last executing test programs: 17m38.260154519s ago: executing program 3 (id=53): openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x20000, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) fcntl$auto_F_UNLCK(r0, 0xfffffffa, 0x2) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/cgroup.threads\x00', 0x80302, 0x0) preadv$auto(0x3, &(0x7f0000000040)={0x0, 0x5}, 0x3, 0xf8, 0xffffffffffffffff) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r3) ioctl$auto_KVM_CREATE_VM(r2, 0xae80, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto(0x3, 0xae41, r4) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) mremap$auto(0x0, 0x7, 0x3fd6, 0x3, 0x200000) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r1) timer_create$auto_CLOCK_TAI(0xb, &(0x7f0000000140)={@sival_int=0x812b, @raw=0x7ff, 0xfff, @_tid}, &(0x7f0000000180)=0x5) ioctl$auto_KVM_GET_MSRS(r0, 0x4090ae82, 0x0) 17m36.970499537s ago: executing program 3 (id=55): r0 = socket(0x2, 0x1, 0x106) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x37}}, 0x6e) sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x9, 0x20000000) socketpair$auto(0xfffffffe, 0x1, 0x8000000000000000, 0x0) sendmsg$auto_NL80211_CMD_START_P2P_DEVICE(r1, 0x0, 0x14) setsockopt$auto(r0, 0x6, 0x17, 0x0, 0x7) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/tty/ttyu3/power/runtime_status\x00', 0x2280c0, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) mbind$auto(0x1, 0x2, 0x4, 0x0, 0x80000000, 0x7b) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_SEG6_CMD_SET_TUNSRC(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010028bd7000fbdbdf25030000001400010000000000000000000000000000000001"], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x800) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) shutdown$auto(0x200000003, 0x2) mlockall$auto(0x7) modify_ldt$auto(0x96c, 0x0, 0x10) getrandom$auto(0x0, 0x6000000, 0x3) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r4 = socket(0x10, 0x2, 0x0) syz_genetlink_get_family_id$auto_gtp(0x0, r4) sendmsg$auto_NL80211_CMD_GET_REG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYRESHEX, @ANYBLOB='&\x00', @ANYBLOB="5de1"], 0x1ac}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) read$auto(r4, 0x0, 0x3) 17m34.187517452s ago: executing program 3 (id=61): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f000000c180), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_NAME_TABLE_GET(r0, &(0x7f000000ca40)={0x0, 0x0, &(0x7f000000ca00)={&(0x7f000000c1c0)={0x14, r1, 0x35712d2af9a9dbe3, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x841}, 0x4) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/irq/2/hwirq\x00', 0x0, 0x0) read$auto(r2, 0x0, 0x20) 17m33.952251795s ago: executing program 3 (id=63): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0xa, 0x3, 0x3a) syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), r0) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, 0x0, 0xfd}, 0x6a) r1 = getpid() close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) fcntl$auto(0x8000000000000001, 0x26, 0x8) io_uring_setup$auto(0x1, 0x0) fcntl$auto(0x8000000000000001, 0x24, 0x4) process_vm_readv$auto(r1, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000040), 0xffffffff}, 0x6, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x23, 0x2, 0x0) pipe2$auto(0x0, 0x7) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8) close_range$auto(0x0, 0xfffffffffffff000, 0x2) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) clone$auto(0x9001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x6) socket(0x1e, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_uprobe_events_ops_trace_uprobe(0xffffffffffffff9c, &(0x7f0000001680)='/sys/kernel/debug/tracing/uprobe_events\x00', 0x2, 0x0) socket(0x28, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pipe2$auto(0x0, 0x80) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8) keyctl$auto(0x15, 0xffffffffffffffff, 0x8, 0x5, 0x8) setsockopt$auto(0x400000000000003, 0x29, 0xca, 0x0, 0x567) 17m33.491518419s ago: executing program 3 (id=65): mmap$auto(0x8, 0x6f7d34fa, 0x4, 0x3fd, 0xffffffffffffffff, 0x8000) unshare$auto(0x40000080) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x200000, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/dummy0/carrier\x00', 0xc2061, 0x0) write$auto(r0, &(0x7f00000003c0)='1\xff\xff\x00\x01\x8b\v\xd5\x11\x96\xec\x84\x05K:\xe45\x8a)\xff\xff\xff\xff\x00\xe7(\xf0\xa0\xff\xedV\xaaQ}\x89\xf1qod\xaa\x15\x0f\xaa\x19\xe78I\xb3v\x06\xc2\xa7\xb4\xbd', 0x81) mmap$auto(0x0, 0x40000b, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x4, 0x15) fchdir$auto(0xffffffffffffffff) pselect6$auto(0x3, &(0x7f0000000040)={[0x1000, 0x0, 0x8, 0x7, 0x5, 0x7, 0x3, 0x6, 0x0, 0x9, 0x8, 0x4, 0x6, 0x5, 0x1, 0x100000001]}, &(0x7f00000000c0)={[0x2, 0x9, 0x4, 0x5, 0x1, 0xc53, 0x7, 0x8c8, 0x8, 0xe4, 0x8, 0x4, 0x6, 0x0, 0x1, 0xc]}, &(0x7f0000000140)={[0xca, 0xfffffffffffffffd, 0x6, 0x7, 0x3, 0x20, 0xbb, 0x0, 0x800, 0x0, 0xf67, 0xa, 0x100000000, 0x1, 0x7ff]}, &(0x7f0000000200)={0x40000000000000, 0x2}, &(0x7f0000000240)="76e10d367d2415435f9a38b9c677dec5da964230172cee43529184032e73f06c39eb73d788c449a95e534c88ce7d6d741ed9e816e606dbda8724c0dd52d2d1719326642ed1665c73c18753c92d0404d0a65a4bd9c32222b8ccfca69e92f3a322da9421254d089bba40e01e0d4691bc01e16e4d5a0603ac0375a038c39649b96baed3172ab5138e152667aee1187261f35669cd6b4031a9d314590dad61b3bce9b0b020177a875b7e7f249bb4eb839e4c75b3528f16875021f4a647768c121f1cde19467816caf08e1c74627f97e375854cd53d841209be982702144b2612587c20f56a91c8d4c0fd8df21b0212699f") mkdir$auto(0x0, 0x6) r1 = bpf$auto(0x0, 0x0, 0x6f3) arch_prctl$auto_ARCH_REQ_XCOMP_PERM(0x1023, 0x7) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x6, 0x0) tkill$auto(0x1, 0x7) keyctl$auto_KEYCTL_SESSION_TO_PARENT(0x12, 0x0, 0x0, 0x0, 0x48eafc79) sendmsg$auto_TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24004044}, 0x10000000) io_uring_register$auto(0x2, 0x22, &(0x7f0000000400)="e4adbe73458d11eb53ae5a22e43d75dcae53dd82efecbed5fd58f13872057a06f22fc454ff7980945be42c240aa3e5251e2b216c1f71bcc8244fc3cdbcc26c126b1997e165a331f7e247d799acf08bec426a46e2a53c4c07373662e832dc37b4359220e70365226e00fa12ab25db04601b6917c8140239ff32dcf3a5ed5b55296e0c224e530957352b7abc475343307d3ba441feb7ced9613f818cf457532d564b50035dca", 0x1) r2 = socket(0xa, 0x2, 0x88) r3 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/cgroup\x00', 0x420, 0x0) read$auto_proc_single_file_operations_base(r3, &(0x7f0000000040)=""/9, 0x9) ioctl$auto_USB_RAW_IOCTL_EP_WRITE(r1, 0x40085507, &(0x7f0000000340)={0x5, 0x8, 0x4, "a4cc8d4df580d9e94392f4dae021d6fe496641758443e7cdfc848b9bd2557c0b70948e9cd86d35f999bb13ab08bbf215c47a86a8dee7057561bcffc01fdbf0ec59276003eaaad9538a"}) bpf$auto(0x0, 0x0, 0xa3) mmap$auto(0x5, 0x4020008, 0x1001, 0xeb1, r2, 0x8003) madvise$auto(0x0, 0xffffffffffff0005, 0x19) socket(0xa, 0x1, 0x84) 17m32.108526098s ago: executing program 3 (id=67): unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0x7, 0x12, 0xffffffffffffffff, 0xf4e) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r0, &(0x7f0000001bc0)="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", 0x9c7) ioctl$auto_TIOCSCTTY(r0, 0x540e, &(0x7f0000000080)="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") r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0xe, 0x0, 0x20) ioctl$auto_IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) shmctl$auto(0x0, 0xd, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x101000, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001680), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000002300)={0x0, 0x0, &(0x7f00000022c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="110325bd7000fedbdf2501"], 0x14}}, 0x10040) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000000), 0xffffffffffffffff) syz_genetlink_get_family_id$auto_ovs_datapath(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socket(0x15, 0x5, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) read$auto(0xffffffffffffffff, 0x0, 0x1) 17m31.426480333s ago: executing program 32 (id=67): unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0x7, 0x12, 0xffffffffffffffff, 0xf4e) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r0, &(0x7f0000001bc0)="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", 0x9c7) ioctl$auto_TIOCSCTTY(r0, 0x540e, &(0x7f0000000080)="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") r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0xe, 0x0, 0x20) ioctl$auto_IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) shmctl$auto(0x0, 0xd, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x101000, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001680), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000002300)={0x0, 0x0, &(0x7f00000022c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="110325bd7000fedbdf2501"], 0x14}}, 0x10040) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000000), 0xffffffffffffffff) syz_genetlink_get_family_id$auto_ovs_datapath(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socket(0x15, 0x5, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) read$auto(0xffffffffffffffff, 0x0, 0x1) 2m24.83350534s ago: executing program 2 (id=3231): mmap$auto(0xffffffffffffffff, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x100003, 0x9000000eb1, 0xfffffffffffffffa, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) bpf$auto(0x0, &(0x7f0000000100)=@bpf_attr_5={@target_fd=0x5, 0x7f, 0x9c, 0x7b2, 0x1, @relative_fd=0x2, 0x80}, 0x96) bpf$auto(0x15, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2b, 0x1, 0x0) setsockopt$auto(0x3, 0x1, 0x10, 0x0, 0x9) unshare$auto(0x40000080) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1, 0x0, 0x0, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/tty19\x00', 0x800, 0x0) ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0) socketpair$auto(0x20004, 0x1, 0x1, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket(0xa, 0x2, 0x3a) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r2, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYRES32=r0], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x8090) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) futex$auto(&(0x7f00000023c0)=0xf6, 0x3, 0x2, 0x0, &(0x7f0000002440)=0x8, 0x71a8dce0) mmap$auto(0x0, 0x5, 0x4000000000e2, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) 2m21.793514392s ago: executing program 2 (id=3237): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) setxattrat$auto(0xffffffffffffffff, 0x0, 0x100, 0x0, 0x0, 0x5d8) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/mpls/platform_labels\x00', 0x202, 0x0) pwrite64$auto(r0, 0x0, 0x7, 0x7) r1 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x7, 0x3e, 0xfffffffffffffffa, 0x1ffde, 0x7, 0x6, 0x2, 0x9, 0x3, 0x6, 0x4, 0xb4, 0x9, 0x2, 0x10000, 0x80, 0x7, 0x0, 0x7, 0x2000, 0x200, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0xc3ba, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd]}, 0x1fe, 0x200d) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) syz_genetlink_get_family_id$auto_nfsd(&(0x7f00000034c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x60, 0x0, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@HSR_A_IF2_AGE={0x8, 0x4, 0xab7}, @HSR_A_IF2_SEQ={0x6, 0x7, 0x8000}, @HSR_A_IFINDEX={0x8, 0x2, r3}, @HSR_A_NODE_ADDR_B={0xa, 0x5, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @HSR_A_NODE_ADDR={0xa, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @HSR_A_NODE_ADDR={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}}, @HSR_A_IFINDEX={0x8, 0x2, r3}, @HSR_A_IF1_SEQ={0x6, 0x6, 0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x40080}, 0x40) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) getsockopt$auto_SO_RCVBUF(r0, 0x80, 0x8, &(0x7f0000000040)='\x1aB\x00', &(0x7f00000000c0)=0x400) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r4, 0x0, 0xd0) connect$auto(r4, &(0x7f0000000000)=@hci={0x1f, 0x1}, 0x9e2) io_uring_setup$auto(0x6, 0x0) read$auto(0x3, 0x0, 0x80) 2m21.527863566s ago: executing program 2 (id=3239): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/platform/i8042/serio0/softrepeat\x00', 0xb02, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/platform/dummy_hcd.2/usb3/authorized\x00', 0x81, 0x0) write$auto(r0, &(0x7f0000000080)='0\x81=\"\xad\xff\x8d\xf9P\x18\xa4\xb0\xb4\xd9\x82=\xe1P\x05\x00\xfb&\xe8\xbf\x901\a2\xa2X`\a\xf1y\xb3\"=', 0x48da548d) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder1\x00', 0x0, 0x0) r1 = open(&(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', 0x101840, 0x33903f3ada88772b) mmap$auto(0x0, 0x2d, 0x24000000000df, 0xeb1, 0x401, 0x8000) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r3, &(0x7f0000000580)={0x0, 0x2120, &(0x7f0000000540)={&(0x7f0000000400)={0x14, r2, 0x1, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x68, 0x0, 0x4000000}, 0x0) sendmsg$auto_NL80211_CMD_REMOVE_LINK(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r2, 0x20, 0x70bd28, 0x25dfdbff, {}, [@NL80211_ATTR_SSID={0xa, 0x34, "17dcd96def3f"}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0xd}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4000001) read$auto(r1, 0x0, 0x1) r4 = socket(0x18, 0x3, 0x0) getsockname$auto(r4, &(0x7f0000000080), &(0x7f00000000c0)=0x10000) write$auto(0x3, 0x0, 0x5c8) 2m21.079329224s ago: executing program 2 (id=3240): ioctl$auto_XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000001180)={0xffffffffffffffff, &(0x7f00000012c0)="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", 0x204, &(0x7f00000010c0)="8f11913d1edc92a03ccaa90494253276e1d59b8f844011f437297efdf584facf44469a89ed5a5b128303e904783d82a0a443e6f7c218dec59486653b33c5a41f92719c8ecea70878f8d2cbfe5a1dcd03535b99d80c4e1a1971f0374a239d1c207b2b2c6f947aea2edb8cae1be8a754ba39ea611600aaf1af7e462459605984d3b19be398cbf48f032cae7bc79380a5742f3407b80439e4495e11", 0xe, &(0x7f0000000000), &(0x7f0000000040)=0x2004}) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r1 = fanotify_init$auto(0x280, 0x1) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0xe1d2b27bdc14aa98) fanotify_mark$auto(0x400000000000, 0x105, 0x2f2b, r2, 0x0) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) landlock_create_ruleset$auto(&(0x7f0000000000)={0x6, 0x400, 0x7}, 0x9, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x100000000000001c, 0x280000000000, 0x63, 0x0, 0x0, 0x0, 0x1002, 0x4, 0x80000008040000a, 0x40000402, 0x7, 0x8, 0xffffffff80000000, 0x800000000000b, 0x6, 0x240000100103}) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) socket(0x10, 0x2, 0x6) sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x0, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x40342, 0x22) read$auto_snd_pcm_f_ops_pcm1(r1, &(0x7f00000000c0)=""/109, 0x6d) ioctl$auto_TUNSETOWNER(r0, 0x400454cc, &(0x7f00000011c0)=0xc0) socket(0x2, 0x2, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x1, 0x0) bind$auto(0x3, 0x0, 0x6a) connect$auto(0x3, 0x0, 0x55) ioctl$auto_BLKRRPART(0xffffffffffffffff, 0x125f, 0x0) setsockopt$auto_SO_ATTACH_REUSEPORT_EBPF(r4, 0x9ac, 0x34, &(0x7f0000001280)='\x00', 0xfffffffb) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x8a100, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000) read$auto_proc_gid_map_operations_base(r1, &(0x7f0000001200)=""/94, 0x5e) 2m20.011641068s ago: executing program 2 (id=3243): openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/block/parameters/events_dfl_poll_msecs\x00', 0x80002, 0x0) (async) mmap$auto(0x0, 0x4000b, 0x7, 0x9b72, 0x7, 0x28000) inotify_init1$auto(0x3000000000000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) setreuid$auto(0x4, 0x8) tkill$auto(0x80000000000001, 0x7) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x15, 0x5, 0x0) (async) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000380)='/sys/devices/platform/dummy_hcd.2/usb3/devspec\x00', 0x1c2580, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000180)=""/86, 0x56) (async) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/cgroup\x00', 0x100382, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/irq.pressure\x00', 0x101102, 0x0) (async) openat$auto_ocfs2_control_fops_stack_user(0xffffffffffffff9c, &(0x7f0000000040), 0x669400, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000340)='/proc/asound/card0/pcm0p/sub3/xrun_injection\x00', 0x8a180, 0x0) (async) statmount$auto(0x0, &(0x7f0000000180)={0x5, 0x1, 0x9, 0x7, 0x5, 0x6, 0x8, 0x7, 0x3, 0x9, 0x9, 0xffff, 0x4, 0x200000000001, 0xb4, 0xb, 0x9, 0x10007, 0x7, 0x10000000000, 0x0, 0x3, 0x22000, 0x203, 0x9, 0x84, 0x0, 0x4, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x7fffffff, 0x8009, 0x7, 0x6, 0x0, 0x8, 0xfffffffffffffffd, 0x3, 0x0, 0x10000, 0x8000000000000000, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2a7, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x1, 0x8000200000000001, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, 0x0, 0x8, 0xffffffffffffffff]}, 0x81, 0x968c) r1 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1441, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r1, 0xfffffffffffffd12, &(0x7f00000001c0)) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv6/conf/batadv_slave_0/proxy_ndp\x00', 0x382, 0x0) (async) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x28082, 0x0) inotify_init1$auto(0x3000000000000) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x0) (async) open(0x0, 0x22240, 0xd1) (async) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async, rerun: 32) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2, 0x0) (rerun: 32) getsockopt$auto(0xffffffffffffffff, 0x84, 0x82, 0x0, 0x0) (async) ioctl$auto(0x3, 0x80106f53, r2) 2m18.605739722s ago: executing program 2 (id=3246): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x1d, 0x2, 0x7) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$auto_KVM_GET_MSRS(r1, 0xc008ae88, &(0x7f0000000040)={0x2, 0x0, [{0x480, 0x400, 0x9}]}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000000100), r0) sendmsg$auto_NET_SHAPER_CMD_GET(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r3, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NET_SHAPER_A_IFINDEX={0x8, 0x8, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24004001}, 0xf4504059e6fdf584) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r2}, 0x6a) sendto$auto(r0, 0x0, 0x6fffff9, 0xfffffff8, &(0x7f0000000440)=@can={0x1d, r4, 0x3f, 0xffef}, 0x36) 2m17.711477186s ago: executing program 33 (id=3246): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x1d, 0x2, 0x7) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$auto_KVM_GET_MSRS(r1, 0xc008ae88, &(0x7f0000000040)={0x2, 0x0, [{0x480, 0x400, 0x9}]}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000000100), r0) sendmsg$auto_NET_SHAPER_CMD_GET(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r3, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NET_SHAPER_A_IFINDEX={0x8, 0x8, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24004001}, 0xf4504059e6fdf584) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r2}, 0x6a) sendto$auto(r0, 0x0, 0x6fffff9, 0xfffffff8, &(0x7f0000000440)=@can={0x1d, r4, 0x3f, 0xffef}, 0x36) 12.452248176s ago: executing program 0 (id=3574): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x2, 0x1, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0x401, 0x8000) syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) bind$auto(0x3, 0x0, 0x6a) setpgid$auto(0x0, 0xffffffffffffffff) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) syz_clone(0x2360411, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/irq/2/name\x00', 0x800, 0x0) read$auto(r2, 0x0, 0x1) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x9, 0x1f, 0x940, 0x1ffde, 0x3, 0x6, 0x8000003, 0x9, 0x6, 0x0, 0x4, 0xb0, 0x7, 0x200, 0x3, 0x205, 0x7, 0x0, 0x3ffff, 0x0, 0x3, 0x7069, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, [0x0, 0x0, 0x0, 0x8, 0x5, 0x8000004, 0x0, 0x100000000000000, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x100000000, 0x0, 0x8000000000000001, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x4, 0x0, 0x0, 0x2000000000000000]}, 0x203, 0x7d) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[], 0x3c}}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) r3 = socket(0x10, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000000000), r4) sendmsg$auto_IOAM6_CMD_ADD_SCHEMA(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000480)={0x20, r5, 0x1, 0x70bd2a, 0x25dfdbfb, {0x4, 0x0, 0x900}, [@IOAM6_ATTR_SC_DATA={0x4}, @IOAM6_ATTR_SC_ID={0x8, 0x4, 0x9}]}, 0x20}, 0x1, 0x3000700, 0x0, 0x1}, 0x8010) sendmsg$auto_IOAM6_CMD_DEL_NAMESPACE(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r5, 0x200, 0x70bd27, 0x25dfdbff, {}, [@IOAM6_ATTR_NS_ID={0x6, 0x1, 0x81}]}, 0x1c}}, 0x4000000) sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x0, 0x33, 0x0, 0x4) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) 11.096644876s ago: executing program 0 (id=3577): sendmsg$auto_NL802154_CMD_SET_CCA_MODE(0xffffffffffffffff, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000000)={0x14, 0x0, 0x101, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x800) close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x10, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x0) r1 = socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="18000000", @ANYRES8=r1, @ANYRES32=r1], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x80) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) close_range$auto(0x2, 0xa, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) fanotify_init$auto(0x65, 0x2) r2 = pipe$auto(0x0) dup2$auto(0x5, 0x4) write$auto(0x6, 0x0, 0x100000001) splice$auto(0x4, 0x0, r2, 0x0, 0x80000001, 0x9) write$auto(r0, &(0x7f0000000000)='-\x00', 0xfdef) 9.672509416s ago: executing program 0 (id=3581): mmap$auto(0x0, 0x2020005, 0x3, 0xeb1, 0xfffffffffffffffa, 0x9000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0xc0000, 0x0) mmap$auto(0x0, 0x400008, 0x8, 0x9b72, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) write$auto(0x3, 0x0, 0xfdef) read$auto(0x3, 0x0, 0x1f40) read$auto(0x3, 0x0, 0x1f40) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f00000001c0)=0x6) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x3, 0x0) userfaultfd$auto(0x1) close_range$auto(0x2, 0x8, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x80102, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x6, 0x101, 0x7ffd, 0x3fa, r1, 0x1000008000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0xd, 0x0) fsopen$auto(0x0, 0x1) fsconfig$auto(r0, 0x1, &(0x7f0000000000)='Q**\x00', &(0x7f00000010c0)="2b24cdedb9695dfa1dab611cbf65de02f9dabf93ebe2bd0a211713009ee488a113e980c7d3f5a70b4e275a88c56fe1edd1f4a061b09846c504ae98af314b1e86c00aa91e7b1f9b5c93c4185e29fc63cb87d19072aedd7cbef8470d34d9bde31cc059557641c9", 0x0) r2 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000240)='/dev/mtd0\x00', 0x80200, 0x0) ioctl$auto_OTPGETREGIONINFO(r2, 0x400c4d0f, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3) prctl$auto(0x3e, 0x4, 0x0, 0x1, 0x4) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 8.530122336s ago: executing program 5 (id=3583): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x2, 0x1, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0x401, 0x8000) syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) bind$auto(0x3, 0x0, 0x6a) setpgid$auto(0x0, 0xffffffffffffffff) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) syz_clone(0x2360411, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/irq/2/name\x00', 0x800, 0x0) read$auto(r2, 0x0, 0x1) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x9, 0x1f, 0x940, 0x1ffde, 0x3, 0x6, 0x8000003, 0x9, 0x6, 0x0, 0x4, 0xb0, 0x7, 0x200, 0x3, 0x205, 0x7, 0x0, 0x3ffff, 0x0, 0x3, 0x7069, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, [0x0, 0x0, 0x0, 0x8, 0x5, 0x8000004, 0x0, 0x100000000000000, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x100000000, 0x0, 0x8000000000000001, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x4, 0x0, 0x0, 0x2000000000000000]}, 0x203, 0x7d) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[], 0x3c}}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) r3 = socket(0x10, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000000000), r4) sendmsg$auto_IOAM6_CMD_ADD_SCHEMA(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000480)={0x20, r5, 0x1, 0x70bd2a, 0x25dfdbfb, {0x4, 0x0, 0x900}, [@IOAM6_ATTR_SC_DATA={0x4}, @IOAM6_ATTR_SC_ID={0x8, 0x4, 0x9}]}, 0x20}, 0x1, 0x3000700, 0x0, 0x1}, 0x8010) sendmsg$auto_IOAM6_CMD_DEL_NAMESPACE(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r5, 0x200, 0x70bd27, 0x25dfdbff, {}, [@IOAM6_ATTR_NS_ID={0x6, 0x1, 0xf}, @IOAM6_ATTR_NS_ID={0x6, 0x1, 0x81}]}, 0x24}}, 0x4000000) sendmmsg$auto(r3, 0x0, 0x7, 0x4008) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x0, 0x33, 0x0, 0x4) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) 8.063637181s ago: executing program 4 (id=3586): r0 = socket(0x10, 0x2, 0x0) bpf$auto(0xff, &(0x7f00000004c0)=@bpf_attr_5={@target_fd, 0xffffffffffffffff, 0x4, 0x5, 0xffffffffffffffff, @relative_fd, 0x400000000003}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB='f\x00'], 0x1ac}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) mmap$auto(0x0, 0x2000d, 0x4000000200df, 0xeb1, 0x404, 0x8000) read$auto(0x3, 0x0, 0x80) sendmmsg$auto(r0, 0x0, 0x2004, 0x8) 7.908851673s ago: executing program 0 (id=3587): mmap$auto(0xa1f, 0x2020005, 0x3, 0x12, 0xffffffffffffffff, 0x7ffd) unshare$auto(0x40000080) mmap$auto(0x0, 0xe983, 0xdf, 0xeb5, 0x401, 0x8000) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) mmap$auto(0x0, 0x101, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8000) socket(0xa, 0x1, 0x100) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x5, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x15) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="72010000", @ANYBLOB="120039b30bea2462fa9b22cfb3e23046d894d71554dd87accdbd84ddd99ac07df6741ecfc7142cdcbadea61d259cd94d9ccb8a487811adf6e7d9139317e99a42caf5f87d02403a3953259e864e09ed871413f4b290c4274a72d76a6f54ea"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x40001, 0x0) ioctl$auto_TCFLSH2(r1, 0x80045439, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0xa, 0x3, 0x87) close_range$auto(0x0, 0xfffffffffffff000, 0x2) timerfd_create$auto(0x9, 0x0) poll$auto(&(0x7f0000000000)={0xffffffffffffffff, 0x6, 0x5}, 0x81, 0x4) 7.61282502s ago: executing program 5 (id=3588): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_GET_RADIO(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01f026bd7000fedb9f250600000008000a000400000083b66d6c60ff1975af67bd08e0d316114a23f31a32f5fa4cd1baaedd9b73e1c2b3ddae82c19770b8fe41be7aeecf2ebcaf33a35c902a6b3907727b627f5a2d09dbd610f7e785548c57589ec76918094e60d064"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 6.893503519s ago: executing program 4 (id=3589): openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0xaa102, 0x0) (async) ioperm$auto(0x7, 0x800, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0xc0000, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/devices/LNXSYSTM:00/LNXPWRBN:00/input/input0/capabilities/ff\x00', 0x300, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000380)=""/227, 0xe3) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) getsockopt$auto(r0, 0x200, 0x80, 0x0, 0x0) (async) socket(0x2, 0x1, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) select$auto(0x7, 0x0, 0x0, 0x0, 0x0) (async) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC2\x00', 0xd4206816ab95f368, 0x0) (async) unshare$auto(0x4) (async) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x0, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) setresuid$auto(0xffffffffffffffff, 0x0, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async) mmap$auto(0x0, 0x2020009, 0x4, 0xeb1, r1, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x0, 0x5, 0x7) madvise$auto(0x40, 0x102003f2, 0x15) (async) madvise$auto(0x0, 0x200007, 0x19) (async) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/virtual/net/rose7/flags\x00', 0x2262, 0x0) write$auto(r2, &(0x7f0000000140)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k\xfc\xb2\x00\x00\x00\x00y\x113!\x05\xa7\xd6M\xce\xd6\'\xdf@\x9f\xf5 \x8b_hw\x8em\xd0\b\xe7~1\xf5\xf8\x93*jH\x85H\x05\xae\xdf\xf0\x15A\xdb$\'\x87', 0x81) (async) write$auto(r2, &(0x7f0000000640)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V98\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\x80\x04z\xd0I>\x8f\x00\xd7\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x97nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb6\x9f4[!\x0f3u\xaf\x97\x97\x9d\x1dp\xf3\xab\xdfE[5\x86\xa2\xb92\xc0\x15L\xda\xe3\x04\\M\x85}\xdfh\xd2\xd93e\xf61^\x04\x0f\x85\xc7_\xd0\x8d9\xbd\xc6\xf3R\xea\x10\xb9\xa2\x94]\xf2\r\t\xff$\xeb\xfd1\x8d\x97\x80\x81\x95]\xb2H\xf4\x1c\x8c\xcf\x8eM\x0eB\xb0\x83\xa3\bF\xc7\xae\x1a\xa7r\x9c\xfe\xa5\xa0~\xe4o+\x9d\xb0\xa6\xe8\a\x9a}\x88\x0eKd\xe07\xf0\x88\xf2\xb7\xe3\xe3\b\xac\x1e\xa2a0\x83\x0f\x06\x9eD\xd0\xc6\xba\xa4\x13(l\xf6\xbc\x982\xa0@\xda\xe0\x96\xdc0X\x9c\n\xb3fs\xe1\xf5f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0xeb, 0x32, 0x1fd, 0x13, r2, 0x2) mmap$auto(0x0, 0x400008, 0xdf, 0xf1, 0x2, 0x8000) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001140)='/sys/devices/virtual/block/zram0/comp_algorithm\x00', 0x20b42, 0x0) sendfile$auto(r4, 0x3, 0x0, 0x7) mmap$auto(0x0, 0x400408, 0xdf, 0x9b72, 0x2, 0x8000) sendfile$auto(0x3, 0xffffffffffffffff, 0x0, 0x400000000006) open(0x0, 0x1e1401, 0xe5) tkill$auto(0x0, 0x7) write$auto(0x3, 0x0, 0x100082) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) setsockopt$auto(r4, 0x4, 0x1, &(0x7f0000000180)='-..\x00', 0x6) move_mount$auto(0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x77) setsockopt$auto(0x3, 0x114, 0xa, 0x0, 0x4) 4.897912642s ago: executing program 1 (id=3594): mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) setuid$auto(0xe) bpf$auto(0x5, &(0x7f0000001100)=@bpf_attr_7={@start_id=0x1, 0x4, 0xf, 0xffffffffffffffff}, 0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_MON_SET(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000000)={0x20, r2, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@typed={0x8, 0x1, 0x0, 0x0, @pid}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000010}, 0xc050) mmap$auto(0xfffffffffffffffe, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(r0, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x1d, 0x2, 0x7) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$auto_KVM_GET_MSRS(r4, 0xc008ae88, &(0x7f0000000040)={0x2, 0x0, [{0x480, 0x400, 0x9}]}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) r6 = syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000000100), r3) sendmsg$auto_NET_SHAPER_CMD_GET(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="01002dbd7000ffdbdf2501000000080008004b", @ANYRES32=r5, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x24004001}, 0xf4504059e6fdf584) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r5}, 0x6a) sendmsg$auto_TIPC_NL_KEY_SET(r3, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, r2, 0x800, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_NAME_TABLE={0x18, 0x8, 0x0, 0x1, [@typed={0x14, 0x54, 0x0, 0x0, @ipv6=@loopback}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040841}, 0x24000880) sendto$auto(r3, 0x0, 0x6fffff9, 0xfffffff8, &(0x7f0000000440)=@can={0x1d, r7, 0x3f}, 0x36) 4.861285061s ago: executing program 5 (id=3595): ioctl$auto_XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f00000005c0)={{0xffffffffffffffff, &(0x7f0000000100), 0x1, &(0x7f0000000340), 0x3, &(0x7f0000000440)="4f621839f1f6f2f10f7489395483cc4f7dd0c7317d1ead5786f9fe97deb5c9d0f04b08a2f56e150c49be91d5dd489a79b391243ee22f4a", &(0x7f0000000480)=0x9}, {[0x4, 0xfffffffd, 0x8, 0x7a]}, 0x14, 0x6, &(0x7f0000000340)="852dd6a7b259d9e7a5eb74ac697cd21ee6065f7f2a9058eed931d9b0c0d805052cd988c92166a90e294d94a568efb6f43e267a720745ddb7a6dd3667d63cf0a0446995e3f0fe3f976d21b67165901c14425fcaeb4f411a50a5a7a3f23e1aae0a582de63d8ce514ba277b9fa21aabb0990ae4611ad972ff8b46770b7191ac4b107c808c7feba9b39a6e7bc8cdeb669a6986f4aec6ab57dae1d81ccf"}) ioctl$auto_RTC_PARAM_SET(r0, 0x40187014, &(0x7f00000001c0)={0x8, @ptr=0xce, 0x7}) socket(0x2, 0x80000, 0xa) mmap$auto(0x0, 0x9, 0x40000000003, 0x800000eb1, 0xffffffffffffffff, 0x7fffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/block/mtdblock0/rqos/wbt/curr_win_nsec\x00', 0x6d2500, 0x0) pread64$auto(r1, 0x0, 0x2, 0x9) r2 = bpf$auto(0x5, 0x0, 0x261) mmap$auto(0x0, 0x20805, 0x4000000000df, 0x4000000eb1, 0x401, 0x8000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/workqueue/cpumask\x00', 0x2, 0x0) mmap$auto(0x0, 0x2, 0x4000000000df, 0xeb1, 0x401, 0x7ffe) socketpair$auto(0x1e, 0x5, 0x9, 0x0) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptys5\x00', 0x4000, 0x0) ioctl$auto_TIOCSETD2(r4, 0x5423, 0x0) ioctl$auto_TIOCSTI2(r4, 0x5412, &(0x7f0000000300)="00000000000086b76936299793c41ecd706863efcb6f53d06906d9d521") ioctl$auto_TIOCSTI2(r4, 0x5412, &(0x7f00000000c0)="c0402e39") write$auto(r3, &(0x7f0000000140)='1\x00\\\xa0\x04t\x9f\xfd)m|E\x19\xf8\xd0\xba]\xb1\xb5\xba\xf3\xc9\x00\x00\x00\x00\x00\x00\x00\x00\x188\x9a }\f\xf6\xdb,\xd0\x03~\x1eS\xe6', 0x5) setsockopt$auto_SO_OOBINLINE(r2, 0x3a06183d, 0xa, &(0x7f0000000680)='#\x00\x00v\x1a\xb0a4\x1f\x96\x8f\xe3!\xf5\x7f\x1a\x13\xcdO\x00\x00\x00\x000\xa2r\xf04\x8f\x97\xdb\nq\x0f\xe6\xf0 JJ\xb9e\x13\xe9x[\xa9@\xf4h%\x0e\xe5\xacZ\x86A\n%\a\x1a\xee\xf4; x\xa1\xf7\x9a\x94i:^3:\xfd\xf2FB\"M{i\x81\xb7\xd88\xcalpS6\xcb\x00\x00\x00\x00\x00\x00\x00\x005\x9far4\xac\xd8lq\x03\xccn\x00\x00\x00\x00\x00\x00\xd4\xdf\xce\xday\xfd\x8e;\xb4\x9b{\xc1Y\xe4\a{\x8f\xc8\xa4\xa1\xdb.\xc15K\xdexop\xd56\x1a6\xeb\xd3\xac\xe5\xa9\x05?\x91\xd9\xdb?\xee\xf1\xf8\xc8\xe6,\x14\xd2p\x90\xa8\x18\x80\xc0Q\r\x9b\xd9\b=\x7f\a\x91\xacE\x11_=\xe7\xd4\xa3\xb8+x\vx\xe9\xe7O\xc6\xf9\xd3\x8d\x7f\x92\xb6M\x84\x0f\x16\xdcx\xa8\xb4\x0e\x84\xfe\x8a\xd3\xe0\xceV\xb1`&\xec\xdc\xc8\n\xc0G\x03:kg\xa1Y\xc7C\xd4\x06\x0e~X\xaf\xcd\x99\x84\xe8\x1cCt\x8c\xc0LkS', 0xfffffff7) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mlock$auto(0xfbe8, 0x4) syz_clone(0x20000, 0x0, 0xfffffffffffffef2, 0x0, 0x0, 0x0) munlock$auto(0x9, 0x4fad) sendmmsg$auto(0x3, 0x0, 0x9a5, 0x47fbff7a) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/ib_srp/parameters/reconnect_delay\x00', 0x182b02, 0x0) sendfile$auto(r5, r5, 0x0, 0x4000000000001) mmap$auto(0x0, 0x4, 0x3, 0xeb2, 0x20000000000, 0x10000000008000) r6 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0xe0000, 0x0) ioctl$auto_PAGEMAP_SCAN(r6, 0xc0606610, &(0x7f000000c380)={0x60, 0x0, 0x140000, 0x7fffffffefff, 0xfffffffffffffffe, 0x4, 0x1f00000000000000, 0x50b3019, 0x2c, 0x20, 0x0, 0x2}) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/module/vdpa_sim_blk/parameters/shared_backend\x00', 0x8c00, 0x0) write$auto(r7, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) 4.543221245s ago: executing program 1 (id=3596): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0xc000) close_range$auto(0x2, 0x8, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0) socket(0x22, 0x2, 0x3) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) r2 = seccomp$auto(0xbcb, 0x7fffffff, &(0x7f0000000080)="552e3d3057ee1204b4d86818b6b8735b6208c66cad7111f0910fc0b0aca6113a10b0b54267f1fd6a73e92b7d528343f446afd859250fa7b7cc32b639b23febdad1dd7f3b6674640a332b91530677fd4ce2c1b49af65e21494178618a3e45d424c924815329701e82ba8dcb50eb322a6ffc5736666ca49398729f011803") r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) close_range$auto(r2, r0, 0x9) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xa083, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r4) ioctl$auto_KVM_CREATE_VM(r1, 0x4080aebf, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) socket(0x2, 0x80802, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) getdents$auto(0xffffffffffffffff, 0x0, 0xde) setsockopt$auto(0x3, 0x0, 0x20, 0x0, 0x20000b) 4.315595744s ago: executing program 5 (id=3597): r0 = socket(0x10, 0x2, 0x0) bpf$auto(0xff, &(0x7f00000004c0)=@bpf_attr_5={@target_fd, 0xffffffffffffffff, 0x4, 0x5, 0xffffffffffffffff, @relative_fd, 0x400000000003}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB='f\x00'], 0x1ac}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) mmap$auto(0x0, 0x2000d, 0x4000000200df, 0xeb1, 0x404, 0x8000) read$auto(0x3, 0x0, 0x80) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, 0x0, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x803}, 0x2004, 0x8) 3.036784049s ago: executing program 1 (id=3598): mmap$auto(0x0, 0x2020005, 0x3, 0xeb1, 0xfffffffffffffffa, 0x9000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0xc0000, 0x0) mmap$auto(0x0, 0x400008, 0x8, 0x9b72, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) write$auto(0x3, 0x0, 0xfdef) read$auto(0x3, 0x0, 0x1f40) read$auto(0x3, 0x0, 0x1f40) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f00000001c0)=0x6) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x3, 0x0) userfaultfd$auto(0x1) close_range$auto(0x2, 0x8, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x80102, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x6, 0x101, 0x7ffd, 0x3fa, r1, 0x1000008000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0xd, 0x0) fsopen$auto(0x0, 0x1) fsconfig$auto(r0, 0x1, &(0x7f0000000000)='Q**\x00', &(0x7f00000010c0)="2b24cdedb9695dfa1dab611cbf65de02f9dabf93ebe2bd0a211713009ee488a113e980c7d3f5a70b4e275a88c56fe1edd1f4a061b09846c504ae98af314b1e86c00aa91e7b1f9b5c93c4185e29fc63cb87d19072aedd7cbef8470d34d9bde31cc059557641c9", 0x0) r2 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000240)='/dev/mtd0\x00', 0x80200, 0x0) ioctl$auto_OTPGETREGIONINFO(r2, 0x400c4d0f, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/serial8250/serial8250:0/serial8250:0.1/tty/ttyS1/iomem_base\x00', 0x182122, 0x0) prctl$auto(0x3e, 0x4, 0x0, 0x1, 0x4) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 2.971667808s ago: executing program 5 (id=3599): mmap$auto(0x0, 0x2020009, 0x8000000003, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x1, 0x0) write$auto_seq_oss_f_ops_seq_oss(r0, &(0x7f0000000040)="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", 0xfe04) r1 = openat$auto_trace_options_core_fops_trace(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/debug/tracing/options/stacktrace\x00', 0x10002, 0x0) socket(0x2, 0x1, 0x106) bind$auto(0x3, 0x0, 0x6c) socket(0x1f, 0x80000, 0x1) r2 = io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x44000003, 0x7, 0x9b72, r2, 0x8008) io_uring_setup$auto(0x1, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSETD2(r3, 0x5423, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000540)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r4, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) clock_gettime$auto(0x80000000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd3/queue/rq_affinity\x00', 0x10b042, 0x0) mmap$auto(0x10000000000000, 0x3, 0xdf, 0xeb1, 0x40000000000a5, 0x80000008002) r5 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000b80)='/proc/sys/kernel/kptr_restrict\x00', 0x202, 0x0) read$auto(r5, 0x0, 0xb5) r6 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x640, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/020/001\x00', 0x40, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$auto_MON_IOCG_STATS(r6, 0x80089203, 0x0) ioctl$auto_FIDEDUPERANGE(r1, 0xc0189436, 0x4) mmap$auto(0x0, 0x4000b, 0x27b, 0x9b72, 0x7, 0x28000) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x10b040, 0x0) syslog$auto_SYSLOG_ACTION_READ_CLEAR(0x4, 0xffffffffffffffff, 0x226) 2.936814031s ago: executing program 4 (id=3600): socket$nl_generic(0x10, 0x3, 0x10) r0 = getpid() r1 = fcntl$auto(0xffffffffffffffff, 0x8, r0) socket(0x22, 0x2, 0x2) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/kernel/ns_last_pid\x00', 0x88642, 0x0) ioctl$auto_SNDCTL_SEQ_GETTIME(0xffffffffffffffff, 0x80045113, &(0x7f0000000340)) read$auto_proc_sys_file_operations_proc_sysctl(r2, 0x0, 0x0) r3 = socket(0x2, 0x1, 0x106) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) r4 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0xa901, 0x0) openat$auto_uhid_fops_uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2201, 0x0) writev$auto(0x3, &(0x7f0000000080)={0x0, 0x1}, 0x3) ioctl$auto(r4, 0x5522, 0xf15) ioctl$auto(r4, 0x5523, r4) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0x0, 0x0) syz_genetlink_get_family_id$auto_ovs_flow(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) setsockopt$auto(r3, 0x6, 0x3, 0x0, 0x7) setsockopt$auto(r1, 0x0, 0x1, 0x0, 0xb) 2.565395328s ago: executing program 4 (id=3601): sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) r0 = openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/devices\x00', 0x600, 0x0) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/fs/cifs/Stats\x00', 0x28102, 0x0) openat$auto_urandom_fops_random(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$auto(0x3, 0x541b, 0x38) readv$auto(0x3, 0x0, 0x1) mmap$auto(0x0, 0x2020005, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) madvise$auto(0x110c230000, 0x1, 0x9) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x28c000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cpu/0/msr\x00', 0x181f82, 0x0) mmap$auto(0x0, 0x20009, 0xe0, 0xeb1, 0xffffffffffffffff, 0x4) write$auto(r1, 0x0, 0x8000000000000001) readv$auto(r2, &(0x7f00000000c0)={0x0, 0x101d0}, 0x400) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty46\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$auto_ovs_vport(0x0, 0xffffffffffffffff) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004340)={&(0x7f00000041c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010028bd7000fbdbdf25020000000800"/26, @ANYRES32=0x0, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0x80) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mmap$auto(0x13000000, 0x2000d, 0x4000000200df, 0xeb1, 0x404, 0x8000) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0xa901, 0x0) preadv$auto(r0, &(0x7f0000000080)={0x0}, 0x6, 0x22, 0xffc) inotify_init1$auto(0x5) 2.091978939s ago: executing program 1 (id=3602): r0 = openat$auto_tracing_cpumask_fops_trace(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/tracing/tracing_cpumask\x00', 0x8002, 0x0) writev$auto(r0, &(0x7f0000000000)={&(0x7f0000000140), 0x9}, 0x1) 1.618804311s ago: executing program 1 (id=3603): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x2, 0x1, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0x401, 0x8000) syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) bind$auto(0x3, 0x0, 0x6a) setpgid$auto(0x0, 0xffffffffffffffff) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) syz_clone(0x2360411, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/irq/2/name\x00', 0x800, 0x0) read$auto(r2, 0x0, 0x1) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x9, 0x1f, 0x940, 0x1ffde, 0x3, 0x6, 0x8000003, 0x9, 0x6, 0x0, 0x4, 0xb0, 0x7, 0x200, 0x3, 0x205, 0x7, 0x0, 0x3ffff, 0x0, 0x3, 0x7069, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, [0x0, 0x0, 0x0, 0x8, 0x5, 0x8000004, 0x0, 0x100000000000000, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x100000000, 0x0, 0x8000000000000001, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x4, 0x0, 0x0, 0x2000000000000000]}, 0x203, 0x7d) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[], 0x3c}}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) r3 = socket(0x10, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000000000), r4) sendmsg$auto_IOAM6_CMD_ADD_SCHEMA(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000480)={0x20, r5, 0x1, 0x70bd2a, 0x25dfdbfb, {0x4, 0x0, 0x900}, [@IOAM6_ATTR_SC_DATA={0x4}, @IOAM6_ATTR_SC_ID={0x8, 0x4, 0x9}]}, 0x20}, 0x1, 0x3000700, 0x0, 0x1}, 0x8010) sendmsg$auto_IOAM6_CMD_DEL_NAMESPACE(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r5, 0x200, 0x70bd27, 0x25dfdbff, {}, [@IOAM6_ATTR_NS_ID={0x6, 0x1, 0xf}, @IOAM6_ATTR_NS_ID={0x6, 0x1, 0x81}]}, 0x24}}, 0x4000000) sendmmsg$auto(r3, 0x0, 0x7, 0x4008) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x0, 0x33, 0x0, 0x4) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) 816.948128ms ago: executing program 0 (id=3604): mmap$auto(0x0, 0x400008, 0x3, 0x9b72, 0x2, 0x8000) migrate_pages$auto(0x0, 0x99, 0x0, &(0x7f00000001c0)=0x7b) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio1\x00', 0x80e42, 0x0) ioctl$auto_SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f00000001c0)) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) write$auto(0x3, 0x0, 0x100082) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xf, 0x3, 0x2) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D3\x00', 0x1, 0x0) socket(0x2, 0x2, 0x0) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/trace_pipe\x00', 0x20c01, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x10000000000001fb, 0x7, 0x3, 0x1, 0x9687, 0x100000000000003, 0x95f4da0a, 0x3, 0x9, 0x62, 0x8, 0x807, 0x6d3f, 0x9, 0x6, 0xfffffffffffffffe]}, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x4, 0x3, 0x15f4da0a, 0x3, 0x3, 0x3, 0x8000000000000000, 0x2, 0x6d3c, 0x9, 0x2, 0x8000000000000006]}, 0x0) process_vm_readv$auto(0x0, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, 0x0, 0xa, 0x0) r3 = openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) gettid() mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r4 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x100e42, 0x0) write$auto_sg_fops_sg(r4, &(0x7f0000000080)="3731bf5b0001240000a6c7581afff6578d2f5f520f687f316ba709037c0ae2c7000000000000000000000000000000000000341fd403b8c94fc7487e48c9a5fbcd7f08781c0075685a8dcd402d83354afc6e4620da34c7740485d30a3d6676d9974475f0a114370225123540c46fcc6703f87b48faa8f2448331bb31ea3557d351b3dcae2ec9021cf153048a84a74fc50f8b83ed22e46288f95f5b77cf9903bac26d20da8bb15d600cf9810c8fac4765936a1912eb2639624ee4cf690744293b76fa74a859e9cdbc", 0xc8) ioctl$auto_SG_GET_REQUEST_TABLE(r4, 0x2286, &(0x7f0000000040)) bind$auto(r3, &(0x7f00000000c0)=@sco={0x1f, @none}, 0x0) socket(0xa, 0x1, 0x84) readv$auto(0xffffffffffffffff, 0x0, 0x3) close_range$auto(0x2, 0x8, 0x0) 171.793597ms ago: executing program 1 (id=3605): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x101840, 0x0) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, 0x0, 0x109001, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) io_setup$auto(0x7ffe, &(0x7f0000000000)) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x809c0, 0x0) mlockall$auto(0x7) r2 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r0, 0x4b67, r2) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/dev\x00', 0x0, 0x0) mmap$auto(0xffffffffffffffff, 0x20009, 0xe3, 0x3f7d, 0x40000000000a1, 0x8000) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x28341, 0x0) ioctl$auto_TIOCMGET2(r4, 0x5415, 0x0) socket(0xa, 0x1, 0x0) io_uring_setup$auto(0x6, 0x0) socketpair$auto(0x2, 0x6, 0x202, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000e40)='/sys/devices/pci0000:00/0000:00:01.3/config\x00', 0x2, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/icmp/ratemask\x00', 0xa0202, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000680)='/dev/v4l-subdev5\x00', 0x20281, 0x0) ioctl$auto(r6, 0xc038563c, r5) pread64$auto(r3, 0x0, 0x7, 0xffff) unshare$auto(0x40000080) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8002, 0x9) setxattrat$auto(r7, 0x0, 0x1100, 0x0, 0x0, 0x5d8) 0s ago: executing program 4 (id=3606): sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) r0 = openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/devices\x00', 0x600, 0x0) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/fs/cifs/Stats\x00', 0x28102, 0x0) readv$auto(0x3, 0x0, 0x1) mmap$auto(0x0, 0x2020005, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) madvise$auto(0x110c230000, 0x1, 0x9) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x28c000, 0x0) mmap$auto(0x900000000000000, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cpu/0/msr\x00', 0x181f82, 0x0) mmap$auto(0x0, 0x20009, 0xe0, 0xeb1, 0xffffffffffffffff, 0x4) write$auto(r1, 0x0, 0x8000000000000001) readv$auto(r2, &(0x7f00000000c0)={0x0, 0x101d0}, 0x400) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty46\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$auto_ovs_vport(0x0, 0xffffffffffffffff) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004340)={&(0x7f00000041c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010028bd7000fbdbdf25020000000800"/26, @ANYRES32=0x0, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0x80) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mmap$auto(0x0, 0x2000d, 0x4000000200df, 0xeb1, 0x404, 0x8000) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0xa901, 0x0) preadv$auto(r0, &(0x7f0000000080)={0x0}, 0x6, 0x22, 0xffc) inotify_init1$auto(0x5) kernel console output (not intermixed with test programs): [ T6319] hci_event_packet+0x685/0x11c0 [ 967.866345][ T6319] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 967.866365][ T6319] ? __pfx_hci_event_packet+0x10/0x10 [ 967.866396][ T6319] ? kcov_remote_start+0x3c9/0x6d0 [ 967.866416][ T6319] ? lockdep_hardirqs_on+0x7c/0x110 [ 967.866439][ T6319] hci_rx_work+0x2c5/0x16b0 [ 967.866459][ T6319] ? rcu_is_watching+0x12/0xc0 [ 967.866484][ T6319] process_one_work+0x9cc/0x1b70 [ 967.866512][ T6319] ? __pfx_process_one_work+0x10/0x10 [ 967.866537][ T6319] ? assign_work+0x1a0/0x250 [ 967.866556][ T6319] worker_thread+0x6c8/0xf10 [ 967.866585][ T6319] ? __pfx_worker_thread+0x10/0x10 [ 967.866604][ T6319] kthread+0x3c5/0x780 [ 967.866628][ T6319] ? __pfx_kthread+0x10/0x10 [ 967.866658][ T6319] ? rcu_is_watching+0x12/0xc0 [ 967.866689][ T6319] ? __pfx_kthread+0x10/0x10 [ 967.866708][ T6319] ret_from_fork+0x56d/0x730 [ 967.866726][ T6319] ? __pfx_kthread+0x10/0x10 [ 967.866745][ T6319] ret_from_fork_asm+0x1a/0x30 [ 967.866779][ T6319] [ 967.866802][ T6319] kobject: kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 968.137787][ T6319] Bluetooth: hci3: failed to register connection device [ 968.352683][T22412] netlink: 280 bytes leftover after parsing attributes in process `syz.1.3073'. [ 969.016228][T22415] netlink: 334 bytes leftover after parsing attributes in process `syz.4.3071'. [ 969.613393][T22404] Process accounting paused [ 970.176553][ T6319] Bluetooth: hci3: command 0x0c1a tx timeout [ 970.933169][T22435] svc: failed to register nfsdv3 RPC service (errno 111). [ 971.028093][T22435] svc: failed to register nfsaclv3 RPC service (errno 111). [ 971.185179][T22476] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 971.192602][T22476] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 971.661029][ T6319] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 971.669176][ T6319] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:0' [ 971.679446][ T6319] CPU: 0 UID: 0 PID: 6319 Comm: kworker/u11:2 Not tainted syzkaller #0 PREEMPT(full) [ 971.679489][ T6319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 971.679511][ T6319] Workqueue: hci2 hci_rx_work [ 971.679550][ T6319] Call Trace: [ 971.679562][ T6319] [ 971.679575][ T6319] dump_stack_lvl+0x16c/0x1f0 [ 971.679613][ T6319] sysfs_warn_dup+0x7f/0xa0 [ 971.679655][ T6319] sysfs_create_dir_ns+0x24b/0x2b0 [ 971.679698][ T6319] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 971.679739][ T6319] ? find_held_lock+0x2b/0x80 [ 971.679785][ T6319] ? do_raw_spin_unlock+0x172/0x230 [ 971.679824][ T6319] kobject_add_internal+0x2c4/0x9b0 [ 971.679869][ T6319] kobject_add+0x16e/0x240 [ 971.679905][ T6319] ? __pfx_kobject_add+0x10/0x10 [ 971.679946][ T6319] ? do_raw_spin_unlock+0x172/0x230 [ 971.679982][ T6319] ? kobject_put+0xab/0x5a0 [ 971.680031][ T6319] device_add+0x288/0x1aa0 [ 971.680062][ T6319] ? __pfx_dev_set_name+0x10/0x10 [ 971.680093][ T6319] ? __pfx_device_add+0x10/0x10 [ 971.680142][ T6319] ? mgmt_send_event_skb+0x2fb/0x460 [ 971.680205][ T6319] hci_conn_add_sysfs+0x17e/0x230 [ 971.680245][ T6319] le_conn_complete_evt+0x1260/0x2150 [ 971.680306][ T6319] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 971.680364][ T6319] ? bt_warn+0xe4/0x120 [ 971.680409][ T6319] ? __pfx_bt_warn+0x10/0x10 [ 971.680467][ T6319] hci_le_conn_complete_evt+0x23c/0x370 [ 971.680530][ T6319] hci_le_meta_evt+0x354/0x5e0 [ 971.680564][ T6319] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 971.680621][ T6319] hci_event_packet+0x685/0x11c0 [ 971.680673][ T6319] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 971.680709][ T6319] ? __pfx_hci_event_packet+0x10/0x10 [ 971.680764][ T6319] ? kcov_remote_start+0x3c9/0x6d0 [ 971.680800][ T6319] ? lockdep_hardirqs_on+0x7c/0x110 [ 971.680842][ T6319] hci_rx_work+0x2c5/0x16b0 [ 971.680878][ T6319] ? rcu_is_watching+0x12/0xc0 [ 971.680924][ T6319] process_one_work+0x9cc/0x1b70 [ 971.680977][ T6319] ? __pfx_process_one_work+0x10/0x10 [ 971.681025][ T6319] ? assign_work+0x1a0/0x250 [ 971.681061][ T6319] worker_thread+0x6c8/0xf10 [ 971.681116][ T6319] ? __pfx_worker_thread+0x10/0x10 [ 971.681151][ T6319] kthread+0x3c5/0x780 [ 971.681184][ T6319] ? __pfx_kthread+0x10/0x10 [ 971.681218][ T6319] ? rcu_is_watching+0x12/0xc0 [ 971.681254][ T6319] ? __pfx_kthread+0x10/0x10 [ 971.681284][ T6319] ret_from_fork+0x56d/0x730 [ 971.681313][ T6319] ? __pfx_kthread+0x10/0x10 [ 971.681343][ T6319] ret_from_fork_asm+0x1a/0x30 [ 971.681418][ T6319] [ 971.681456][ T6319] kobject: kobject_add_internal failed for hci2:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 971.966136][ T6319] Bluetooth: hci2: failed to register connection device [ 972.084646][T22465] svc: failed to register nfsdv3 RPC service (errno 512). [ 972.154274][T22465] svc: failed to register nfsaclv3 RPC service (errno 512). [ 973.059525][T22527] netlink: 334 bytes leftover after parsing attributes in process `syz.0.3079'. [ 974.016199][ T6319] Bluetooth: hci2: command 0x0c1a tx timeout [ 975.483252][T22622] zswap: compressor 000 not available [ 976.325216][T22660] svc: failed to register nfsdv3 RPC service (errno 111). [ 976.445704][T22660] svc: failed to register nfsaclv3 RPC service (errno 111). [ 977.018834][T22683] svc: failed to register nfsdv3 RPC service (errno 111). [ 977.130691][T22683] svc: failed to register nfsaclv3 RPC service (errno 111). [ 985.466074][T22996] Process accounting resumed [ 985.996616][T23007] svc: failed to register nfsdv3 RPC service (errno 111). [ 986.017121][T23007] svc: failed to register nfsaclv3 RPC service (errno 111). [ 986.881370][T23008] svc: failed to register nfsdv3 RPC service (errno 512). [ 986.895973][T23008] svc: failed to register nfsaclv3 RPC service (errno 512). [ 987.977553][T23034] FAULT_INJECTION: forcing a failure. [ 987.977553][T23034] name fail_futex, interval 1, probability 0, space 0, times 0 [ 988.043377][T23034] CPU: 0 UID: 0 PID: 23034 Comm: syz.1.3112 Not tainted syzkaller #0 PREEMPT(full) [ 988.043427][T23034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 988.043445][T23034] Call Trace: [ 988.043456][T23034] [ 988.043468][T23034] dump_stack_lvl+0x16c/0x1f0 [ 988.043515][T23034] should_fail_ex+0x512/0x640 [ 988.043560][T23034] get_futex_key+0x1d0/0x1560 [ 988.043611][T23034] ? __pfx_get_futex_key+0x10/0x10 [ 988.043657][T23034] ? copy_msghdr_from_user+0x10a/0x160 [ 988.043692][T23034] ? __pfx_____sys_sendmsg+0x10/0x10 [ 988.043742][T23034] futex_wait_setup+0x9d/0x550 [ 988.043788][T23034] __futex_wait+0x193/0x2f0 [ 988.043823][T23034] ? __pfx___futex_wait+0x10/0x10 [ 988.043864][T23034] ? __pfx_futex_wake_mark+0x10/0x10 [ 988.043905][T23034] ? futex_private_hash_put+0x176/0x300 [ 988.043956][T23034] ? futex_private_hash_put+0x18a/0x300 [ 988.044004][T23034] futex_wait+0xe8/0x380 [ 988.044037][T23034] ? __pfx_futex_wait+0x10/0x10 [ 988.044081][T23034] ? __pfx___sys_sendmmsg+0x10/0x10 [ 988.044125][T23034] do_futex+0x229/0x350 [ 988.044173][T23034] ? __pfx_do_futex+0x10/0x10 [ 988.044219][T23034] ? fput+0x9b/0xd0 [ 988.044270][T23034] __x64_sys_futex+0x1e0/0x4c0 [ 988.044322][T23034] ? __pfx___x64_sys_futex+0x10/0x10 [ 988.044368][T23034] ? xfd_validate_state+0x61/0x180 [ 988.044411][T23034] do_syscall_64+0xcd/0x4b0 [ 988.044449][T23034] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 988.044481][T23034] RIP: 0033:0x7f368478eec9 [ 988.044519][T23034] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 988.044549][T23034] RSP: 002b:00007f36855d10e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 988.044580][T23034] RAX: ffffffffffffffda RBX: 00007f36849e5fa8 RCX: 00007f368478eec9 [ 988.044600][T23034] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f36849e5fa8 [ 988.044620][T23034] RBP: 00007f36849e5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 988.044640][T23034] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 988.044660][T23034] R13: 00007f36849e6038 R14: 00007fff244ce760 R15: 00007fff244ce848 [ 988.044701][T23034] [ 989.839392][T23060] svc: failed to register nfsdv3 RPC service (errno 111). [ 989.985395][T23060] svc: failed to register nfsaclv3 RPC service (errno 111). [ 990.474743][T23052] FAULT_INJECTION: forcing a failure. [ 990.474743][T23052] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 990.603689][T23052] CPU: 1 UID: 0 PID: 23052 Comm: syz.2.3116 Not tainted syzkaller #0 PREEMPT(full) [ 990.603733][T23052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 990.603751][T23052] Call Trace: [ 990.603761][T23052] [ 990.603771][T23052] dump_stack_lvl+0x16c/0x1f0 [ 990.603806][T23052] should_fail_ex+0x512/0x640 [ 990.603845][T23052] _copy_from_user+0x2e/0xd0 [ 990.603885][T23052] copy_msghdr_from_user+0x98/0x160 [ 990.603920][T23052] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 990.603962][T23052] ? kfree+0x252/0x6d0 [ 990.604005][T23052] ___sys_sendmsg+0xfe/0x1d0 [ 990.604041][T23052] ? __pfx____sys_sendmsg+0x10/0x10 [ 990.604113][T23052] ? __pfx___might_resched+0x10/0x10 [ 990.604162][T23052] __sys_sendmmsg+0x200/0x420 [ 990.604202][T23052] ? __pfx___sys_sendmmsg+0x10/0x10 [ 990.604243][T23052] ? __pfx_do_futex+0x10/0x10 [ 990.604291][T23052] ? fput+0x9b/0xd0 [ 990.604354][T23052] ? xfd_validate_state+0x61/0x180 [ 990.604391][T23052] __x64_sys_sendmmsg+0x9c/0x100 [ 990.604427][T23052] ? lockdep_hardirqs_on+0x7c/0x110 [ 990.604458][T23052] do_syscall_64+0xcd/0x4b0 [ 990.604506][T23052] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 990.604538][T23052] RIP: 0033:0x7fa26478eec9 [ 990.604565][T23052] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 990.604596][T23052] RSP: 002b:00007fa26557e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 990.604627][T23052] RAX: ffffffffffffffda RBX: 00007fa2649e5fa0 RCX: 00007fa26478eec9 [ 990.604648][T23052] RDX: 0000000000000007 RSI: 0000200000000200 RDI: 0000000000000007 [ 990.604669][T23052] RBP: 00007fa264811f91 R08: 0000000000000000 R09: 0000000000000000 [ 990.604688][T23052] R10: 0000000000004008 R11: 0000000000000246 R12: 0000000000000000 [ 990.604708][T23052] R13: 00007fa2649e6038 R14: 00007fa2649e5fa0 R15: 00007fff763c7a88 [ 990.604749][T23052] [ 992.447251][T23063] svc: failed to register nfsdv3 RPC service (errno 111). [ 992.553098][T23063] svc: failed to register nfsaclv3 RPC service (errno 111). [ 992.986491][T23121] queue_state_write: operation too long [ 993.004833][T23121] queue_state_write: use 'run', 'start' or 'kick' [ 993.191763][T23123] netlink: 280 bytes leftover after parsing attributes in process `syz.0.3124'. [ 994.546873][T23146] random: crng reseeded on system resumption [ 997.393566][T23206] queue_state_write: operation too long [ 997.400615][T23206] queue_state_write: use 'run', 'start' or 'kick' [ 998.267060][T23222] FAULT_INJECTION: forcing a failure. [ 998.267060][T23222] name failslab, interval 1, probability 0, space 0, times 0 [ 998.401407][T23222] CPU: 1 UID: 0 PID: 23222 Comm: syz.0.3135 Not tainted syzkaller #0 PREEMPT(full) [ 998.401454][T23222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 998.401474][T23222] Call Trace: [ 998.401485][T23222] [ 998.401498][T23222] dump_stack_lvl+0x16c/0x1f0 [ 998.401540][T23222] should_fail_ex+0x512/0x640 [ 998.401576][T23222] ? __kvmalloc_node_noprof+0x12e/0x9c0 [ 998.401624][T23222] should_failslab+0xc2/0x120 [ 998.401670][T23222] __kvmalloc_node_noprof+0x141/0x9c0 [ 998.401712][T23222] ? trace_kmalloc+0x2b/0xd0 [ 998.401753][T23222] ? __kvmalloc_node_noprof+0x3c0/0x9c0 [ 998.401792][T23222] ? io_alloc_cache_init+0x38/0x170 [ 998.401835][T23222] ? io_alloc_cache_init+0x38/0x170 [ 998.401869][T23222] io_alloc_cache_init+0x38/0x170 [ 998.401907][T23222] io_rsrc_cache_init+0x26/0x50 [ 998.401941][T23222] io_uring_setup+0x68e/0x20e0 [ 998.401995][T23222] ? __pfx_io_uring_setup+0x10/0x10 [ 998.402040][T23222] ? do_futex+0x122/0x350 [ 998.402086][T23222] ? __pfx_do_futex+0x10/0x10 [ 998.402133][T23222] ? fput+0x9b/0xd0 [ 998.402208][T23222] ? xfd_validate_state+0x61/0x180 [ 998.402257][T23222] __x64_sys_io_uring_setup+0xc2/0x170 [ 998.402310][T23222] do_syscall_64+0xcd/0x4b0 [ 998.402348][T23222] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 998.402379][T23222] RIP: 0033:0x7ff08598eec9 [ 998.402406][T23222] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 998.402444][T23222] RSP: 002b:00007ff0868b5038 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 998.402475][T23222] RAX: ffffffffffffffda RBX: 00007ff085be5fa0 RCX: 00007ff08598eec9 [ 998.402496][T23222] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 998.402515][T23222] RBP: 00007ff085a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 998.402535][T23222] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 998.402554][T23222] R13: 00007ff085be6038 R14: 00007ff085be5fa0 R15: 00007ffc3f7e6da8 [ 998.402596][T23222] [ 998.735938][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 998.742329][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1000.897929][T23293] random: crng reseeded on system resumption [ 1001.088704][T23291] netlink: 280 bytes leftover after parsing attributes in process `syz.2.3139'. [ 1003.813575][ T6319] Bluetooth: hci4: unexpected subevent 0x01 length: 123 > 18 [ 1003.821524][ T6319] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:0' [ 1003.833622][ T6319] CPU: 0 UID: 0 PID: 6319 Comm: kworker/u11:2 Not tainted syzkaller #0 PREEMPT(full) [ 1003.833666][ T6319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1003.833687][ T6319] Workqueue: hci4 hci_rx_work [ 1003.833724][ T6319] Call Trace: [ 1003.833734][ T6319] [ 1003.833747][ T6319] dump_stack_lvl+0x16c/0x1f0 [ 1003.833784][ T6319] sysfs_warn_dup+0x7f/0xa0 [ 1003.833826][ T6319] sysfs_create_dir_ns+0x24b/0x2b0 [ 1003.833866][ T6319] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1003.833904][ T6319] ? find_held_lock+0x2b/0x80 [ 1003.833948][ T6319] ? do_raw_spin_unlock+0x172/0x230 [ 1003.833985][ T6319] kobject_add_internal+0x2c4/0x9b0 [ 1003.834030][ T6319] kobject_add+0x16e/0x240 [ 1003.834067][ T6319] ? __pfx_kobject_add+0x10/0x10 [ 1003.834106][ T6319] ? do_raw_spin_unlock+0x172/0x230 [ 1003.834140][ T6319] ? kobject_put+0xab/0x5a0 [ 1003.834196][ T6319] device_add+0x288/0x1aa0 [ 1003.834226][ T6319] ? __pfx_dev_set_name+0x10/0x10 [ 1003.834259][ T6319] ? __pfx_device_add+0x10/0x10 [ 1003.834308][ T6319] ? mgmt_send_event_skb+0x2fb/0x460 [ 1003.834369][ T6319] hci_conn_add_sysfs+0x17e/0x230 [ 1003.834406][ T6319] le_conn_complete_evt+0x1260/0x2150 [ 1003.834465][ T6319] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1003.834511][ T6319] ? bt_warn+0xe4/0x120 [ 1003.834554][ T6319] ? __pfx_bt_warn+0x10/0x10 [ 1003.834608][ T6319] hci_le_conn_complete_evt+0x23c/0x370 [ 1003.834667][ T6319] hci_le_meta_evt+0x354/0x5e0 [ 1003.834699][ T6319] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 1003.834752][ T6319] hci_event_packet+0x685/0x11c0 [ 1003.834799][ T6319] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1003.834834][ T6319] ? __pfx_hci_event_packet+0x10/0x10 [ 1003.834884][ T6319] ? kcov_remote_start+0x3c9/0x6d0 [ 1003.834918][ T6319] ? lockdep_hardirqs_on+0x7c/0x110 [ 1003.834959][ T6319] hci_rx_work+0x2c5/0x16b0 [ 1003.834992][ T6319] ? rcu_is_watching+0x12/0xc0 [ 1003.835035][ T6319] process_one_work+0x9cc/0x1b70 [ 1003.835085][ T6319] ? __pfx_process_one_work+0x10/0x10 [ 1003.835130][ T6319] ? assign_work+0x1a0/0x250 [ 1003.835163][ T6319] worker_thread+0x6c8/0xf10 [ 1003.835223][ T6319] ? __pfx_worker_thread+0x10/0x10 [ 1003.835256][ T6319] kthread+0x3c5/0x780 [ 1003.835286][ T6319] ? __pfx_kthread+0x10/0x10 [ 1003.835318][ T6319] ? rcu_is_watching+0x12/0xc0 [ 1003.835355][ T6319] ? __pfx_kthread+0x10/0x10 [ 1003.835387][ T6319] ret_from_fork+0x56d/0x730 [ 1003.835417][ T6319] ? __pfx_kthread+0x10/0x10 [ 1003.835445][ T6319] ret_from_fork_asm+0x1a/0x30 [ 1003.835504][ T6319] [ 1003.835540][ T6319] kobject: kobject_add_internal failed for hci4:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 1004.112237][ T6319] Bluetooth: hci4: failed to register connection device [ 1004.853532][T23335] FAULT_INJECTION: forcing a failure. [ 1004.853532][T23335] name failslab, interval 1, probability 0, space 0, times 0 [ 1004.992037][T23349] netlink: 334 bytes leftover after parsing attributes in process `syz.1.3145'. [ 1005.302418][T23335] CPU: 0 UID: 0 PID: 23335 Comm: syz.2.3142 Not tainted syzkaller #0 PREEMPT(full) [ 1005.302457][T23335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1005.302469][T23335] Call Trace: [ 1005.302478][T23335] [ 1005.302486][T23335] dump_stack_lvl+0x16c/0x1f0 [ 1005.302510][T23335] should_fail_ex+0x512/0x640 [ 1005.302532][T23335] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 1005.302556][T23335] should_failslab+0xc2/0x120 [ 1005.302583][T23335] kmem_cache_alloc_noprof+0x75/0x6e0 [ 1005.302604][T23335] ? vm_area_dup+0x27/0x8d0 [ 1005.302626][T23335] ? vm_area_dup+0x27/0x8d0 [ 1005.302643][T23335] vm_area_dup+0x27/0x8d0 [ 1005.302663][T23335] __split_vma+0x18e/0x1070 [ 1005.302684][T23335] ? __pfx___split_vma+0x10/0x10 [ 1005.302708][T23335] ? __pfx_mas_prev+0x10/0x10 [ 1005.302734][T23335] vms_gather_munmap_vmas+0x3aa/0x1340 [ 1005.302757][T23335] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 1005.302779][T23335] ? mas_walk+0x6f5/0x980 [ 1005.302803][T23335] __mmap_region+0x434/0x27a0 [ 1005.302826][T23335] ? __pfx___mmap_region+0x10/0x10 [ 1005.302847][T23335] ? lock_acquire+0x179/0x350 [ 1005.302875][T23335] ? find_held_lock+0x2b/0x80 [ 1005.302906][T23335] ? rcu_is_watching+0x12/0xc0 [ 1005.302928][T23335] ? trace_sched_exit_tp+0xd1/0x120 [ 1005.302947][T23335] ? __schedule+0x11a3/0x5de0 [ 1005.302973][T23335] ? look_up_lock_class+0x6b/0x150 [ 1005.303022][T23335] ? trace_cap_capable+0x18d/0x200 [ 1005.303050][T23335] mmap_region+0x1ab/0x3f0 [ 1005.303070][T23335] ? __get_unmapped_area+0x267/0x440 [ 1005.303102][T23335] do_mmap+0xa3e/0x1210 [ 1005.303133][T23335] ? __pfx_do_mmap+0x10/0x10 [ 1005.303159][T23335] ? __pfx_down_write_killable+0x10/0x10 [ 1005.303185][T23335] vm_mmap_pgoff+0x29e/0x470 [ 1005.303214][T23335] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1005.303249][T23335] ? find_held_lock+0x2b/0x80 [ 1005.303272][T23335] ? __x64_sys_futex+0x1e0/0x4c0 [ 1005.303298][T23335] ? __x64_sys_futex+0x1e9/0x4c0 [ 1005.303328][T23335] ksys_mmap_pgoff+0x7d/0x5c0 [ 1005.303353][T23335] ? xfd_validate_state+0x61/0x180 [ 1005.303373][T23335] __x64_sys_mmap+0x125/0x190 [ 1005.303393][T23335] do_syscall_64+0xcd/0x4b0 [ 1005.303426][T23335] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1005.303454][T23335] RIP: 0033:0x7fa26478eec9 [ 1005.303478][T23335] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1005.303504][T23335] RSP: 002b:00007fa26555d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1005.303534][T23335] RAX: ffffffffffffffda RBX: 00007fa2649e6090 RCX: 00007fa26478eec9 [ 1005.303553][T23335] RDX: 000000000000027b RSI: 000000000004000b RDI: 0000000000000000 [ 1005.303572][T23335] RBP: 00007fa264811f91 R08: 0000000000000007 R09: 0000000000028000 [ 1005.303591][T23335] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 1005.303610][T23335] R13: 00007fa2649e6128 R14: 00007fa2649e6090 R15: 00007fff763c7a88 [ 1005.303650][T23335] [ 1006.184140][ T6319] Bluetooth: hci4: command 0x040f tx timeout [ 1006.253221][T23360] blktrace: Concurrent blktraces are not allowed on nbd3 [ 1007.338369][T23376] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3149'. [ 1007.446107][T23379] netlink: 280 bytes leftover after parsing attributes in process `syz.4.3151'. [ 1007.912556][T23399] netlink: 280 bytes leftover after parsing attributes in process `syz.4.3153'. [ 1009.803879][T23480] netlink: 280 bytes leftover after parsing attributes in process `syz.4.3161'. [ 1011.400512][T23483] FAULT_INJECTION: forcing a failure. [ 1011.400512][T23483] name failslab, interval 1, probability 0, space 0, times 0 [ 1011.544037][T23483] CPU: 0 UID: 0 PID: 23483 Comm: syz.0.3162 Not tainted syzkaller #0 PREEMPT(full) [ 1011.544078][T23483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1011.544096][T23483] Call Trace: [ 1011.544107][T23483] [ 1011.544120][T23483] dump_stack_lvl+0x16c/0x1f0 [ 1011.544158][T23483] should_fail_ex+0x512/0x640 [ 1011.544192][T23483] ? __kvmalloc_node_noprof+0x12e/0x9c0 [ 1011.544231][T23483] should_failslab+0xc2/0x120 [ 1011.544274][T23483] __kvmalloc_node_noprof+0x141/0x9c0 [ 1011.544313][T23483] ? trace_kmalloc+0x2b/0xd0 [ 1011.544348][T23483] ? __kvmalloc_node_noprof+0x3c0/0x9c0 [ 1011.544379][T23483] ? io_alloc_cache_init+0x38/0x170 [ 1011.544416][T23483] ? io_alloc_cache_init+0x38/0x170 [ 1011.544452][T23483] io_alloc_cache_init+0x38/0x170 [ 1011.544486][T23483] io_rsrc_cache_init+0x26/0x50 [ 1011.544516][T23483] io_uring_setup+0x68e/0x20e0 [ 1011.544561][T23483] ? __pfx_io_uring_setup+0x10/0x10 [ 1011.544600][T23483] ? do_futex+0x122/0x350 [ 1011.544642][T23483] ? __pfx_do_futex+0x10/0x10 [ 1011.544681][T23483] ? fput+0x9b/0xd0 [ 1011.544734][T23483] ? xfd_validate_state+0x61/0x180 [ 1011.544770][T23483] __x64_sys_io_uring_setup+0xc2/0x170 [ 1011.544813][T23483] do_syscall_64+0xcd/0x4b0 [ 1011.544845][T23483] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1011.544871][T23483] RIP: 0033:0x7ff08598eec9 [ 1011.544893][T23483] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1011.544920][T23483] RSP: 002b:00007ff0868b5038 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 1011.544947][T23483] RAX: ffffffffffffffda RBX: 00007ff085be5fa0 RCX: 00007ff08598eec9 [ 1011.544968][T23483] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 1011.544984][T23483] RBP: 00007ff085a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1011.545001][T23483] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1011.545017][T23483] R13: 00007ff085be6038 R14: 00007ff085be5fa0 R15: 00007ffc3f7e6da8 [ 1011.545054][T23483] [ 1015.002105][T23562] FAULT_INJECTION: forcing a failure. [ 1015.002105][T23562] name failslab, interval 1, probability 0, space 0, times 0 [ 1015.118002][T23562] CPU: 0 UID: 0 PID: 23562 Comm: syz.1.3171 Not tainted syzkaller #0 PREEMPT(full) [ 1015.118048][T23562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1015.118066][T23562] Call Trace: [ 1015.118077][T23562] [ 1015.118090][T23562] dump_stack_lvl+0x16c/0x1f0 [ 1015.118128][T23562] should_fail_ex+0x512/0x640 [ 1015.118162][T23562] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 1015.118198][T23562] should_failslab+0xc2/0x120 [ 1015.118243][T23562] kmem_cache_alloc_noprof+0x75/0x6e0 [ 1015.118277][T23562] ? vm_area_alloc+0x1f/0x160 [ 1015.118318][T23562] ? vm_area_alloc+0x1f/0x160 [ 1015.118345][T23562] vm_area_alloc+0x1f/0x160 [ 1015.118375][T23562] __mmap_region+0xf85/0x27a0 [ 1015.118410][T23562] ? find_held_lock+0x2b/0x80 [ 1015.118458][T23562] ? __pfx___mmap_region+0x10/0x10 [ 1015.118488][T23562] ? finish_task_switch.isra.0+0x21c/0xc10 [ 1015.118527][T23562] ? rcu_is_watching+0x12/0xc0 [ 1015.118561][T23562] ? finish_task_switch.isra.0+0x221/0xc10 [ 1015.118598][T23562] ? lockdep_hardirqs_on+0x7c/0x110 [ 1015.118629][T23562] ? finish_task_switch.isra.0+0x221/0xc10 [ 1015.118702][T23562] ? __pfx___schedule+0x10/0x10 [ 1015.118797][T23562] ? trace_cap_capable+0x18d/0x200 [ 1015.118847][T23562] mmap_region+0x1ab/0x3f0 [ 1015.118876][T23562] ? __get_unmapped_area+0x267/0x440 [ 1015.118924][T23562] do_mmap+0xa3e/0x1210 [ 1015.118976][T23562] ? __pfx_do_mmap+0x10/0x10 [ 1015.119020][T23562] ? __pfx_down_write_killable+0x10/0x10 [ 1015.119064][T23562] vm_mmap_pgoff+0x29e/0x470 [ 1015.119118][T23562] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1015.119172][T23562] ? __x64_sys_futex+0x1e0/0x4c0 [ 1015.119216][T23562] ? __x64_sys_futex+0x1e9/0x4c0 [ 1015.119268][T23562] ksys_mmap_pgoff+0x7d/0x5c0 [ 1015.119311][T23562] ? xfd_validate_state+0x61/0x180 [ 1015.119338][T23562] ? __pfx_do_writev+0x10/0x10 [ 1015.119377][T23562] __x64_sys_mmap+0x125/0x190 [ 1015.119413][T23562] do_syscall_64+0xcd/0x4b0 [ 1015.119457][T23562] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1015.119488][T23562] RIP: 0033:0x7f368478eec9 [ 1015.119515][T23562] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1015.119545][T23562] RSP: 002b:00007f36855d1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1015.119574][T23562] RAX: ffffffffffffffda RBX: 00007f36849e5fa0 RCX: 00007f368478eec9 [ 1015.119596][T23562] RDX: 00004000000000df RSI: 0000000000020009 RDI: 0000000000000000 [ 1015.119616][T23562] RBP: 00007f3684811f91 R08: 0000000000000401 R09: 0000000000008000 [ 1015.119636][T23562] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 1015.119655][T23562] R13: 00007f36849e6038 R14: 00007f36849e5fa0 R15: 00007fff244ce848 [ 1015.119695][T23562] [ 1016.203322][T23558] svc: failed to register nfsdv3 RPC service (errno 111). [ 1016.222116][T23558] svc: failed to register nfsaclv3 RPC service (errno 111). [ 1017.505083][T23496] Process accounting paused [ 1018.029559][T23576] svc: failed to register nfsdv3 RPC service (errno 512). [ 1018.055398][T23576] svc: failed to register nfsaclv3 RPC service (errno 111). [ 1019.908054][T23754] input: ÿÿÿÿ as /devices/virtual/input/input16 [ 1022.700296][T23844] netlink: 280 bytes leftover after parsing attributes in process `syz.0.3190'. [ 1024.135636][T23863] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3193'. [ 1025.144876][T23893] queue_state_write: operation too long [ 1025.159230][T23893] queue_state_write: use 'run', 'start' or 'kick' [ 1025.375801][T23858] kexec: Could not allocate control_code_buffer [ 1026.879678][T23931] openvswitch: netlink: Unknown nsh attribute 0 [ 1027.013840][T23936] queue_state_write: operation too long [ 1027.019729][T23936] queue_state_write: use 'run', 'start' or 'kick' [ 1027.166372][T23934] svc: failed to register nfsdv3 RPC service (errno 111). [ 1027.179140][T23934] svc: failed to register nfsaclv3 RPC service (errno 111). [ 1027.707349][T23945] svc: failed to register nfsdv3 RPC service (errno 111). [ 1027.773504][T23945] svc: failed to register nfsaclv3 RPC service (errno 111). [ 1032.197029][T24131] random: crng reseeded on system resumption [ 1032.630877][T24135] svc: failed to register nfsdv3 RPC service (errno 111). [ 1032.665501][T24135] svc: failed to register nfsaclv3 RPC service (errno 111). [ 1032.672977][ T30] audit: type=1800 audit(4294967398.920:57): pid=24152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3219" name="members" dev="configfs" ino=81609 res=0 errno=0 [ 1033.071642][T24144] svc: failed to register nfsdv3 RPC service (errno 111). [ 1033.114638][T24144] svc: failed to register nfsaclv3 RPC service (errno 512). [ 1034.040969][T24172] FAULT_INJECTION: forcing a failure. [ 1034.040969][T24172] name failslab, interval 1, probability 0, space 0, times 0 [ 1034.062264][T24172] CPU: 0 UID: 0 PID: 24172 Comm: syz.0.3222 Not tainted syzkaller #0 PREEMPT(full) [ 1034.062309][T24172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1034.062328][T24172] Call Trace: [ 1034.062339][T24172] [ 1034.062352][T24172] dump_stack_lvl+0x16c/0x1f0 [ 1034.062393][T24172] should_fail_ex+0x512/0x640 [ 1034.062428][T24172] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 1034.062469][T24172] should_failslab+0xc2/0x120 [ 1034.062516][T24172] kmem_cache_alloc_noprof+0x75/0x6e0 [ 1034.062553][T24172] ? getname_flags.part.0+0x4c/0x550 [ 1034.062610][T24172] ? getname_flags.part.0+0x4c/0x550 [ 1034.062656][T24172] getname_flags.part.0+0x4c/0x550 [ 1034.062709][T24172] getname_flags+0x93/0xf0 [ 1034.062746][T24172] do_sys_openat2+0xb8/0x1d0 [ 1034.062795][T24172] ? __pfx_do_sys_openat2+0x10/0x10 [ 1034.062859][T24172] __x64_sys_openat+0x174/0x210 [ 1034.062891][T24172] ? __pfx___x64_sys_openat+0x10/0x10 [ 1034.062937][T24172] do_syscall_64+0xcd/0x4b0 [ 1034.062973][T24172] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1034.063005][T24172] RIP: 0033:0x7ff08598eec9 [ 1034.063031][T24172] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1034.063061][T24172] RSP: 002b:00007ff0868b5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1034.063092][T24172] RAX: ffffffffffffffda RBX: 00007ff085be5fa0 RCX: 00007ff08598eec9 [ 1034.063113][T24172] RDX: 0000000000000800 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 1034.063133][T24172] RBP: 00007ff085a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1034.063152][T24172] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1034.063170][T24172] R13: 00007ff085be6038 R14: 00007ff085be5fa0 R15: 00007ffc3f7e6da8 [ 1034.063211][T24172] [ 1034.769992][ T6319] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 1034.778095][ T6319] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:0' [ 1034.787649][ T6319] CPU: 0 UID: 0 PID: 6319 Comm: kworker/u11:2 Not tainted syzkaller #0 PREEMPT(full) [ 1034.787675][ T6319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1034.787687][ T6319] Workqueue: hci2 hci_rx_work [ 1034.787711][ T6319] Call Trace: [ 1034.787720][ T6319] [ 1034.787736][ T6319] dump_stack_lvl+0x16c/0x1f0 [ 1034.787758][ T6319] sysfs_warn_dup+0x7f/0xa0 [ 1034.787783][ T6319] sysfs_create_dir_ns+0x24b/0x2b0 [ 1034.787808][ T6319] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1034.787831][ T6319] ? find_held_lock+0x2b/0x80 [ 1034.787858][ T6319] ? do_raw_spin_unlock+0x172/0x230 [ 1034.787879][ T6319] kobject_add_internal+0x2c4/0x9b0 [ 1034.787907][ T6319] kobject_add+0x16e/0x240 [ 1034.787929][ T6319] ? __pfx_kobject_add+0x10/0x10 [ 1034.787953][ T6319] ? do_raw_spin_unlock+0x172/0x230 [ 1034.788049][ T6319] ? kobject_put+0xab/0x5a0 [ 1034.788077][ T6319] device_add+0x288/0x1aa0 [ 1034.788095][ T6319] ? __pfx_dev_set_name+0x10/0x10 [ 1034.788114][ T6319] ? __pfx_device_add+0x10/0x10 [ 1034.788143][ T6319] ? mgmt_send_event_skb+0x2fb/0x460 [ 1034.788179][ T6319] hci_conn_add_sysfs+0x17e/0x230 [ 1034.788202][ T6319] le_conn_complete_evt+0x1260/0x2150 [ 1034.788239][ T6319] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1034.788267][ T6319] ? bt_warn+0xe4/0x120 [ 1034.788293][ T6319] ? __pfx_bt_warn+0x10/0x10 [ 1034.788325][ T6319] hci_le_conn_complete_evt+0x23c/0x370 [ 1034.788359][ T6319] hci_le_meta_evt+0x354/0x5e0 [ 1034.788377][ T6319] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 1034.788410][ T6319] hci_event_packet+0x685/0x11c0 [ 1034.788439][ T6319] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1034.788458][ T6319] ? __pfx_hci_event_packet+0x10/0x10 [ 1034.788497][ T6319] ? kcov_remote_start+0x3c9/0x6d0 [ 1034.788517][ T6319] ? lockdep_hardirqs_on+0x7c/0x110 [ 1034.788540][ T6319] hci_rx_work+0x2c5/0x16b0 [ 1034.788561][ T6319] ? rcu_is_watching+0x12/0xc0 [ 1034.788587][ T6319] process_one_work+0x9cc/0x1b70 [ 1034.788616][ T6319] ? __pfx_process_one_work+0x10/0x10 [ 1034.788642][ T6319] ? assign_work+0x1a0/0x250 [ 1034.788667][ T6319] worker_thread+0x6c8/0xf10 [ 1034.788714][ T6319] ? __pfx_worker_thread+0x10/0x10 [ 1034.788745][ T6319] kthread+0x3c5/0x780 [ 1034.788774][ T6319] ? __pfx_kthread+0x10/0x10 [ 1034.788796][ T6319] ? rcu_is_watching+0x12/0xc0 [ 1034.788818][ T6319] ? __pfx_kthread+0x10/0x10 [ 1034.788835][ T6319] ret_from_fork+0x56d/0x730 [ 1034.788853][ T6319] ? __pfx_kthread+0x10/0x10 [ 1034.788870][ T6319] ret_from_fork_asm+0x1a/0x30 [ 1034.788905][ T6319] [ 1034.788937][ T6319] kobject: kobject_add_internal failed for hci2:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 1035.053773][ T6319] Bluetooth: hci2: failed to register connection device [ 1035.646733][T24204] netlink: 334 bytes leftover after parsing attributes in process `syz.0.3225'. [ 1035.662998][T24200] netlink: 'syz.2.3229': attribute type 1 has an invalid length. [ 1037.136100][ T6319] Bluetooth: hci2: command 0x0c1a tx timeout [ 1039.618850][T24320] netlink: 186 bytes leftover after parsing attributes in process `syz.2.3240'. [ 1040.751464][T24331] FAULT_INJECTION: forcing a failure. [ 1040.751464][T24331] name failslab, interval 1, probability 0, space 0, times 0 [ 1040.773752][T24334] device-mapper: ioctl: dm_ctl_ioctl: unknown command 0xfffffd12 [ 1040.883594][T24331] CPU: 1 UID: 0 PID: 24331 Comm: syz.1.3241 Not tainted syzkaller #0 PREEMPT(full) [ 1040.883638][T24331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1040.883657][T24331] Call Trace: [ 1040.883668][T24331] [ 1040.883681][T24331] dump_stack_lvl+0x16c/0x1f0 [ 1040.883721][T24331] should_fail_ex+0x512/0x640 [ 1040.883755][T24331] ? __kmalloc_cache_noprof+0x5f/0x780 [ 1040.883789][T24331] should_failslab+0xc2/0x120 [ 1040.883831][T24331] __kmalloc_cache_noprof+0x72/0x780 [ 1040.883863][T24331] ? copy_cgroup_ns+0x207/0x6b0 [ 1040.883909][T24331] ? copy_cgroup_ns+0x207/0x6b0 [ 1040.883946][T24331] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1040.883990][T24331] copy_cgroup_ns+0x207/0x6b0 [ 1040.884027][T24331] create_new_namespaces+0x34a/0xa90 [ 1040.884074][T24331] copy_namespaces+0x468/0x560 [ 1040.884113][T24331] copy_process+0x2828/0x76a0 [ 1040.884169][T24331] ? __pfx_copy_process+0x10/0x10 [ 1040.884208][T24331] ? finish_task_switch.isra.0+0x221/0xc10 [ 1040.884254][T24331] ? finish_task_switch.isra.0+0x221/0xc10 [ 1040.884303][T24331] kernel_clone+0xfc/0x930 [ 1040.884349][T24331] ? __pfx_kernel_clone+0x10/0x10 [ 1040.884409][T24331] __do_sys_clone+0xce/0x120 [ 1040.884447][T24331] ? __pfx___do_sys_clone+0x10/0x10 [ 1040.884508][T24331] ? xfd_validate_state+0x61/0x180 [ 1040.884549][T24331] do_syscall_64+0xcd/0x4b0 [ 1040.884585][T24331] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1040.884614][T24331] RIP: 0033:0x7f368478eec9 [ 1040.884637][T24331] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1040.884666][T24331] RSP: 002b:00007f36855affe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1040.884696][T24331] RAX: ffffffffffffffda RBX: 00007f36849e6090 RCX: 00007f368478eec9 [ 1040.884718][T24331] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000002360411 [ 1040.884736][T24331] RBP: 00007f3684811f91 R08: 0000000000000000 R09: 0000000000000000 [ 1040.884755][T24331] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1040.884771][T24331] R13: 00007f36849e6128 R14: 00007f36849e6090 R15: 00007fff244ce848 [ 1040.884806][T24331] [ 1041.711620][T24348] vivid-003: ================= START STATUS ================= [ 1041.719750][T24348] vivid-003: Radio HW Seek Mode: Bounded [ 1041.730675][T24348] vivid-003: Radio Programmable HW Seek: false [ 1041.748490][T24348] vivid-003: RDS Rx I/O Mode: Block I/O [ 1041.757590][T24348] vivid-003: Generate RBDS Instead of RDS: false [ 1041.772847][T24348] vivid-003: RDS Reception: true [ 1041.781608][T24348] vivid-003: RDS Program Type: 0 inactive [ 1041.789014][T24348] vivid-003: RDS PS Name: inactive [ 1041.795159][T24348] vivid-003: RDS Radio Text: inactive [ 1041.801642][T24348] vivid-003: RDS Traffic Announcement: false inactive [ 1041.841307][T24348] vivid-003: RDS Traffic Program: false inactive [ 1041.903606][T24348] vivid-003: RDS Music: false inactive [ 1041.909136][T24348] vivid-003: ================== END STATUS ================== [ 1042.638869][ T7959] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1042.779878][ T7959] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1043.071910][T24369] random: crng reseeded on system resumption [ 1043.144717][ T7959] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1043.522175][ T7959] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1044.189972][ T7959] bridge_slave_1: left allmulticast mode [ 1044.203582][ T7959] bridge_slave_1: left promiscuous mode [ 1044.267035][ T7959] bridge0: port 2(bridge_slave_1) entered disabled state [ 1044.288835][T20571] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1044.302663][T20571] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1044.311719][T20571] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1044.320235][T20571] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1044.335017][T20571] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1044.427828][ T7959] bridge_slave_0: left allmulticast mode [ 1044.459749][ T7959] bridge_slave_0: left promiscuous mode [ 1044.470585][ T7959] bridge0: port 1(bridge_slave_0) entered disabled state [ 1046.043563][T24431] netlink: 146 bytes leftover after parsing attributes in process `syz.0.3253'. [ 1046.413989][T20571] Bluetooth: hci0: command tx timeout [ 1046.616421][ T7959] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1046.640760][ T7959] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1046.653372][ T7959] bond0 (unregistering): Released all slaves [ 1047.579611][T24373] Process accounting resumed [ 1047.648036][ T7959] hsr_slave_0: left promiscuous mode [ 1047.664724][ T7959] hsr_slave_1: left promiscuous mode [ 1047.691618][ T7959] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1047.705302][ T7959] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1047.733150][ T7959] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1047.773645][ T7959] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1047.830969][ T7959] veth1_macvtap: left promiscuous mode [ 1047.844809][ T7959] veth0_macvtap: left promiscuous mode [ 1047.850549][ T7959] veth1_vlan: left promiscuous mode [ 1047.870487][ T7959] veth0_vlan: left promiscuous mode [ 1047.881179][T24514] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3257'. [ 1048.493709][T20571] Bluetooth: hci0: command tx timeout [ 1048.991939][T24514] team_slave_0: entered allmulticast mode [ 1049.369014][T24574] netlink: 280 bytes leftover after parsing attributes in process `syz.4.3260'. [ 1049.644885][T24396] chnl_net:caif_netlink_parms(): no params data found [ 1050.449993][T24396] bridge0: port 1(bridge_slave_0) entered blocking state [ 1050.482173][T24396] bridge0: port 1(bridge_slave_0) entered disabled state [ 1050.490298][T24396] bridge_slave_0: entered allmulticast mode [ 1050.501490][T24396] bridge_slave_0: entered promiscuous mode [ 1050.510996][T24396] bridge0: port 2(bridge_slave_1) entered blocking state [ 1050.518897][T24396] bridge0: port 2(bridge_slave_1) entered disabled state [ 1050.527208][T24396] bridge_slave_1: entered allmulticast mode [ 1050.534733][T24396] bridge_slave_1: entered promiscuous mode [ 1050.573577][T20571] Bluetooth: hci0: command tx timeout [ 1050.981725][T24396] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1051.017964][T24396] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1051.911499][T24396] team0: Port device team_slave_0 added [ 1051.924484][T24396] team0: Port device team_slave_1 added [ 1052.159465][T24396] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1052.180287][T24396] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1052.235622][T24396] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1052.337066][T24396] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1052.360590][T24396] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1052.403904][T24396] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1052.655782][T20571] Bluetooth: hci0: command tx timeout [ 1052.847045][T24396] hsr_slave_0: entered promiscuous mode [ 1052.855155][T24396] hsr_slave_1: entered promiscuous mode [ 1053.868866][T24964] svc: failed to register nfsdv3 RPC service (errno 111). [ 1053.908978][T24964] svc: failed to register nfsaclv3 RPC service (errno 111). [ 1054.166713][T24396] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1054.235099][T24396] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1054.261463][T24396] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1054.312379][T24396] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1055.042280][T24396] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1055.197738][T24396] 8021q: adding VLAN 0 to HW filter on device team0 [ 1055.256759][T11716] bridge0: port 1(bridge_slave_0) entered blocking state [ 1055.263980][T11716] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1055.367362][ T8209] bridge0: port 2(bridge_slave_1) entered blocking state [ 1055.374560][ T8209] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1055.489365][T24396] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1055.547966][T25023] sg_write: data in/out 2359516/158 bytes for SCSI command 0x0-- guessing data in; [ 1055.547966][T25023] program syz.1.3269 not setting count and/or reply_len properly [ 1056.388251][T24396] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1056.685011][T25059] hub 1-0:1.0: USB hub found [ 1056.716367][T25059] hub 1-0:1.0: 1 port detected [ 1057.090220][T25077] vivid-003: ================= START STATUS ================= [ 1057.098004][T25077] vivid-003: Radio HW Seek Mode: Bounded [ 1057.103776][T25077] vivid-003: Radio Programmable HW Seek: false [ 1057.110007][T25077] vivid-003: RDS Rx I/O Mode: Block I/O [ 1057.115860][T25077] vivid-003: Generate RBDS Instead of RDS: false [ 1057.122344][T25077] vivid-003: RDS Reception: true [ 1057.127391][T25077] vivid-003: RDS Program Type: 0 inactive [ 1057.133305][T25077] vivid-003: RDS PS Name: inactive [ 1057.138986][T25077] vivid-003: RDS Radio Text: inactive [ 1057.292965][T25077] vivid-003: RDS Traffic Announcement: false inactive [ 1057.299966][T25077] vivid-003: RDS Traffic Program: false inactive [ 1057.306557][T25077] vivid-003: RDS Music: false inactive [ 1057.312233][T25077] vivid-003: ================== END STATUS ================== [ 1057.578719][T24396] veth0_vlan: entered promiscuous mode [ 1057.716249][T24396] veth1_vlan: entered promiscuous mode [ 1057.975443][T24396] veth0_macvtap: entered promiscuous mode [ 1058.010597][T24396] veth1_macvtap: entered promiscuous mode [ 1058.169489][T24396] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1058.256470][T24396] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1058.612498][ T8209] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1058.621978][ T8209] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1058.837834][ T8209] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1058.861244][ T8209] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1059.193036][ T8209] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1059.208485][ T8209] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1059.517927][ T8209] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1059.545909][ T8209] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1059.865691][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1059.873506][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1059.891333][T25113] netlink: 'syz.0.3278': attribute type 1 has an invalid length. [ 1059.987452][T25149] sg_write: data in/out 2359516/158 bytes for SCSI command 0x0-- guessing data in; [ 1059.987452][T25149] program syz.1.3279 not setting count and/or reply_len properly [ 1060.528159][T25164] sg_write: data in/out 2359516/158 bytes for SCSI command 0x0-- guessing data in; [ 1060.528159][T25164] program syz.4.3272 not setting count and/or reply_len properly [ 1060.584515][T25170] random: crng reseeded on system resumption [ 1065.296382][T25250] FAULT_INJECTION: forcing a failure. [ 1065.296382][T25250] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1065.319582][T25250] CPU: 0 UID: 0 PID: 25250 Comm: syz.1.3289 Not tainted syzkaller #0 PREEMPT(full) [ 1065.319617][T25250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1065.319628][T25250] Call Trace: [ 1065.319635][T25250] [ 1065.319643][T25250] dump_stack_lvl+0x16c/0x1f0 [ 1065.319668][T25250] should_fail_ex+0x512/0x640 [ 1065.319693][T25250] get_futex_key+0x1d0/0x1560 [ 1065.319727][T25250] ? __pfx_get_futex_key+0x10/0x10 [ 1065.319767][T25250] futex_wake+0xea/0x530 [ 1065.319787][T25250] ? __pfx_futex_wake+0x10/0x10 [ 1065.319805][T25250] ? __lock_acquire+0x62e/0x1ce0 [ 1065.319845][T25250] do_futex+0x1e3/0x350 [ 1065.319873][T25250] ? __pfx_do_futex+0x10/0x10 [ 1065.319902][T25250] ? __free_frozen_pages+0x805/0x1160 [ 1065.319934][T25250] __x64_sys_futex+0x1e0/0x4c0 [ 1065.319963][T25250] ? __pfx___x64_sys_futex+0x10/0x10 [ 1065.319993][T25250] ? __do_sys_setgroups+0xa2/0x4f0 [ 1065.320026][T25250] do_syscall_64+0xcd/0x4b0 [ 1065.320047][T25250] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1065.320066][T25250] RIP: 0033:0x7f368478eec9 [ 1065.320081][T25250] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1065.320106][T25250] RSP: 002b:00007f36855d10e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1065.320125][T25250] RAX: ffffffffffffffda RBX: 00007f36849e5fa8 RCX: 00007f368478eec9 [ 1065.320137][T25250] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f36849e5fac [ 1065.320148][T25250] RBP: 00007f36849e5fa0 R08: 00007f36855d2000 R09: 0000000000000000 [ 1065.320159][T25250] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 1065.320170][T25250] R13: 00007f36849e6038 R14: 00007fff244ce760 R15: 00007fff244ce848 [ 1065.320192][T25250] [ 1065.899157][T25256] blktrace: Concurrent blktraces are not allowed on nbd3 [ 1066.451647][T25252] svc: failed to register nfsdv3 RPC service (errno 111). [ 1066.556241][T25252] svc: failed to register nfsaclv3 RPC service (errno 111). [ 1067.556188][T25261] svc: failed to register nfsdv3 RPC service (errno 512). [ 1067.568003][T25261] svc: failed to register nfsaclv3 RPC service (errno 512). [ 1067.612476][T25295] FAULT_INJECTION: forcing a failure. [ 1067.612476][T25295] name failslab, interval 1, probability 0, space 0, times 0 [ 1067.673630][T25295] CPU: 1 UID: 0 PID: 25295 Comm: syz.1.3293 Not tainted syzkaller #0 PREEMPT(full) [ 1067.673674][T25295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1067.673693][T25295] Call Trace: [ 1067.673703][T25295] [ 1067.673715][T25295] dump_stack_lvl+0x16c/0x1f0 [ 1067.673760][T25295] should_fail_ex+0x512/0x640 [ 1067.673795][T25295] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 1067.673836][T25295] should_failslab+0xc2/0x120 [ 1067.673889][T25295] kmem_cache_alloc_noprof+0x75/0x6e0 [ 1067.673925][T25295] ? sk_prot_alloc+0x60/0x2a0 [ 1067.673971][T25295] ? sk_prot_alloc+0x60/0x2a0 [ 1067.674007][T25295] sk_prot_alloc+0x60/0x2a0 [ 1067.674049][T25295] sk_alloc+0x36/0xc20 [ 1067.674080][T25295] tipc_sk_create+0xcf/0x21a0 [ 1067.674130][T25295] ? find_held_lock+0x2b/0x80 [ 1067.674169][T25295] ? __sock_create+0x2f2/0x8d0 [ 1067.674217][T25295] __sock_create+0x335/0x8d0 [ 1067.674268][T25295] __sys_socket+0x14d/0x260 [ 1067.674312][T25295] ? __pfx___sys_socket+0x10/0x10 [ 1067.674353][T25295] ? xfd_validate_state+0x61/0x180 [ 1067.674387][T25295] __x64_sys_socket+0x72/0xb0 [ 1067.674426][T25295] ? lockdep_hardirqs_on+0x7c/0x110 [ 1067.674455][T25295] do_syscall_64+0xcd/0x4b0 [ 1067.674487][T25295] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1067.674516][T25295] RIP: 0033:0x7f368478eec9 [ 1067.674542][T25295] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1067.674570][T25295] RSP: 002b:00007f368558f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1067.674597][T25295] RAX: ffffffffffffffda RBX: 00007f36849e6180 RCX: 00007f368478eec9 [ 1067.674618][T25295] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 000000000000001e [ 1067.674636][T25295] RBP: 00007f3684811f91 R08: 0000000000000000 R09: 0000000000000000 [ 1067.674653][T25295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1067.674670][T25295] R13: 00007f36849e6218 R14: 00007f36849e6180 R15: 00007fff244ce848 [ 1067.674710][T25295] [ 1068.436469][T25336] hub 3-0:1.0: USB hub found [ 1068.452053][T25336] hub 3-0:1.0: 1 port detected [ 1068.491096][T25336] usb usb3: authorized to connect [ 1068.523051][T25340] vivid-007: ================= START STATUS ================= [ 1068.541505][T25340] vivid-007: Generate PTS: true [ 1068.554778][T25340] vivid-007: Generate SCR: true [ 1068.566406][T25340] tpg source WxH: 320x240 (Y'CbCr) [ 1068.580723][T25340] tpg field: 1 [ 1068.588301][T25340] tpg crop: (0,0)/320x240 [ 1068.610545][T25340] tpg compose: (0,0)/320x240 [ 1068.624408][T25340] tpg colorspace: 8 [ 1068.631740][T25340] tpg transfer function: 0/0 [ 1068.648723][T25340] tpg Y'CbCr encoding: 0/0 [ 1068.654964][T25340] tpg quantization: 0/0 [ 1068.661516][T25340] tpg RGB range: 0/2 [ 1068.675493][T25340] vivid-007: ================== END STATUS ================== [ 1069.050607][T25366] vivid-003: ================= START STATUS ================= [ 1069.093873][T25366] vivid-003: Radio HW Seek Mode: Bounded [ 1069.113512][T25366] vivid-003: Radio Programmable HW Seek: false [ 1069.164801][T25366] vivid-003: RDS Rx I/O Mode: Block I/O [ 1069.201548][T25366] vivid-003: Generate RBDS Instead of RDS: false [ 1069.259746][T25366] vivid-003: RDS Reception: true [ 1069.300859][T25366] vivid-003: RDS Program Type: 0 inactive [ 1069.309280][T25366] vivid-003: RDS PS Name: inactive [ 1069.330403][T25366] vivid-003: RDS Radio Text: inactive [ 1069.363927][T25366] vivid-003: RDS Traffic Announcement: false inactive [ 1069.381710][T25366] vivid-003: RDS Traffic Program: false inactive [ 1069.413632][T25366] vivid-003: RDS Music: false inactive [ 1069.431547][T25366] vivid-003: ================== END STATUS ================== [ 1069.511504][T25378] netlink: 280 bytes leftover after parsing attributes in process `syz.0.3304'. [ 1070.604000][T25394] svc: failed to register nfsdv3 RPC service (errno 111). [ 1070.638725][T25394] svc: failed to register nfsaclv3 RPC service (errno 111). [ 1071.264692][T25401] svc: failed to register nfsdv3 RPC service (errno 512). [ 1071.272881][T25401] svc: failed to register nfsaclv3 RPC service (errno 512). [ 1071.381403][T25424] __vm_enough_memory: pid: 25424, comm: syz.1.3310, bytes: 4398046511104 not enough memory for the allocation [ 1071.564854][T25427] __vm_enough_memory: pid: 25427, comm: syz.1.3310, bytes: 4398046511104 not enough memory for the allocation [ 1072.559155][T25469] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(3.4.0), cmd(1) [ 1073.451195][T25487] netlink: 280 bytes leftover after parsing attributes in process `syz.0.3316'. [ 1073.845395][T25481] FAULT_INJECTION: forcing a failure. [ 1073.845395][T25481] name failslab, interval 1, probability 0, space 0, times 0 [ 1073.869235][T25481] CPU: 1 UID: 0 PID: 25481 Comm: syz.5.3315 Not tainted syzkaller #0 PREEMPT(full) [ 1073.869281][T25481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1073.869300][T25481] Call Trace: [ 1073.869310][T25481] [ 1073.869322][T25481] dump_stack_lvl+0x16c/0x1f0 [ 1073.869364][T25481] should_fail_ex+0x512/0x640 [ 1073.869400][T25481] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1073.869445][T25481] should_failslab+0xc2/0x120 [ 1073.869492][T25481] kmem_cache_alloc_noprof+0x75/0x6e0 [ 1073.869530][T25481] ? skb_clone+0x190/0x3f0 [ 1073.869572][T25481] ? skb_clone+0x190/0x3f0 [ 1073.869603][T25481] skb_clone+0x190/0x3f0 [ 1073.869639][T25481] netlink_deliver_tap+0xabd/0xd30 [ 1073.869685][T25481] netlink_unicast+0x64c/0x870 [ 1073.869728][T25481] ? __pfx_netlink_unicast+0x10/0x10 [ 1073.869764][T25481] ? __pfx___might_resched+0x10/0x10 [ 1073.869802][T25481] ? __lock_acquire+0xb97/0x1ce0 [ 1073.869863][T25481] netlink_sendmsg+0x8c8/0xdd0 [ 1073.869907][T25481] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1073.869950][T25481] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 1073.869995][T25481] ____sys_sendmsg+0xa95/0xc70 [ 1073.870041][T25481] ? copy_msghdr_from_user+0x10a/0x160 [ 1073.870076][T25481] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1073.870135][T25481] ? kfree+0x252/0x6d0 [ 1073.870178][T25481] ___sys_sendmsg+0x134/0x1d0 [ 1073.870217][T25481] ? __pfx____sys_sendmsg+0x10/0x10 [ 1073.870292][T25481] ? __pfx___might_resched+0x10/0x10 [ 1073.870342][T25481] __sys_sendmmsg+0x200/0x420 [ 1073.870382][T25481] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1073.870430][T25481] ? __pfx_do_futex+0x10/0x10 [ 1073.870479][T25481] ? fput+0x9b/0xd0 [ 1073.870543][T25481] ? xfd_validate_state+0x61/0x180 [ 1073.870583][T25481] __x64_sys_sendmmsg+0x9c/0x100 [ 1073.870618][T25481] ? lockdep_hardirqs_on+0x7c/0x110 [ 1073.870649][T25481] do_syscall_64+0xcd/0x4b0 [ 1073.870688][T25481] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1073.870719][T25481] RIP: 0033:0x7f427678eec9 [ 1073.870746][T25481] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1073.870777][T25481] RSP: 002b:00007f4277630038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1073.870809][T25481] RAX: ffffffffffffffda RBX: 00007f42769e5fa0 RCX: 00007f427678eec9 [ 1073.870830][T25481] RDX: 0000000000000007 RSI: 0000200000000200 RDI: 0000000000000007 [ 1073.870850][T25481] RBP: 00007f4276811f91 R08: 0000000000000000 R09: 0000000000000000 [ 1073.870868][T25481] R10: 0000000000004008 R11: 0000000000000246 R12: 0000000000000000 [ 1073.870886][T25481] R13: 00007f42769e6038 R14: 00007f42769e5fa0 R15: 00007ffd7f355eb8 [ 1073.870927][T25481] [ 1074.339173][T25505] random: crng reseeded on system resumption [ 1075.544159][T20571] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 1077.340638][T25593] vivid-003: ================= START STATUS ================= [ 1077.348478][T25593] vivid-003: Radio HW Seek Mode: Bounded [ 1077.354298][T25593] vivid-003: Radio Programmable HW Seek: false [ 1077.360534][T25593] vivid-003: RDS Rx I/O Mode: Block I/O [ 1077.366234][T25593] vivid-003: Generate RBDS Instead of RDS: false [ 1077.479340][T25593] vivid-003: RDS Reception: true [ 1077.484408][T25593] vivid-003: RDS Program Type: 0 inactive [ 1077.493654][T25593] vivid-003: RDS PS Name: inactive [ 1077.508242][T25593] vivid-003: RDS Radio Text: inactive [ 1077.539396][T25593] vivid-003: RDS Traffic Announcement: false inactive [ 1077.582613][T25593] vivid-003: RDS Traffic Program: false inactive [ 1077.588884][T25543] netlink: 334 bytes leftover after parsing attributes in process `syz.5.3322'. [ 1077.598705][T25593] vivid-003: RDS Music: false inactive [ 1077.607989][T25593] vivid-003: ================== END STATUS ================== [ 1077.618900][ T6319] Bluetooth: hci0: command tx timeout [ 1078.463245][T25613] Process accounting paused [ 1080.033709][T25662] FAULT_INJECTION: forcing a failure. [ 1080.033709][T25662] name failslab, interval 1, probability 0, space 0, times 0 [ 1080.115004][T25662] CPU: 1 UID: 0 PID: 25662 Comm: syz.1.3332 Not tainted syzkaller #0 PREEMPT(full) [ 1080.115046][T25662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1080.115067][T25662] Call Trace: [ 1080.115078][T25662] [ 1080.115089][T25662] dump_stack_lvl+0x16c/0x1f0 [ 1080.115127][T25662] should_fail_ex+0x512/0x640 [ 1080.115159][T25662] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 1080.115198][T25662] should_failslab+0xc2/0x120 [ 1080.115239][T25662] kmem_cache_alloc_noprof+0x75/0x6e0 [ 1080.115272][T25662] ? sk_prot_alloc+0x60/0x2a0 [ 1080.115315][T25662] ? sk_prot_alloc+0x60/0x2a0 [ 1080.115348][T25662] sk_prot_alloc+0x60/0x2a0 [ 1080.115396][T25662] sk_alloc+0x36/0xc20 [ 1080.115426][T25662] tipc_sk_create+0xcf/0x21a0 [ 1080.115487][T25662] ? find_held_lock+0x2b/0x80 [ 1080.115522][T25662] ? __sock_create+0x2f2/0x8d0 [ 1080.115569][T25662] __sock_create+0x335/0x8d0 [ 1080.115614][T25662] __sys_socket+0x14d/0x260 [ 1080.115657][T25662] ? __pfx___sys_socket+0x10/0x10 [ 1080.115699][T25662] ? xfd_validate_state+0x61/0x180 [ 1080.115735][T25662] __x64_sys_socket+0x72/0xb0 [ 1080.115799][T25662] ? lockdep_hardirqs_on+0x7c/0x110 [ 1080.115829][T25662] do_syscall_64+0xcd/0x4b0 [ 1080.115862][T25662] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1080.115892][T25662] RIP: 0033:0x7f368478eec9 [ 1080.115916][T25662] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1080.115947][T25662] RSP: 002b:00007f368558f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1080.115977][T25662] RAX: ffffffffffffffda RBX: 00007f36849e6180 RCX: 00007f368478eec9 [ 1080.115996][T25662] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 000000000000001e [ 1080.116015][T25662] RBP: 00007f3684811f91 R08: 0000000000000000 R09: 0000000000000000 [ 1080.116032][T25662] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1080.116050][T25662] R13: 00007f36849e6218 R14: 00007f36849e6180 R15: 00007fff244ce848 [ 1080.116088][T25662] [ 1081.097789][T25655] sg_write: data in/out 2359516/158 bytes for SCSI command 0x0-- guessing data in; [ 1081.097789][T25655] program syz.0.3331 not setting count and/or reply_len properly [ 1081.359975][T25630] netlink: 'syz.5.3329': attribute type 1 has an invalid length. [ 1081.656912][T25701] __vm_enough_memory: pid: 25701, comm: syz.1.3334, bytes: 4398046511104 not enough memory for the allocation [ 1082.437215][T25721] FAULT_INJECTION: forcing a failure. [ 1082.437215][T25721] name failslab, interval 1, probability 0, space 0, times 0 [ 1082.559201][T25721] CPU: 1 UID: 0 PID: 25721 Comm: syz.1.3337 Not tainted syzkaller #0 PREEMPT(full) [ 1082.559246][T25721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1082.559271][T25721] Call Trace: [ 1082.559283][T25721] [ 1082.559296][T25721] dump_stack_lvl+0x16c/0x1f0 [ 1082.559337][T25721] should_fail_ex+0x512/0x640 [ 1082.559372][T25721] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 1082.559414][T25721] should_failslab+0xc2/0x120 [ 1082.559459][T25721] kmem_cache_alloc_noprof+0x75/0x6e0 [ 1082.559496][T25721] ? prepare_creds+0x2c/0x7d0 [ 1082.559536][T25721] ? prepare_creds+0x2c/0x7d0 [ 1082.559564][T25721] prepare_creds+0x2c/0x7d0 [ 1082.559599][T25721] set_current_groups+0x15/0xd0 [ 1082.559648][T25721] __do_sys_setgroups+0x3e0/0x4f0 [ 1082.559697][T25721] ? 0xffffffffff600000 [ 1082.559727][T25721] do_syscall_64+0xcd/0x4b0 [ 1082.559762][T25721] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1082.559793][T25721] RIP: 0033:0x7f368478eec9 [ 1082.559816][T25721] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1082.559848][T25721] RSP: 002b:00007f36855b0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000074 [ 1082.559879][T25721] RAX: ffffffffffffffda RBX: 00007f36849e6090 RCX: 00007f368478eec9 [ 1082.559899][T25721] RDX: 0000000000000000 RSI: ffffffffff600000 RDI: 0000000c00000000 [ 1082.559919][T25721] RBP: 00007f3684811f91 R08: 0000000000000000 R09: 0000000000000000 [ 1082.559937][T25721] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1082.559956][T25721] R13: 00007f36849e6128 R14: 00007f36849e6090 R15: 00007fff244ce848 [ 1082.559990][T25721] ? 0xffffffffff600000 [ 1082.560028][T25721] [ 1085.934869][T25858] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1086.213892][T25867] FAULT_INJECTION: forcing a failure. [ 1086.213892][T25867] name failslab, interval 1, probability 0, space 0, times 0 [ 1086.244507][T25867] CPU: 1 UID: 0 PID: 25867 Comm: syz.5.3343 Not tainted syzkaller #0 PREEMPT(full) [ 1086.244551][T25867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1086.244568][T25867] Call Trace: [ 1086.244578][T25867] [ 1086.244590][T25867] dump_stack_lvl+0x16c/0x1f0 [ 1086.244640][T25867] should_fail_ex+0x512/0x640 [ 1086.244673][T25867] ? kmem_cache_alloc_lru_noprof+0x66/0x6e0 [ 1086.244711][T25867] should_failslab+0xc2/0x120 [ 1086.244753][T25867] kmem_cache_alloc_lru_noprof+0x79/0x6e0 [ 1086.244791][T25867] ? __d_alloc+0x32/0xae0 [ 1086.244846][T25867] ? __d_alloc+0x32/0xae0 [ 1086.244882][T25867] __d_alloc+0x32/0xae0 [ 1086.244925][T25867] d_alloc_pseudo+0x1c/0xc0 [ 1086.244971][T25867] alloc_file_pseudo+0xcf/0x230 [ 1086.245018][T25867] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1086.245064][T25867] ? alloc_fd+0x471/0x7d0 [ 1086.245105][T25867] sock_alloc_file+0x50/0x210 [ 1086.245154][T25867] __sys_socket+0x1c0/0x260 [ 1086.245200][T25867] ? __pfx___sys_socket+0x10/0x10 [ 1086.245246][T25867] ? xfd_validate_state+0x61/0x180 [ 1086.245286][T25867] __x64_sys_socket+0x72/0xb0 [ 1086.245331][T25867] ? lockdep_hardirqs_on+0x7c/0x110 [ 1086.245363][T25867] do_syscall_64+0xcd/0x4b0 [ 1086.245400][T25867] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1086.245432][T25867] RIP: 0033:0x7f427678eec9 [ 1086.245459][T25867] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1086.245491][T25867] RSP: 002b:00007f42775ee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1086.245523][T25867] RAX: ffffffffffffffda RBX: 00007f42769e6180 RCX: 00007f427678eec9 [ 1086.245545][T25867] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 000000000000001e [ 1086.245565][T25867] RBP: 00007f4276811f91 R08: 0000000000000000 R09: 0000000000000000 [ 1086.245584][T25867] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1086.245604][T25867] R13: 00007f42769e6218 R14: 00007f42769e6180 R15: 00007ffd7f355eb8 [ 1086.245647][T25867] [ 1089.457868][T26011] nbd: must specify an index to disconnect [ 1089.579506][T25971] sg_write: data in/out 2359516/158 bytes for SCSI command 0x0-- guessing data in; [ 1089.579506][T25971] program syz.1.3344 not setting count and/or reply_len properly [ 1089.681765][T26003] FAULT_INJECTION: forcing a failure. [ 1089.681765][T26003] name failslab, interval 1, probability 0, space 0, times 0 [ 1089.750789][T26003] CPU: 1 UID: 0 PID: 26003 Comm: syz.0.3348 Not tainted syzkaller #0 PREEMPT(full) [ 1089.750837][T26003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1089.750857][T26003] Call Trace: [ 1089.750869][T26003] [ 1089.750882][T26003] dump_stack_lvl+0x16c/0x1f0 [ 1089.750924][T26003] should_fail_ex+0x512/0x640 [ 1089.750971][T26003] ? __kvmalloc_node_noprof+0x12e/0x9c0 [ 1089.751019][T26003] should_failslab+0xc2/0x120 [ 1089.751066][T26003] __kvmalloc_node_noprof+0x141/0x9c0 [ 1089.751111][T26003] ? io_uring_setup+0x3ad/0x20e0 [ 1089.751167][T26003] ? io_uring_setup+0x3ad/0x20e0 [ 1089.751212][T26003] io_uring_setup+0x3ad/0x20e0 [ 1089.751265][T26003] ? __pfx_io_uring_setup+0x10/0x10 [ 1089.751306][T26003] ? do_futex+0x122/0x350 [ 1089.751353][T26003] ? __pfx_do_futex+0x10/0x10 [ 1089.751397][T26003] ? fput+0x9b/0xd0 [ 1089.751461][T26003] ? xfd_validate_state+0x61/0x180 [ 1089.751501][T26003] __x64_sys_io_uring_setup+0xc2/0x170 [ 1089.751553][T26003] do_syscall_64+0xcd/0x4b0 [ 1089.751590][T26003] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1089.751623][T26003] RIP: 0033:0x7ff08598eec9 [ 1089.751657][T26003] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1089.751688][T26003] RSP: 002b:00007ff0868b5038 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 1089.751720][T26003] RAX: ffffffffffffffda RBX: 00007ff085be5fa0 RCX: 00007ff08598eec9 [ 1089.751742][T26003] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 1089.751762][T26003] RBP: 00007ff085a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1089.751787][T26003] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1089.751806][T26003] R13: 00007ff085be6038 R14: 00007ff085be5fa0 R15: 00007ffc3f7e6da8 [ 1089.751847][T26003] [ 1092.059075][T26071] svc: failed to register nfsdv3 RPC service (errno 111). [ 1092.070729][T26071] svc: failed to register nfsaclv3 RPC service (errno 111). [ 1092.214227][T26087] FAULT_INJECTION: forcing a failure. [ 1092.214227][T26087] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1092.393523][T26087] CPU: 0 UID: 0 PID: 26087 Comm: syz.1.3355 Not tainted syzkaller #0 PREEMPT(full) [ 1092.393572][T26087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1092.393589][T26087] Call Trace: [ 1092.393599][T26087] [ 1092.393612][T26087] dump_stack_lvl+0x16c/0x1f0 [ 1092.393648][T26087] should_fail_ex+0x512/0x640 [ 1092.393690][T26087] get_futex_key+0x1d0/0x1560 [ 1092.393752][T26087] ? __pfx_get_futex_key+0x10/0x10 [ 1092.393790][T26087] ? futex_private_hash_put+0x176/0x300 [ 1092.393841][T26087] futex_wake+0xea/0x530 [ 1092.393870][T26087] ? futex_wait+0x120/0x380 [ 1092.393901][T26087] ? __pfx_futex_wait+0x10/0x10 [ 1092.393932][T26087] ? __pfx_futex_wake+0x10/0x10 [ 1092.393967][T26087] ? __lock_acquire+0x62e/0x1ce0 [ 1092.394019][T26087] do_futex+0x1e3/0x350 [ 1092.394063][T26087] ? __pfx_do_futex+0x10/0x10 [ 1092.394107][T26087] ? find_held_lock+0x2b/0x80 [ 1092.394147][T26087] __x64_sys_futex+0x1e0/0x4c0 [ 1092.394196][T26087] ? __fget_files+0x20e/0x3c0 [ 1092.394230][T26087] ? __pfx___x64_sys_futex+0x10/0x10 [ 1092.394280][T26087] ? fdget+0x187/0x210 [ 1092.394320][T26087] do_syscall_64+0xcd/0x4b0 [ 1092.394355][T26087] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1092.394385][T26087] RIP: 0033:0x7f368478eec9 [ 1092.394411][T26087] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1092.394440][T26087] RSP: 002b:00007f36855b00e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1092.394470][T26087] RAX: ffffffffffffffda RBX: 00007f36849e6098 RCX: 00007f368478eec9 [ 1092.394492][T26087] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f36849e609c [ 1092.394511][T26087] RBP: 00007f36849e6090 R08: 00007f36855d2000 R09: 0000000000000000 [ 1092.394530][T26087] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 1092.394549][T26087] R13: 00007f36849e6128 R14: 00007fff244ce760 R15: 00007fff244ce848 [ 1092.394588][T26087] [ 1093.259768][T26089] svc: failed to register nfsdv3 RPC service (errno 111). [ 1093.280074][T26089] svc: failed to register nfsaclv3 RPC service (errno 111). [ 1096.568072][T26288] svc: failed to register nfsdv3 RPC service (errno 111). [ 1096.603610][T26288] svc: failed to register nfsaclv3 RPC service (errno 111). [ 1096.635781][T26293] FAULT_INJECTION: forcing a failure. [ 1096.635781][T26293] name failslab, interval 1, probability 0, space 0, times 0 [ 1096.702569][T26293] CPU: 1 UID: 0 PID: 26293 Comm: syz.5.3365 Not tainted syzkaller #0 PREEMPT(full) [ 1096.702613][T26293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1096.702631][T26293] Call Trace: [ 1096.702641][T26293] [ 1096.702653][T26293] dump_stack_lvl+0x16c/0x1f0 [ 1096.702690][T26293] should_fail_ex+0x512/0x640 [ 1096.702713][T26293] ? __kmalloc_cache_noprof+0x5f/0x780 [ 1096.702737][T26293] should_failslab+0xc2/0x120 [ 1096.702764][T26293] __kmalloc_cache_noprof+0x72/0x780 [ 1096.702785][T26293] ? copy_cgroup_ns+0x207/0x6b0 [ 1096.702813][T26293] ? copy_cgroup_ns+0x207/0x6b0 [ 1096.702838][T26293] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1096.702866][T26293] copy_cgroup_ns+0x207/0x6b0 [ 1096.702900][T26293] create_new_namespaces+0x34a/0xa90 [ 1096.702930][T26293] copy_namespaces+0x468/0x560 [ 1096.702955][T26293] copy_process+0x2828/0x76a0 [ 1096.702991][T26293] ? __pfx_copy_process+0x10/0x10 [ 1096.703016][T26293] ? futex_private_hash_put+0x176/0x300 [ 1096.703047][T26293] ? futex_private_hash_put+0x18a/0x300 [ 1096.703077][T26293] kernel_clone+0xfc/0x930 [ 1096.703105][T26293] ? __pfx_kernel_clone+0x10/0x10 [ 1096.703143][T26293] __do_sys_clone+0xce/0x120 [ 1096.703169][T26293] ? __pfx___do_sys_clone+0x10/0x10 [ 1096.703194][T26293] ? __pfx___might_resched+0x10/0x10 [ 1096.703225][T26293] ? xfd_validate_state+0x61/0x180 [ 1096.703241][T26293] ? __pfx_do_writev+0x10/0x10 [ 1096.703268][T26293] do_syscall_64+0xcd/0x4b0 [ 1096.703289][T26293] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1096.703307][T26293] RIP: 0033:0x7f427678eec9 [ 1096.703322][T26293] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1096.703339][T26293] RSP: 002b:00007f427762ffe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1096.703357][T26293] RAX: ffffffffffffffda RBX: 00007f42769e5fa0 RCX: 00007f427678eec9 [ 1096.703379][T26293] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000002360411 [ 1096.703395][T26293] RBP: 00007f4276811f91 R08: 0000000000000000 R09: 0000000000000000 [ 1096.703412][T26293] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1096.703428][T26293] R13: 00007f42769e6038 R14: 00007f42769e5fa0 R15: 00007ffd7f355eb8 [ 1096.703464][T26293] [ 1097.370289][T26296] svc: failed to register nfsdv3 RPC service (errno 512). [ 1097.400007][T26296] svc: failed to register nfsaclv3 RPC service (errno 512). [ 1097.695065][T26336] sg_write: data in/out 2359516/158 bytes for SCSI command 0x0-- guessing data in; [ 1097.695065][T26336] program syz.1.3364 not setting count and/or reply_len properly [ 1097.744373][T26339] FAULT_INJECTION: forcing a failure. [ 1097.744373][T26339] name failslab, interval 1, probability 0, space 0, times 0 [ 1097.890509][T26339] CPU: 0 UID: 0 PID: 26339 Comm: syz.0.3369 Not tainted syzkaller #0 PREEMPT(full) [ 1097.890556][T26339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1097.890576][T26339] Call Trace: [ 1097.890589][T26339] [ 1097.890603][T26339] dump_stack_lvl+0x16c/0x1f0 [ 1097.890646][T26339] should_fail_ex+0x512/0x640 [ 1097.890682][T26339] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 1097.890725][T26339] should_failslab+0xc2/0x120 [ 1097.890772][T26339] kmem_cache_alloc_noprof+0x75/0x6e0 [ 1097.890808][T26339] ? ptlock_alloc+0x1f/0x70 [ 1097.890848][T26339] ? ptlock_alloc+0x1f/0x70 [ 1097.890877][T26339] ptlock_alloc+0x1f/0x70 [ 1097.890906][T26339] pte_alloc_one+0x84/0x350 [ 1097.890949][T26339] __pte_alloc+0x6d/0x380 [ 1097.890987][T26339] ? __pfx___pte_alloc+0x10/0x10 [ 1097.891033][T26339] ? __lock_acquire+0x62e/0x1ce0 [ 1097.891090][T26339] do_pte_missing+0x282c/0x3ba0 [ 1097.891125][T26339] ? mtree_range_walk+0x718/0xc00 [ 1097.891158][T26339] ? find_held_lock+0x2b/0x80 [ 1097.891200][T26339] __handle_mm_fault+0x1556/0x2aa0 [ 1097.891246][T26339] ? __pfx___handle_mm_fault+0x10/0x10 [ 1097.891315][T26339] handle_mm_fault+0x589/0xd10 [ 1097.891358][T26339] __get_user_pages+0x54e/0x3530 [ 1097.891424][T26339] ? __pfx___get_user_pages+0x10/0x10 [ 1097.891484][T26339] populate_vma_page_range+0x267/0x3f0 [ 1097.891535][T26339] ? __pfx_populate_vma_page_range+0x10/0x10 [ 1097.891582][T26339] ? __pfx_find_vma_intersection+0x10/0x10 [ 1097.891629][T26339] ? do_mmap+0x69c/0x1210 [ 1097.891678][T26339] __mm_populate+0x1d8/0x380 [ 1097.891728][T26339] ? __pfx___mm_populate+0x10/0x10 [ 1097.891777][T26339] ? up_write+0x1b2/0x520 [ 1097.891813][T26339] vm_mmap_pgoff+0x37f/0x470 [ 1097.891863][T26339] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1097.891916][T26339] ? rcu_is_watching+0x12/0xc0 [ 1097.891955][T26339] ? irqentry_exit+0x3b/0x90 [ 1097.891992][T26339] ksys_mmap_pgoff+0x7d/0x5c0 [ 1097.892052][T26339] __x64_sys_mmap+0x125/0x190 [ 1097.892090][T26339] do_syscall_64+0xcd/0x4b0 [ 1097.892127][T26339] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1097.892160][T26339] RIP: 0033:0x7ff08598eec9 [ 1097.892189][T26339] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1097.892219][T26339] RSP: 002b:00007ff086894038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1097.892250][T26339] RAX: ffffffffffffffda RBX: 00007ff085be6090 RCX: 00007ff08598eec9 [ 1097.892271][T26339] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 1097.892289][T26339] RBP: 00007ff085a11f91 R08: 0000000000000002 R09: 0000000000008000 [ 1097.892308][T26339] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 1097.892327][T26339] R13: 00007ff085be6128 R14: 00007ff085be6090 R15: 00007ffc3f7e6da8 [ 1097.892369][T26339] [ 1098.507446][T26360] svc: failed to register nfsdv3 RPC service (errno 111). [ 1098.630516][T26360] svc: failed to register nfsaclv3 RPC service (errno 111). [ 1099.418017][T26419] netlink: 280 bytes leftover after parsing attributes in process `syz.0.3374'. [ 1099.460449][T26367] svc: failed to register nfsdv3 RPC service (errno 512). [ 1099.479697][T26367] svc: failed to register nfsaclv3 RPC service (errno 512). [ 1100.016352][T26445] tipc: Started in network mode [ 1100.022538][T26445] tipc: Node identity ee00, cluster identity 4711 [ 1100.032674][T26445] tipc: Node number set to 60928 [ 1100.250715][T26451] FAULT_INJECTION: forcing a failure. [ 1100.250715][T26451] name failslab, interval 1, probability 0, space 0, times 0 [ 1100.314527][T26451] CPU: 1 UID: 0 PID: 26451 Comm: syz.0.3375 Not tainted syzkaller #0 PREEMPT(full) [ 1100.314570][T26451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1100.314589][T26451] Call Trace: [ 1100.314600][T26451] [ 1100.314612][T26451] dump_stack_lvl+0x16c/0x1f0 [ 1100.314651][T26451] should_fail_ex+0x512/0x640 [ 1100.314685][T26451] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 1100.314725][T26451] should_failslab+0xc2/0x120 [ 1100.314774][T26451] kmem_cache_alloc_noprof+0x75/0x6e0 [ 1100.314810][T26451] ? sk_prot_alloc+0x60/0x2a0 [ 1100.314857][T26451] ? sk_prot_alloc+0x60/0x2a0 [ 1100.314890][T26451] sk_prot_alloc+0x60/0x2a0 [ 1100.314932][T26451] sk_alloc+0x36/0xc20 [ 1100.314963][T26451] tipc_sk_create+0xcf/0x21a0 [ 1100.315014][T26451] ? find_held_lock+0x2b/0x80 [ 1100.315052][T26451] ? __sock_create+0x2f2/0x8d0 [ 1100.315099][T26451] __sock_create+0x335/0x8d0 [ 1100.315148][T26451] __sys_socket+0x14d/0x260 [ 1100.315189][T26451] ? __pfx___sys_socket+0x10/0x10 [ 1100.315228][T26451] ? xfd_validate_state+0x61/0x180 [ 1100.315263][T26451] __x64_sys_socket+0x72/0xb0 [ 1100.315302][T26451] ? lockdep_hardirqs_on+0x7c/0x110 [ 1100.315333][T26451] do_syscall_64+0xcd/0x4b0 [ 1100.315369][T26451] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1100.315400][T26451] RIP: 0033:0x7ff08598eec9 [ 1100.315423][T26451] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1100.315453][T26451] RSP: 002b:00007ff086873038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1100.315483][T26451] RAX: ffffffffffffffda RBX: 00007ff085be6180 RCX: 00007ff08598eec9 [ 1100.315503][T26451] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 000000000000001e [ 1100.315525][T26451] RBP: 00007ff085a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1100.315543][T26451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1100.315559][T26451] R13: 00007ff085be6218 R14: 00007ff085be6180 R15: 00007ffc3f7e6da8 [ 1100.315597][T26451] [ 1100.721929][T26443] Process accounting resumed [ 1101.968305][T26478] blktrace: Concurrent blktraces are not allowed on nbd3 [ 1102.348278][T26467] kexec: Could not allocate control_code_buffer [ 1102.919222][T26488] bridge0: port 4(veth1_macvtap) entered blocking state [ 1102.985829][T26488] bridge0: port 4(veth1_macvtap) entered disabled state [ 1103.021309][T26488] veth1_macvtap: entered allmulticast mode [ 1103.029121][T26488] veth1_macvtap: left allmulticast mode [ 1103.160912][T26496] ptp ptp0: new virtual clock ptp1 [ 1103.235108][T26496] ptp ptp0: new virtual clock ptp2 [ 1103.309102][T26496] ptp ptp0: new virtual clock ptp3 [ 1103.335446][T26496] ptp ptp0: guarantee physical clock free running [ 1103.718706][T26524] netlink: 280 bytes leftover after parsing attributes in process `syz.1.3388'. [ 1104.658250][T26553] blktrace: Concurrent blktraces are not allowed on nbd3 [ 1104.925465][T26561] program syz.4.3390 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1105.973769][T26576] FAULT_INJECTION: forcing a failure. [ 1105.973769][T26576] name failslab, interval 1, probability 0, space 0, times 0 [ 1105.991829][T26585] FAULT_INJECTION: forcing a failure. [ 1105.991829][T26585] name failslab, interval 1, probability 0, space 0, times 0 [ 1106.018313][T26585] CPU: 1 UID: 0 PID: 26585 Comm: syz.5.3394 Not tainted syzkaller #0 PREEMPT(full) [ 1106.018360][T26585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1106.018380][T26585] Call Trace: [ 1106.018391][T26585] [ 1106.018403][T26585] dump_stack_lvl+0x16c/0x1f0 [ 1106.018444][T26585] should_fail_ex+0x512/0x640 [ 1106.018480][T26585] ? __kmalloc_noprof+0xca/0x880 [ 1106.018517][T26585] should_failslab+0xc2/0x120 [ 1106.018563][T26585] __kmalloc_noprof+0xdd/0x880 [ 1106.018596][T26585] ? kasan_quarantine_put+0x10a/0x240 [ 1106.018632][T26585] ? constrain_params_by_rules+0x175/0xca0 [ 1106.018679][T26585] ? constrain_params_by_rules+0x175/0xca0 [ 1106.018717][T26585] ? constrain_params_by_rules+0xa09/0xca0 [ 1106.018754][T26585] constrain_params_by_rules+0x175/0xca0 [ 1106.018801][T26585] ? constrain_params_by_rules+0xa09/0xca0 [ 1106.018836][T26585] ? constrain_params_by_rules+0xa0e/0xca0 [ 1106.018877][T26585] ? __pfx_constrain_params_by_rules+0x10/0x10 [ 1106.018937][T26585] ? __pfx_constrain_params_by_rules+0x10/0x10 [ 1106.018990][T26585] ? snd_pcm_oss_change_params_locked+0x1398/0x3a30 [ 1106.019027][T26585] ? snd_pcm_oss_get_active_substream+0x168/0x1d0 [ 1106.019066][T26585] ? snd_interval_refine+0x2fa/0x580 [ 1106.019099][T26585] snd_pcm_hw_refine+0x7de/0xad0 [ 1106.019146][T26585] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 1106.019190][T26585] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 1106.019243][T26585] snd_pcm_hw_param_first+0x334/0x6f0 [ 1106.019291][T26585] snd_pcm_hw_param_near.constprop.0+0x702/0x8e0 [ 1106.019339][T26585] ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10 [ 1106.019381][T26585] ? __asan_memset+0x23/0x50 [ 1106.019413][T26585] ? calc_src_frames.isra.0+0x187/0x1d0 [ 1106.019463][T26585] snd_pcm_oss_change_params_locked+0x1398/0x3a30 [ 1106.019520][T26585] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 1106.019590][T26585] snd_pcm_oss_get_active_substream+0x168/0x1d0 [ 1106.019638][T26585] snd_pcm_oss_ioctl+0x2212/0x37c0 [ 1106.019678][T26585] ? hook_file_ioctl_common+0x145/0x410 [ 1106.019723][T26585] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 1106.019767][T26585] ? __fget_files+0x20e/0x3c0 [ 1106.019806][T26585] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 1106.019848][T26585] __x64_sys_ioctl+0x18e/0x210 [ 1106.019911][T26585] do_syscall_64+0xcd/0x4b0 [ 1106.019949][T26585] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1106.019981][T26585] RIP: 0033:0x7f427678eec9 [ 1106.020014][T26585] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1106.020044][T26585] RSP: 002b:00007f4277630038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1106.020073][T26585] RAX: ffffffffffffffda RBX: 00007f42769e5fa0 RCX: 00007f427678eec9 [ 1106.020093][T26585] RDX: 0000000000000000 RSI: 00000000c0045002 RDI: 0000000000000007 [ 1106.020112][T26585] RBP: 00007f4276811f91 R08: 0000000000000000 R09: 0000000000000000 [ 1106.020131][T26585] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1106.020150][T26585] R13: 00007f42769e6038 R14: 00007f42769e5fa0 R15: 00007ffd7f355eb8 [ 1106.020193][T26585] [ 1106.349053][T26576] CPU: 1 UID: 0 PID: 26576 Comm: syz.0.3392 Not tainted syzkaller #0 PREEMPT(full) [ 1106.349092][T26576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1106.349109][T26576] Call Trace: [ 1106.349129][T26576] [ 1106.349142][T26576] dump_stack_lvl+0x16c/0x1f0 [ 1106.349179][T26576] should_fail_ex+0x512/0x640 [ 1106.349215][T26576] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 1106.349257][T26576] should_failslab+0xc2/0x120 [ 1106.349304][T26576] kmem_cache_alloc_noprof+0x75/0x6e0 [ 1106.349341][T26576] ? alloc_empty_file+0x55/0x1e0 [ 1106.349397][T26576] ? alloc_empty_file+0x55/0x1e0 [ 1106.349441][T26576] alloc_empty_file+0x55/0x1e0 [ 1106.349490][T26576] path_openat+0xda/0x2cb0 [ 1106.349542][T26576] ? __pfx_path_openat+0x10/0x10 [ 1106.349592][T26576] do_filp_open+0x20b/0x470 [ 1106.349632][T26576] ? __pfx_do_filp_open+0x10/0x10 [ 1106.349700][T26576] ? alloc_fd+0x471/0x7d0 [ 1106.349744][T26576] do_sys_openat2+0x11b/0x1d0 [ 1106.349795][T26576] ? __pfx_do_sys_openat2+0x10/0x10 [ 1106.349861][T26576] __x64_sys_openat+0x174/0x210 [ 1106.349891][T26576] ? __pfx___x64_sys_openat+0x10/0x10 [ 1106.349936][T26576] do_syscall_64+0xcd/0x4b0 [ 1106.349984][T26576] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1106.350017][T26576] RIP: 0033:0x7ff08598eec9 [ 1106.350044][T26576] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1106.350075][T26576] RSP: 002b:00007ff0868b5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1106.350106][T26576] RAX: ffffffffffffffda RBX: 00007ff085be5fa0 RCX: 00007ff08598eec9 [ 1106.350128][T26576] RDX: 0000000000000800 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 1106.350148][T26576] RBP: 00007ff085a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1106.350168][T26576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1106.350192][T26576] R13: 00007ff085be6038 R14: 00007ff085be5fa0 R15: 00007ffc3f7e6da8 [ 1106.350233][T26576] [ 1107.004174][T26603] random: crng reseeded on system resumption [ 1109.147705][T26633] netlink: 'syz.4.3399': attribute type 1 has an invalid length. [ 1109.946462][T26632] Process accounting resumed [ 1110.157860][T26697] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(16) [ 1111.576026][ T6319] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 1111.585099][ T6319] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:0' [ 1111.596762][ T6319] CPU: 0 UID: 0 PID: 6319 Comm: kworker/u11:2 Not tainted syzkaller #0 PREEMPT(full) [ 1111.596804][ T6319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1111.596824][ T6319] Workqueue: hci0 hci_rx_work [ 1111.596858][ T6319] Call Trace: [ 1111.596867][ T6319] [ 1111.596876][ T6319] dump_stack_lvl+0x16c/0x1f0 [ 1111.596916][ T6319] sysfs_warn_dup+0x7f/0xa0 [ 1111.596950][ T6319] sysfs_create_dir_ns+0x24b/0x2b0 [ 1111.596983][ T6319] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1111.597014][ T6319] ? find_held_lock+0x2b/0x80 [ 1111.597052][ T6319] ? do_raw_spin_unlock+0x172/0x230 [ 1111.597082][ T6319] kobject_add_internal+0x2c4/0x9b0 [ 1111.597119][ T6319] kobject_add+0x16e/0x240 [ 1111.597147][ T6319] ? __pfx_kobject_add+0x10/0x10 [ 1111.597178][ T6319] ? do_raw_spin_unlock+0x172/0x230 [ 1111.597204][ T6319] ? kobject_put+0xab/0x5a0 [ 1111.597242][ T6319] device_add+0x288/0x1aa0 [ 1111.597265][ T6319] ? __pfx_dev_set_name+0x10/0x10 [ 1111.597290][ T6319] ? __pfx_device_add+0x10/0x10 [ 1111.597327][ T6319] ? mgmt_send_event_skb+0x2fb/0x460 [ 1111.597376][ T6319] hci_conn_add_sysfs+0x17e/0x230 [ 1111.597406][ T6319] le_conn_complete_evt+0x1260/0x2150 [ 1111.597453][ T6319] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1111.597490][ T6319] ? bt_warn+0xe4/0x120 [ 1111.597530][ T6319] ? __pfx_bt_warn+0x10/0x10 [ 1111.597574][ T6319] hci_le_conn_complete_evt+0x23c/0x370 [ 1111.597620][ T6319] hci_le_meta_evt+0x354/0x5e0 [ 1111.597651][ T6319] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 1111.597694][ T6319] hci_event_packet+0x685/0x11c0 [ 1111.597733][ T6319] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1111.597761][ T6319] ? __pfx_hci_event_packet+0x10/0x10 [ 1111.597804][ T6319] ? kcov_remote_start+0x3c9/0x6d0 [ 1111.597830][ T6319] ? lockdep_hardirqs_on+0x7c/0x110 [ 1111.597862][ T6319] hci_rx_work+0x2c5/0x16b0 [ 1111.597889][ T6319] ? rcu_is_watching+0x12/0xc0 [ 1111.597924][ T6319] process_one_work+0x9cc/0x1b70 [ 1111.597964][ T6319] ? __pfx_process_one_work+0x10/0x10 [ 1111.598000][ T6319] ? assign_work+0x1a0/0x250 [ 1111.598027][ T6319] worker_thread+0x6c8/0xf10 [ 1111.598069][ T6319] ? __pfx_worker_thread+0x10/0x10 [ 1111.598094][ T6319] kthread+0x3c5/0x780 [ 1111.598118][ T6319] ? __pfx_kthread+0x10/0x10 [ 1111.598143][ T6319] ? rcu_is_watching+0x12/0xc0 [ 1111.598171][ T6319] ? __pfx_kthread+0x10/0x10 [ 1111.598195][ T6319] ret_from_fork+0x56d/0x730 [ 1111.598217][ T6319] ? __pfx_kthread+0x10/0x10 [ 1111.598241][ T6319] ret_from_fork_asm+0x1a/0x30 [ 1111.598290][ T6319] [ 1111.598329][ T6319] kobject: kobject_add_internal failed for hci0:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 1111.874210][ T6319] Bluetooth: hci0: failed to register connection device [ 1112.764063][T26777] netlink: 334 bytes leftover after parsing attributes in process `syz.5.3409'. [ 1113.933654][T20571] Bluetooth: hci0: command tx timeout [ 1115.231999][T26908] vivid-003: ================= START STATUS ================= [ 1115.254801][T26908] vivid-003: Radio HW Seek Mode: Bounded [ 1115.273602][T26908] vivid-003: Radio Programmable HW Seek: false [ 1115.279864][T26908] vivid-003: RDS Rx I/O Mode: Block I/O [ 1115.313519][T26908] vivid-003: Generate RBDS Instead of RDS: false [ 1115.348528][T26908] vivid-003: RDS Reception: true [ 1115.473622][T26908] vivid-003: RDS Program Type: 0 inactive [ 1115.481845][T26908] vivid-003: RDS PS Name: inactive [ 1115.563786][T26908] vivid-003: RDS Radio Text: inactive [ 1115.631908][T26908] vivid-003: RDS Traffic Announcement: false inactive [ 1115.714798][T26908] vivid-003: RDS Traffic Program: false inactive [ 1115.746261][T26908] vivid-003: RDS Music: false inactive [ 1115.761462][T26908] vivid-003: ================== END STATUS ================== [ 1116.499279][T26920] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3423'. [ 1116.942277][T26944] queue_state_write: operation too long [ 1116.992659][T26944] queue_state_write: use 'run', 'start' or 'kick' [ 1117.540634][T26949] svc: failed to register nfsdv3 RPC service (errno 111). [ 1117.551683][T26949] svc: failed to register nfsaclv3 RPC service (errno 111). [ 1117.942850][T26966] __vm_enough_memory: pid: 26966, comm: syz.1.3431, bytes: 4398046511104 not enough memory for the allocation [ 1120.562094][T27003] FAULT_INJECTION: forcing a failure. [ 1120.562094][T27003] name failslab, interval 1, probability 0, space 0, times 0 [ 1120.615826][T27003] CPU: 0 UID: 0 PID: 27003 Comm: syz.0.3436 Not tainted syzkaller #0 PREEMPT(full) [ 1120.615870][T27003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1120.615887][T27003] Call Trace: [ 1120.615899][T27003] [ 1120.615912][T27003] dump_stack_lvl+0x16c/0x1f0 [ 1120.615950][T27003] should_fail_ex+0x512/0x640 [ 1120.615986][T27003] ? kmem_cache_alloc_lru_noprof+0x66/0x6e0 [ 1120.616025][T27003] should_failslab+0xc2/0x120 [ 1120.616074][T27003] kmem_cache_alloc_lru_noprof+0x79/0x6e0 [ 1120.616114][T27003] ? __d_alloc+0x32/0xae0 [ 1120.616155][T27003] ? __d_alloc+0x32/0xae0 [ 1120.616190][T27003] __d_alloc+0x32/0xae0 [ 1120.616232][T27003] d_alloc_pseudo+0x1c/0xc0 [ 1120.616279][T27003] alloc_file_pseudo+0xcf/0x230 [ 1120.616328][T27003] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1120.616374][T27003] ? alloc_fd+0x471/0x7d0 [ 1120.616413][T27003] sock_alloc_file+0x50/0x210 [ 1120.616452][T27003] __sys_socket+0x1c0/0x260 [ 1120.616495][T27003] ? __pfx___sys_socket+0x10/0x10 [ 1120.616538][T27003] ? xfd_validate_state+0x61/0x180 [ 1120.616572][T27003] __x64_sys_socket+0x72/0xb0 [ 1120.616613][T27003] ? lockdep_hardirqs_on+0x7c/0x110 [ 1120.616644][T27003] do_syscall_64+0xcd/0x4b0 [ 1120.616680][T27003] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1120.616713][T27003] RIP: 0033:0x7ff08598eec9 [ 1120.616737][T27003] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1120.616763][T27003] RSP: 002b:00007ff0868b5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1120.616802][T27003] RAX: ffffffffffffffda RBX: 00007ff085be5fa0 RCX: 00007ff08598eec9 [ 1120.616823][T27003] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 000000000000001e [ 1120.616840][T27003] RBP: 00007ff085a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1120.616859][T27003] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1120.616877][T27003] R13: 00007ff085be6038 R14: 00007ff085be5fa0 R15: 00007ffc3f7e6da8 [ 1120.616918][T27003] [ 1121.308696][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1121.322759][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1121.489341][T27030] netlink: 280 bytes leftover after parsing attributes in process `syz.5.3440'. [ 1121.913764][T26955] svc: failed to register nfsdv3 RPC service (errno 512). [ 1121.936601][T26955] svc: failed to register nfsaclv3 RPC service (errno 512). [ 1122.168278][T27068] netlink: 146 bytes leftover after parsing attributes in process `syz.5.3441'. [ 1123.256479][T27128] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3444'. [ 1123.529448][T27143] netlink: 146 bytes leftover after parsing attributes in process `syz.1.3443'. [ 1125.128885][T27181] FAULT_INJECTION: forcing a failure. [ 1125.128885][T27181] name failslab, interval 1, probability 0, space 0, times 0 [ 1125.152573][T27181] CPU: 1 UID: 0 PID: 27181 Comm: syz.5.3446 Not tainted syzkaller #0 PREEMPT(full) [ 1125.152626][T27181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1125.152645][T27181] Call Trace: [ 1125.152655][T27181] [ 1125.152668][T27181] dump_stack_lvl+0x16c/0x1f0 [ 1125.152707][T27181] should_fail_ex+0x512/0x640 [ 1125.152740][T27181] ? kmem_cache_alloc_node_noprof+0x65/0x770 [ 1125.152782][T27181] should_failslab+0xc2/0x120 [ 1125.152828][T27181] kmem_cache_alloc_node_noprof+0x78/0x770 [ 1125.152863][T27181] ? __alloc_skb+0x2b2/0x380 [ 1125.152902][T27181] ? __alloc_skb+0x2b2/0x380 [ 1125.152931][T27181] __alloc_skb+0x2b2/0x380 [ 1125.152962][T27181] ? __pfx___alloc_skb+0x10/0x10 [ 1125.152996][T27181] ? __pfx___might_resched+0x10/0x10 [ 1125.153035][T27181] ? __lock_acquire+0xb97/0x1ce0 [ 1125.153088][T27181] netlink_alloc_large_skb+0x69/0x140 [ 1125.153129][T27181] netlink_sendmsg+0x698/0xdd0 [ 1125.153173][T27181] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1125.153216][T27181] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 1125.153260][T27181] ____sys_sendmsg+0xa95/0xc70 [ 1125.153304][T27181] ? copy_msghdr_from_user+0x10a/0x160 [ 1125.153339][T27181] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1125.153389][T27181] ? kfree+0x252/0x6d0 [ 1125.153425][T27181] ___sys_sendmsg+0x134/0x1d0 [ 1125.153457][T27181] ? __pfx____sys_sendmsg+0x10/0x10 [ 1125.153528][T27181] ? __pfx___might_resched+0x10/0x10 [ 1125.153575][T27181] __sys_sendmmsg+0x200/0x420 [ 1125.153623][T27181] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1125.153669][T27181] ? __pfx_do_futex+0x10/0x10 [ 1125.153715][T27181] ? fput+0x9b/0xd0 [ 1125.153780][T27181] ? xfd_validate_state+0x61/0x180 [ 1125.153820][T27181] __x64_sys_sendmmsg+0x9c/0x100 [ 1125.153854][T27181] ? lockdep_hardirqs_on+0x7c/0x110 [ 1125.153885][T27181] do_syscall_64+0xcd/0x4b0 [ 1125.153922][T27181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1125.153955][T27181] RIP: 0033:0x7f427678eec9 [ 1125.153982][T27181] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1125.154012][T27181] RSP: 002b:00007f4277630038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1125.154044][T27181] RAX: ffffffffffffffda RBX: 00007f42769e5fa0 RCX: 00007f427678eec9 [ 1125.154066][T27181] RDX: 0000000000000007 RSI: 0000200000000200 RDI: 0000000000000007 [ 1125.154085][T27181] RBP: 00007f4276811f91 R08: 0000000000000000 R09: 0000000000000000 [ 1125.154105][T27181] R10: 0000000000004008 R11: 0000000000000246 R12: 0000000000000000 [ 1125.154124][T27181] R13: 00007f42769e6038 R14: 00007f42769e5fa0 R15: 00007ffd7f355eb8 [ 1125.154164][T27181] [ 1127.276882][T27253] zswap: compressor not available [ 1127.887335][T27271] netlink: 146 bytes leftover after parsing attributes in process `syz.1.3453'. [ 1127.990921][T27301] __vm_enough_memory: pid: 27301, comm: syz.0.3456, bytes: 4398046511104 not enough memory for the allocation [ 1128.121300][T27274] vivid-003: ================= START STATUS ================= [ 1128.170049][T27274] vivid-003: Radio HW Seek Mode: Bounded [ 1128.176761][T27274] vivid-003: Radio Programmable HW Seek: false [ 1128.235537][T27274] vivid-003: RDS Rx I/O Mode: Block I/O [ 1128.254130][T27274] vivid-003: Generate RBDS Instead of RDS: false [ 1128.289126][T27274] vivid-003: RDS Reception: true [ 1128.302396][T27274] vivid-003: RDS Program Type: 0 inactive [ 1128.308696][T27274] vivid-003: RDS PS Name: inactive [ 1128.345768][T27274] vivid-003: RDS Radio Text: inactive [ 1128.351393][T27274] vivid-003: RDS Traffic Announcement: false inactive [ 1128.358376][T27274] vivid-003: RDS Traffic Program: false inactive [ 1128.365210][T27274] vivid-003: RDS Music: false inactive [ 1128.433800][T27274] vivid-003: ================== END STATUS ================== [ 1129.341592][T27333] : Can't lookup blockdev [ 1129.625747][T27341] random: crng reseeded on system resumption [ 1131.285234][T27344] Process accounting paused [ 1131.583853][T27393] netlink: 280 bytes leftover after parsing attributes in process `syz.4.3465'. [ 1132.700704][T27406] could not allocate digest TFM handle [ 1132.878349][T27457] netlink: 146 bytes leftover after parsing attributes in process `syz.1.3468'. [ 1133.183677][T27467] svc: failed to register nfsdv3 RPC service (errno 111). [ 1133.227486][T27467] svc: failed to register nfsaclv3 RPC service (errno 111). [ 1133.689081][T27456] svc: failed to register nfsdv3 RPC service (errno 111). [ 1133.702911][T27456] svc: failed to register nfsaclv3 RPC service (errno 111). [ 1135.041467][T27523] ALSA: mixer_oss: invalid OSS volume '' [ 1135.587663][T27585] netlink: 280 bytes leftover after parsing attributes in process `syz.5.3476'. [ 1136.584226][T27625] FAULT_INJECTION: forcing a failure. [ 1136.584226][T27625] name failslab, interval 1, probability 0, space 0, times 0 [ 1136.602673][T27625] CPU: 1 UID: 0 PID: 27625 Comm: syz.5.3480 Not tainted syzkaller #0 PREEMPT(full) [ 1136.602717][T27625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1136.602736][T27625] Call Trace: [ 1136.602746][T27625] [ 1136.602758][T27625] dump_stack_lvl+0x16c/0x1f0 [ 1136.602797][T27625] should_fail_ex+0x512/0x640 [ 1136.602833][T27625] ? fs_reclaim_acquire+0xae/0x150 [ 1136.602882][T27625] should_failslab+0xc2/0x120 [ 1136.602928][T27625] __kmalloc_noprof+0xdd/0x880 [ 1136.602962][T27625] ? tomoyo_encode2+0x100/0x3e0 [ 1136.603015][T27625] ? tomoyo_encode2+0x100/0x3e0 [ 1136.603057][T27625] tomoyo_encode2+0x100/0x3e0 [ 1136.603110][T27625] tomoyo_encode+0x29/0x50 [ 1136.603155][T27625] tomoyo_realpath_from_path+0x18f/0x6e0 [ 1136.603215][T27625] tomoyo_check_open_permission+0x2ab/0x3c0 [ 1136.603261][T27625] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 1136.603345][T27625] ? do_raw_spin_lock+0x12c/0x2b0 [ 1136.603393][T27625] tomoyo_file_open+0x6b/0x90 [ 1136.603428][T27625] security_file_open+0x84/0x1e0 [ 1136.603475][T27625] do_dentry_open+0x596/0x1530 [ 1136.603538][T27625] vfs_open+0x82/0x3f0 [ 1136.603592][T27625] path_openat+0x1de4/0x2cb0 [ 1136.603645][T27625] ? __pfx_path_openat+0x10/0x10 [ 1136.603695][T27625] do_filp_open+0x20b/0x470 [ 1136.603736][T27625] ? __pfx_do_filp_open+0x10/0x10 [ 1136.603805][T27625] ? alloc_fd+0x471/0x7d0 [ 1136.603854][T27625] do_sys_openat2+0x11b/0x1d0 [ 1136.603903][T27625] ? __pfx_do_sys_openat2+0x10/0x10 [ 1136.603968][T27625] __x64_sys_openat+0x174/0x210 [ 1136.604000][T27625] ? __pfx___x64_sys_openat+0x10/0x10 [ 1136.604047][T27625] do_syscall_64+0xcd/0x4b0 [ 1136.604085][T27625] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1136.604119][T27625] RIP: 0033:0x7f427678eec9 [ 1136.604147][T27625] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1136.604179][T27625] RSP: 002b:00007f4277630038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1136.604208][T27625] RAX: ffffffffffffffda RBX: 00007f42769e5fa0 RCX: 00007f427678eec9 [ 1136.604229][T27625] RDX: 0000000000000800 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 1136.604250][T27625] RBP: 00007f4276811f91 R08: 0000000000000000 R09: 0000000000000000 [ 1136.604269][T27625] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1136.604287][T27625] R13: 00007f42769e6038 R14: 00007f42769e5fa0 R15: 00007ffd7f355eb8 [ 1136.604329][T27625] [ 1136.604368][T27625] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1137.139900][T27646] netlink: 146 bytes leftover after parsing attributes in process `syz.4.3481'. [ 1139.942030][T27694] sg_write: data in/out 2359516/158 bytes for SCSI command 0x0-- guessing data in; [ 1139.942030][T27694] program syz.4.3484 not setting count and/or reply_len properly [ 1140.604347][T27691] Process accounting paused [ 1140.704681][T27710] netlink: 280 bytes leftover after parsing attributes in process `syz.4.3489'. [ 1141.422463][T27723] block2mtd: error: cannot open device /sys/module/block2mtd/parameters/block2mtd [ 1141.931051][T27748] netlink: 146 bytes leftover after parsing attributes in process `syz.5.3493'. [ 1142.763576][ T30] audit: type=1326 audit(4294967307.903:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27789 comm="syz.0.3497" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff08598eec9 code=0x0 [ 1142.971725][T27806] netlink: 280 bytes leftover after parsing attributes in process `syz.4.3498'. [ 1143.127104][T27815] bond0: invalid ARP target specified [ 1145.466882][T27878] sg_write: data in/out 2359516/158 bytes for SCSI command 0x0-- guessing data in; [ 1145.466882][T27878] program syz.1.3506 not setting count and/or reply_len properly [ 1146.194761][T27889] netlink: 146 bytes leftover after parsing attributes in process `syz.4.3509'. [ 1146.260385][T27908] device-mapper: ioctl: Invalid ioctl structure: uuid ±, name , dev 5 [ 1147.489865][T27934] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3514'. [ 1147.576802][T27935] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input17 [ 1150.301293][T28104] random: crng reseeded on system resumption [ 1151.015481][T28080] sg_write: data in/out 2359516/158 bytes for SCSI command 0x0-- guessing data in; [ 1151.015481][T28080] program syz.4.3520 not setting count and/or reply_len properly [ 1153.326625][T28224] netlink: 146 bytes leftover after parsing attributes in process `syz.1.3530'. [ 1153.486582][T28229] FAULT_INJECTION: forcing a failure. [ 1153.486582][T28229] name failslab, interval 1, probability 0, space 0, times 0 [ 1153.566078][T28229] CPU: 0 UID: 0 PID: 28229 Comm: syz.5.3532 Not tainted syzkaller #0 PREEMPT(full) [ 1153.566123][T28229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1153.566142][T28229] Call Trace: [ 1153.566153][T28229] [ 1153.566166][T28229] dump_stack_lvl+0x16c/0x1f0 [ 1153.566203][T28229] should_fail_ex+0x512/0x640 [ 1153.566239][T28229] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 1153.566276][T28229] should_failslab+0xc2/0x120 [ 1153.566320][T28229] kmem_cache_alloc_noprof+0x75/0x6e0 [ 1153.566352][T28229] ? alloc_empty_file+0x55/0x1e0 [ 1153.566402][T28229] ? alloc_empty_file+0x55/0x1e0 [ 1153.566444][T28229] alloc_empty_file+0x55/0x1e0 [ 1153.566501][T28229] path_openat+0xda/0x2cb0 [ 1153.566553][T28229] ? __pfx_path_openat+0x10/0x10 [ 1153.566602][T28229] do_filp_open+0x20b/0x470 [ 1153.566639][T28229] ? __pfx_do_filp_open+0x10/0x10 [ 1153.566704][T28229] ? alloc_fd+0x471/0x7d0 [ 1153.566749][T28229] do_sys_openat2+0x11b/0x1d0 [ 1153.566795][T28229] ? __pfx_do_sys_openat2+0x10/0x10 [ 1153.566858][T28229] __x64_sys_openat+0x174/0x210 [ 1153.566886][T28229] ? __pfx___x64_sys_openat+0x10/0x10 [ 1153.566931][T28229] do_syscall_64+0xcd/0x4b0 [ 1153.566967][T28229] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1153.566999][T28229] RIP: 0033:0x7f427678eec9 [ 1153.567023][T28229] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1153.567052][T28229] RSP: 002b:00007f4277630038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1153.567082][T28229] RAX: ffffffffffffffda RBX: 00007f42769e5fa0 RCX: 00007f427678eec9 [ 1153.567103][T28229] RDX: 0000000000000002 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 1153.567122][T28229] RBP: 00007f4276811f91 R08: 0000000000000000 R09: 0000000000000000 [ 1153.567140][T28229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1153.567158][T28229] R13: 00007f42769e6038 R14: 00007f42769e5fa0 R15: 00007ffd7f355eb8 [ 1153.567195][T28229] [ 1154.094128][T28230] svc: failed to register nfsdv3 RPC service (errno 111). [ 1154.111885][T28230] svc: failed to register nfsaclv3 RPC service (errno 111). [ 1154.807439][T28234] svc: failed to register nfsdv3 RPC service (errno 111). [ 1154.821671][T28234] svc: failed to register nfsaclv3 RPC service (errno 111). [ 1155.110988][T28297] random: crng reseeded on system resumption [ 1156.179924][T28313] queue_state_write: operation too long [ 1156.221965][T28313] queue_state_write: use 'run', 'start' or 'kick' [ 1158.127944][T28360] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input18 [ 1158.331382][T28381] FAULT_INJECTION: forcing a failure. [ 1158.331382][T28381] name failslab, interval 1, probability 0, space 0, times 0 [ 1158.379782][T28381] CPU: 0 UID: 0 PID: 28381 Comm: syz.1.3543 Not tainted syzkaller #0 PREEMPT(full) [ 1158.379809][T28381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1158.379821][T28381] Call Trace: [ 1158.379827][T28381] [ 1158.379835][T28381] dump_stack_lvl+0x16c/0x1f0 [ 1158.379859][T28381] should_fail_ex+0x512/0x640 [ 1158.379881][T28381] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 1158.379903][T28381] should_failslab+0xc2/0x120 [ 1158.379931][T28381] kmem_cache_alloc_noprof+0x75/0x6e0 [ 1158.379952][T28381] ? sk_prot_alloc+0x60/0x2a0 [ 1158.379980][T28381] ? sk_prot_alloc+0x60/0x2a0 [ 1158.380002][T28381] sk_prot_alloc+0x60/0x2a0 [ 1158.380026][T28381] sk_alloc+0x36/0xc20 [ 1158.380045][T28381] tipc_sk_create+0xcf/0x21a0 [ 1158.380076][T28381] ? find_held_lock+0x2b/0x80 [ 1158.380098][T28381] ? __sock_create+0x2f2/0x8d0 [ 1158.380126][T28381] __sock_create+0x335/0x8d0 [ 1158.380155][T28381] __sys_socket+0x14d/0x260 [ 1158.380181][T28381] ? __pfx___sys_socket+0x10/0x10 [ 1158.380206][T28381] ? xfd_validate_state+0x61/0x180 [ 1158.380228][T28381] __x64_sys_socket+0x72/0xb0 [ 1158.380253][T28381] ? lockdep_hardirqs_on+0x7c/0x110 [ 1158.380271][T28381] do_syscall_64+0xcd/0x4b0 [ 1158.380300][T28381] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1158.380319][T28381] RIP: 0033:0x7f368478eec9 [ 1158.380334][T28381] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1158.380352][T28381] RSP: 002b:00007f368558f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1158.380370][T28381] RAX: ffffffffffffffda RBX: 00007f36849e6180 RCX: 00007f368478eec9 [ 1158.380382][T28381] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 000000000000001e [ 1158.380393][T28381] RBP: 00007f3684811f91 R08: 0000000000000000 R09: 0000000000000000 [ 1158.380406][T28381] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1158.380417][T28381] R13: 00007f36849e6218 R14: 00007f36849e6180 R15: 00007fff244ce848 [ 1158.380441][T28381] [ 1159.153879][T20571] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 1159.164689][T20571] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:0' [ 1159.176785][T20571] CPU: 0 UID: 0 PID: 20571 Comm: kworker/u11:1 Not tainted syzkaller #0 PREEMPT(full) [ 1159.176812][T20571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1159.176825][T20571] Workqueue: hci0 hci_rx_work [ 1159.176849][T20571] Call Trace: [ 1159.176855][T20571] [ 1159.176863][T20571] dump_stack_lvl+0x16c/0x1f0 [ 1159.176885][T20571] sysfs_warn_dup+0x7f/0xa0 [ 1159.176909][T20571] sysfs_create_dir_ns+0x24b/0x2b0 [ 1159.176933][T20571] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1159.176956][T20571] ? find_held_lock+0x2b/0x80 [ 1159.176982][T20571] ? do_raw_spin_unlock+0x172/0x230 [ 1159.177003][T20571] kobject_add_internal+0x2c4/0x9b0 [ 1159.177029][T20571] kobject_add+0x16e/0x240 [ 1159.177052][T20571] ? __pfx_kobject_add+0x10/0x10 [ 1159.177076][T20571] ? do_raw_spin_unlock+0x172/0x230 [ 1159.177096][T20571] ? kobject_put+0xab/0x5a0 [ 1159.177122][T20571] device_add+0x288/0x1aa0 [ 1159.177139][T20571] ? __pfx_dev_set_name+0x10/0x10 [ 1159.177158][T20571] ? __pfx_device_add+0x10/0x10 [ 1159.177187][T20571] ? mgmt_send_event_skb+0x2fb/0x460 [ 1159.177221][T20571] hci_conn_add_sysfs+0x17e/0x230 [ 1159.177243][T20571] le_conn_complete_evt+0x1260/0x2150 [ 1159.177277][T20571] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1159.177305][T20571] ? bt_warn+0xe4/0x120 [ 1159.177330][T20571] ? __pfx_bt_warn+0x10/0x10 [ 1159.177362][T20571] hci_le_conn_complete_evt+0x23c/0x370 [ 1159.177396][T20571] hci_le_meta_evt+0x354/0x5e0 [ 1159.177415][T20571] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 1159.177455][T20571] hci_event_packet+0x685/0x11c0 [ 1159.177483][T20571] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1159.177503][T20571] ? __pfx_hci_event_packet+0x10/0x10 [ 1159.177534][T20571] ? kcov_remote_start+0x3c9/0x6d0 [ 1159.177554][T20571] ? lockdep_hardirqs_on+0x7c/0x110 [ 1159.177577][T20571] hci_rx_work+0x2c5/0x16b0 [ 1159.177597][T20571] ? rcu_is_watching+0x12/0xc0 [ 1159.177623][T20571] process_one_work+0x9cc/0x1b70 [ 1159.177653][T20571] ? __pfx_process_one_work+0x10/0x10 [ 1159.177678][T20571] ? assign_work+0x1a0/0x250 [ 1159.177697][T20571] worker_thread+0x6c8/0xf10 [ 1159.177723][T20571] ? __kthread_parkme+0x19e/0x250 [ 1159.177749][T20571] ? __pfx_worker_thread+0x10/0x10 [ 1159.177768][T20571] kthread+0x3c5/0x780 [ 1159.177785][T20571] ? __pfx_kthread+0x10/0x10 [ 1159.177804][T20571] ? rcu_is_watching+0x12/0xc0 [ 1159.177825][T20571] ? __pfx_kthread+0x10/0x10 [ 1159.177843][T20571] ret_from_fork+0x56d/0x730 [ 1159.177860][T20571] ? __pfx_kthread+0x10/0x10 [ 1159.177877][T20571] ret_from_fork_asm+0x1a/0x30 [ 1159.177911][T20571] [ 1159.177931][T20571] kobject: kobject_add_internal failed for hci0:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 1159.452395][T20571] Bluetooth: hci0: failed to register connection device [ 1160.129885][T28411] netlink: 334 bytes leftover after parsing attributes in process `syz.5.3545'. [ 1161.204354][T28488] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(16) [ 1161.522645][T20571] Bluetooth: hci0: command tx timeout [ 1161.603504][T28416] Process accounting resumed [ 1163.167765][T28554] Invalid ELF header magic: != ELF [ 1163.209919][T20571] Bluetooth: hci4: unexpected subevent 0x01 length: 123 > 18 [ 1163.219571][T20571] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:0' [ 1163.228928][T20571] CPU: 0 UID: 0 PID: 20571 Comm: kworker/u11:1 Not tainted syzkaller #0 PREEMPT(full) [ 1163.228970][T20571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1163.228991][T20571] Workqueue: hci4 hci_rx_work [ 1163.229028][T20571] Call Trace: [ 1163.229038][T20571] [ 1163.229049][T20571] dump_stack_lvl+0x16c/0x1f0 [ 1163.229084][T20571] sysfs_warn_dup+0x7f/0xa0 [ 1163.229122][T20571] sysfs_create_dir_ns+0x24b/0x2b0 [ 1163.229168][T20571] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1163.229203][T20571] ? find_held_lock+0x2b/0x80 [ 1163.229244][T20571] ? do_raw_spin_unlock+0x172/0x230 [ 1163.229279][T20571] kobject_add_internal+0x2c4/0x9b0 [ 1163.229319][T20571] kobject_add+0x16e/0x240 [ 1163.229352][T20571] ? __pfx_kobject_add+0x10/0x10 [ 1163.229388][T20571] ? do_raw_spin_unlock+0x172/0x230 [ 1163.229422][T20571] ? kobject_put+0xab/0x5a0 [ 1163.229464][T20571] device_add+0x288/0x1aa0 [ 1163.229494][T20571] ? __pfx_dev_set_name+0x10/0x10 [ 1163.229525][T20571] ? __pfx_device_add+0x10/0x10 [ 1163.229581][T20571] ? mgmt_send_event_skb+0x2fb/0x460 [ 1163.229637][T20571] hci_conn_add_sysfs+0x17e/0x230 [ 1163.229671][T20571] le_conn_complete_evt+0x1260/0x2150 [ 1163.229725][T20571] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1163.229772][T20571] ? bt_warn+0xe4/0x120 [ 1163.229812][T20571] ? __pfx_bt_warn+0x10/0x10 [ 1163.229865][T20571] hci_le_conn_complete_evt+0x23c/0x370 [ 1163.229920][T20571] hci_le_meta_evt+0x354/0x5e0 [ 1163.229949][T20571] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 1163.229998][T20571] hci_event_packet+0x685/0x11c0 [ 1163.230047][T20571] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1163.230082][T20571] ? __pfx_hci_event_packet+0x10/0x10 [ 1163.230131][T20571] ? kcov_remote_start+0x3c9/0x6d0 [ 1163.230163][T20571] ? lockdep_hardirqs_on+0x7c/0x110 [ 1163.230201][T20571] hci_rx_work+0x2c5/0x16b0 [ 1163.230237][T20571] ? rcu_is_watching+0x12/0xc0 [ 1163.230279][T20571] process_one_work+0x9cc/0x1b70 [ 1163.230328][T20571] ? __pfx_process_one_work+0x10/0x10 [ 1163.230372][T20571] ? assign_work+0x1a0/0x250 [ 1163.230406][T20571] worker_thread+0x6c8/0xf10 [ 1163.230450][T20571] ? __kthread_parkme+0x19e/0x250 [ 1163.230494][T20571] ? __pfx_worker_thread+0x10/0x10 [ 1163.230524][T20571] kthread+0x3c5/0x780 [ 1163.230561][T20571] ? __pfx_kthread+0x10/0x10 [ 1163.230592][T20571] ? rcu_is_watching+0x12/0xc0 [ 1163.230627][T20571] ? __pfx_kthread+0x10/0x10 [ 1163.230657][T20571] ret_from_fork+0x56d/0x730 [ 1163.230685][T20571] ? __pfx_kthread+0x10/0x10 [ 1163.230715][T20571] ret_from_fork_asm+0x1a/0x30 [ 1163.230772][T20571] [ 1163.491358][T20571] kobject: kobject_add_internal failed for hci4:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 1163.505961][T20571] Bluetooth: hci4: failed to register connection device [ 1163.529301][T28566] tipc: Started in network mode [ 1163.534247][T28566] tipc: Node identity ee00, cluster identity 4711 [ 1163.601058][T28566] tipc: Node number set to 60928 [ 1163.780953][T28547] netlink: 330 bytes leftover after parsing attributes in process `syz.4.3553'. [ 1163.836075][T28568] netlink: 334 bytes leftover after parsing attributes in process `syz.1.3554'. [ 1164.176533][T28561] Process accounting resumed [ 1164.298047][T28589] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3560'. [ 1164.321552][ T30] audit: type=1800 audit(4294967329.474:59): pid=28592 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3558" name="discovery_nqn" dev="configfs" ino=90075 res=0 errno=0 [ 1165.520717][ T6319] Bluetooth: hci4: command 0x040f tx timeout [ 1168.022835][T28769] random: crng reseeded on system resumption [ 1168.729760][T28797] netlink: 146 bytes leftover after parsing attributes in process `syz.5.3575'. [ 1169.437639][T20571] Bluetooth: hci0: command 0x0406 tx timeout [ 1169.824338][T28829] sg_write: data in/out 2359516/158 bytes for SCSI command 0x0-- guessing data in; [ 1169.824338][T28829] program syz.1.3572 not setting count and/or reply_len properly [ 1171.222809][T28880] FAULT_INJECTION: forcing a failure. [ 1171.222809][T28880] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1171.248142][T28880] CPU: 1 UID: 0 PID: 28880 Comm: syz.1.3580 Not tainted syzkaller #0 PREEMPT(full) [ 1171.248189][T28880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1171.248210][T28880] Call Trace: [ 1171.248221][T28880] [ 1171.248233][T28880] dump_stack_lvl+0x16c/0x1f0 [ 1171.248275][T28880] should_fail_ex+0x512/0x640 [ 1171.248333][T28880] get_futex_key+0x1d0/0x1560 [ 1171.248381][T28880] ? up_write+0x1b2/0x520 [ 1171.248412][T28880] ? __pfx_get_futex_key+0x10/0x10 [ 1171.248457][T28880] ? do_mremap+0xa8f/0x2020 [ 1171.248502][T28880] futex_wake+0xea/0x530 [ 1171.248535][T28880] ? __pfx_futex_wake+0x10/0x10 [ 1171.248578][T28880] ? ksys_write+0x190/0x250 [ 1171.248626][T28880] do_futex+0x1e3/0x350 [ 1171.248672][T28880] ? __pfx_do_futex+0x10/0x10 [ 1171.248714][T28880] ? __pfx___do_sys_mremap+0x10/0x10 [ 1171.248748][T28880] ? cap_task_prctl+0x2af/0xa80 [ 1171.248789][T28880] __x64_sys_futex+0x1e0/0x4c0 [ 1171.248841][T28880] ? __pfx___x64_sys_futex+0x10/0x10 [ 1171.248904][T28880] do_syscall_64+0xcd/0x4b0 [ 1171.248940][T28880] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1171.248969][T28880] RIP: 0033:0x7f368478eec9 [ 1171.248994][T28880] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1171.249025][T28880] RSP: 002b:00007f36855b00e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1171.249055][T28880] RAX: ffffffffffffffda RBX: 00007f36849e6098 RCX: 00007f368478eec9 [ 1171.249076][T28880] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f36849e609c [ 1171.249096][T28880] RBP: 00007f36849e6090 R08: 00007f36855d2000 R09: 0000000000000000 [ 1171.249115][T28880] R10: 0000200001001000 R11: 0000000000000246 R12: 0000000000000000 [ 1171.249134][T28880] R13: 00007f36849e6128 R14: 00007fff244ce760 R15: 00007fff244ce848 [ 1171.249176][T28880] [ 1172.174367][T28780] Process accounting resumed [ 1173.532516][T28922] netlink: 146 bytes leftover after parsing attributes in process `syz.0.3587'. [ 1174.632613][T28976] FAULT_INJECTION: forcing a failure. [ 1174.632613][T28976] name failslab, interval 1, probability 0, space 0, times 0 [ 1174.706449][T28976] CPU: 1 UID: 0 PID: 28976 Comm: syz.5.3590 Not tainted syzkaller #0 PREEMPT(full) [ 1174.706478][T28976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1174.706489][T28976] Call Trace: [ 1174.706496][T28976] [ 1174.706504][T28976] dump_stack_lvl+0x16c/0x1f0 [ 1174.706530][T28976] should_fail_ex+0x512/0x640 [ 1174.706552][T28976] ? __kmalloc_node_track_caller_noprof+0xcb/0x8a0 [ 1174.706581][T28976] should_failslab+0xc2/0x120 [ 1174.706608][T28976] __kmalloc_node_track_caller_noprof+0xde/0x8a0 [ 1174.706633][T28976] ? kstrdup_const+0x63/0x80 [ 1174.706659][T28976] ? kstrdup+0x53/0x100 [ 1174.706678][T28976] kstrdup+0x53/0x100 [ 1174.706701][T28976] kstrdup_const+0x63/0x80 [ 1174.706722][T28976] alloc_vfsmnt+0xea/0x6b0 [ 1174.706749][T28976] clone_mnt+0x6d/0xbf0 [ 1174.706764][T28976] ? copy_mnt_ns+0x1a9/0xa90 [ 1174.706790][T28976] copy_tree+0x31d/0xbd0 [ 1174.706818][T28976] copy_mnt_ns+0x1a9/0xa90 [ 1174.706839][T28976] ? rcu_is_watching+0x12/0xc0 [ 1174.706868][T28976] create_new_namespaces+0xd3/0xa90 [ 1174.706892][T28976] ? bpf_lsm_capable+0x9/0x10 [ 1174.706919][T28976] ? security_capable+0x7e/0x260 [ 1174.706941][T28976] copy_namespaces+0x468/0x560 [ 1174.706966][T28976] copy_process+0x2828/0x76a0 [ 1174.707001][T28976] ? __pfx_copy_process+0x10/0x10 [ 1174.707026][T28976] ? futex_private_hash_put+0x176/0x300 [ 1174.707055][T28976] ? futex_private_hash_put+0x18a/0x300 [ 1174.707084][T28976] kernel_clone+0xfc/0x930 [ 1174.707111][T28976] ? __pfx_kernel_clone+0x10/0x10 [ 1174.707149][T28976] __do_sys_clone+0xce/0x120 [ 1174.707175][T28976] ? __pfx___do_sys_clone+0x10/0x10 [ 1174.707201][T28976] ? __pfx___might_resched+0x10/0x10 [ 1174.707232][T28976] ? xfd_validate_state+0x61/0x180 [ 1174.707248][T28976] ? __pfx_do_writev+0x10/0x10 [ 1174.707275][T28976] do_syscall_64+0xcd/0x4b0 [ 1174.707296][T28976] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1174.707314][T28976] RIP: 0033:0x7f427678eec9 [ 1174.707336][T28976] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1174.707355][T28976] RSP: 002b:00007f427762ffe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1174.707373][T28976] RAX: ffffffffffffffda RBX: 00007f42769e5fa0 RCX: 00007f427678eec9 [ 1174.707385][T28976] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000002360411 [ 1174.707396][T28976] RBP: 00007f4276811f91 R08: 0000000000000000 R09: 0000000000000000 [ 1174.707407][T28976] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1174.707418][T28976] R13: 00007f42769e6038 R14: 00007f42769e5fa0 R15: 00007ffd7f355eb8 [ 1174.707441][T28976] [ 1175.104588][T28973] FAULT_INJECTION: forcing a failure. [ 1175.104588][T28973] name failslab, interval 1, probability 0, space 0, times 0 [ 1175.117489][T28973] CPU: 1 UID: 0 PID: 28973 Comm: syz.1.3591 Not tainted syzkaller #0 PREEMPT(full) [ 1175.117516][T28973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1175.117527][T28973] Call Trace: [ 1175.117533][T28973] [ 1175.117540][T28973] dump_stack_lvl+0x16c/0x1f0 [ 1175.117566][T28973] should_fail_ex+0x512/0x640 [ 1175.117587][T28973] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 1175.117610][T28973] should_failslab+0xc2/0x120 [ 1175.117636][T28973] kmem_cache_alloc_noprof+0x75/0x6e0 [ 1175.117656][T28973] ? lock_acquire+0x179/0x350 [ 1175.117683][T28973] ? alloc_vfsmnt+0x23/0x6b0 [ 1175.117713][T28973] ? alloc_vfsmnt+0x23/0x6b0 [ 1175.117737][T28973] alloc_vfsmnt+0x23/0x6b0 [ 1175.117763][T28973] clone_mnt+0x6d/0xbf0 [ 1175.117778][T28973] ? copy_mnt_ns+0x1a9/0xa90 [ 1175.117804][T28973] copy_tree+0x31d/0xbd0 [ 1175.117831][T28973] copy_mnt_ns+0x1a9/0xa90 [ 1175.117852][T28973] ? rcu_is_watching+0x12/0xc0 [ 1175.117881][T28973] create_new_namespaces+0xd3/0xa90 [ 1175.117904][T28973] ? bpf_lsm_capable+0x9/0x10 [ 1175.117930][T28973] ? security_capable+0x7e/0x260 [ 1175.117953][T28973] copy_namespaces+0x468/0x560 [ 1175.117977][T28973] copy_process+0x2828/0x76a0 [ 1175.118019][T28973] ? __pfx_copy_process+0x10/0x10 [ 1175.118044][T28973] ? futex_private_hash_put+0x176/0x300 [ 1175.118073][T28973] ? futex_private_hash_put+0x18a/0x300 [ 1175.118102][T28973] kernel_clone+0xfc/0x930 [ 1175.118129][T28973] ? __pfx_kernel_clone+0x10/0x10 [ 1175.118167][T28973] __do_sys_clone+0xce/0x120 [ 1175.118192][T28973] ? __pfx___do_sys_clone+0x10/0x10 [ 1175.118228][T28973] ? xfd_validate_state+0x61/0x180 [ 1175.118245][T28973] ? __pfx_do_writev+0x10/0x10 [ 1175.118271][T28973] do_syscall_64+0xcd/0x4b0 [ 1175.118292][T28973] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1175.118310][T28973] RIP: 0033:0x7f368478eec9 [ 1175.118331][T28973] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1175.118348][T28973] RSP: 002b:00007f36855d0fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1175.118367][T28973] RAX: ffffffffffffffda RBX: 00007f36849e5fa0 RCX: 00007f368478eec9 [ 1175.118378][T28973] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000002360411 [ 1175.118389][T28973] RBP: 00007f3684811f91 R08: 0000000000000000 R09: 0000000000000000 [ 1175.118399][T28973] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1175.118410][T28973] R13: 00007f36849e6038 R14: 00007f36849e5fa0 R15: 00007fff244ce848 [ 1175.118432][T28973] [ 1178.759425][T29064] FAULT_INJECTION: forcing a failure. [ 1178.759425][T29064] name failslab, interval 1, probability 0, space 0, times 0 [ 1179.101654][T29064] CPU: 0 UID: 0 PID: 29064 Comm: syz.5.3599 Not tainted syzkaller #0 PREEMPT(full) [ 1179.101698][T29064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1179.101716][T29064] Call Trace: [ 1179.101727][T29064] [ 1179.101740][T29064] dump_stack_lvl+0x16c/0x1f0 [ 1179.101780][T29064] should_fail_ex+0x512/0x640 [ 1179.101815][T29064] ? kmem_cache_alloc_lru_noprof+0x66/0x6e0 [ 1179.101856][T29064] should_failslab+0xc2/0x120 [ 1179.101898][T29064] kmem_cache_alloc_lru_noprof+0x79/0x6e0 [ 1179.101934][T29064] ? __d_alloc+0x32/0xae0 [ 1179.101979][T29064] ? __d_alloc+0x32/0xae0 [ 1179.102010][T29064] __d_alloc+0x32/0xae0 [ 1179.102051][T29064] d_alloc_parallel+0x111/0x1480 [ 1179.102118][T29064] ? __pfx_d_alloc_parallel+0x10/0x10 [ 1179.102171][T29064] ? lockdep_init_map_type+0x5c/0x280 [ 1179.102220][T29064] ? lockdep_init_map_type+0x5c/0x280 [ 1179.102275][T29064] __lookup_slow+0x193/0x460 [ 1179.102333][T29064] ? __pfx___lookup_slow+0x10/0x10 [ 1179.102406][T29064] ? lookup_fast+0x156/0x610 [ 1179.102434][T29064] ? __pfx_kernfs_iop_permission+0x10/0x10 [ 1179.102478][T29064] walk_component+0x353/0x5b0 [ 1179.102514][T29064] link_path_walk+0x627/0xe20 [ 1179.102561][T29064] path_openat+0x1b0/0x2cb0 [ 1179.102611][T29064] ? __pfx_path_openat+0x10/0x10 [ 1179.102661][T29064] do_filp_open+0x20b/0x470 [ 1179.102700][T29064] ? __pfx_do_filp_open+0x10/0x10 [ 1179.102769][T29064] ? alloc_fd+0x471/0x7d0 [ 1179.102815][T29064] do_sys_openat2+0x11b/0x1d0 [ 1179.102869][T29064] ? __pfx_do_sys_openat2+0x10/0x10 [ 1179.102935][T29064] __x64_sys_openat+0x174/0x210 [ 1179.102965][T29064] ? __pfx___x64_sys_openat+0x10/0x10 [ 1179.103012][T29064] do_syscall_64+0xcd/0x4b0 [ 1179.103050][T29064] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1179.103081][T29064] RIP: 0033:0x7f427678eec9 [ 1179.103108][T29064] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1179.103135][T29064] RSP: 002b:00007f42775ee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1179.103164][T29064] RAX: ffffffffffffffda RBX: 00007f42769e6180 RCX: 00007f427678eec9 [ 1179.103183][T29064] RDX: 000000000010b042 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1179.103202][T29064] RBP: 00007f4276811f91 R08: 0000000000000000 R09: 0000000000000000 [ 1179.103221][T29064] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1179.103239][T29064] R13: 00007f42769e6218 R14: 00007f42769e6180 R15: 00007ffd7f355eb8 [ 1179.103276][T29064] [ 1180.015483][T29089] FAULT_INJECTION: forcing a failure. [ 1180.015483][T29089] name failslab, interval 1, probability 0, space 0, times 0 [ 1180.049768][T29089] CPU: 1 UID: 0 PID: 29089 Comm: syz.1.3603 Not tainted syzkaller #0 PREEMPT(full) [ 1180.049814][T29089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1180.049834][T29089] Call Trace: [ 1180.049845][T29089] [ 1180.049858][T29089] dump_stack_lvl+0x16c/0x1f0 [ 1180.049899][T29089] should_fail_ex+0x512/0x640 [ 1180.049936][T29089] ? __kmalloc_node_track_caller_noprof+0xcb/0x8a0 [ 1180.049996][T29089] should_failslab+0xc2/0x120 [ 1180.050042][T29089] __kmalloc_node_track_caller_noprof+0xde/0x8a0 [ 1180.050087][T29089] ? kstrdup_const+0x63/0x80 [ 1180.050135][T29089] ? kstrdup+0x53/0x100 [ 1180.050167][T29089] kstrdup+0x53/0x100 [ 1180.050211][T29089] kstrdup_const+0x63/0x80 [ 1180.050245][T29089] alloc_vfsmnt+0xea/0x6b0 [ 1180.050288][T29089] clone_mnt+0x6d/0xbf0 [ 1180.050313][T29089] ? copy_mnt_ns+0x1a9/0xa90 [ 1180.050355][T29089] copy_tree+0x31d/0xbd0 [ 1180.050401][T29089] copy_mnt_ns+0x1a9/0xa90 [ 1180.050438][T29089] ? rcu_is_watching+0x12/0xc0 [ 1180.050487][T29089] create_new_namespaces+0xd3/0xa90 [ 1180.050526][T29089] ? bpf_lsm_capable+0x9/0x10 [ 1180.050569][T29089] ? security_capable+0x7e/0x260 [ 1180.050609][T29089] copy_namespaces+0x468/0x560 [ 1180.050664][T29089] copy_process+0x2828/0x76a0 [ 1180.050726][T29089] ? __pfx_copy_process+0x10/0x10 [ 1180.050770][T29089] ? futex_private_hash_put+0x176/0x300 [ 1180.050816][T29089] ? futex_private_hash_put+0x18a/0x300 [ 1180.050863][T29089] kernel_clone+0xfc/0x930 [ 1180.050908][T29089] ? __pfx_kernel_clone+0x10/0x10 [ 1180.050974][T29089] __do_sys_clone+0xce/0x120 [ 1180.051016][T29089] ? __pfx___do_sys_clone+0x10/0x10 [ 1180.051079][T29089] ? xfd_validate_state+0x61/0x180 [ 1180.051106][T29089] ? __pfx_do_writev+0x10/0x10 [ 1180.051154][T29089] do_syscall_64+0xcd/0x4b0 [ 1180.051191][T29089] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1180.051231][T29089] RIP: 0033:0x7f368478eec9 [ 1180.051258][T29089] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1180.051298][T29089] RSP: 002b:00007f36855d0fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1180.051330][T29089] RAX: ffffffffffffffda RBX: 00007f36849e5fa0 RCX: 00007f368478eec9 [ 1180.051351][T29089] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000002360411 [ 1180.051370][T29089] RBP: 00007f3684811f91 R08: 0000000000000000 R09: 0000000000000000 [ 1180.051389][T29089] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1180.051409][T29089] R13: 00007f36849e6038 R14: 00007f36849e5fa0 R15: 00007fff244ce848 [ 1180.051450][T29089] [ 1180.914189][ T8204] ------------[ cut here ]------------ [ 1180.920070][ T8204] ida_free called for id=1001 which is not allocated. [ 1180.991686][ T8204] WARNING: CPU: 0 PID: 8204 at lib/idr.c:592 ida_free+0x1f9/0x2e0 [ 1181.000001][ T8204] Modules linked in: [ 1181.004515][ T8204] CPU: 0 UID: 0 PID: 8204 Comm: kworker/u10:15 Not tainted syzkaller #0 PREEMPT(full) [ 1181.014304][ T8204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1181.024427][ T8204] Workqueue: netns cleanup_net [ 1181.029736][ T8204] RIP: 0010:ida_free+0x1f9/0x2e0 [ 1181.034886][ T8204] Code: 7c f6 41 83 fe 3e 76 72 e8 d4 44 7c f6 48 8b 7c 24 28 4c 89 ee e8 77 01 0d 00 90 48 c7 c7 c0 73 cf 8c 89 ee e8 a8 1a 3b f6 90 <0f> 0b 90 90 e8 ae 44 7c f6 48 b8 00 00 00 00 00 fc ff df 48 01 c3 [ 1181.054828][ T8204] RSP: 0000:ffffc90002f37ad0 EFLAGS: 00010282 [ 1181.061159][ T8204] RAX: 0000000000000000 RBX: 1ffff920005e6f5b RCX: ffffffff81797ce8 [ 1181.069400][ T8204] RDX: ffff888027fb0000 RSI: ffffffff81797cf5 RDI: 0000000000000001 [ 1181.078099][ T8204] RBP: 00000000000003e9 R08: 0000000000000001 R09: 0000000000000000 [ 1181.086481][ T8204] R10: 0000000000000001 R11: 0000000000011698 R12: ffff88801e6b0000 [ 1181.094685][ T8204] R13: 0000000000000293 R14: 00000000000003e9 R15: ffff88801e6b0078 [ 1181.103007][ T8204] FS: 0000000000000000(0000) GS:ffff888124e8c000(0000) knlGS:0000000000000000 [ 1181.112305][ T8204] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1181.118943][ T8204] CR2: 0000001b33405ff8 CR3: 00000000646e2000 CR4: 00000000003526f0 [ 1181.127233][ T8204] Call Trace: [ 1181.130662][ T8204] [ 1181.133691][ T8204] ? __pfx_ida_free+0x10/0x10 [ 1181.138377][ T8204] ? lockdep_hardirqs_on+0x7c/0x110 [ 1181.143619][ T8204] ? kmem_cache_free+0x2d4/0x6c0 [ 1181.148569][ T8204] ? cleanup_net+0x49c/0x8b0 [ 1181.153237][ T8204] cleanup_net+0x5ad/0x8b0 [ 1181.157668][ T8204] ? __pfx_cleanup_net+0x10/0x10 [ 1181.162647][ T8204] ? rcu_is_watching+0x12/0xc0 [ 1181.167760][ T8204] process_one_work+0x9cc/0x1b70 [ 1181.172926][ T8204] ? __pfx_cfg80211_wiphy_work+0x10/0x10 [ 1181.179007][ T8204] ? __pfx_process_one_work+0x10/0x10 [ 1181.184933][ T8204] ? assign_work+0x1a0/0x250 [ 1181.189683][ T8204] worker_thread+0x6c8/0xf10 [ 1181.194583][ T8204] ? __pfx_worker_thread+0x10/0x10 [ 1181.199958][ T8204] kthread+0x3c5/0x780 [ 1181.204456][ T8204] ? __pfx_kthread+0x10/0x10 [ 1181.209161][ T8204] ? rcu_is_watching+0x12/0xc0 [ 1181.214007][ T8204] ? __pfx_kthread+0x10/0x10 [ 1181.218637][ T8204] ret_from_fork+0x56d/0x730 [ 1181.223304][ T8204] ? __pfx_kthread+0x10/0x10 [ 1181.228017][ T8204] ret_from_fork_asm+0x1a/0x30 [ 1181.232916][ T8204] [ 1181.236051][ T8204] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1181.243341][ T8204] CPU: 0 UID: 0 PID: 8204 Comm: kworker/u10:15 Not tainted syzkaller #0 PREEMPT(full) [ 1181.253082][ T8204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1181.263340][ T8204] Workqueue: netns cleanup_net [ 1181.268315][ T8204] Call Trace: [ 1181.271618][ T8204] [ 1181.274662][ T8204] dump_stack_lvl+0x3d/0x1f0 [ 1181.279284][ T8204] vpanic+0x640/0x6f0 [ 1181.283286][ T8204] ? ida_free+0x1f9/0x2e0 [ 1181.287622][ T8204] panic+0xca/0xd0 [ 1181.291452][ T8204] ? __pfx_panic+0x10/0x10 [ 1181.295897][ T8204] ? check_panic_on_warn+0x1f/0xb0 [ 1181.301047][ T8204] check_panic_on_warn+0xab/0xb0 [ 1181.306095][ T8204] __warn+0xf6/0x3c0 [ 1181.310007][ T8204] ? preempt_schedule_notrace+0x62/0xe0 [ 1181.315579][ T8204] ? ida_free+0x1f9/0x2e0 [ 1181.320011][ T8204] report_bug+0x3c3/0x580 [ 1181.324465][ T8204] ? ida_free+0x1f9/0x2e0 [ 1181.328916][ T8204] handle_bug+0x184/0x210 [ 1181.333437][ T8204] exc_invalid_op+0x17/0x50 [ 1181.337948][ T8204] asm_exc_invalid_op+0x1a/0x20 [ 1181.342803][ T8204] RIP: 0010:ida_free+0x1f9/0x2e0 [ 1181.347741][ T8204] Code: 7c f6 41 83 fe 3e 76 72 e8 d4 44 7c f6 48 8b 7c 24 28 4c 89 ee e8 77 01 0d 00 90 48 c7 c7 c0 73 cf 8c 89 ee e8 a8 1a 3b f6 90 <0f> 0b 90 90 e8 ae 44 7c f6 48 b8 00 00 00 00 00 fc ff df 48 01 c3 [ 1181.367524][ T8204] RSP: 0000:ffffc90002f37ad0 EFLAGS: 00010282 [ 1181.373609][ T8204] RAX: 0000000000000000 RBX: 1ffff920005e6f5b RCX: ffffffff81797ce8 [ 1181.381589][ T8204] RDX: ffff888027fb0000 RSI: ffffffff81797cf5 RDI: 0000000000000001 [ 1181.389652][ T8204] RBP: 00000000000003e9 R08: 0000000000000001 R09: 0000000000000000 [ 1181.397730][ T8204] R10: 0000000000000001 R11: 0000000000011698 R12: ffff88801e6b0000 [ 1181.405707][ T8204] R13: 0000000000000293 R14: 00000000000003e9 R15: ffff88801e6b0078 [ 1181.413886][ T8204] ? __warn_printk+0x198/0x350 [ 1181.418773][ T8204] ? __warn_printk+0x1a5/0x350 [ 1181.423558][ T8204] ? __pfx_ida_free+0x10/0x10 [ 1181.428341][ T8204] ? lockdep_hardirqs_on+0x7c/0x110 [ 1181.433560][ T8204] ? kmem_cache_free+0x2d4/0x6c0 [ 1181.438689][ T8204] ? cleanup_net+0x49c/0x8b0 [ 1181.443301][ T8204] cleanup_net+0x5ad/0x8b0 [ 1181.447832][ T8204] ? __pfx_cleanup_net+0x10/0x10 [ 1181.452843][ T8204] ? rcu_is_watching+0x12/0xc0 [ 1181.457634][ T8204] process_one_work+0x9cc/0x1b70 [ 1181.462609][ T8204] ? __pfx_cfg80211_wiphy_work+0x10/0x10 [ 1181.468356][ T8204] ? __pfx_process_one_work+0x10/0x10 [ 1181.473757][ T8204] ? assign_work+0x1a0/0x250 [ 1181.478422][ T8204] worker_thread+0x6c8/0xf10 [ 1181.483072][ T8204] ? __pfx_worker_thread+0x10/0x10 [ 1181.488319][ T8204] kthread+0x3c5/0x780 [ 1181.492455][ T8204] ? __pfx_kthread+0x10/0x10 [ 1181.497394][ T8204] ? rcu_is_watching+0x12/0xc0 [ 1181.502180][ T8204] ? __pfx_kthread+0x10/0x10 [ 1181.506779][ T8204] ret_from_fork+0x56d/0x730 [ 1181.511659][ T8204] ? __pfx_kthread+0x10/0x10 [ 1181.516399][ T8204] ret_from_fork_asm+0x1a/0x30 [ 1181.521324][ T8204] [ 1181.524709][ T8204] Kernel Offset: disabled [ 1181.529053][ T8204] Rebooting in 86400 seconds..