last executing test programs: 8m5.971231078s ago: executing program 1 (id=389): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) ioctl$auto_BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0) rseq$auto(&(0x7f0000000040)={0x7, 0x6, 0x6, 0x5, 0x1, 0x98, "1756d588a587fb4d81cc5b58b9fbfc34c9e5d05eaa727a15041987718e5b2183d1d67ca4d6fddeea1d3f3358de9967222bf3b5d33c53a4eb9410775a4a4396bc1a5318e0eb7e5036f388640091"}, 0x9, 0x2, 0x8) ioctl$auto_BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0) writev$auto(0x3, 0x0, 0x8) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_hsr(&(0x7f00000011c0), 0xffffffffffffffff) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) unshare$auto(0x40000080) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000f40)={'batadv0\x00'}) r2 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$auto_BATADV_CMD_SET_MESH(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)={0x14, r2, 0x1, 0x70bd2c, 0x25dfdbfa}, 0x14}, 0x1, 0x0, 0x0, 0x4004000}, 0x140000e4) 8m5.482929716s ago: executing program 1 (id=391): mmap$auto(0x0, 0x8, 0x10001, 0x9b72, 0x2, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r0 = socket(0x2, 0x2, 0x1) connect$auto(r0, &(0x7f00000000c0)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x55) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/devices/platform/i8042/serio0/softraw\x00', 0x141042, 0x0) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x7fffffffefff}, 0x7) connect$auto(0x3, 0x0, 0x10) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f00000000c0), 0x141401, 0x0) clock_adjtime$auto(0xfffffffffffffffb, 0x0) r1 = fcntl$auto_F_WRLCK(r0, 0xfffffff7, 0x1) getsockopt$auto_SO_NO_CHECK(r1, 0xff, 0xb, &(0x7f0000000000)='.*)-#-\x00', &(0x7f0000000040)=0xa) 8m5.210180684s ago: executing program 1 (id=394): openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x400408, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x18, r1, 0x400, 0x70bd29, 0x25dddc02, {}, [@OVS_FLOW_ATTR_PROBE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x200400f0}, 0x800) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x1c, 0x9, 0x63, 0x0, 0x0, 0x0, 0x1000, 0x8, 0x80000000000000a, 0x40000402, 0x9, 0x9, 0xffffffff80000000, 0xd, 0x6, 0x200000100103}) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) write$auto(r0, &(0x7f00000000c0)='\x00', 0x6) mmap$auto(0x0, 0x20009, 0x29b010c0, 0x100000eb1, 0x40000000000a1, 0x8000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r4 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/irq/24/node\x00', 0x10bd82, 0x0) pread64$auto(r4, 0x0, 0x8100000041, 0x3) socket(0x2b, 0x5, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000012c0)='/sys/devices/virtual/ptp/ptp0/n_vclocks\x00', 0x8502, 0x0) r6 = set_tid_address$auto(&(0x7f0000000280)=0xa) setpgid$auto(0x0, r6) write$auto(r5, &(0x7f00000003c0)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x14\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3C\xf8B^`\xf8\xc2\x0e\xfc>\xa1\xc5\x1dc\xb5S\xb0eX\xba\xe2\xb8\x17\xd1?\xec\xa3Rc2U\xc2OD\x1cl\xc6\xf0,4\x84A\x8f\xa0\xecJ\xb7\xfcnDO\n[^\xfc\xee\xf4\x98\xb3:K\x05\xd6ElP\xb1\xdc\xa2cg\xafENM\xb2\x1e\xfe\x0f}\xba\x83\x00\x81\x1at\xbf\x9ezF+x\xec\xe1`Qfm:\xfd\xeek\xa6#\xde\x16\x8f\xe9\xe9\xccbP\xb2z\xe1\xed\x97\x11\xaa\xea@\xee:\r\xb8\xe5\xd9CNG\x94\xe5\xcf\xfc3\xc7Z8\x03\x00\x00\x00\xc9\xe2ny\xa7\xd4\xb5A\x8e\xe2\x87\xf0\x17\x90%c\x1dE\xb1j2\x13\x10\xc2\x98\xeak\xa8\x10\xa0\x0f\xe8\x828\"9\xc1\xf2\xb6\x18\x9atD\xf13\xb2+$\x06q\xd6\x8e\xc18\x85\xd2\xd2\x1f\x97\x1d\xd7\x88\"\x01w\xaa\\\f\x98\xbf\xff\xeb\xceg\xa7\x8e\x84B\x7fn\xddu\xe0i\xd3\xf8\x8e\xf4\x111\x86\xfd\xcb\xa1\xd41\x8cI\xe0\xfa\xb3/(s\xd6\xd8\xcdCr\xf5MZ\xb8\xd4\x97\xae1\xc23ph\x84-@\xd4N_\n\xef\x86\x93T\\x\xf2\xce \xfe\v2E\xcatr\x00\xe5\xd7\xb2\x13\xe6\xd8\xd0\xe1|f\xaa\xadX@!\xc2]\xf9\x80\x9a\x1d\xcbt;\xfew\x14\x92\xc27\xbf\xad\x10\xa4\x93\xcd\xdc\x89\xa15\xe7r\x85\xcc\xd2p?\xf2\x0f`+\xb2\xcb\xf1\xddXw\xd2}Is%x\xbbJx\xebo{\x80\xc6o\x9e\xb2\"\x1c\vzL\"\x880|\v\xe0N\x8f\xd6\x8a\xaf', 0x80001) sendmmsg$auto(r5, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000240)={0x0, 0xe8}, 0x2, 0x0, 0x3, 0xa505}, 0x800}, 0x7, 0x4008) sendmsg$auto_ETHTOOL_MSG_TUNNEL_INFO_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="05100000", @ANYRES16=r3, @ANYBLOB="010028bd7000fedbdf251c000000180001801400020064756d6d793000"/38], 0x2c}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000000) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) move_pages$auto(0x1, 0x400000000f54, 0x0, 0x0, 0x0, 0x8000000000000000) r7 = getpgid(0x0) rt_tgsigqueueinfo$auto(0xffffffffffffffff, r7, 0x8, &(0x7f0000000100)={@siginfo_0_0={0x6, 0xe, 0x5, @_sigchld={r7, 0x0, 0x401, 0x5, 0x3}}}) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x40) execve$auto(&(0x7f0000000180)='./file0\x00', &(0x7f0000000100)=&(0x7f0000000080)='\xac\x00', 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x5, 0x2) 8m2.547765966s ago: executing program 1 (id=405): openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$auto(r0, 0xae60, 0xffffffffffffffff) ioctl$auto(0x3, 0xae41, 0xffffffffffffffff) ioctl$auto_FS_IOC_SETFSLABEL2(0xffffffffffffffff, 0x41009432, &(0x7f0000000180)="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") write$auto(0xffffffffffffffff, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\x00x \xec(\x1d\x98\xe9\xc4\xe8\xfc@6=\xab\xf4\x89\x01\x93\xdc\x19\xffv\'\xa1\xd5\x14\x06S\xae\xadB}\xdf]\x99\xc9\x9f4\xbb\xc5\x81\x9d\x8ak\xdeB\xcbd\xd3\x05\xe4P\x84\xcb\xb8#\x13\nYU\'\x95R\xc8\x9d\xb7*\xe0.\xd2\xdf\x1b\x88D\x8c{k\xcec\xe1\xa2j\xec\xc9\xd2\x98\x94I\x102h\x06\x8c\xa2\xc8\x8a7\xb7t', 0x7ef) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, 0x0, 0xd8200, 0x0) socket(0xa, 0x1, 0x100) pread64$auto(0xffffffffffffffff, 0x0, 0x7ff, 0x400) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x40001, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0xf1, 0x2, 0x8000) socket(0x2, 0x3, 0xa) r1 = gettid() process_vm_writev$auto(r1, 0x0, 0x3, 0x0, 0x4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) landlock_create_ruleset$auto(&(0x7f0000000000)={0x6, 0x400000000000400, 0x9}, 0x9, 0x0) open_by_handle_at$auto(0xffffffffffffffff, 0x0, 0x42) unshare$auto(0x40000080) r2 = open(&(0x7f0000000080)='.\x00', 0x400, 0x408) getdents$auto(r2, 0x0, 0x400018) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/fib_triestat\x00', 0x0, 0x0) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r3, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x85) close_range$auto(0x2, 0x8, 0x0) shmget$auto(0x4, 0x6, 0xffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'veth1_to_team\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_MODULE_FW_FLASH_ACT(r4, 0x0, 0x400c080) 8m1.614533404s ago: executing program 1 (id=411): mmap$auto(0x8, 0x6f7d34fa, 0x4, 0x3fd, 0xffffffffffffffff, 0x8000) unshare$auto(0x40000080) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x200000, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/dummy0/carrier\x00', 0xc2061, 0x0) write$auto(r0, &(0x7f00000003c0)='1\xff\xff\x00\x01\x8b\v\xd5\x11\x96\xec\x84\x05K:\xe45\x8a)\xff\xff\xff\xff\x00\xe7(\xf0\xa0\xff\xedV\xaaQ}\x89\xf1qod\xaa\x15\x0f\xaa\x19\xe78I\xb3v\x06\xc2\xa7\xb4\xbd', 0x81) mmap$auto(0x0, 0x40000b, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x4, 0x15) fchdir$auto(0xffffffffffffffff) pselect6$auto(0x3, &(0x7f0000000040)={[0x1000, 0x0, 0x8, 0x7, 0x5, 0x7, 0x3, 0x6, 0x0, 0x9, 0x8, 0x4, 0x6, 0x5, 0x1, 0x100000001]}, &(0x7f00000000c0)={[0x2, 0x9, 0x4, 0x5, 0x1, 0xc53, 0x7, 0x8c8, 0x8, 0xe4, 0x8, 0x4, 0x6, 0x0, 0x1, 0xc]}, &(0x7f0000000140)={[0xca, 0xfffffffffffffffd, 0x6, 0x7, 0x3, 0x20, 0xbb, 0x0, 0x800, 0x0, 0xf67, 0xa, 0x100000000, 0x1, 0x7ff]}, &(0x7f0000000200)={0x40000000000000, 0x2}, &(0x7f0000000240)="76e10d367d2415435f9a38b9c677dec5da964230172cee43529184032e73f06c39eb73d788c449a95e534c88ce7d6d741ed9e816e606dbda8724c0dd52d2d1719326642ed1665c73c18753c92d0404d0a65a4bd9c32222b8ccfca69e92f3a322da9421254d089bba40e01e0d4691bc01e16e4d5a0603ac0375a038c39649b96baed3172ab5138e152667aee1187261f35669cd6b4031a9d314590dad61b3bce9b0b020177a875b7e7f249bb4eb839e4c75b3528f16875021f4a647768c121f1cde19467816caf08e1c74627f97e375854cd53d841209be982702144b2612587c20f56a91c8d4c0fd8df21b0212699f") mkdir$auto(0x0, 0x6) r1 = bpf$auto(0x0, 0x0, 0x6f3) arch_prctl$auto_ARCH_REQ_XCOMP_PERM(0x1023, 0x7) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x6, 0x0) tkill$auto(0x1, 0x7) keyctl$auto_KEYCTL_SESSION_TO_PARENT(0x12, 0x0, 0x0, 0x0, 0x48eafc79) sendmsg$auto_TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24004044}, 0x10000000) io_uring_register$auto(0x2, 0x22, &(0x7f0000000400)="e4adbe73458d11eb53ae5a22e43d75dcae53dd82efecbed5fd58f13872057a06f22fc454ff7980945be42c240aa3e5251e2b216c1f71bcc8244fc3cdbcc26c126b1997e165a331f7e247d799acf08bec426a46e2a53c4c07373662e832dc37b4359220e70365226e00fa12ab25db04601b6917c8140239ff32dcf3a5ed5b55296e0c224e530957352b7abc475343307d3ba441feb7ced9613f818cf457532d564b50035dca", 0x1) r2 = socket(0xa, 0x2, 0x88) r3 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/cgroup\x00', 0x420, 0x0) read$auto_proc_single_file_operations_base(r3, &(0x7f0000000040)=""/9, 0x9) ioctl$auto_USB_RAW_IOCTL_EP_WRITE(r1, 0x40085507, &(0x7f0000000340)={0x5, 0x8, 0x4, "a4cc8d4df580d9e94392f4dae021d6fe496641758443e7cdfc848b9bd2557c0b70948e9cd86d35f999bb13ab08bbf215c47a86a8dee7057561bcffc01fdbf0ec59276003eaaad9538a"}) bpf$auto(0x0, 0x0, 0xa3) mmap$auto(0x5, 0x4020008, 0x1001, 0xeb1, r2, 0x8003) madvise$auto(0x0, 0xffffffffffff0005, 0x19) socket(0xa, 0x1, 0x84) 8m0.677200092s ago: executing program 1 (id=415): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/virtual/block/loop0/queue/add_random\x00', 0x68282, 0x0) sendfile$auto(r2, r2, 0x0, 0xcd) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000e3d9) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x4) mmap$auto(0x0, 0x40000a, 0xdd, 0x9b72, 0x2, 0x0) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x2020009, 0x2, 0xf8, 0xfffffffffffffffa, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x1206c2, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_KVM_GET_SUPPORTED_CPUID(r4, 0xc008ae05, &(0x7f0000000100)={0x3fd}) ioctl$auto_BLKRRPART(r3, 0x125f, 0x0) r5 = openat$auto_fops_x16_ro_(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy1/netdev:wlan1/dormant_links\x00', 0x802, 0x0) read$auto(r5, &(0x7f0000000040)='\x00', 0x8) shmctl$auto(0x14000000, 0x4, 0x0) unshare$auto(0x40000080) mmap$auto(0xfffffffffffffffa, 0xe983, 0xdf, 0xeb1, r0, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x103e81, 0x0) r6 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x0, 0x0) openat$auto(r1, &(0x7f0000000240)='./file0\x00', 0x6, 0x226c) ioctl$auto_TCFLSH2(r6, 0x5408, 0x0) read$auto_i2cdev_fops_i2c_dev(0xffffffffffffffff, 0x0, 0x0) 8m0.429530205s ago: executing program 32 (id=415): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/virtual/block/loop0/queue/add_random\x00', 0x68282, 0x0) sendfile$auto(r2, r2, 0x0, 0xcd) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000e3d9) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x4) mmap$auto(0x0, 0x40000a, 0xdd, 0x9b72, 0x2, 0x0) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x2020009, 0x2, 0xf8, 0xfffffffffffffffa, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x1206c2, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_KVM_GET_SUPPORTED_CPUID(r4, 0xc008ae05, &(0x7f0000000100)={0x3fd}) ioctl$auto_BLKRRPART(r3, 0x125f, 0x0) r5 = openat$auto_fops_x16_ro_(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy1/netdev:wlan1/dormant_links\x00', 0x802, 0x0) read$auto(r5, &(0x7f0000000040)='\x00', 0x8) shmctl$auto(0x14000000, 0x4, 0x0) unshare$auto(0x40000080) mmap$auto(0xfffffffffffffffa, 0xe983, 0xdf, 0xeb1, r0, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x103e81, 0x0) r6 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x0, 0x0) openat$auto(r1, &(0x7f0000000240)='./file0\x00', 0x6, 0x226c) ioctl$auto_TCFLSH2(r6, 0x5408, 0x0) read$auto_i2cdev_fops_i2c_dev(0xffffffffffffffff, 0x0, 0x0) 5m30.485551944s ago: executing program 0 (id=1018): r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x10, 0x2, 0x14) socket(0x11, 0x80003, 0x300) socket(0x1d, 0x2, 0x7) socket(0x2, 0x1, 0x0) socket(0x10, 0x2, 0x0) socket(0x1d, 0x2, 0x7) socket(0xa, 0x2, 0x73) mremap$auto(0x0, 0x4000007, 0x3fd7, 0x0, 0x20000020000000) socket$nl_generic(0x10, 0x3, 0x10) socket(0x6, 0x4, 0x802) socket(0xa, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x14) write$auto(r0, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) pselect6$auto(0x400, &(0x7f0000000000)={[0x8, 0x4, 0x40000000000000, 0x6, 0x7fffffff, 0xffffffffffffffff, 0xfff, 0x6, 0x3, 0xffffffff, 0x8000000000000001, 0x0, 0x2f, 0x2, 0x8, 0xfffffffffffffffe]}, 0x0, 0x0, 0x0, 0x0) close_range$auto(0x0, 0xffffffffffffffff, 0x6) 5m29.770479919s ago: executing program 0 (id=1020): close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x200006, 0xa, 0x40eb1, 0x602, 0x300000000000) r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000440), r0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'ipvlan1\x00'}) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000300)={{&(0x7f0000000140), 0x12, 0x0, 0x7, 0x0, 0x3, 0x1}, 0x7}, 0x8, 0x7fff) 5m29.583269305s ago: executing program 0 (id=1021): unshare$auto(0x40000080) mmap$auto(0x2, 0x8, 0x40004000000000db, 0x8000000000000012, 0x400, 0x8001) setsockopt$auto_SO_TIMESTAMPNS_NEW(0xffffffffffffffff, 0x4, 0x40, &(0x7f0000000480)='/Eev\n\x0e\xcf^+\xf3\xc4Y\x84\xf4\xe4\x98/audio1\x00VI\xa3\xaa\xb1;\x9d\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9abN\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953\x01\x9f.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4re\x90\xc0\xbf\xcem\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\x12w\xd7\x99\x8c\xbe\x8f\x1dI\xe2\xae8\x83\xcf\xc5D\xcc\x00', 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000780)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="010800000000000000254500000008000300", @ANYRES32=r0], 0x1c}, 0x1, 0x0, 0x0, 0x4000895}, 0x24000004) sendmsg$auto_ETHTOOL_MSG_MODULE_FW_FLASH_ACT(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="05000000b8a1bf0f718bc6400000007c4a9f61a44b", @ANYRES16=0x0, @ANYBLOB="000425bd7000fedbdf252c0000000c00018008000300090000000800030000004000"], 0x28}, 0x1, 0x0, 0x0, 0x20000810}, 0x20040011) r1 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) sendmsg$auto_THERMAL_GENL_CMD_THRESHOLD_FLUSH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001bc0)=ANY=[@ANYRESDEC=r1, @ANYRES32=0x0], 0x2bc4}, 0x1, 0x0, 0x0, 0x20008010}, 0x24000080) write$auto_console_fops_tty_io(r1, &(0x7f0000000440)="671d2647dd69b6440843b6e6688a2b5ad9df2669e6f9cd2365", 0xfdef) mmap$auto(0x0, 0x80000001, 0x7, 0x17, r1, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x9, 0x1, 0x44f, 0xa, 0x5, 0x1007181, 0x8a0d, 0x7, 0x7, 0x9, 0x0, 0x26, 0x4, 0x200004000001, 0xfffffffffffffff5, 0xfffffffffffffffa, 0x0, 0x5, 0x0, 0x0, 0x862, 0xe, 0x22000, 0x200, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b1, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1000000000, 0x9, 0x1, 0x0, 0x0, 0xb]}, 0xb, 0xd) r2 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r2, 0xfffffff7effffd0c, &(0x7f00000001c0)) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x40040, 0x0) listmount$auto(0x0, 0x0, 0x7fffffffffffffff, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D2\x00', 0x0, 0x0) r3 = openat$auto_uhid_fops_uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2201, 0x0) ioperm$auto(0x7, 0x5ad2, 0x8) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000200)={{@raw=0x4, 0x0, 0x1000004, 0x480808, "3112d58500a8b47148e22af9ffb683dbede3d0bf828bbf100000e5e2f96ee50484b0755015e48d00", @inferred=0xffffffffffffffff}, 0x2, 0xc, 0x4, @inferred, @reserved="196c056a347704def6f5c5636ed52c07609cee4319588cd9a11ad396065c1267314ab73ce54c205a43297cf5b6310383212fdbb93e51da48edd9350aa935db0d5d6e32e39d8f68ee55f32c5de7b40a4ceb3840920880cbb9fc246ea65af96a74482a52e660cfc6828ba8c9404d70b947a06c9927ba7f1beed137c48265c74c8d", "7a9fc199a16a2311eacf2fc7ae1da978dc3e8090d70925450ece0bb32777702b07552d000000000000000000ebff0000000000000059a200"}) getuid() rt_sigqueueinfo$auto(0x0, 0xffff7b6b, &(0x7f0000000180)={@_si_pad}) r4 = socket(0x11, 0x3, 0x9) sendmmsg$auto(r4, 0x0, 0x9, 0x100) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121900, 0x0) r5 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/fs/netfs/caches\x00', 0x102, 0x0) pread64$auto(r5, 0x0, 0x100000001, 0x100) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x40000000001ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x7, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) unshare$auto(0x40000080) 5m28.029951975s ago: executing program 0 (id=1025): madvise$auto(0x4000000, 0xffffffffffff0085, 0x1004) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000002340)='/dev/binderfs/binder1\x00', 0x0, 0x0) dup$auto(r0) socket(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_taskstats(&(0x7f0000000140), 0xffffffffffffffff) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) r1 = clone$auto(0x6db, 0x9, 0x0, 0x0, 0x6) migrate_pages$auto(r1, 0x4, 0x0, &(0x7f0000000180)=0x2) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0xc, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x101, 0xffffffffffffffff, 0x3, 0x62, 0x5, 0x7, 0x6d3f, 0x8, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r2, &(0x7f0000000080)='/dev/audio1\x00', 0x100000a3d9) select$auto(0x11, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0xa73, 0xd, 0x801, 0x958b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x40008000001f, 0x7, 0x6d3e, 0x6, 0x2, 0x10000]}, 0x0) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x3, 0x2020009, 0x6, 0xeb1, 0xffffffffffffffff, 0x6) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000100)={'\x00', 0x3, 0x6, 0x4, 0x9b4, 0x200000c, "0800aafc241cd010c7543bfbca2ce1", "d710c7a3", '\x00\x00 \x00', "2ff43123", ['\x00\x00\x00\a\x00', "e8fd0b00fbf2852d28dab401", "0004154db00b0004000400"]}) sysfs$auto(0x2, 0x23, 0x0) r3 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) write$auto(r3, 0x0, 0x4) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) capset$auto(&(0x7f0000000040)={0x6, r1}, &(0x7f00000000c0)={0x8, 0x400, 0x1}) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range$auto(0xffffffffffffffff, 0x8, 0x1) 5m26.42502936s ago: executing program 0 (id=1027): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socket(0x15, 0x80000, 0x85) r0 = socketpair$auto(0x1, 0xfffffffe, 0x10000006, 0x0) setsockopt$auto(r0, 0x9, 0x1d, 0x0, 0x9) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x8000000401, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) r1 = socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) shutdown$auto(0x200000003, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000005c0), r2) sendmsg$auto_ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f0000003680)={0x0, 0x0, &(0x7f0000003640)={&(0x7f00000036c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYBLOB="2ed79c6010feb0"], 0xfffffffffffffe07}, 0x1, 0x0, 0x0, 0x10}, 0x20000810) r4 = getpid() process_vm_readv$auto(r4, &(0x7f0000000600)={0x0, 0x10000000fff}, 0x800000001, &(0x7f0000000280)={0x0, 0x1ffffffff}, 0x6, 0xfffffffffffffffc) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/netdevsim0/del_port\x00', 0xa001, 0x0) write$auto(r5, &(0x7f0000000380)='0\x81=\"\xad/\x8d\b\x00\x18\xa4\xb0\xb4\xd9\x82=~\x17\xfb&L\xeb=j\a\xf1y\xb3\"\xeb\a\xdd\xf4\xf4Ry\xee\xd7\x1e\x1c\x86\x0f\xcf\x7f\xbf\xab\x12{\xc2\xc2*\xc1M+6/v8\xea\xe9\x85s4\xfe\xe5\t\x7fc\xfb7^\xb86J_\x1d1s!\x01\xff\xff\xff\xff\xff\xff\xff\x1dF\xe6\xf6\x17\x10+\xc0\xb0\xafc\x99\xd4\x150Y~\x1e\xe2\xd6x4fW\x13\xc4U`\x9e-X\xd7\xe2H^\fLS`\xfc\xbb\r\f\x00\xeaN\xa5\xd2\x82;\x7f\xa0.\x9a\xfb\x8d\xf3l\xf2\xd3\x95\xc1M5\xcb\xa6I\x067\xe36\xea\xe9\xe3\xf44oT_`8\xb3\xef\x04 \x05K\xf9\x87pl\xac\x86\nE\xc7e\xc5Q\x89\xcd@\x1c\x92\x00\x87\x976\x9f>\xa2\xcfm\xec\r\x11\x7f\x00\x00\x00\xb1\xde@\x02\xce\x03\xb7\xb1\xfb\x9fr\v\xb2\xe3\xc7\b\x85K /zm\x7f\x8fg,p\a\xc8\x7f\xa5\x87\x02\x87\xbbR=A\x00\x1f\x8a\xa7/Q\"J\xbb\xb0m\xf2SP\x84\x84S\xf0\xba\x9a\xf6\xb6`WI\xba\xba*8\x9f\xea\xe8K/\x98\xbc7~>\x12\x9buB\xcb\xe4\x8aKf\xba\x8c\x19m\xe6I\x02\xde\x80\x9d\x87}\xf4\xbd9\xaa\xd6\xdb1]\xde\xa0r\x14\xca56^\x94\xd2\xd8\xe6}9\x91\xb6\xf7\xa1=\x96\x11\xf1\\\xa91\x0e\xd1\xe4z\xc1;Pw!\x8b\xf5{\xc7Xd\xf1\xf2}\x96EVf\xc9\xa8\xcd\xe4\xc9\x8d\x1d7\xd5\x94\\\xb5\r\xd2\xaa\xe6H\xfe)\xb3a\x04\x1eRMl\xa3F\xa8W0\x90\xc9Ky#\x03\xf5~\xd2Z\xe9(\x99\b\x00M\xde\x01]\r\xd09k\xc2\x84\xc1\xabN\x96\x8a6\x98@\xd3\xab\xa8m\xdf\x8d\x1d\b\x82\xfcP\x87\x93\x80\x97Q\x86\x8a\x9c\xf8L\x0f\xa8@VE2\x9d\x1e`#\xd8\xd7M\xd4k1\xe6\x13Y\\\x83E\xd0e\x0eM\xa9Q\xac\x0e\x1d]\a\x19H\x81\xd2\xccF\xc6\xd4\xe2R$\xfa\xd6}\xbdsN\x18\xdf\xf5\xffP\xf5\f\xccL\xef\x83\xb3$\xd4\xf4\xb5\xe6\xd0 \xb9\xa7\x8e6\t\x83q\xef\b\xd2\xdb', 0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000001d40), 0xffffffffffffffff) sendmsg$auto_BATADV_CMD_GET_TRANSTABLE_GLOBAL(r6, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="c79f25ffdbdf2592fa1293ec0cd2"], 0x14}, 0x1, 0x0, 0x0, 0xc031}, 0x44) fstat$auto(0xffffffffffffffff, &(0x7f0000000100)={0x5, 0xa0, 0x2, 0x8, 0xee00, 0xffffffffffffffff, 0x0, 0x4, 0xc, 0x8, 0x0, 0x5, 0xe6, 0x7, 0x4, 0xbd2, 0x1}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$auto_macsec(&(0x7f00000001c0), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'veth1_vlan\x00', 0x0}) sendmsg$auto_MACSEC_CMD_UPD_OFFLOAD(r9, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000012c0)=ANY=[@ANYBLOB="44010000", @ANYRES16=r10, @ANYBLOB="01002dbd7000fddbdf250a00000008000100", @ANYRES32=r12, @ANYBLOB="280109800c00"], 0x144}, 0x1, 0x0, 0x0, 0x4040085}, 0x0) shmctl$auto_IPC_INFO(0x5e5, 0x3, &(0x7f0000000300)={{0xfffffa7e, 0xee00, 0xee00, 0xfff, 0x10, 0x7cf, 0x1}, 0x9, 0x6, 0x96, 0x6a5d, @raw=0x5, @raw=0x4, 0x8, 0x0, &(0x7f00000001c0)="d5ac9568cc7c716f32238224cbf60830b8cfcb744f633eb776be2649581f02442ff769e73c25d7d0153baf209d2dbe22a335e97ba896b32a1c4afe605fcd6d1e1f2c4014af3f20c2be2267a5cc26f3b66dbe4d7a5524802db00f1695bd726b52732f0f90f4eb92ca254a3317dc86abbca2895ac1714e", &(0x7f0000000240)="a0902493943840ac308ae642599910f4ebcea3885b1847f04be011821c3c14afbb3260ba25257adea3e842b1d9a46c50e35407121638630d870f6bb94dae2d8752d4b578340210381573b964cfb7029590"}) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r1, &(0x7f0000000d00)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000001300)=ANY=[@ANYBLOB="10090000", @ANYRES16=r3, @ANYBLOB="000426bd7000fddbdf251b0000001c0002801800e7800800cc00", @ANYRES32=r4, @ANYBLOB="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", @ANYRES32=r6, @ANYBLOB="4b9888f301e1c5ed9ff5182b9a99b21028255ecc944be42bcca1e72b57af7cd6cc6e55696725645ca817c469018bdf529f2d337edb4eed6d66270f506037f3accea575b4cc5c4582a25e90f8b2b30a76c1e05b3e3368b285011a949a879f29643d75256ebcc8436e885d289838c674a26ece0a0b89b9b7895a12dbb2f14c6aa305ae71367518a16d34c5b5d5b4bad0efad02e9542161fa09747cbf00b5f76e1b8033e78a9dfa850e87b376f5563effbe4cb9b0e4e124fbdfc050aa401fe6619013049054ab1c188aaf8960444df2f85aff08008b00", @ANYRES32=r8, @ANYBLOB="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", @ANYRES32=r12, @ANYBLOB="08000400ff0100007204028008002500ef83fe319c494f198ca06b100f173cb232f53cde2204057f4752479ae65f42b907f15432794c5b2f7cfefcd949185f8095fba2b45670f7180521e195dcc87a54fc0f424ee5e085e958dc38866f1d0cc55d4d0a9df463dcf3d068614db10d735aa28f71f3b0b7a272082012796b68eb4674dd6252425b9af404e105075778303a555c741cb004adb41a68ce431bd3cfbee8b3cc4f1a58736c5ce180082b7f6a06ff4fd3d0f17fa072d8ae168370111bca22c9f9ee5091bf746984ac3418dbef309c7872f8f5921aac283a954dc9c0a0a003e28008001300", @ANYRES32=r13, @ANYBLOB="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"], 0x910}}, 0x800) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) sendmmsg$auto(0x3, &(0x7f00000000c0)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 5m26.005976162s ago: executing program 0 (id=1028): mmap$auto(0x0, 0x20000000005, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) (async) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) mmap$auto(0x0, 0x400, 0xdf, 0xeb1, 0x401, 0x8000) (async) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (async) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0xa, 0x0) (async) socket(0xa, 0x2, 0x0) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x42, 0x0) write$auto(r0, 0x0, 0xa3d9) r1 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, 0x0, 0x20401, 0x0) write$auto_proc_mem_operations_base(r1, &(0x7f0000001680), 0x0) madvise$auto(0x1ffff000, 0x7, 0x100000000) mmap$auto(0x0, 0x400008, 0xb, 0x9b72, 0x2, 0x8000) (async) fsopen$auto(0x0, 0x1) shmget$auto(0x8, 0x10563, 0x568d1af2) (async) ioperm$auto(0x7, 0x6, 0x2) 5m10.788972676s ago: executing program 33 (id=1028): mmap$auto(0x0, 0x20000000005, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) (async) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) mmap$auto(0x0, 0x400, 0xdf, 0xeb1, 0x401, 0x8000) (async) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (async) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0xa, 0x0) (async) socket(0xa, 0x2, 0x0) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x42, 0x0) write$auto(r0, 0x0, 0xa3d9) r1 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, 0x0, 0x20401, 0x0) write$auto_proc_mem_operations_base(r1, &(0x7f0000001680), 0x0) madvise$auto(0x1ffff000, 0x7, 0x100000000) mmap$auto(0x0, 0x400008, 0xb, 0x9b72, 0x2, 0x8000) (async) fsopen$auto(0x0, 0x1) shmget$auto(0x8, 0x10563, 0x568d1af2) (async) ioperm$auto(0x7, 0x6, 0x2) 10.853720923s ago: executing program 4 (id=2055): sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) r0 = openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/devices\x00', 0x600, 0x0) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/fs/cifs/Stats\x00', 0x28102, 0x0) readv$auto(0x3, 0x0, 0x1) mmap$auto(0x0, 0x2020005, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) madvise$auto(0x110c230000, 0x1, 0x9) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x28c000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cpu/0/msr\x00', 0x181f82, 0x0) mmap$auto(0x0, 0x20009, 0xe0, 0xeb1, 0xffffffffffffffff, 0x4) write$auto(r1, 0x0, 0x8000000000000001) readv$auto(r2, &(0x7f00000000c0)={0x0, 0x101d0}, 0x400) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty46\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$auto_ovs_vport(0x0, 0xffffffffffffffff) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004340)={&(0x7f00000041c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010028bd7000fbdbdf2502000000080000000000", @ANYRES32=0x0, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0x80) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mmap$auto(0x13000000, 0x2000d, 0x4000000200df, 0xeb1, 0x404, 0x8000) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0xa901, 0x0) preadv$auto(r0, &(0x7f0000000080)={0x0}, 0x6, 0x22, 0xffc) inotify_init1$auto(0x5) 9.141906554s ago: executing program 4 (id=2059): sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) r0 = openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/devices\x00', 0x600, 0x0) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/fs/cifs/Stats\x00', 0x28102, 0x0) readv$auto(0x3, 0x0, 0x1) mmap$auto(0x0, 0x2020005, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) madvise$auto(0x110c230000, 0x1, 0x9) mmap$auto(0xf000000, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x28c000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cpu/0/msr\x00', 0x181f82, 0x0) mmap$auto(0x0, 0x20009, 0xe0, 0xeb1, 0xffffffffffffffff, 0x4) write$auto(r1, 0x0, 0x8000000000000001) readv$auto(r2, &(0x7f00000000c0)={0x0, 0x101d0}, 0x400) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty46\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$auto_ovs_vport(0x0, 0xffffffffffffffff) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004340)={&(0x7f00000041c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010028bd7000fbdbdf25020000000800"/26, @ANYRES32=0x0, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0x80) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mmap$auto(0x0, 0x2000d, 0x4000000200df, 0xeb1, 0x404, 0x8000) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0xa901, 0x0) preadv$auto(r0, &(0x7f0000000080)={0x0}, 0x6, 0x22, 0xffc) inotify_init1$auto(0x5) 8.710482978s ago: executing program 2 (id=2061): ioctl$auto_USBDEVFS_SETINTERFACE(0xffffffffffffffff, 0x80085504, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/io.pressure\x00', 0x80000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000240)=""/127, 0x7f) r1 = openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, 0x0, 0x80000, 0x0) sched_getscheduler$auto(0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) close_range$auto(0x2, 0x8, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x10, 0x2, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="9f2c989d3fec2dd8c315e1e29b5cd344406209", @ANYRES16=0x0, @ANYBLOB="02002cbd7000fbdbdf2502000000"], 0x14}, 0x1, 0x0, 0x0, 0x20008010}, 0x400d0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a0027"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="19"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f0000000000)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x1}, 0x2, 0x60) sendmsg$auto_BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=ANY=[@ANYBLOB="6a580000747c0637d052b76f086b0710befac1c38ac90fa060739bb3a830b28831c53d790f7939cf3170141f2b4c524f18db651f78824fea9a89ab1a5abd7967171c9c5deb8dffffffffed54bf3cab56a79087022d3b529a27d14b24a1b01e222b9bfbdb52fe80418a984ebd9fa9c6d179a9de3fe0722ce191dfea9c1a9a1a528d64545d361ae31bb88c963b345fecf316979bbfe63f720af79503808d0626508e918f536e284a64176fe974afd949a430cc485e48de055fdb12a76c72c32b88a0aa13cf40cb385441223d48340cb5415751cea221f4bbf3cbdf", @ANYRES16=r3, @ANYBLOB="57e72cbd700003dcdf250d00000008000300", @ANYRES32=r4, @ANYBLOB], 0x1c}}, 0x10) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="64000400", @ANYRES16=r3, @ANYBLOB="040027bd7000fddbdf250200000005000a00f70000000a001f000180c2000003000008001b000100008008001a000200000008003b00040000000a001000ffffffffffff000008001b000300000008003a000700000008003400f7ffffff"], 0x64}, 0x1, 0x0, 0x0, 0x40004004}, 0x4001) mmap$auto(0x0, 0xc, 0x9c0f, 0x44eb2, 0x10006, 0x300000000000) socket(0x2, 0x3, 0x6) socket(0x1e, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f00000000c0), 0x4, 0x0, 0x4, 0x0, 0x1f, 0x40003ff}, 0x800009}, 0x1ff, 0x3) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/platform/dummy_hcd.0/usb1/1-0:1.0/usb1-port1/quirks\x00', 0x103a42, 0x0) r5 = openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f0000000440), 0x20100, 0x0) ioctl$auto_LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000580), 0x2802, 0x0) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) 8.199691869s ago: executing program 3 (id=2062): mmap$auto(0x0, 0x2020005, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) memfd_secret$auto(0x0) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) ftruncate$auto(0x3, 0x700) get_robust_list$auto(0x0, 0x0, 0x0) socket(0x2, 0x3, 0x100) mbind$auto(0x0, 0x800605, 0x8003, &(0x7f0000000100)=0xfffe, 0x3, 0x3) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x9) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r0, 0x540e, 0x1) setsockopt$auto(0x400000000000003, 0x29, 0x1c, 0x0, 0x56b) r1 = openat$auto_proc_pid_numa_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/numa_maps\x00', 0x20000, 0x0) read$auto_proc_sessionid_operations_base(r1, &(0x7f00000000c0)=""/4073, 0xfe9) 7.824255158s ago: executing program 3 (id=2064): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/v4l-subdev3\x00', 0x16ba00, 0x0) socketpair$auto(0x1, 0x0, 0x0, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0xc7f16bff2a10ba01, 0x0) ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x101e81, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) 7.681486309s ago: executing program 5 (id=2065): socket(0x2, 0x1, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = socket(0x2, 0x1, 0x0) fcntl$auto(0x3, 0x4, 0xa553) madvise$auto(0x0, 0x2000040080000004, 0xe) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x0, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x200007, 0x19) syslog$auto(0x3, 0x0, 0x5) getpriority$auto_PRIO_USER(0x2, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @dev={0xac, 0x14, 0x14, 0xd}}, 0x6a) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x5, 0xf) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_MESH_CONFIG(r0, 0x0, 0x40) mmap$auto(0x1, 0x400009, 0x870, 0x9b73, 0x2, 0x8000) mmap$auto(0x0, 0x400004, 0xdf, 0x9b76, 0xfffffffffffffffe, 0x8000) msgrcv$auto(0x0, 0x0, 0x100000001, 0x4, 0xf4) msgsnd$auto(0x400, &(0x7f0000000300)={0x1, 0x7}, 0x1, 0xb) socket(0x2, 0x3, 0xa) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x61, 0x100001000000004, 0xfa31, 0xffffffffffffffff, 0x8000) mremap$auto(0x0, 0xbdb2, 0xffffffff00000000, 0x3, 0x7fffffffb000) setsockopt$auto(0x3, 0x10000000084, 0x2, 0x0, 0x8) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) 7.567714299s ago: executing program 3 (id=2066): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x2, 0x1, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0x401, 0x8000) syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) bind$auto(0x3, 0x0, 0x6a) setpgid$auto(0x0, 0xffffffffffffffff) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) syz_clone(0x2360411, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/irq/2/name\x00', 0x800, 0x0) read$auto(r2, 0x0, 0x1) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x9, 0x1f, 0x940, 0x1ffde, 0x3, 0x6, 0x8000003, 0x9, 0x6, 0x0, 0x4, 0xb0, 0x7, 0x200, 0x3, 0x205, 0x7, 0x0, 0x3ffff, 0x0, 0x3, 0x7069, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, [0x0, 0x0, 0x0, 0x8, 0x5, 0x8000004, 0x0, 0x100000000000000, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x100000000, 0x0, 0x8000000000000001, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x4, 0x0, 0x0, 0x2000000000000000]}, 0x203, 0x7d) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[], 0x3c}}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) r3 = socket(0x10, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_IOAM6_CMD_ADD_SCHEMA(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000480)={0x20, 0x0, 0x1, 0x70bd2a, 0x25dfdbfb, {0x4, 0x0, 0x900}, [@IOAM6_ATTR_SC_DATA={0x4}, @IOAM6_ATTR_SC_ID={0x8, 0x4, 0x9}]}, 0x20}, 0x1, 0x3000700, 0x0, 0x1}, 0x8010) sendmsg$auto_IOAM6_CMD_DEL_NAMESPACE(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, [@IOAM6_ATTR_NS_ID={0x6, 0x1, 0xf}, @IOAM6_ATTR_NS_ID={0x6, 0x1, 0x81}]}, 0x24}}, 0x4000000) sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x0, 0x33, 0x0, 0x4) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) 7.519737368s ago: executing program 2 (id=2067): r0 = socket(0x11, 0x3, 0x9) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r1, &(0x7f0000000080)='/dev/audio1\x00', 0x100000a3d9) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_tcp_metrics(&(0x7f0000000ac0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder0\x00', 0x200, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r5, 0x4b45, r4) sendmsg$auto_TCP_METRICS_CMD_GET(r3, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000040)={0x14, r2, 0x89c1beb01534ff9b, 0x70bd29, 0x25dfd3f9}, 0x14}, 0x1, 0xffff0000, 0x0, 0x4}, 0x0) unshare$auto(0x40000080) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x80883, 0x0) select$auto(0xf, 0x0, &(0x7f0000002400)={[0x100000000000001, 0x400, 0xfffffffffffffffc, 0x8, 0x200000000000027f, 0xe0d3, 0x4, 0x17c750d60, 0xfffffffffffffac1, 0x106, 0x8000, 0x8000000000000000, 0x0, 0x10001, 0x2, 0x24f]}, &(0x7f0000002480)={[0xf, 0x5, 0x8, 0x4, 0x6, 0xffffffffffffff7a, 0x8, 0x45f6c183, 0xaeb, 0x3, 0x3, 0x8, 0x8000, 0x0, 0x8000000000000001, 0x1]}, 0x0) sendmmsg$auto(r0, &(0x7f00000001c0)={{&(0x7f0000000000), 0x200005ac, &(0x7f0000000480)={&(0x7f0000000240)="4c0c580000000000090000000000000007a4bac083077e", 0x49}, 0x4, &(0x7f00000003c0)="cdc576166b8d", 0x7, 0x11}, 0x5}, 0x2, 0x100) mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x8000000000000003, 0x8000) setsockopt$auto(0xffffffffffffffff, 0x0, 0x20, 0x0, 0x8) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001180), 0xffffffffffffffff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) settimeofday$auto(&(0x7f0000000180)={0x100000001, 0x1}, 0x0) clock_gettime$auto(0x0, 0x0) r6 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) ioctl$auto_TIOCSETD2(r6, 0x5423, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000001840), r7) sendmsg$auto_NL80211_CMD_DEL_NAN_FUNCTION(r0, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x78, 0x0, 0x20, 0x70bd27, 0x25dfdbff, {}, [@NL80211_ATTR_TXQ_QUANTUM={0x8, 0x10c, 0x4}, @NL80211_ATTR_UNSOL_BCAST_PROBE_RESP={0xc, 0x127, 0x0, 0x1, [@NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_INT={0x8, 0x1, 0x2}]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x16, 0x13, "f411c2dd7d780703597f020f1720cb34d2ad"}, @NL80211_ATTR_MESH_ID={0x18, 0x18, "cec00f4dc66cb9390c2b15e619dcdbfd50da1418"}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x6}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0xfc00}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x1}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6}]}, 0x78}, 0x1, 0x0, 0x0, 0x4}, 0x96) sendmsg$auto_MACSEC_CMD_UPD_TXSA(r7, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000018c0)={0x24, r8, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@MACSEC_ATTR_SA_CONFIG={0x8, 0x3, 0x0, 0x1, [@typed={0x4, 0x1}]}, @MACSEC_ATTR_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x200480c7}, 0x80) 6.574538292s ago: executing program 5 (id=2068): sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) r0 = openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/devices\x00', 0x600, 0x0) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/fs/cifs/Stats\x00', 0x28102, 0x0) readv$auto(0x3, 0x0, 0x1) mmap$auto(0x0, 0x2020005, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) madvise$auto(0x110c230000, 0x1, 0x9) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x28c000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cpu/0/msr\x00', 0x181f82, 0x0) mmap$auto(0x0, 0x20009, 0xe0, 0xeb1, 0xffffffffffffffff, 0x4) write$auto(r1, 0x0, 0x8000000000000001) readv$auto(r2, &(0x7f00000000c0)={0x0, 0x101d0}, 0x400) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty46\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$auto_ovs_vport(0x0, 0xffffffffffffffff) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004340)={&(0x7f00000041c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010028bd7000fbdbdf2502000000080000000000000000", @ANYRES32=0x0, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0x80) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mmap$auto(0x13000000, 0x2000d, 0x4000000200df, 0xeb1, 0x404, 0x8000) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0xa901, 0x0) preadv$auto(r0, &(0x7f0000000080)={0x0}, 0x6, 0x22, 0xffc) inotify_init1$auto(0x5) 5.912289606s ago: executing program 3 (id=2069): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) unshare$auto(0x40000080) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x15, 0x5, 0x0) openat$auto_proc_timens_offsets_operations_base(0xffffffffffffff9c, &(0x7f0000002440), 0x80c02, 0x0) readv$auto(0x3, &(0x7f0000003080)={0x0, 0x4}, 0x9) write$auto(0x3, 0x0, 0x29a) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x8000000000000000, 0x15) connect$auto(0xffffffffffffffff, 0x0, 0x32) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) syz_clone3(&(0x7f0000000100)={0x2100000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) fcntl$auto(r0, 0x400, 0x1) execve$auto(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mlock$auto(0xfffffffffffffffe, 0x3) exit$auto(0x6) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0xa, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/net/lapb4/ifalias\x00', 0x1a1842, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty51\x00', 0x40001, 0x0) write$auto(0x3, 0x0, 0xfdef) ioctl$auto(0x3, 0x540a, r1) openat$auto_btrfs_dir_file_operations_inode(0xffffffffffffff9c, 0x0, 0x100800, 0x0) r2 = landlock_create_ruleset$auto(0x0, 0x0, 0x2) write$auto_console_fops_tty_io(r2, &(0x7f0000000280)="40ecea0b5003551f9c8291baaba72e3a9e16", 0x12) shmctl$auto_IPC_STAT(0x5, 0x2, 0x0) socket(0x10, 0x2, 0x6) 4.80583511s ago: executing program 2 (id=2070): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socket(0x15, 0x80000, 0x85) r0 = socketpair$auto(0x1, 0xfffffffe, 0x10000006, 0x0) setsockopt$auto(r0, 0x9, 0x1d, 0x0, 0x9) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x8000000401, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) r1 = socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) shutdown$auto(0x200000003, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000005c0), r2) sendmsg$auto_ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f0000003680)={0x0, 0x0, &(0x7f0000003640)={&(0x7f00000036c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="2ed79c6010feb0"], 0xfffffffffffffe07}, 0x1, 0x0, 0x0, 0x10}, 0x20000810) r4 = getpid() process_vm_readv$auto(r4, &(0x7f0000000600)={0x0, 0x10000000fff}, 0x800000001, &(0x7f0000000280)={0x0, 0x1ffffffff}, 0x6, 0xfffffffffffffffc) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/netdevsim0/del_port\x00', 0xa001, 0x0) write$auto(r5, &(0x7f0000000380)='0\x81=\"\xad/\x8d\b\x00\x18\xa4\xb0\xb4\xd9\x82=~\x17\xfb&L\xeb=j\a\xf1y\xb3\"\xeb\a\xdd\xf4\xf4Ry\xee\xd7\x1e\x1c\x86\x0f\xcf\x7f\xbf\xab\x12{\xc2\xc2*\xc1M+6/v8\xea\xe9\x85s4\xfe\xe5\t\x7fc\xfb7^\xb86J_\x1d1s!\x01\xff\xff\xff\xff\xff\xff\xff\x1dF\xe6\xf6\x17\x10+\xc0\xb0\xafc\x99\xd4\x150Y~\x1e\xe2\xd6x4fW\x13\xc4U`\x9e-X\xd7\xe2H^\fLS`\xfc\xbb\r\f\x00\xeaN\xa5\xd2\x82;\x7f\xa0.\x9a\xfb\x8d\xf3l\xf2\xd3\x95\xc1M5\xcb\xa6I\x067\xe36\xea\xe9\xe3\xf44oT_`8\xb3\xef\x04 \x05K\xf9\x87pl\xac\x86\nE\xc7e\xc5Q\x89\xcd@\x1c\x92\x00\x87\x976\x9f>\xa2\xcfm\xec\r\x11\x7f\x00\x00\x00\xb1\xde@\x02\xce\x03\xb7\xb1\xfb\x9fr\v\xb2\xe3\xc7\b\x85K /zm\x7f\x8fg,p\a\xc8\x7f\xa5\x87\x02\x87\xbbR=A\x00\x1f\x8a\xa7/Q\"J\xbb\xb0m\xf2SP\x84\x84S\xf0\xba\x9a\xf6\xb6`WI\xba\xba*8\x9f\xea\xe8K/\x98\xbc7~>\x12\x9buB\xcb\xe4\x8aKf\xba\x8c\x19m\xe6I\x02\xde\x80\x9d\x87}\xf4\xbd9\xaa\xd6\xdb1]\xde\xa0r\x14\xca56^\x94\xd2\xd8\xe6}9\x91\xb6\xf7\xa1=\x96\x11\xf1\\\xa91\x0e\xd1\xe4z\xc1;Pw!\x8b\xf5{\xc7Xd\xf1\xf2}\x96EVf\xc9\xa8\xcd\xe4\xc9\x8d\x1d7\xd5\x94\\\xb5\r\xd2\xaa\xe6H\xfe)\xb3a\x04\x1eRMl\xa3F\xa8W0\x90\xc9Ky#\x03\xf5~\xd2Z\xe9(\x99\b\x00M\xde\x01]\r\xd09k\xc2\x84\xc1\xabN\x96\x8a6\x98@\xd3\xab\xa8m\xdf\x8d\x1d\b\x82\xfcP\x87\x93\x80\x97Q\x86\x8a\x9c\xf8L\x0f\xa8@VE2\x9d\x1e`#\xd8\xd7M\xd4k1\xe6\x13Y\\\x83E\xd0e\x0eM\xa9Q\xac\x0e\x1d]\a\x19H\x81\xd2\xccF\xc6\xd4\xe2R$\xfa\xd6}\xbdsN\x18\xdf\xf5\xffP\xf5\f\xccL\xef\x83\xb3$\xd4\xf4\xb5\xe6\xd0 \xb9\xa7\x8e6\t\x83q\xef\b\xd2\xdb', 0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000001d40), 0xffffffffffffffff) sendmsg$auto_BATADV_CMD_GET_TRANSTABLE_GLOBAL(r6, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="c79f25ffdbdf2592fa1293ec0cd2"], 0x14}, 0x1, 0x0, 0x0, 0xc031}, 0x44) fstat$auto(0xffffffffffffffff, &(0x7f0000000100)={0x5, 0xa0, 0x2, 0x8, 0xee00, 0xffffffffffffffff, 0x0, 0x4, 0xc, 0x8, 0x0, 0x5, 0xe6, 0x7, 0x4, 0xbd2, 0x1}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$auto_macsec(&(0x7f00000001c0), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'veth1_vlan\x00', 0x0}) sendmsg$auto_MACSEC_CMD_UPD_OFFLOAD(r9, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000012c0)=ANY=[@ANYBLOB="44010000", @ANYRES16=r10, @ANYRES32=r12, @ANYBLOB="280109800c00"], 0x144}, 0x1, 0x0, 0x0, 0x4040085}, 0x0) shmctl$auto_IPC_INFO(0x5e5, 0x3, &(0x7f0000000300)={{0xfffffa7e, 0xee00, 0xee00, 0xfff, 0x10, 0x7cf, 0x1}, 0x9, 0x6, 0x96, 0x6a5d, @raw=0x5, @raw=0x4, 0x8, 0x0, &(0x7f00000001c0)="d5ac9568cc7c716f32238224cbf60830b8cfcb744f633eb776be2649581f02442ff769e73c25d7d0153baf209d2dbe22a335e97ba896b32a1c4afe605fcd6d1e1f2c4014af3f20c2be2267a5cc26f3b66dbe4d7a5524802db00f1695bd726b52732f0f90f4eb92ca254a3317dc86abbca2895ac1714e", &(0x7f0000000240)="a0902493943840ac308ae642599910f4ebcea3885b1847f04be011821c3c14afbb3260ba25257adea3e842b1d9a46c50e35407121638630d870f6bb94dae2d8752d4b578340210381573b964cfb7029590"}) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r1, &(0x7f0000000d00)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000001300)=ANY=[@ANYBLOB="10090000", @ANYRES16=r3, @ANYBLOB="000426bd7000fddbdf251b0000001c0002801800e7800800cc00", @ANYRES32=r4, @ANYBLOB="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", @ANYRES32=r6, @ANYBLOB="4b9888f301e1c5ed9ff5182b9a99b21028255ecc944be42bcca1e72b57af7cd6cc6e55696725645ca817c469018bdf529f2d337edb4eed6d66270f506037f3accea575b4cc5c4582a25e90f8b2b30a76c1e05b3e3368b285011a949a879f29643d75256ebcc8436e885d289838c674a26ece0a0b89b9b7895a12dbb2f14c6aa305ae71367518a16d34c5b5d5b4bad0efad02e9542161fa09747cbf00b5f76e1b8033e78a9dfa850e87b376f5563effbe4cb9b0e4e124fbdfc050aa401fe6619013049054ab1c188aaf8960444df2f85aff08008b00", @ANYRES32=r8, @ANYBLOB="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", @ANYRES32=r12, @ANYBLOB="08000400ff0100007204028008002500ef83fe319c494f198ca06b100f173cb232f53cde2204057f4752479ae65f42b907f15432794c5b2f7cfefcd949185f8095fba2b45670f7180521e195dcc87a54fc0f424ee5e085e958dc38866f1d0cc55d4d0a9df463dcf3d068614db10d735aa28f71f3b0b7a272082012796b68eb4674dd6252425b9af404e105075778303a555c741cb004adb41a68ce431bd3cfbee8b3cc4f1a58736c5ce180082b7f6a06ff4fd3d0f17fa072d8ae168370111bca22c9f9ee5091bf746984ac3418dbef309c7872f8f5921aac283a954dc9c0a0a003e28008001300", @ANYRES32=r13, @ANYBLOB="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"], 0x910}}, 0x800) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) sendmmsg$auto(0x3, &(0x7f00000000c0)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 4.597572113s ago: executing program 4 (id=2071): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) unshare$auto(0x40000080) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x8000000000000000, 0x15) connect$auto(0xffffffffffffffff, 0x0, 0x32) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) r0 = openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/pcmC0D0p\x00', 0x2, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_SW_PARAMS(r0, 0xc0884113, &(0x7f0000000040)={0x14000, 0x9, 0xf, 0xffffffffffff8001, 0x2b2, 0x4, 0x5, 0x1, 0x7fff, 0x4, 0x4, 0x9, "cfd1bd1c34f9203c74ff4841d6a15d9c01351e8ee96da4bec5359cb86f52fa7ed1f2ab068e15c2dc61c52ecfa8b004eb2c0fe7c4a5ddfa30"}) exit$auto(0x6) exit$auto(0x5deb) 4.28904239s ago: executing program 5 (id=2072): r0 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/debug/block/nbd1/sched/read2_fifo_list\x00', 0x169100, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffff7, 0x8000) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00211459a600fbdbdf250200000008000300000000001b0004"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) futex_requeue$auto(&(0x7f0000000040)={0xb, 0x6, 0x2, 0x2000000}, 0x0, 0xf, 0x9) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) r1 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r1, &(0x7f0000000080)={{0x0, 0x8002, &(0x7f00000002c0)={0x0, 0xc4}, 0x2, 0x0, 0x0, 0x1}, 0x5}, 0x3, 0x0) pread64$auto(r0, 0x0, 0x1000f42d, 0x100) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = io_uring_setup$auto(0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0x3c, 0x0) r3 = fsopen$auto(0x0, 0x1) fsconfig$auto(r3, 0x6, 0x0, 0x0, 0x0) io_uring_register$auto_IORING_REGISTER_SEND_MSG_RING(r2, 0x1f, 0x0, 0x3) 4.127530763s ago: executing program 2 (id=2073): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) unshare$auto(0x40000080) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x8000000000000000, 0x15) connect$auto(0xffffffffffffffff, 0x0, 0x32) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) r0 = openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/pcmC0D0p\x00', 0x2, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_SW_PARAMS(r0, 0xc0884113, &(0x7f0000000040)={0x14000, 0x9, 0xf, 0xffffffffffff8001, 0x2b2, 0x4, 0x5, 0x1, 0x7fff, 0x4, 0x4, 0x9, "cfd1bd1c34f9203c74ff4841d6a15d9c01351e8ee96da4bec5359cb86f52fa7ed1f2ab068e15c2dc61c52ecfa8b004eb2c0fe7c4a5ddfa30"}) exit$auto(0x6) exit$auto(0x5deb) 3.848882622s ago: executing program 3 (id=2074): r0 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000240)='/dev/mtd0ro\x00', 0x13d082, 0x0) socket(0x2, 0x3, 0x1) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) r2 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, 0x0, 0x189e42, 0x0) write$auto(r2, 0x0, 0x80000000) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r3, &(0x7f0000004240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010025bd0000fcdbdf25040000000800090000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40c8}, 0x4048000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r4 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) mknod$auto(&(0x7f0000000080)=':,\x00', 0xcb, 0xfffffffa) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) mmap$auto(0x0, 0xf92e, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r5, 0x4, 0x7ff) ptrace$auto_PTRACE_GETREGS(0xc, r5, 0x80000000, 0x1) mknod$auto(&(0x7f0000000b00)='X))\x00', 0x63c1, 0x7fb) mknod$auto(&(0x7f0000000340)='\xe1\x9eHU\x00', 0x63c1, 0x7ff) ioctl$auto_PAGEMAP_SCAN(r4, 0xc0606610, &(0x7f000000c380)={0x60, 0x0, 0x100000, 0x7fffffffefff, 0xfffffffffffffffe, 0x1, 0x8, 0xc00, 0x2c, 0x2c, 0x3, 0x2}) setitimer$auto_ITIMER_REAL(0x0, &(0x7f00000001c0)={{0x1, 0x10001}, {0x7fffffffffffffff, 0x7}}, 0x0) r6 = openat$auto_evm_xattr_ops_evm_secfs(0xffffffffffffff9c, &(0x7f0000000080), 0x100401, 0x0) write$auto_evm_xattr_ops_evm_secfs(r6, &(0x7f00000000c0)='.', 0x1) connect$auto(0x3, &(0x7f0000000000)=@in={0x2, 0x0, @empty}, 0x20055) ioctl$auto(0xc8, 0x400454ce, 0x5c8d) setsockopt$auto(0x3, 0x0, 0x28, 0xfffffffffffffffc, 0x70) readv$auto(0x10, &(0x7f0000000040)={&(0x7f0000000000), 0xf}, 0xbb) ioctl$auto_PPPIOCSFLAGS(0xffffffffffffffff, 0x40047459, &(0x7f0000000200)=0x8001) write$auto_mtd_fops_mtdchar(r0, &(0x7f0000000440)="df", 0x1) openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/dri/vkms/gem_names\x00', 0x101402, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D3\x00', 0x400001, 0x0) 3.693335161s ago: executing program 5 (id=2075): r0 = syz_clone3(&(0x7f0000000300)={0x40000000, &(0x7f0000000100)=0xffffffffffffffff, &(0x7f0000000140), &(0x7f00000001c0), {0x30}, &(0x7f0000000200)=""/127, 0x7f, &(0x7f0000000280)=""/25, &(0x7f00000002c0)=[0xffffffffffffffff], 0x1}, 0x58) mmap$auto(0x0, 0x4, 0x4000000000df, 0xbc, r1, 0x300000000000) (async) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram11\x00', 0x14be02, 0x0) mmap$auto(0x4, 0x810004, 0xffb, 0x1a5d, 0x3, 0x8000) preadv2$auto(r2, &(0x7f0000000080)={0x0, 0x80000003}, 0x6, 0xffffffffffffffff, 0x0, 0x2f) (async, rerun: 32) ioctl$auto_BLKFLSBUF(r2, 0x1261, 0x0) (async, rerun: 32) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/conf/veth1_to_hsr/accept_local\x00', 0x2002, 0x0) getsid$auto(0x0) (async) sendfile$auto(r3, r3, 0x0, 0x80000000003) (async) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x40000, 0x0) mmap$auto(0xa, 0x6f57, 0x3, 0x13, r3, 0x80000004) (async) rseq$auto(0x0, 0xfffffff4, 0x0, 0x5) (async) r4 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, 0x0, 0x105000, 0x0) (async) r5 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bus/usb/014/001\x00', 0x0, 0x0) ioctl$auto_USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f00000000c0)={0x1, 0x81, 0x5b, 0x4, 0x0, 0x5, 0x4, 0x2, @number_of_packets, 0x7, 0x1d, 0x0}) (async, rerun: 32) ioctl$auto_VHOST_SET_BACKEND_FEATURES(r4, 0x4008af25, &(0x7f0000000000)=0x7) (rerun: 32) mmap$auto(0x0, 0x9, 0x8000, 0xe238, 0x602, 0x5) rseq$auto(0x0, 0xfffffffe, 0x3, 0xff) r6 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D0\x00', 0x8001, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) write$auto(r6, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) (async) mmap$auto(0x9, 0x4, 0xdf, 0x40000000000eb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async, rerun: 64) mlock$auto(0x1004, 0x7) (rerun: 64) mlockall$auto(0x800000000000005) clone$auto(0x100000001, 0x4, 0x0, 0x0, 0x200) (async) madvise$auto(0x0, 0x200007, 0x19) (async) r7 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card0\x00', 0x129800, 0x0) kcmp$auto(r0, r0, 0x8000, r5, r7) ioctl$auto(r7, 0x92106401, r7) 3.372201812s ago: executing program 4 (id=2076): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socket(0x15, 0x80000, 0x85) r0 = socketpair$auto(0x1, 0xfffffffe, 0x10000006, 0x0) setsockopt$auto(r0, 0x9, 0x1d, 0x0, 0x9) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x8000000401, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) r1 = socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) shutdown$auto(0x200000003, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000005c0), r2) sendmsg$auto_ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f0000003680)={0x0, 0x0, &(0x7f0000003640)={&(0x7f00000036c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="2ed79c6010feb0"], 0xfffffffffffffe07}, 0x1, 0x0, 0x0, 0x10}, 0x20000810) r4 = getpid() process_vm_readv$auto(r4, &(0x7f0000000600)={0x0, 0x10000000fff}, 0x800000001, &(0x7f0000000280)={0x0, 0x1ffffffff}, 0x6, 0xfffffffffffffffc) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/netdevsim0/del_port\x00', 0xa001, 0x0) write$auto(r5, &(0x7f0000000380)='0\x81=\"\xad/\x8d\b\x00\x18\xa4\xb0\xb4\xd9\x82=~\x17\xfb&L\xeb=j\a\xf1y\xb3\"\xeb\a\xdd\xf4\xf4Ry\xee\xd7\x1e\x1c\x86\x0f\xcf\x7f\xbf\xab\x12{\xc2\xc2*\xc1M+6/v8\xea\xe9\x85s4\xfe\xe5\t\x7fc\xfb7^\xb86J_\x1d1s!\x01\xff\xff\xff\xff\xff\xff\xff\x1dF\xe6\xf6\x17\x10+\xc0\xb0\xafc\x99\xd4\x150Y~\x1e\xe2\xd6x4fW\x13\xc4U`\x9e-X\xd7\xe2H^\fLS`\xfc\xbb\r\f\x00\xeaN\xa5\xd2\x82;\x7f\xa0.\x9a\xfb\x8d\xf3l\xf2\xd3\x95\xc1M5\xcb\xa6I\x067\xe36\xea\xe9\xe3\xf44oT_`8\xb3\xef\x04 \x05K\xf9\x87pl\xac\x86\nE\xc7e\xc5Q\x89\xcd@\x1c\x92\x00\x87\x976\x9f>\xa2\xcfm\xec\r\x11\x7f\x00\x00\x00\xb1\xde@\x02\xce\x03\xb7\xb1\xfb\x9fr\v\xb2\xe3\xc7\b\x85K /zm\x7f\x8fg,p\a\xc8\x7f\xa5\x87\x02\x87\xbbR=A\x00\x1f\x8a\xa7/Q\"J\xbb\xb0m\xf2SP\x84\x84S\xf0\xba\x9a\xf6\xb6`WI\xba\xba*8\x9f\xea\xe8K/\x98\xbc7~>\x12\x9buB\xcb\xe4\x8aKf\xba\x8c\x19m\xe6I\x02\xde\x80\x9d\x87}\xf4\xbd9\xaa\xd6\xdb1]\xde\xa0r\x14\xca56^\x94\xd2\xd8\xe6}9\x91\xb6\xf7\xa1=\x96\x11\xf1\\\xa91\x0e\xd1\xe4z\xc1;Pw!\x8b\xf5{\xc7Xd\xf1\xf2}\x96EVf\xc9\xa8\xcd\xe4\xc9\x8d\x1d7\xd5\x94\\\xb5\r\xd2\xaa\xe6H\xfe)\xb3a\x04\x1eRMl\xa3F\xa8W0\x90\xc9Ky#\x03\xf5~\xd2Z\xe9(\x99\b\x00M\xde\x01]\r\xd09k\xc2\x84\xc1\xabN\x96\x8a6\x98@\xd3\xab\xa8m\xdf\x8d\x1d\b\x82\xfcP\x87\x93\x80\x97Q\x86\x8a\x9c\xf8L\x0f\xa8@VE2\x9d\x1e`#\xd8\xd7M\xd4k1\xe6\x13Y\\\x83E\xd0e\x0eM\xa9Q\xac\x0e\x1d]\a\x19H\x81\xd2\xccF\xc6\xd4\xe2R$\xfa\xd6}\xbdsN\x18\xdf\xf5\xffP\xf5\f\xccL\xef\x83\xb3$\xd4\xf4\xb5\xe6\xd0 \xb9\xa7\x8e6\t\x83q\xef\b\xd2\xdb', 0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000001d40), 0xffffffffffffffff) sendmsg$auto_BATADV_CMD_GET_TRANSTABLE_GLOBAL(r6, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="c79f25ffdbdf2592fa1293ec0cd2"], 0x14}, 0x1, 0x0, 0x0, 0xc031}, 0x44) fstat$auto(0xffffffffffffffff, &(0x7f0000000100)={0x5, 0xa0, 0x2, 0x8, 0xee00, 0xffffffffffffffff, 0x0, 0x4, 0xc, 0x8, 0x0, 0x5, 0xe6, 0x7, 0x4, 0xbd2, 0x1}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$auto_macsec(&(0x7f00000001c0), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'veth1_vlan\x00', 0x0}) sendmsg$auto_MACSEC_CMD_UPD_OFFLOAD(r9, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000012c0)=ANY=[@ANYBLOB="44010000", @ANYRES16=r10, @ANYBLOB, @ANYRES32=r12, @ANYBLOB="280109800c00"], 0x144}, 0x1, 0x0, 0x0, 0x4040085}, 0x0) shmctl$auto_IPC_INFO(0x5e5, 0x3, &(0x7f0000000300)={{0xfffffa7e, 0xee00, 0xee00, 0xfff, 0x10, 0x7cf, 0x1}, 0x9, 0x6, 0x96, 0x6a5d, @raw=0x5, @raw=0x4, 0x8, 0x0, &(0x7f00000001c0)="d5ac9568cc7c716f32238224cbf60830b8cfcb744f633eb776be2649581f02442ff769e73c25d7d0153baf209d2dbe22a335e97ba896b32a1c4afe605fcd6d1e1f2c4014af3f20c2be2267a5cc26f3b66dbe4d7a5524802db00f1695bd726b52732f0f90f4eb92ca254a3317dc86abbca2895ac1714e", &(0x7f0000000240)="a0902493943840ac308ae642599910f4ebcea3885b1847f04be011821c3c14afbb3260ba25257adea3e842b1d9a46c50e35407121638630d870f6bb94dae2d8752d4b578340210381573b964cfb7029590"}) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r1, &(0x7f0000000d00)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000001300)=ANY=[@ANYBLOB="10090000", @ANYRES16=r3, @ANYBLOB="000426bd7000fddbdf251b0000001c0002801800e7800800cc00", @ANYRES32=r4, @ANYBLOB="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", @ANYRES32=r6, @ANYBLOB="4b9888f301e1c5ed9ff5182b9a99b21028255ecc944be42bcca1e72b57af7cd6cc6e55696725645ca817c469018bdf529f2d337edb4eed6d66270f506037f3accea575b4cc5c4582a25e90f8b2b30a76c1e05b3e3368b285011a949a879f29643d75256ebcc8436e885d289838c674a26ece0a0b89b9b7895a12dbb2f14c6aa305ae71367518a16d34c5b5d5b4bad0efad02e9542161fa09747cbf00b5f76e1b8033e78a9dfa850e87b376f5563effbe4cb9b0e4e124fbdfc050aa401fe6619013049054ab1c188aaf8960444df2f85aff08008b00", @ANYRES32=r8, @ANYBLOB="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", @ANYRES32=r12, @ANYBLOB="08000400ff0100007204028008002500ef83fe319c494f198ca06b100f173cb232f53cde2204057f4752479ae65f42b907f15432794c5b2f7cfefcd949185f8095fba2b45670f7180521e195dcc87a54fc0f424ee5e085e958dc38866f1d0cc55d4d0a9df463dcf3d068614db10d735aa28f71f3b0b7a272082012796b68eb4674dd6252425b9af404e105075778303a555c741cb004adb41a68ce431bd3cfbee8b3cc4f1a58736c5ce180082b7f6a06ff4fd3d0f17fa072d8ae168370111bca22c9f9ee5091bf746984ac3418dbef309c7872f8f5921aac283a954dc9c0a0a003e28008001300", @ANYRES32=r13, @ANYBLOB="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"], 0x910}}, 0x800) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) sendmmsg$auto(0x3, &(0x7f00000000c0)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 3.268533818s ago: executing program 3 (id=2077): mknod$auto(&(0x7f0000000040)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00'/263, 0x1, 0x4) lstat$auto(&(0x7f0000000200)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00', 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48140, 0x0) nanosleep$auto(0x0, 0x0) clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0) socket$nl_generic(0x11, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/bond0/bonding/all_slaves_active\x00', 0xb02, 0x0) sendmsg$auto_NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000009c0)=ANY=[@ANYBLOB="000428bd7000fddbdf2572000000d5074801df1af0ebe5aff861f90fef1cd29caf556101167b1ccb2741bde9cc96d71b7295da0b178f3145eaa4a00a4fa9fcb281c65c30c1430b48e6f91275f00ee96d06f7e6bd05c1af7b9c0ee013ca8dc3e82a4f7efb413a0b9cd35763b92ded7ee1b9336e0bc7d12d0f26083a168c6a2ee064b2d0f1ae837a4f045fc61d947670f450a56dcff9232275db4c9bdfa9497da2c52e0bf4761f0c22b4a637f951ae926928aa18a8b30cc0c74aecb71862892bac4bf26d65323f9a420a2b0a08b7ae78d2b6c8ab635ddc019192eecf0609683042ca1b7f925fb94234d9a499ac22ca7fb11491478430dfcd6d86fff6598161d76b7688b3af1608daa3de12cffc0dfbfc732073ffd2d967b6a291a471822d0b8c681a370cbb192ac9c7e8f7b2b4119a6549a60dfb08b96f50b9b4143460618f0747ce7330fd6cdc4f79bd47e9420972292f97e72501e07fbf574ddb144caf67a5105d344c669dfa56ee1fd9d0b3c98c72eb8c6c942f9aab5830f2c719947168f101b599369e682da9ba5d3c6019ed6c6c6c376e41e3357455077aa8c321e40f034c6f81eb69767672c53adbfe236c5a49a15ddea8a657a818a8e8ea921fdc11d6034e40ab2afc5e2919de79af646f82d79ca078372f3f1328b25e0718e7f64be83d58a4cbe12ffe3505307434554c96d7095051a6704101a23fb2baf5b81401da72b5213552a7cb54ee801d26f6efb25c3d20c03768e9ffb6b50546735f5d1b553f73d5f8c36a5aa5ab5a5d4e08b910e6f29a52e77d53e27c4827b5bc154c11e8f2625d0c5d8e15a138a0fd72c9458d72bd8be57afa648a003f5d909c0a7aa1062546407f019695df71228ee704c4fe870bca3c4f3d5183aa4f4f19e9bfcf9b282241ee6eabaab6777f72b0b1e52a498464978fa44e2d9a73935efe46b0c3e91fee32949f032740bd3b018c1eb330ce7d0a44553ff12a25f20ed41aefc8b12f4374f1dcdaeae16345ec004ba3bf0d5bf39037bd4b73fb2a6d5022198f3bcf9d623c4f706ae5b3ba632c112424ad5d673f38e3c673c50552731151cb53dd9ec9699d375b451d8f4e2457e5eab34766a66b031dcdcae85e67939edb373588801a5ea82f8d266aa78341c0e1104f2b0dd5ee0c081f3855a06bec389a29645871ea53b10e19e44737951756ecc062dedfccc3fd84aae13d3c5c8328379756f42b1cf8e9453e9491033f2ede522c8daa0577152799451358694c3771169411150f5066a243d6f869671a4a924602cdfa5a35e4cf303cf7271afb702c93a6101275319153d7c88c112b7d1331db47415023ec18b7d558967f82e7970b1616d8cd1bd5deda3f90bcddec801412e8a4ceb854241bcfe0850c7495399338b41ae01528fe5da8296d5cb4a0a5e4ca8c82327da83c0999ab91549f5a08c1ded5d54509bc60b3afbace2fea3c7817aeed4fefc038e86bc77be0029dc5a8f70d41770990583da9b943c9f7c646888171188a9ca40b58b7ff2066bc657dcf369fc8faf74576f61347b0d4016854d5701cacce7eb0ee48f3a302b5892649dad4c910e27976e0ba3f781fb9fc8908904b03455d8d45a6875a18a97da67e91b9f43424c58ceac55ab788fd91097db30ef891cf659dca25f64300f52b544b4be462724803171a0c4328472c3c9a863dbb331029066f55a0e8ef1c3852c3f19c2bbd71c17852bcf22a125ff854592c146258ba99fe1a9dcca3e1a9178ecd0d6096d0642bd1639d547d475dbe4e30b62a0db806e865000b5fac63f537cebc8a4f133843c9d333f566c82a3b2e4a947be01743c36af38975d7396bf804fabf5a102e86ebc9dc18a0f07b5c5ca355cae4000b95f759e53717ec4ccee0778f3cf3f1b3d8a38aa7c56b416d94066f8a4c6f1fe1fc48c4eda755adb52ef60d249a07bac8e7c2e800ac1c7a57e52aff48d219746d31bab3c429e01c4bbd5d46e9a15af19b2f263b7ae60e60052f89a6d0e74e02d27ad64474f19abfb467bfa835e7a9e89f4792bb33bd0eb478a7521ad9728ce1623a4f32aae2f7e7cf41acf10d79d7e2c0e36ba780fa9a7299d1355bcde4c630cb0a0e9e4e2257330751aba40badc2784cd46e4fab142aee3346248010f83527ab291667f9ccbed3394c7799b5764bb29b394c"], 0x7ec}, 0x1, 0x0, 0x0, 0x40040}, 0xc000) write$auto_tty_fops_tty_io(0xffffffffffffffff, &(0x7f0000000580)="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", 0xfdef) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, 0x0, 0x10004010) ioctl$auto_KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0xd5) write$auto(0xca, &(0x7f0000000140)='\x04>\x01\x01\x00\x00\x00\x00\x01_\x9e\x99:\x06F\x96\b\'\x02\xb0\x93l\xeb\x87\r\b\x87\x14\xf8e6\x9c%\xb6\x9a\\S\xa2(Q\xcc', 0x7f) r0 = openat$auto_proc_pid_numa_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000003640)='/proc/self/numa_maps\x00', 0x40080, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xc, 0x800008000) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) lseek$auto(r0, 0x7ff, 0x1) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/midiC2D0\x00', 0x201, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2a, 0xdf, 0x9b72, 0x1000, 0x27fff) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dri/card2\x00', 0x20300, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r2 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000fc0)={0x9, 0x10000, 0x8000000000000000, 0x8, 0xe, 0x6da, 0x1, 0x1, 0x6, 0xb, 0x4, 0x2, 0x8, 0xd3, 0x200000000008, 0xdd2, 0x5, 0xe91, 0xfffffff9, 0x81, 0x0, 0x401, 0x0, 0x0, 0x3, 0x8000000, 0x7, 0x2, 0x4, 0x0, 0x3, [0x0, 0xfffffffffffffffe, 0x0, 0x8, 0x0, 0x0, 0x0, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x17, 0x0, 0x0, 0x5, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe], "4e20a4b470fc7be2c85849f1acbb899156537ca3bdcfbec40766e0f02078a211ec770bc9105663ee83bfcb2526250ddbf2574b51f63078f5a35a053edbd62e18346fbdc740d64532051a7b3315feb8bd3d60c62e39f921173836286dcb23d388533dab5c73d6cfb6c43106415467a7131e45ff83f9496efb87ae287649830a5fb71a6a6b387a3f62"}, 0x7, 0x80000001) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000fbdbdf25020000000800021d00020000080003"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004810}, 0x800) 2.565075536s ago: executing program 4 (id=2078): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x2, 0x1, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0x401, 0x8000) syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) bind$auto(0x3, 0x0, 0x6a) setpgid$auto(0x0, 0xffffffffffffffff) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) syz_clone(0x2360411, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/irq/2/name\x00', 0x800, 0x0) read$auto(r2, 0x0, 0x1) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x9, 0x1f, 0x940, 0x1ffde, 0x3, 0x6, 0x8000003, 0x9, 0x6, 0x0, 0x4, 0xb0, 0x7, 0x200, 0x3, 0x205, 0x7, 0x0, 0x3ffff, 0x0, 0x3, 0x7069, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, [0x0, 0x0, 0x0, 0x8, 0x5, 0x8000004, 0x0, 0x100000000000000, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x100000000, 0x0, 0x8000000000000001, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x4, 0x0, 0x0, 0x2000000000000000]}, 0x203, 0x7d) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[], 0x3c}}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) r3 = socket(0x10, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_IOAM6_CMD_ADD_SCHEMA(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000480)={0x20, 0x0, 0x1, 0x70bd2a, 0x25dfdbfb, {0x4, 0x0, 0x900}, [@IOAM6_ATTR_SC_DATA={0x4}, @IOAM6_ATTR_SC_ID={0x8, 0x4, 0x9}]}, 0x20}, 0x1, 0x3000700, 0x0, 0x1}, 0x8010) sendmsg$auto_IOAM6_CMD_DEL_NAMESPACE(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, [@IOAM6_ATTR_NS_ID={0x6, 0x1, 0xf}, @IOAM6_ATTR_NS_ID={0x6, 0x1, 0x81}]}, 0x24}}, 0x4000000) sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x0, 0x33, 0x0, 0x4) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) 2.31401849s ago: executing program 2 (id=2079): write$auto(0xffffffffffffffff, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) write$auto(r0, 0x0, 0x4) r1 = bpf$auto_BPF_LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=@bpf_attr_7={@btf_id=0x6, 0x101, 0x100, r0}, 0x6) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x40000, 0x188) sendmsg$auto_HWSIM_CMD_TX_INFO_FRAME(r1, &(0x7f0000000680)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000640)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c000000f9047cd8b1eb41daed2f8a55aecc6247173efbc9e4fa46c940a702fec0e3afd6ebd1f24f53e30cc9c5346d1fd882442e54d5828dc1294714ad692a93b681721d256104dccaa2", @ANYRES16=0x0, @ANYBLOB="000125bd7000ffdbdf25030000000800060000100000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000000) r4 = ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000380), r1) sendmsg$auto_NL80211_CMD_SET_BSS(r4, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="18000002f1585af5c875e66ff0e777bc389d4eca681164cdf77e3cd477979abf6164524c778864115555c7a10fd036dfd3c56bb806cb40e20a5ddff53d98ba189f4f5ba655d1836a3e4083908a792c6eb8eb0f5c2cba634bd4358d6157ba5dcffa760fa99d13e0ff476a71e42ad3e256ba0b8cf6c1010496e0f163ff09b85666d69d65d223927139612981772271e4f02a3d7b83699185f5a5d601427b4acc41d755300255dd739d028c877f758e1e92e82b6177a2fb67cfb6d7b61c13149870e4a0ec", @ANYRES16=r5, @ANYBLOB="030028bd7000ffdbdf251900000004008b00"], 0x18}}, 0x4010) clone$auto(0x9001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x6) write$auto_tomoyo_operations_securityfs_if(0xffffffffffffffff, 0x0, 0x0) select$auto(0x5, &(0x7f00000005c0)={[0x7ffffffe, 0x81, 0x6, 0x66, 0x0, 0x0, 0x3fffffffbffffff, 0x0, 0x7f, 0x7, 0xffffffffffff8001, 0x52bc9707, 0xc, 0xf, 0xa7b, 0xc748]}, &(0x7f00000001c0)={[0x96, 0x4, 0x2, 0x8000, 0x6, 0x7, 0x5, 0x3, 0x2, 0xc, 0xfffffffffffffffb, 0x1000, 0xfffffffffffff800, 0x0, 0x0, 0x8]}, &(0x7f0000000280)={[0xd, 0x9, 0xfffffffffffffff7, 0x6, 0x2, 0x1, 0x8000000000000003, 0x9, 0x6, 0x2, 0xfffffffffffffffe, 0x20000001, 0xf800000000000000, 0x101, 0x8, 0x7]}, &(0x7f0000000300)={0x0, 0x5}) mmap$auto(0xffffffffffffffff, 0x40000b, 0x8, 0x1001d, r2, 0xfff) r6 = openat$auto_mISDN_fops_timerdev(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_clone3(&(0x7f0000001280)={0x120020480, 0x0, 0x0, 0x0, {0x30}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58) ioctl$auto_IMADDTIMER(r6, 0x80044940, 0x0) 1.636116225s ago: executing program 5 (id=2080): socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) sendmsg$auto_OVS_FLOW_CMD_GET(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x200400f0}, 0x800) r0 = getpid() process_vm_readv$auto(r0, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000040), 0x40000100000001}, 0x6, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) setsockopt$auto(0x3, 0x10000000084, 0xd, 0x0, 0x8) sendto$auto(0x3, 0x0, 0x2000f, 0x400300, 0x0, 0x1c) 1.533663549s ago: executing program 2 (id=2081): pwrite64$auto(0xc8, &(0x7f0000000180)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00/\x00\x00\x00\xfd\xfdX\xd3\x1d\xf8\xbebZ\xddL\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x88\v\xae\xa9i8W\xe5\x00!\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00v\xd9\xe5H.-\x14\xee\xbc\xae\xe1\x85\xb2b\xd42\x89\x05e\x03z\xe6q\xcd\x91\tM\xd2\x90\xc91\xd9\x86\xe4\x8e\x0fI\xf0b2\nfa\xb8\x1a\xdb\xaa0P\xca\xb2W\xe3\x14\xb9Cx\x0e4\xc9\xb4\xdc4\xe3\x8f\x1c\xa5\x89\x8d\x84V\x97dg \x9f\xcd\x8fA\x16\x01\xc5.\x7fG\x86L\xa4\xd6h\xea\x11x\xce\x96t\xc7~# )\x8c6\x06\xd7\xfcu\x8c{t\xa5\x92JW\x8b\xb3Oj%\xb5H\x91F\x1b\x01\xef\x0e\xc5\xac\xcfK\xd5\x98\xce\xd6?\t\xa8\xb7\xce\x87\xdb\xb0\xaa\x8al8qF\re\xa7\xda\x1f\x9ad\b!\xddBD\xd9', 0x3c, 0x200001000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x202, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x787b, 0x7000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2b, 0x1, 0x0) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x4e22, @multicast2}, 0x5) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) setsockopt$auto(0x3, 0x10f, 0x9f06, 0x0, 0x17) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x5, 0x2) setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = pipe2$auto(0x0, 0x80) ioctl$auto(r1, 0x5761, 0x4) ioctl$auto_BINDER_SET_MAX_THREADS(r1, 0x40046205, &(0x7f0000000080)="d7a13be3c14e950bc86ac4250954b7f9b37dd9020413b9c0e0437b1770f1e60e3016321fb32f747b55a5dc9aa9c22b1dce04ad94fac29031234d3619f36b2b2872d09c5d4c1cfb73312afd29d4257a5df2dd59a775625a1e196dab0cb2e1b2d6541cf92b53ca962bcdda378470c44ab0a64c4b64c9b43e54f87ea6b5832db97dcf93a6d4b9b9dc59bd74fc71a5359a31c4f31c95a12fe985109d1d4f81144690b512f4214444131cedbd0214a12d") r2 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x400008, 0x2, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x4, 0x14000000000df, 0x40eb2, r2, 0x300000000000) write$auto(0x3, 0x0, 0xfffffdef) shutdown$auto(0x200000003, 0x2) syz_clone3(0x0, 0xfffffffffffffff4) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x7, 0x4, 0x200, 0x1001, 0x24, 0x1, 0xffffffffffffffff, 0x0, 0x5}, 0x4f4) close_range$auto(0x2, 0x8, 0x0) 828.647415ms ago: executing program 5 (id=2082): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x2, 0x1, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0x401, 0x8000) syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) bind$auto(0x3, 0x0, 0x6a) setpgid$auto(0x0, 0xffffffffffffffff) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) syz_clone(0x2360411, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/irq/2/name\x00', 0x800, 0x0) read$auto(r2, 0x0, 0x1) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x9, 0x1f, 0x940, 0x1ffde, 0x3, 0x6, 0x8000003, 0x9, 0x6, 0x0, 0x4, 0xb0, 0x7, 0x200, 0x3, 0x205, 0x7, 0x0, 0x3ffff, 0x0, 0x3, 0x7069, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, [0x0, 0x0, 0x0, 0x8, 0x5, 0x8000004, 0x0, 0x100000000000000, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x100000000, 0x0, 0x8000000000000001, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x4, 0x0, 0x0, 0x2000000000000000]}, 0x203, 0x7d) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[], 0x3c}}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000000000), r3) sendmsg$auto_IOAM6_CMD_ADD_SCHEMA(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000480)={0x20, r4, 0x1, 0x70bd2a, 0x25dfdbfb, {0x4, 0x0, 0x900}, [@IOAM6_ATTR_SC_DATA={0x4}, @IOAM6_ATTR_SC_ID={0x8, 0x4, 0x9}]}, 0x20}, 0x1, 0x3000700, 0x0, 0x1}, 0x8010) sendmsg$auto_IOAM6_CMD_DEL_NAMESPACE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r4, 0x200, 0x70bd27, 0x25dfdbff, {}, [@IOAM6_ATTR_NS_ID={0x6, 0x1, 0xf}, @IOAM6_ATTR_NS_ID={0x6, 0x1, 0x81}]}, 0x24}}, 0x4000000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x0, 0x33, 0x0, 0x4) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) 0s ago: executing program 4 (id=2083): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) syz_open_procfs$namespace(0x0, 0x0) writev$auto(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x2000000000007111}, 0x7) r0 = bpf$auto(0x9, &(0x7f0000000100)=@token_create={0x2}, 0x9) socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) getcwd$auto(0x0, 0xffffffffffffffff) setsockopt$auto(0x3, 0x10000000084, 0x2, 0x0, 0x8) socket$nl_generic(0x10, 0x3, 0x10) madvise$auto(0x0, 0xffffffffffff0805, 0x19) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'batadv0\x00'}) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_4={0x4, r0, 0x400, r0}, 0xf) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) syz_genetlink_get_family_id$auto_nbd(0x0, 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x20040000) close_range$auto(0x2, 0x8, 0x0) openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/block/nbd14/sched/write2_fifo_list\x00', 0x0, 0x0) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) openat$auto_bsg_fops_bsg(0xffffffffffffff9c, 0x0, 0x121641, 0x0) mmap$auto(0x0, 0x40000a, 0xdf, 0x9b72, 0x2, 0x0) r2 = openat$auto_state_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x1e9482, 0x0) read$auto_state_fops_(r2, &(0x7f0000000180)=""/61, 0xfffffeeb) syz_genetlink_get_family_id$auto_ovs_datapath(0x0, 0xffffffffffffffff) mbind$auto(0x0, 0x7, 0x2, 0x0, 0x6, 0x2) ioctl$auto(0x3, 0x2287, 0xffffffffffffffff) prctl$auto(0x43, 0x0, 0x0, 0x0, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0xa901, 0x0) kernel console output (not intermixed with test programs): .703831][ T6944] Bluetooth: hci1: command 0x0c1a tx timeout [ 540.093920][T13697] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 540.184151][ T6944] Bluetooth: hci2: command 0x0c1a tx timeout [ 540.199159][T13697] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 540.312787][T13697] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 540.423153][T13697] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 540.536519][T13697] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 540.916303][T13721] sock: sock_timestamping_bind_phc: sock not bind to device [ 541.301625][T13730] device-mapper: ioctl: Invalid ioctl structure: uuid ±, name , dev 5 [ 541.371596][T13725] zswap: compressor 000 not available [ 541.422667][T13732] FAULT_INJECTION: forcing a failure. [ 541.422667][T13732] name fail_futex, interval 1, probability 0, space 0, times 0 [ 541.422694][T13732] CPU: 0 UID: 0 PID: 13732 Comm: syz.4.1567 Not tainted syzkaller #0 PREEMPT(full) [ 541.422712][T13732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 541.422721][T13732] Call Trace: [ 541.422727][T13732] [ 541.422732][T13732] dump_stack_lvl+0x16c/0x1f0 [ 541.422751][T13732] should_fail_ex+0x512/0x640 [ 541.422771][T13732] get_futex_key+0x1d0/0x1560 [ 541.422795][T13732] ? __pfx_get_futex_key+0x10/0x10 [ 541.422816][T13732] ? __pick_eevdf+0x30a/0x670 [ 541.422839][T13732] futex_wait_setup+0x9d/0x550 [ 541.422860][T13732] __futex_wait+0x193/0x2f0 [ 541.422874][T13732] ? __pfx___futex_wait+0x10/0x10 [ 541.422887][T13732] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 541.422908][T13732] ? lockdep_hardirqs_on+0x7c/0x110 [ 541.422924][T13732] ? __pfx_futex_wake_mark+0x10/0x10 [ 541.422941][T13732] ? futex_private_hash_put+0x176/0x300 [ 541.422962][T13732] ? futex_private_hash_put+0x18a/0x300 [ 541.422983][T13732] futex_wait+0xe8/0x380 [ 541.422996][T13732] ? __pfx_futex_wait+0x10/0x10 [ 541.423016][T13732] ? __pfx_set_user_sigmask+0x10/0x10 [ 541.423035][T13732] do_futex+0x229/0x350 [ 541.423055][T13732] ? __pfx_do_futex+0x10/0x10 [ 541.423075][T13732] ? __pfx_do_pselect.constprop.0+0x10/0x10 [ 541.423095][T13732] __x64_sys_futex+0x1e0/0x4c0 [ 541.423115][T13732] ? __do_sys_close_range+0x278/0x730 [ 541.423132][T13732] ? __pfx___x64_sys_futex+0x10/0x10 [ 541.423164][T13732] ? __pfx___do_sys_close_range+0x10/0x10 [ 541.423187][T13732] do_syscall_64+0xcd/0x4b0 [ 541.423204][T13732] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 541.423219][T13732] RIP: 0033:0x7f008d78eec9 [ 541.423230][T13732] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 541.423244][T13732] RSP: 002b:00007f008e67f0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 541.423258][T13732] RAX: ffffffffffffffda RBX: 00007f008d9e5fa8 RCX: 00007f008d78eec9 [ 541.423267][T13732] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f008d9e5fa8 [ 541.423276][T13732] RBP: 00007f008d9e5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 541.423285][T13732] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 541.423293][T13732] R13: 00007f008d9e6038 R14: 00007ffe64508120 R15: 00007ffe64508208 [ 541.423311][T13732] [ 541.510306][T13735] queue_state_write: operation too long [ 541.510320][T13735] queue_state_write: use 'run', 'start' or 'kick' [ 541.854461][T13745] blktrace: Concurrent blktraces are not allowed on ram7 [ 542.104404][ T6944] Bluetooth: hci1: command 0x0c1a tx timeout [ 542.264014][ T6944] Bluetooth: hci2: command 0x0c1a tx timeout [ 542.343856][ T6944] Bluetooth: hci3: command 0x0c1a tx timeout [ 542.423841][ T6944] Bluetooth: hci0: command 0x0406 tx timeout [ 542.583996][ T6944] Bluetooth: hci4: command 0x0c1a tx timeout [ 544.344531][ T6944] Bluetooth: hci2: command 0x0c1a tx timeout [ 544.425514][ T6944] Bluetooth: hci3: command 0x0c1a tx timeout [ 544.506410][ T6944] Bluetooth: hci0: command 0x0406 tx timeout [ 544.665269][ T6944] Bluetooth: hci4: command 0x0c1a tx timeout [ 545.709300][T13788] misc userio: No port type given on /dev/userio [ 546.124525][T13806] netlink: 280 bytes leftover after parsing attributes in process `syz.5.1584'. [ 546.233417][T13782] Process accounting paused [ 546.428028][ T6944] Bluetooth: hci2: command 0x0c1a tx timeout [ 546.503899][ T6944] Bluetooth: hci3: command 0x0c1a tx timeout [ 546.583808][ T6944] Bluetooth: hci0: command 0x0406 tx timeout [ 546.744314][ T6944] Bluetooth: hci4: command 0x0c1a tx timeout [ 547.764700][T13824] FAULT_INJECTION: forcing a failure. [ 547.764700][T13824] name fail_futex, interval 1, probability 0, space 0, times 0 [ 547.828813][T13819] Process accounting resumed [ 547.880708][T13824] CPU: 0 UID: 0 PID: 13824 Comm: syz.3.1588 Not tainted syzkaller #0 PREEMPT(full) [ 547.880730][T13824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 547.880739][T13824] Call Trace: [ 547.880744][T13824] [ 547.880750][T13824] dump_stack_lvl+0x16c/0x1f0 [ 547.880769][T13824] should_fail_ex+0x512/0x640 [ 547.880788][T13824] get_futex_key+0xff0/0x1560 [ 547.880815][T13824] ? __pfx_get_futex_key+0x10/0x10 [ 547.880834][T13824] ? __mutex_trylock_common+0xe9/0x250 [ 547.880859][T13824] futex_wake+0xea/0x530 [ 547.880875][T13824] ? __pfx_futex_wake+0x10/0x10 [ 547.880896][T13824] do_futex+0x1e3/0x350 [ 547.880916][T13824] ? __pfx_do_futex+0x10/0x10 [ 547.880934][T13824] ? __might_fault+0xe3/0x190 [ 547.880954][T13824] mm_release+0x24e/0x300 [ 547.880972][T13824] do_exit+0x68e/0x2bf0 [ 547.880988][T13824] ? __pfx_do_exit+0x10/0x10 [ 547.881000][T13824] ? do_raw_spin_lock+0x12c/0x2b0 [ 547.881014][T13824] ? find_held_lock+0x2b/0x80 [ 547.881032][T13824] do_group_exit+0xd3/0x2a0 [ 547.881046][T13824] get_signal+0x2671/0x26d0 [ 547.881066][T13824] ? __might_fault+0x13b/0x190 [ 547.881083][T13824] ? __pfx_get_signal+0x10/0x10 [ 547.881100][T13824] ? do_futex+0x122/0x350 [ 547.881119][T13824] ? __pfx_do_futex+0x10/0x10 [ 547.881140][T13824] arch_do_signal_or_restart+0x8f/0x790 [ 547.881160][T13824] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 547.881184][T13824] ? xfd_validate_state+0x61/0x180 [ 547.881201][T13824] exit_to_user_mode_loop+0x85/0x130 [ 547.881216][T13824] do_syscall_64+0x419/0x4b0 [ 547.881232][T13824] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 547.881245][T13824] RIP: 0033:0x7f6963b8eec9 [ 547.881258][T13824] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 547.881271][T13824] RSP: 002b:00007f6961d930e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 547.881284][T13824] RAX: fffffffffffffe00 RBX: 00007f6963de6368 RCX: 00007f6963b8eec9 [ 547.881293][T13824] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f6963de6368 [ 547.881302][T13824] RBP: 00007f6963de6360 R08: 0000000000000000 R09: 0000000000000000 [ 547.881311][T13824] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 547.881319][T13824] R13: 00007f6963de63f8 R14: 00007ffe2b049c70 R15: 00007ffe2b049d58 [ 547.881336][T13824] [ 548.122141][T13834] vcan0: tx drop: invalid da for name 0x000000000000003f [ 548.673481][ T6944] Bluetooth: hci3: command 0x0c1a tx timeout [ 548.679578][ T6944] Bluetooth: hci0: command 0x0406 tx timeout [ 548.782234][T13839] vivid-003: ================= START STATUS ================= [ 548.803864][T13839] vivid-003: Radio HW Seek Mode: Bounded [ 548.809523][T13839] vivid-003: Radio Programmable HW Seek: false [ 548.934103][T13839] vivid-003: RDS Rx I/O Mode: Block I/O [ 548.964262][T13839] vivid-003: Generate RBDS Instead of RDS: false [ 549.028170][T13839] vivid-003: RDS Reception: true [ 549.064484][T13839] vivid-003: RDS Program Type: 0 inactive [ 549.106525][T13839] vivid-003: RDS PS Name: inactive [ 549.111791][T13839] vivid-003: RDS Radio Text: inactive [ 549.173685][T13839] vivid-003: RDS Traffic Announcement: false inactive [ 549.208495][T13839] vivid-003: RDS Traffic Program: false inactive [ 549.253569][T13839] vivid-003: RDS Music: false inactive [ 549.294463][T13839] vivid-003: ================== END STATUS ================== [ 549.648849][T13845] queue_state_write: operation too long [ 549.679655][T13845] queue_state_write: use 'run', 'start' or 'kick' [ 550.585046][T13864] netlink: 280 bytes leftover after parsing attributes in process `syz.3.1595'. [ 550.968664][T13822] kexec: Could not allocate control_code_buffer [ 551.070778][T13873] queue_state_write: operation too long [ 551.099699][T13873] queue_state_write: use 'run', 'start' or 'kick' [ 551.196649][ T6960] EXT4-fs (sda1): Delayed block allocation failed for inode 2026 at logical offset 5 with max blocks 1 with error 117 [ 551.281901][ T6960] EXT4-fs (sda1): This should not happen!! Data will be lost [ 551.281901][ T6960] [ 551.336266][T13871] FAULT_INJECTION: forcing a failure. [ 551.336266][T13871] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 551.444303][T13871] CPU: 0 UID: 0 PID: 13871 Comm: syz.5.1597 Not tainted syzkaller #0 PREEMPT(full) [ 551.444326][T13871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 551.444335][T13871] Call Trace: [ 551.444340][T13871] [ 551.444346][T13871] dump_stack_lvl+0x16c/0x1f0 [ 551.444367][T13871] should_fail_ex+0x512/0x640 [ 551.444388][T13871] should_fail_alloc_page+0xe7/0x130 [ 551.444411][T13871] prepare_alloc_pages+0x3c2/0x610 [ 551.444434][T13871] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 551.444451][T13871] ? stack_trace_save+0x8e/0xc0 [ 551.444470][T13871] ? __pfx_stack_trace_save+0x10/0x10 [ 551.444499][T13871] ? stack_depot_save_flags+0x29/0x9c0 [ 551.444517][T13871] ? trace_mm_page_alloc+0x11f/0x1a0 [ 551.444541][T13871] ? kasan_save_stack+0x42/0x60 [ 551.444558][T13871] ? kasan_save_stack+0x33/0x60 [ 551.444573][T13871] ? kasan_save_track+0x14/0x30 [ 551.444589][T13871] ? __kasan_slab_alloc+0x89/0x90 [ 551.444607][T13871] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 551.444622][T13871] ? dup_mmap+0xe80/0x2280 [ 551.444641][T13871] ? kernel_clone+0xfc/0x930 [ 551.444659][T13871] ? do_syscall_64+0xcd/0x4b0 [ 551.444673][T13871] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 551.444697][T13871] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 551.444714][T13871] ? policy_nodemask+0xea/0x4e0 [ 551.444736][T13871] alloc_pages_mpol+0x1fb/0x550 [ 551.444756][T13871] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 551.444781][T13871] alloc_pages_noprof+0x131/0x390 [ 551.444801][T13871] pte_alloc_one+0x1e/0x350 [ 551.444820][T13871] __pte_alloc+0x6d/0x380 [ 551.444838][T13871] ? __pfx___pte_alloc+0x10/0x10 [ 551.444856][T13871] ? _raw_spin_unlock+0x28/0x50 [ 551.444876][T13871] ? __pmd_alloc+0x64f/0x8b0 [ 551.444897][T13871] copy_page_range+0x44a1/0x6930 [ 551.444933][T13871] ? __pfx_copy_page_range+0x10/0x10 [ 551.444949][T13871] ? mas_store+0x860/0x1030 [ 551.444964][T13871] ? __pfx___might_resched+0x10/0x10 [ 551.444982][T13871] ? find_held_lock+0x2b/0x80 [ 551.445000][T13871] ? __pfx_mas_store+0x10/0x10 [ 551.445014][T13871] ? __vma_enter_locked+0x163/0x3f0 [ 551.445038][T13871] dup_mmap+0xe80/0x2280 [ 551.445065][T13871] ? __pfx_dup_mmap+0x10/0x10 [ 551.445098][T13871] copy_process+0x3f0c/0x76a0 [ 551.445126][T13871] ? __pfx_copy_process+0x10/0x10 [ 551.445144][T13871] ? futex_private_hash_put+0x176/0x300 [ 551.445166][T13871] ? futex_private_hash_put+0x18a/0x300 [ 551.445189][T13871] kernel_clone+0xfc/0x930 [ 551.445208][T13871] ? __pfx_futex_wake+0x10/0x10 [ 551.445221][T13871] ? __pfx_kernel_clone+0x10/0x10 [ 551.445252][T13871] __do_sys_clone+0xce/0x120 [ 551.445270][T13871] ? __pfx___do_sys_clone+0x10/0x10 [ 551.445299][T13871] ? xfd_validate_state+0x61/0x180 [ 551.445318][T13871] do_syscall_64+0xcd/0x4b0 [ 551.445334][T13871] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 551.445348][T13871] RIP: 0033:0x7f260af8eec9 [ 551.445361][T13871] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 551.445374][T13871] RSP: 002b:00007f260befffe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 551.445388][T13871] RAX: ffffffffffffffda RBX: 00007f260b1e5fa0 RCX: 00007f260af8eec9 [ 551.445397][T13871] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020a08200 [ 551.445406][T13871] RBP: 00007f260b011f91 R08: 0000000000000000 R09: 0000000000000000 [ 551.445414][T13871] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 551.445423][T13871] R13: 00007f260b1e6038 R14: 00007f260b1e5fa0 R15: 00007fffc853d778 [ 551.445443][T13871] [ 552.920424][T13888] netlink: 280 bytes leftover after parsing attributes in process `syz.3.1601'. [ 553.334933][T13894] netlink: 280 bytes leftover after parsing attributes in process `syz.3.1602'. [ 554.863071][ T8082] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 555.060432][T13915] Process accounting paused [ 556.468051][T13941] netlink: 334 bytes leftover after parsing attributes in process `syz.4.1608'. [ 556.904169][ T6944] Bluetooth: hci0: command 0x0406 tx timeout [ 557.092986][T13954] netlink: 280 bytes leftover after parsing attributes in process `syz.2.1616'. [ 557.436628][T13963] vivid-003: ================= START STATUS ================= [ 557.526556][T13963] vivid-003: Radio HW Seek Mode: Bounded [ 557.532227][T13963] vivid-003: Radio Programmable HW Seek: false [ 557.662434][T13964] netlink: 'syz.4.1618': attribute type 8 has an invalid length. [ 557.769996][T13963] vivid-003: RDS Rx I/O Mode: Block I/O [ 557.934056][T13963] vivid-003: Generate RBDS Instead of RDS: false [ 558.071451][T13963] vivid-003: RDS Reception: true [ 558.147525][T13963] vivid-003: RDS Program Type: 0 inactive [ 558.314471][T13963] vivid-003: RDS PS Name: inactive [ 558.409699][T13963] vivid-003: RDS Radio Text: inactive [ 558.498226][T13963] vivid-003: RDS Traffic Announcement: false inactive [ 558.603903][T13963] vivid-003: RDS Traffic Program: false inactive [ 558.610274][T13963] vivid-003: RDS Music: false inactive [ 558.815219][T13963] vivid-003: ================== END STATUS ================== [ 559.239797][T13990] zswap: compressor 000 not available [ 559.309863][T13999] device-mapper: ioctl: Invalid ioctl structure: uuid ±, name , dev 5 [ 561.434122][ T30] audit: type=1800 audit(4294967344.060:10): pid=14025 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1631" name="discovery_nqn" dev="configfs" ino=46936 res=0 errno=0 [ 561.821314][T14027] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1632'. [ 562.027517][T14027] team0: entered promiscuous mode [ 562.072339][T14027] team_slave_0: entered promiscuous mode [ 562.114748][T14027] team_slave_1: entered promiscuous mode [ 562.174375][T14027] team0: entered allmulticast mode [ 562.210428][T14027] team_slave_0: entered allmulticast mode [ 562.261627][T14027] team_slave_1: entered allmulticast mode [ 562.433199][T14032] zswap: compressor not available [ 566.785092][T14093] vivid-003: ================= START STATUS ================= [ 566.851978][T14093] vivid-003: Radio HW Seek Mode: Bounded [ 566.892929][T14093] vivid-003: Radio Programmable HW Seek: false [ 566.929657][T14093] vivid-003: RDS Rx I/O Mode: Block I/O [ 566.972347][T14093] vivid-003: Generate RBDS Instead of RDS: false [ 567.046780][T14093] vivid-003: RDS Reception: true [ 567.051749][T14093] vivid-003: RDS Program Type: 0 inactive [ 567.175525][T14093] vivid-003: RDS PS Name: inactive [ 567.180767][T14093] vivid-003: RDS Radio Text: inactive [ 567.394614][T14093] vivid-003: RDS Traffic Announcement: false inactive [ 567.444132][T14093] vivid-003: RDS Traffic Program: false inactive [ 567.618625][T14093] vivid-003: RDS Music: false inactive [ 567.766426][T14093] vivid-003: ================== END STATUS ================== [ 568.342304][T14114] queue_state_write: operation too long [ 568.383949][T14114] queue_state_write: use 'run', 'start' or 'kick' [ 568.397659][T14098] kexec: Could not allocate control_code_buffer [ 568.429023][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.436924][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 568.731925][T14123] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 570.319407][T14155] queue_state_write: operation too long [ 570.351545][T14155] queue_state_write: use 'run', 'start' or 'kick' [ 572.313079][T14183] device-mapper: ioctl: Invalid ioctl structure: uuid ±, name , dev 5 [ 572.986252][ T6944] Bluetooth: hci4: unexpected subevent 0x01 length: 123 > 18 [ 573.376706][T14207] device-mapper: ioctl: Invalid ioctl structure: uuid ±, name , dev 5 [ 575.063882][ T8082] Bluetooth: hci4: command 0x0c1a tx timeout [ 576.525425][T14233] Process accounting resumed [ 577.005251][T14249] netlink: 'syz.5.1670': attribute type 1 has an invalid length. [ 577.714858][T14265] FAULT_INJECTION: forcing a failure. [ 577.714858][T14265] name failslab, interval 1, probability 0, space 0, times 0 [ 577.821519][T14265] CPU: 0 UID: 0 PID: 14265 Comm: syz.3.1673 Not tainted syzkaller #0 PREEMPT(full) [ 577.821540][T14265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 577.821548][T14265] Call Trace: [ 577.821553][T14265] [ 577.821558][T14265] dump_stack_lvl+0x16c/0x1f0 [ 577.821577][T14265] should_fail_ex+0x512/0x640 [ 577.821593][T14265] ? __kmalloc_noprof+0xca/0x880 [ 577.821609][T14265] should_failslab+0xc2/0x120 [ 577.821629][T14265] __kmalloc_noprof+0xdd/0x880 [ 577.821643][T14265] ? iovec_from_user+0x108/0x140 [ 577.821662][T14265] ? iovec_from_user+0x108/0x140 [ 577.821678][T14265] iovec_from_user+0x108/0x140 [ 577.821696][T14265] __import_iovec+0x88/0x650 [ 577.821712][T14265] ? __might_fault+0xe3/0x190 [ 577.821726][T14265] ? __might_fault+0x13b/0x190 [ 577.821744][T14265] import_iovec+0x86/0xb0 [ 577.821762][T14265] copy_msghdr_from_user+0xf9/0x160 [ 577.821778][T14265] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 577.821796][T14265] ? __pfx__kstrtoull+0x10/0x10 [ 577.821820][T14265] ___sys_sendmsg+0xfe/0x1d0 [ 577.821835][T14265] ? __pfx____sys_sendmsg+0x10/0x10 [ 577.821858][T14265] ? find_held_lock+0x2b/0x80 [ 577.821885][T14265] __sys_sendmmsg+0x200/0x420 [ 577.821902][T14265] ? __pfx___sys_sendmmsg+0x10/0x10 [ 577.821927][T14265] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 577.821949][T14265] ? fput+0x9b/0xd0 [ 577.821976][T14265] ? ksys_write+0x1ac/0x250 [ 577.821992][T14265] ? __pfx_ksys_write+0x10/0x10 [ 577.822010][T14265] __x64_sys_sendmmsg+0x9c/0x100 [ 577.822025][T14265] ? lockdep_hardirqs_on+0x7c/0x110 [ 577.822038][T14265] do_syscall_64+0xcd/0x4b0 [ 577.822054][T14265] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 577.822068][T14265] RIP: 0033:0x7f6963b8eec9 [ 577.822081][T14265] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 577.822094][T14265] RSP: 002b:00007f696495a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 577.822108][T14265] RAX: ffffffffffffffda RBX: 00007f6963de5fa0 RCX: 00007f6963b8eec9 [ 577.822117][T14265] RDX: 000000000000000b RSI: 0000200000000080 RDI: 0000000000000003 [ 577.822126][T14265] RBP: 00007f696495a090 R08: 0000000000000000 R09: 0000000000000000 [ 577.822134][T14265] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 577.822144][T14265] R13: 00007f6963de6038 R14: 00007f6963de5fa0 R15: 00007ffe2b049d58 [ 577.822163][T14265] [ 578.228211][T14273] openvswitch: netlink: Multiple metadata blocks provided [ 578.293761][T14276] vcan0: tx drop: invalid da for name 0x000000000000003f [ 578.475293][T14264] Process accounting paused [ 578.822434][T14289] nvme_fabrics: missing parameter 'transport=%s' [ 578.943861][T14289] nvme_fabrics: missing parameter 'nqn=%s' [ 579.253480][T14299] netlink: 268 bytes leftover after parsing attributes in process `syz.3.1679'. [ 579.407072][T14284] kexec: Could not allocate control_code_buffer [ 579.501202][T14299] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.3.1679: iget: checksum invalid [ 579.554927][T14308] FAULT_INJECTION: forcing a failure. [ 579.554927][T14308] name failslab, interval 1, probability 0, space 0, times 0 [ 579.659162][T14308] CPU: 0 UID: 0 PID: 14308 Comm: syz.4.1680 Not tainted syzkaller #0 PREEMPT(full) [ 579.659187][T14308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 579.659196][T14308] Call Trace: [ 579.659202][T14308] [ 579.659209][T14308] dump_stack_lvl+0x16c/0x1f0 [ 579.659233][T14308] should_fail_ex+0x512/0x640 [ 579.659258][T14308] ? __kmalloc_cache_noprof+0x5f/0x780 [ 579.659277][T14308] should_failslab+0xc2/0x120 [ 579.659298][T14308] __kmalloc_cache_noprof+0x72/0x780 [ 579.659314][T14308] ? do_raw_spin_lock+0x12c/0x2b0 [ 579.659329][T14308] ? alloc_fdtable+0xbd/0x2d0 [ 579.659347][T14308] ? alloc_fdtable+0xbd/0x2d0 [ 579.659361][T14308] alloc_fdtable+0xbd/0x2d0 [ 579.659377][T14308] dup_fd+0x83b/0xb90 [ 579.659399][T14308] __do_sys_close_range+0x4ca/0x730 [ 579.659420][T14308] ? __pfx___do_sys_close_range+0x10/0x10 [ 579.659443][T14308] do_syscall_64+0xcd/0x4b0 [ 579.659460][T14308] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 579.659476][T14308] RIP: 0033:0x7f008d78eec9 [ 579.659492][T14308] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 579.659508][T14308] RSP: 002b:00007f008e67f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 579.659523][T14308] RAX: ffffffffffffffda RBX: 00007f008d9e5fa0 RCX: 00007f008d78eec9 [ 579.659533][T14308] RDX: 0000000000000006 RSI: ffffffffffffffff RDI: 0000000000000000 [ 579.659542][T14308] RBP: 00007f008d811f91 R08: 0000000000000000 R09: 0000000000000000 [ 579.659551][T14308] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 579.659560][T14308] R13: 00007f008d9e6038 R14: 00007f008d9e5fa0 R15: 00007ffe64508208 [ 579.659579][T14308] [ 579.662630][T14299] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 580.116243][T14313] netlink: 280 bytes leftover after parsing attributes in process `syz.2.1682'. [ 581.051802][T14341] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1685'. [ 581.236944][T14299] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.3.1679: iget: checksum invalid [ 581.494122][T14299] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 581.637351][T14299] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.3.1679: iget: checksum invalid [ 581.847119][T14299] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 581.925631][T14299] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.3.1679: iget: checksum invalid [ 582.011541][T14299] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 582.103880][T14299] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 582.181889][T14299] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 582.595192][T14374] FAULT_INJECTION: forcing a failure. [ 582.595192][T14374] name failslab, interval 1, probability 0, space 0, times 0 [ 582.681710][T14374] CPU: 0 UID: 0 PID: 14374 Comm: syz.4.1691 Not tainted syzkaller #0 PREEMPT(full) [ 582.681731][T14374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 582.681740][T14374] Call Trace: [ 582.681745][T14374] [ 582.681750][T14374] dump_stack_lvl+0x16c/0x1f0 [ 582.681769][T14374] should_fail_ex+0x512/0x640 [ 582.681786][T14374] ? __kmalloc_noprof+0xca/0x880 [ 582.681802][T14374] should_failslab+0xc2/0x120 [ 582.681822][T14374] __kmalloc_noprof+0xdd/0x880 [ 582.681836][T14374] ? kernfs_fop_write_iter+0x237/0x570 [ 582.681854][T14374] ? kernfs_fop_write_iter+0x237/0x570 [ 582.681867][T14374] kernfs_fop_write_iter+0x237/0x570 [ 582.681884][T14374] vfs_write+0x7d0/0x11d0 [ 582.681901][T14374] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 582.681916][T14374] ? __pfx___mutex_lock+0x10/0x10 [ 582.681931][T14374] ? __pfx_vfs_write+0x10/0x10 [ 582.681960][T14374] ksys_write+0x12a/0x250 [ 582.681975][T14374] ? __pfx_ksys_write+0x10/0x10 [ 582.681997][T14374] do_syscall_64+0xcd/0x4b0 [ 582.682013][T14374] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 582.682027][T14374] RIP: 0033:0x7f008d78eec9 [ 582.682039][T14374] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 582.682053][T14374] RSP: 002b:00007f008e65e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 582.682066][T14374] RAX: ffffffffffffffda RBX: 00007f008d9e6090 RCX: 00007f008d78eec9 [ 582.682075][T14374] RDX: 0000000000080001 RSI: 00002000000003c0 RDI: 0000000000000007 [ 582.682084][T14374] RBP: 00007f008e65e090 R08: 0000000000000000 R09: 0000000000000000 [ 582.682092][T14374] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 582.682100][T14374] R13: 00007f008d9e6128 R14: 00007f008d9e6090 R15: 00007ffe64508208 [ 582.682118][T14374] [ 584.586390][T14407] netlink: 'syz.2.1699': attribute type 4 has an invalid length. [ 584.643886][T14407] netlink: 314 bytes leftover after parsing attributes in process `syz.2.1699'. [ 584.654404][T14409] vivid-003: ================= START STATUS ================= [ 584.662056][T14409] vivid-003: Radio HW Seek Mode: Bounded [ 584.755623][T14409] vivid-003: Radio Programmable HW Seek: false [ 584.821372][T14409] vivid-003: RDS Rx I/O Mode: Block I/O [ 584.885346][T14409] vivid-003: Generate RBDS Instead of RDS: false [ 584.987053][T14409] vivid-003: RDS Reception: true [ 585.124410][T14409] vivid-003: RDS Program Type: 0 inactive [ 585.176092][T14409] vivid-003: RDS PS Name: inactive [ 585.252436][T14409] vivid-003: RDS Radio Text: inactive [ 585.343464][T14409] vivid-003: RDS Traffic Announcement: false inactive [ 585.361229][T14406] Process accounting resumed [ 585.454327][T14409] vivid-003: RDS Traffic Program: false inactive [ 585.460695][T14409] vivid-003: RDS Music: false inactive [ 585.557194][T14409] vivid-003: ================== END STATUS ================== [ 585.661822][ T30] audit: type=1800 audit(4294967305.740:11): pid=14425 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1702" name="discovery_nqn" dev="configfs" ino=48614 res=0 errno=0 [ 586.089794][T14434] FAULT_INJECTION: forcing a failure. [ 586.089794][T14434] name failslab, interval 1, probability 0, space 0, times 0 [ 586.196271][T14434] CPU: 0 UID: 0 PID: 14434 Comm: syz.5.1703 Not tainted syzkaller #0 PREEMPT(full) [ 586.196293][T14434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 586.196302][T14434] Call Trace: [ 586.196307][T14434] [ 586.196312][T14434] dump_stack_lvl+0x16c/0x1f0 [ 586.196331][T14434] should_fail_ex+0x512/0x640 [ 586.196347][T14434] ? __kmalloc_cache_noprof+0x5f/0x780 [ 586.196365][T14434] should_failslab+0xc2/0x120 [ 586.196384][T14434] __kmalloc_cache_noprof+0x72/0x780 [ 586.196399][T14434] ? alloc_pipe_info+0x10e/0x590 [ 586.196417][T14434] ? find_held_lock+0x2b/0x80 [ 586.196435][T14434] ? alloc_pipe_info+0x10e/0x590 [ 586.196457][T14434] alloc_pipe_info+0x10e/0x590 [ 586.196476][T14434] splice_direct_to_actor+0x77d/0xa30 [ 586.196493][T14434] ? __lock_acquire+0x62e/0x1ce0 [ 586.196511][T14434] ? __pfx_direct_splice_actor+0x10/0x10 [ 586.196527][T14434] ? __pfx_aa_file_perm+0x10/0x10 [ 586.196548][T14434] ? find_held_lock+0x2b/0x80 [ 586.196564][T14434] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 586.196577][T14434] ? get_pid_task+0xfc/0x250 [ 586.196603][T14434] do_splice_direct+0x174/0x240 [ 586.196617][T14434] ? __pfx_do_splice_direct+0x10/0x10 [ 586.196632][T14434] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 586.196649][T14434] ? rw_verify_area+0xcf/0x6c0 [ 586.196666][T14434] do_sendfile+0xb06/0xe50 [ 586.196684][T14434] ? __pfx_do_sendfile+0x10/0x10 [ 586.196699][T14434] ? __fget_files+0x20e/0x3c0 [ 586.196719][T14434] __x64_sys_sendfile64+0x1d8/0x220 [ 586.196737][T14434] ? ksys_write+0x1ac/0x250 [ 586.196752][T14434] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 586.196776][T14434] do_syscall_64+0xcd/0x4b0 [ 586.196792][T14434] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.196806][T14434] RIP: 0033:0x7f260af8eec9 [ 586.196818][T14434] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 586.196831][T14434] RSP: 002b:00007f260bedf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 586.196845][T14434] RAX: ffffffffffffffda RBX: 00007f260b1e6090 RCX: 00007f260af8eec9 [ 586.196854][T14434] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000005 [ 586.196861][T14434] RBP: 00007f260bedf090 R08: 0000000000000000 R09: 0000000000000000 [ 586.196869][T14434] R10: 0000000000000b2d R11: 0000000000000246 R12: 0000000000000001 [ 586.196877][T14434] R13: 00007f260b1e6128 R14: 00007f260b1e6090 R15: 00007fffc853d778 [ 586.196895][T14434] [ 586.874163][T14431] zswap: compressor 000 not available [ 587.139256][T14448] queue_state_write: operation too long [ 587.197813][T14448] queue_state_write: use 'run', 'start' or 'kick' [ 587.642020][T14458] blktrace: Concurrent blktraces are not allowed on nbd3 [ 587.803057][T14444] zswap: compressor 000 not available [ 589.364468][T14471] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 589.408100][T14471] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 589.519259][T14471] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 589.639220][T14471] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 589.751638][T14471] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 589.862168][T14471] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 589.997129][T14471] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 591.309189][ T8082] Bluetooth: hci1: command 0x0c1a tx timeout [ 591.465558][ T8082] Bluetooth: hci2: command 0x0c1a tx timeout [ 591.544643][ T8082] Bluetooth: hci3: command 0x0c1a tx timeout [ 591.705085][ T8082] Bluetooth: hci0: command 0x0406 tx timeout [ 591.865779][ T8082] Bluetooth: hci4: command 0x0c1a tx timeout [ 592.067736][T14536] queue_state_write: operation too long [ 592.099753][T14536] queue_state_write: use 'run', 'start' or 'kick' [ 592.761451][T14551] device-mapper: ioctl: Invalid ioctl structure: uuid ±, name , dev 5 [ 593.784629][ T8082] Bluetooth: hci0: command 0x0406 tx timeout [ 593.945277][ T8082] Bluetooth: hci4: command 0x0c1a tx timeout [ 594.475272][T14577] device-mapper: ioctl: Invalid ioctl structure: uuid ±, name , dev 5 [ 594.804888][T14585] FAULT_INJECTION: forcing a failure. [ 594.804888][T14585] name failslab, interval 1, probability 0, space 0, times 0 [ 595.058522][T14592] usb usb28: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 595.203393][T14585] CPU: 0 UID: 0 PID: 14585 Comm: syz.2.1733 Not tainted syzkaller #0 PREEMPT(full) [ 595.203416][T14585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 595.203425][T14585] Call Trace: [ 595.203431][T14585] [ 595.203437][T14585] dump_stack_lvl+0x16c/0x1f0 [ 595.203458][T14585] should_fail_ex+0x512/0x640 [ 595.203476][T14585] ? fs_reclaim_acquire+0xae/0x150 [ 595.203499][T14585] should_failslab+0xc2/0x120 [ 595.203520][T14585] kmem_cache_alloc_noprof+0x75/0x6e0 [ 595.203536][T14585] ? __kernfs_new_node+0xd2/0x8e0 [ 595.203559][T14585] ? __kernfs_new_node+0xd2/0x8e0 [ 595.203577][T14585] __kernfs_new_node+0xd2/0x8e0 [ 595.203597][T14585] ? __pfx___kernfs_new_node+0x10/0x10 [ 595.203621][T14585] ? find_held_lock+0x2b/0x80 [ 595.203639][T14585] ? kernfs_root+0xee/0x2a0 [ 595.203662][T14585] kernfs_new_node+0x13c/0x1e0 [ 595.203690][T14585] __kernfs_create_file+0x53/0x350 [ 595.203707][T14585] sysfs_add_file_mode_ns+0x207/0x3c0 [ 595.203731][T14585] internal_create_group+0x578/0xf30 [ 595.203757][T14585] ? __pfx_internal_create_group+0x10/0x10 [ 595.203780][T14585] ? kernfs_create_link+0x1bd/0x240 [ 595.203799][T14585] internal_create_groups+0x9d/0x150 [ 595.203821][T14585] device_add+0x731/0x1aa0 [ 595.203837][T14585] ? __pfx_device_add+0x10/0x10 [ 595.203856][T14585] ? __pfx___might_resched+0x10/0x10 [ 595.203874][T14585] ? is_dynamic_key+0xb4/0x160 [ 595.203901][T14585] __add_disk+0x457/0xf00 [ 595.203920][T14585] add_disk_fwnode+0x13f/0x5d0 [ 595.203936][T14585] nbd_dev_add+0x783/0xbb0 [ 595.203957][T14585] ? __pfx_nbd_dev_add+0x10/0x10 [ 595.203987][T14585] ? bpf_lsm_capable+0x9/0x10 [ 595.204008][T14585] ? __radix_tree_lookup+0x21f/0x2c0 [ 595.204033][T14585] nbd_genl_connect+0x8b0/0x1c60 [ 595.204056][T14585] ? __pfx_nbd_genl_connect+0x10/0x10 [ 595.204077][T14585] ? __nla_parse+0x40/0x60 [ 595.204102][T14585] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 595.204122][T14585] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 595.204146][T14585] genl_family_rcv_msg_doit+0x209/0x2f0 [ 595.204175][T14585] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 595.204195][T14585] ? genl_get_cmd+0x194/0x580 [ 595.204219][T14585] ? __radix_tree_lookup+0x21f/0x2c0 [ 595.204244][T14585] genl_rcv_msg+0x55c/0x800 [ 595.204266][T14585] ? __pfx_genl_rcv_msg+0x10/0x10 [ 595.204285][T14585] ? __pfx_nbd_genl_connect+0x10/0x10 [ 595.204312][T14585] netlink_rcv_skb+0x158/0x420 [ 595.204328][T14585] ? __pfx_genl_rcv_msg+0x10/0x10 [ 595.204347][T14585] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 595.204371][T14585] ? netlink_deliver_tap+0x1ae/0xd30 [ 595.204389][T14585] genl_rcv+0x28/0x40 [ 595.204405][T14585] netlink_unicast+0x5a7/0x870 [ 595.204424][T14585] ? __pfx_netlink_unicast+0x10/0x10 [ 595.204440][T14585] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 595.204454][T14585] ? __lock_acquire+0xb97/0x1ce0 [ 595.204479][T14585] netlink_sendmsg+0x8c8/0xdd0 [ 595.204499][T14585] ? __pfx_netlink_sendmsg+0x10/0x10 [ 595.204517][T14585] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 595.204536][T14585] ____sys_sendmsg+0xa95/0xc70 [ 595.204556][T14585] ? copy_msghdr_from_user+0x10a/0x160 [ 595.204570][T14585] ? __pfx_____sys_sendmsg+0x10/0x10 [ 595.204598][T14585] ___sys_sendmsg+0x134/0x1d0 [ 595.204614][T14585] ? __pfx____sys_sendmsg+0x10/0x10 [ 595.204659][T14585] __sys_sendmsg+0x16d/0x220 [ 595.204676][T14585] ? __pfx___sys_sendmsg+0x10/0x10 [ 595.204691][T14585] ? __x64_sys_futex+0x1e0/0x4c0 [ 595.204725][T14585] do_syscall_64+0xcd/0x4b0 [ 595.204743][T14585] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 595.204757][T14585] RIP: 0033:0x7f65a498eec9 [ 595.204770][T14585] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 595.204785][T14585] RSP: 002b:00007f65a58ef038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 595.204798][T14585] RAX: ffffffffffffffda RBX: 00007f65a4be5fa0 RCX: 00007f65a498eec9 [ 595.204808][T14585] RDX: 0000000020040000 RSI: 0000200000000500 RDI: 0000000000000007 [ 595.204817][T14585] RBP: 00007f65a4a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 595.204825][T14585] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 595.204834][T14585] R13: 00007f65a4be6038 R14: 00007f65a4be5fa0 R15: 00007ffde0f26ea8 [ 595.204853][T14585] [ 597.478067][T14601] queue_state_write: operation too long [ 597.483940][T14601] queue_state_write: use 'run', 'start' or 'kick' [ 598.406944][T14585] nbd: failed to add new device [ 599.088394][T14611] nvme_fabrics: missing parameter 'transport=%s' [ 599.150736][T14611] nvme_fabrics: missing parameter 'nqn=%s' [ 599.886979][T14632] device-mapper: ioctl: Invalid ioctl structure: uuid ±, name , dev 5 [ 599.976899][T14633] vivid-003: ================= START STATUS ================= [ 599.976915][T14633] vivid-003: Radio HW Seek Mode: Bounded [ 599.976935][T14633] vivid-003: Radio Programmable HW Seek: false [ 599.976951][T14633] vivid-003: RDS Rx I/O Mode: Block I/O [ 599.976966][T14633] vivid-003: Generate RBDS Instead of RDS: false [ 599.976983][T14633] vivid-003: RDS Reception: true [ 599.976997][T14633] vivid-003: RDS Program Type: 0 inactive [ 599.977018][T14633] vivid-003: RDS PS Name: inactive [ 599.977035][T14633] vivid-003: RDS Radio Text: inactive [ 599.977052][T14633] vivid-003: RDS Traffic Announcement: false inactive [ 599.977071][T14633] vivid-003: RDS Traffic Program: false inactive [ 599.977089][T14633] vivid-003: RDS Music: false inactive [ 599.977106][T14633] vivid-003: ================== END STATUS ================== [ 600.874536][T14644] netlink: 280 bytes leftover after parsing attributes in process `syz.2.1743'. [ 601.160670][ T30] audit: type=1800 audit(4294967321.240:12): pid=14648 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1744" name="discovery_nqn" dev="configfs" ino=49616 res=0 errno=0 [ 601.473337][T14652] queue_state_write: operation too long [ 601.514176][T14652] queue_state_write: use 'run', 'start' or 'kick' [ 602.160506][T14670] queue_state_write: operation too long [ 602.218112][T14670] queue_state_write: use 'run', 'start' or 'kick' [ 602.334107][T14674] random: crng reseeded on system resumption [ 602.850529][ T8082] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 604.193083][T14704] device-mapper: ioctl: Invalid ioctl structure: uuid ±, name , dev 5 [ 604.401743][ T30] audit: type=1800 audit(4294967324.480:13): pid=14708 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1756" name="discovery_nqn" dev="configfs" ino=49809 res=0 errno=0 [ 604.908110][T14684] Bluetooth: hci3: command 0x0c1a tx timeout [ 605.256075][T14721] random: crng reseeded on system resumption [ 606.952709][T14744] FAULT_INJECTION: forcing a failure. [ 606.952709][T14744] name failslab, interval 1, probability 0, space 0, times 0 [ 606.997252][T14757] Process accounting paused [ 607.079294][T14744] CPU: 0 UID: 0 PID: 14744 Comm: syz.3.1763 Not tainted syzkaller #0 PREEMPT(full) [ 607.079316][T14744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 607.079325][T14744] Call Trace: [ 607.079331][T14744] [ 607.079337][T14744] dump_stack_lvl+0x16c/0x1f0 [ 607.079357][T14744] should_fail_ex+0x512/0x640 [ 607.079375][T14744] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 607.079394][T14744] should_failslab+0xc2/0x120 [ 607.079415][T14744] kmem_cache_alloc_noprof+0x75/0x6e0 [ 607.079430][T14744] ? alloc_empty_file+0x55/0x1e0 [ 607.079455][T14744] ? alloc_empty_file+0x55/0x1e0 [ 607.079473][T14744] alloc_empty_file+0x55/0x1e0 [ 607.079494][T14744] path_openat+0xda/0x2cb0 [ 607.079516][T14744] ? __pfx_path_openat+0x10/0x10 [ 607.079537][T14744] do_filp_open+0x20b/0x470 [ 607.079554][T14744] ? __pfx_do_filp_open+0x10/0x10 [ 607.079583][T14744] ? alloc_fd+0x471/0x7d0 [ 607.079603][T14744] do_sys_openat2+0x11b/0x1d0 [ 607.079623][T14744] ? __pfx_do_sys_openat2+0x10/0x10 [ 607.079645][T14744] ? __pfx___might_resched+0x10/0x10 [ 607.079667][T14744] __x64_sys_openat+0x174/0x210 [ 607.079680][T14744] ? __pfx___x64_sys_openat+0x10/0x10 [ 607.079700][T14744] do_syscall_64+0xcd/0x4b0 [ 607.079716][T14744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 607.079734][T14744] RIP: 0033:0x7f6963b8eec9 [ 607.079746][T14744] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 607.079760][T14744] RSP: 002b:00007f696495a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 607.079774][T14744] RAX: ffffffffffffffda RBX: 00007f6963de5fa0 RCX: 00007f6963b8eec9 [ 607.079783][T14744] RDX: 0000000000000800 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 607.079792][T14744] RBP: 00007f6963c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 607.079801][T14744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 607.079810][T14744] R13: 00007f6963de6038 R14: 00007f6963de5fa0 R15: 00007ffe2b049d58 [ 607.079828][T14744] [ 609.377733][T14684] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 609.880681][T14773] netlink: 'syz.3.1766': attribute type 1 has an invalid length. [ 610.200154][T14802] zswap: compressor 000 not available [ 611.415379][ T30] audit: type=1800 audit(4294967298.670:14): pid=14833 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1780" name="discovery_nqn" dev="configfs" ino=50542 res=0 errno=0 [ 611.420483][T14763] Process accounting resumed [ 611.483888][ T6944] Bluetooth: hci0: command 0x0406 tx timeout [ 611.658195][T14836] device-mapper: ioctl: Invalid ioctl structure: uuid ±, name , dev 5 [ 611.717021][T14839] netlink: 'syz.2.1782': attribute type 4 has an invalid length. [ 611.717042][T14839] netlink: 314 bytes leftover after parsing attributes in process `syz.2.1782'. [ 612.351004][T14852] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1784'. [ 612.687289][T14858] MTRR 1 not used [ 614.318719][T14872] kexec: Could not allocate control_code_buffer [ 614.906993][T14886] netlink: 'syz.3.1792': attribute type 4 has an invalid length. [ 614.956236][T14886] netlink: 314 bytes leftover after parsing attributes in process `syz.3.1792'. [ 615.377162][ T30] audit: type=1800 audit(4294967302.630:15): pid=14894 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1794" name="discovery_nqn" dev="configfs" ino=50836 res=0 errno=0 [ 615.552146][T14879] Process accounting paused [ 616.588503][T14923] FAULT_INJECTION: forcing a failure. [ 616.588503][T14923] name failslab, interval 1, probability 0, space 0, times 0 [ 616.679765][T14923] CPU: 0 UID: 0 PID: 14923 Comm: syz.5.1799 Not tainted syzkaller #0 PREEMPT(full) [ 616.679788][T14923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 616.679799][T14923] Call Trace: [ 616.679804][T14923] [ 616.679810][T14923] dump_stack_lvl+0x16c/0x1f0 [ 616.679831][T14923] should_fail_ex+0x512/0x640 [ 616.679850][T14923] ? __kmalloc_noprof+0xca/0x880 [ 616.679867][T14923] should_failslab+0xc2/0x120 [ 616.679887][T14923] __kmalloc_noprof+0xdd/0x880 [ 616.679901][T14923] ? __register_sysctl_table+0xb3/0x1900 [ 616.679927][T14923] ? __register_sysctl_table+0xb3/0x1900 [ 616.679947][T14923] __register_sysctl_table+0xb3/0x1900 [ 616.679970][T14923] ? is_module_address+0x5f/0xf0 [ 616.679986][T14923] ? __pfx___register_sysctl_table+0x10/0x10 [ 616.680007][T14923] ? is_module_address+0x69/0xf0 [ 616.680019][T14923] ? register_net_sysctl_sz+0x228/0x3e0 [ 616.680038][T14923] ? __asan_memcpy+0x3c/0x60 [ 616.680054][T14923] ? __pfx_nf_lwtunnel_net_init+0x10/0x10 [ 616.680072][T14923] nf_lwtunnel_net_init+0x60/0xf0 [ 616.680088][T14923] ops_init+0x1e2/0x5f0 [ 616.680107][T14923] setup_net+0x100/0x390 [ 616.680123][T14923] ? __pfx_setup_net+0x10/0x10 [ 616.680138][T14923] ? debug_mutex_init+0x37/0x70 [ 616.680158][T14923] copy_net_ns+0x2f8/0x690 [ 616.680177][T14923] create_new_namespaces+0x3ea/0xa90 [ 616.680199][T14923] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 616.680219][T14923] ksys_unshare+0x45b/0xa40 [ 616.680239][T14923] ? __pfx_ksys_unshare+0x10/0x10 [ 616.680259][T14923] ? xfd_validate_state+0x61/0x180 [ 616.680278][T14923] __x64_sys_unshare+0x31/0x40 [ 616.680297][T14923] do_syscall_64+0xcd/0x4b0 [ 616.680313][T14923] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 616.680327][T14923] RIP: 0033:0x7f260af8eec9 [ 616.680339][T14923] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 616.680353][T14923] RSP: 002b:00007f260bf00038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 616.680367][T14923] RAX: ffffffffffffffda RBX: 00007f260b1e5fa0 RCX: 00007f260af8eec9 [ 616.680376][T14923] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 616.680384][T14923] RBP: 00007f260b011f91 R08: 0000000000000000 R09: 0000000000000000 [ 616.680392][T14923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 616.680400][T14923] R13: 00007f260b1e6038 R14: 00007f260b1e5fa0 R15: 00007fffc853d778 [ 616.680420][T14923] [ 617.397808][T14930] hub 1-0:1.0: USB hub found [ 617.436328][T14930] hub 1-0:1.0: 1 port detected [ 617.947801][T14684] Bluetooth: hci4: unexpected subevent 0x01 length: 123 > 18 [ 617.966114][ T30] audit: type=1800 audit(4294967305.190:16): pid=14945 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1804" name="discovery_nqn" dev="configfs" ino=50953 res=0 errno=0 [ 618.754418][T14946] netlink: 334 bytes leftover after parsing attributes in process `syz.5.1803'. [ 620.030449][ T6944] Bluetooth: hci4: command 0x0c1a tx timeout [ 620.703867][T14984] ecryptfs_parse_packet_length: Five-byte packet length not supported [ 620.737113][T14987] ecryptfs_miscdev_write: Invalid packet size [11] [ 620.774691][T14984] ecryptfs_miscdev_write: Error parsing packet length; rc = [-22] [ 620.894291][T14983] ima: policy update failed [ 620.915436][ T30] audit: type=1802 audit(4294967308.170:17): pid=14983 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.1811" res=0 errno=0 [ 621.133769][ T6944] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 621.141819][ T6944] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 621.151586][ T6944] CPU: 0 UID: 0 PID: 6944 Comm: kworker/u11:1 Not tainted syzkaller #0 PREEMPT(full) [ 621.151606][ T6944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 621.151616][ T6944] Workqueue: hci3 hci_rx_work [ 621.151634][ T6944] Call Trace: [ 621.151639][ T6944] [ 621.151644][ T6944] dump_stack_lvl+0x16c/0x1f0 [ 621.151663][ T6944] sysfs_warn_dup+0x7f/0xa0 [ 621.151682][ T6944] sysfs_create_dir_ns+0x24b/0x2b0 [ 621.151700][ T6944] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 621.151717][ T6944] ? find_held_lock+0x2b/0x80 [ 621.151738][ T6944] ? do_raw_spin_unlock+0x172/0x230 [ 621.151754][ T6944] kobject_add_internal+0x2c4/0x9b0 [ 621.151775][ T6944] kobject_add+0x16e/0x240 [ 621.151794][ T6944] ? __pfx_kobject_add+0x10/0x10 [ 621.151812][ T6944] ? do_raw_spin_unlock+0x172/0x230 [ 621.151827][ T6944] ? kobject_put+0xab/0x5a0 [ 621.151847][ T6944] device_add+0x288/0x1aa0 [ 621.151862][ T6944] ? __pfx_dev_set_name+0x10/0x10 [ 621.151877][ T6944] ? __pfx_device_add+0x10/0x10 [ 621.151898][ T6944] ? mgmt_send_event_skb+0x2fb/0x460 [ 621.151926][ T6944] hci_conn_add_sysfs+0x17e/0x230 [ 621.151942][ T6944] le_conn_complete_evt+0x1260/0x2150 [ 621.151968][ T6944] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 621.151990][ T6944] ? bt_warn+0xe4/0x120 [ 621.152008][ T6944] ? __pfx_bt_warn+0x10/0x10 [ 621.152033][ T6944] hci_le_conn_complete_evt+0x23c/0x370 [ 621.152059][ T6944] hci_le_meta_evt+0x354/0x5e0 [ 621.152074][ T6944] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 621.152098][ T6944] hci_event_packet+0x685/0x11c0 [ 621.152120][ T6944] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 621.152136][ T6944] ? __pfx_hci_event_packet+0x10/0x10 [ 621.152159][ T6944] ? kcov_remote_start+0x3c9/0x6d0 [ 621.152174][ T6944] ? lockdep_hardirqs_on+0x7c/0x110 [ 621.152193][ T6944] hci_rx_work+0x2c5/0x16b0 [ 621.152208][ T6944] ? rcu_is_watching+0x12/0xc0 [ 621.152228][ T6944] process_one_work+0x9cc/0x1b70 [ 621.152250][ T6944] ? __pfx_process_one_work+0x10/0x10 [ 621.152271][ T6944] ? assign_work+0x1a0/0x250 [ 621.152286][ T6944] worker_thread+0x6c8/0xf10 [ 621.152318][ T6944] ? __pfx_worker_thread+0x10/0x10 [ 621.152334][ T6944] kthread+0x3c5/0x780 [ 621.152349][ T6944] ? __pfx_kthread+0x10/0x10 [ 621.152364][ T6944] ? rcu_is_watching+0x12/0xc0 [ 621.152381][ T6944] ? __pfx_kthread+0x10/0x10 [ 621.152396][ T6944] ret_from_fork+0x56d/0x730 [ 621.152410][ T6944] ? __pfx_kthread+0x10/0x10 [ 621.152424][ T6944] ret_from_fork_asm+0x1a/0x30 [ 621.152451][ T6944] [ 621.152470][ T6944] kobject: kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 621.433962][ T6944] Bluetooth: hci3: failed to register connection device [ 621.444156][ T30] audit: type=1800 audit(4294967308.690:18): pid=14998 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1815" name="discovery_nqn" dev="configfs" ino=51227 res=0 errno=0 [ 621.862757][T15003] random: crng reseeded on system resumption [ 623.006137][T15004] kexec: Could not allocate control_code_buffer [ 623.996173][T15020] FAULT_INJECTION: forcing a failure. [ 623.996173][T15020] name failslab, interval 1, probability 0, space 0, times 0 [ 624.101981][T15020] CPU: 0 UID: 0 PID: 15020 Comm: syz.2.1818 Not tainted syzkaller #0 PREEMPT(full) [ 624.102004][T15020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 624.102013][T15020] Call Trace: [ 624.102018][T15020] [ 624.102024][T15020] dump_stack_lvl+0x16c/0x1f0 [ 624.102045][T15020] should_fail_ex+0x512/0x640 [ 624.102062][T15020] ? __kmalloc_node_track_caller_noprof+0xcb/0x8a0 [ 624.102085][T15020] should_failslab+0xc2/0x120 [ 624.102106][T15020] __kmalloc_node_track_caller_noprof+0xde/0x8a0 [ 624.102134][T15020] ? kstrdup_const+0x63/0x80 [ 624.102155][T15020] ? kstrdup+0x53/0x100 [ 624.102170][T15020] kstrdup+0x53/0x100 [ 624.102188][T15020] kstrdup_const+0x63/0x80 [ 624.102204][T15020] kvasprintf_const+0x10f/0x1a0 [ 624.102223][T15020] kobject_set_name_vargs+0x5a/0x140 [ 624.102242][T15020] kobject_init_and_add+0xe7/0x190 [ 624.102259][T15020] ? __pfx_kobject_init_and_add+0x10/0x10 [ 624.102280][T15020] ? up_write+0x1b2/0x520 [ 624.102299][T15020] sysfs_slab_add+0x194/0x1f0 [ 624.102315][T15020] do_kmem_cache_create+0x5bb/0x740 [ 624.102337][T15020] __kmem_cache_create_args+0x202/0x3c0 [ 624.102355][T15020] mon_text_open+0x333/0x510 [ 624.102373][T15020] ? __pfx_mon_text_open+0x10/0x10 [ 624.102390][T15020] ? __pfx_mon_text_ctor+0x10/0x10 [ 624.102406][T15020] ? __pfx_apparmor_file_open+0x10/0x10 [ 624.102422][T15020] ? lockdown_is_locked_down+0x3f/0x130 [ 624.102436][T15020] ? bpf_lsm_locked_down+0x9/0x10 [ 624.102466][T15020] ? __pfx_mon_text_open+0x10/0x10 [ 624.102482][T15020] full_proxy_open_regular+0x1b6/0x360 [ 624.102502][T15020] do_dentry_open+0x982/0x1530 [ 624.102519][T15020] ? __pfx_full_proxy_open_regular+0x10/0x10 [ 624.102540][T15020] vfs_open+0x82/0x3f0 [ 624.102562][T15020] path_openat+0x1de4/0x2cb0 [ 624.102585][T15020] ? __pfx_path_openat+0x10/0x10 [ 624.102607][T15020] do_filp_open+0x20b/0x470 [ 624.102624][T15020] ? __pfx_do_filp_open+0x10/0x10 [ 624.102654][T15020] ? alloc_fd+0x471/0x7d0 [ 624.102674][T15020] do_sys_openat2+0x11b/0x1d0 [ 624.102695][T15020] ? __pfx_do_sys_openat2+0x10/0x10 [ 624.102723][T15020] __x64_sys_openat+0x174/0x210 [ 624.102736][T15020] ? __pfx___x64_sys_openat+0x10/0x10 [ 624.102756][T15020] do_syscall_64+0xcd/0x4b0 [ 624.102773][T15020] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 624.102787][T15020] RIP: 0033:0x7f65a498eec9 [ 624.102799][T15020] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 624.102813][T15020] RSP: 002b:00007f65a58ad038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 624.102827][T15020] RAX: ffffffffffffffda RBX: 00007f65a4be6180 RCX: 00007f65a498eec9 [ 624.102837][T15020] RDX: 0000000000000000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 624.102846][T15020] RBP: 00007f65a4a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 624.102856][T15020] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 624.102864][T15020] R13: 00007f65a4be6218 R14: 00007f65a4be6180 R15: 00007ffde0f26ea8 [ 624.102883][T15020] [ 624.102891][T15020] kobject: can not set name properly! [ 624.813210][T15026] queue_state_write: operation too long [ 624.971013][T15026] queue_state_write: use 'run', 'start' or 'kick' [ 625.568046][T15041] device-mapper: ioctl: Invalid ioctl structure: uuid ±, name , dev 5 [ 625.625560][T15043] netlink: 'syz.3.1823': attribute type 4 has an invalid length. [ 625.633321][T15043] netlink: 314 bytes leftover after parsing attributes in process `syz.3.1823'. [ 625.866950][T15020] SLUB: Unable to add cache mon_text_ffff88804ba71000 to sysfs [ 626.674762][T15053] queue_state_write: operation too long [ 626.680428][T15053] queue_state_write: use 'run', 'start' or 'kick' [ 627.779291][T15069] FAULT_INJECTION: forcing a failure. [ 627.779291][T15069] name failslab, interval 1, probability 0, space 0, times 0 [ 627.843081][T15069] CPU: 0 UID: 0 PID: 15069 Comm: syz.3.1828 Not tainted syzkaller #0 PREEMPT(full) [ 627.843103][T15069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 627.843112][T15069] Call Trace: [ 627.843117][T15069] [ 627.843124][T15069] dump_stack_lvl+0x16c/0x1f0 [ 627.843145][T15069] should_fail_ex+0x512/0x640 [ 627.843162][T15069] ? __kmalloc_cache_noprof+0x5f/0x780 [ 627.843180][T15069] should_failslab+0xc2/0x120 [ 627.843200][T15069] __kmalloc_cache_noprof+0x72/0x780 [ 627.843215][T15069] ? do_raw_spin_lock+0x12c/0x2b0 [ 627.843230][T15069] ? alloc_fdtable+0xbd/0x2d0 [ 627.843247][T15069] ? alloc_fdtable+0xbd/0x2d0 [ 627.843260][T15069] alloc_fdtable+0xbd/0x2d0 [ 627.843275][T15069] dup_fd+0x83b/0xb90 [ 627.843297][T15069] __do_sys_close_range+0x4ca/0x730 [ 627.843316][T15069] ? __pfx___do_sys_close_range+0x10/0x10 [ 627.843338][T15069] do_syscall_64+0xcd/0x4b0 [ 627.843355][T15069] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 627.843369][T15069] RIP: 0033:0x7f6963b8eec9 [ 627.843381][T15069] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 627.843394][T15069] RSP: 002b:00007f696495a038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 627.843408][T15069] RAX: ffffffffffffffda RBX: 00007f6963de5fa0 RCX: 00007f6963b8eec9 [ 627.843418][T15069] RDX: 0000000000000006 RSI: ffffffffffffffff RDI: 0000000000000000 [ 627.843426][T15069] RBP: 00007f6963c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 627.843434][T15069] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 627.843443][T15069] R13: 00007f6963de6038 R14: 00007f6963de5fa0 R15: 00007ffe2b049d58 [ 627.843460][T15069] [ 628.793403][T15079] netlink: 'syz.5.1830': attribute type 4 has an invalid length. [ 628.916106][T15079] netlink: 314 bytes leftover after parsing attributes in process `syz.5.1830'. [ 629.274695][T15087] queue_state_write: operation too long [ 629.296209][T15087] queue_state_write: use 'run', 'start' or 'kick' [ 629.879970][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 629.893623][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 630.093848][T15100] netlink: 'syz.2.1834': attribute type 4 has an invalid length. [ 630.160536][T15100] netlink: 314 bytes leftover after parsing attributes in process `syz.2.1834'. [ 630.278916][T15105] random: crng reseeded on system resumption [ 630.792831][ T6944] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 631.720624][T15114] netlink: 334 bytes leftover after parsing attributes in process `syz.2.1836'. [ 632.796220][T15141] nvme_fabrics: missing parameter 'transport=%s' [ 632.802578][T15141] nvme_fabrics: missing parameter 'nqn=%s' [ 632.824142][T14684] Bluetooth: hci2: command 0x0c1a tx timeout [ 632.887945][T15147] vivid-003: ================= START STATUS ================= [ 632.940078][T15147] vivid-003: Radio HW Seek Mode: Bounded [ 632.975949][T15147] vivid-003: Radio Programmable HW Seek: false [ 633.033533][T15147] vivid-003: RDS Rx I/O Mode: Block I/O [ 633.104599][T15150] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1843'. [ 633.174846][T15147] vivid-003: Generate RBDS Instead of RDS: false [ 633.263987][T15147] vivid-003: RDS Reception: true [ 633.337312][T15147] vivid-003: RDS Program Type: 0 inactive [ 633.394157][T15147] vivid-003: RDS PS Name: inactive [ 633.422799][T15147] vivid-003: RDS Radio Text: inactive [ 633.456637][T15147] vivid-003: RDS Traffic Announcement: false inactive [ 633.495605][T15147] vivid-003: RDS Traffic Program: false inactive [ 633.547190][T15147] vivid-003: RDS Music: false inactive [ 633.586276][T15147] vivid-003: ================== END STATUS ================== [ 633.708807][T15167] device-mapper: ioctl: Invalid ioctl structure: uuid ±, name , dev 5 [ 633.858313][T15154] FAULT_INJECTION: forcing a failure. [ 633.858313][T15154] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 634.035059][T15154] CPU: 0 UID: 0 PID: 15154 Comm: syz.4.1844 Not tainted syzkaller #0 PREEMPT(full) [ 634.035083][T15154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 634.035092][T15154] Call Trace: [ 634.035098][T15154] [ 634.035103][T15154] dump_stack_lvl+0x16c/0x1f0 [ 634.035124][T15154] should_fail_ex+0x512/0x640 [ 634.035144][T15154] _copy_from_user+0x2e/0xd0 [ 634.035162][T15154] copy_msghdr_from_user+0x98/0x160 [ 634.035178][T15154] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 634.035196][T15154] ? kfree+0x252/0x6d0 [ 634.035215][T15154] ___sys_sendmsg+0xfe/0x1d0 [ 634.035231][T15154] ? __pfx____sys_sendmsg+0x10/0x10 [ 634.035263][T15154] ? __pfx___might_resched+0x10/0x10 [ 634.035284][T15154] __sys_sendmmsg+0x200/0x420 [ 634.035302][T15154] ? __pfx___sys_sendmmsg+0x10/0x10 [ 634.035322][T15154] ? __pfx_do_futex+0x10/0x10 [ 634.035342][T15154] ? fput+0x9b/0xd0 [ 634.035370][T15154] ? xfd_validate_state+0x61/0x180 [ 634.035386][T15154] __x64_sys_sendmmsg+0x9c/0x100 [ 634.035401][T15154] ? lockdep_hardirqs_on+0x7c/0x110 [ 634.035415][T15154] do_syscall_64+0xcd/0x4b0 [ 634.035431][T15154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 634.035445][T15154] RIP: 0033:0x7f008d78eec9 [ 634.035457][T15154] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 634.035470][T15154] RSP: 002b:00007f008e67f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 634.035491][T15154] RAX: ffffffffffffffda RBX: 00007f008d9e5fa0 RCX: 00007f008d78eec9 [ 634.035502][T15154] RDX: 0000000000000007 RSI: 0000200000000200 RDI: 0000000000000007 [ 634.035511][T15154] RBP: 00007f008d811f91 R08: 0000000000000000 R09: 0000000000000000 [ 634.035520][T15154] R10: 0000000000004008 R11: 0000000000000246 R12: 0000000000000000 [ 634.035529][T15154] R13: 00007f008d9e6038 R14: 00007f008d9e5fa0 R15: 00007ffe64508208 [ 634.035547][T15154] [ 634.604884][T15177] ptp ptp0: only physical clock in use now [ 635.453321][T15192] blktrace: Concurrent blktraces are not allowed on nbd3 [ 635.686048][T15190] vivid-003: ================= START STATUS ================= [ 635.736863][T15190] vivid-003: Radio HW Seek Mode: Bounded [ 635.762129][T15190] vivid-003: Radio Programmable HW Seek: false [ 635.820379][T15190] vivid-003: RDS Rx I/O Mode: Block I/O [ 635.858875][T15190] vivid-003: Generate RBDS Instead of RDS: false [ 635.964620][T15190] vivid-003: RDS Reception: true [ 636.002538][T15190] vivid-003: RDS Program Type: 0 inactive [ 636.137940][T15190] vivid-003: RDS PS Name: inactive [ 636.231921][T15190] vivid-003: RDS Radio Text: inactive [ 636.322653][T15190] vivid-003: RDS Traffic Announcement: false inactive [ 636.386904][T15190] vivid-003: RDS Traffic Program: false inactive [ 636.491021][T15190] vivid-003: RDS Music: false inactive [ 636.574689][T15190] vivid-003: ================== END STATUS ================== [ 637.049969][T15209] FAULT_INJECTION: forcing a failure. [ 637.049969][T15209] name failslab, interval 1, probability 0, space 0, times 0 [ 637.210596][T15209] CPU: 0 UID: 0 PID: 15209 Comm: syz.3.1854 Not tainted syzkaller #0 PREEMPT(full) [ 637.210619][T15209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 637.210628][T15209] Call Trace: [ 637.210634][T15209] [ 637.210640][T15209] dump_stack_lvl+0x16c/0x1f0 [ 637.210661][T15209] should_fail_ex+0x512/0x640 [ 637.210677][T15209] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 637.210697][T15209] should_failslab+0xc2/0x120 [ 637.210719][T15209] kmem_cache_alloc_noprof+0x75/0x6e0 [ 637.210735][T15209] ? skb_clone+0x190/0x3f0 [ 637.210754][T15209] ? skb_clone+0x190/0x3f0 [ 637.210767][T15209] skb_clone+0x190/0x3f0 [ 637.210783][T15209] netlink_deliver_tap+0xabd/0xd30 [ 637.210803][T15209] netlink_unicast+0x64c/0x870 [ 637.210823][T15209] ? __pfx_netlink_unicast+0x10/0x10 [ 637.210838][T15209] ? __asan_memset+0x23/0x50 [ 637.210852][T15209] ? __build_skb_around+0x278/0x3b0 [ 637.210875][T15209] ? is_vmalloc_addr+0x86/0xa0 [ 637.210894][T15209] netlink_sendmsg+0x8c8/0xdd0 [ 637.210913][T15209] ? __pfx_netlink_sendmsg+0x10/0x10 [ 637.210931][T15209] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 637.210951][T15209] ____sys_sendmsg+0xa95/0xc70 [ 637.210972][T15209] ? __pfx_____sys_sendmsg+0x10/0x10 [ 637.210993][T15209] ? find_held_lock+0x2b/0x80 [ 637.211013][T15209] ? futex_unqueue+0x133/0x2c0 [ 637.211037][T15209] ___sys_sendmsg+0x134/0x1d0 [ 637.211053][T15209] ? __pfx____sys_sendmsg+0x10/0x10 [ 637.211077][T15209] ? find_held_lock+0x2b/0x80 [ 637.211104][T15209] __sys_sendmmsg+0x200/0x420 [ 637.211122][T15209] ? __pfx___sys_sendmmsg+0x10/0x10 [ 637.211148][T15209] ? __pfx_do_futex+0x10/0x10 [ 637.211171][T15209] ? fput+0x9b/0xd0 [ 637.211203][T15209] ? xfd_validate_state+0x61/0x180 [ 637.211223][T15209] __x64_sys_sendmmsg+0x9c/0x100 [ 637.211240][T15209] ? lockdep_hardirqs_on+0x7c/0x110 [ 637.211254][T15209] do_syscall_64+0xcd/0x4b0 [ 637.211278][T15209] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 637.211294][T15209] RIP: 0033:0x7f6963b8eec9 [ 637.211307][T15209] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 637.211321][T15209] RSP: 002b:00007f696495a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 637.211337][T15209] RAX: ffffffffffffffda RBX: 00007f6963de5fa0 RCX: 00007f6963b8eec9 [ 637.211347][T15209] RDX: 0000000000000007 RSI: 0000200000000200 RDI: 0000000000000007 [ 637.211356][T15209] RBP: 00007f6963c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 637.211365][T15209] R10: 0000000000004008 R11: 0000000000000246 R12: 0000000000000000 [ 637.211376][T15209] R13: 00007f6963de6038 R14: 00007f6963de5fa0 R15: 00007ffe2b049d58 [ 637.211394][T15209] [ 638.001414][T15233] FAULT_INJECTION: forcing a failure. [ 638.001414][T15233] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 638.045978][T15229] Process accounting resumed [ 638.093351][T15233] CPU: 0 UID: 0 PID: 15233 Comm: syz.2.1858 Not tainted syzkaller #0 PREEMPT(full) [ 638.093374][T15233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 638.093382][T15233] Call Trace: [ 638.093387][T15233] [ 638.093392][T15233] dump_stack_lvl+0x16c/0x1f0 [ 638.093412][T15233] should_fail_ex+0x512/0x640 [ 638.093430][T15233] _copy_from_user+0x2e/0xd0 [ 638.093448][T15233] core_sys_select+0x35b/0xc20 [ 638.093468][T15233] ? __pfx_core_sys_select+0x10/0x10 [ 638.093486][T15233] ? proc_fail_nth_write+0x9f/0x220 [ 638.093525][T15233] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 638.093545][T15233] kern_select+0x15d/0x1e0 [ 638.093560][T15233] ? __pfx_kern_select+0x10/0x10 [ 638.093576][T15233] ? __pfx_ksys_write+0x10/0x10 [ 638.093596][T15233] __x64_sys_select+0xbd/0x160 [ 638.093609][T15233] ? do_syscall_64+0x91/0x4b0 [ 638.093622][T15233] ? lockdep_hardirqs_on+0x7c/0x110 [ 638.093635][T15233] do_syscall_64+0xcd/0x4b0 [ 638.093650][T15233] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 638.093665][T15233] RIP: 0033:0x7f65a498eec9 [ 638.093679][T15233] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 638.093700][T15233] RSP: 002b:00007f65a58ef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000017 [ 638.093713][T15233] RAX: ffffffffffffffda RBX: 00007f65a4be5fa0 RCX: 00007f65a498eec9 [ 638.093722][T15233] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000e [ 638.093730][T15233] RBP: 00007f65a58ef090 R08: 0000000000000000 R09: 0000000000000000 [ 638.093739][T15233] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 638.093747][T15233] R13: 00007f65a4be6038 R14: 00007f65a4be5fa0 R15: 00007ffde0f26ea8 [ 638.093765][T15233] [ 638.715008][T15232] kexec: Could not allocate control_code_buffer [ 639.321689][T14684] Bluetooth: hci4: unexpected subevent 0x01 length: 123 > 18 [ 639.329568][T14684] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:0' [ 639.340370][T14684] CPU: 0 UID: 0 PID: 14684 Comm: kworker/u11:0 Not tainted syzkaller #0 PREEMPT(full) [ 639.340408][T14684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 639.340418][T14684] Workqueue: hci4 hci_rx_work [ 639.340438][T14684] Call Trace: [ 639.340443][T14684] [ 639.340448][T14684] dump_stack_lvl+0x16c/0x1f0 [ 639.340466][T14684] sysfs_warn_dup+0x7f/0xa0 [ 639.340487][T14684] sysfs_create_dir_ns+0x24b/0x2b0 [ 639.340506][T14684] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 639.340524][T14684] ? find_held_lock+0x2b/0x80 [ 639.340546][T14684] ? do_raw_spin_unlock+0x172/0x230 [ 639.340562][T14684] kobject_add_internal+0x2c4/0x9b0 [ 639.340583][T14684] kobject_add+0x16e/0x240 [ 639.340606][T14684] ? __pfx_kobject_add+0x10/0x10 [ 639.340625][T14684] ? do_raw_spin_unlock+0x172/0x230 [ 639.340641][T14684] ? kobject_put+0xab/0x5a0 [ 639.340663][T14684] device_add+0x288/0x1aa0 [ 639.340677][T14684] ? __pfx_dev_set_name+0x10/0x10 [ 639.340692][T14684] ? __pfx_device_add+0x10/0x10 [ 639.340714][T14684] ? mgmt_send_event_skb+0x2fb/0x460 [ 639.340741][T14684] hci_conn_add_sysfs+0x17e/0x230 [ 639.340758][T14684] le_conn_complete_evt+0x1260/0x2150 [ 639.340785][T14684] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 639.340806][T14684] ? bt_warn+0xe4/0x120 [ 639.340825][T14684] ? __pfx_bt_warn+0x10/0x10 [ 639.340849][T14684] hci_le_conn_complete_evt+0x23c/0x370 [ 639.340875][T14684] hci_le_meta_evt+0x354/0x5e0 [ 639.340890][T14684] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 639.340914][T14684] hci_event_packet+0x685/0x11c0 [ 639.340936][T14684] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 639.340951][T14684] ? __pfx_hci_event_packet+0x10/0x10 [ 639.340974][T14684] ? kcov_remote_start+0x3c9/0x6d0 [ 639.340989][T14684] ? lockdep_hardirqs_on+0x7c/0x110 [ 639.341007][T14684] hci_rx_work+0x2c5/0x16b0 [ 639.341023][T14684] ? rcu_is_watching+0x12/0xc0 [ 639.341042][T14684] process_one_work+0x9cc/0x1b70 [ 639.341065][T14684] ? __pfx_process_one_work+0x10/0x10 [ 639.341086][T14684] ? assign_work+0x1a0/0x250 [ 639.341101][T14684] worker_thread+0x6c8/0xf10 [ 639.341121][T14684] ? __kthread_parkme+0x19e/0x250 [ 639.341150][T14684] ? __pfx_worker_thread+0x10/0x10 [ 639.341166][T14684] kthread+0x3c5/0x780 [ 639.341180][T14684] ? __pfx_kthread+0x10/0x10 [ 639.341196][T14684] ? rcu_is_watching+0x12/0xc0 [ 639.341213][T14684] ? __pfx_kthread+0x10/0x10 [ 639.341228][T14684] ret_from_fork+0x56d/0x730 [ 639.341241][T14684] ? __pfx_kthread+0x10/0x10 [ 639.341255][T14684] ret_from_fork_asm+0x1a/0x30 [ 639.341283][T14684] [ 639.341302][T14684] kobject: kobject_add_internal failed for hci4:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 639.635197][T14684] Bluetooth: hci4: failed to register connection device [ 639.702559][T15255] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input12 [ 640.297356][ T30] audit: type=1800 audit(4294967327.550:19): pid=15267 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1866" name="discovery_nqn" dev="configfs" ino=52250 res=0 errno=0 [ 641.434715][T15292] netlink: 'syz.5.1871': attribute type 4 has an invalid length. [ 641.486269][T15292] netlink: 314 bytes leftover after parsing attributes in process `syz.5.1871'. [ 641.709988][ T6944] Bluetooth: hci4: command 0x0c1a tx timeout [ 642.298217][T15306] netlink: 'syz.2.1874': attribute type 4 has an invalid length. [ 642.350954][T15306] netlink: 314 bytes leftover after parsing attributes in process `syz.2.1874'. [ 642.969604][T15323] FAULT_INJECTION: forcing a failure. [ 642.969604][T15323] name failslab, interval 1, probability 0, space 0, times 0 [ 643.038541][T15323] CPU: 0 UID: 0 PID: 15323 Comm: syz.2.1879 Not tainted syzkaller #0 PREEMPT(full) [ 643.038563][T15323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 643.038573][T15323] Call Trace: [ 643.038578][T15323] [ 643.038584][T15323] dump_stack_lvl+0x16c/0x1f0 [ 643.038605][T15323] should_fail_ex+0x512/0x640 [ 643.038621][T15323] ? __kmalloc_noprof+0xca/0x880 [ 643.038639][T15323] should_failslab+0xc2/0x120 [ 643.038660][T15323] __kmalloc_noprof+0xdd/0x880 [ 643.038674][T15323] ? __register_sysctl_table+0xb3/0x1900 [ 643.038700][T15323] ? __register_sysctl_table+0xb3/0x1900 [ 643.038720][T15323] __register_sysctl_table+0xb3/0x1900 [ 643.038741][T15323] ? is_module_address+0x5f/0xf0 [ 643.038758][T15323] ? __pfx___register_sysctl_table+0x10/0x10 [ 643.038778][T15323] ? is_module_address+0x69/0xf0 [ 643.038791][T15323] ? register_net_sysctl_sz+0x228/0x3e0 [ 643.038811][T15323] ? __asan_memcpy+0x3c/0x60 [ 643.038837][T15323] xfrm_sysctl_init+0x1f5/0x2d0 [ 643.038859][T15323] xfrm_net_init+0x842/0xcc0 [ 643.038881][T15323] ? __pfx_xfrm_net_init+0x10/0x10 [ 643.038898][T15323] ops_init+0x1e2/0x5f0 [ 643.038920][T15323] setup_net+0x100/0x390 [ 643.038936][T15323] ? __pfx_setup_net+0x10/0x10 [ 643.038953][T15323] ? debug_mutex_init+0x37/0x70 [ 643.038973][T15323] copy_net_ns+0x2f8/0x690 [ 643.038992][T15323] create_new_namespaces+0x3ea/0xa90 [ 643.039017][T15323] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 643.039036][T15323] ksys_unshare+0x45b/0xa40 [ 643.039057][T15323] ? __pfx_ksys_unshare+0x10/0x10 [ 643.039077][T15323] ? xfd_validate_state+0x61/0x180 [ 643.039095][T15323] __x64_sys_unshare+0x31/0x40 [ 643.039115][T15323] do_syscall_64+0xcd/0x4b0 [ 643.039131][T15323] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 643.039145][T15323] RIP: 0033:0x7f65a498eec9 [ 643.039157][T15323] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 643.039171][T15323] RSP: 002b:00007f65a58ef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 643.039184][T15323] RAX: ffffffffffffffda RBX: 00007f65a4be5fa0 RCX: 00007f65a498eec9 [ 643.039194][T15323] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 643.039202][T15323] RBP: 00007f65a4a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 643.039210][T15323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 643.039227][T15323] R13: 00007f65a4be6038 R14: 00007f65a4be5fa0 R15: 00007ffde0f26ea8 [ 643.039246][T15323] [ 644.231023][T15278] Process accounting paused [ 644.635058][T15340] netlink: 'syz.5.1880': attribute type 4 has an invalid length. [ 644.642814][T15340] netlink: 314 bytes leftover after parsing attributes in process `syz.5.1880'. [ 645.461197][T15350] netlink: 'syz.3.1884': attribute type 7 has an invalid length. [ 645.526306][T15350] netlink: 17 bytes leftover after parsing attributes in process `syz.3.1884'. [ 646.611407][ T6944] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 646.619310][ T6944] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 646.628948][ T6944] CPU: 0 UID: 0 PID: 6944 Comm: kworker/u11:1 Not tainted syzkaller #0 PREEMPT(full) [ 646.628969][ T6944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 646.628979][ T6944] Workqueue: hci3 hci_rx_work [ 646.628997][ T6944] Call Trace: [ 646.629002][ T6944] [ 646.629008][ T6944] dump_stack_lvl+0x16c/0x1f0 [ 646.629025][ T6944] sysfs_warn_dup+0x7f/0xa0 [ 646.629045][ T6944] sysfs_create_dir_ns+0x24b/0x2b0 [ 646.629064][ T6944] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 646.629082][ T6944] ? find_held_lock+0x2b/0x80 [ 646.629104][ T6944] ? do_raw_spin_unlock+0x172/0x230 [ 646.629120][ T6944] kobject_add_internal+0x2c4/0x9b0 [ 646.629140][ T6944] kobject_add+0x16e/0x240 [ 646.629156][ T6944] ? __pfx_kobject_add+0x10/0x10 [ 646.629174][ T6944] ? do_raw_spin_unlock+0x172/0x230 [ 646.629189][ T6944] ? kobject_put+0xab/0x5a0 [ 646.629209][ T6944] device_add+0x288/0x1aa0 [ 646.629223][ T6944] ? __pfx_dev_set_name+0x10/0x10 [ 646.629238][ T6944] ? __pfx_device_add+0x10/0x10 [ 646.629259][ T6944] ? mgmt_send_event_skb+0x2fb/0x460 [ 646.629290][ T6944] hci_conn_add_sysfs+0x17e/0x230 [ 646.629307][ T6944] le_conn_complete_evt+0x1260/0x2150 [ 646.629334][ T6944] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 646.629356][ T6944] ? bt_warn+0xe4/0x120 [ 646.629377][ T6944] ? __pfx_bt_warn+0x10/0x10 [ 646.629402][ T6944] hci_le_conn_complete_evt+0x23c/0x370 [ 646.629428][ T6944] hci_le_meta_evt+0x354/0x5e0 [ 646.629445][ T6944] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 646.629473][ T6944] hci_event_packet+0x685/0x11c0 [ 646.629497][ T6944] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 646.629513][ T6944] ? __pfx_hci_event_packet+0x10/0x10 [ 646.629536][ T6944] ? kcov_remote_start+0x3c9/0x6d0 [ 646.629551][ T6944] ? lockdep_hardirqs_on+0x7c/0x110 [ 646.629569][ T6944] hci_rx_work+0x2c5/0x16b0 [ 646.629585][ T6944] ? rcu_is_watching+0x12/0xc0 [ 646.629604][ T6944] process_one_work+0x9cc/0x1b70 [ 646.629642][ T6944] ? __pfx_process_one_work+0x10/0x10 [ 646.629664][ T6944] ? assign_work+0x1a0/0x250 [ 646.629680][ T6944] worker_thread+0x6c8/0xf10 [ 646.629704][ T6944] ? __pfx_worker_thread+0x10/0x10 [ 646.629720][ T6944] kthread+0x3c5/0x780 [ 646.629740][ T6944] ? __pfx_kthread+0x10/0x10 [ 646.629760][ T6944] ? rcu_is_watching+0x12/0xc0 [ 646.629778][ T6944] ? __pfx_kthread+0x10/0x10 [ 646.629793][ T6944] ret_from_fork+0x56d/0x730 [ 646.629807][ T6944] ? __pfx_kthread+0x10/0x10 [ 646.629821][ T6944] ret_from_fork_asm+0x1a/0x30 [ 646.629849][ T6944] [ 646.629868][ T6944] kobject: kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 646.919023][ T6944] Bluetooth: hci3: failed to register connection device [ 647.391567][T15390] netlink: 334 bytes leftover after parsing attributes in process `syz.3.1890'. [ 647.796645][T15397] sp0: Synchronizing with TNC [ 647.839838][T15337] Process accounting resumed [ 648.636757][T15395] FAULT_INJECTION: forcing a failure. [ 648.636757][T15395] name failslab, interval 1, probability 0, space 0, times 0 [ 648.744539][T15395] CPU: 0 UID: 0 PID: 15395 Comm: syz.5.1893 Not tainted syzkaller #0 PREEMPT(full) [ 648.744562][T15395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 648.744572][T15395] Call Trace: [ 648.744577][T15395] [ 648.744582][T15395] dump_stack_lvl+0x16c/0x1f0 [ 648.744602][T15395] should_fail_ex+0x512/0x640 [ 648.744626][T15395] ? kmem_cache_alloc_node_noprof+0x65/0x770 [ 648.744647][T15395] should_failslab+0xc2/0x120 [ 648.744668][T15395] kmem_cache_alloc_node_noprof+0x78/0x770 [ 648.744684][T15395] ? __alloc_skb+0x2b2/0x380 [ 648.744702][T15395] ? __alloc_skb+0x2b2/0x380 [ 648.744713][T15395] __alloc_skb+0x2b2/0x380 [ 648.744727][T15395] ? __pfx___alloc_skb+0x10/0x10 [ 648.744742][T15395] ? __pfx___might_resched+0x10/0x10 [ 648.744760][T15395] ? __lock_acquire+0xb97/0x1ce0 [ 648.744784][T15395] netlink_alloc_large_skb+0x69/0x140 [ 648.744802][T15395] netlink_sendmsg+0x698/0xdd0 [ 648.744825][T15395] ? __pfx_netlink_sendmsg+0x10/0x10 [ 648.744843][T15395] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 648.744863][T15395] ____sys_sendmsg+0xa95/0xc70 [ 648.744882][T15395] ? copy_msghdr_from_user+0x10a/0x160 [ 648.744897][T15395] ? __pfx_____sys_sendmsg+0x10/0x10 [ 648.744917][T15395] ? kfree+0x252/0x6d0 [ 648.744934][T15395] ___sys_sendmsg+0x134/0x1d0 [ 648.744950][T15395] ? __pfx____sys_sendmsg+0x10/0x10 [ 648.744982][T15395] ? __pfx___might_resched+0x10/0x10 [ 648.745002][T15395] __sys_sendmmsg+0x200/0x420 [ 648.745018][T15395] ? __pfx___sys_sendmmsg+0x10/0x10 [ 648.745039][T15395] ? __pfx_do_futex+0x10/0x10 [ 648.745059][T15395] ? fput+0x9b/0xd0 [ 648.745086][T15395] ? xfd_validate_state+0x61/0x180 [ 648.745103][T15395] __x64_sys_sendmmsg+0x9c/0x100 [ 648.745117][T15395] ? lockdep_hardirqs_on+0x7c/0x110 [ 648.745132][T15395] do_syscall_64+0xcd/0x4b0 [ 648.745148][T15395] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 648.745165][T15395] RIP: 0033:0x7f260af8eec9 [ 648.745178][T15395] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 648.745192][T15395] RSP: 002b:00007f260bf00038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 648.745208][T15395] RAX: ffffffffffffffda RBX: 00007f260b1e5fa0 RCX: 00007f260af8eec9 [ 648.745218][T15395] RDX: 0000000000000007 RSI: 0000200000000200 RDI: 0000000000000007 [ 648.745227][T15395] RBP: 00007f260b011f91 R08: 0000000000000000 R09: 0000000000000000 [ 648.745237][T15395] R10: 0000000000004008 R11: 0000000000000246 R12: 0000000000000000 [ 648.745246][T15395] R13: 00007f260b1e6038 R14: 00007f260b1e5fa0 R15: 00007fffc853d778 [ 648.745264][T15395] [ 649.359545][T14684] Bluetooth: hci3: command 0x0c1a tx timeout [ 649.776809][ T30] audit: type=1800 audit(4294967336.960:20): pid=15428 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1900" name="discovery_nqn" dev="configfs" ino=52709 res=0 errno=0 [ 649.969722][T15433] netlink: 'syz.3.1901': attribute type 4 has an invalid length. [ 649.993865][T15433] netlink: 314 bytes leftover after parsing attributes in process `syz.3.1901'. [ 650.233280][T15438] device-mapper: ioctl: Invalid ioctl structure: uuid ±, name , dev 5 [ 650.594573][T15446] netlink: 296 bytes leftover after parsing attributes in process `syz.4.1905'. [ 653.157339][ T30] audit: type=1800 audit(4294967340.410:21): pid=15479 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1912" name="discovery_nqn" dev="configfs" ino=52976 res=0 errno=0 [ 654.124499][T15498] FAULT_INJECTION: forcing a failure. [ 654.124499][T15498] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 654.288958][T15498] CPU: 0 UID: 0 PID: 15498 Comm: syz.2.1915 Not tainted syzkaller #0 PREEMPT(full) [ 654.288982][T15498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 654.288991][T15498] Call Trace: [ 654.288997][T15498] [ 654.289005][T15498] dump_stack_lvl+0x16c/0x1f0 [ 654.289028][T15498] should_fail_ex+0x512/0x640 [ 654.289050][T15498] should_fail_alloc_page+0xe7/0x130 [ 654.289073][T15498] prepare_alloc_pages+0x3c2/0x610 [ 654.289096][T15498] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 654.289114][T15498] ? __pfx_stack_trace_save+0x10/0x10 [ 654.289133][T15498] ? __lock_acquire+0x62e/0x1ce0 [ 654.289172][T15498] ? stack_depot_save_flags+0x29/0x9c0 [ 654.289207][T15498] ? kasan_save_stack+0x42/0x60 [ 654.289226][T15498] ? kasan_save_stack+0x33/0x60 [ 654.289243][T15498] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 654.289260][T15498] ? create_new_namespaces+0x48a/0xa90 [ 654.289283][T15498] ? ksys_unshare+0x45b/0xa40 [ 654.289304][T15498] ? do_syscall_64+0xcd/0x4b0 [ 654.289319][T15498] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 654.289342][T15498] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 654.289359][T15498] ? policy_nodemask+0xea/0x4e0 [ 654.289380][T15498] alloc_pages_mpol+0x1fb/0x550 [ 654.289401][T15498] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 654.289425][T15498] alloc_pages_noprof+0x131/0x390 [ 654.289445][T15498] copy_time_ns+0x113/0x510 [ 654.289460][T15498] ? copy_net_ns+0x31f/0x690 [ 654.289477][T15498] ? copy_cgroup_ns+0x71/0x6b0 [ 654.289496][T15498] create_new_namespaces+0x48a/0xa90 [ 654.289518][T15498] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 654.289538][T15498] ksys_unshare+0x45b/0xa40 [ 654.289559][T15498] ? __pfx_ksys_unshare+0x10/0x10 [ 654.289581][T15498] ? syscall_user_dispatch+0x78/0x140 [ 654.289600][T15498] __x64_sys_unshare+0x31/0x40 [ 654.289620][T15498] do_syscall_64+0xcd/0x4b0 [ 654.289635][T15498] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 654.289649][T15498] RIP: 0033:0x7f65a498eec9 [ 654.289661][T15498] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 654.289675][T15498] RSP: 002b:00007f65a58ef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 654.289689][T15498] RAX: ffffffffffffffda RBX: 00007f65a4be5fa0 RCX: 00007f65a498eec9 [ 654.289699][T15498] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000080 [ 654.289708][T15498] RBP: 00007f65a4a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 654.289716][T15498] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 654.289724][T15498] R13: 00007f65a4be6038 R14: 00007f65a4be5fa0 R15: 00007ffde0f26ea8 [ 654.289742][T15498] [ 656.170295][T15529] device-mapper: ioctl: Invalid ioctl structure: uuid ±, name , dev 5 [ 656.380640][T15532] netlink: 296 bytes leftover after parsing attributes in process `syz.2.1923'. [ 658.609338][T15578] random: crng reseeded on system resumption [ 659.430987][T15592] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1935'. [ 660.074260][T15592] bond0: (slave bond_slave_0): Releasing backup interface [ 660.397190][T15601] FAULT_INJECTION: forcing a failure. [ 660.397190][T15601] name fail_futex, interval 1, probability 0, space 0, times 0 [ 660.478530][T14684] Bluetooth: hci4: unexpected subevent 0x01 length: 123 > 18 [ 660.488520][T14684] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:0' [ 660.498019][T14684] CPU: 0 UID: 0 PID: 14684 Comm: kworker/u11:0 Not tainted syzkaller #0 PREEMPT(full) [ 660.498041][T14684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 660.498052][T14684] Workqueue: hci4 hci_rx_work [ 660.498071][T14684] Call Trace: [ 660.498076][T14684] [ 660.498083][T14684] dump_stack_lvl+0x16c/0x1f0 [ 660.498101][T14684] sysfs_warn_dup+0x7f/0xa0 [ 660.498120][T14684] sysfs_create_dir_ns+0x24b/0x2b0 [ 660.498139][T14684] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 660.498157][T14684] ? find_held_lock+0x2b/0x80 [ 660.498178][T14684] ? do_raw_spin_unlock+0x172/0x230 [ 660.498196][T14684] kobject_add_internal+0x2c4/0x9b0 [ 660.498216][T14684] kobject_add+0x16e/0x240 [ 660.498232][T14684] ? __pfx_kobject_add+0x10/0x10 [ 660.498250][T14684] ? do_raw_spin_unlock+0x172/0x230 [ 660.498265][T14684] ? kobject_put+0xab/0x5a0 [ 660.498285][T14684] device_add+0x288/0x1aa0 [ 660.498299][T14684] ? __pfx_dev_set_name+0x10/0x10 [ 660.498314][T14684] ? __pfx_device_add+0x10/0x10 [ 660.498335][T14684] ? mgmt_send_event_skb+0x2fb/0x460 [ 660.498361][T14684] hci_conn_add_sysfs+0x17e/0x230 [ 660.498377][T14684] le_conn_complete_evt+0x1260/0x2150 [ 660.498406][T14684] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 660.498428][T14684] ? bt_warn+0xe4/0x120 [ 660.498446][T14684] ? __pfx_bt_warn+0x10/0x10 [ 660.498471][T14684] hci_le_conn_complete_evt+0x23c/0x370 [ 660.498496][T14684] hci_le_meta_evt+0x354/0x5e0 [ 660.498510][T14684] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 660.498534][T14684] hci_event_packet+0x685/0x11c0 [ 660.498556][T14684] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 660.498572][T14684] ? __pfx_hci_event_packet+0x10/0x10 [ 660.498595][T14684] ? kcov_remote_start+0x3c9/0x6d0 [ 660.498610][T14684] ? lockdep_hardirqs_on+0x7c/0x110 [ 660.498629][T14684] hci_rx_work+0x2c5/0x16b0 [ 660.498644][T14684] ? rcu_is_watching+0x12/0xc0 [ 660.498663][T14684] process_one_work+0x9cc/0x1b70 [ 660.498686][T14684] ? __pfx_process_one_work+0x10/0x10 [ 660.498706][T14684] ? assign_work+0x1a0/0x250 [ 660.498721][T14684] worker_thread+0x6c8/0xf10 [ 660.498742][T14684] ? __kthread_parkme+0x19e/0x250 [ 660.498762][T14684] ? __pfx_worker_thread+0x10/0x10 [ 660.498777][T14684] kthread+0x3c5/0x780 [ 660.498800][T14684] ? __pfx_kthread+0x10/0x10 [ 660.498815][T14684] ? rcu_is_watching+0x12/0xc0 [ 660.498832][T14684] ? __pfx_kthread+0x10/0x10 [ 660.498847][T14684] ret_from_fork+0x56d/0x730 [ 660.498861][T14684] ? __pfx_kthread+0x10/0x10 [ 660.498874][T14684] ret_from_fork_asm+0x1a/0x30 [ 660.498902][T14684] [ 660.498922][T14684] kobject: kobject_add_internal failed for hci4:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 660.782244][T14684] Bluetooth: hci4: failed to register connection device [ 660.827520][T15601] CPU: 0 UID: 0 PID: 15601 Comm: syz.4.1936 Not tainted syzkaller #0 PREEMPT(full) [ 660.827543][T15601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 660.827552][T15601] Call Trace: [ 660.827558][T15601] [ 660.827566][T15601] dump_stack_lvl+0x16c/0x1f0 [ 660.827586][T15601] should_fail_ex+0x512/0x640 [ 660.827607][T15601] get_futex_key+0x1d0/0x1560 [ 660.827631][T15601] ? __pfx_get_futex_key+0x10/0x10 [ 660.827653][T15601] ? __pick_eevdf+0x30a/0x670 [ 660.827675][T15601] futex_wait_setup+0x9d/0x550 [ 660.827695][T15601] __futex_wait+0x193/0x2f0 [ 660.827711][T15601] ? __pfx___futex_wait+0x10/0x10 [ 660.827724][T15601] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 660.827745][T15601] ? lockdep_hardirqs_on+0x7c/0x110 [ 660.827762][T15601] ? __pfx_futex_wake_mark+0x10/0x10 [ 660.827779][T15601] ? futex_private_hash_put+0x176/0x300 [ 660.827801][T15601] ? futex_private_hash_put+0x18a/0x300 [ 660.827831][T15601] futex_wait+0xe8/0x380 [ 660.827846][T15601] ? __pfx_futex_wait+0x10/0x10 [ 660.827865][T15601] ? aa_sk_perm+0x2f4/0xb10 [ 660.827885][T15601] ? __pfx___sys_sendmmsg+0x10/0x10 [ 660.827905][T15601] do_futex+0x229/0x350 [ 660.827926][T15601] ? __pfx_do_futex+0x10/0x10 [ 660.827945][T15601] ? rcu_is_watching+0x12/0xc0 [ 660.827962][T15601] ? kfree+0x252/0x6d0 [ 660.827980][T15601] __x64_sys_futex+0x1e0/0x4c0 [ 660.828003][T15601] ? __pfx___x64_sys_futex+0x10/0x10 [ 660.828024][T15601] ? __sys_setsockopt+0x140/0x1a0 [ 660.828042][T15601] do_syscall_64+0xcd/0x4b0 [ 660.828059][T15601] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 660.828074][T15601] RIP: 0033:0x7f008d78eec9 [ 660.828087][T15601] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 660.828100][T15601] RSP: 002b:00007f008e67f0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 660.828115][T15601] RAX: ffffffffffffffda RBX: 00007f008d9e5fa8 RCX: 00007f008d78eec9 [ 660.828124][T15601] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f008d9e5fa8 [ 660.828133][T15601] RBP: 00007f008d9e5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 660.828142][T15601] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 660.828150][T15601] R13: 00007f008d9e6038 R14: 00007ffe64508120 R15: 00007ffe64508208 [ 660.828169][T15601] [ 661.062228][ C0] vkms_vblank_simulate: vblank timer overrun [ 662.711263][T15612] netlink: 334 bytes leftover after parsing attributes in process `syz.5.1938'. [ 662.826626][ T6944] Bluetooth: hci4: command 0x0c1a tx timeout [ 663.046007][T15639] queue_state_write: operation too long [ 663.157270][T15639] queue_state_write: use 'run', 'start' or 'kick' [ 663.714227][T15649] vcan0: tx drop: invalid da for name 0x000000000000003f [ 663.908588][T15634] netlink: 'syz.3.1941': attribute type 1 has an invalid length. [ 664.108999][T15655] queue_state_write: operation too long [ 664.164261][T15655] queue_state_write: use 'run', 'start' or 'kick' [ 664.265068][T15656] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1946'. [ 665.114716][T15678] device-mapper: ioctl: Invalid ioctl structure: uuid ±, name , dev 5 [ 665.145300][T15669] FAULT_INJECTION: forcing a failure. [ 665.145300][T15669] name failslab, interval 1, probability 0, space 0, times 0 [ 665.255087][T15669] CPU: 0 UID: 0 PID: 15669 Comm: syz.5.1948 Not tainted syzkaller #0 PREEMPT(full) [ 665.255117][T15669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 665.255126][T15669] Call Trace: [ 665.255132][T15669] [ 665.255138][T15669] dump_stack_lvl+0x16c/0x1f0 [ 665.255159][T15669] should_fail_ex+0x512/0x640 [ 665.255176][T15669] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 665.255195][T15669] should_failslab+0xc2/0x120 [ 665.255216][T15669] kmem_cache_alloc_noprof+0x75/0x6e0 [ 665.255232][T15669] ? lock_acquire+0x179/0x350 [ 665.255252][T15669] ? alloc_vfsmnt+0x23/0x6b0 [ 665.255275][T15669] ? alloc_vfsmnt+0x23/0x6b0 [ 665.255293][T15669] alloc_vfsmnt+0x23/0x6b0 [ 665.255314][T15669] clone_mnt+0x6d/0xbf0 [ 665.255326][T15669] ? copy_mnt_ns+0x1a9/0xa90 [ 665.255346][T15669] copy_tree+0x31d/0xbd0 [ 665.255367][T15669] copy_mnt_ns+0x1a9/0xa90 [ 665.255384][T15669] ? rcu_is_watching+0x12/0xc0 [ 665.255406][T15669] create_new_namespaces+0xd3/0xa90 [ 665.255425][T15669] ? bpf_lsm_capable+0x9/0x10 [ 665.255444][T15669] ? security_capable+0x7e/0x260 [ 665.255463][T15669] copy_namespaces+0x468/0x560 [ 665.255482][T15669] copy_process+0x2828/0x76a0 [ 665.255510][T15669] ? __pfx_copy_process+0x10/0x10 [ 665.255529][T15669] ? futex_private_hash_put+0x176/0x300 [ 665.255552][T15669] ? futex_private_hash_put+0x18a/0x300 [ 665.255575][T15669] kernel_clone+0xfc/0x930 [ 665.255594][T15669] ? __pfx_futex_wake+0x10/0x10 [ 665.255608][T15669] ? __pfx_kernel_clone+0x10/0x10 [ 665.255638][T15669] __do_sys_clone+0xce/0x120 [ 665.255658][T15669] ? __pfx___do_sys_clone+0x10/0x10 [ 665.255677][T15669] ? __pfx___might_resched+0x10/0x10 [ 665.255701][T15669] ? xfd_validate_state+0x61/0x180 [ 665.255714][T15669] ? __pfx_do_writev+0x10/0x10 [ 665.255735][T15669] do_syscall_64+0xcd/0x4b0 [ 665.255752][T15669] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 665.255766][T15669] RIP: 0033:0x7f260af8eec9 [ 665.255779][T15669] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 665.255793][T15669] RSP: 002b:00007f260befffe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 665.255807][T15669] RAX: ffffffffffffffda RBX: 00007f260b1e5fa0 RCX: 00007f260af8eec9 [ 665.255817][T15669] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000002360411 [ 665.255826][T15669] RBP: 00007f260b011f91 R08: 0000000000000000 R09: 0000000000000000 [ 665.255836][T15669] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 665.255845][T15669] R13: 00007f260b1e6038 R14: 00007f260b1e5fa0 R15: 00007fffc853d778 [ 665.255872][T15669] [ 668.132403][T15693] Process accounting paused [ 669.271716][T15745] netlink: 292 bytes leftover after parsing attributes in process `syz.3.1960'. [ 670.362083][T15760] kAFS: Invalid Command on /proc/fs/afs/cells file [ 671.166537][T15768] kexec: Could not allocate control_code_buffer [ 671.378318][T15771] netlink: 'syz.3.1965': attribute type 4 has an invalid length. [ 671.410742][T15771] netlink: 314 bytes leftover after parsing attributes in process `syz.3.1965'. [ 671.623763][ T6944] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 671.686642][T15773] netlink: 280 bytes leftover after parsing attributes in process `syz.2.1966'. [ 671.757731][ T30] audit: type=1800 audit(4294967304.990:22): pid=15776 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1967" name="discovery_nqn" dev="configfs" ino=54329 res=0 errno=0 [ 672.926202][ T6944] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 672.934757][ T6944] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:0' [ 672.944618][ T6944] CPU: 0 UID: 0 PID: 6944 Comm: kworker/u11:1 Not tainted syzkaller #0 PREEMPT(full) [ 672.944638][ T6944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 672.944649][ T6944] Workqueue: hci2 hci_rx_work [ 672.944668][ T6944] Call Trace: [ 672.944673][ T6944] [ 672.944680][ T6944] dump_stack_lvl+0x16c/0x1f0 [ 672.944698][ T6944] sysfs_warn_dup+0x7f/0xa0 [ 672.944718][ T6944] sysfs_create_dir_ns+0x24b/0x2b0 [ 672.944738][ T6944] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 672.944756][ T6944] ? find_held_lock+0x2b/0x80 [ 672.944778][ T6944] ? do_raw_spin_unlock+0x172/0x230 [ 672.944795][ T6944] kobject_add_internal+0x2c4/0x9b0 [ 672.944816][ T6944] kobject_add+0x16e/0x240 [ 672.944833][ T6944] ? __pfx_kobject_add+0x10/0x10 [ 672.944851][ T6944] ? do_raw_spin_unlock+0x172/0x230 [ 672.944866][ T6944] ? kobject_put+0xab/0x5a0 [ 672.944887][ T6944] device_add+0x288/0x1aa0 [ 672.944901][ T6944] ? __pfx_dev_set_name+0x10/0x10 [ 672.944916][ T6944] ? __pfx_device_add+0x10/0x10 [ 672.944937][ T6944] ? mgmt_send_event_skb+0x2fb/0x460 [ 672.944964][ T6944] hci_conn_add_sysfs+0x17e/0x230 [ 672.944981][ T6944] le_conn_complete_evt+0x1260/0x2150 [ 672.945008][ T6944] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 672.945040][ T6944] ? bt_warn+0xe4/0x120 [ 672.945060][ T6944] ? __pfx_bt_warn+0x10/0x10 [ 672.945086][ T6944] hci_le_conn_complete_evt+0x23c/0x370 [ 672.945114][ T6944] hci_le_meta_evt+0x354/0x5e0 [ 672.945129][ T6944] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 672.945153][ T6944] hci_event_packet+0x685/0x11c0 [ 672.945176][ T6944] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 672.945191][ T6944] ? __pfx_hci_event_packet+0x10/0x10 [ 672.945215][ T6944] ? kcov_remote_start+0x3c9/0x6d0 [ 672.945230][ T6944] ? lockdep_hardirqs_on+0x7c/0x110 [ 672.945249][ T6944] hci_rx_work+0x2c5/0x16b0 [ 672.945264][ T6944] ? rcu_is_watching+0x12/0xc0 [ 672.945284][ T6944] process_one_work+0x9cc/0x1b70 [ 672.945307][ T6944] ? __pfx_process_one_work+0x10/0x10 [ 672.945328][ T6944] ? assign_work+0x1a0/0x250 [ 672.945343][ T6944] worker_thread+0x6c8/0xf10 [ 672.945367][ T6944] ? __pfx_worker_thread+0x10/0x10 [ 672.945381][ T6944] kthread+0x3c5/0x780 [ 672.945395][ T6944] ? __pfx_kthread+0x10/0x10 [ 672.945414][ T6944] ? rcu_is_watching+0x12/0xc0 [ 672.945430][ T6944] ? __pfx_kthread+0x10/0x10 [ 672.945445][ T6944] ret_from_fork+0x56d/0x730 [ 672.945458][ T6944] ? __pfx_kthread+0x10/0x10 [ 672.945472][ T6944] ret_from_fork_asm+0x1a/0x30 [ 672.945501][ T6944] [ 672.945543][ T6944] kobject: kobject_add_internal failed for hci2:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 673.237474][ T6944] Bluetooth: hci2: failed to register connection device [ 673.428641][T15813] device-mapper: ioctl: Invalid ioctl structure: uuid ±, name , dev 5 [ 673.723257][T15812] netlink: 334 bytes leftover after parsing attributes in process `syz.2.1974'. [ 673.920869][T15816] vivid-003: ================= START STATUS ================= [ 673.976493][T15816] vivid-003: Radio HW Seek Mode: Bounded [ 673.982216][T15816] vivid-003: Radio Programmable HW Seek: false [ 674.055992][T15816] vivid-003: RDS Rx I/O Mode: Block I/O [ 674.093364][T15816] vivid-003: Generate RBDS Instead of RDS: false [ 674.147748][T15816] vivid-003: RDS Reception: true [ 674.152839][T15816] vivid-003: RDS Program Type: 0 inactive [ 674.279053][T15816] vivid-003: RDS PS Name: inactive [ 674.328286][T15816] vivid-003: RDS Radio Text: inactive [ 674.415148][T15827] FAULT_INJECTION: forcing a failure. [ 674.415148][T15827] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 674.428366][T15816] vivid-003: RDS Traffic Announcement: false inactive [ 674.507982][T15827] CPU: 0 UID: 0 PID: 15827 Comm: syz.3.1977 Not tainted syzkaller #0 PREEMPT(full) [ 674.508004][T15827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 674.508012][T15827] Call Trace: [ 674.508018][T15827] [ 674.508023][T15827] dump_stack_lvl+0x16c/0x1f0 [ 674.508043][T15827] should_fail_ex+0x512/0x640 [ 674.508063][T15827] _copy_to_user+0x32/0xd0 [ 674.508082][T15827] simple_read_from_buffer+0xcb/0x170 [ 674.508099][T15827] proc_fail_nth_read+0x197/0x240 [ 674.508116][T15827] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 674.508134][T15827] ? rw_verify_area+0xcf/0x6c0 [ 674.508148][T15827] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 674.508164][T15827] vfs_read+0x1e4/0xcf0 [ 674.508183][T15827] ? __pfx___mutex_lock+0x10/0x10 [ 674.508199][T15827] ? __pfx_vfs_read+0x10/0x10 [ 674.508220][T15827] ? __fget_files+0x20e/0x3c0 [ 674.508234][T15827] ? newque+0x660/0x680 [ 674.508260][T15827] ksys_read+0x12a/0x250 [ 674.508276][T15827] ? __pfx_ksys_read+0x10/0x10 [ 674.508298][T15827] do_syscall_64+0xcd/0x4b0 [ 674.508314][T15827] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 674.508329][T15827] RIP: 0033:0x7f6963b8d8dc [ 674.508341][T15827] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 674.508355][T15827] RSP: 002b:00007f6961dd5030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 674.508369][T15827] RAX: ffffffffffffffda RBX: 00007f6963de6180 RCX: 00007f6963b8d8dc [ 674.508378][T15827] RDX: 000000000000000f RSI: 00007f6961dd50a0 RDI: 0000000000000003 [ 674.508387][T15827] RBP: 00007f6961dd5090 R08: 0000000000000000 R09: 0000000000000000 [ 674.508395][T15827] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001 [ 674.508404][T15827] R13: 00007f6963de6218 R14: 00007f6963de6180 R15: 00007ffe2b049d58 [ 674.508423][T15827] [ 674.511260][T15816] vivid-003: RDS Traffic Program: [ 675.022179][T15836] queue_state_write: operation too long [ 675.081771][T15836] queue_state_write: use 'run', 'start' or 'kick' [ 675.312832][T14684] Bluetooth: hci2: command 0x0c1a tx timeout [ 675.611855][T15822] Process accounting resumed [ 675.842196][T15816] false inactive [ 675.855453][T15848] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(16) [ 675.865739][T15816] vivid-003: RDS Music: false inactive [ 675.871390][T15816] vivid-003: ================== END STATUS ================== [ 676.133052][T15849] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(16) [ 677.666139][T15877] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1988'. [ 678.348887][T15886] Process accounting paused [ 678.636569][T15897] queue_state_write: operation too long [ 678.642243][T15897] queue_state_write: use 'run', 'start' or 'kick' [ 679.344790][T15894] FAULT_INJECTION: forcing a failure. [ 679.344790][T15894] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 679.375375][T15921] netlink: 280 bytes leftover after parsing attributes in process `syz.3.1997'. [ 679.584526][T15894] CPU: 0 UID: 0 PID: 15894 Comm: syz.4.1994 Not tainted syzkaller #0 PREEMPT(full) [ 679.584549][T15894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 679.584559][T15894] Call Trace: [ 679.584565][T15894] [ 679.584571][T15894] dump_stack_lvl+0x16c/0x1f0 [ 679.584592][T15894] should_fail_ex+0x512/0x640 [ 679.584614][T15894] _copy_from_user+0x2e/0xd0 [ 679.584631][T15894] copy_msghdr_from_user+0x98/0x160 [ 679.584648][T15894] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 679.584674][T15894] ? kfree+0x252/0x6d0 [ 679.584694][T15894] ___sys_sendmsg+0xfe/0x1d0 [ 679.584711][T15894] ? __pfx____sys_sendmsg+0x10/0x10 [ 679.584744][T15894] ? __pfx___might_resched+0x10/0x10 [ 679.584767][T15894] __sys_sendmmsg+0x200/0x420 [ 679.584785][T15894] ? __pfx___sys_sendmmsg+0x10/0x10 [ 679.584806][T15894] ? __pfx_do_futex+0x10/0x10 [ 679.584827][T15894] ? fput+0x9b/0xd0 [ 679.584855][T15894] ? xfd_validate_state+0x61/0x180 [ 679.584873][T15894] __x64_sys_sendmmsg+0x9c/0x100 [ 679.584887][T15894] ? lockdep_hardirqs_on+0x7c/0x110 [ 679.584901][T15894] do_syscall_64+0xcd/0x4b0 [ 679.584926][T15894] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 679.584942][T15894] RIP: 0033:0x7f008d78eec9 [ 679.584954][T15894] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 679.584969][T15894] RSP: 002b:00007f008e67f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 679.584983][T15894] RAX: ffffffffffffffda RBX: 00007f008d9e5fa0 RCX: 00007f008d78eec9 [ 679.584993][T15894] RDX: 0000000000000007 RSI: 0000200000000200 RDI: 0000000000000007 [ 679.585002][T15894] RBP: 00007f008d811f91 R08: 0000000000000000 R09: 0000000000000000 [ 679.585010][T15894] R10: 0000000000004008 R11: 0000000000000246 R12: 0000000000000000 [ 679.585019][T15894] R13: 00007f008d9e6038 R14: 00007f008d9e5fa0 R15: 00007ffe64508208 [ 679.585037][T15894] [ 681.645450][T15933] kexec: Could not allocate control_code_buffer [ 681.669766][T15951] random: crng reseeded on system resumption [ 681.983303][T15954] queue_state_write: operation too long [ 682.024366][T15954] queue_state_write: use 'run', 'start' or 'kick' [ 683.891314][ T30] audit: type=1800 audit(4294967317.120:23): pid=15997 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2012" name="discovery_nqn" dev="configfs" ino=55339 res=0 errno=0 [ 684.140145][ T30] audit: type=1804 audit(4294967317.370:24): pid=15992 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.2010" name="/newroot/176/file0" dev="tmpfs" ino=965 res=1 errno=0 [ 684.426069][T16004] vcan0: tx drop: invalid da for name 0x000000000000003f [ 684.955982][T16014] vivid-003: ================= START STATUS ================= [ 685.043835][T16014] vivid-003: Radio HW Seek Mode: Bounded [ 685.071791][T16014] vivid-003: Radio Programmable HW Seek: false [ 685.152481][T16014] vivid-003: RDS Rx I/O Mode: Block I/O [ 685.214967][T16014] vivid-003: Generate RBDS Instead of RDS: false [ 685.256357][T16014] vivid-003: RDS Reception: true [ 685.285273][T14684] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 685.292953][T14684] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:0' [ 685.302558][T14684] CPU: 0 UID: 0 PID: 14684 Comm: kworker/u11:0 Not tainted syzkaller #0 PREEMPT(full) [ 685.302578][T14684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 685.302589][T14684] Workqueue: hci2 hci_rx_work [ 685.302608][T14684] Call Trace: [ 685.302614][T14684] [ 685.302620][T14684] dump_stack_lvl+0x16c/0x1f0 [ 685.302638][T14684] sysfs_warn_dup+0x7f/0xa0 [ 685.302658][T14684] sysfs_create_dir_ns+0x24b/0x2b0 [ 685.302678][T14684] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 685.302696][T14684] ? find_held_lock+0x2b/0x80 [ 685.302718][T14684] ? do_raw_spin_unlock+0x172/0x230 [ 685.302735][T14684] kobject_add_internal+0x2c4/0x9b0 [ 685.302756][T14684] kobject_add+0x16e/0x240 [ 685.302772][T14684] ? __pfx_kobject_add+0x10/0x10 [ 685.302790][T14684] ? do_raw_spin_unlock+0x172/0x230 [ 685.302805][T14684] ? kobject_put+0xab/0x5a0 [ 685.302826][T14684] device_add+0x288/0x1aa0 [ 685.302840][T14684] ? __pfx_dev_set_name+0x10/0x10 [ 685.302855][T14684] ? __pfx_device_add+0x10/0x10 [ 685.302876][T14684] ? mgmt_send_event_skb+0x2fb/0x460 [ 685.302904][T14684] hci_conn_add_sysfs+0x17e/0x230 [ 685.302921][T14684] le_conn_complete_evt+0x1260/0x2150 [ 685.302948][T14684] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 685.302969][T14684] ? bt_warn+0xe4/0x120 [ 685.302988][T14684] ? __pfx_bt_warn+0x10/0x10 [ 685.303013][T14684] hci_le_conn_complete_evt+0x23c/0x370 [ 685.303039][T14684] hci_le_meta_evt+0x354/0x5e0 [ 685.303053][T14684] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 685.303077][T14684] hci_event_packet+0x685/0x11c0 [ 685.303099][T14684] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 685.303115][T14684] ? __pfx_hci_event_packet+0x10/0x10 [ 685.303139][T14684] ? kcov_remote_start+0x3c9/0x6d0 [ 685.303154][T14684] ? lockdep_hardirqs_on+0x7c/0x110 [ 685.303173][T14684] hci_rx_work+0x2c5/0x16b0 [ 685.303188][T14684] ? rcu_is_watching+0x12/0xc0 [ 685.303208][T14684] process_one_work+0x9cc/0x1b70 [ 685.303231][T14684] ? __pfx_process_one_work+0x10/0x10 [ 685.303252][T14684] ? assign_work+0x1a0/0x250 [ 685.303277][T14684] worker_thread+0x6c8/0xf10 [ 685.303299][T14684] ? __kthread_parkme+0x19e/0x250 [ 685.303321][T14684] ? __pfx_worker_thread+0x10/0x10 [ 685.303337][T14684] kthread+0x3c5/0x780 [ 685.303352][T14684] ? __pfx_kthread+0x10/0x10 [ 685.303367][T14684] ? rcu_is_watching+0x12/0xc0 [ 685.303384][T14684] ? __pfx_kthread+0x10/0x10 [ 685.303398][T14684] ret_from_fork+0x56d/0x730 [ 685.303412][T14684] ? __pfx_kthread+0x10/0x10 [ 685.303426][T14684] ret_from_fork_asm+0x1a/0x30 [ 685.303454][T14684] [ 685.303472][T14684] kobject: kobject_add_internal failed for hci2:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 685.593771][T14684] Bluetooth: hci2: failed to register connection device [ 685.634835][T16014] vivid-003: RDS Program Type: 0 inactive [ 685.651072][T16014] vivid-003: RDS PS Name: inactive [ 685.669277][T16020] queue_state_write: operation too long [ 685.699323][T16014] vivid-003: RDS Radio Text: inactive [ 685.714061][T16020] queue_state_write: use 'run', 'start' or 'kick' [ 685.767512][T16014] vivid-003: RDS Traffic Announcement: false inactive [ 685.840880][T16014] vivid-003: RDS Traffic Program: false inactive [ 685.948886][T16013] kexec: Could not allocate control_code_buffer [ 685.955848][T16014] vivid-003: RDS Music: false inactive [ 685.961345][T16014] vivid-003: ================== END STATUS ================== [ 686.088291][T16022] netlink: 334 bytes leftover after parsing attributes in process `syz.2.2016'. [ 686.664072][T16039] sock: sock_timestamping_bind_phc: sock not bind to device [ 686.759032][T16042] queue_state_write: operation too long [ 686.808441][T16042] queue_state_write: use 'run', 'start' or 'kick' [ 687.624575][T14684] Bluetooth: hci2: command 0x0c1a tx timeout [ 689.367226][T16089] queue_state_write: operation too long [ 689.372831][T16089] queue_state_write: use 'run', 'start' or 'kick' [ 690.430261][T16107] queue_state_write: operation too long [ 690.484407][T16107] queue_state_write: use 'run', 'start' or 'kick' [ 691.310015][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 691.333692][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 692.314248][T16126] kexec: Could not allocate control_code_buffer [ 692.424109][T16133] FAULT_INJECTION: forcing a failure. [ 692.424109][T16133] name failslab, interval 1, probability 0, space 0, times 0 [ 692.605796][T16133] CPU: 0 UID: 0 PID: 16133 Comm: syz.3.2038 Not tainted syzkaller #0 PREEMPT(full) [ 692.605818][T16133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 692.605828][T16133] Call Trace: [ 692.605834][T16133] [ 692.605840][T16133] dump_stack_lvl+0x16c/0x1f0 [ 692.605862][T16133] should_fail_ex+0x512/0x640 [ 692.605879][T16133] ? __kvmalloc_node_noprof+0x12e/0x9c0 [ 692.606010][T16133] should_failslab+0xc2/0x120 [ 692.606039][T16133] __kvmalloc_node_noprof+0x141/0x9c0 [ 692.606059][T16133] ? trace_kmalloc+0x2b/0xd0 [ 692.606078][T16133] ? __kvmalloc_node_noprof+0x3c0/0x9c0 [ 692.606095][T16133] ? io_alloc_cache_init+0x38/0x170 [ 692.606117][T16133] ? io_alloc_cache_init+0x38/0x170 [ 692.606131][T16133] io_alloc_cache_init+0x38/0x170 [ 692.606148][T16133] io_rsrc_cache_init+0x26/0x50 [ 692.606165][T16133] io_uring_setup+0x68e/0x20e0 [ 692.606189][T16133] ? __pfx_io_uring_setup+0x10/0x10 [ 692.606209][T16133] ? do_futex+0x122/0x350 [ 692.606232][T16133] ? __pfx_do_futex+0x10/0x10 [ 692.606252][T16133] ? fput+0x9b/0xd0 [ 692.606281][T16133] ? xfd_validate_state+0x61/0x180 [ 692.606440][T16133] __x64_sys_io_uring_setup+0xc2/0x170 [ 692.606470][T16133] do_syscall_64+0xcd/0x4b0 [ 692.606488][T16133] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 692.606506][T16133] RIP: 0033:0x7f6963b8eec9 [ 692.606519][T16133] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 692.606534][T16133] RSP: 002b:00007f696495a038 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 692.606550][T16133] RAX: ffffffffffffffda RBX: 00007f6963de5fa0 RCX: 00007f6963b8eec9 [ 692.606560][T16133] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 692.606569][T16133] RBP: 00007f6963c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 692.606578][T16133] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 692.606587][T16133] R13: 00007f6963de6038 R14: 00007f6963de5fa0 R15: 00007ffe2b049d58 [ 692.606606][T16133] [ 692.842888][T16146] FAULT_INJECTION: forcing a failure. [ 692.842888][T16146] name failslab, interval 1, probability 0, space 0, times 0 [ 692.855735][T16146] CPU: 0 UID: 0 PID: 16146 Comm: syz.2.2040 Not tainted syzkaller #0 PREEMPT(full) [ 692.855756][T16146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 692.855766][T16146] Call Trace: [ 692.855772][T16146] [ 692.855779][T16146] dump_stack_lvl+0x16c/0x1f0 [ 692.855799][T16146] should_fail_ex+0x512/0x640 [ 692.855817][T16146] ? __kmalloc_node_track_caller_noprof+0xcb/0x8a0 [ 692.855840][T16146] should_failslab+0xc2/0x120 [ 692.855863][T16146] __kmalloc_node_track_caller_noprof+0xde/0x8a0 [ 692.855916][T16146] ? kstrdup_const+0x63/0x80 [ 692.855937][T16146] ? kstrdup+0x53/0x100 [ 692.855952][T16146] kstrdup+0x53/0x100 [ 692.855969][T16146] kstrdup_const+0x63/0x80 [ 692.855986][T16146] alloc_vfsmnt+0xea/0x6b0 [ 692.856007][T16146] clone_mnt+0x6d/0xbf0 [ 692.856019][T16146] ? copy_mnt_ns+0x1a9/0xa90 [ 692.856039][T16146] copy_tree+0x31d/0xbd0 [ 692.856060][T16146] copy_mnt_ns+0x1a9/0xa90 [ 692.856077][T16146] ? rcu_is_watching+0x12/0xc0 [ 692.856100][T16146] create_new_namespaces+0xd3/0xa90 [ 692.856118][T16146] ? bpf_lsm_capable+0x9/0x10 [ 692.856137][T16146] ? security_capable+0x7e/0x260 [ 692.856156][T16146] copy_namespaces+0x468/0x560 [ 692.856175][T16146] copy_process+0x2828/0x76a0 [ 692.856202][T16146] ? __pfx_copy_process+0x10/0x10 [ 692.856222][T16146] ? futex_private_hash_put+0x176/0x300 [ 692.856245][T16146] ? futex_private_hash_put+0x18a/0x300 [ 692.856267][T16146] kernel_clone+0xfc/0x930 [ 692.856288][T16146] ? __pfx_kernel_clone+0x10/0x10 [ 692.856318][T16146] __do_sys_clone+0xce/0x120 [ 692.856337][T16146] ? __pfx___do_sys_clone+0x10/0x10 [ 692.856365][T16146] ? xfd_validate_state+0x61/0x180 [ 692.856378][T16146] ? __pfx_do_writev+0x10/0x10 [ 692.856400][T16146] do_syscall_64+0xcd/0x4b0 [ 692.856417][T16146] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 692.856432][T16146] RIP: 0033:0x7f65a498eec9 [ 692.856445][T16146] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 692.856459][T16146] RSP: 002b:00007f65a58eefe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 692.856473][T16146] RAX: ffffffffffffffda RBX: 00007f65a4be5fa0 RCX: 00007f65a498eec9 [ 692.856483][T16146] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000002360411 [ 692.856493][T16146] RBP: 00007f65a4a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 692.856502][T16146] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 692.856511][T16146] R13: 00007f65a4be6038 R14: 00007f65a4be5fa0 R15: 00007ffde0f26ea8 [ 692.856531][T16146] [ 692.859881][T16150] queue_state_write: operation too long [ 693.421036][T16150] queue_state_write: use 'run', 'start' or 'kick' [ 695.418490][T14684] Bluetooth: hci0: unexpected event 0x01 length: 5 > 1 [ 695.449542][T14684] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 695.464243][T14684] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:0' [ 695.473520][T14684] CPU: 0 UID: 0 PID: 14684 Comm: kworker/u11:0 Not tainted syzkaller #0 PREEMPT(full) [ 695.473541][T14684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 695.473551][T14684] Workqueue: hci2 hci_rx_work [ 695.473570][T14684] Call Trace: [ 695.473577][T14684] [ 695.473583][T14684] dump_stack_lvl+0x16c/0x1f0 [ 695.473602][T14684] sysfs_warn_dup+0x7f/0xa0 [ 695.473623][T14684] sysfs_create_dir_ns+0x24b/0x2b0 [ 695.473642][T14684] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 695.473664][T14684] ? find_held_lock+0x2b/0x80 [ 695.473685][T14684] ? do_raw_spin_unlock+0x172/0x230 [ 695.473701][T14684] kobject_add_internal+0x2c4/0x9b0 [ 695.473728][T14684] kobject_add+0x16e/0x240 [ 695.473744][T14684] ? __pfx_kobject_add+0x10/0x10 [ 695.473762][T14684] ? do_raw_spin_unlock+0x172/0x230 [ 695.473777][T14684] ? kobject_put+0xab/0x5a0 [ 695.473798][T14684] device_add+0x288/0x1aa0 [ 695.473813][T14684] ? __pfx_dev_set_name+0x10/0x10 [ 695.473828][T14684] ? __pfx_device_add+0x10/0x10 [ 695.473850][T14684] ? mgmt_send_event_skb+0x2fb/0x460 [ 695.473877][T14684] hci_conn_add_sysfs+0x17e/0x230 [ 695.473894][T14684] le_conn_complete_evt+0x1260/0x2150 [ 695.473925][T14684] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 695.473946][T14684] ? bt_warn+0xe4/0x120 [ 695.473965][T14684] ? __pfx_bt_warn+0x10/0x10 [ 695.473990][T14684] hci_le_conn_complete_evt+0x23c/0x370 [ 695.474016][T14684] hci_le_meta_evt+0x354/0x5e0 [ 695.474032][T14684] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 695.474057][T14684] hci_event_packet+0x685/0x11c0 [ 695.474079][T14684] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 695.474097][T14684] ? __pfx_hci_event_packet+0x10/0x10 [ 695.474121][T14684] ? kcov_remote_start+0x3c9/0x6d0 [ 695.474136][T14684] ? lockdep_hardirqs_on+0x7c/0x110 [ 695.474155][T14684] hci_rx_work+0x2c5/0x16b0 [ 695.474170][T14684] ? rcu_is_watching+0x12/0xc0 [ 695.474190][T14684] process_one_work+0x9cc/0x1b70 [ 695.474213][T14684] ? __pfx_process_one_work+0x10/0x10 [ 695.474234][T14684] ? assign_work+0x1a0/0x250 [ 695.474249][T14684] worker_thread+0x6c8/0xf10 [ 695.474270][T14684] ? __kthread_parkme+0x19e/0x250 [ 695.474290][T14684] ? __pfx_worker_thread+0x10/0x10 [ 695.474305][T14684] kthread+0x3c5/0x780 [ 695.474319][T14684] ? __pfx_kthread+0x10/0x10 [ 695.474334][T14684] ? rcu_is_watching+0x12/0xc0 [ 695.474351][T14684] ? __pfx_kthread+0x10/0x10 [ 695.474365][T14684] ret_from_fork+0x56d/0x730 [ 695.474379][T14684] ? __pfx_kthread+0x10/0x10 [ 695.474393][T14684] ret_from_fork_asm+0x1a/0x30 [ 695.474420][T14684] [ 695.777038][T16198] blktrace: Concurrent blktraces are not allowed on nbd3 [ 695.961985][T16197] netlink: 334 bytes leftover after parsing attributes in process `syz.2.2050'. [ 695.981301][T14684] kobject: kobject_add_internal failed for hci2:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 696.003974][T14684] Bluetooth: hci2: failed to register connection device [ 696.661795][T16207] queue_state_write: operation too long [ 696.693812][T16207] queue_state_write: use 'run', 'start' or 'kick' [ 696.719615][T16209] queue_state_write: operation too long [ 696.763797][T16209] queue_state_write: use 'run', 'start' or 'kick' [ 698.025761][ T6944] Bluetooth: hci2: command 0x0c1a tx timeout [ 698.541434][T16217] Process accounting resumed [ 699.707294][T16251] kexec: Could not allocate control_code_buffer [ 701.274226][T16269] FAULT_INJECTION: forcing a failure. [ 701.274226][T16269] name failslab, interval 1, probability 0, space 0, times 0 [ 701.364160][T16269] CPU: 0 UID: 0 PID: 16269 Comm: syz.3.2066 Not tainted syzkaller #0 PREEMPT(full) [ 701.364182][T16269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 701.364191][T16269] Call Trace: [ 701.364197][T16269] [ 701.364203][T16269] dump_stack_lvl+0x16c/0x1f0 [ 701.364223][T16269] should_fail_ex+0x512/0x640 [ 701.364242][T16269] ? __kvmalloc_node_noprof+0x12e/0x9c0 [ 701.364263][T16269] should_failslab+0xc2/0x120 [ 701.364284][T16269] __kvmalloc_node_noprof+0x141/0x9c0 [ 701.364304][T16269] ? io_alloc_cache_init+0x38/0x170 [ 701.364325][T16269] ? io_alloc_cache_init+0x38/0x170 [ 701.364339][T16269] io_alloc_cache_init+0x38/0x170 [ 701.364368][T16269] io_uring_setup+0x67a/0x20e0 [ 701.364394][T16269] ? __pfx_io_uring_setup+0x10/0x10 [ 701.364416][T16269] ? do_futex+0x122/0x350 [ 701.364437][T16269] ? __pfx_do_futex+0x10/0x10 [ 701.364457][T16269] ? fput+0x9b/0xd0 [ 701.364486][T16269] ? xfd_validate_state+0x61/0x180 [ 701.364503][T16269] __x64_sys_io_uring_setup+0xc2/0x170 [ 701.364525][T16269] do_syscall_64+0xcd/0x4b0 [ 701.364543][T16269] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 701.364558][T16269] RIP: 0033:0x7f6963b8eec9 [ 701.364571][T16269] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 701.364584][T16269] RSP: 002b:00007f696495a038 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 701.364599][T16269] RAX: ffffffffffffffda RBX: 00007f6963de5fa0 RCX: 00007f6963b8eec9 [ 701.364609][T16269] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 701.364617][T16269] RBP: 00007f6963c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 701.364626][T16269] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 701.364635][T16269] R13: 00007f6963de6038 R14: 00007f6963de5fa0 R15: 00007ffe2b049d58 [ 701.364654][T16269] [ 701.998250][T16278] netlink: 'syz.2.2067': attribute type 1 has an invalid length. [ 703.790495][ T7783] EXT4-fs (sda1): Delayed block allocation failed for inode 2033 at logical offset 921 with max blocks 11 with error 117 [ 703.900592][ T7783] EXT4-fs (sda1): This should not happen!! Data will be lost [ 703.900592][ T7783] [ 704.441126][ T7783] EXT4-fs (sda1): Delayed block allocation failed for inode 2033 at logical offset 921 with max blocks 1 with error 117 [ 704.566397][ T7783] EXT4-fs (sda1): This should not happen!! Data will be lost [ 704.566397][ T7783] [ 704.809486][ T6944] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 704.819210][ T6944] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 704.830242][ T6944] CPU: 0 UID: 0 PID: 6944 Comm: kworker/u11:1 Not tainted syzkaller #0 PREEMPT(full) [ 704.830264][ T6944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 704.830275][ T6944] Workqueue: hci3 hci_rx_work [ 704.830294][ T6944] Call Trace: [ 704.830300][ T6944] [ 704.830306][ T6944] dump_stack_lvl+0x16c/0x1f0 [ 704.830325][ T6944] sysfs_warn_dup+0x7f/0xa0 [ 704.830345][ T6944] sysfs_create_dir_ns+0x24b/0x2b0 [ 704.830364][ T6944] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 704.830382][ T6944] ? find_held_lock+0x2b/0x80 [ 704.830403][ T6944] ? do_raw_spin_unlock+0x172/0x230 [ 704.830420][ T6944] kobject_add_internal+0x2c4/0x9b0 [ 704.830441][ T6944] kobject_add+0x16e/0x240 [ 704.830457][ T6944] ? __pfx_kobject_add+0x10/0x10 [ 704.830475][ T6944] ? do_raw_spin_unlock+0x172/0x230 [ 704.830491][ T6944] ? kobject_put+0xab/0x5a0 [ 704.830512][ T6944] device_add+0x288/0x1aa0 [ 704.830526][ T6944] ? __pfx_dev_set_name+0x10/0x10 [ 704.830542][ T6944] ? __pfx_device_add+0x10/0x10 [ 704.830563][ T6944] ? mgmt_send_event_skb+0x2fb/0x460 [ 704.830591][ T6944] hci_conn_add_sysfs+0x17e/0x230 [ 704.830608][ T6944] le_conn_complete_evt+0x1260/0x2150 [ 704.830635][ T6944] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 704.830656][ T6944] ? bt_warn+0xe4/0x120 [ 704.830675][ T6944] ? __pfx_bt_warn+0x10/0x10 [ 704.830700][ T6944] hci_le_conn_complete_evt+0x23c/0x370 [ 704.830726][ T6944] hci_le_meta_evt+0x354/0x5e0 [ 704.830741][ T6944] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 704.830766][ T6944] hci_event_packet+0x685/0x11c0 [ 704.830788][ T6944] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 704.830804][ T6944] ? __pfx_hci_event_packet+0x10/0x10 [ 704.830828][ T6944] ? kcov_remote_start+0x3c9/0x6d0 [ 704.830843][ T6944] ? lockdep_hardirqs_on+0x7c/0x110 [ 704.830862][ T6944] hci_rx_work+0x2c5/0x16b0 [ 704.830878][ T6944] ? rcu_is_watching+0x12/0xc0 [ 704.830898][ T6944] process_one_work+0x9cc/0x1b70 [ 704.830921][ T6944] ? __pfx_process_one_work+0x10/0x10 [ 704.830942][ T6944] ? assign_work+0x1a0/0x250 [ 704.830957][ T6944] worker_thread+0x6c8/0xf10 [ 704.830980][ T6944] ? __pfx_worker_thread+0x10/0x10 [ 704.830995][ T6944] kthread+0x3c5/0x780 [ 704.831009][ T6944] ? __pfx_kthread+0x10/0x10 [ 704.831024][ T6944] ? rcu_is_watching+0x12/0xc0 [ 704.831041][ T6944] ? __pfx_kthread+0x10/0x10 [ 704.831055][ T6944] ret_from_fork+0x56d/0x730 [ 704.831069][ T6944] ? __pfx_kthread+0x10/0x10 [ 704.831083][ T6944] ret_from_fork_asm+0x1a/0x30 [ 704.831110][ T6944] [ 704.831130][ T6944] kobject: kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 705.124867][ T6944] Bluetooth: hci3: failed to register connection device [ 706.346128][T16346] netlink: 334 bytes leftover after parsing attributes in process `syz.3.2077'. [ 706.528364][T16348] FAULT_INJECTION: forcing a failure. [ 706.528364][T16348] name failslab, interval 1, probability 0, space 0, times 0 [ 706.622159][T16348] CPU: 0 UID: 0 PID: 16348 Comm: syz.4.2078 Not tainted syzkaller #0 PREEMPT(full) [ 706.622181][T16348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 706.622191][T16348] Call Trace: [ 706.622197][T16348] [ 706.622203][T16348] dump_stack_lvl+0x16c/0x1f0 [ 706.622224][T16348] should_fail_ex+0x512/0x640 [ 706.622245][T16348] ? __kvmalloc_node_noprof+0x12e/0x9c0 [ 706.622267][T16348] should_failslab+0xc2/0x120 [ 706.622289][T16348] __kvmalloc_node_noprof+0x141/0x9c0 [ 706.622310][T16348] ? io_alloc_cache_init+0x38/0x170 [ 706.622329][T16348] ? io_alloc_cache_init+0x38/0x170 [ 706.622343][T16348] io_alloc_cache_init+0x38/0x170 [ 706.622359][T16348] io_uring_setup+0x67a/0x20e0 [ 706.622383][T16348] ? __pfx_io_uring_setup+0x10/0x10 [ 706.622403][T16348] ? do_futex+0x122/0x350 [ 706.622430][T16348] ? __pfx_do_futex+0x10/0x10 [ 706.622451][T16348] ? fput+0x9b/0xd0 [ 706.622480][T16348] ? xfd_validate_state+0x61/0x180 [ 706.622498][T16348] __x64_sys_io_uring_setup+0xc2/0x170 [ 706.622521][T16348] do_syscall_64+0xcd/0x4b0 [ 706.622538][T16348] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 706.622554][T16348] RIP: 0033:0x7f008d78eec9 [ 706.622567][T16348] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 706.622581][T16348] RSP: 002b:00007f008e67f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 706.622633][T16348] RAX: ffffffffffffffda RBX: 00007f008d9e5fa0 RCX: 00007f008d78eec9 [ 706.622644][T16348] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 706.622653][T16348] RBP: 00007f008d811f91 R08: 0000000000000000 R09: 0000000000000000 [ 706.622662][T16348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 706.622671][T16348] R13: 00007f008d9e6038 R14: 00007f008d9e5fa0 R15: 00007ffe64508208 [ 706.622691][T16348] [ 707.169978][ T6944] Bluetooth: hci3: command 0x0c1a tx timeout [ 707.436826][T16375] FAULT_INJECTION: forcing a failure. [ 707.436826][T16375] name failslab, interval 1, probability 0, space 0, times 0 [ 707.497510][T16375] CPU: 0 UID: 0 PID: 16375 Comm: syz.5.2082 Not tainted syzkaller #0 PREEMPT(full) [ 707.497534][T16375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 707.497543][T16375] Call Trace: [ 707.497549][T16375] [ 707.497556][T16375] dump_stack_lvl+0x16c/0x1f0 [ 707.497577][T16375] should_fail_ex+0x512/0x640 [ 707.497595][T16375] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 707.497615][T16375] should_failslab+0xc2/0x120 [ 707.497636][T16375] kmem_cache_alloc_noprof+0x75/0x6e0 [ 707.497651][T16375] ? lock_acquire+0x179/0x350 [ 707.497671][T16375] ? alloc_vfsmnt+0x23/0x6b0 [ 707.497694][T16375] ? alloc_vfsmnt+0x23/0x6b0 [ 707.497712][T16375] alloc_vfsmnt+0x23/0x6b0 [ 707.497732][T16375] clone_mnt+0x6d/0xbf0 [ 707.497744][T16375] ? copy_mnt_ns+0x1a9/0xa90 [ 707.497764][T16375] copy_tree+0x31d/0xbd0 [ 707.497786][T16375] copy_mnt_ns+0x1a9/0xa90 [ 707.497802][T16375] ? rcu_is_watching+0x12/0xc0 [ 707.497825][T16375] create_new_namespaces+0xd3/0xa90 [ 707.497843][T16375] ? bpf_lsm_capable+0x9/0x10 [ 707.497862][T16375] ? security_capable+0x7e/0x260 [ 707.497881][T16375] copy_namespaces+0x468/0x560 [ 707.497900][T16375] copy_process+0x2828/0x76a0 [ 707.497928][T16375] ? __pfx_copy_process+0x10/0x10 [ 707.497948][T16375] ? futex_private_hash_put+0x176/0x300 [ 707.497971][T16375] ? futex_private_hash_put+0x18a/0x300 [ 707.498003][T16375] kernel_clone+0xfc/0x930 [ 707.498025][T16375] ? __pfx_kernel_clone+0x10/0x10 [ 707.498056][T16375] __do_sys_clone+0xce/0x120 [ 707.498076][T16375] ? __pfx___do_sys_clone+0x10/0x10 [ 707.498105][T16375] ? xfd_validate_state+0x61/0x180 [ 707.498118][T16375] ? __pfx_do_writev+0x10/0x10 [ 707.498140][T16375] do_syscall_64+0xcd/0x4b0 [ 707.498157][T16375] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 707.498172][T16375] RIP: 0033:0x7f260af8eec9 [ 707.498185][T16375] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 707.498198][T16375] RSP: 002b:00007f260befffe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 707.498213][T16375] RAX: ffffffffffffffda RBX: 00007f260b1e5fa0 RCX: 00007f260af8eec9 [ 707.498223][T16375] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000002360411 [ 707.498232][T16375] RBP: 00007f260b011f91 R08: 0000000000000000 R09: 0000000000000000 [ 707.498240][T16375] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 707.498249][T16375] R13: 00007f260b1e6038 R14: 00007f260b1e5fa0 R15: 00007fffc853d778 [ 707.498267][T16375] [ 707.880608][T16375] ------------[ cut here ]------------ [ 707.886383][T16375] ida_free called for id=1003 which is not allocated. [ 707.895385][T16375] WARNING: CPU: 0 PID: 16375 at lib/idr.c:592 ida_free+0x1f9/0x2e0 [ 707.903288][T16375] Modules linked in: [ 707.907262][T16375] CPU: 0 UID: 0 PID: 16375 Comm: syz.5.2082 Not tainted syzkaller #0 PREEMPT(full) [ 707.916770][T16375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 707.926957][T16375] RIP: 0010:ida_free+0x1f9/0x2e0 [ 707.931914][T16375] Code: 7c f6 41 83 fe 3e 76 72 e8 d4 44 7c f6 48 8b 7c 24 28 4c 89 ee e8 77 01 0d 00 90 48 c7 c7 c0 73 cf 8c 89 ee e8 a8 1a 3b f6 90 <0f> 0b 90 90 e8 ae 44 7c f6 48 b8 00 00 00 00 00 fc ff df 48 01 c3 [ 707.952003][T16375] RSP: 0018:ffffc90003d97940 EFLAGS: 00010282 [ 707.958151][T16375] RAX: 0000000000000000 RBX: 1ffff920007b2f29 RCX: ffffc9000bd71000 [ 707.966203][T16375] RDX: 0000000000080000 RSI: ffffffff81797cf5 RDI: 0000000000000001 [ 707.974199][T16375] RBP: 00000000000003eb R08: 0000000000000001 R09: 0000000000000000 [ 707.982161][T16375] R10: 0000000000000000 R11: fffffffffffcacd8 R12: ffff88801e6c5000 [ 707.990209][T16375] R13: 0000000000000283 R14: 00000000000003eb R15: ffff88801e6c5078 [ 708.000036][T16375] FS: 00007f260bf006c0(0000) GS:ffff888124e8c000(0000) knlGS:0000000000000000 [ 708.009209][T16375] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 708.015840][T16375] CR2: 0000001b31defff8 CR3: 0000000077964000 CR4: 00000000003526f0 [ 708.024039][T16375] Call Trace: [ 708.027329][T16375] [ 708.030263][T16375] ? __pfx_ida_free+0x10/0x10 [ 708.035025][T16375] ? copy_tree+0x7ae/0xbd0 [ 708.039943][T16375] copy_mnt_ns+0x886/0xa90 [ 708.044517][T16375] ? rcu_is_watching+0x12/0xc0 [ 708.049534][T16375] create_new_namespaces+0xd3/0xa90 [ 708.054840][T16375] ? bpf_lsm_capable+0x9/0x10 [ 708.060137][T16375] ? security_capable+0x7e/0x260 [ 708.065135][T16375] copy_namespaces+0x468/0x560 [ 708.069950][T16375] copy_process+0x2828/0x76a0 [ 708.075428][T16375] ? __pfx_copy_process+0x10/0x10 [ 708.080639][T16375] ? futex_private_hash_put+0x176/0x300 [ 708.086244][T16375] ? futex_private_hash_put+0x18a/0x300 [ 708.091789][T16375] kernel_clone+0xfc/0x930 [ 708.096737][T16375] ? __pfx_kernel_clone+0x10/0x10 [ 708.102535][T16375] __do_sys_clone+0xce/0x120 [ 708.107547][T16375] ? __pfx___do_sys_clone+0x10/0x10 [ 708.112862][T16375] ? xfd_validate_state+0x61/0x180 [ 708.118059][T16375] ? __pfx_do_writev+0x10/0x10 [ 708.122823][T16375] do_syscall_64+0xcd/0x4b0 [ 708.127387][T16375] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 708.133284][T16375] RIP: 0033:0x7f260af8eec9 [ 708.137762][T16375] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 708.157605][T16375] RSP: 002b:00007f260befffe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 708.166056][T16375] RAX: ffffffffffffffda RBX: 00007f260b1e5fa0 RCX: 00007f260af8eec9 [ 708.174062][T16375] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000002360411 [ 708.182031][T16375] RBP: 00007f260b011f91 R08: 0000000000000000 R09: 0000000000000000 [ 708.190500][T16375] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 708.199003][T16375] R13: 00007f260b1e6038 R14: 00007f260b1e5fa0 R15: 00007fffc853d778 [ 708.207784][T16375] [ 708.210799][T16375] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 708.218062][T16375] CPU: 0 UID: 0 PID: 16375 Comm: syz.5.2082 Not tainted syzkaller #0 PREEMPT(full) [ 708.227413][T16375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 708.237452][T16375] Call Trace: [ 708.240720][T16375] [ 708.243663][T16375] dump_stack_lvl+0x3d/0x1f0 [ 708.248247][T16375] vpanic+0x640/0x6f0 [ 708.252216][T16375] ? ida_free+0x1f9/0x2e0 [ 708.256537][T16375] panic+0xca/0xd0 [ 708.260243][T16375] ? __pfx_panic+0x10/0x10 [ 708.264648][T16375] check_panic_on_warn+0xab/0xb0 [ 708.269578][T16375] __warn+0xf6/0x3c0 [ 708.273544][T16375] ? __pfx_vprintk_emit+0x10/0x10 [ 708.278556][T16375] ? ida_free+0x1f9/0x2e0 [ 708.282871][T16375] report_bug+0x3c3/0x580 [ 708.287192][T16375] ? ida_free+0x1f9/0x2e0 [ 708.291518][T16375] handle_bug+0x184/0x210 [ 708.295859][T16375] exc_invalid_op+0x17/0x50 [ 708.300383][T16375] asm_exc_invalid_op+0x1a/0x20 [ 708.305245][T16375] RIP: 0010:ida_free+0x1f9/0x2e0 [ 708.310171][T16375] Code: 7c f6 41 83 fe 3e 76 72 e8 d4 44 7c f6 48 8b 7c 24 28 4c 89 ee e8 77 01 0d 00 90 48 c7 c7 c0 73 cf 8c 89 ee e8 a8 1a 3b f6 90 <0f> 0b 90 90 e8 ae 44 7c f6 48 b8 00 00 00 00 00 fc ff df 48 01 c3 [ 708.329796][T16375] RSP: 0018:ffffc90003d97940 EFLAGS: 00010282 [ 708.335888][T16375] RAX: 0000000000000000 RBX: 1ffff920007b2f29 RCX: ffffc9000bd71000 [ 708.344026][T16375] RDX: 0000000000080000 RSI: ffffffff81797cf5 RDI: 0000000000000001 [ 708.352435][T16375] RBP: 00000000000003eb R08: 0000000000000001 R09: 0000000000000000 [ 708.360434][T16375] R10: 0000000000000000 R11: fffffffffffcacd8 R12: ffff88801e6c5000 [ 708.368420][T16375] R13: 0000000000000283 R14: 00000000000003eb R15: ffff88801e6c5078 [ 708.376399][T16375] ? __warn_printk+0x1a5/0x350 [ 708.381281][T16375] ? __pfx_ida_free+0x10/0x10 [ 708.385961][T16375] ? copy_tree+0x7ae/0xbd0 [ 708.390403][T16375] copy_mnt_ns+0x886/0xa90 [ 708.394846][T16375] ? rcu_is_watching+0x12/0xc0 [ 708.399667][T16375] create_new_namespaces+0xd3/0xa90 [ 708.404877][T16375] ? bpf_lsm_capable+0x9/0x10 [ 708.409575][T16375] ? security_capable+0x7e/0x260 [ 708.414523][T16375] copy_namespaces+0x468/0x560 [ 708.419307][T16375] copy_process+0x2828/0x76a0 [ 708.423990][T16375] ? __pfx_copy_process+0x10/0x10 [ 708.429013][T16375] ? futex_private_hash_put+0x176/0x300 [ 708.434746][T16375] ? futex_private_hash_put+0x18a/0x300 [ 708.440312][T16375] kernel_clone+0xfc/0x930 [ 708.444955][T16375] ? __pfx_kernel_clone+0x10/0x10 [ 708.450006][T16375] __do_sys_clone+0xce/0x120 [ 708.454704][T16375] ? __pfx___do_sys_clone+0x10/0x10 [ 708.460090][T16375] ? xfd_validate_state+0x61/0x180 [ 708.465215][T16375] ? __pfx_do_writev+0x10/0x10 [ 708.469994][T16375] do_syscall_64+0xcd/0x4b0 [ 708.474512][T16375] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 708.480429][T16375] RIP: 0033:0x7f260af8eec9 [ 708.484858][T16375] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 708.504873][T16375] RSP: 002b:00007f260befffe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 708.513283][T16375] RAX: ffffffffffffffda RBX: 00007f260b1e5fa0 RCX: 00007f260af8eec9 [ 708.521243][T16375] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000002360411 [ 708.529203][T16375] RBP: 00007f260b011f91 R08: 0000000000000000 R09: 0000000000000000 [ 708.537162][T16375] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 708.545117][T16375] R13: 00007f260b1e6038 R14: 00007f260b1e5fa0 R15: 00007fffc853d778 [ 708.553096][T16375] [ 708.556208][T16375] Kernel Offset: disabled [ 708.560529][T16375] Rebooting in 86400 seconds..