ T4956] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1698.227517][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1698.242133][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1698.263308][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1698.280278][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1698.291599][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1698.300542][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1698.318630][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1698.329573][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1698.346671][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1698.358680][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1698.383356][T23816] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1698.400569][T23734] device veth0_vlan entered promiscuous mode [ 1698.415525][ T4956] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1698.435255][ T4956] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1698.451996][ T4956] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1698.460187][ T4956] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1698.490903][T23734] device veth1_vlan entered promiscuous mode [ 1698.565113][ T5250] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1698.602182][ T5250] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1698.621733][ T5250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1698.653312][ T5250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1698.688863][T23734] device veth0_macvtap entered promiscuous mode [ 1698.720900][T23734] device veth1_macvtap entered promiscuous mode [ 1698.789096][T23872] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1698.815895][T23734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1698.831661][T23734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1698.852796][T23734] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1698.862293][T23872] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1698.883866][T23872] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1698.909298][T22771] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1698.922042][T22771] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1698.941907][T22771] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1698.961690][T22771] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1698.981778][ T5567] Bluetooth: hci1: command 0x0419 tx timeout [ 1698.988278][ T5567] Bluetooth: hci3: command 0x040f tx timeout [ 1699.005080][T23872] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1699.029318][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1699.058892][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1699.082348][T23734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1699.101992][T23734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1699.132630][T23734] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1699.143861][T23816] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1699.175158][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1699.210518][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1699.278608][T23734] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1699.290984][T23734] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1699.300578][T23734] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1699.310062][T23734] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1699.371949][T23872] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1699.439734][T20810] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1699.454901][T20810] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1699.492295][T23872] 8021q: adding VLAN 0 to HW filter on device team0 [ 1699.504430][ T151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1699.521453][ T151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1699.535968][ T4956] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1699.549014][ T4956] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1699.558732][ T4956] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1699.569518][ T4956] bridge0: port 1(bridge_slave_0) entered blocking state [ 1699.576662][ T4956] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1699.613678][ T4956] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1699.622595][ T4956] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1699.642884][ T4956] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1699.661621][ T4956] bridge0: port 2(bridge_slave_1) entered blocking state [ 1699.668714][ T4956] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1699.681009][ T4956] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1699.702661][ T4956] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1699.720444][ T4956] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1699.729908][ T4956] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1699.739236][ T4956] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1699.748653][ T4956] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1699.757538][ T4956] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1699.777509][T23872] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1699.788623][ T5250] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1699.806749][ T5250] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1699.818767][T23872] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1699.837500][ T4956] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1699.848001][ T4956] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1699.857419][ T4956] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1699.867103][ T4956] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1699.876222][ T4956] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1699.885759][ T4956] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1699.920144][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1699.943391][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1700.642263][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1700.660111][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1700.679160][T23816] device veth0_vlan entered promiscuous mode [ 1700.691438][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1700.706137][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1700.738198][T23816] device veth1_vlan entered promiscuous mode [ 1700.810719][T22771] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1700.831793][T22771] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1700.884067][T22771] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1700.916261][T22771] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1700.936826][T23816] device veth0_macvtap entered promiscuous mode [ 1700.964118][T23816] device veth1_macvtap entered promiscuous mode [ 1700.988064][T22771] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1700.996176][T22771] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1701.013135][T23816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1701.032166][T23816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1701.049147][T23816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1701.061116][T23816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1701.061324][T23372] Bluetooth: hci3: command 0x0419 tx timeout [ 1701.082504][T23816] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1701.092457][T23872] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1701.105610][ T7161] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1701.120466][T22771] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1701.134971][T22771] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1701.164398][T23816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1701.181409][T23816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1701.201283][T23816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1701.260189][T23816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1701.291761][T23816] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1701.312742][T23816] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1701.321952][T23816] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1701.331024][T23816] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1701.340051][T23816] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1701.354800][ T5250] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1701.449352][ T5250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1702.009896][ T7161] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1702.118137][ T7161] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1702.172654][ T7161] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1702.258241][T20810] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1702.287605][T20810] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1702.297377][ T26] kauditd_printk_skb: 45 callbacks suppressed [ 1702.297392][ T26] audit: type=1326 audit(1793353447.663:5405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24044 comm="syz.3.5152" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6895e92559 code=0x7ffc0000 [ 1702.370170][ T26] audit: type=1326 audit(1793353447.673:5406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24044 comm="syz.3.5152" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6895e92559 code=0x7ffc0000 [ 1702.407204][ T26] audit: type=1326 audit(1793353447.673:5407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24044 comm="syz.3.5152" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6895e92559 code=0x7ffc0000 [ 1702.448643][ T4956] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1702.499685][ T151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1702.539853][ T151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1702.570300][T20810] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1702.595362][T20810] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1702.641527][ T26] audit: type=1326 audit(1793353447.673:5408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24044 comm="syz.3.5152" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=300 compat=0 ip=0x7f6895e92559 code=0x7ffc0000 [ 1702.670963][T20810] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1702.672706][ T26] audit: type=1326 audit(1793353447.673:5409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24044 comm="syz.3.5152" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6895e92559 code=0x7ffc0000 [ 1702.714967][ T26] audit: type=1326 audit(1793353447.673:5410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24044 comm="syz.3.5152" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6895e92559 code=0x7ffc0000 [ 1702.799844][T19545] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 1702.809718][T19545] CPU: 1 PID: 19545 Comm: kworker/u5:2 Not tainted syzkaller #0 [ 1702.817379][T19545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1702.827525][T19545] Workqueue: hci2 hci_rx_work [ 1702.832250][T19545] Call Trace: [ 1702.835633][T19545] [ 1702.838561][T19545] dump_stack_lvl+0x188/0x250 [ 1702.843335][T19545] ? show_regs_print_info+0x20/0x20 [ 1702.848544][T19545] ? load_image+0x410/0x410 [ 1702.853064][T19545] sysfs_create_dir_ns+0x26a/0x290 [ 1702.858184][T19545] ? sysfs_warn_dup+0xa0/0xa0 [ 1702.862866][T19545] ? do_raw_spin_unlock+0x11d/0x230 [ 1702.868087][T19545] kobject_add_internal+0x5ba/0xcd0 [ 1702.873300][T19545] kobject_add+0x160/0x230 [ 1702.877731][T19545] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 1702.883997][T19545] ? kobject_init+0x1c0/0x1c0 [ 1702.889544][T19545] device_add+0x470/0x1050 [ 1702.894014][T19545] hci_conn_add_sysfs+0xd1/0x1e0 [ 1702.898973][T19545] le_conn_complete_evt+0xc55/0x14d0 [ 1702.904622][T19545] ? cs_le_create_conn+0x5e0/0x5e0 [ 1702.909858][T19545] ? __mutex_trylock_common+0x15c/0x260 [ 1702.915507][T19545] hci_le_meta_evt+0xd36/0x3ca0 [ 1702.921592][T19545] ? hci_event_packet+0x363/0x1310 [ 1702.926712][T19545] ? __lock_acquire+0x7d40/0x7d40 [ 1702.931759][T19545] ? release_firmware_map_entry+0x190/0x190 [ 1702.937658][T19545] ? hci_remote_host_features_evt+0x240/0x240 [ 1702.943728][T19545] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 1702.949377][T19545] ? mark_lock+0x94/0x320 [ 1702.953714][T19545] ? mutex_unlock+0x10/0x10 [ 1702.958232][T19545] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1702.964238][T19545] ? lock_chain_count+0x20/0x20 [ 1702.969113][T19545] ? __rwlock_init+0x140/0x140 [ 1702.973915][T19545] hci_event_packet+0xe0b/0x1310 [ 1702.978878][T19545] ? _raw_spin_unlock+0x40/0x40 [ 1702.983753][T19545] ? rcu_lock_release+0x20/0x20 [ 1702.988722][T19545] ? lock_acquire+0x209/0x400 [ 1702.993438][T19545] ? hci_send_to_monitor+0x9c/0x4a0 [ 1702.998677][T19545] hci_rx_work+0x255/0xa10 [ 1703.003146][T19545] process_one_work+0x867/0xff0 [ 1703.008084][T19545] ? worker_detach_from_pool+0x240/0x240 [ 1703.013741][T19545] ? lockdep_hardirqs_off+0x70/0x100 [ 1703.019059][T19545] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1703.024923][T19545] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1703.031661][T19545] ? wq_worker_running+0x97/0x170 [ 1703.037175][T19545] worker_thread+0xad7/0x12a0 [ 1703.041887][T19545] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1703.047898][T19545] kthread+0x42e/0x520 [ 1703.052241][T19545] ? rcu_lock_release+0x20/0x20 [ 1703.057093][T19545] ? kthread_blkcg+0xd0/0xd0 [ 1703.061784][T19545] ret_from_fork+0x1f/0x30 [ 1703.066317][T19545] [ 1703.092809][T19545] kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1703.108561][T19545] Bluetooth: hci2: failed to register connection device [ 1703.168131][T23872] device veth0_vlan entered promiscuous mode [ 1703.201805][ T26] audit: type=1326 audit(1793353447.673:5411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24044 comm="syz.3.5152" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f6895e92559 code=0x7ffc0000 [ 1703.230551][ T26] audit: type=1326 audit(1793353447.673:5412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24044 comm="syz.3.5152" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f6895e92559 code=0x7ffc0000 [ 1703.257592][T20810] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1703.276813][T20810] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1703.298850][T20810] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1703.308423][T20810] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1703.334580][T24068] blk_update_request: I/O error, dev loop6, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 1703.373440][T24068] EXT4-fs (loop6): unable to read superblock [ 1703.387944][T23872] device veth1_vlan entered promiscuous mode [ 1703.480550][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1703.510285][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1703.710907][T23872] device veth0_macvtap entered promiscuous mode [ 1703.746105][T24080] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 1704.428432][T23872] device veth1_macvtap entered promiscuous mode [ 1704.438594][T20810] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1704.447217][T20810] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1704.623210][T23872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1704.706047][T23872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1704.780183][T19545] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 1704.790265][T19545] CPU: 1 PID: 19545 Comm: kworker/u5:2 Not tainted syzkaller #0 [ 1704.797928][T19545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1704.808011][T19545] Workqueue: hci2 hci_rx_work [ 1704.812722][T19545] Call Trace: [ 1704.816022][T19545] [ 1704.819085][T19545] dump_stack_lvl+0x188/0x250 [ 1704.823831][T19545] ? show_regs_print_info+0x20/0x20 [ 1704.829045][T19545] ? load_image+0x410/0x410 [ 1704.833759][T19545] sysfs_create_dir_ns+0x26a/0x290 [ 1704.839018][T19545] ? sysfs_warn_dup+0xa0/0xa0 [ 1704.843713][T19545] ? lockdep_hardirqs_on+0x94/0x140 [ 1704.848933][T19545] ? do_raw_spin_unlock+0x11d/0x230 [ 1704.854140][T19545] kobject_add_internal+0x5ba/0xcd0 [ 1704.859356][T19545] kobject_add+0x160/0x230 [ 1704.863874][T19545] ? kobject_init+0x1c0/0x1c0 [ 1704.868648][T19545] ? __raw_spin_lock_init+0x41/0x100 [ 1704.873938][T19545] ? klist_children_get+0x50/0x50 [ 1704.878976][T19545] ? get_device_parent+0x121/0x3e0 [ 1704.884097][T19545] device_add+0x470/0x1050 [ 1704.888606][T19545] ? device_initialize+0x2a5/0x4d0 [ 1704.893731][T19545] hci_conn_add_sysfs+0xd1/0x1e0 [ 1704.898681][T19545] le_conn_complete_evt+0xc55/0x14d0 [ 1704.903986][T19545] ? cs_le_create_conn+0x5e0/0x5e0 [ 1704.909124][T19545] hci_le_meta_evt+0xd36/0x3ca0 [ 1704.913996][T19545] ? mark_lock+0x94/0x320 [ 1704.918335][T19545] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1704.924354][T19545] ? lock_chain_count+0x20/0x20 [ 1704.929212][T19545] ? hci_remote_host_features_evt+0x240/0x240 [ 1704.935290][T19545] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 1704.941023][T19545] ? lockdep_hardirqs_on+0x94/0x140 [ 1704.946237][T19545] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 1704.951889][T19545] ? hci_event_packet+0x372/0x1310 [ 1704.957014][T19545] hci_event_packet+0xe0b/0x1310 [ 1704.961967][T19545] ? _raw_spin_unlock+0x40/0x40 [ 1704.966825][T19545] ? rcu_lock_release+0x20/0x20 [ 1704.971777][T19545] ? hci_send_to_monitor+0x9c/0x4a0 [ 1704.976985][T19545] hci_rx_work+0x255/0xa10 [ 1704.981417][T19545] process_one_work+0x867/0xff0 [ 1704.986296][T19545] ? worker_detach_from_pool+0x240/0x240 [ 1704.991940][T19545] ? lockdep_hardirqs_off+0x70/0x100 [ 1704.997239][T19545] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1705.002279][T19545] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1705.007924][T19545] ? wq_worker_running+0x97/0x170 [ 1705.012969][T19545] worker_thread+0xad7/0x12a0 [ 1705.017671][T19545] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1705.023583][T19545] kthread+0x42e/0x520 [ 1705.027665][T19545] ? rcu_lock_release+0x20/0x20 [ 1705.032519][T19545] ? kthread_blkcg+0xd0/0xd0 [ 1705.037243][T19545] ret_from_fork+0x1f/0x30 [ 1705.041681][T19545] [ 1705.058561][T19545] kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1705.072580][T19545] Bluetooth: hci2: failed to register connection device [ 1705.080684][T23872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1705.091522][T23872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1705.105959][T23872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1705.117613][T23872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1705.166913][T23872] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1705.208279][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1705.233922][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1705.266921][T23872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1705.288496][T23872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1705.309133][T23872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1705.338251][T23872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1705.354043][T23872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1705.367389][T23872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1705.384602][T23872] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1705.471791][T14885] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1705.486678][T14885] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1705.508298][T23872] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1705.527850][T23872] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1705.558200][T23872] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1705.570260][T23872] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1705.738731][ T151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1705.751344][ T151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1705.791922][T20810] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1705.844517][T14885] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1705.876112][T14885] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1705.914202][T14885] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1706.068075][T24120] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 1707.925876][T19545] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 1707.936227][T19545] CPU: 0 PID: 19545 Comm: kworker/u5:2 Not tainted syzkaller #0 [ 1707.943891][T19545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1707.953965][T19545] Workqueue: hci0 hci_rx_work [ 1707.958682][T19545] Call Trace: [ 1707.961977][T19545] [ 1707.964913][T19545] dump_stack_lvl+0x188/0x250 [ 1707.969631][T19545] ? show_regs_print_info+0x20/0x20 [ 1707.974846][T19545] ? load_image+0x410/0x410 [ 1707.979386][T19545] sysfs_create_dir_ns+0x26a/0x290 [ 1707.984526][T19545] ? sysfs_warn_dup+0xa0/0xa0 [ 1707.989221][T19545] ? kthread+0x42e/0x520 [ 1707.993484][T19545] ? do_raw_spin_unlock+0x11d/0x230 [ 1707.998746][T19545] kobject_add_internal+0x5ba/0xcd0 [ 1708.003965][T19545] kobject_add+0x160/0x230 [ 1708.008402][T19545] ? kobject_init+0x1c0/0x1c0 [ 1708.013094][T19545] ? __raw_spin_lock_init+0x41/0x100 [ 1708.018380][T19545] ? klist_children_get+0x50/0x50 [ 1708.023397][T19545] ? get_device_parent+0x121/0x3e0 [ 1708.028514][T19545] device_add+0x470/0x1050 [ 1708.032925][T19545] ? device_initialize+0x2a5/0x4d0 [ 1708.038036][T19545] hci_conn_add_sysfs+0xd1/0x1e0 [ 1708.043005][T19545] le_conn_complete_evt+0xc55/0x14d0 [ 1708.048298][T19545] ? cs_le_create_conn+0x5e0/0x5e0 [ 1708.053408][T19545] ? __mutex_trylock_common+0x15c/0x260 [ 1708.060465][T19545] hci_le_meta_evt+0xd36/0x3ca0 [ 1708.065796][T19545] ? hci_event_packet+0x363/0x1310 [ 1708.072239][T19545] ? __lock_acquire+0x7d40/0x7d40 [ 1708.077305][T19545] ? hci_remote_host_features_evt+0x240/0x240 [ 1708.083409][T19545] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 1708.089059][T19545] ? mark_lock+0x94/0x320 [ 1708.093397][T19545] ? mutex_unlock+0x10/0x10 [ 1708.097913][T19545] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1708.104042][T19545] ? lock_chain_count+0x20/0x20 [ 1708.108951][T19545] ? __rwlock_init+0x140/0x140 [ 1708.113736][T19545] hci_event_packet+0xe0b/0x1310 [ 1708.118680][T19545] ? _raw_spin_unlock+0x40/0x40 [ 1708.123535][T19545] ? rcu_lock_release+0x20/0x20 [ 1708.128386][T19545] ? hci_send_to_monitor+0x9c/0x4a0 [ 1708.133579][T19545] hci_rx_work+0x255/0xa10 [ 1708.138022][T19545] process_one_work+0x867/0xff0 [ 1708.142900][T19545] ? worker_detach_from_pool+0x240/0x240 [ 1708.148538][T19545] ? lockdep_hardirqs_off+0x70/0x100 [ 1708.154091][T19545] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1708.159128][T19545] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1708.164671][T19545] ? wq_worker_running+0x97/0x170 [ 1708.169692][T19545] worker_thread+0xad7/0x12a0 [ 1708.174378][T19545] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1708.180273][T19545] kthread+0x42e/0x520 [ 1708.184460][T19545] ? rcu_lock_release+0x20/0x20 [ 1708.189325][T19545] ? kthread_blkcg+0xd0/0xd0 [ 1708.193913][T19545] ret_from_fork+0x1f/0x30 [ 1708.198336][T19545] [ 1708.203836][T19545] kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1708.217317][T19545] Bluetooth: hci0: failed to register connection device [ 1708.308436][T24175] loop8: detected capacity change from 0 to 128 [ 1708.347514][ T7161] device hsr_slave_0 left promiscuous mode [ 1708.397940][ T7161] device hsr_slave_1 left promiscuous mode [ 1708.470601][ T7161] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1708.507691][ T7161] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1708.539459][ T7161] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1708.581499][ T7161] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1708.623451][ T7161] device bridge_slave_1 left promiscuous mode [ 1708.641553][ T7161] bridge0: port 2(bridge_slave_1) entered disabled state [ 1708.650209][ T7161] device bridge_slave_0 left promiscuous mode [ 1708.672150][ T7161] bridge0: port 1(bridge_slave_0) entered disabled state [ 1708.700624][ T7161] device hsr_slave_0 left promiscuous mode [ 1708.714060][ T7161] device hsr_slave_1 left promiscuous mode [ 1708.727179][ T7161] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1708.744308][ T7161] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1708.761710][ T7161] device bridge_slave_1 left promiscuous mode [ 1708.777641][ T7161] bridge0: port 2(bridge_slave_1) entered disabled state [ 1708.796242][ T7161] device bridge_slave_0 left promiscuous mode [ 1708.822560][ T7161] bridge0: port 1(bridge_slave_0) entered disabled state [ 1708.839256][ T7161] device veth1_macvtap left promiscuous mode [ 1708.845704][ T7161] device veth0_macvtap left promiscuous mode [ 1708.858694][ T7161] device veth1_vlan left promiscuous mode [ 1708.874714][T24192] block device autoloading is deprecated and will be removed. [ 1708.895734][ T7161] device veth0_vlan left promiscuous mode [ 1709.112225][ T26] audit: type=1326 audit(1793353454.473:5413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24195 comm="syz.7.5185" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0fa530b559 code=0x0 [ 1709.493542][ T7161] team0 (unregistering): Port device team_slave_1 removed [ 1709.509586][ T7161] team0 (unregistering): Port device team_slave_0 removed [ 1709.534200][ T7161] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1709.563498][ T7161] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1709.673369][T24210] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 1709.709471][ T7161] bond0 (unregistering): Released all slaves [ 1710.692505][ T7161] team0 (unregistering): Port device team_slave_1 removed [ 1710.720464][ T7161] team0 (unregistering): Port device team_slave_0 removed [ 1710.750539][ T7161] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1710.801156][ T7161] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1711.003647][ T7161] bond0 (unregistering): Released all slaves [ 1711.604578][T24250] block device autoloading is deprecated and will be removed. [ 1711.853049][T24256] loop5: detected capacity change from 0 to 512 [ 1712.180791][T24260] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5200'. [ 1712.230169][T24260] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1712.410183][T19545] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 1712.438966][T19545] CPU: 0 PID: 19545 Comm: kworker/u5:2 Not tainted syzkaller #0 [ 1712.446649][T19545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1712.456722][T19545] Workqueue: hci2 hci_rx_work [ 1712.461429][T19545] Call Trace: [ 1712.464719][T19545] [ 1712.467660][T19545] dump_stack_lvl+0x188/0x250 [ 1712.472354][T19545] ? show_regs_print_info+0x20/0x20 [ 1712.477574][T19545] ? load_image+0x410/0x410 [ 1712.482115][T19545] sysfs_create_dir_ns+0x26a/0x290 [ 1712.487247][T19545] ? sysfs_warn_dup+0xa0/0xa0 [ 1712.491946][T19545] ? kthread+0x42e/0x520 [ 1712.496760][T19545] ? do_raw_spin_unlock+0x11d/0x230 [ 1712.502180][T19545] kobject_add_internal+0x5ba/0xcd0 [ 1712.507408][T19545] kobject_add+0x160/0x230 [ 1712.511853][T19545] ? kobject_init+0x1c0/0x1c0 [ 1712.516560][T19545] ? __raw_spin_lock_init+0x41/0x100 [ 1712.521920][T19545] ? klist_children_get+0x50/0x50 [ 1712.526973][T19545] ? get_device_parent+0x121/0x3e0 [ 1712.533006][T19545] device_add+0x470/0x1050 [ 1712.537509][T19545] ? device_initialize+0x2a5/0x4d0 [ 1712.542645][T19545] hci_conn_add_sysfs+0xd1/0x1e0 [ 1712.547601][T19545] le_conn_complete_evt+0xc55/0x14d0 [ 1712.552993][T19545] ? cs_le_create_conn+0x5e0/0x5e0 [ 1712.558134][T19545] ? __mutex_trylock_common+0x15c/0x260 [ 1712.563706][T19545] hci_le_meta_evt+0xd36/0x3ca0 [ 1712.568587][T19545] ? hci_event_packet+0x363/0x1310 [ 1712.573755][T19545] ? __lock_acquire+0x7d40/0x7d40 [ 1712.578809][T19545] ? hci_remote_host_features_evt+0x240/0x240 [ 1712.584898][T19545] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 1712.590580][T19545] ? mark_lock+0x94/0x320 [ 1712.594924][T19545] ? mutex_unlock+0x10/0x10 [ 1712.599447][T19545] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1712.605457][T19545] ? lock_chain_count+0x20/0x20 [ 1712.610333][T19545] ? __rwlock_init+0x140/0x140 [ 1712.615732][T19545] hci_event_packet+0xe0b/0x1310 [ 1712.620695][T19545] ? _raw_spin_unlock+0x40/0x40 [ 1712.625563][T19545] ? rcu_lock_release+0x20/0x20 [ 1712.630442][T19545] ? hci_send_to_monitor+0x9c/0x4a0 [ 1712.635671][T19545] hci_rx_work+0x255/0xa10 [ 1712.640131][T19545] process_one_work+0x867/0xff0 [ 1712.645021][T19545] ? worker_detach_from_pool+0x240/0x240 [ 1712.650676][T19545] ? lockdep_hardirqs_off+0x70/0x100 [ 1712.655979][T19545] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1712.661021][T19545] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1712.666585][T19545] ? wq_worker_running+0x97/0x170 [ 1712.671629][T19545] worker_thread+0xad7/0x12a0 [ 1712.676516][T19545] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1712.682533][T19545] kthread+0x42e/0x520 [ 1712.686650][T19545] ? rcu_lock_release+0x20/0x20 [ 1712.691522][T19545] ? kthread_blkcg+0xd0/0xd0 [ 1712.696146][T19545] ret_from_fork+0x1f/0x30 [ 1712.700685][T19545] [ 1712.707815][T19545] kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1712.721101][T19545] Bluetooth: hci2: failed to register connection device [ 1714.418299][T24312] loop7: detected capacity change from 0 to 512 [ 1714.545709][T24312] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5212'. [ 1714.574906][T24312] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1714.698354][T24312] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1715.225161][T24331] block device autoloading is deprecated and will be removed. [ 1716.345730][T24362] loop8: detected capacity change from 0 to 512 [ 1716.576271][T24362] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5226'. [ 1716.640690][T24362] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1716.912926][T24362] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1717.261893][T24381] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 1717.296471][T24381] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 1717.322686][T24388] block device autoloading is deprecated and will be removed. [ 1717.572440][T24396] loop8: detected capacity change from 0 to 256 [ 1717.643264][T24396] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1717.694114][ T26] audit: type=1800 audit(1793353463.063:5414): pid=24396 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.5235" name="file1" dev="loop8" ino=1048976 res=0 errno=0 [ 1717.731922][T24396] FAT-fs (loop8): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1717.771278][ T26] audit: type=1800 audit(1793353463.103:5415): pid=24396 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.5235" name="file1" dev="loop8" ino=1048976 res=0 errno=0 [ 1717.793225][T24396] FAT-fs (loop8): Filesystem has been set read-only [ 1717.800112][T24396] FAT-fs (loop8): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1717.837294][T24396] FAT-fs (loop8): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1719.160179][T24435] block device autoloading is deprecated and will be removed. [ 1719.278236][T24441] loop3: detected capacity change from 0 to 512 [ 1719.479708][T24441] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5243'. [ 1719.531559][T24441] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1719.776776][T24441] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1720.208590][T24473] device syzkaller1 entered promiscuous mode [ 1720.822497][T24497] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 1721.647024][T24516] mmap: syz.8.5261 (24516) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 1721.689090][T24521] loop3: detected capacity change from 0 to 128 [ 1721.802310][T24521] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006) [ 1721.854741][T24521] FAT-fs (loop3): Filesystem has been set read-only [ 1721.896526][T24521] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006) [ 1721.933559][T24521] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006) [ 1721.952021][T24531] ------------[ cut here ]------------ [ 1721.957523][T24531] trace type BPF program uses run-time allocation [ 1721.973009][T24521] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006) [ 1721.983649][T24531] WARNING: CPU: 0 PID: 24531 at kernel/bpf/verifier.c:11786 check_map_prog_compatibility+0x6cf/0x870 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1722.001405][T24521] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006) [ 1722.043866][T24531] Modules linked in: [ 1722.047870][T24531] CPU: 0 PID: 24531 Comm: syz.0.5266 Not tainted syzkaller #0 [ 1722.082189][T24521] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006) [ 1722.141386][T24531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1722.173064][T24531] RIP: 0010:check_map_prog_compatibility+0x6cf/0x870 [ 1722.181656][T24531] Code: ff e8 a5 af ef ff 48 c7 c6 40 47 31 8a e9 0d fd ff ff e8 94 af ef ff c6 05 33 e4 cf 0c 01 48 c7 c7 a0 43 31 8a e8 f1 55 34 08 <0f> 0b e9 9f fb ff ff 44 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c a5 f9 [ 1722.196186][T24521] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006) [ 1722.253410][T24521] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006) [ 1722.306708][T24521] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006) [ 1722.331332][T24521] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006) [ 1722.351392][T24531] RSP: 0018:ffffc900031cf470 EFLAGS: 00010246 [ 1722.357556][T24531] RAX: 2530fef03744c100 RBX: 0000000000000001 RCX: 0000000000080000 [ 1722.373050][T24531] RDX: ffffc90005a01000 RSI: 00000000000042de RDI: 00000000000042df [ 1722.381071][T24531] RBP: ffff888078720000 R08: ffff8880b8e33d7f R09: 1ffff110171c67af [ 1722.390454][ T26] audit: type=1800 audit(1793353467.753:5416): pid=24521 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.5262" name="file2" dev="loop3" ino=1048978 res=0 errno=0 [ 1722.451105][T24531] R10: dffffc0000000000 R11: ffffed10171c67b0 R12: ffffc90002e83038 [ 1722.492590][T24531] R13: 0000000000000011 R14: dffffc0000000000 R15: 1ffff920005d0607 [ 1722.500779][T24531] FS: 00007f27e12ff6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1722.550749][T24531] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1722.591466][T24531] CR2: 00007ff7532fcff8 CR3: 0000000063a00000 CR4: 00000000003506e0 [ 1722.631153][T24531] DR0: 0000000000000000 DR1: 0000000000008000 DR2: 0000000000000000 [ 1722.651463][T24531] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1722.691273][T24531] Call Trace: [ 1722.711611][T24531] [ 1722.714668][T24531] resolve_pseudo_ldimm64+0x616/0xfd0 [ 1722.720076][T24531] ? check_attach_btf_id+0xde0/0xde0 [ 1722.728235][T24531] ? __mark_reg_known+0x1a0/0x1a0 [ 1722.734389][T24531] bpf_check+0x2c59/0xf5f0 [ 1722.738870][T24531] ? mark_lock+0x94/0x320 [ 1722.743687][T24531] ? __lock_acquire+0x13b3/0x7d40 [ 1722.771431][T24531] ? bpf_get_btf_vmlinux+0x60/0x60 [ 1722.776612][T24531] ? mark_lock+0x94/0x320 [ 1722.780991][T24531] ? verify_lock_unused+0x140/0x140 [ 1722.800539][T24531] ? __mutex_trylock_common+0x15c/0x260 [ 1722.831558][T24531] ? verify_lock_unused+0x140/0x140 [ 1722.841574][T24531] ? rcu_lock_release+0x5/0x20 [ 1722.846402][T24531] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1722.870530][T24531] ? lock_chain_count+0x20/0x20 [ 1722.879036][T24531] ? seqcount_lockdep_reader_access+0x127/0x1d0 [ 1722.885733][T24531] ? lockdep_hardirqs_on+0x94/0x140 [ 1722.890966][T24531] ? ktime_get_with_offset+0xff/0x320 [ 1722.915890][T24531] ? seqcount_lockdep_reader_access+0x18d/0x1d0 [ 1722.924342][T24531] ? ktime_get_real_ts64+0x440/0x440 [ 1722.929672][T24531] ? pcpu_alloc+0x11e6/0x16d0 [ 1722.946371][T24531] ? __might_fault+0xb3/0x110 [ 1722.971770][T24531] ? memset+0x1e/0x40 [ 1722.976506][T24531] ? bpf_obj_name_cpy+0x190/0x1d0 [ 1722.991481][T24531] bpf_prog_load+0xfdf/0x14e0 [ 1722.996223][T24531] ? map_freeze+0x360/0x360 [ 1723.000738][T24531] ? __might_fault+0xb7/0x110 [ 1723.024704][T24531] ? __might_fault+0xb3/0x110 [ 1723.029470][T24531] ? bpf_lsm_bpf+0x5/0x10 [ 1723.036003][T24531] ? security_bpf+0x7a/0xa0 [ 1723.047618][T24531] __sys_bpf+0x532/0x6f0 [ 1723.059215][T24531] ? bpf_link_show_fdinfo+0x380/0x380 [ 1723.065097][T24531] __x64_sys_bpf+0x78/0x90 [ 1723.078364][T24531] do_syscall_64+0x4c/0xa0 [ 1723.083346][T24531] ? clear_bhb_loop+0x30/0x80 [ 1723.088080][T24531] ? clear_bhb_loop+0x30/0x80 [ 1723.101059][T24531] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1723.108630][ T4363] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1723.114862][T24531] RIP: 0033:0x7f27e30a8559 [ 1723.128850][T24531] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1723.159182][T24531] RSP: 002b:00007f27e12ff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1723.168052][T24531] RAX: ffffffffffffffda RBX: 00007f27e332efa0 RCX: 00007f27e30a8559 [ 1723.182695][ T4363] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1723.191275][T24531] RDX: 0000000000000094 RSI: 0000200000000400 RDI: 0000000000000005 [ 1723.200953][T24531] RBP: 00007f27e313fb20 R08: 0000000000000000 R09: 0000000000000000 [ 1723.209531][T24531] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1723.217888][T24531] R13: 00007f27e332f038 R14: 00007f27e332efa0 R15: 00007fff773fb688 [ 1723.228058][T24531] [ 1723.231692][T24531] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1723.239838][T24531] CPU: 1 PID: 24531 Comm: syz.0.5266 Not tainted syzkaller #0 [ 1723.247332][T24531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1723.257587][T24531] Call Trace: [ 1723.260888][T24531] [ 1723.264005][T24531] dump_stack_lvl+0x188/0x250 [ 1723.269138][T24531] ? show_regs_print_info+0x20/0x20 [ 1723.274803][T24531] ? load_image+0x410/0x410 [ 1723.279336][T24531] panic+0x2f8/0x850 [ 1723.283423][T24531] ? bpf_jit_dump+0xd0/0xd0 [ 1723.288147][T24531] ? check_map_prog_compatibility+0x6cf/0x870 [ 1723.294234][T24531] __warn+0x248/0x2b0 [ 1723.298256][T24531] ? check_map_prog_compatibility+0x6cf/0x870 [ 1723.304339][T24531] report_bug+0x1b9/0x2e0 [ 1723.308793][T24531] handle_bug+0x3a/0x70 [ 1723.312960][T24531] exc_invalid_op+0x16/0x40 [ 1723.317477][T24531] asm_exc_invalid_op+0x16/0x20 [ 1723.322346][T24531] RIP: 0010:check_map_prog_compatibility+0x6cf/0x870 [ 1723.329169][T24531] Code: ff e8 a5 af ef ff 48 c7 c6 40 47 31 8a e9 0d fd ff ff e8 94 af ef ff c6 05 33 e4 cf 0c 01 48 c7 c7 a0 43 31 8a e8 f1 55 34 08 <0f> 0b e9 9f fb ff ff 44 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c a5 f9 [ 1723.348936][T24531] RSP: 0018:ffffc900031cf470 EFLAGS: 00010246 [ 1723.355031][T24531] RAX: 2530fef03744c100 RBX: 0000000000000001 RCX: 0000000000080000 [ 1723.363007][T24531] RDX: ffffc90005a01000 RSI: 00000000000042de RDI: 00000000000042df [ 1723.370972][T24531] RBP: ffff888078720000 R08: ffff8880b8e33d7f R09: 1ffff110171c67af [ 1723.379027][T24531] R10: dffffc0000000000 R11: ffffed10171c67b0 R12: ffffc90002e83038 [ 1723.386992][T24531] R13: 0000000000000011 R14: dffffc0000000000 R15: 1ffff920005d0607 [ 1723.395172][T24531] resolve_pseudo_ldimm64+0x616/0xfd0 [ 1723.400565][T24531] ? check_attach_btf_id+0xde0/0xde0 [ 1723.405843][T24531] ? __mark_reg_known+0x1a0/0x1a0 [ 1723.410865][T24531] bpf_check+0x2c59/0xf5f0 [ 1723.415307][T24531] ? mark_lock+0x94/0x320 [ 1723.419637][T24531] ? __lock_acquire+0x13b3/0x7d40 [ 1723.424668][T24531] ? bpf_get_btf_vmlinux+0x60/0x60 [ 1723.429805][T24531] ? mark_lock+0x94/0x320 [ 1723.434139][T24531] ? verify_lock_unused+0x140/0x140 [ 1723.439357][T24531] ? __mutex_trylock_common+0x15c/0x260 [ 1723.444905][T24531] ? verify_lock_unused+0x140/0x140 [ 1723.450102][T24531] ? rcu_lock_release+0x5/0x20 [ 1723.454879][T24531] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1723.461047][T24531] ? lock_chain_count+0x20/0x20 [ 1723.465898][T24531] ? seqcount_lockdep_reader_access+0x127/0x1d0 [ 1723.472134][T24531] ? lockdep_hardirqs_on+0x94/0x140 [ 1723.477348][T24531] ? ktime_get_with_offset+0xff/0x320 [ 1723.482713][T24531] ? seqcount_lockdep_reader_access+0x18d/0x1d0 [ 1723.488945][T24531] ? ktime_get_real_ts64+0x440/0x440 [ 1723.494345][T24531] ? pcpu_alloc+0x11e6/0x16d0 [ 1723.499049][T24531] ? __might_fault+0xb3/0x110 [ 1723.503812][T24531] ? memset+0x1e/0x40 [ 1723.507785][T24531] ? bpf_obj_name_cpy+0x190/0x1d0 [ 1723.512803][T24531] bpf_prog_load+0xfdf/0x14e0 [ 1723.517521][T24531] ? map_freeze+0x360/0x360 [ 1723.522031][T24531] ? __might_fault+0xb7/0x110 [ 1723.526716][T24531] ? __might_fault+0xb3/0x110 [ 1723.531388][T24531] ? bpf_lsm_bpf+0x5/0x10 [ 1723.535714][T24531] ? security_bpf+0x7a/0xa0 [ 1723.540298][T24531] __sys_bpf+0x532/0x6f0 [ 1723.544545][T24531] ? bpf_link_show_fdinfo+0x380/0x380 [ 1723.549950][T24531] __x64_sys_bpf+0x78/0x90 [ 1723.554363][T24531] do_syscall_64+0x4c/0xa0 [ 1723.558776][T24531] ? clear_bhb_loop+0x30/0x80 [ 1723.563445][T24531] ? clear_bhb_loop+0x30/0x80 [ 1723.568115][T24531] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1723.574001][T24531] RIP: 0033:0x7f27e30a8559 [ 1723.578434][T24531] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1723.598035][T24531] RSP: 002b:00007f27e12ff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1723.606665][T24531] RAX: ffffffffffffffda RBX: 00007f27e332efa0 RCX: 00007f27e30a8559 [ 1723.614631][T24531] RDX: 0000000000000094 RSI: 0000200000000400 RDI: 0000000000000005 [ 1723.622593][T24531] RBP: 00007f27e313fb20 R08: 0000000000000000 R09: 0000000000000000 [ 1723.630561][T24531] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1723.638536][T24531] R13: 00007f27e332f038 R14: 00007f27e332efa0 R15: 00007fff773fb688 [ 1723.646514][T24531] [ 1723.649788][T24531] Kernel Offset: disabled [ 1723.654131][T24531] Rebooting in 86400 seconds..