last executing test programs: 7.429020591s ago: executing program 2 (id=470): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r0, &(0x7f0000003900)='\t', 0x1) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r1, &(0x7f0000003900)='\t', 0x1) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/nfs/parameters/nfs_idmap_cache_timeout\x00', 0xc2902, 0x0) read$auto(r2, 0x0, 0x20) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) unshare$auto(0x40000080) clone$auto(0x9001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x5) alarm$auto(0x3) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/nfs/parameters/nfs_idmap_cache_timeout\x00', 0xc2902, 0x0) read$auto(r3, 0x0, 0x20) clone$auto(0x9001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x5) alarm$auto(0x3) 7.108880408s ago: executing program 0 (id=472): r0 = socket(0x27, 0x2, 0x7) socket(0x1d, 0x3, 0x1) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, 0x0, 0xfd}, 0x6a) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r1, 0xfd}, 0x6a) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'dummy0\x00'}) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0xc0400, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) write$auto(r0, &(0x7f0000000000)='-\x00', 0x2fb) r3 = getpgid(0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r4, &(0x7f0000003900)='\t', 0x1) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/memory_hotplug/parameters/online_policy\x00', 0x2, 0x0) r6 = openat$auto_btrfs_dir_file_operations_inode(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/virtual/bluetooth/hci4\x00', 0x6e0644eccc8372ce, 0x0) ioctl$auto_BTRFS_IOC_GET_SUBVOL_ROOTREF(r6, 0xd000943d, &(0x7f0000000380)={0x4, [{0x6, 0xe7}, {0x6cf2, 0xa4f}, {0x5, 0x7}, {0x8, 0x8001}, {0x9, 0x7fff}, {0x1, 0x7}, {0x0, 0x100000000}, {0xd, 0x8b}, {0x7e1d}, {0xaf4e}, {0x10000, 0x2}, {0x5, 0x3}, {0x3, 0x4}, {0x2, 0x5}, {0x7, 0x1}, {0x9, 0x3}, {0x5, 0x1}, {0x5, 0x51780000000}, {0x1, 0x401}, {0x0, 0x9}, {0x7, 0x7ff}, {0x1000, 0xffff}, {0x0, 0x9}, {0xb9, 0x6}, {0x8000, 0x6}, {0x7, 0x7}, {0x8, 0x7}, {0x5, 0x98a}, {0x431a, 0xbf}, {0x9, 0x3}, {0x70c, 0x1}, {0xcdd, 0x8}, {0xa, 0x7}, {0x0, 0x9}, {0xf62, 0x6}, {0x4, 0x100000}, {0x5, 0x6}, {0x3eeb0173, 0x1}, {0xffffffffffffffff, 0x7d2797ef}, {0x8, 0x3}, {0x7, 0x8000000000000001}, {0x22, 0xe7a}, {0x7, 0x7f}, {0x8, 0x6}, {0x3, 0x1}, {0xffffffff, 0x3}, {0xfffffffffffffff9, 0xdad}, {0x9, 0x5}, {0x0, 0x3}, {0x2, 0x3}, {0xea6a0000000, 0x81}, {0x100000000, 0x8}, {0x2a, 0x6968}, {0x9, 0xfa}, {0x7, 0xffff}, {0x7, 0x3}, {0x2, 0x7ff}, {0x1, 0x100000000}, {0x2, 0x4}, {0x9, 0x7fffffffffffffff}, {0xfffffffffffff14d, 0xc7f}, {0x9, 0x3}, {0xfff, 0x8}, {0x1, 0x100000001}, {0x3, 0x6}, {0x0, 0x4}, {0x1, 0x471c}, {0x0, 0x1ff}, {0x6, 0x8}, {0x0, 0x2}, {0xc, 0x9}, {0xed0, 0x934}, {0x7, 0x81}, {0x3, 0x5}, {0x4, 0xd20000000}, {0x9, 0x9}, {0x2, 0x200}, {0x8}, {0x2, 0x9}, {0x2, 0x4}, {0xffffffffffffff2a}, {0xffffffff, 0x2}, {0x3, 0x9eba}, {0x9, 0x6}, {0xa0, 0x5}, {0x8}, {0xfffffffffffffffc, 0x4f}, {0x80000001, 0x5fc}, {0xffffffffffff0e0e, 0xd118}, {0x200, 0x8}, {0x3, 0x100000000}, {0x5, 0x6d}, {0x40, 0x44}, {0xd55c, 0xa94b}, {0xffffffffffff0e77, 0x16f75bbd}, {0x4, 0xd9d}, {0x3}, {0x9, 0x1}, {0x3, 0x5}, {0x80000001, 0xb9a}, {0x80000001, 0x8}, {0x2, 0x8001}, {0x1000, 0x6}, {0x6, 0x9}, {0xfffffffffffffff9, 0x5}, {0xc8, 0x6}, {0x9, 0x6}, {0x1, 0x5}, {0xfffffffffffffffc, 0xb3}, {0x1ff, 0x7}, {0xd20, 0x2}, {0x1}, {0x3, 0x2}, {0x8000, 0x1000}, {0x7, 0x9307}, {0xc9, 0x5}, {0xab77, 0x8}, {0x3, 0xfffffffffffffffc}, {0xe}, {}, {0xbbf, 0x1}, {0x3, 0xe}, {0x4, 0x7}, {0x5, 0x6}, {0x1, 0xa}, {0x1, 0xffff}, {0x400, 0xaa2d}, {0x2, 0x8}, {0x7c, 0x4}, {0x5, 0x80000000}, {0xffffffffffffff80, 0x80000000}, {0x200, 0x4}, {0x4, 0x5}, {0x8, 0x100}, {0xc450, 0x1}, {0x5, 0x7}, {0xffffffffffffff01, 0xff}, {0x4, 0x7}, {0x6, 0x8000}, {0xfffffffffffffd3d, 0x8}, {0x9, 0x4}, {0xd8, 0xcf}, {0xffff, 0x4}, {0xffff, 0x3}, {0x0, 0x100000001}, {0x2, 0x1ff}, {0x5, 0x9}, {0x4393068c, 0x88d7}, {0x7fffffffffffffff, 0xb}, {0x8, 0x2}, {0x6, 0x1}, {0xfffffffffffffff9, 0x7f}, {0x467, 0xbbe2}, {0x19, 0x80000001}, {0x5, 0x8}, {0x3, 0x1}, {0xffff, 0x200}, {0xfffffffffffffff9}, {0xfffffffffffffffc, 0x40}, {0x8, 0x15e}, {0x4, 0x7}, {0x6, 0x7ff}, {0xa, 0xb}, {0xfff, 0x4}, {0x40, 0x8000}, {0x9, 0x6}, {0x8}, {0x6, 0x1}, {0x9}, {0x82c, 0xa}, {0x7f, 0x4}, {0x1, 0x2}, {0x0, 0x6a84ee8f}, {0x34a7, 0x9}, {0x6, 0x2}, {0xffff, 0x8}, {0x4, 0x20000000}, {0xee, 0x8}, {0x401, 0xfffffffffffffff6}, {0x0, 0x5}, {0x8d12, 0x2}, {0x6, 0x100000001}, {0x7, 0x814}, {0x0, 0x5}, {0x4, 0x100}, {0x204, 0x5}, {0x0, 0x8}, {0x8999, 0x2}, {0x1, 0x3ff}, {0xfdd, 0x6}, {0x5, 0x5}, {0x7}, {0xa6a, 0x1}, {0x5, 0x7}, {0x80000001}, {0xa, 0x9}, {0x2, 0x8}, {0x8, 0x3}, {0x0, 0x1}, {0x9f09, 0x5}, {0x2, 0x3}, {0x5, 0xa3a}, {0x6, 0x6}, {0x5, 0x3}, {0xfffffffffffffffc, 0x9}, {0x9, 0xffffffff}, {0x3, 0x100}, {0x800, 0x8}, {0x4, 0x10}, {0x4, 0x3}, {0x2, 0x9}, {0x4, 0x7}, {0xf, 0x9}, {0x9}, {0x4, 0x5}, {0x1, 0x311}, {0x12f69f3c, 0x9}, {0x2, 0x1f}, {0x1, 0x2}, {0x8000, 0xa}, {0xfffffffffffffd5f, 0x4}, {0x8000000000000001, 0x2}, {0x6, 0x2}, {0x3, 0xb58a}, {0x7fffffffffffffff, 0xf06}, {0x1f, 0x2}, {0x400, 0x8}, {0x8001, 0x4}, {0xa}, {0x5}, {0xfffffffffffffe01, 0x8}, {0xab9, 0x9}, {0x7d9, 0x3}, {0xd, 0x259ece80}, {0x7, 0xd}, {0x4, 0x8}, {0x9, 0xfffffffffffffffa}, {0x5, 0x4}, {0x6, 0x2}, {0xb, 0x3}, {0x7, 0x6}, {0x9, 0x4}, {0x0, 0xdad}, {0x6, 0x8}, {0x41e, 0x3}, {0xfffffffffffffff7}, {0x2ea, 0x6}, {0x0, 0x7}, {0xfffffffffffffc01}, {0x5, 0x1}, {0x8}, {0xd, 0x800}, {0x1, 0xffffffffffffffff}, {0x5, 0x6}, {0x0, 0xf}], 0x6, "a8d96689cb7e5c"}) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000001380)='/sys/kernel/config/nvmet/discovery_nqn\x00', 0x10441, 0x0) r7 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000280), 0x10001, 0x0) getdents64$auto(r7, &(0x7f00000002c0)={0x7fffffffffffffff, 0x4, 0x6, 0x2, "e78c5e1f2704bf41fca471ee84e0035fe1d971485cf3303d89ce37c22def79f8bee4782171e6f7074abd8de582e19f6347eb204a4d1c134f5dc5b72683b93388ba3f3ac09fe2"}, 0x1) read$auto(r5, 0x0, 0x800) openat$auto_set_tracer_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/current_tracer\x00', 0x40482, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x4) pidfd_open$auto(r3, 0x0) get_robust_list$auto(r3, &(0x7f0000000200)=&(0x7f00000001c0)={{&(0x7f0000000080)={&(0x7f0000000040)}}, 0x1000, &(0x7f0000000180)={&(0x7f00000000c0)}}, &(0x7f0000000240)=0xffff) 6.071986381s ago: executing program 0 (id=475): r0 = setfsuid$auto(0xee00) setreuid$auto(r0, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000540)='/dev/snd/midiC2D0\x00', 0x40041, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) clone$auto(0xffffffffffffffff, 0x200, 0x0, 0x0, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000001640), r3) sendmsg$auto_NL802154_CMD_SET_CCA_MODE(r3, &(0x7f0000001f40)={0x0, 0x0, &(0x7f0000001f00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="20c55c70", @ANYRES16=r4, @ANYBLOB="010029bd7000fedbdf250d0000000c0006000100000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r5 = openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, 0x0, 0x2000, 0x0) lseek$auto(r5, 0x9, 0x0) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) fsconfig$auto(0xffffffffffffffff, 0x9, 0x0, 0x0, 0x0) read$auto_cgwb_debug_stats_fops_(r2, 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f00000000c0)=""/255, 0xff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_smc_pnetid(&(0x7f0000001f00), 0xffffffffffffffff) madvise$auto(0x0, 0xffffffffffff0101, 0x15) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) ioctl$auto_USB_RAW_IOCTL_INIT(0xffffffffffffffff, 0x41015500, &(0x7f0000000080)={"44cb9bf73ee4f7d17375d0a2c121fc097204973ce5c568f45cf3a37f00073e797cd85f52c60300259f0f496b584d7480859a383753a492b262cd2e665fea378855d02010f2b1cf7092368788828277decc11b6e7d5384aba1e1eee4def75ba496344c135ba8cd74d91b58200000000000000000000000000000000004000", "780700e6cfac2407a640931102b4c630bc5601fb47fa67124586bd24165be85c89ed2955a83b4f392c6e23d14a933119c64d9d38168f40e3b68dcaf3e5f074ce961d6a33c481d540e5282df16757d500000000000000000000000000eaf0561000", 0x4}) ioctl$auto_USB_RAW_IOCTL_RUN(0xffffffffffffffff, 0x5501, 0x0) openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) sendmsg$auto_NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8080}, 0x0) writev$auto(0xffffffffffffffff, 0x0, 0x1) ioctl$auto(r1, 0x4, r5) close_range$auto(0x0, 0xfffffffffffff000, 0x0) sendmsg$auto_L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000004fc0)={0x0, 0x0, &(0x7f0000004f80)={&(0x7f0000004f00)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="010026bd"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x40) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x9, 0x6, 0x10, 0x4, 0x4, 0xffffffffffffffff, 0xa, "2af051b26b658a20d8dc6b36c83ce63f", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0x7, 0x6}, 0xf) bpf$auto(0x1a, &(0x7f0000000380)=@link_create={@map_fd, @target_ifindex=r6, 0x3, 0x81, @uprobe_multi={0x81, 0x1ff, 0x3d7e, 0x0, 0x1, 0x4}}, 0x92) 4.832289882s ago: executing program 1 (id=477): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x1, 0x0) read$auto_o2hb_debug_fops_heartbeat(0xffffffffffffffff, &(0x7f0000000280)=""/113, 0x71) mmap$auto(0x4, 0x20000400008, 0xdf, 0x1010, r0, 0xc000) setsockopt$auto_SO_OOBINLINE(r0, 0x9, 0xa, &(0x7f0000000180)='\x00', 0x1) sendmsg$auto_OVS_METER_CMD_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="010027bd701cffdbdf2502000000"], 0x14}, 0x1, 0x0, 0x0, 0x83b5a3da03b67f5b}, 0x404c040) r1 = socket(0x25, 0x1, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/nbd11/queue/iostats_passthrough\x00', 0x2a001, 0x0) write$auto(r2, &(0x7f0000000040)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) sendmmsg$auto(r1, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x1, 0x8}, 0xed7138c}, 0x5b, 0xe000) setrlimit$auto(0x7, 0x0) bpf$auto(0x0, 0x0, 0xf) rseq$auto(&(0x7f0000000300)={0x12, 0x401, 0x0, 0x3, 0xffffffff, 0x100}, 0x8000, 0x0, 0x6) sendmsg$auto_THERMAL_GENL_CMD_THRESHOLD_FLUSH(0xffffffffffffffff, 0x0, 0x40c0) timer_create$auto(0x3, 0x0, 0x0) rt_sigprocmask$auto(0x0, &(0x7f0000000000)={0xfffffffffffffe01}, 0x0, 0x8) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/fs/ext4/sda1/mb_groups\x00', 0x109180, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/bond0/bonding/all_slaves_active\x00', 0xb02, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/vm/nr_overcommit_hugepages\x00', 0x100, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x88000, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r4) ioctl$auto_KVM_GET_MSRS(r3, 0xc008ae88, &(0x7f0000000100)={0x2, 0x179, [{0x3a, 0x5, 0x80000000}]}) sendmsg$auto_NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001980)=ANY=[@ANYBLOB="000428bd7000fddbdf2572000000d5074801df1af0ebe5aff861f90fef1cd29caf556101167b1ccb2741bde9cc96d71b7295da0b178f3145eaa4a00a4fa9fcb281c65c30c1430b48e6f91275f00ee96d06f7e6bd05c1af7b9c0ee013ca8dc3e82a4f7efb413a0b9cd35763b92ded7ee1b9336e0bc7d12d0f26083a168c6a2ee064b2d0f1ae837a4f045fc61d947670f450a56dcff9232275db4c9bdfa9497da2c52e0bf4761f0c22b4a637f951ae926928aa18a8b30cc0c74aecb71862892bac4bf26d65323f9a420a2b0a08b7ae78d2b6c8ab635ddc019192eecf0609683042ca1b7f925fb94234d9a499ac22ca7fb11491478430dfcd6d86fff6598161d76b7688b3af1608daa3de12cffc0dfbfc732073ffd2d967b6a291a471822d0b8c681a370cbb192ac9c7e8f7b2b4119a6549a60dfb08b96f50b9b4143460618f0747ce7330fd6cdc4f79bd47e9420972292f97e72501e07fbf574ddb144caf67a5105d344c669dfa56ee1fd9d0b3c98c72eb8c6c942f9aab5830f2c719947168f101b599369e682da9ba5d3c6019ed6c6c6c376e41e3357455077aa8c321e40f034c6f81eb69767672c53adbfe236c5a49a15ddea8a657a818a8e8ea921fdc11d6034e40ab2afc5e2919de79af646f82d79ca078372f3f1328b25e0718e7f64be83d58a4cbe12ffe3505307434554c96d7095051a6704101a23fb2baf5b81401da72b5213552a7cb54ee801d26f6efb25c3d20c03768e9ffb6b50546735f5d1b553f73d5f8c36a5aa5ab5a5d4e08b910e6f29a52e77d53e27c4827b5bc154c11e8f2625d0c5d8e15a138a0fd72c9458d72bd8be57afa648a003f5d909c0a7aa1062546407f019695df71228ee704c4fe870bca3c4f3d5183aa4f4f19e9bfcf9b282241ee6eabaab6777f72b0b1e52a498464978fa44e2d9a73935efe46b0c3e91fee32949f032740bd3b018c1eb330ce7d0a44553ff12a25f20ed41aefc8b12f4374f1dcdaeae16345ec004ba3bf0d5bf39037bd4b73fb2a6d5022198f3bcf9d623c4f706ae5b3ba632c112424ad5d673f38e3c673c50552731151cb53dd9ec9699d375b451d8f4e2457e5eab34766a66b031dcdcae85e67939edb373588801a5ea82f8d266aa78341c0e1104f2b0dd5ee0c081f3855a06bec389a29645871ea53b10e19e44737951756ecc062dedfccc3fd84aae13d3c5c8328379756f42b1cf8e9453e9491033f2ede522c8daa0577152799451358694c3771169411150f5066a243d6f869671a4a924602cdfa5a35e4cf303cf7271afb702c93a6101275319153d7c88c112b7d1331db47415023ec18b7d558967f82e7970b1616d8cd1bd5deda3f90bcddec801412e8a4ceb854241bcfe0850c7495399338b41ae01528fe5da8296d5cb4a0a5e4ca8c82327da83c0999ab91549f5a08c1ded5d54509bc60b3afbace2fea3c7817aeed4fefc038e86bc77be0029dc5a8f70d41770990583da9b943c9f7c646888171188a9ca40b58b7ff2066bc657dcf369fc8faf74576f61347b0d4016854d5701cacce7eb0ee48f3a302b5892649dad4c910e27976e0ba3f781fb9fc8908904b03455d8d45a6875a18a97da67e91b9f43424c58ceac55ab788fd91097db30ef891cf659dca25f64300f52b544b4be462724803171a0c4328472c3c9a863dbb331029066f55a0e8ef1c3852c3f19c2bbd71c17852bcf22a125ff854592c146258ba99fe1a9dcca3e1a9178ecd0d6096d0642bd1639d547d475dbe4e30b62a0db806e865000b5fac63f537cebc8a4f133843c9d333f566c82a3b2e4a947be01743c36af38975d7396bf804fabf5a102e86ebc9dc18a0f07b5c5ca355cae4000b95f759e53717ec4ccee0778f3cf3f1b3d8a38a"], 0x7ec}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'pimreg0\x00'}) syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000001500), 0xffffffffffffffff) 4.549412505s ago: executing program 2 (id=479): sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x3c}}, 0xf7374674b920089e) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r0 = socket(0x29, 0x2, 0x0) r1 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fb1\x00', 0x40000, 0x0) ioctl$auto_FBIOPUTCMAP(r1, 0x4605, &(0x7f00000000c0)="fb78b65d3a4af3fe00daa47fe6e1788a6cb68ef9bacf05acf852754aae83b3f08cd1c445e6af40bae5e97ed62edfbcf2fc2d12e6c49f14d7ce3130907ec21253da5dc9bae878e303899cb1eecf9595ab2fe8a455b7216fbc72a05f8b25a0ba241f2ef373cfd79498b82f4df09a591ccee86f37034c2f0b66313ee9f7") r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) semget$auto(0x100, 0x6, 0x80000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card0\x00', 0x20100, 0x0) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/udp6\x00', 0x80, 0x0) pread64$auto(r4, 0x0, 0x8202000, 0x2d) ioctl$auto(r3, 0x404064c8, r3) recvmmsg$auto(r2, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x803}, 0xfffffff9, 0x10, 0x0) ioctl$auto(r0, 0x89f0, 0x24) 4.468093448s ago: executing program 1 (id=480): r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0xa02, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f00000001c0)={{@inferred, 0x1, 0x6, 0x80000001, "a2b8e85fc56865ba529faa0000000000000002000000692a240000008000"}, 0x6, 0x5, 0x7, @raw=0xfeffffff, @reserved="fb99d320be0de941ac3f58d7aae0c84cbe332d618e0342771e3ac6e9a9df07cf9b1c017c611ac455c01804d0d4c89bee7005c5affd5ab891b44e48364e8de3f344584996c31f9ae16c6c4f062d38f590125ed264000000000000000000000000000000000000000600", "a4699d30a05edbe0d28473c399a7dc920b153e9b1675451d7de94b4123f970bedd3460c667373fcc59b584d81592f4ab606c276852295e00af49090000008034"}) 4.398657402s ago: executing program 0 (id=481): openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, 0x0, 0x109001, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x111080, 0x0) prctl$auto(0x800003e, 0x5, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) write$auto(0xffffffffffffffff, 0x0, 0x8000000000000001) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/rpc/auth.unix.ip/flush\x00', 0x40d81, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) getpid() r1 = openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, 0x0, 0x2100, 0x0) mmap$auto(0x0, 0x2020008, 0x8000000000000000, 0x10, r1, 0x7fff) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/platform/i8042/serio1/rate\x00', 0x2, 0x0) write$auto(r2, 0x0, 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x20000, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) stat$auto(0x0, &(0x7f0000000380)={0x506f, 0x7, 0x80000000000000, 0xfffffff2, 0x0, 0xee01, 0x0, 0x5, 0x101, 0x4, 0x1, 0x20fd, 0xffff, 0x800000401, 0x5f54, 0x1000000000, 0xfffffffeffffffff}) r3 = openat$auto_urandom_fops_random(0xffffffffffffff9c, &(0x7f0000000080), 0x20082, 0x0) writev$auto(r3, &(0x7f00000003c0)={0x0, 0x8}, 0x3) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), r4) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r4, 0x0, 0x40800) unshare$auto(0x40000080) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x0, 0x0) ioctl$auto_MON_IOCX_MFETCH(r5, 0xc0109207, 0x0) ioctl$auto_MON_IOCX_MFETCH(r5, 0xc0109207, &(0x7f0000000100)={0x0, 0x2000004, 0x7}) pread64$auto(r5, 0x0, 0x2000000007fd, 0x4000000d) 4.268828806s ago: executing program 3 (id=482): bpf$auto(0x1, &(0x7f0000000100)=@bpf_attr_4={0x800000000012, 0xffffffffffffffff, 0x80000001}, 0x350) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @broadcast}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) connect$auto(0x3, 0x0, 0x54) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) write$auto(0x3, 0x0, 0xfffffdef) select$auto(0x9, &(0x7f00000000c0)={[0xeeda, 0x7, 0x100000001, 0x9, 0x6, 0x1ff, 0x6, 0x3, 0x4, 0x4618ecd2, 0x3, 0x42ff, 0x6, 0x9a8c, 0x9, 0x10001]}, 0x0, 0x0, &(0x7f0000000280)={0x6, 0xcb}) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) 4.253527534s ago: executing program 1 (id=483): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) listmount$auto(0x0, 0x0, 0x0, 0x1) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb2, 0x403, 0x8000) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) bpf$auto(0x5, 0x0, 0x1000) readv$auto(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x5}, 0x3) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="d0ab8c6e", @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25030000000800030000020000060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a000500ffffffffffff00000a00010000000000000000000a000500ffffffffffff0000060006000f00000006000700070000000800040073090000"], 0x68}, 0x1, 0x0, 0x0, 0x18a64d47ddeca1f0}, 0x4040090) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x8) 3.918862336s ago: executing program 1 (id=484): mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2002, 0x0) socket(0x29, 0x2, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r0 = socket(0x18, 0x3, 0x2) bind$auto(r0, &(0x7f0000000180)=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x6a) connect$auto(0x3, &(0x7f00000000c0)=@hci={0x1f, 0x2}, 0x55) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='\a\xef\'\x00', 0x100000a3d6) r3 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC0\x00', 0x20c02, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_WRITE(r3, 0xc4c85513, &(0x7f0000000040)={{@raw=0x1, 0x650, 0x17, 0x22, "52b0bc1cfa9ed876770f432ff86a41faf50710e1b5c2b055cfd4eb7b77cf456f7ecccdbf6fd1118882104eb6", @raw=0x3}, 0x1, @iec958={"5425e55e797f706ec9ea29e6ae7092a3fa62d7ce6b28e7cc", "3191c3d0ad5b728bd7327a2bf651f4bce765691f794ae6c0de1ab708359a3cec872d2068256e970e25280cb5b465477af11713e19dcbef4f49e4d27d64a85e675154cc951d8214f0269f82d5aa20daacec917440a35b32caeea5ce1209c60902bfa76ef5fd24d0cea92fc5ff59d606f0af7833e3f7da9a14d21f90036bc1f81994037d3646aa9dc5b153a485b02a3d18f53498", 0x0, "c7d11701"}, "8eb598c9a729a1b832f67076197fd450f39c3d9e7b32cad9d57aa44378905e3faef36b04ffd721bfa6e3eb801e28d0e0583d93ca145bde778cf20f70ed5f43daff47759834f30dcebf3ec093b7938476c20c57bf1ed6659b8051e81d07ddf2b97284355e098f34af6106a72e8cca06976760288fdd5cf80a148bf3b1b5ceb881"}) mremap$auto(0x0, 0x4000007, 0x3fd7, 0x0, 0x20000020000000) process_vm_readv$auto(0x0, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, 0x0, 0xa, 0x0) ioctl$auto(0x3, 0x400454ca, 0x38) close_range$auto(0x2, 0x8, 0x0) r4 = memfd_create$auto(0x0, 0xe) r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r2) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/fs/suid_dumpable\x00', 0x1a9442, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x74c) write$auto(r5, &(0x7f0000000000)='//\xf2\x00', 0x80000000) ioctl$auto_NS_GET_TGID_IN_PIDNS(r4, 0x8004b709, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) r6 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/025/001\x00', 0x8901, 0x0) ioctl$auto(r6, 0x5522, r6) ioctl$auto(r6, 0x5521, 0xffffffffffffffff) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/mm/hugepages/hugepages-2048kB/nr_hugepages_mempolicy\x00', 0xa001, 0x0) write$auto(r7, &(0x7f0000000040)='\x00'/13, 0x81) 3.853545685s ago: executing program 2 (id=485): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_netdev(&(0x7f00000011c0), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000012c0)={'veth0_macvtap\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x3c, r4, 0x1b, 0x70bc26, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0xc, 0x3, 0x0, 0x1, [@typed={0x8, 0xb, 0x0, 0x0, @fd=r3}]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f17790485908286dd"}, @OVS_PACKET_ATTR_KEY={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) sendmsg$auto_NETDEV_CMD_BIND_RX(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c7339bd", @ANYRES16=r1, @ANYBLOB="010026bd7000fddbdf250d00000008000100", @ANYRES32=r2, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000004) 3.603017645s ago: executing program 2 (id=486): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/nr14/flags\x00', 0x311760, 0x0) write$auto(r0, &(0x7f0000000140)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k\xfc\xb2\x00\x00\x00\x00y\x113!\x05\xa7\xd6M\xce\xd6\'\xdf@\x9f\xf5 \x8b_hw\x8em\xd0\b\xe7~1\xf5\xf8\x93*jH\x85H\x05\xae\xdf\xf0\x15A\xdb$\'\x87', 0x81) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bus/usb/037/001\x00', 0x82202, 0x0) mmap$auto(0x0, 0x20009, 0x800000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/memory/memory12/power/control\x00', 0x100, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0x8030ae7c, r1) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) syz_genetlink_get_family_id$auto_smc_pnetid(0x0, 0xffffffffffffffff) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) ioctl$auto_BLKRRPART(0xffffffffffffffff, 0x125f, 0x700000000000000) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xc2900, 0x0) read$auto(r4, 0x0, 0x7) r5 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x0, 0x1, 0x10000000000009, 0x7, 0x38, 0x3ff, 0x1ffde, 0x7, 0x6, 0x2, 0x9, 0x2, 0x6, 0x4, 0xb2, 0x9, 0xc09a, 0xfffd, 0x7, 0x7, 0x9, 0x7, 0x2000, 0x200, 0x0, 0x81, 0x0, 0x7, 0x0, 0x0, 0x0, [0x4, 0x6, 0x4, 0x0, 0x0, 0x0, 0x200000000000002, 0xfffffffffffffffe, 0x0, 0xfffffffffffffffe, 0x0, 0x6, 0x4, 0x0, 0x6, 0x0, 0xfffffffffffffffc, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5]}, 0x202, 0xd) sendmsg$auto_OVS_VPORT_CMD_DEL(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRESDEC=r3, @ANYRESOCT=r2], 0x3c}, 0x1, 0x0, 0x0, 0x45}, 0x20004000) mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000) r6 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card0\x00', 0x20800, 0x0) ioctl$auto(r6, 0xb21064a7, 0x20000a) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) fcntl$auto_F_SET_RW_HINT(r5, 0x40c, 0xd9) sendmmsg$auto(r5, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x5}, 0x7, 0x0) semctl$auto(0x1ff, 0x2, 0x13, 0x4) clone3$auto(0x0, 0x1fe) socket$nl_generic(0x10, 0x3, 0x10) open(0x0, 0x4242, 0xe1d2b27bdc14aabc) 2.930835121s ago: executing program 2 (id=487): openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp1\x00', 0x22342, 0x0) r0 = prctl$auto(0x9, 0x1, 0x4, 0x5, 0x403) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x2, 0x2) mmap$auto(0x0, 0x2020009, 0x203, 0xeb1, 0xfffffffffffffffa, 0x8000) read$auto(0x3, 0x0, 0x8080) r1 = getpid() kcmp$auto_KCMP_EPOLL_TFD(r1, r1, 0x7, 0xffffffffffffffff, 0x8) r2 = clone3$auto(&(0x7f0000000100)={0x8, 0x8000000000000000, 0x4, 0x2c3, 0x1, 0x9, 0x401, 0x0, 0x5, 0x6, 0x101}, 0x94c8) msgctl$auto_IPC_SET(0x0, 0x1, &(0x7f0000000340)={{0x9, 0xffffffffffffffff, 0xee00, 0x7, 0x59, 0xd, 0x2}, &(0x7f00000002c0)=0x3, &(0x7f0000000300), 0x1, 0x1, 0x608, 0x2, 0x0, 0x8, 0x2, 0xaef, @raw=0x6, @raw=0x58c8}) ioctl$auto_XFS_IOC_SWAPEXT(r0, 0xc0c0586d, &(0x7f0000000440)={0xfffffffffffffffb, @raw=0x2, @raw=0x5a7d, 0x400, 0x7, '\x00', {0xd, 0xfff0, 0x9, 0xee01, 0xee01, 0xf, 0x80000000, 0x8, {0x9, 0x4}, {0xe5}, {0x6ab, 0x3}, 0x1, 0x9, 0x1, 0x4, 0x1, 0x2, 0x6, 0x7, 0x2, 0x9, '\x00', 0x4, 0x1, 0xf1, 0x6}}) sendmsg$auto_TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000500)={0x74c, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x480, 0x2, 0x0, 0x1, [@nested={0x1c, 0xe7, 0x0, 0x1, [@nested={0x4, 0x77}, @typed={0x4, 0x2c}, @typed={0x8, 0x41, 0x0, 0x0, @uid}, @nested={0x4, 0x35}, @nested={0x4, 0x11f}]}, @typed={0x26, 0xbe, 0x0, 0x0, @str='/sys/kernel/config/nullb/features\x00'}, @nested={0x183, 0x119, 0x0, 0x1, [@generic="dcf2aa7536ca1935a4d515cc51e25258f70bfd7843ca3527b6f664b115572722e4ebbd064238d89fb50b7e4851ef1955daa564f91c153491fdcd2963d30314dbdbb0a59fc9d711fb43aea25094b771fc46c23f3792874a4bb896a52280171b88f8e88b23e39941e083fce338ff7ec1c85b2ea5e2278d04", @nested={0x4, 0x81}, @typed={0x8, 0x14b, 0x0, 0x0, @pid=r1}, @typed={0x8, 0x135, 0x0, 0x0, @ipv4=@remote}, @typed={0xc, 0x5d, 0x0, 0x0, @u64=0x10}, @generic="b7207fb29886de9ba64c96ca21a560a93d398604ff74835ddeb5bcbcacbf60324782d6435520f570d9fa00bd816aacc6dc232a4c1e969e6220ab501e9f42d1a6c6b0dbeab57aa1aa70aad07aae4efe8b29adb087a0349420df8ce6c4dde845d690260bb1a6ddc5b88ad951c3301b0b61959a55de5b72008233ef4f65bca73ff64be275c61dc91af95fe08d9dce9791f215bb48338442dbaa9c1c689d0ff80b656f74fb2e9f8799db8bfd146abe2160bde79933d55f7a1af2431ac55a100ff98524d066a8ffef002bb97bb1a9d5b5fe2d37ec2cb9ca7b6fa008fc92b179f0c6b343b4699f5d511520"]}, @typed={0xc, 0x18, 0x0, 0x0, @u64=0x53}, @nested={0xc5, 0xce, 0x0, 0x1, [@typed={0x8, 0x9b, 0x0, 0x0, @pid=r2}, @nested={0x4, 0x50}, @nested={0x4, 0x38}, @typed={0x4, 0x89}, @generic="532d772bb22f3671e13ba6796def7c4998ee0324523c378e0ffabc369eacef70e7b43e60e5aa61ae870abb0c8c56d8de9b5dd6671ce98592451b03332f3e7add659a0aedec8b22b9d184d125dec7f5b710e5a30bae8d5ff305c8d23efc078873c0c006a9d76f7727047e70cc695763c0ac26f9907e938f7df23229ebacc78d814127a39d3ae11ae8f3101521d56d89028308dfc6a020107eacd343766def9491d77f1739e1241a908ffad159b9"]}, @nested={0xba, 0x1f, 0x0, 0x1, [@generic="e4ef865bf0f1bc60c57cf2be49121a63a1cf8526fae403c31060e8e17a00c37b6f7719a90a24adde29fc807708aed2f9e0b8523b013fa300cb1f05b42c199f5edae4d65f8a722a271fdbd91c5dcd7043256b798009d17d7a96c15091561c315945bb3f9543f973d9b99ef3e6a838df746a849d38191e983cdf9579cb413a6dcf98f4d12c6805a60e7c44e1a1106c97de334e3a9f0f78ba79655fec0e56a920e98ecd1dbe409a", @typed={0xf, 0xfe, 0x0, 0x0, @str='/dev/audio\x00'}]}, @generic="b31913436d1c80c475bcd335a7559817176e1a7b079ce80d0c85741b75fd031755d35d02b86b2630cff2aed3eab0deb6a04cc9f95e7d192c6c1dcc7d0338e2b550c5238d21ac4b4a805f23044266f291d953fab0b30044e9187b07b8b06d16e9353a88863c597a4de2a572577314b7267937e56bcb0e36eef7c2113ac61dd26f1153037171a52333a583c26e798d161b2224f2d863363d08a4165b2fad1db8341fdc50eda072b5b5965cceb8853e317a8d3efab1691738060f43c46f8ae97c95005522d7f7f266fc48a25615ea44be36e4dcaee2699345c537c2804ccf62f229c8b511960f97abed7be8f23d", @nested={0x21, 0x6b, 0x0, 0x1, [@nested={0x4, 0x9a}, @generic="5795b98fc8054ec5fee1526d69", @typed={0x8, 0x2c, 0x0, 0x0, @uid=r3}, @nested={0x4, 0x9}]}, @typed={0x14, 0xe4, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @broadcast}}]}, @TIPC_NLA_LINK={0x2ab, 0x4, 0x0, 0x1, [@nested={0xd8, 0x135, 0x0, 0x1, [@nested={0x4, 0xf6}, @typed={0xc, 0x96, 0x0, 0x0, @u64=0x3}, @generic="e5fd0c0803f4d0d8aab93849e1fa15b564c4ea10f54e4044771b24c234aa74ef3ecb46268281da3502256e84b96fb786a77b27ec7a22eb955596148c60c9095648f1e3b590752dfa4da286de1c798e4dfe53008e9c0eed986e7b030558fe3f88535322ae164b14b28906c59762a5878cc1d59d90b8c5cc63ab67ab6620883f38cb28f3d467e4f86e710819520ee6810e9ac46b40bc36bf7fb28b5f8076b39f96eafbf43bd34ec9c1abb991eab5312c5f64fdcb62", @typed={0x8, 0x14f, 0x0, 0x0, @ipv4=@rand_addr=0x64010100}, @typed={0x4, 0x119}, @nested={0x4, 0xab}]}, @generic="a75bcfe47aef2bc5cb8f24e04de7b4e633bc185141730acc62c78615c1542e8f2023f750107a759af40b503cfbb85b872cd186e9dde959857d4c1c3280f2e2c82d235ea8971323f38fea99813c3c3faee90135b9229de439249b64dad8fcebb385eb4847068c876894f79645dcf406bd4d84e32faf7006a1325da63d8352286131b21b0834", @typed={0x8, 0x5c, 0x0, 0x0, @pid=0xffffffffffffffff}, @nested={0x34, 0xdd, 0x0, 0x1, [@typed={0xc, 0xe4, 0x0, 0x0, @u64=0x4}, @nested={0x4, 0x68}, @generic="88a5a872538995e733a37cf9db9315ee9e0c7044f5c44eb0", @nested={0x4, 0x78}, @nested={0x4, 0x5}]}, @generic="c031c2203a80f771d37b6b82e421f5c07acfa8d9fa9aa9052e9f5fed12138c88f4b2660a09c81eee9b0bf30f36fb224c48894b0eae52a62e8e17ad9a340dbd41f9c31e449884bb14d876cbf258a967a2ab41b0b13a98825462d716c79602646435cbc52ac30db7d44e025c3ef8e0c9bdc7774a7e42494a9f9982f8514bfa5d60134d30df27d609bc21126ef325feb14a194e8268722ec717a0fcf8418bb51e5be5e60e89a8278cd8322e4943aeaf0e9db4baf5812fcb9f147a2e1a8d0fffbbf1faa04315237434c94eae4475c21a4c541fe4595538b6f00b15633b37bcf38705139cadcb0521806855eb8b2fc53610586fb5", @typed={0x14, 0x107, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @typed={0x8, 0x27, 0x0, 0x0, @uid=r4}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@typed={0x8, 0x10d, 0x0, 0x0, @u32=0x7fffffff}]}]}, 0x74c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) ioctl$auto_SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) openat$auto_tun_fops_tun(0xffffffffffffff9c, 0x0, 0x2002, 0x0) socket(0x29, 0x2, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r5, &(0x7f0000000400)='\x00\x00\x00\x00', 0x100000a3d9) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) r6 = getpid() process_vm_readv$auto(r6, 0x0, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x1000000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x0, 0x0) lseek$auto(0x3, 0x8, 0x1) socket$nl_generic(0x10, 0x3, 0x10) select$auto(0xd, 0x0, 0x0, 0x0, 0x0) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/config/nullb/features\x00', 0x80280, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) 2.930667265s ago: executing program 3 (id=488): mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x2, 0x8000) (async) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) connect$auto(0xffffffffffffffff, &(0x7f0000000140)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x43, 0x4, 0x3}}, 0x100) (async) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) (async) fcntl$auto_F_GETLK(r0, 0x5, 0x8) 2.705836554s ago: executing program 0 (id=489): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/virtual/net/rose7/flags\x00', 0x2262, 0x0) write$auto(r0, &(0x7f0000000140)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k\xfc\xb2\x00\x00\x00\x00y\x113!\x05\xa7\xd6M\xce\xd6\'\xdf@\x9f\xf5 \x8b_hw\x8em\xd0\b\xe7~1\xf5\xf8\x93*jH\x85H\x05\xae\xdf\xf0\x15A\xdb$\'\x87', 0x81) write$auto(r0, &(0x7f0000000640)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V98\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\x80\x04z\xd0I>\x8f\x00\xd7\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x97nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb6\x9f4[!\x0f3u\xaf\x97\x97\x9d\x1dp\xf3\xab\xdfE[5\x86\xa2\xb92\xc0\x15L\xda\xe3\x04\\M\x85}\xdfh\xd2\xd93e\xf61^\x04\x0f\x85\xc7_\xd0\x8d9\xbd\xc6\xf3R\xea\x10\xb9\xa2\x94]\xf2\r\t\xff$\xeb\xfd1\x8d\x97\x80\x81\x95]\xb2H\xf4\x1c\x8c\xcf\x8eM\x0eB\xb0\x83\xa3\bF\xc7\xae\x1a\xa7r\x9c\xfe\xa5\xa0~\xe4o+\x9d\xb0\xa6\xe8\a\x9a}\x88\x0eKd\xe07\xf0\x88\xf2\xb7\xe3\xe3\b\xac\x1e\xa2a0\x83\x0f\x06\x9eD\xd0\xc6\xba\xa4\x13(l\xf6\xbc\x982\xa0@\xda\xe0\x96\xdc0X\x9c\n\xb3fs\xe1\xf50x0}) r4 = syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000001500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001540)={'netdevsim0\x00', 0x0}) sendmsg$auto_NET_SHAPER_CMD_GROUP(0xffffffffffffffff, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="010029bd5e808d590df480f7a0ed750000000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x44000}, 0x14) sendmsg$auto_ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000004c0)={&(0x7f00000009c0)={0x88, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0xa}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x7}, @ETHTOOL_A_PAUSE_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xba6c}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x8a81}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x5}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0xfc}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x8}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0xd9}, @ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}]}]}, 0x88}}, 0x8000) write$auto(0xca, &(0x7f0000000140)='\x04>\x01\x01\x00\x00\x00\x00\x01_\x9e\x99:\x06F\x96\b\'\x02\xb0\x93l\xeb\x87\r\b\x87\x14\xf8e6\x9c%\xb6\x9a\\S\xa2(Q\xcc', 0x7f) r6 = openat$auto_proc_pid_numa_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000003640)='/proc/self/numa_maps\x00', 0x40080, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xc, 0x800008000) lseek$auto(r6, 0x7ff, 0x1) 1.245349379s ago: executing program 3 (id=492): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/misc/rdma_cm/uevent\x00', 0x10b142, 0x0) r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/interrupts\x00', 0x18b202, 0x0) pipe$auto(&(0x7f0000000040)=r0) pread64$auto(r1, &(0x7f0000000340)='/proc/Nes\x00'/22, 0x100000001, 0x100) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) 1.222726267s ago: executing program 0 (id=493): mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2002, 0x0) socket(0x29, 0x2, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r0 = socket(0x18, 0x3, 0x2) bind$auto(r0, &(0x7f0000000180)=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x6a) connect$auto(0x3, &(0x7f00000000c0)=@hci={0x1f, 0x2}, 0x55) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='\a\xef\'\x00', 0x100000a3d6) r3 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC0\x00', 0x20c02, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_WRITE(r3, 0xc4c85513, &(0x7f0000000040)={{@raw=0x1, 0x650, 0x17, 0x22, "52b0bc1cfa9ed876770f432ff86a41faf50710e1b5c2b055cfd4eb7b77cf456f7ecccdbf6fd1118882104eb6", @raw=0x3}, 0x1, @iec958={"5425e55e797f706ec9ea29e6ae7092a3fa62d7ce6b28e7cc", "3191c3d0ad5b728bd7327a2bf651f4bce765691f794ae6c0de1ab708359a3cec872d2068256e970e25280cb5b465477af11713e19dcbef4f49e4d27d64a85e675154cc951d8214f0269f82d5aa20daacec917440a35b32caeea5ce1209c60902bfa76ef5fd24d0cea92fc5ff59d606f0af7833e3f7da9a14d21f90036bc1f81994037d3646aa9dc5b153a485b02a3d18f53498", 0x0, "c7d11701"}, "8eb598c9a729a1b832f67076197fd450f39c3d9e7b32cad9d57aa44378905e3faef36b04ffd721bfa6e3eb801e28d0e0583d93ca145bde778cf20f70ed5f43daff47759834f30dcebf3ec093b7938476c20c57bf1ed6659b8051e81d07ddf2b97284355e098f34af6106a72e8cca06976760288fdd5cf80a148bf3b1b5ceb881"}) mremap$auto(0x0, 0x4000007, 0x3fd7, 0x0, 0x20000020000000) process_vm_readv$auto(0x0, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, 0x0, 0xa, 0x0) ioctl$auto(0x3, 0x400454ca, 0x38) close_range$auto(0x2, 0x8, 0x0) r4 = memfd_create$auto(0x0, 0xe) r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r2) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/fs/suid_dumpable\x00', 0x1a9442, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x74c) write$auto(r5, &(0x7f0000000000)='//\xf2\x00', 0x80000000) ioctl$auto_NS_GET_TGID_IN_PIDNS(r4, 0x8004b709, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) r6 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/025/001\x00', 0x8901, 0x0) ioctl$auto(r6, 0x5522, r6) ioctl$auto(r6, 0x5521, 0xffffffffffffffff) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/mm/hugepages/hugepages-2048kB/nr_hugepages_mempolicy\x00', 0xa001, 0x0) write$auto(r7, &(0x7f0000000040)='\x00'/13, 0x81) 1.222613181s ago: executing program 1 (id=494): r0 = socket(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000000), 0xffffffffffffffff) socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) setsockopt$auto(0x3, 0x10000000084, 0x82, 0x0, 0x8) sendto$auto(0x3, 0x0, 0x2000f, 0x101, &(0x7f0000000000)=@in={0x2, 0x4e22, @loopback}, 0x1c) sendmsg$auto_CTRL_CMD_GETPOLICY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="d8000f005107b91d7487134e085c85294ac15b94194cd92bdee8d115bb73109048216fc8353619d06f5b9408e001e97073c642622e9f6c6bb39c14a200d4042c30", @ANYRES16=r1, @ANYBLOB="f50128bd7000fbdbdf250a00000a0b0002006e6c6374726c0000b6000200237d44a0d718ffd47bf0a1a5ee684c009409520147b78184bb447b36d37d06f764f82aae04694a6ae777e2b91e158877a942cab380a39c25faca3e1ac07960d8a4350e6c71ea7a9c245d36ca9e8d687aa2731960831d43c94288024fd770ad4d20dc4885dadfb364efe2c36102cadf191d0a2eafa47e4ac9680a5f65beaaa103336b6da7154f8e38e8eb225f72f06692f3ed1b5ec666a013da8557925a0c372ebc2aa7cd33e417503b1596125d0d5c8d6b7b0000"], 0xd8}}, 0x22044080) socket(0x10, 0x3, 0x0) (async) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000000), 0xffffffffffffffff) (async) socket(0x2, 0x5, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) (async) setsockopt$auto(0x3, 0x10000000084, 0x82, 0x0, 0x8) (async) sendto$auto(0x3, 0x0, 0x2000f, 0x101, &(0x7f0000000000)=@in={0x2, 0x4e22, @loopback}, 0x1c) (async) sendmsg$auto_CTRL_CMD_GETPOLICY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="d8000f005107b91d7487134e085c85294ac15b94194cd92bdee8d115bb73109048216fc8353619d06f5b9408e001e97073c642622e9f6c6bb39c14a200d4042c30", @ANYRES16=r1, @ANYBLOB="f50128bd7000fbdbdf250a00000a0b0002006e6c6374726c0000b6000200237d44a0d718ffd47bf0a1a5ee684c009409520147b78184bb447b36d37d06f764f82aae04694a6ae777e2b91e158877a942cab380a39c25faca3e1ac07960d8a4350e6c71ea7a9c245d36ca9e8d687aa2731960831d43c94288024fd770ad4d20dc4885dadfb364efe2c36102cadf191d0a2eafa47e4ac9680a5f65beaaa103336b6da7154f8e38e8eb225f72f06692f3ed1b5ec666a013da8557925a0c372ebc2aa7cd33e417503b1596125d0d5c8d6b7b0000"], 0xd8}}, 0x22044080) (async) 1.017230039s ago: executing program 1 (id=495): socket(0x2, 0x80002, 0x73) r0 = socket(0x2, 0x801, 0x106) ppoll$auto(&(0x7f0000000080)={r0, 0x741a, 0xb9e6}, 0x7, &(0x7f0000000100)={0x925, 0x10}, &(0x7f0000000140)={0x9}, 0x8) getsockopt$auto(r0, 0x11c, 0x3616, 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/zram0/disksize\x00', 0x2202, 0x0) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer\x00', 0x101000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x20000a, 0x4) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x2000, 0x0) mmap$auto(0x800000000001, 0x1, 0x4000000000000003, 0x80000010, 0xfffffffffffffffa, 0x2) r2 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r2, 0x0, 0x1f40) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r3, &(0x7f00000000c0)={0x0, 0xffffffff}, 0x6) io_uring_register$auto_IORING_REGISTER_CLOCK(r1, 0x1d, &(0x7f0000000180)="57ff7e75fe50adeee9f61c7509d20ac15a37c5cdf106c49f5a4aa3e3adbc1f6ed6c06c183f478a6a50578bc8408d4db7c07c10bc82d828235ec2d4a9d8452712ec6799144800c5d7b7e43995784698c45f86b57f723f68ac82c98b41ab65c35fbcddba14b78700ed2ddf1ef7c301c120b6662b98790a74d5d6af094b53f4b967e9f2557ff335176d73c07a456a98e4515fe9d51c668fe6022c35ddb80170de50145efa034951fe510b281f5d720375bef24dcaf9263a12626690c4087e7c8b810a3e4d", 0x3) close_range$auto(0x2, 0x8, 0x0) 1.003898133s ago: executing program 3 (id=496): close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket(0x11, 0x3, 0x9) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/ieee80211/phy1/force_tx_status\x00', 0x81300, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/sequencer\x00', 0x783a06, 0x0) sendmsg$auto_TCP_METRICS_CMD_GET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="9aa2738b", @ANYRES16=0x0, @ANYBLOB="010029bd7000fbdbdf2501000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = socket(0x10, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) sendmsg$auto_MACSEC_CMD_ADD_RXSA(r2, 0x0, 0x4000) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRES8=r0, @ANYRES8=r1], 0x18}, 0x1, 0x0, 0x0, 0x64008084}, 0x2000c082) write$auto(r2, &(0x7f0000000000)='-\x00', 0xfdef) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/virtual/net/rose7/flags\x00', 0x2262, 0x0) write$auto(r3, &(0x7f0000000140)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k\xfc\xb2\x00\x00\x00\x00y\x113!\x05\xa7\xd6M\xce\xd6\'\xdf@\x9f\xf5 \x8b_hw\x8em\xd0\b\xe7~1\xf5\xf8\x93*jH\x85H\x05\xae\xdf\xf0\x15A\xdb$\'\x87', 0x81) write$auto(r3, &(0x7f0000000640)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V98\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\x80\x04z\xd0I>\x8f\x00\xd7\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x97nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb6\x9f4[!\x0f3u\xaf\x97\x97\x9d\x1dp\xf3\xab\xdfE[5\x86\xa2\xb92\xc0\x15L\xda\xe3\x04\\M\x85}\xdfh\xd2\xd93e\xf61^\x04\x0f\x85\xc7_\xd0\x8d9\xbd\xc6\xf3R\xea\x10\xb9\xa2\x94]\xf2\r\t\xff$\xeb\xfd1\x8d\x97\x80\x81\x95]\xb2H\xf4\x1c\x8c\xcf\x8eM\x0eB\xb0\x83\xa3\bF\xc7\xae\x1a\xa7r\x9c\xfe\xa5\xa0~\xe4o+\x9d\xb0\xa6\xe8\a\x9a}\x88\x0eKd\xe07\xf0\x88\xf2\xb7\xe3\xe3\b\xac\x1e\xa2a0\x83\x0f\x06\x9eD\xd0\xc6\xba\xa4\x13(l\xf6\xbc\x982\xa0@\xda\xe0\x96\xdc0X\x9c\n\xb3fs\xe1\xf5f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x3, 0x1ff, 0x1001, 0x5, 0x717e, 0x0, 0x7, 0x200000000000003, 0xd, 0x2, 0x80003, 0x4, 0x1ffffffffffd, 0xb4, 0xfffffffffffffffe, 0x7, 0x10002, 0x7f, 0x2a2, 0x5, 0xa, 0x22000, 0x200, 0x4, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x56, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0xffffffffffffffff, 0x100000000000]}, 0x1fe, 0xd) mmap$auto(0x0, 0x20007, 0x80000000000000df, 0x10004000eb1, 0x8, 0x8000) socket(0xa, 0x2, 0x0) setsockopt$auto(0x400000000000003, 0x29, 0x15, 0x0, 0x56b) r4 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f00000003c0), 0x1541, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r4, 0xfffffffffffffd03, &(0x7f00000001c0)) socket(0x15, 0x5, 0x0) r5 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/maps\x00', 0x40302, 0x0) ioctl$auto_PROCMAP_QUERY(r5, 0xc0686611, &(0x7f0000000080)={0x68, 0x34, 0xb4d, 0x5, 0x80000000009, 0x1, 0x9, 0x5, 0x5, 0x7f93, 0x2, 0x7ffffffd, 0x7ff, 0x7, 0x9}) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/rpc/auth.rpcsec.init/flush\x00', 0xb4300, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@ethernet={0x1, @remote}, 0x8) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/conf/ip6tnl0/bootp_relay\x00', 0x5014c0, 0x0) r6 = openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/trace\x00', 0x82000, 0x0) read$auto_tracing_fops_trace(r6, &(0x7f0000000580)=""/4096, 0x1000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004810}, 0x8800) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x89fc, &(0x7f0000000040)={'veth0_macvtap\x00'}) r7 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/locks\x00', 0x0, 0x0) pread64$auto(r7, 0x0, 0xf42f, 0x7f) fcntl$auto(0x3, 0x400, 0x9ec0000000000000) fcntl$auto(0x3, 0x400, 0x2) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) ioctl$auto_TUNSETNOCSUM(r3, 0x400454c8, &(0x7f0000000080)=0x7) socket$nl_generic(0x10, 0x3, 0x10) 0s ago: executing program 2 (id=498): mmap$auto(0x0, 0x402000a, 0xffffffffffffffff, 0x400eb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = io_uring_setup$auto(0xa, 0x0) r1 = socket(0x2, 0x5, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) move_mount$auto(r0, &(0x7f0000000100)='}[,&*}\x00', r0, &(0x7f0000000180)='}[,&*}\x00', 0xfffffffc) r2 = socket(0x2, 0x2, 0x88) setsockopt$auto(r2, 0x88, 0xa, &(0x7f0000000000)='\xba\xba\xd3\xc8[&P\x9c\xe7AJz\'\x91\xce=B}v+7n\xa2r0\x92\xc3\x0eE\x96\xf63\xec\xe0\xb2\f\xa86v\xeb\xf1\xcb\xd4\xa9\v\xe1\xcc\x18', 0x80000e) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) bpf$auto_BPF_PROG_QUERY(0x10, &(0x7f00000001c0)=@info={r2, 0x4, 0x4}, 0x3) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x8}, 0x3, 0x1000000) r3 = prctl$auto_PR_SET_MM_START_STACK(0x80000000, 0x5, 0x0, 0x2, 0x1) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) socket(0x2, 0x1, 0x84) fsconfig$auto_FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000280)='\xba\xba\xd3\xc8[&P\x9c\xe7AJz\'\x91\xce=B}v+7n\xa2r0\x92\xc3\x0eE\x96\xf63\xec\xe0\xb2\f\xa86v\xeb\xf1\xcb\xd4\xa9\v\xe1\xcc\x18', &(0x7f0000000300), 0x2) setsockopt$auto(0x3, 0x10000000084, 0x81, 0x0, 0x8) setsockopt$auto(0x3, 0x84, 0x17, 0x0, 0x27) setsockopt$auto(0x3, 0x10000000084, 0x18, 0x0, 0x8) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1a000}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) mount$auto(0x0, &(0x7f0000000040)='}[,&*}\x00', &(0x7f0000000080)='a0d\xa3$\x0e@\xdbl\xc0o\x04\xd9\x89\xf1\f?\xd8)Z\x9b\x89\av\x8a\xd4\xb9\xd4\'', 0xfffffffeffffffff, 0x0) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/fail-nth\x00', 0x408000, 0x0) ioctl$auto(r4, 0x1000, 0xffffffffffffffff) kernel console output (not intermixed with test programs): 34] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 102.192475][ T5834] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 102.295996][ T5831] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 102.309021][ T5831] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 102.320476][ T5831] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 102.347065][ T5831] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 102.451873][ T5832] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 102.468691][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.478062][ T5832] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 102.491574][ T5832] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 102.516773][ T5832] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 102.585040][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.630147][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.638104][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.653518][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.676351][ T3446] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.684574][ T3446] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.715254][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.759927][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.778559][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.789493][ T1093] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.797563][ T1093] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.830051][ T1093] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.837923][ T1093] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.851007][ T1093] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.859213][ T1093] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.902478][ T1093] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.910481][ T1093] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.983065][ T5834] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 103.074413][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.090609][ T5831] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 103.167928][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.192439][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.200935][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.240009][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.247948][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.294377][ T5843] Bluetooth: hci0: command tx timeout [ 103.303669][ T5835] Bluetooth: hci1: command tx timeout [ 103.305223][ T5843] Bluetooth: hci3: command tx timeout [ 103.310774][ T5835] Bluetooth: hci2: command tx timeout [ 103.494539][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.569569][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.626850][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.707159][ T5834] veth0_vlan: entered promiscuous mode [ 103.732984][ T5834] veth1_vlan: entered promiscuous mode [ 103.741943][ T5833] veth0_vlan: entered promiscuous mode [ 103.762711][ T5833] veth1_vlan: entered promiscuous mode [ 103.794635][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.824601][ T5831] veth0_vlan: entered promiscuous mode [ 103.860191][ T5831] veth1_vlan: entered promiscuous mode [ 103.872510][ T5834] veth0_macvtap: entered promiscuous mode [ 103.888895][ T5834] veth1_macvtap: entered promiscuous mode [ 103.922260][ T5833] veth0_macvtap: entered promiscuous mode [ 103.944735][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.960632][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.986493][ T5833] veth1_macvtap: entered promiscuous mode [ 104.003611][ T1093] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.038932][ T1093] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.060022][ T5832] veth0_vlan: entered promiscuous mode [ 104.083564][ T5831] veth0_macvtap: entered promiscuous mode [ 104.092379][ T1093] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.102802][ T1093] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.116130][ T5832] veth1_vlan: entered promiscuous mode [ 104.133587][ T5831] veth1_macvtap: entered promiscuous mode [ 104.174894][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.190556][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.217267][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.256666][ T1093] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.268005][ T1093] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.280227][ T1093] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.294658][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.315272][ T3446] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.337450][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.348891][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.364420][ T50] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.381120][ T5832] veth0_macvtap: entered promiscuous mode [ 104.400017][ T50] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.411229][ T50] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.431997][ T5832] veth1_macvtap: entered promiscuous mode [ 104.440708][ T50] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.480805][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.494950][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.522321][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.548964][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.600396][ T5834] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 104.612015][ T3498] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.626361][ T3498] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.646706][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.657359][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.692294][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.713930][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.772318][ T3446] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.784385][ T3446] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.889839][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.905828][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.942198][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.953210][ T5918] Zero length message leads to an empty skb [ 104.964226][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.983104][ T3446] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.012888][ T3446] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.088791][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.138432][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.370614][ T5835] Bluetooth: hci2: command tx timeout [ 105.378729][ T5835] Bluetooth: hci3: command tx timeout [ 105.384853][ T52] Bluetooth: hci1: command tx timeout [ 105.384923][ T5843] Bluetooth: hci0: command tx timeout [ 105.396725][ T5925] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3'. [ 105.800771][ T5929] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(1937339183.1986356271.1936024425), cmd(4) [ 106.126032][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 106.166737][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 106.331302][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 106.438101][ T5843] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 107.176076][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 107.188624][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 107.449116][ T52] Bluetooth: hci1: command tx timeout [ 107.449123][ T5835] Bluetooth: hci3: command tx timeout [ 107.449225][ T5835] Bluetooth: hci2: command tx timeout [ 107.456795][ T5843] Bluetooth: hci0: command tx timeout [ 107.696820][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 107.725190][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 107.753781][ T5972] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9'. [ 107.786062][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 107.797189][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 107.809573][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 107.921558][ T5972] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.973243][ T5972] bridge_slave_1 (unregistering): left allmulticast mode [ 107.982703][ T5972] bridge_slave_1 (unregistering): left promiscuous mode [ 107.997465][ T5972] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.321219][ T5976] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 108.408081][ T5976] process 'syz.2.10' launched '/dev/fd/10' with NULL argv: empty string added [ 109.041187][ T5994] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12'. [ 109.536230][ T5843] Bluetooth: hci2: command tx timeout [ 109.584142][ T6001] netlink: 28 bytes leftover after parsing attributes in process `syz.3.13'. [ 109.695235][ T6001] ipvlan0: entered promiscuous mode [ 112.238962][ T6053] Invalid ELF header magic: != ELF [ 112.776414][ T6065] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 114.621499][ T6088] mmap: syz.2.23 (6088) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 116.725186][ T5843] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 116.767563][ T6130] syz.0.26 uses obsolete (PF_INET,SOCK_PACKET) [ 117.082346][ T6134] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input6 [ 118.460977][ T6135] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input7 [ 118.757579][ T52] Bluetooth: hci1: command tx timeout [ 119.264675][ T6156] openvswitch: netlink: Key type 261 is out of range max 32 [ 120.688252][ T6167] netlink: 976 bytes leftover after parsing attributes in process `syz.0.33'. [ 122.133114][ T6176] input: f¬ as /devices/virtual/input/input9 [ 122.210926][ T6174] FAULT_INJECTION: forcing a failure. [ 122.210926][ T6174] name failslab, interval 1, probability 0, space 0, times 1 [ 122.326422][ T6174] CPU: 0 UID: 0 PID: 6174 Comm: syz.3.36 Not tainted syzkaller #0 PREEMPT(full) [ 122.326458][ T6174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 122.326481][ T6174] Call Trace: [ 122.326490][ T6174] [ 122.326500][ T6174] dump_stack_lvl+0x16c/0x1f0 [ 122.326549][ T6174] should_fail_ex+0x512/0x640 [ 122.326587][ T6174] ? __kmalloc_cache_noprof+0x5f/0x780 [ 122.326624][ T6174] should_failslab+0xc2/0x120 [ 122.326660][ T6174] __kmalloc_cache_noprof+0x72/0x780 [ 122.326684][ T6174] ? snd_seq_timer_new+0x44/0x1b0 [ 122.326715][ T6174] ? snd_seq_timer_new+0x44/0x1b0 [ 122.326740][ T6174] snd_seq_timer_new+0x44/0x1b0 [ 122.326770][ T6174] snd_seq_queue_alloc+0x177/0x5a0 [ 122.326815][ T6174] snd_seq_ioctl_create_queue+0xa9/0x390 [ 122.326852][ T6174] call_seq_client_ctl+0x9f/0x110 [ 122.326884][ T6174] snd_seq_kernel_client_ctl+0x77/0xd0 [ 122.326915][ T6174] alloc_seq_queue+0xda/0x180 [ 122.326946][ T6174] ? __pfx_alloc_seq_queue+0x10/0x10 [ 122.326996][ T6174] ? mark_held_locks+0x49/0x80 [ 122.327029][ T6174] ? _raw_spin_unlock_irq+0x23/0x50 [ 122.327057][ T6174] ? lockdep_hardirqs_on+0x7c/0x110 [ 122.327092][ T6174] snd_seq_oss_open+0x38c/0xa20 [ 122.327130][ T6174] odev_open+0x79/0xc0 [ 122.327157][ T6174] ? __pfx_odev_open+0x10/0x10 [ 122.327186][ T6174] soundcore_open+0x40c/0x580 [ 122.327220][ T6174] ? __pfx_soundcore_open+0x10/0x10 [ 122.327250][ T6174] chrdev_open+0x234/0x6a0 [ 122.327280][ T6174] ? __pfx_apparmor_file_open+0x10/0x10 [ 122.327317][ T6174] ? __pfx_chrdev_open+0x10/0x10 [ 122.327349][ T6174] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 122.327384][ T6174] do_dentry_open+0x982/0x1530 [ 122.327415][ T6174] ? __pfx_chrdev_open+0x10/0x10 [ 122.327453][ T6174] vfs_open+0x82/0x3f0 [ 122.327494][ T6174] path_openat+0x1de4/0x2cb0 [ 122.327535][ T6174] ? __pfx_path_openat+0x10/0x10 [ 122.327565][ T6174] ? __lock_acquire+0xb8a/0x1c90 [ 122.327655][ T6174] do_filp_open+0x20b/0x470 [ 122.327686][ T6174] ? __pfx_do_filp_open+0x10/0x10 [ 122.327741][ T6174] ? alloc_fd+0x471/0x7d0 [ 122.327778][ T6174] do_sys_openat2+0x11b/0x1d0 [ 122.327813][ T6174] ? __pfx_do_sys_openat2+0x10/0x10 [ 122.327864][ T6174] __x64_sys_openat+0x174/0x210 [ 122.327900][ T6174] ? __pfx___x64_sys_openat+0x10/0x10 [ 122.327952][ T6174] do_syscall_64+0xcd/0xfa0 [ 122.327986][ T6174] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.328011][ T6174] RIP: 0033:0x7fd651b8f749 [ 122.328048][ T6174] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 122.328071][ T6174] RSP: 002b:00007fd652972038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 122.328096][ T6174] RAX: ffffffffffffffda RBX: 00007fd651de5fa0 RCX: 00007fd651b8f749 [ 122.328114][ T6174] RDX: 00000000001c8740 RSI: 0000200000000540 RDI: ffffffffffffff9c [ 122.328135][ T6174] RBP: 00007fd651c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 122.328151][ T6174] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 122.328166][ T6174] R13: 00007fd651de6038 R14: 00007fd651de5fa0 R15: 00007ffde7990d68 [ 122.328205][ T6174] [ 122.681884][ C0] vkms_vblank_simulate: vblank timer overrun [ 123.069351][ T6182] netlink: 28 bytes leftover after parsing attributes in process `syz.0.38'. [ 123.080155][ T6182] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 123.088416][ T6182] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 123.137031][ T6182] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 123.199517][ T6182] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 123.742835][ T6191] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 123.980260][ T6194] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 124.083152][ T6198] device-mapper: ioctl: Unable to rename non-existent device, to uuid „ [ 125.475261][ T6212] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 125.482194][ T6212] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 125.519983][ T6212] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 125.547217][ T6212] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 125.582499][ T6212] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 125.615052][ T6212] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 125.803694][ T6212] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 125.947400][ T6212] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 125.960334][ T6212] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 126.006318][ T6212] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 126.044839][ T6212] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 126.100144][ T6212] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 126.129299][ T6212] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 126.287695][ T6212] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 127.512073][ T52] Bluetooth: hci0: command 0x0c1a tx timeout [ 127.592060][ T52] Bluetooth: hci2: command 0x0c1a tx timeout [ 127.990427][ T52] Bluetooth: hci1: command 0x0c1a tx timeout [ 128.149311][ T52] Bluetooth: hci3: command 0x0c1a tx timeout [ 128.474061][ T6246] hub 1-0:1.0: USB hub found [ 128.481687][ T6246] hub 1-0:1.0: 1 port detected [ 129.456645][ T6256] netlink: 8 bytes leftover after parsing attributes in process `syz.1.58'. [ 129.517860][ T52] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 129.583138][ T5843] Bluetooth: hci0: command 0x0c1a tx timeout [ 129.660832][ T5843] Bluetooth: hci2: command 0x0c1a tx timeout [ 130.058729][ T5843] Bluetooth: hci1: command 0x0c1a tx timeout [ 130.218905][ T5843] Bluetooth: hci3: command 0x0c1a tx timeout [ 130.979473][ T5843] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 131.650445][ T5843] Bluetooth: hci0: command 0x0c1a tx timeout [ 131.661998][ T6279] FAULT_INJECTION: forcing a failure. [ 131.661998][ T6279] name fail_futex, interval 1, probability 0, space 0, times 1 [ 131.688701][ T6279] CPU: 0 UID: 0 PID: 6279 Comm: syz.1.63 Not tainted syzkaller #0 PREEMPT(full) [ 131.688729][ T6279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 131.688741][ T6279] Call Trace: [ 131.688748][ T6279] [ 131.688757][ T6279] dump_stack_lvl+0x16c/0x1f0 [ 131.688787][ T6279] should_fail_ex+0x512/0x640 [ 131.688825][ T6279] get_futex_key+0x1d0/0x1560 [ 131.688861][ T6279] ? __pfx_get_futex_key+0x10/0x10 [ 131.688889][ T6279] ? __mutex_trylock_common+0xe9/0x250 [ 131.688927][ T6279] futex_wake+0xea/0x530 [ 131.688962][ T6279] ? __pfx_futex_wake+0x10/0x10 [ 131.688989][ T6279] ? __lock_acquire+0xb8a/0x1c90 [ 131.689017][ T6279] do_futex+0x1e3/0x350 [ 131.689036][ T6279] ? __pfx_do_futex+0x10/0x10 [ 131.689053][ T6279] ? __might_fault+0xe3/0x190 [ 131.689073][ T6279] mm_release+0x24e/0x300 [ 131.689089][ T6279] do_exit+0x68e/0x2bf0 [ 131.689113][ T6279] ? __pfx_do_exit+0x10/0x10 [ 131.689131][ T6279] ? do_raw_spin_lock+0x12c/0x2b0 [ 131.689152][ T6279] ? find_held_lock+0x2b/0x80 [ 131.689169][ T6279] do_group_exit+0xd3/0x2a0 [ 131.689189][ T6279] get_signal+0x2671/0x26d0 [ 131.689210][ T6279] ? do_vfs_ioctl+0x128/0x14f0 [ 131.689232][ T6279] ? __pfx_get_signal+0x10/0x10 [ 131.689248][ T6279] ? do_futex+0x122/0x350 [ 131.689266][ T6279] ? __pfx_do_futex+0x10/0x10 [ 131.689286][ T6279] arch_do_signal_or_restart+0x8f/0x790 [ 131.689306][ T6279] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 131.689334][ T6279] exit_to_user_mode_loop+0x85/0x130 [ 131.689357][ T6279] do_syscall_64+0x426/0xfa0 [ 131.689376][ T6279] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.689390][ T6279] RIP: 0033:0x7efdc1b8f749 [ 131.689402][ T6279] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 131.689415][ T6279] RSP: 002b:00007efdc2a690e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 131.689436][ T6279] RAX: fffffffffffffe00 RBX: 00007efdc1de5fa8 RCX: 00007efdc1b8f749 [ 131.689445][ T6279] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007efdc1de5fa8 [ 131.689453][ T6279] RBP: 00007efdc1de5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 131.689461][ T6279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 131.689469][ T6279] R13: 00007efdc1de6038 R14: 00007ffd1d5f3470 R15: 00007ffd1d5f3558 [ 131.689489][ T6279] [ 131.980102][ T5843] Bluetooth: hci2: command 0x0c1a tx timeout [ 132.035424][ T6297] zswap: compressor not available [ 132.138201][ T5843] Bluetooth: hci1: command 0x0c1a tx timeout [ 132.289626][ T5843] Bluetooth: hci3: command 0x0c1a tx timeout [ 132.535378][ T6299] zswap: compressor not available [ 134.038313][ T5843] Bluetooth: hci2: command 0x0c1a tx timeout [ 134.207091][ T5843] Bluetooth: hci1: command 0x0c1a tx timeout [ 134.356709][ T5843] Bluetooth: hci3: command 0x0c1a tx timeout [ 135.355078][ T6341] FAULT_INJECTION: forcing a failure. [ 135.355078][ T6341] name failslab, interval 1, probability 0, space 0, times 0 [ 135.407444][ T6341] CPU: 0 UID: 0 PID: 6341 Comm: syz.3.74 Not tainted syzkaller #0 PREEMPT(full) [ 135.407480][ T6341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 135.407496][ T6341] Call Trace: [ 135.407505][ T6341] [ 135.407516][ T6341] dump_stack_lvl+0x16c/0x1f0 [ 135.407552][ T6341] should_fail_ex+0x512/0x640 [ 135.407588][ T6341] ? __kmalloc_cache_noprof+0x5f/0x780 [ 135.407618][ T6341] should_failslab+0xc2/0x120 [ 135.407652][ T6341] __kmalloc_cache_noprof+0x72/0x780 [ 135.407679][ T6341] ? drm_atomic_helper_connector_duplicate_state+0x70/0xd0 [ 135.407728][ T6341] ? drm_atomic_helper_connector_duplicate_state+0x70/0xd0 [ 135.407768][ T6341] drm_atomic_helper_connector_duplicate_state+0x70/0xd0 [ 135.407809][ T6341] drm_atomic_get_connector_state+0x396/0x750 [ 135.407854][ T6341] drm_atomic_add_affected_connectors+0x2e0/0x3f0 [ 135.407895][ T6341] ? __pfx_drm_atomic_add_affected_connectors+0x10/0x10 [ 135.407930][ T6341] ? ww_mutex_lock+0x37/0x160 [ 135.407963][ T6341] ? modeset_lock+0x114/0x6e0 [ 135.408000][ T6341] __drm_atomic_helper_set_config+0x5ef/0xea0 [ 135.408043][ T6341] ? __pfx___drm_atomic_helper_set_config+0x10/0x10 [ 135.408098][ T6341] ? drm_client_rotation+0x4da/0x6a0 [ 135.408143][ T6341] drm_client_modeset_commit_atomic+0x53d/0x7e0 [ 135.408195][ T6341] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 135.408235][ T6341] ? rcu_is_watching+0x12/0xc0 [ 135.408300][ T6341] drm_client_modeset_commit_locked+0x14d/0x580 [ 135.408343][ T6341] drm_client_modeset_commit+0x4f/0x80 [ 135.408380][ T6341] __drm_fb_helper_restore_fbdev_mode_unlocked+0x19f/0x200 [ 135.408415][ T6341] ? __pfx_drm_fbdev_client_restore+0x10/0x10 [ 135.408444][ T6341] drm_fbdev_client_restore+0x2c/0x40 [ 135.408474][ T6341] drm_client_dev_restore+0x1f6/0x2a0 [ 135.408517][ T6341] drm_release+0x2c4/0x360 [ 135.408555][ T6341] ? __pfx_drm_release+0x10/0x10 [ 135.408586][ T6341] __fput+0x402/0xb70 [ 135.408629][ T6341] task_work_run+0x150/0x240 [ 135.408668][ T6341] ? __pfx_task_work_run+0x10/0x10 [ 135.408706][ T6341] ? __pfx___do_sys_close_range+0x10/0x10 [ 135.408744][ T6341] exit_to_user_mode_loop+0xec/0x130 [ 135.408783][ T6341] do_syscall_64+0x426/0xfa0 [ 135.408816][ T6341] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.408842][ T6341] RIP: 0033:0x7fd651b8f749 [ 135.408863][ T6341] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 135.408886][ T6341] RSP: 002b:00007fd652972038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 135.408910][ T6341] RAX: 0000000000000000 RBX: 00007fd651de5fa0 RCX: 00007fd651b8f749 [ 135.408926][ T6341] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 135.408941][ T6341] RBP: 00007fd651c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 135.408956][ T6341] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 135.408972][ T6341] R13: 00007fd651de6038 R14: 00007fd651de5fa0 R15: 00007ffde7990d68 [ 135.409011][ T6341] [ 136.270273][ T5843] Bluetooth: hci1: command 0x0c1a tx timeout [ 136.498000][ T6350] Console: switching to colour VGA+ 80x25 [ 136.925600][ T6347] netlink: 206 bytes leftover after parsing attributes in process `syz.0.76'. [ 137.127023][ T6356] netlink: 'syz.1.77': attribute type 1 has an invalid length. [ 137.258870][ T6359] input: jJǸ-¶š9ã%vø“û¨lÐQ  J86Ö‘ as /devices/virtual/input/input10 [ 137.508286][ T6363] binder: 6362:6363 ioctl c0306201 0 returned -14 [ 138.173077][ T6373] binder: 6362:6373 ioctl c018620c 0 returned -22 [ 138.420234][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.427658][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 139.431025][ T6390] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 140.146518][ T6383] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 140.455252][ T6404] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 141.410102][ T6420] nfs4: Unknown parameter 'EÂgCúç#IÂ͆KñL(`o°ÀØcþ2e ' [ 142.156000][ T6397] Bluetooth: hci0: command 0x0c1a tx timeout [ 142.532632][ T6397] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 143.478918][ T30] audit: type=1800 audit(1763697943.628:2): pid=6439 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.95" name="features" dev="configfs" ino=10389 res=0 errno=0 [ 144.533021][ T6454] usb usb36: usbfs: process 6454 (syz.0.98) did not claim interface 0 before use [ 144.547139][ T6378] Bluetooth: hci2: command 0x0c1a tx timeout [ 145.512907][ T6478] FAULT_INJECTION: forcing a failure. [ 145.512907][ T6478] name failslab, interval 1, probability 0, space 0, times 0 [ 145.529967][ T6478] CPU: 1 UID: 0 PID: 6478 Comm: syz.3.104 Not tainted syzkaller #0 PREEMPT(full) [ 145.529989][ T6478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 145.529998][ T6478] Call Trace: [ 145.530003][ T6478] [ 145.530009][ T6478] dump_stack_lvl+0x16c/0x1f0 [ 145.530032][ T6478] should_fail_ex+0x512/0x640 [ 145.530053][ T6478] ? __kmalloc_noprof+0xca/0x880 [ 145.530077][ T6478] should_failslab+0xc2/0x120 [ 145.530096][ T6478] __kmalloc_noprof+0xdd/0x880 [ 145.530119][ T6478] ? trace_parser_get_init+0x30/0xc0 [ 145.530138][ T6478] ? trace_parser_get_init+0x30/0xc0 [ 145.530152][ T6478] trace_parser_get_init+0x30/0xc0 [ 145.530166][ T6478] ftrace_event_write+0x177/0x2c0 [ 145.530183][ T6478] ? __pfx_ftrace_event_write+0x10/0x10 [ 145.530207][ T6478] ? __pfx_ftrace_event_write+0x10/0x10 [ 145.530222][ T6478] vfs_writev+0x5df/0xde0 [ 145.530242][ T6478] ? __pfx_vfs_writev+0x10/0x10 [ 145.530255][ T6478] ? __mutex_lock+0x1c5/0x1060 [ 145.530278][ T6478] ? __pfx___mutex_lock+0x10/0x10 [ 145.530303][ T6478] ? __fget_files+0x20e/0x3c0 [ 145.530332][ T6478] ? do_writev+0x132/0x340 [ 145.530345][ T6478] do_writev+0x132/0x340 [ 145.530360][ T6478] ? __pfx_do_writev+0x10/0x10 [ 145.530380][ T6478] do_syscall_64+0xcd/0xfa0 [ 145.530400][ T6478] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.530415][ T6478] RIP: 0033:0x7fd651b8f749 [ 145.530427][ T6478] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 145.530441][ T6478] RSP: 002b:00007fd652972038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 145.530455][ T6478] RAX: ffffffffffffffda RBX: 00007fd651de5fa0 RCX: 00007fd651b8f749 [ 145.530464][ T6478] RDX: 0000000000000008 RSI: 0000200000000100 RDI: 0000000000000003 [ 145.530472][ T6478] RBP: 00007fd651c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 145.530479][ T6478] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 145.530487][ T6478] R13: 00007fd651de6038 R14: 00007fd651de5fa0 R15: 00007ffde7990d68 [ 145.530507][ T6478] [ 145.764250][ C1] vkms_vblank_simulate: vblank timer overrun [ 146.591639][ T6486] zswap: compressor not available [ 146.954056][ T6496] random: crng reseeded on system resumption [ 147.416435][ T6506] hub 1-0:1.0: USB hub found [ 147.443354][ T6506] hub 1-0:1.0: 1 port detected [ 147.479737][ T6506] FAULT_INJECTION: forcing a failure. [ 147.479737][ T6506] name failslab, interval 1, probability 0, space 0, times 0 [ 147.565656][ T6506] CPU: 0 UID: 0 PID: 6506 Comm: syz.2.111 Not tainted syzkaller #0 PREEMPT(full) [ 147.565688][ T6506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 147.565702][ T6506] Call Trace: [ 147.565709][ T6506] [ 147.565719][ T6506] dump_stack_lvl+0x16c/0x1f0 [ 147.565752][ T6506] should_fail_ex+0x512/0x640 [ 147.565787][ T6506] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 147.565810][ T6506] should_failslab+0xc2/0x120 [ 147.565839][ T6506] kmem_cache_alloc_noprof+0x75/0x6e0 [ 147.565862][ T6506] ? __kernfs_new_node+0xd2/0x8e0 [ 147.565899][ T6506] ? __kernfs_new_node+0xd2/0x8e0 [ 147.565923][ T6506] __kernfs_new_node+0xd2/0x8e0 [ 147.565956][ T6506] ? __pfx___kernfs_new_node+0x10/0x10 [ 147.565996][ T6506] ? find_held_lock+0x2b/0x80 [ 147.566022][ T6506] ? kernfs_root+0xee/0x2a0 [ 147.566059][ T6506] kernfs_new_node+0x13c/0x1e0 [ 147.566099][ T6506] __kernfs_create_file+0x53/0x350 [ 147.566140][ T6506] sysfs_add_file_mode_ns+0x207/0x3c0 [ 147.566176][ T6506] sysfs_merge_group+0x1aa/0x340 [ 147.566207][ T6506] ? __pfx_sysfs_merge_group+0x10/0x10 [ 147.566243][ T6506] ? __pfx_dev_add_physical_location+0x10/0x10 [ 147.566279][ T6506] ? bus_to_subsys+0x131/0x160 [ 147.566308][ T6506] dpm_sysfs_add+0x237/0x280 [ 147.566345][ T6506] device_add+0x9a6/0x1aa0 [ 147.566369][ T6506] ? __pfx_device_add+0x10/0x10 [ 147.566390][ T6506] ? lockdep_init_map_type+0x5c/0x280 [ 147.566423][ T6506] ? __init_waitqueue_head+0xca/0x150 [ 147.566457][ T6506] usb_hub_create_port_device+0x3a1/0xde0 [ 147.566492][ T6506] hub_probe+0x203b/0x3480 [ 147.566528][ T6506] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 147.566564][ T6506] ? __pfx_hub_probe+0x10/0x10 [ 147.566584][ T6506] ? mark_held_locks+0x49/0x80 [ 147.566614][ T6506] ? __smp_text_poke_batch_add+0x610/0x7a0 [ 147.566646][ T6506] ? mark_held_locks+0x49/0x80 [ 147.566680][ T6506] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 147.566712][ T6506] usb_probe_interface+0x303/0xa40 [ 147.566744][ T6506] ? __pfx_usb_probe_interface+0x10/0x10 [ 147.566774][ T6506] really_probe+0x241/0xa90 [ 147.566811][ T6506] __driver_probe_device+0x1de/0x440 [ 147.566847][ T6506] driver_probe_device+0x4c/0x1b0 [ 147.566880][ T6506] __device_attach_driver+0x1df/0x310 [ 147.566914][ T6506] ? __pfx___device_attach_driver+0x10/0x10 [ 147.566945][ T6506] bus_for_each_drv+0x159/0x1e0 [ 147.566974][ T6506] ? __pfx_bus_for_each_drv+0x10/0x10 [ 147.567000][ T6506] ? lockdep_hardirqs_on+0x7c/0x110 [ 147.567028][ T6506] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 147.567059][ T6506] __device_attach+0x1e4/0x4b0 [ 147.567091][ T6506] ? __pfx___device_attach+0x10/0x10 [ 147.567136][ T6506] ? do_raw_spin_unlock+0x172/0x230 [ 147.567166][ T6506] bus_probe_device+0x17f/0x1c0 [ 147.567198][ T6506] device_add+0x1148/0x1aa0 [ 147.567226][ T6506] ? __pfx_device_add+0x10/0x10 [ 147.567248][ T6506] ? mark_held_locks+0x49/0x80 [ 147.567290][ T6506] usb_set_configuration+0x1187/0x1e20 [ 147.567340][ T6506] bConfigurationValue_store+0x100/0x180 [ 147.567367][ T6506] ? __pfx_bConfigurationValue_store+0x10/0x10 [ 147.567394][ T6506] ? find_held_lock+0x2b/0x80 [ 147.567420][ T6506] ? sysfs_file_kobj+0xe4/0x290 [ 147.567449][ T6506] ? __pfx_bConfigurationValue_store+0x10/0x10 [ 147.567472][ T6506] dev_attr_store+0x58/0x80 [ 147.567504][ T6506] ? __pfx_dev_attr_store+0x10/0x10 [ 147.567532][ T6506] sysfs_kf_write+0xf2/0x150 [ 147.567558][ T6506] kernfs_fop_write_iter+0x3af/0x570 [ 147.567578][ T6506] ? __pfx_sysfs_kf_write+0x10/0x10 [ 147.567607][ T6506] iter_file_splice_write+0xa24/0x12e0 [ 147.567655][ T6506] ? __pfx_iter_file_splice_write+0x10/0x10 [ 147.567692][ T6506] ? __pfx_copy_splice_read+0x10/0x10 [ 147.567730][ T6506] ? __pfx_iter_file_splice_write+0x10/0x10 [ 147.567759][ T6506] direct_splice_actor+0x192/0x6c0 [ 147.567788][ T6506] splice_direct_to_actor+0x345/0xa30 [ 147.567814][ T6506] ? __pfx_direct_splice_actor+0x10/0x10 [ 147.567847][ T6506] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 147.568023][ T6506] do_splice_direct+0x174/0x240 [ 147.568058][ T6506] ? __pfx_do_splice_direct+0x10/0x10 [ 147.568083][ T6506] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 147.568163][ T6506] ? rw_verify_area+0xcf/0x6c0 [ 147.568237][ T6506] do_sendfile+0xb06/0xe50 [ 147.568276][ T6506] ? __pfx_do_sendfile+0x10/0x10 [ 147.568307][ T6506] ? __x64_sys_futex+0x1e0/0x4c0 [ 147.568340][ T6506] ? __x64_sys_futex+0x1e9/0x4c0 [ 147.568375][ T6506] __x64_sys_sendfile64+0x1d8/0x220 [ 147.568405][ T6506] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 147.568448][ T6506] do_syscall_64+0xcd/0xfa0 [ 147.568479][ T6506] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.568503][ T6506] RIP: 0033:0x7f478bd8f749 [ 147.568522][ T6506] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 147.568544][ T6506] RSP: 002b:00007f478cc5e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 147.568566][ T6506] RAX: ffffffffffffffda RBX: 00007f478bfe6090 RCX: 00007f478bd8f749 [ 147.568579][ T6506] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000007 [ 147.568590][ T6506] RBP: 00007f478be13f91 R08: 0000000000000000 R09: 0000000000000000 [ 147.568602][ T6506] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 147.568615][ T6506] R13: 00007f478bfe6128 R14: 00007f478bfe6090 R15: 00007fff79290b68 [ 147.568652][ T6506] [ 148.169609][ T6506] hub 1-0:1.0: couldn't create port1 device. [ 148.180817][ T6506] hub 1-0:1.0: config failed, out of memory (err -12) [ 149.650842][ T6516] netlink: 28 bytes leftover after parsing attributes in process `syz.1.114'. [ 149.660542][ T6516] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 149.830393][ T6516] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 150.862847][ T6539] zswap: compressor not available [ 151.140370][ T6552] ima: policy update failed [ 151.195836][ T30] audit: type=1802 audit(1763698491.337:3): pid=6552 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.122" res=0 errno=0 [ 151.647758][ T6564] usb usb2: usbfs: process 6564 (syz.1.125) did not claim interface 4 before use [ 151.720746][ T6566] netlink: 8 bytes leftover after parsing attributes in process `syz.2.127'. [ 151.756546][ T6569] cougar: G6 mapped to space [ 151.799841][ T6572] ubi0: attaching mtd0 [ 151.810471][ T6572] ubi0: scanning is finished [ 151.825165][ T6572] ubi0: empty MTD device detected [ 152.023596][ T6572] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 152.067548][ T6572] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 152.111843][ T6572] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 152.133839][ T6572] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 152.156477][ T6572] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 152.174408][ T6572] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 152.197086][ T6572] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3069089669 [ 152.221868][ T6572] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 152.253270][ T6587] ubi0: background thread "ubi_bgt0d" started, PID 6587 [ 152.799304][ T6594] netlink: 330 bytes leftover after parsing attributes in process `syz.2.132'. [ 153.528877][ T6597] zswap: compressor not available [ 153.550684][ T6603] FAULT_INJECTION: forcing a failure. [ 153.550684][ T6603] name failslab, interval 1, probability 0, space 0, times 0 [ 153.616360][ T6603] CPU: 0 UID: 0 PID: 6603 Comm: syz.2.133 Not tainted syzkaller #0 PREEMPT(full) [ 153.616394][ T6603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 153.616407][ T6603] Call Trace: [ 153.616415][ T6603] [ 153.616425][ T6603] dump_stack_lvl+0x16c/0x1f0 [ 153.616459][ T6603] should_fail_ex+0x512/0x640 [ 153.616482][ T6603] ? __kmalloc_cache_noprof+0x5f/0x780 [ 153.616500][ T6603] should_failslab+0xc2/0x120 [ 153.616523][ T6603] __kmalloc_cache_noprof+0x72/0x780 [ 153.616537][ T6603] ? drm_atomic_helper_connector_duplicate_state+0x70/0xd0 [ 153.616565][ T6603] ? drm_atomic_helper_connector_duplicate_state+0x70/0xd0 [ 153.616588][ T6603] drm_atomic_helper_connector_duplicate_state+0x70/0xd0 [ 153.616612][ T6603] drm_atomic_get_connector_state+0x396/0x750 [ 153.616636][ T6603] drm_atomic_add_affected_connectors+0x2e0/0x3f0 [ 153.616659][ T6603] ? __pfx_drm_atomic_add_affected_connectors+0x10/0x10 [ 153.616679][ T6603] ? ww_mutex_lock+0x37/0x160 [ 153.616697][ T6603] ? modeset_lock+0x114/0x6e0 [ 153.616718][ T6603] __drm_atomic_helper_set_config+0x5ef/0xea0 [ 153.616741][ T6603] ? __pfx___drm_atomic_helper_set_config+0x10/0x10 [ 153.616765][ T6603] ? drm_client_rotation+0x4da/0x6a0 [ 153.616788][ T6603] drm_client_modeset_commit_atomic+0x53d/0x7e0 [ 153.616816][ T6603] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 153.616837][ T6603] ? rcu_is_watching+0x12/0xc0 [ 153.616872][ T6603] drm_client_modeset_commit_locked+0x14d/0x580 [ 153.616897][ T6603] drm_client_modeset_commit+0x4f/0x80 [ 153.616918][ T6603] __drm_fb_helper_restore_fbdev_mode_unlocked+0x19f/0x200 [ 153.616939][ T6603] ? __pfx_drm_fbdev_client_restore+0x10/0x10 [ 153.616957][ T6603] drm_fbdev_client_restore+0x2c/0x40 [ 153.616973][ T6603] drm_client_dev_restore+0x1f6/0x2a0 [ 153.616998][ T6603] drm_release+0x2c4/0x360 [ 153.617019][ T6603] ? __pfx_drm_release+0x10/0x10 [ 153.617036][ T6603] __fput+0x402/0xb70 [ 153.617060][ T6603] task_work_run+0x150/0x240 [ 153.617083][ T6603] ? __pfx_task_work_run+0x10/0x10 [ 153.617104][ T6603] ? __pfx___do_sys_close_range+0x10/0x10 [ 153.617125][ T6603] exit_to_user_mode_loop+0xec/0x130 [ 153.617146][ T6603] do_syscall_64+0x426/0xfa0 [ 153.617165][ T6603] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.617180][ T6603] RIP: 0033:0x7f478bd8f749 [ 153.617193][ T6603] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 153.617206][ T6603] RSP: 002b:00007f478cc7f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 153.617220][ T6603] RAX: 0000000000000000 RBX: 00007f478bfe5fa0 RCX: 00007f478bd8f749 [ 153.617229][ T6603] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 153.617237][ T6603] RBP: 00007f478be13f91 R08: 0000000000000000 R09: 0000000000000000 [ 153.617245][ T6603] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 153.617265][ T6603] R13: 00007f478bfe6038 R14: 00007f478bfe5fa0 R15: 00007fff79290b68 [ 153.617286][ T6603] [ 153.959531][ C0] vkms_vblank_simulate: vblank timer overrun [ 155.578131][ T6630] GUP no longer grows the stack in syz.2.140 (6630): 14000-18000 (4000) [ 155.589457][ T6630] CPU: 0 UID: 0 PID: 6630 Comm: syz.2.140 Not tainted syzkaller #0 PREEMPT(full) [ 155.589492][ T6630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 155.589507][ T6630] Call Trace: [ 155.589516][ T6630] [ 155.589527][ T6630] dump_stack_lvl+0x16c/0x1f0 [ 155.589563][ T6630] gup_vma_lookup+0x1d2/0x220 [ 155.589599][ T6630] __get_user_pages+0x241/0x3530 [ 155.589645][ T6630] ? find_held_lock+0x2b/0x80 [ 155.589674][ T6630] ? __pfx___get_user_pages+0x10/0x10 [ 155.589724][ T6630] get_user_pages_remote+0x243/0xab0 [ 155.589766][ T6630] ? __pfx_get_user_pages_remote+0x10/0x10 [ 155.589803][ T6630] ? __pfx___might_resched+0x10/0x10 [ 155.589831][ T6630] ? noop_dirty_folio+0x5e/0xb0 [ 155.589867][ T6630] __access_remote_vm+0x250/0xaa0 [ 155.589909][ T6630] ? __pfx___access_remote_vm+0x10/0x10 [ 155.589951][ T6630] mem_rw+0x20e/0x640 [ 155.589979][ T6630] ? __pfx_mem_write+0x10/0x10 [ 155.590000][ T6630] vfs_write+0x2a0/0x11d0 [ 155.590033][ T6630] ? __pfx___mutex_lock+0x10/0x10 [ 155.590064][ T6630] ? __pfx_vfs_write+0x10/0x10 [ 155.590114][ T6630] ? __fget_files+0x20e/0x3c0 [ 155.590154][ T6630] ksys_write+0x12a/0x250 [ 155.590185][ T6630] ? __pfx_ksys_write+0x10/0x10 [ 155.590228][ T6630] do_syscall_64+0xcd/0xfa0 [ 155.590264][ T6630] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.590289][ T6630] RIP: 0033:0x7f478bd8f749 [ 155.590310][ T6630] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 155.590332][ T6630] RSP: 002b:00007f478cc7f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 155.590355][ T6630] RAX: ffffffffffffffda RBX: 00007f478bfe5fa0 RCX: 00007f478bd8f749 [ 155.590377][ T6630] RDX: 000000000000ffd8 RSI: 0000000000000000 RDI: 0000000000000003 [ 155.590391][ T6630] RBP: 00007f478be13f91 R08: 0000000000000000 R09: 0000000000000000 [ 155.590406][ T6630] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 155.590420][ T6630] R13: 00007f478bfe6038 R14: 00007f478bfe5fa0 R15: 00007fff79290b68 [ 155.590456][ T6630] [ 155.830756][ C0] vkms_vblank_simulate: vblank timer overrun [ 156.356788][ T6648] zswap: compressor not available [ 157.280286][ T6655] FAULT_INJECTION: forcing a failure. [ 157.280286][ T6655] name failslab, interval 1, probability 0, space 0, times 0 [ 157.415772][ T6655] CPU: 0 UID: 0 PID: 6655 Comm: syz.1.146 Not tainted syzkaller #0 PREEMPT(full) [ 157.415808][ T6655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 157.415820][ T6655] Call Trace: [ 157.415826][ T6655] [ 157.415834][ T6655] dump_stack_lvl+0x16c/0x1f0 [ 157.415858][ T6655] should_fail_ex+0x512/0x640 [ 157.415880][ T6655] ? __kmalloc_cache_noprof+0x5f/0x780 [ 157.415906][ T6655] should_failslab+0xc2/0x120 [ 157.415926][ T6655] __kmalloc_cache_noprof+0x72/0x780 [ 157.415941][ T6655] ? drm_atomic_helper_setup_commit+0x8d7/0x15d0 [ 157.415966][ T6655] ? drm_atomic_helper_setup_commit+0x8d7/0x15d0 [ 157.415986][ T6655] drm_atomic_helper_setup_commit+0x8d7/0x15d0 [ 157.416015][ T6655] drm_atomic_helper_commit+0xa9/0x380 [ 157.416036][ T6655] ? __pfx_drm_atomic_helper_commit+0x10/0x10 [ 157.416057][ T6655] drm_atomic_commit+0x234/0x300 [ 157.416082][ T6655] ? __pfx_drm_atomic_commit+0x10/0x10 [ 157.416280][ T6655] ? __pfx___drm_printfn_info+0x10/0x10 [ 157.416313][ T6655] ? drm_client_rotation+0x4da/0x6a0 [ 157.416354][ T6655] drm_client_modeset_commit_atomic+0x69d/0x7e0 [ 157.416400][ T6655] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 157.416436][ T6655] ? rcu_is_watching+0x12/0xc0 [ 157.416501][ T6655] drm_client_modeset_commit_locked+0x14d/0x580 [ 157.416547][ T6655] drm_client_modeset_commit+0x4f/0x80 [ 157.416586][ T6655] __drm_fb_helper_restore_fbdev_mode_unlocked+0x19f/0x200 [ 157.416624][ T6655] ? __pfx_drm_fbdev_client_restore+0x10/0x10 [ 157.416655][ T6655] drm_fbdev_client_restore+0x2c/0x40 [ 157.416684][ T6655] drm_client_dev_restore+0x1f6/0x2a0 [ 157.416728][ T6655] drm_release+0x2c4/0x360 [ 157.416765][ T6655] ? __pfx_drm_release+0x10/0x10 [ 157.416805][ T6655] __fput+0x402/0xb70 [ 157.416860][ T6655] task_work_run+0x150/0x240 [ 157.416903][ T6655] ? __pfx_task_work_run+0x10/0x10 [ 157.416944][ T6655] ? __pfx___do_sys_close_range+0x10/0x10 [ 157.416983][ T6655] exit_to_user_mode_loop+0xec/0x130 [ 157.417023][ T6655] do_syscall_64+0x426/0xfa0 [ 157.417058][ T6655] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.417085][ T6655] RIP: 0033:0x7efdc1b8f749 [ 157.417109][ T6655] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 157.417134][ T6655] RSP: 002b:00007efdc2a69038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 157.417159][ T6655] RAX: 0000000000000000 RBX: 00007efdc1de5fa0 RCX: 00007efdc1b8f749 [ 157.417175][ T6655] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 157.417189][ T6655] RBP: 00007efdc1c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 157.417204][ T6655] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 157.417218][ T6655] R13: 00007efdc1de6038 R14: 00007efdc1de5fa0 R15: 00007ffd1d5f3558 [ 157.417258][ T6655] [ 157.732895][ C0] vkms_vblank_simulate: vblank timer overrun [ 158.356408][ T6667] FAULT_INJECTION: forcing a failure. [ 158.356408][ T6667] name failslab, interval 1, probability 0, space 0, times 0 [ 158.356464][ T6667] CPU: 1 UID: 0 PID: 6667 Comm: syz.2.150 Not tainted syzkaller #0 PREEMPT(full) [ 158.356494][ T6667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 158.356509][ T6667] Call Trace: [ 158.356518][ T6667] [ 158.356528][ T6667] dump_stack_lvl+0x16c/0x1f0 [ 158.356565][ T6667] should_fail_ex+0x512/0x640 [ 158.356602][ T6667] ? __kmalloc_cache_noprof+0x5f/0x780 [ 158.356632][ T6667] should_failslab+0xc2/0x120 [ 158.356720][ T6667] __kmalloc_cache_noprof+0x72/0x780 [ 158.356746][ T6667] ? con_insert_unipair+0x1c0/0x270 [ 158.356784][ T6667] ? con_insert_unipair+0x1c0/0x270 [ 158.356812][ T6667] con_insert_unipair+0x1c0/0x270 [ 158.356847][ T6667] con_set_default_unimap+0x36f/0x6d0 [ 158.356889][ T6667] vc_allocate+0x6a6/0x880 [ 158.356916][ T6667] ? __pfx_vc_allocate+0x10/0x10 [ 158.356955][ T6667] con_install+0xa1/0x600 [ 158.356985][ T6667] ? __pfx_con_install+0x10/0x10 [ 158.357019][ T6667] ? __pfx_con_install+0x10/0x10 [ 158.357048][ T6667] tty_init_dev.part.0+0x9c/0x500 [ 158.357089][ T6667] tty_open+0xa4f/0xf90 [ 158.357128][ T6667] ? __pfx_tty_open+0x10/0x10 [ 158.357159][ T6667] ? preempt_schedule_thunk+0x16/0x30 [ 158.357205][ T6667] ? __pfx_tty_open+0x10/0x10 [ 158.357233][ T6667] chrdev_open+0x234/0x6a0 [ 158.357266][ T6667] ? __pfx_chrdev_open+0x10/0x10 [ 158.357298][ T6667] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 158.357334][ T6667] do_dentry_open+0x982/0x1530 [ 158.357363][ T6667] ? __pfx_chrdev_open+0x10/0x10 [ 158.357401][ T6667] vfs_open+0x82/0x3f0 [ 158.357441][ T6667] path_openat+0x1de4/0x2cb0 [ 158.357483][ T6667] ? __pfx_path_openat+0x10/0x10 [ 158.357513][ T6667] ? __lock_acquire+0xb8a/0x1c90 [ 158.357552][ T6667] do_filp_open+0x20b/0x470 [ 158.357580][ T6667] ? __pfx_do_filp_open+0x10/0x10 [ 158.357638][ T6667] ? alloc_fd+0x471/0x7d0 [ 158.357675][ T6667] do_sys_openat2+0x11b/0x1d0 [ 158.357710][ T6667] ? __pfx_do_sys_openat2+0x10/0x10 [ 158.357762][ T6667] __x64_sys_openat+0x174/0x210 [ 158.357799][ T6667] ? __pfx___x64_sys_openat+0x10/0x10 [ 158.357851][ T6667] do_syscall_64+0xcd/0xfa0 [ 158.357885][ T6667] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.357910][ T6667] RIP: 0033:0x7f478bd8f749 [ 158.357933][ T6667] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 158.357957][ T6667] RSP: 002b:00007f478cc7f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 158.357982][ T6667] RAX: ffffffffffffffda RBX: 00007f478bfe5fa0 RCX: 00007f478bd8f749 [ 158.357999][ T6667] RDX: 0000000000000800 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 158.358015][ T6667] RBP: 00007f478be13f91 R08: 0000000000000000 R09: 0000000000000000 [ 158.358037][ T6667] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 158.358053][ T6667] R13: 00007f478bfe6038 R14: 00007f478bfe5fa0 R15: 00007fff79290b68 [ 158.358100][ T6667] [ 159.229590][ T6684] FAULT_INJECTION: forcing a failure. [ 159.229590][ T6684] name failslab, interval 1, probability 0, space 0, times 0 [ 159.229649][ T6684] CPU: 1 UID: 0 PID: 6684 Comm: syz.0.156 Not tainted syzkaller #0 PREEMPT(full) [ 159.229681][ T6684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 159.229696][ T6684] Call Trace: [ 159.229705][ T6684] [ 159.229714][ T6684] dump_stack_lvl+0x16c/0x1f0 [ 159.229752][ T6684] should_fail_ex+0x512/0x640 [ 159.229789][ T6684] ? __kmalloc_noprof+0xca/0x880 [ 159.229832][ T6684] should_failslab+0xc2/0x120 [ 159.229866][ T6684] __kmalloc_noprof+0xdd/0x880 [ 159.229904][ T6684] ? vkms_crtc_atomic_check+0x3c5/0x880 [ 159.229940][ T6684] ? vkms_crtc_atomic_check+0x3c5/0x880 [ 159.230007][ T6684] vkms_crtc_atomic_check+0x3c5/0x880 [ 159.230045][ T6684] ? __pfx_vkms_crtc_atomic_check+0x10/0x10 [ 159.230072][ T6684] drm_atomic_helper_check_planes+0x4dd/0x900 [ 159.230115][ T6684] drm_atomic_helper_check+0xae/0x190 [ 159.230150][ T6684] vkms_atomic_check+0x1d9/0x250 [ 159.230183][ T6684] ? __pfx_vkms_atomic_check+0x10/0x10 [ 159.230219][ T6684] drm_atomic_check_only+0x19ca/0x3130 [ 159.230275][ T6684] drm_atomic_commit+0x136/0x300 [ 159.230310][ T6684] ? __pfx_drm_atomic_commit+0x10/0x10 [ 159.230344][ T6684] ? __pfx___drm_printfn_info+0x10/0x10 [ 159.230377][ T6684] ? drm_client_rotation+0x4da/0x6a0 [ 159.230419][ T6684] drm_client_modeset_commit_atomic+0x69d/0x7e0 [ 159.230471][ T6684] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 159.230510][ T6684] ? rcu_is_watching+0x12/0xc0 [ 159.230575][ T6684] drm_client_modeset_commit_locked+0x14d/0x580 [ 159.230619][ T6684] drm_client_modeset_commit+0x4f/0x80 [ 159.230657][ T6684] __drm_fb_helper_restore_fbdev_mode_unlocked+0x19f/0x200 [ 159.230695][ T6684] ? __pfx_drm_fbdev_client_restore+0x10/0x10 [ 159.230727][ T6684] drm_fbdev_client_restore+0x2c/0x40 [ 159.230757][ T6684] drm_client_dev_restore+0x1f6/0x2a0 [ 159.230801][ T6684] drm_release+0x2c4/0x360 [ 159.230838][ T6684] ? __pfx_drm_release+0x10/0x10 [ 159.230871][ T6684] __fput+0x402/0xb70 [ 159.230915][ T6684] task_work_run+0x150/0x240 [ 159.230955][ T6684] ? __pfx_task_work_run+0x10/0x10 [ 159.231002][ T6684] ? __pfx___do_sys_close_range+0x10/0x10 [ 159.231042][ T6684] exit_to_user_mode_loop+0xec/0x130 [ 159.231081][ T6684] do_syscall_64+0x426/0xfa0 [ 159.231115][ T6684] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.231139][ T6684] RIP: 0033:0x7f6cf658f749 [ 159.231159][ T6684] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 159.231182][ T6684] RSP: 002b:00007f6cf743f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 159.231206][ T6684] RAX: 0000000000000000 RBX: 00007f6cf67e5fa0 RCX: 00007f6cf658f749 [ 159.231222][ T6684] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 159.231237][ T6684] RBP: 00007f6cf6613f91 R08: 0000000000000000 R09: 0000000000000000 [ 159.231252][ T6684] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 159.231267][ T6684] R13: 00007f6cf67e6038 R14: 00007f6cf67e5fa0 R15: 00007ffe6a3ba308 [ 159.231306][ T6684] [ 160.135529][ T6667] tty tty29: ldisc open failed (-12), clearing slot 28 [ 161.373937][ T6732] FAULT_INJECTION: forcing a failure. [ 161.373937][ T6732] name failslab, interval 1, probability 0, space 0, times 0 [ 161.448471][ T6732] CPU: 1 UID: 0 PID: 6732 Comm: syz.1.167 Not tainted syzkaller #0 PREEMPT(full) [ 161.448514][ T6732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 161.448528][ T6732] Call Trace: [ 161.448537][ T6732] [ 161.448547][ T6732] dump_stack_lvl+0x16c/0x1f0 [ 161.448585][ T6732] should_fail_ex+0x512/0x640 [ 161.448621][ T6732] ? __kmalloc_node_track_caller_noprof+0xcb/0x8a0 [ 161.448661][ T6732] should_failslab+0xc2/0x120 [ 161.448694][ T6732] __kmalloc_node_track_caller_noprof+0xde/0x8a0 [ 161.448728][ T6732] ? drm_atomic_get_connector_state+0x23c/0x750 [ 161.448771][ T6732] ? krealloc_node_align_noprof+0x2c5/0x470 [ 161.448804][ T6732] krealloc_node_align_noprof+0x2c5/0x470 [ 161.448842][ T6732] drm_atomic_get_connector_state+0x23c/0x750 [ 161.448886][ T6732] drm_atomic_add_affected_connectors+0x2e0/0x3f0 [ 161.448930][ T6732] ? __pfx_drm_atomic_add_affected_connectors+0x10/0x10 [ 161.448979][ T6732] ? ww_mutex_lock+0x37/0x160 [ 161.449013][ T6732] ? modeset_lock+0x114/0x6e0 [ 161.449053][ T6732] __drm_atomic_helper_set_config+0x5ef/0xea0 [ 161.449105][ T6732] ? __pfx___drm_atomic_helper_set_config+0x10/0x10 [ 161.449151][ T6732] ? drm_client_rotation+0x4da/0x6a0 [ 161.449196][ T6732] drm_client_modeset_commit_atomic+0x53d/0x7e0 [ 161.449248][ T6732] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 161.449287][ T6732] ? rcu_is_watching+0x12/0xc0 [ 161.449354][ T6732] drm_client_modeset_commit_locked+0x14d/0x580 [ 161.449397][ T6732] drm_client_modeset_commit+0x4f/0x80 [ 161.449441][ T6732] __drm_fb_helper_restore_fbdev_mode_unlocked+0x19f/0x200 [ 161.449479][ T6732] ? __pfx_drm_fbdev_client_restore+0x10/0x10 [ 161.449519][ T6732] drm_fbdev_client_restore+0x2c/0x40 [ 161.449550][ T6732] drm_client_dev_restore+0x1f6/0x2a0 [ 161.449596][ T6732] drm_release+0x2c4/0x360 [ 161.449635][ T6732] ? __pfx_drm_release+0x10/0x10 [ 161.449667][ T6732] __fput+0x402/0xb70 [ 161.449710][ T6732] task_work_run+0x150/0x240 [ 161.449747][ T6732] ? __pfx_task_work_run+0x10/0x10 [ 161.449785][ T6732] ? __pfx___do_sys_close_range+0x10/0x10 [ 161.449822][ T6732] exit_to_user_mode_loop+0xec/0x130 [ 161.449861][ T6732] do_syscall_64+0x426/0xfa0 [ 161.449895][ T6732] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.449920][ T6732] RIP: 0033:0x7efdc1b8f749 [ 161.449942][ T6732] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 161.449965][ T6732] RSP: 002b:00007efdc2a69038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 161.449989][ T6732] RAX: 0000000000000000 RBX: 00007efdc1de5fa0 RCX: 00007efdc1b8f749 [ 161.450006][ T6732] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 161.450021][ T6732] RBP: 00007efdc1c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 161.450036][ T6732] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 161.450051][ T6732] R13: 00007efdc1de6038 R14: 00007efdc1de5fa0 R15: 00007ffd1d5f3558 [ 161.450091][ T6732] [ 162.364339][ T6378] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 162.374892][ T6378] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:0' [ 162.385920][ T6378] CPU: 0 UID: 0 PID: 6378 Comm: kworker/u11:0 Not tainted syzkaller #0 PREEMPT(full) [ 162.385954][ T6378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 162.385971][ T6378] Workqueue: hci0 hci_rx_work [ 162.386004][ T6378] Call Trace: [ 162.386012][ T6378] [ 162.386022][ T6378] dump_stack_lvl+0x16c/0x1f0 [ 162.386056][ T6378] sysfs_warn_dup+0x7f/0xa0 [ 162.386088][ T6378] sysfs_create_dir_ns+0x24b/0x2b0 [ 162.386121][ T6378] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 162.386151][ T6378] ? find_held_lock+0x2b/0x80 [ 162.386185][ T6378] ? do_raw_spin_unlock+0x172/0x230 [ 162.386211][ T6378] kobject_add_internal+0x2c4/0x9b0 [ 162.386252][ T6378] kobject_add+0x16e/0x240 [ 162.386286][ T6378] ? __pfx_kobject_add+0x10/0x10 [ 162.386323][ T6378] ? do_raw_spin_unlock+0x172/0x230 [ 162.386347][ T6378] ? kobject_put+0xab/0x5a0 [ 162.386390][ T6378] device_add+0x288/0x1aa0 [ 162.386413][ T6378] ? __pfx_dev_set_name+0x10/0x10 [ 162.386438][ T6378] ? __pfx_device_add+0x10/0x10 [ 162.386462][ T6378] ? mgmt_send_event_skb+0x2fb/0x460 [ 162.386501][ T6378] hci_conn_add_sysfs+0x17e/0x230 [ 162.386536][ T6378] le_conn_complete_evt+0x1260/0x2150 [ 162.386574][ T6378] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 162.386600][ T6378] ? bt_warn+0xe4/0x120 [ 162.386622][ T6378] ? __pfx_bt_warn+0x10/0x10 [ 162.386666][ T6378] hci_le_conn_complete_evt+0x23c/0x370 [ 162.386704][ T6378] hci_le_meta_evt+0x357/0x5e0 [ 162.386735][ T6378] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 162.386770][ T6378] hci_event_packet+0x685/0x11c0 [ 162.386798][ T6378] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 162.386829][ T6378] ? __pfx_hci_event_packet+0x10/0x10 [ 162.386861][ T6378] ? kcov_remote_start+0x3c9/0x6d0 [ 162.386889][ T6378] ? lockdep_hardirqs_on+0x7c/0x110 [ 162.386929][ T6378] hci_rx_work+0x2c5/0x16b0 [ 162.386961][ T6378] ? rcu_is_watching+0x12/0xc0 [ 162.386994][ T6378] process_one_work+0x9cf/0x1b70 [ 162.387047][ T6378] ? __pfx_process_one_work+0x10/0x10 [ 162.387097][ T6378] ? assign_work+0x1a0/0x250 [ 162.387136][ T6378] worker_thread+0x6c8/0xf10 [ 162.387177][ T6378] ? __pfx_worker_thread+0x10/0x10 [ 162.387200][ T6378] kthread+0x3c5/0x780 [ 162.387237][ T6378] ? __pfx_kthread+0x10/0x10 [ 162.387275][ T6378] ? rcu_is_watching+0x12/0xc0 [ 162.387302][ T6378] ? __pfx_kthread+0x10/0x10 [ 162.387339][ T6378] ret_from_fork+0x675/0x7d0 [ 162.387374][ T6378] ? __pfx_kthread+0x10/0x10 [ 162.387408][ T6378] ret_from_fork_asm+0x1a/0x30 [ 162.387462][ T6378] [ 162.387498][ T6378] kobject: kobject_add_internal failed for hci0:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 162.406483][ T6760] binder: 6755:6760 ioctl c0306201 0 returned -14 [ 162.413312][ T6378] Bluetooth: hci0: failed to register connection device [ 162.780331][ T6758] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !PjE ùrõ£Ò„yù*›"¤l-ý¤ôy–ú„ [ 162.878177][ T6763] zswap: compressor not available [ 163.267989][ T6765] zswap: compressor not available [ 164.758673][ T6397] Bluetooth: hci0: command 0x0c1a tx timeout [ 166.081441][ T6397] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 166.090478][ T6397] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 166.100558][ T6397] CPU: 0 UID: 0 PID: 6397 Comm: kworker/u11:2 Not tainted syzkaller #0 PREEMPT(full) [ 166.100594][ T6397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 166.100610][ T6397] Workqueue: hci3 hci_rx_work [ 166.100656][ T6397] Call Trace: [ 166.100665][ T6397] [ 166.100675][ T6397] dump_stack_lvl+0x16c/0x1f0 [ 166.100721][ T6397] sysfs_warn_dup+0x7f/0xa0 [ 166.100776][ T6397] sysfs_create_dir_ns+0x24b/0x2b0 [ 166.100837][ T6397] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 166.100868][ T6397] ? find_held_lock+0x2b/0x80 [ 166.100903][ T6397] ? do_raw_spin_unlock+0x172/0x230 [ 166.100930][ T6397] kobject_add_internal+0x2c4/0x9b0 [ 166.100990][ T6397] kobject_add+0x16e/0x240 [ 166.101025][ T6397] ? __pfx_kobject_add+0x10/0x10 [ 166.101062][ T6397] ? do_raw_spin_unlock+0x172/0x230 [ 166.101087][ T6397] ? kobject_put+0xab/0x5a0 [ 166.101131][ T6397] device_add+0x288/0x1aa0 [ 166.101155][ T6397] ? __pfx_dev_set_name+0x10/0x10 [ 166.101180][ T6397] ? __pfx_device_add+0x10/0x10 [ 166.101202][ T6397] ? mgmt_send_event_skb+0x2fb/0x460 [ 166.101243][ T6397] hci_conn_add_sysfs+0x17e/0x230 [ 166.101276][ T6397] le_conn_complete_evt+0x1260/0x2150 [ 166.101313][ T6397] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 166.101340][ T6397] ? bt_warn+0xe4/0x120 [ 166.101362][ T6397] ? __pfx_bt_warn+0x10/0x10 [ 166.101396][ T6397] hci_le_conn_complete_evt+0x23c/0x370 [ 166.101433][ T6397] hci_le_meta_evt+0x357/0x5e0 [ 166.101462][ T6397] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 166.101495][ T6397] hci_event_packet+0x685/0x11c0 [ 166.101524][ T6397] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 166.101555][ T6397] ? __pfx_hci_event_packet+0x10/0x10 [ 166.101587][ T6397] ? kcov_remote_start+0x3c9/0x6d0 [ 166.101611][ T6397] ? lockdep_hardirqs_on+0x7c/0x110 [ 166.101648][ T6397] hci_rx_work+0x2c5/0x16b0 [ 166.101679][ T6397] ? rcu_is_watching+0x12/0xc0 [ 166.101712][ T6397] process_one_work+0x9cf/0x1b70 [ 166.101765][ T6397] ? __pfx_process_one_work+0x10/0x10 [ 166.101814][ T6397] ? assign_work+0x1a0/0x250 [ 166.101855][ T6397] worker_thread+0x6c8/0xf10 [ 166.101889][ T6397] ? __kthread_parkme+0x19e/0x250 [ 166.101922][ T6397] ? __pfx_worker_thread+0x10/0x10 [ 166.101946][ T6397] kthread+0x3c5/0x780 [ 166.101981][ T6397] ? __pfx_kthread+0x10/0x10 [ 166.102018][ T6397] ? rcu_is_watching+0x12/0xc0 [ 166.102045][ T6397] ? __pfx_kthread+0x10/0x10 [ 166.102082][ T6397] ret_from_fork+0x675/0x7d0 [ 166.102118][ T6397] ? __pfx_kthread+0x10/0x10 [ 166.102153][ T6397] ret_from_fork_asm+0x1a/0x30 [ 166.102207][ T6397] [ 166.294652][ T6397] kobject: kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 166.402185][ T6397] Bluetooth: hci3: failed to register connection device [ 166.485513][ T6826] zswap: compressor not available [ 166.977047][ T30] audit: type=1400 audit(263.579:4): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=6840 comm="syz.0.187" [ 168.214681][ T6862] zswap: compressor not available [ 168.420292][ T6397] Bluetooth: hci3: command 0x0c1a tx timeout [ 168.477154][ T6867] zswap: compressor not available [ 168.709353][ T6880] zswap: compressor not available [ 170.961734][ T6919] netlink: 330 bytes leftover after parsing attributes in process `syz.1.202'. [ 171.079997][ T6919] mac80211_hwsim hwsim2 ›: renamed from wlan0 (while UP) [ 171.899603][ T6929] zswap: compressor not available [ 172.226230][ T6934] zswap: compressor not available [ 172.942328][ T6960] zswap: compressor not available [ 173.094536][ T6962] zswap: compressor not available [ 174.892152][ T6996] FAULT_INJECTION: forcing a failure. [ 174.892152][ T6996] name failslab, interval 1, probability 0, space 0, times 0 [ 174.949637][ T6996] CPU: 0 UID: 0 PID: 6996 Comm: syz.1.219 Not tainted syzkaller #0 PREEMPT(full) [ 174.949673][ T6996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 174.949688][ T6996] Call Trace: [ 174.949698][ T6996] [ 174.949708][ T6996] dump_stack_lvl+0x16c/0x1f0 [ 174.949745][ T6996] should_fail_ex+0x512/0x640 [ 174.949783][ T6996] ? __kmalloc_cache_noprof+0x5f/0x780 [ 174.949813][ T6996] should_failslab+0xc2/0x120 [ 174.949847][ T6996] __kmalloc_cache_noprof+0x72/0x780 [ 174.949873][ T6996] ? snd_seq_prioq_new+0x3f/0x110 [ 174.949904][ T6996] ? snd_seq_prioq_new+0x3f/0x110 [ 174.949928][ T6996] snd_seq_prioq_new+0x3f/0x110 [ 174.949952][ T6996] snd_seq_queue_alloc+0x12b/0x5a0 [ 174.949996][ T6996] snd_seq_ioctl_create_queue+0xa9/0x390 [ 174.950032][ T6996] call_seq_client_ctl+0x9f/0x110 [ 174.950063][ T6996] snd_seq_kernel_client_ctl+0x77/0xd0 [ 174.950093][ T6996] alloc_seq_queue+0xda/0x180 [ 174.950124][ T6996] ? __pfx_alloc_seq_queue+0x10/0x10 [ 174.950169][ T6996] ? mark_held_locks+0x49/0x80 [ 174.950189][ T6996] ? _raw_spin_unlock_irq+0x23/0x50 [ 174.950206][ T6996] ? lockdep_hardirqs_on+0x7c/0x110 [ 174.950225][ T6996] snd_seq_oss_open+0x38c/0xa20 [ 174.950246][ T6996] odev_open+0x79/0xc0 [ 174.950261][ T6996] ? __pfx_odev_open+0x10/0x10 [ 174.950276][ T6996] soundcore_open+0x40c/0x580 [ 174.950295][ T6996] ? __pfx_soundcore_open+0x10/0x10 [ 174.950311][ T6996] chrdev_open+0x234/0x6a0 [ 174.950328][ T6996] ? __pfx_apparmor_file_open+0x10/0x10 [ 174.950349][ T6996] ? __pfx_chrdev_open+0x10/0x10 [ 174.950366][ T6996] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 174.950386][ T6996] do_dentry_open+0x982/0x1530 [ 174.950403][ T6996] ? __pfx_chrdev_open+0x10/0x10 [ 174.950430][ T6996] vfs_open+0x82/0x3f0 [ 174.950462][ T6996] path_openat+0x1de4/0x2cb0 [ 174.950490][ T6996] ? __pfx_path_openat+0x10/0x10 [ 174.950506][ T6996] ? __lock_acquire+0xb8a/0x1c90 [ 174.950527][ T6996] do_filp_open+0x20b/0x470 [ 174.950542][ T6996] ? __pfx_do_filp_open+0x10/0x10 [ 174.950573][ T6996] ? alloc_fd+0x471/0x7d0 [ 174.950593][ T6996] do_sys_openat2+0x11b/0x1d0 [ 174.950617][ T6996] ? __pfx_do_sys_openat2+0x10/0x10 [ 174.950644][ T6996] __x64_sys_openat+0x174/0x210 [ 174.950665][ T6996] ? __pfx___x64_sys_openat+0x10/0x10 [ 174.950693][ T6996] do_syscall_64+0xcd/0xfa0 [ 174.950712][ T6996] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.950726][ T6996] RIP: 0033:0x7efdc1b8f749 [ 174.950739][ T6996] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 174.950752][ T6996] RSP: 002b:00007efdc2a69038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 174.950766][ T6996] RAX: ffffffffffffffda RBX: 00007efdc1de5fa0 RCX: 00007efdc1b8f749 [ 174.950775][ T6996] RDX: 00000000001c8740 RSI: 0000200000000540 RDI: ffffffffffffff9c [ 174.950784][ T6996] RBP: 00007efdc1c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 174.950792][ T6996] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 174.950801][ T6996] R13: 00007efdc1de6038 R14: 00007efdc1de5fa0 R15: 00007ffd1d5f3558 [ 174.950822][ T6996] [ 175.328339][ T7002] netlink: 504 bytes leftover after parsing attributes in process `syz.1.219'. [ 175.526768][ T7004] zswap: compressor not available [ 175.746927][ T7012] netlink: 8 bytes leftover after parsing attributes in process `syz.3.222'. [ 176.699776][ T7035] zswap: compressor not available [ 176.974570][ T7037] zswap: compressor not available [ 176.983326][ T6397] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 176.992761][ T6397] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:0' [ 177.006044][ T6397] CPU: 0 UID: 0 PID: 6397 Comm: kworker/u11:2 Not tainted syzkaller #0 PREEMPT(full) [ 177.006077][ T6397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 177.006094][ T6397] Workqueue: hci0 hci_rx_work [ 177.006128][ T6397] Call Trace: [ 177.006136][ T6397] [ 177.006143][ T6397] dump_stack_lvl+0x16c/0x1f0 [ 177.006164][ T6397] sysfs_warn_dup+0x7f/0xa0 [ 177.006182][ T6397] sysfs_create_dir_ns+0x24b/0x2b0 [ 177.006199][ T6397] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 177.006218][ T6397] ? find_held_lock+0x2b/0x80 [ 177.006237][ T6397] ? do_raw_spin_unlock+0x172/0x230 [ 177.006251][ T6397] kobject_add_internal+0x2c4/0x9b0 [ 177.006273][ T6397] kobject_add+0x16e/0x240 [ 177.006291][ T6397] ? __pfx_kobject_add+0x10/0x10 [ 177.006311][ T6397] ? do_raw_spin_unlock+0x172/0x230 [ 177.006324][ T6397] ? kobject_put+0xab/0x5a0 [ 177.006347][ T6397] device_add+0x288/0x1aa0 [ 177.006362][ T6397] ? __pfx_dev_set_name+0x10/0x10 [ 177.006376][ T6397] ? __pfx_device_add+0x10/0x10 [ 177.006389][ T6397] ? mgmt_send_event_skb+0x2fb/0x460 [ 177.006409][ T6397] hci_conn_add_sysfs+0x17e/0x230 [ 177.006428][ T6397] le_conn_complete_evt+0x1260/0x2150 [ 177.006448][ T6397] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 177.006463][ T6397] ? bt_warn+0xe4/0x120 [ 177.006475][ T6397] ? __pfx_bt_warn+0x10/0x10 [ 177.006493][ T6397] hci_le_conn_complete_evt+0x23c/0x370 [ 177.006512][ T6397] hci_le_meta_evt+0x357/0x5e0 [ 177.006528][ T6397] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 177.006546][ T6397] hci_event_packet+0x685/0x11c0 [ 177.006561][ T6397] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 177.006578][ T6397] ? __pfx_hci_event_packet+0x10/0x10 [ 177.006594][ T6397] ? kcov_remote_start+0x3c9/0x6d0 [ 177.006608][ T6397] ? lockdep_hardirqs_on+0x7c/0x110 [ 177.006629][ T6397] hci_rx_work+0x2c5/0x16b0 [ 177.006646][ T6397] ? rcu_is_watching+0x12/0xc0 [ 177.006664][ T6397] process_one_work+0x9cf/0x1b70 [ 177.006693][ T6397] ? __pfx_process_one_work+0x10/0x10 [ 177.006719][ T6397] ? assign_work+0x1a0/0x250 [ 177.006741][ T6397] worker_thread+0x6c8/0xf10 [ 177.006759][ T6397] ? __kthread_parkme+0x19e/0x250 [ 177.006778][ T6397] ? __pfx_worker_thread+0x10/0x10 [ 177.006790][ T6397] kthread+0x3c5/0x780 [ 177.006810][ T6397] ? __pfx_kthread+0x10/0x10 [ 177.006831][ T6397] ? rcu_is_watching+0x12/0xc0 [ 177.006845][ T6397] ? __pfx_kthread+0x10/0x10 [ 177.006865][ T6397] ret_from_fork+0x675/0x7d0 [ 177.006884][ T6397] ? __pfx_kthread+0x10/0x10 [ 177.006904][ T6397] ret_from_fork_asm+0x1a/0x30 [ 177.006934][ T6397] [ 177.006962][ T6397] kobject: kobject_add_internal failed for hci0:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 177.307077][ T6397] Bluetooth: hci0: failed to register connection device [ 178.974036][ T7075] zswap: compressor not available [ 179.327677][ T6397] Bluetooth: hci0: command 0x0c1a tx timeout [ 179.730630][ T6397] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 179.744106][ T6397] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:0' [ 179.754394][ T6397] CPU: 0 UID: 0 PID: 6397 Comm: kworker/u11:2 Not tainted syzkaller #0 PREEMPT(full) [ 179.754433][ T6397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 179.754451][ T6397] Workqueue: hci0 hci_rx_work [ 179.754490][ T6397] Call Trace: [ 179.754499][ T6397] [ 179.754509][ T6397] dump_stack_lvl+0x16c/0x1f0 [ 179.754545][ T6397] sysfs_warn_dup+0x7f/0xa0 [ 179.754585][ T6397] sysfs_create_dir_ns+0x24b/0x2b0 [ 179.754616][ T6397] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 179.754645][ T6397] ? find_held_lock+0x2b/0x80 [ 179.754678][ T6397] ? do_raw_spin_unlock+0x172/0x230 [ 179.754813][ T6397] kobject_add_internal+0x2c4/0x9b0 [ 179.754868][ T6397] kobject_add+0x16e/0x240 [ 179.754906][ T6397] ? __pfx_kobject_add+0x10/0x10 [ 179.754941][ T6397] ? do_raw_spin_unlock+0x172/0x230 [ 179.754962][ T6397] ? kobject_put+0xab/0x5a0 [ 179.755003][ T6397] device_add+0x288/0x1aa0 [ 179.755031][ T6397] ? __pfx_dev_set_name+0x10/0x10 [ 179.755058][ T6397] ? __pfx_device_add+0x10/0x10 [ 179.755082][ T6397] ? mgmt_send_event_skb+0x2fb/0x460 [ 179.755120][ T6397] hci_conn_add_sysfs+0x17e/0x230 [ 179.755152][ T6397] le_conn_complete_evt+0x1260/0x2150 [ 179.755190][ T6397] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 179.755217][ T6397] ? bt_warn+0xe4/0x120 [ 179.755240][ T6397] ? __pfx_bt_warn+0x10/0x10 [ 179.755274][ T6397] hci_le_conn_complete_evt+0x23c/0x370 [ 179.755312][ T6397] hci_le_meta_evt+0x357/0x5e0 [ 179.755341][ T6397] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 179.755375][ T6397] hci_event_packet+0x685/0x11c0 [ 179.755404][ T6397] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 179.755436][ T6397] ? __pfx_hci_event_packet+0x10/0x10 [ 179.755468][ T6397] ? kcov_remote_start+0x3c9/0x6d0 [ 179.755492][ T6397] ? lockdep_hardirqs_on+0x7c/0x110 [ 179.755532][ T6397] hci_rx_work+0x2c5/0x16b0 [ 179.755564][ T6397] ? rcu_is_watching+0x12/0xc0 [ 179.755597][ T6397] process_one_work+0x9cf/0x1b70 [ 179.755648][ T6397] ? __pfx_process_one_work+0x10/0x10 [ 179.755709][ T6397] ? assign_work+0x1a0/0x250 [ 179.755754][ T6397] worker_thread+0x6c8/0xf10 [ 179.755788][ T6397] ? __kthread_parkme+0x19e/0x250 [ 179.755823][ T6397] ? __pfx_worker_thread+0x10/0x10 [ 179.755844][ T6397] kthread+0x3c5/0x780 [ 179.755888][ T6397] ? __pfx_kthread+0x10/0x10 [ 179.755925][ T6397] ? rcu_is_watching+0x12/0xc0 [ 179.755952][ T6397] ? __pfx_kthread+0x10/0x10 [ 179.755989][ T6397] ret_from_fork+0x675/0x7d0 [ 179.756024][ T6397] ? __pfx_kthread+0x10/0x10 [ 179.756060][ T6397] ret_from_fork_asm+0x1a/0x30 [ 179.756113][ T6397] [ 179.757118][ T6397] kobject: kobject_add_internal failed for hci0:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 180.068638][ T6397] Bluetooth: hci0: failed to register connection device [ 180.139852][ T7100] zswap: compressor not available [ 180.310635][ T7110] netlink: 'syz.1.242': attribute type 15 has an invalid length. [ 180.340642][ T7110] netlink: 'syz.1.242': attribute type 16 has an invalid length. [ 180.416415][ T7110] netlink: 194 bytes leftover after parsing attributes in process `syz.1.242'. [ 180.427065][ T7103] zswap: compressor not available [ 180.535953][ T7113] Invalid ELF header magic: != ELF [ 180.759327][ T7116] FAULT_INJECTION: forcing a failure. [ 180.759327][ T7116] name failslab, interval 1, probability 0, space 0, times 0 [ 180.834662][ T7116] CPU: 1 UID: 0 PID: 7116 Comm: syz.0.243 Not tainted syzkaller #0 PREEMPT(full) [ 180.834700][ T7116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 180.834714][ T7116] Call Trace: [ 180.834722][ T7116] [ 180.834731][ T7116] dump_stack_lvl+0x16c/0x1f0 [ 180.834769][ T7116] should_fail_ex+0x512/0x640 [ 180.834803][ T7116] ? __kmalloc_cache_noprof+0x5f/0x780 [ 180.834837][ T7116] should_failslab+0xc2/0x120 [ 180.834867][ T7116] __kmalloc_cache_noprof+0x72/0x780 [ 180.834888][ T7116] ? rcu_is_watching+0x12/0xc0 [ 180.834913][ T7116] ? call_usermodehelper_setup+0xaf/0x360 [ 180.834940][ T7116] ? __pfx_free_modprobe_argv+0x10/0x10 [ 180.834980][ T7116] ? call_usermodehelper_setup+0xaf/0x360 [ 180.835004][ T7116] call_usermodehelper_setup+0xaf/0x360 [ 180.835036][ T7116] __request_module+0x3bd/0x690 [ 180.835074][ T7116] ? __pfx___request_module+0x10/0x10 [ 180.835129][ T7116] ? find_held_lock+0x2b/0x80 [ 180.835165][ T7116] inet6_create+0xd78/0x12b0 [ 180.835198][ T7116] ? inet6_create+0x7f/0x12b0 [ 180.835232][ T7116] __sock_create+0x338/0x8d0 [ 180.835272][ T7116] __sys_socket+0x14d/0x260 [ 180.835306][ T7116] ? __pfx___sys_socket+0x10/0x10 [ 180.835338][ T7116] ? xfd_validate_state+0x61/0x180 [ 180.835370][ T7116] ? __pfx_ksys_write+0x10/0x10 [ 180.835403][ T7116] __x64_sys_socket+0x72/0xb0 [ 180.835432][ T7116] ? lockdep_hardirqs_on+0x7c/0x110 [ 180.835458][ T7116] do_syscall_64+0xcd/0xfa0 [ 180.835488][ T7116] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.835513][ T7116] RIP: 0033:0x7f6cf658f749 [ 180.835547][ T7116] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 180.835571][ T7116] RSP: 002b:00007f6cf743f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 180.835595][ T7116] RAX: ffffffffffffffda RBX: 00007f6cf67e5fa0 RCX: 00007f6cf658f749 [ 180.835612][ T7116] RDX: 0000000000000005 RSI: 0000000000000005 RDI: 000000000000000a [ 180.835626][ T7116] RBP: 00007f6cf6613f91 R08: 0000000000000000 R09: 0000000000000000 [ 180.835641][ T7116] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 180.835655][ T7116] R13: 00007f6cf67e6038 R14: 00007f6cf67e5fa0 R15: 00007ffe6a3ba308 [ 180.835691][ T7116] [ 182.110215][ T6397] Bluetooth: hci0: command 0x0c1a tx timeout [ 182.537515][ T7161] Invalid ELF header magic: != ELF [ 183.058250][ T7160] ovs_: entered promiscuous mode [ 183.977862][ T7175] zswap: compressor not available [ 184.327194][ T7180] zswap: compressor not available [ 186.638591][ T7232] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input11 [ 188.343713][ T7264] netlink: 354 bytes leftover after parsing attributes in process `syz.1.276'. [ 189.237041][ T6397] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 189.246633][ T6397] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 189.259492][ T6397] CPU: 0 UID: 0 PID: 6397 Comm: kworker/u11:2 Not tainted syzkaller #0 PREEMPT(full) [ 189.259529][ T6397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 189.259546][ T6397] Workqueue: hci3 hci_rx_work [ 189.259579][ T6397] Call Trace: [ 189.259588][ T6397] [ 189.259599][ T6397] dump_stack_lvl+0x16c/0x1f0 [ 189.259635][ T6397] sysfs_warn_dup+0x7f/0xa0 [ 189.259667][ T6397] sysfs_create_dir_ns+0x24b/0x2b0 [ 189.259698][ T6397] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 189.259726][ T6397] ? find_held_lock+0x2b/0x80 [ 189.259760][ T6397] ? do_raw_spin_unlock+0x172/0x230 [ 189.259787][ T6397] kobject_add_internal+0x2c4/0x9b0 [ 189.259829][ T6397] kobject_add+0x16e/0x240 [ 189.259870][ T6397] ? __pfx_kobject_add+0x10/0x10 [ 189.259908][ T6397] ? do_raw_spin_unlock+0x172/0x230 [ 189.259933][ T6397] ? kobject_put+0xab/0x5a0 [ 189.260045][ T6397] device_add+0x288/0x1aa0 [ 189.260071][ T6397] ? __pfx_dev_set_name+0x10/0x10 [ 189.260098][ T6397] ? __pfx_device_add+0x10/0x10 [ 189.260122][ T6397] ? mgmt_send_event_skb+0x2fb/0x460 [ 189.260161][ T6397] hci_conn_add_sysfs+0x17e/0x230 [ 189.260201][ T6397] le_conn_complete_evt+0x1260/0x2150 [ 189.260238][ T6397] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 189.260271][ T6397] ? bt_warn+0xe4/0x120 [ 189.260293][ T6397] ? __pfx_bt_warn+0x10/0x10 [ 189.260328][ T6397] hci_le_conn_complete_evt+0x23c/0x370 [ 189.260365][ T6397] hci_le_meta_evt+0x357/0x5e0 [ 189.260395][ T6397] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 189.260428][ T6397] hci_event_packet+0x685/0x11c0 [ 189.260456][ T6397] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 189.260488][ T6397] ? __pfx_hci_event_packet+0x10/0x10 [ 189.260520][ T6397] ? kcov_remote_start+0x3c9/0x6d0 [ 189.260550][ T6397] ? lockdep_hardirqs_on+0x7c/0x110 [ 189.260589][ T6397] hci_rx_work+0x2c5/0x16b0 [ 189.260622][ T6397] ? rcu_is_watching+0x12/0xc0 [ 189.260655][ T6397] process_one_work+0x9cf/0x1b70 [ 189.260707][ T6397] ? __pfx_process_one_work+0x10/0x10 [ 189.260774][ T6397] ? assign_work+0x1a0/0x250 [ 189.260815][ T6397] worker_thread+0x6c8/0xf10 [ 189.260855][ T6397] ? __kthread_parkme+0x19e/0x250 [ 189.260889][ T6397] ? __pfx_worker_thread+0x10/0x10 [ 189.260911][ T6397] kthread+0x3c5/0x780 [ 189.260948][ T6397] ? __pfx_kthread+0x10/0x10 [ 189.260998][ T6397] ? rcu_is_watching+0x12/0xc0 [ 189.261026][ T6397] ? __pfx_kthread+0x10/0x10 [ 189.261065][ T6397] ret_from_fork+0x675/0x7d0 [ 189.261101][ T6397] ? __pfx_kthread+0x10/0x10 [ 189.261137][ T6397] ret_from_fork_asm+0x1a/0x30 [ 189.261190][ T6397] [ 189.816197][ T6397] kobject: kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 189.834284][ T6397] Bluetooth: hci3: failed to register connection device [ 191.450654][ T7318] netlink: 25 bytes leftover after parsing attributes in process `syz.2.292'. [ 191.899607][ T6397] Bluetooth: hci3: command 0x0c1a tx timeout [ 195.075417][ T7383] FAULT_INJECTION: forcing a failure. [ 195.075417][ T7383] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 195.091394][ T7383] CPU: 1 UID: 0 PID: 7383 Comm: syz.2.309 Not tainted syzkaller #0 PREEMPT(full) [ 195.091427][ T7383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 195.091442][ T7383] Call Trace: [ 195.091450][ T7383] [ 195.091459][ T7383] dump_stack_lvl+0x16c/0x1f0 [ 195.091498][ T7383] should_fail_ex+0x512/0x640 [ 195.091541][ T7383] strncpy_from_user+0x3b/0x2e0 [ 195.091576][ T7383] getname_flags.part.0+0x8f/0x550 [ 195.091614][ T7383] getname_flags+0x93/0xf0 [ 195.091641][ T7383] __x64_sys_mknod+0x74/0xb0 [ 195.091666][ T7383] do_syscall_64+0xcd/0xfa0 [ 195.091697][ T7383] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.091722][ T7383] RIP: 0033:0x7f478bd8f749 [ 195.091749][ T7383] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 195.091773][ T7383] RSP: 002b:00007f478cc7f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000085 [ 195.091797][ T7383] RAX: ffffffffffffffda RBX: 00007f478bfe5fa0 RCX: 00007f478bd8f749 [ 195.091812][ T7383] RDX: 00000000fffffffa RSI: 00000000000000cb RDI: 0000200000000180 [ 195.091826][ T7383] RBP: 00007f478be13f91 R08: 0000000000000000 R09: 0000000000000000 [ 195.091838][ T7383] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 195.091853][ T7383] R13: 00007f478bfe6038 R14: 00007f478bfe5fa0 R15: 00007fff79290b68 [ 195.091888][ T7383] [ 195.265562][ C1] vkms_vblank_simulate: vblank timer overrun [ 197.032227][ T7439] FAULT_INJECTION: forcing a failure. [ 197.032227][ T7439] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 197.082051][ T7439] CPU: 1 UID: 0 PID: 7439 Comm: syz.0.327 Not tainted syzkaller #0 PREEMPT(full) [ 197.082080][ T7439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 197.082093][ T7439] Call Trace: [ 197.082101][ T7439] [ 197.082110][ T7439] dump_stack_lvl+0x16c/0x1f0 [ 197.082142][ T7439] should_fail_ex+0x512/0x640 [ 197.082176][ T7439] _copy_to_user+0x32/0xd0 [ 197.082808][ T7439] snd_ctl_ioctl+0x298/0xf80 [ 197.082848][ T7439] ? __pfx_snd_ctl_ioctl+0x10/0x10 [ 197.082874][ T7439] ? __fget_files+0x20e/0x3c0 [ 197.083006][ T7439] ? __pfx_snd_ctl_ioctl+0x10/0x10 [ 197.083046][ T7439] __x64_sys_ioctl+0x18e/0x210 [ 197.083082][ T7439] do_syscall_64+0xcd/0xfa0 [ 197.083113][ T7439] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.083138][ T7439] RIP: 0033:0x7f6cf658f749 [ 197.083159][ T7439] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 197.083203][ T7439] RSP: 002b:00007f6cf741e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 197.083224][ T7439] RAX: ffffffffffffffda RBX: 00007f6cf67e6090 RCX: 00007f6cf658f749 [ 197.083239][ T7439] RDX: 0000200000000040 RSI: 00000000c4c85513 RDI: 0000000000000009 [ 197.083254][ T7439] RBP: 00007f6cf741e090 R08: 0000000000000000 R09: 0000000000000000 [ 197.083266][ T7439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 197.083278][ T7439] R13: 00007f6cf67e6128 R14: 00007f6cf67e6090 R15: 00007ffe6a3ba308 [ 197.083374][ T7439] [ 197.275183][ C1] vkms_vblank_simulate: vblank timer overrun [ 199.551668][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.573708][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.010786][ T7486] FAULT_INJECTION: forcing a failure. [ 200.010786][ T7486] name failslab, interval 1, probability 0, space 0, times 0 [ 200.064920][ T7486] CPU: 1 UID: 0 PID: 7486 Comm: syz.2.336 Not tainted syzkaller #0 PREEMPT(full) [ 200.064967][ T7486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 200.064982][ T7486] Call Trace: [ 200.064990][ T7486] [ 200.064999][ T7486] dump_stack_lvl+0x16c/0x1f0 [ 200.065036][ T7486] should_fail_ex+0x512/0x640 [ 200.065073][ T7486] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 200.065103][ T7486] should_failslab+0xc2/0x120 [ 200.065134][ T7486] kmem_cache_alloc_noprof+0x75/0x6e0 [ 200.065157][ T7486] ? skb_clone+0x190/0x3f0 [ 200.065189][ T7486] ? skb_clone+0x190/0x3f0 [ 200.065213][ T7486] skb_clone+0x190/0x3f0 [ 200.065241][ T7486] netlink_broadcast_filtered+0xb76/0xf90 [ 200.065286][ T7486] ? __pfx_netlink_broadcast_filtered+0x10/0x10 [ 200.065312][ T7486] ? sprintf+0xcc/0x100 [ 200.065353][ T7486] ? netlink_has_listeners+0x20f/0x430 [ 200.065383][ T7486] netlink_broadcast+0x39/0x50 [ 200.065413][ T7486] kobject_uevent_env+0xc6a/0x1870 [ 200.065456][ T7486] ? queue_work_on+0x12a/0x1f0 [ 200.065479][ T7486] ? bus_to_subsys+0x131/0x160 [ 200.065511][ T7486] driver_bound+0x164/0x230 [ 200.065547][ T7486] device_bind_driver+0x3a/0x70 [ 200.065586][ T7486] mac80211_hwsim_new_radio+0x3e8/0x50b0 [ 200.065634][ T7486] ? __asan_memset+0x23/0x50 [ 200.065662][ T7486] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 200.065698][ T7486] hwsim_new_radio_nl+0xba2/0x1330 [ 200.065728][ T7486] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 200.065768][ T7486] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 200.065801][ T7486] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 200.065842][ T7486] genl_family_rcv_msg_doit+0x209/0x2f0 [ 200.065878][ T7486] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 200.065934][ T7486] ? bpf_lsm_capable+0x9/0x10 [ 200.065967][ T7486] ? security_capable+0x7e/0x260 [ 200.066007][ T7486] ? ns_capable+0xd7/0x110 [ 200.066037][ T7486] genl_rcv_msg+0x55c/0x800 [ 200.066074][ T7486] ? __pfx_genl_rcv_msg+0x10/0x10 [ 200.066106][ T7486] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 200.066142][ T7486] netlink_rcv_skb+0x158/0x420 [ 200.066166][ T7486] ? __pfx_genl_rcv_msg+0x10/0x10 [ 200.066194][ T7486] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 200.066234][ T7486] ? netlink_deliver_tap+0x1ae/0xd30 [ 200.066266][ T7486] genl_rcv+0x28/0x40 [ 200.066293][ T7486] netlink_unicast+0x5aa/0x870 [ 200.066324][ T7486] ? __pfx_netlink_unicast+0x10/0x10 [ 200.066366][ T7486] netlink_sendmsg+0x8c8/0xdd0 [ 200.066400][ T7486] ? __pfx_netlink_sendmsg+0x10/0x10 [ 200.066433][ T7486] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 200.066476][ T7486] ____sys_sendmsg+0xa98/0xc70 [ 200.066508][ T7486] ? copy_msghdr_from_user+0x10a/0x160 [ 200.066534][ T7486] ? __pfx_____sys_sendmsg+0x10/0x10 [ 200.066562][ T7486] ? preempt_schedule_thunk+0x16/0x30 [ 200.066608][ T7486] ? try_to_wake_up+0xa67/0x1870 [ 200.066641][ T7486] ___sys_sendmsg+0x134/0x1d0 [ 200.066664][ T7486] ? find_held_lock+0x2b/0x80 [ 200.066690][ T7486] ? __pfx____sys_sendmsg+0x10/0x10 [ 200.066714][ T7486] ? __lock_acquire+0x622/0x1c90 [ 200.066797][ T7486] __sys_sendmsg+0x16d/0x220 [ 200.066824][ T7486] ? __pfx___sys_sendmsg+0x10/0x10 [ 200.066849][ T7486] ? __x64_sys_futex+0x1e0/0x4c0 [ 200.066906][ T7486] do_syscall_64+0xcd/0xfa0 [ 200.066950][ T7486] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.066977][ T7486] RIP: 0033:0x7f478bd8f749 [ 200.066998][ T7486] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 200.067022][ T7486] RSP: 002b:00007f478cc7f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 200.067046][ T7486] RAX: ffffffffffffffda RBX: 00007f478bfe5fa0 RCX: 00007f478bd8f749 [ 200.067063][ T7486] RDX: 0000000000008000 RSI: 0000200000000200 RDI: 0000000000000007 [ 200.067078][ T7486] RBP: 00007f478be13f91 R08: 0000000000000000 R09: 0000000000000000 [ 200.067093][ T7486] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 200.067109][ T7486] R13: 00007f478bfe6038 R14: 00007f478bfe5fa0 R15: 00007fff79290b68 [ 200.067147][ T7486] [ 200.503481][ C1] vkms_vblank_simulate: vblank timer overrun [ 201.612240][ T7505] sd 0:0:1:0: PR command failed: 1026 [ 201.646541][ T7505] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 201.689468][ T7505] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 201.974903][ T6397] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 201.983014][ T6397] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 201.996491][ T6397] CPU: 0 UID: 0 PID: 6397 Comm: kworker/u11:2 Not tainted syzkaller #0 PREEMPT(full) [ 201.996534][ T6397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 201.996552][ T6397] Workqueue: hci3 hci_rx_work [ 201.996609][ T6397] Call Trace: [ 201.996618][ T6397] [ 201.996635][ T6397] dump_stack_lvl+0x16c/0x1f0 [ 201.996671][ T6397] sysfs_warn_dup+0x7f/0xa0 [ 201.996702][ T6397] sysfs_create_dir_ns+0x24b/0x2b0 [ 201.996741][ T6397] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 201.996771][ T6397] ? find_held_lock+0x2b/0x80 [ 201.996807][ T6397] ? do_raw_spin_unlock+0x172/0x230 [ 201.996836][ T6397] kobject_add_internal+0x2c4/0x9b0 [ 201.996877][ T6397] kobject_add+0x16e/0x240 [ 201.996910][ T6397] ? __pfx_kobject_add+0x10/0x10 [ 201.996946][ T6397] ? do_raw_spin_unlock+0x172/0x230 [ 201.996971][ T6397] ? kobject_put+0xab/0x5a0 [ 201.997014][ T6397] device_add+0x288/0x1aa0 [ 201.997039][ T6397] ? __pfx_dev_set_name+0x10/0x10 [ 201.997072][ T6397] ? __pfx_device_add+0x10/0x10 [ 201.997097][ T6397] ? mgmt_send_event_skb+0x2fb/0x460 [ 201.997135][ T6397] hci_conn_add_sysfs+0x17e/0x230 [ 201.997168][ T6397] le_conn_complete_evt+0x1260/0x2150 [ 201.997205][ T6397] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 201.997242][ T6397] ? bt_warn+0xe4/0x120 [ 201.997282][ T6397] ? __pfx_bt_warn+0x10/0x10 [ 201.997317][ T6397] hci_le_conn_complete_evt+0x23c/0x370 [ 201.997356][ T6397] hci_le_meta_evt+0x357/0x5e0 [ 201.997385][ T6397] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 201.997420][ T6397] hci_event_packet+0x685/0x11c0 [ 201.997449][ T6397] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 201.997479][ T6397] ? __pfx_hci_event_packet+0x10/0x10 [ 201.997511][ T6397] ? kcov_remote_start+0x3c9/0x6d0 [ 201.997535][ T6397] ? lockdep_hardirqs_on+0x7c/0x110 [ 201.997573][ T6397] hci_rx_work+0x2c5/0x16b0 [ 201.997604][ T6397] ? rcu_is_watching+0x12/0xc0 [ 201.997636][ T6397] process_one_work+0x9cf/0x1b70 [ 201.997689][ T6397] ? __pfx_process_one_work+0x10/0x10 [ 201.997743][ T6397] ? assign_work+0x1a0/0x250 [ 201.997782][ T6397] worker_thread+0x6c8/0xf10 [ 201.997817][ T6397] ? __kthread_parkme+0x19e/0x250 [ 201.997850][ T6397] ? __pfx_worker_thread+0x10/0x10 [ 201.997871][ T6397] kthread+0x3c5/0x780 [ 201.997905][ T6397] ? __pfx_kthread+0x10/0x10 [ 201.997943][ T6397] ? rcu_is_watching+0x12/0xc0 [ 201.997969][ T6397] ? __pfx_kthread+0x10/0x10 [ 201.998024][ T6397] ret_from_fork+0x675/0x7d0 [ 201.998061][ T6397] ? __pfx_kthread+0x10/0x10 [ 201.998114][ T6397] ret_from_fork_asm+0x1a/0x30 [ 201.998170][ T6397] [ 201.998203][ T6397] kobject: kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 202.219154][ T7518] WARNING! power/level is deprecated; use power/control instead [ 202.223758][ T6397] Bluetooth: hci3: failed to register connection device [ 202.296071][ T7518] ICMPv6: process `syz.3.346' is using deprecated sysctl (syscall) net.ipv6.neigh.wg1.retrans_time - use net.ipv6.neigh.wg1.retrans_time_ms instead [ 202.563528][ T7502] FAULT_INJECTION: forcing a failure. [ 202.563528][ T7502] name failslab, interval 1, probability 0, space 0, times 0 [ 202.621678][ T7502] CPU: 0 UID: 0 PID: 7502 Comm: syz.1.340 Not tainted syzkaller #0 PREEMPT(full) [ 202.621727][ T7502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 202.621742][ T7502] Call Trace: [ 202.621751][ T7502] [ 202.621762][ T7502] dump_stack_lvl+0x16c/0x1f0 [ 202.621797][ T7502] should_fail_ex+0x512/0x640 [ 202.621833][ T7502] ? __kmalloc_cache_noprof+0x5f/0x780 [ 202.621860][ T7502] should_failslab+0xc2/0x120 [ 202.621890][ T7502] __kmalloc_cache_noprof+0x72/0x780 [ 202.621912][ T7502] ? __pfx_ida_alloc_range+0x10/0x10 [ 202.621938][ T7502] ? alloc_fs_context+0x57/0x9c0 [ 202.621974][ T7502] ? alloc_fs_context+0x57/0x9c0 [ 202.622002][ T7502] alloc_fs_context+0x57/0x9c0 [ 202.622049][ T7502] mq_init_ns+0x172/0x620 [ 202.622093][ T7502] copy_ipcs+0x2d6/0x550 [ 202.622134][ T7502] create_new_namespaces+0x20a/0xa90 [ 202.622172][ T7502] ? security_capable+0x7e/0x260 [ 202.622229][ T7502] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 202.622262][ T7502] ksys_unshare+0x45b/0xa40 [ 202.622298][ T7502] ? __pfx_ksys_unshare+0x10/0x10 [ 202.622332][ T7502] ? xfd_validate_state+0x61/0x180 [ 202.622378][ T7502] __x64_sys_unshare+0x31/0x40 [ 202.622409][ T7502] do_syscall_64+0xcd/0xfa0 [ 202.622441][ T7502] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.622467][ T7502] RIP: 0033:0x7efdc1b8f749 [ 202.622487][ T7502] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 202.622510][ T7502] RSP: 002b:00007efdc2a69038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 202.622535][ T7502] RAX: ffffffffffffffda RBX: 00007efdc1de5fa0 RCX: 00007efdc1b8f749 [ 202.622559][ T7502] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000000 [ 202.622575][ T7502] RBP: 00007efdc1c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 202.622591][ T7502] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 202.622610][ T7502] R13: 00007efdc1de6038 R14: 00007efdc1de5fa0 R15: 00007ffd1d5f3558 [ 202.622652][ T7502] [ 203.554987][ T7534] FAULT_INJECTION: forcing a failure. [ 203.554987][ T7534] name failslab, interval 1, probability 0, space 0, times 0 [ 203.574414][ T7534] CPU: 0 UID: 0 PID: 7534 Comm: syz.3.349 Not tainted syzkaller #0 PREEMPT(full) [ 203.574454][ T7534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 203.574469][ T7534] Call Trace: [ 203.574479][ T7534] [ 203.574490][ T7534] dump_stack_lvl+0x16c/0x1f0 [ 203.574528][ T7534] should_fail_ex+0x512/0x640 [ 203.574565][ T7534] ? __kmalloc_node_track_caller_noprof+0xcb/0x8a0 [ 203.574964][ T7534] should_failslab+0xc2/0x120 [ 203.574999][ T7534] __kmalloc_node_track_caller_noprof+0xde/0x8a0 [ 203.575034][ T7534] ? kstrdup_const+0x63/0x80 [ 203.575066][ T7534] ? kstrdup+0x53/0x100 [ 203.575089][ T7534] kstrdup+0x53/0x100 [ 203.575118][ T7534] kstrdup_const+0x63/0x80 [ 203.575144][ T7534] alloc_vfsmnt+0xea/0x6b0 [ 203.575174][ T7534] ? getname_flags.part.0+0x1c5/0x550 [ 203.575211][ T7534] mnt_clone_internal+0x81/0x250 [ 203.575243][ T7534] acct_on+0xfb/0xa00 [ 203.575282][ T7534] ? __pfx_acct_on+0x10/0x10 [ 203.575317][ T7534] ? bpf_lsm_capable+0x9/0x10 [ 203.575353][ T7534] __x64_sys_acct+0x81/0x1e0 [ 203.575390][ T7534] ? lockdep_hardirqs_on+0x7c/0x110 [ 203.575422][ T7534] do_syscall_64+0xcd/0xfa0 [ 203.575470][ T7534] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.575497][ T7534] RIP: 0033:0x7fd651b8f749 [ 203.575518][ T7534] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 203.575541][ T7534] RSP: 002b:00007fd652972038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a3 [ 203.575608][ T7534] RAX: ffffffffffffffda RBX: 00007fd651de5fa0 RCX: 00007fd651b8f749 [ 203.575626][ T7534] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000100 [ 203.575642][ T7534] RBP: 00007fd651c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 203.575657][ T7534] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 203.575672][ T7534] R13: 00007fd651de6038 R14: 00007fd651de5fa0 R15: 00007ffde7990d68 [ 203.575711][ T7534] [ 203.911744][ T7540] zswap: compressor not available [ 204.094172][ T7542] zswap: compressor not available [ 204.312942][ T6397] Bluetooth: hci3: command 0x0c1a tx timeout [ 204.643175][ T7563] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 2472098489 out of range (51000000..2150000000) [ 204.683354][ T7563] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 2472098489 out of range (51000000..2150000000) [ 204.904922][ T7546] capability: warning: `syz.0.352' uses 32-bit capabilities (legacy support in use) [ 206.489701][ T7615] vmstat_refresh: nr_hugetlb -37888 [ 207.075122][ T7618] ovs_: entered promiscuous mode [ 208.202998][ T7647] binder: 7643:7647 ioctl c0306201 0 returned -14 [ 209.804653][ T7669] zswap: compressor not available [ 210.229544][ T7692] netlink: 'syz.2.372': attribute type 2 has an invalid length. [ 210.265076][ T7686] zram: Removed device: zram0 [ 210.283203][ T7671] zswap: compressor not available [ 210.486037][ T7699] FAULT_INJECTION: forcing a failure. [ 210.486037][ T7699] name failslab, interval 1, probability 0, space 0, times 0 [ 210.502356][ T7699] CPU: 0 UID: 0 PID: 7699 Comm: syz.3.374 Not tainted syzkaller #0 PREEMPT(full) [ 210.502423][ T7699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 210.502438][ T7699] Call Trace: [ 210.502447][ T7699] [ 210.502458][ T7699] dump_stack_lvl+0x16c/0x1f0 [ 210.502498][ T7699] should_fail_ex+0x512/0x640 [ 210.502533][ T7699] ? __kmalloc_cache_noprof+0x5f/0x780 [ 210.502561][ T7699] should_failslab+0xc2/0x120 [ 210.502593][ T7699] __kmalloc_cache_noprof+0x72/0x780 [ 210.502618][ T7699] ? __do_sys_fanotify_init+0x584/0xc80 [ 210.502657][ T7699] ? __do_sys_fanotify_init+0x584/0xc80 [ 210.502693][ T7699] __do_sys_fanotify_init+0x584/0xc80 [ 210.502734][ T7699] do_syscall_64+0xcd/0xfa0 [ 210.502767][ T7699] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.502793][ T7699] RIP: 0033:0x7fd651b8f749 [ 210.502813][ T7699] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 210.502836][ T7699] RSP: 002b:00007fd652972038 EFLAGS: 00000246 ORIG_RAX: 000000000000012c [ 210.502860][ T7699] RAX: ffffffffffffffda RBX: 00007fd651de5fa0 RCX: 00007fd651b8f749 [ 210.502884][ T7699] RDX: 0000000000000000 RSI: 0002000000000002 RDI: 00000000000006a1 [ 210.502900][ T7699] RBP: 00007fd651c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 210.502915][ T7699] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 210.502930][ T7699] R13: 00007fd651de6038 R14: 00007fd651de5fa0 R15: 00007ffde7990d68 [ 210.502987][ T7699] [ 212.161849][ T7718] FAULT_INJECTION: forcing a failure. [ 212.161849][ T7718] name fail_futex, interval 1, probability 0, space 0, times 0 [ 212.363693][ T7718] CPU: 0 UID: 0 PID: 7718 Comm: syz.2.378 Not tainted syzkaller #0 PREEMPT(full) [ 212.363736][ T7718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 212.363750][ T7718] Call Trace: [ 212.363758][ T7718] [ 212.363767][ T7718] dump_stack_lvl+0x16c/0x1f0 [ 212.363802][ T7718] should_fail_ex+0x512/0x640 [ 212.363843][ T7718] get_futex_key+0x293/0x1560 [ 212.363879][ T7718] ? __pfx_get_futex_key+0x10/0x10 [ 212.363909][ T7718] ? __mutex_trylock_common+0xe9/0x250 [ 212.363952][ T7718] futex_wake+0xea/0x530 [ 212.363996][ T7718] ? __pfx_futex_wake+0x10/0x10 [ 212.364028][ T7718] ? __lock_acquire+0xb8a/0x1c90 [ 212.364075][ T7718] do_futex+0x1e3/0x350 [ 212.364107][ T7718] ? __pfx_do_futex+0x10/0x10 [ 212.364135][ T7718] ? __might_fault+0xe3/0x190 [ 212.364170][ T7718] mm_release+0x24e/0x300 [ 212.364198][ T7718] do_exit+0x68e/0x2bf0 [ 212.364237][ T7718] ? __pfx_do_exit+0x10/0x10 [ 212.364268][ T7718] ? do_raw_spin_lock+0x12c/0x2b0 [ 212.364302][ T7718] ? find_held_lock+0x2b/0x80 [ 212.364333][ T7718] do_group_exit+0xd3/0x2a0 [ 212.364368][ T7718] get_signal+0x2671/0x26d0 [ 212.364408][ T7718] ? __pfx_get_signal+0x10/0x10 [ 212.364435][ T7718] ? do_futex+0x122/0x350 [ 212.364480][ T7718] ? __pfx_do_futex+0x10/0x10 [ 212.364515][ T7718] arch_do_signal_or_restart+0x8f/0x790 [ 212.364547][ T7718] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 212.364587][ T7718] ? xfd_validate_state+0x61/0x180 [ 212.364618][ T7718] ? __pfx___do_sys_close_range+0x10/0x10 [ 212.364654][ T7718] exit_to_user_mode_loop+0x85/0x130 [ 212.364690][ T7718] do_syscall_64+0x426/0xfa0 [ 212.364730][ T7718] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.364754][ T7718] RIP: 0033:0x7f478bd8f749 [ 212.364774][ T7718] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 212.364796][ T7718] RSP: 002b:00007f478cc7f0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 212.364819][ T7718] RAX: fffffffffffffe00 RBX: 00007f478bfe5fa8 RCX: 00007f478bd8f749 [ 212.364835][ T7718] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f478bfe5fa8 [ 212.364850][ T7718] RBP: 00007f478bfe5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 212.364864][ T7718] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 212.364878][ T7718] R13: 00007f478bfe6038 R14: 00007fff79290a80 R15: 00007fff79290b68 [ 212.364913][ T7718] [ 212.625578][ C0] vkms_vblank_simulate: vblank timer overrun [ 213.610744][ T7742] FAULT_INJECTION: forcing a failure. [ 213.610744][ T7742] name failslab, interval 1, probability 0, space 0, times 0 [ 213.684030][ T7742] CPU: 0 UID: 0 PID: 7742 Comm: syz.1.383 Not tainted syzkaller #0 PREEMPT(full) [ 213.684062][ T7742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 213.684076][ T7742] Call Trace: [ 213.684082][ T7742] [ 213.684090][ T7742] dump_stack_lvl+0x16c/0x1f0 [ 213.684120][ T7742] should_fail_ex+0x512/0x640 [ 213.684152][ T7742] ? kmem_cache_alloc_lru_noprof+0x66/0x6e0 [ 213.684182][ T7742] should_failslab+0xc2/0x120 [ 213.684212][ T7742] kmem_cache_alloc_lru_noprof+0x79/0x6e0 [ 213.684236][ T7742] ? __d_alloc+0x32/0xae0 [ 213.684267][ T7742] ? __d_alloc+0x32/0xae0 [ 213.684291][ T7742] __d_alloc+0x32/0xae0 [ 213.684322][ T7742] d_alloc_pseudo+0x1c/0xc0 [ 213.684358][ T7742] alloc_file_pseudo+0xcf/0x230 [ 213.684393][ T7742] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 213.684426][ T7742] ? alloc_fd+0x471/0x7d0 [ 213.684457][ T7742] sock_alloc_file+0x50/0x210 [ 213.684485][ T7742] __sys_socket+0x1c0/0x260 [ 213.684514][ T7742] ? __pfx___sys_socket+0x10/0x10 [ 213.684543][ T7742] ? xfd_validate_state+0x61/0x180 [ 213.684573][ T7742] ? __pfx_ksys_write+0x10/0x10 [ 213.684610][ T7742] __x64_sys_socket+0x72/0xb0 [ 213.684638][ T7742] ? lockdep_hardirqs_on+0x7c/0x110 [ 213.684665][ T7742] do_syscall_64+0xcd/0xfa0 [ 213.684694][ T7742] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.684715][ T7742] RIP: 0033:0x7efdc1b8f749 [ 213.684732][ T7742] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 213.684750][ T7742] RSP: 002b:00007efdc2a69038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 213.684770][ T7742] RAX: ffffffffffffffda RBX: 00007efdc1de5fa0 RCX: 00007efdc1b8f749 [ 213.684785][ T7742] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000022 [ 213.684798][ T7742] RBP: 00007efdc1c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 213.684810][ T7742] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 213.684823][ T7742] R13: 00007efdc1de6038 R14: 00007efdc1de5fa0 R15: 00007ffd1d5f3558 [ 213.684856][ T7742] [ 213.924694][ C0] vkms_vblank_simulate: vblank timer overrun [ 215.033086][ T7765] zswap: compressor not available [ 215.370988][ T7777] program syz.2.391 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 216.860163][ T6397] Bluetooth: hci1: unexpected event 0x14 length: 23 > 6 [ 219.192140][ T7842] mkiss: ax0: crc mode is auto. [ 221.295922][ T7860] netlink: 342 bytes leftover after parsing attributes in process `syz.1.410'. [ 222.159802][ T7867] FAULT_INJECTION: forcing a failure. [ 222.159802][ T7867] name fail_futex, interval 1, probability 0, space 0, times 0 [ 222.209959][ T7867] CPU: 1 UID: 0 PID: 7867 Comm: syz.1.414 Not tainted syzkaller #0 PREEMPT(full) [ 222.209994][ T7867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 222.210008][ T7867] Call Trace: [ 222.210016][ T7867] [ 222.210025][ T7867] dump_stack_lvl+0x16c/0x1f0 [ 222.210059][ T7867] should_fail_ex+0x512/0x640 [ 222.210096][ T7867] get_futex_key+0x1d0/0x1560 [ 222.210130][ T7867] ? __pfx_get_futex_key+0x10/0x10 [ 222.210158][ T7867] ? __mutex_trylock_common+0xe9/0x250 [ 222.210195][ T7867] futex_wake+0xea/0x530 [ 222.210229][ T7867] ? __pfx_futex_wake+0x10/0x10 [ 222.210258][ T7867] ? __lock_acquire+0xb8a/0x1c90 [ 222.210305][ T7867] do_futex+0x1e3/0x350 [ 222.210337][ T7867] ? __pfx_do_futex+0x10/0x10 [ 222.210365][ T7867] ? __might_fault+0xe3/0x190 [ 222.210399][ T7867] mm_release+0x24e/0x300 [ 222.210428][ T7867] do_exit+0x68e/0x2bf0 [ 222.210466][ T7867] ? __pfx_do_exit+0x10/0x10 [ 222.210510][ T7867] ? do_raw_spin_lock+0x12c/0x2b0 [ 222.210544][ T7867] ? find_held_lock+0x2b/0x80 [ 222.210575][ T7867] do_group_exit+0xd3/0x2a0 [ 222.210609][ T7867] get_signal+0x2671/0x26d0 [ 222.210649][ T7867] ? __pfx_get_signal+0x10/0x10 [ 222.210676][ T7867] ? do_futex+0x122/0x350 [ 222.210707][ T7867] ? __pfx_do_futex+0x10/0x10 [ 222.210741][ T7867] arch_do_signal_or_restart+0x8f/0x790 [ 222.210772][ T7867] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 222.210812][ T7867] ? __pfx___do_sys_close_range+0x10/0x10 [ 222.210846][ T7867] exit_to_user_mode_loop+0x85/0x130 [ 222.210883][ T7867] do_syscall_64+0x426/0xfa0 [ 222.210914][ T7867] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.210939][ T7867] RIP: 0033:0x7efdc1b8f749 [ 222.210958][ T7867] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 222.210980][ T7867] RSP: 002b:00007efdc2a690e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 222.211002][ T7867] RAX: fffffffffffffe00 RBX: 00007efdc1de5fa8 RCX: 00007efdc1b8f749 [ 222.211018][ T7867] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007efdc1de5fa8 [ 222.211032][ T7867] RBP: 00007efdc1de5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 222.211046][ T7867] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 222.211060][ T7867] R13: 00007efdc1de6038 R14: 00007ffd1d5f3470 R15: 00007ffd1d5f3558 [ 222.211094][ T7867] [ 222.862610][ T7878] aoe: can't write to that file. [ 226.498989][ T7917] syz.0.425 (7917): /proc/7912/oom_adj is deprecated, please use /proc/7912/oom_score_adj instead. [ 226.581083][ T7914] FAULT_INJECTION: forcing a failure. [ 226.581083][ T7914] name failslab, interval 1, probability 0, space 0, times 0 [ 226.595505][ T7914] CPU: 1 UID: 0 PID: 7914 Comm: syz.0.425 Not tainted syzkaller #0 PREEMPT(full) [ 226.595538][ T7914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 226.595553][ T7914] Call Trace: [ 226.595561][ T7914] [ 226.595571][ T7914] dump_stack_lvl+0x16c/0x1f0 [ 226.595609][ T7914] should_fail_ex+0x512/0x640 [ 226.595645][ T7914] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 226.595673][ T7914] should_failslab+0xc2/0x120 [ 226.595706][ T7914] kmem_cache_alloc_noprof+0x75/0x6e0 [ 226.595731][ T7914] ? __pfx_look_up_user_keyrings+0x10/0x10 [ 226.595768][ T7914] ? prepare_creds+0x2c/0x7d0 [ 226.595805][ T7914] ? prepare_creds+0x2c/0x7d0 [ 226.595838][ T7914] prepare_creds+0x2c/0x7d0 [ 226.595877][ T7914] lookup_user_key+0xf76/0x1300 [ 226.595906][ T7914] ? __pfx_lookup_user_key+0x10/0x10 [ 226.595940][ T7914] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 226.595987][ T7914] ? _copy_to_user+0x48/0xd0 [ 226.596015][ T7914] keyctl_restrict_keyring+0x99/0x250 [ 226.596051][ T7914] ? __pfx_keyctl_restrict_keyring+0x10/0x10 [ 226.596100][ T7914] ? xfd_validate_state+0x61/0x180 [ 226.596144][ T7914] __do_sys_keyctl+0x4c1/0x590 [ 226.596182][ T7914] do_syscall_64+0xcd/0xfa0 [ 226.596216][ T7914] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.596241][ T7914] RIP: 0033:0x7f6cf658f749 [ 226.596261][ T7914] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 226.596284][ T7914] RSP: 002b:00007f6cf743f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 226.596313][ T7914] RAX: ffffffffffffffda RBX: 00007f6cf67e5fa0 RCX: 00007f6cf658f749 [ 226.596331][ T7914] RDX: 0000000000000002 RSI: fffffffffffffffd RDI: 000000000000001d [ 226.596350][ T7914] RBP: 00007f6cf6613f91 R08: fffffffffffffffd R09: 0000000000000000 [ 226.596367][ T7914] R10: 0000000000000628 R11: 0000000000000246 R12: 0000000000000000 [ 226.596382][ T7914] R13: 00007f6cf67e6038 R14: 00007f6cf67e5fa0 R15: 00007ffe6a3ba308 [ 226.596418][ T7914] [ 228.232323][ T6397] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 228.243725][ T6397] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:0' [ 228.258409][ T6397] CPU: 0 UID: 0 PID: 6397 Comm: kworker/u11:2 Not tainted syzkaller #0 PREEMPT(full) [ 228.258442][ T6397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 228.258459][ T6397] Workqueue: hci2 hci_rx_work [ 228.258493][ T6397] Call Trace: [ 228.258502][ T6397] [ 228.258512][ T6397] dump_stack_lvl+0x16c/0x1f0 [ 228.258546][ T6397] sysfs_warn_dup+0x7f/0xa0 [ 228.258579][ T6397] sysfs_create_dir_ns+0x24b/0x2b0 [ 228.258611][ T6397] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 228.258640][ T6397] ? find_held_lock+0x2b/0x80 [ 228.258673][ T6397] ? do_raw_spin_unlock+0x172/0x230 [ 228.258699][ T6397] kobject_add_internal+0x2c4/0x9b0 [ 228.258740][ T6397] kobject_add+0x16e/0x240 [ 228.258772][ T6397] ? __pfx_kobject_add+0x10/0x10 [ 228.258807][ T6397] ? do_raw_spin_unlock+0x172/0x230 [ 228.258831][ T6397] ? kobject_put+0xab/0x5a0 [ 228.258883][ T6397] device_add+0x288/0x1aa0 [ 228.258908][ T6397] ? __pfx_dev_set_name+0x10/0x10 [ 228.258935][ T6397] ? __pfx_device_add+0x10/0x10 [ 228.258959][ T6397] ? mgmt_send_event_skb+0x2fb/0x460 [ 228.258995][ T6397] hci_conn_add_sysfs+0x17e/0x230 [ 228.259029][ T6397] le_conn_complete_evt+0x1260/0x2150 [ 228.259067][ T6397] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 228.259093][ T6397] ? bt_warn+0xe4/0x120 [ 228.259114][ T6397] ? __pfx_bt_warn+0x10/0x10 [ 228.259146][ T6397] hci_le_conn_complete_evt+0x23c/0x370 [ 228.259183][ T6397] hci_le_meta_evt+0x357/0x5e0 [ 228.259211][ T6397] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 228.259243][ T6397] hci_event_packet+0x685/0x11c0 [ 228.259271][ T6397] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 228.259301][ T6397] ? __pfx_hci_event_packet+0x10/0x10 [ 228.259333][ T6397] ? kcov_remote_start+0x3c9/0x6d0 [ 228.259357][ T6397] ? lockdep_hardirqs_on+0x7c/0x110 [ 228.259396][ T6397] hci_rx_work+0x2c5/0x16b0 [ 228.259427][ T6397] ? rcu_is_watching+0x12/0xc0 [ 228.259459][ T6397] process_one_work+0x9cf/0x1b70 [ 228.259512][ T6397] ? __pfx_process_one_work+0x10/0x10 [ 228.259561][ T6397] ? assign_work+0x1a0/0x250 [ 228.259600][ T6397] worker_thread+0x6c8/0xf10 [ 228.259635][ T6397] ? __kthread_parkme+0x19e/0x250 [ 228.259668][ T6397] ? __pfx_worker_thread+0x10/0x10 [ 228.259690][ T6397] kthread+0x3c5/0x780 [ 228.259726][ T6397] ? __pfx_kthread+0x10/0x10 [ 228.259763][ T6397] ? rcu_is_watching+0x12/0xc0 [ 228.259789][ T6397] ? __pfx_kthread+0x10/0x10 [ 228.259826][ T6397] ret_from_fork+0x675/0x7d0 [ 228.259861][ T6397] ? __pfx_kthread+0x10/0x10 [ 228.259906][ T6397] ret_from_fork_asm+0x1a/0x30 [ 228.259962][ T6397] [ 228.259994][ T6397] kobject: kobject_add_internal failed for hci2:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 228.584394][ T6397] Bluetooth: hci2: failed to register connection device [ 228.826947][ T7932] netlink: zone id is out of range [ 228.833082][ T7932] netlink: zone id is out of range [ 228.885378][ T7932] netlink: zone id is out of range [ 228.891826][ T7932] netlink: zone id is out of range [ 228.954515][ T7932] netlink: zone id is out of range [ 228.976783][ T7932] netlink: zone id is out of range [ 229.017437][ T7932] netlink: zone id is out of range [ 229.044083][ T7932] netlink: zone id is out of range [ 229.092588][ T7932] netlink: zone id is out of range [ 229.101336][ T7932] netlink: zone id is out of range [ 229.288069][ T30] audit: type=1800 audit(326.233:5): pid=7938 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.432" name="discovery_nqn" dev="configfs" ino=18877 res=0 errno=0 [ 229.366815][ T7938] FAULT_INJECTION: forcing a failure. [ 229.366815][ T7938] name failslab, interval 1, probability 0, space 0, times 0 [ 229.412084][ T7938] CPU: 1 UID: 0 PID: 7938 Comm: syz.0.432 Not tainted syzkaller #0 PREEMPT(full) [ 229.412122][ T7938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 229.412137][ T7938] Call Trace: [ 229.412145][ T7938] [ 229.412154][ T7938] dump_stack_lvl+0x16c/0x1f0 [ 229.412191][ T7938] should_fail_ex+0x512/0x640 [ 229.412224][ T7938] ? __kmalloc_cache_noprof+0x5f/0x780 [ 229.412249][ T7938] should_failslab+0xc2/0x120 [ 229.412280][ T7938] __kmalloc_cache_noprof+0x72/0x780 [ 229.412301][ T7938] ? kvm_uevent_notify_change.part.0+0x2b2/0x450 [ 229.412335][ T7938] ? kvm_uevent_notify_change.part.0+0x2b2/0x450 [ 229.412362][ T7938] kvm_uevent_notify_change.part.0+0x2b2/0x450 [ 229.412391][ T7938] ? __pfx_kvm_vm_release+0x10/0x10 [ 229.412413][ T7938] kvm_put_kvm+0xe3/0xb00 [ 229.412436][ T7938] ? lockdep_hardirqs_on+0x7c/0x110 [ 229.412461][ T7938] ? _raw_spin_unlock_irq+0x2e/0x50 [ 229.412487][ T7938] ? __pfx_kvm_vm_release+0x10/0x10 [ 229.412509][ T7938] kvm_vm_release+0x3c/0x50 [ 229.412531][ T7938] __fput+0x402/0xb70 [ 229.412561][ T7938] ? _raw_spin_unlock_irq+0x23/0x50 [ 229.412587][ T7938] task_work_run+0x150/0x240 [ 229.412619][ T7938] ? __pfx_task_work_run+0x10/0x10 [ 229.412657][ T7938] ? __pfx___do_sys_close_range+0x10/0x10 [ 229.412690][ T7938] exit_to_user_mode_loop+0xec/0x130 [ 229.412726][ T7938] do_syscall_64+0x426/0xfa0 [ 229.412756][ T7938] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.412778][ T7938] RIP: 0033:0x7f6cf658f749 [ 229.412797][ T7938] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 229.412818][ T7938] RSP: 002b:00007f6cf743f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 229.412840][ T7938] RAX: 0000000000000000 RBX: 00007f6cf67e5fa0 RCX: 00007f6cf658f749 [ 229.412854][ T7938] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 229.412866][ T7938] RBP: 00007f6cf6613f91 R08: 0000000000000000 R09: 0000000000000000 [ 229.412880][ T7938] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 229.412893][ T7938] R13: 00007f6cf67e6038 R14: 00007f6cf67e5fa0 R15: 00007ffe6a3ba308 [ 229.412924][ T7938] [ 230.037126][ T7940] zswap: compressor not available [ 230.422335][ T7944] zswap: compressor not available [ 230.665802][ T6397] Bluetooth: hci2: command 0x0c1a tx timeout [ 231.073542][ T7953] zswap: compressor not available [ 231.111586][ T7976] netlink: 'syz.0.437': attribute type 2 has an invalid length. [ 231.161003][ T7954] zswap: compressor not available [ 231.376439][ T7975] netlink: 'syz.0.437': attribute type 2 has an invalid length. [ 231.960619][ T6397] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 231.972767][ T6397] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:0' [ 231.983480][ T6397] CPU: 0 UID: 0 PID: 6397 Comm: kworker/u11:2 Not tainted syzkaller #0 PREEMPT(full) [ 231.983516][ T6397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 231.983532][ T6397] Workqueue: hci0 hci_rx_work [ 231.983564][ T6397] Call Trace: [ 231.983573][ T6397] [ 231.983583][ T6397] dump_stack_lvl+0x16c/0x1f0 [ 231.983613][ T6397] sysfs_warn_dup+0x7f/0xa0 [ 231.983643][ T6397] sysfs_create_dir_ns+0x24b/0x2b0 [ 231.983673][ T6397] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 231.983699][ T6397] ? find_held_lock+0x2b/0x80 [ 231.983732][ T6397] ? do_raw_spin_unlock+0x172/0x230 [ 231.983768][ T6397] kobject_add_internal+0x2c4/0x9b0 [ 231.983812][ T6397] kobject_add+0x16e/0x240 [ 231.983844][ T6397] ? __pfx_kobject_add+0x10/0x10 [ 231.983880][ T6397] ? do_raw_spin_unlock+0x172/0x230 [ 231.983903][ T6397] ? kobject_put+0xab/0x5a0 [ 231.983946][ T6397] device_add+0x288/0x1aa0 [ 231.983970][ T6397] ? __pfx_dev_set_name+0x10/0x10 [ 231.983996][ T6397] ? __pfx_device_add+0x10/0x10 [ 231.984021][ T6397] ? mgmt_send_event_skb+0x2fb/0x460 [ 231.984061][ T6397] hci_conn_add_sysfs+0x17e/0x230 [ 231.984094][ T6397] le_conn_complete_evt+0x1260/0x2150 [ 231.984131][ T6397] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 231.984158][ T6397] ? bt_warn+0xe4/0x120 [ 231.984180][ T6397] ? __pfx_bt_warn+0x10/0x10 [ 231.984214][ T6397] hci_le_conn_complete_evt+0x23c/0x370 [ 231.984251][ T6397] hci_le_meta_evt+0x357/0x5e0 [ 231.984280][ T6397] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 231.984313][ T6397] hci_event_packet+0x685/0x11c0 [ 231.984341][ T6397] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 231.984371][ T6397] ? __pfx_hci_event_packet+0x10/0x10 [ 231.984403][ T6397] ? kcov_remote_start+0x3c9/0x6d0 [ 231.984428][ T6397] ? lockdep_hardirqs_on+0x7c/0x110 [ 231.984468][ T6397] hci_rx_work+0x2c5/0x16b0 [ 231.984499][ T6397] ? rcu_is_watching+0x12/0xc0 [ 231.984531][ T6397] process_one_work+0x9cf/0x1b70 [ 231.984584][ T6397] ? __pfx_process_one_work+0x10/0x10 [ 231.984633][ T6397] ? assign_work+0x1a0/0x250 [ 231.984673][ T6397] worker_thread+0x6c8/0xf10 [ 231.984707][ T6397] ? __kthread_parkme+0x19e/0x250 [ 231.984741][ T6397] ? __pfx_worker_thread+0x10/0x10 [ 231.984770][ T6397] kthread+0x3c5/0x780 [ 231.984807][ T6397] ? __pfx_kthread+0x10/0x10 [ 231.984846][ T6397] ? rcu_is_watching+0x12/0xc0 [ 231.984874][ T6397] ? __pfx_kthread+0x10/0x10 [ 231.984911][ T6397] ret_from_fork+0x675/0x7d0 [ 231.984946][ T6397] ? __pfx_kthread+0x10/0x10 [ 231.984982][ T6397] ret_from_fork_asm+0x1a/0x30 [ 231.985036][ T6397] [ 231.985069][ T6397] kobject: kobject_add_internal failed for hci0:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 232.283024][ T6397] Bluetooth: hci0: failed to register connection device [ 233.017055][ T7997] netlink: 'syz.0.442': attribute type 1 has an invalid length. [ 234.319442][ T6397] Bluetooth: hci0: command 0x0c1a tx timeout [ 235.450783][ T8035] zswap: compressor not available [ 235.769295][ T8040] zswap: compressor not available [ 238.071930][ T30] audit: type=1800 audit(335.058:6): pid=8091 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.464" name="lu_gp_id" dev="configfs" ino=19264 res=0 errno=0 [ 239.964411][ T8120] zswap: compressor not available [ 240.501425][ T8122] zswap: compressor not available [ 240.753331][ T8129] zswap: compressor not available [ 240.967750][ T8141] zswap: compressor not available [ 241.403067][ T8158] FAULT_INJECTION: forcing a failure. [ 241.403067][ T8158] name failslab, interval 1, probability 0, space 0, times 0 [ 241.424967][ T8158] CPU: 1 UID: 0 PID: 8158 Comm: syz.1.476 Not tainted syzkaller #0 PREEMPT(full) [ 241.424995][ T8158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 241.425020][ T8158] Call Trace: [ 241.425028][ T8158] [ 241.425036][ T8158] dump_stack_lvl+0x16c/0x1f0 [ 241.425068][ T8158] should_fail_ex+0x512/0x640 [ 241.425104][ T8158] should_failslab+0xc2/0x120 [ 241.425134][ T8158] kmem_cache_alloc_node_noprof+0x78/0x770 [ 241.425158][ T8158] ? __alloc_skb+0x2b2/0x380 [ 241.425201][ T8158] ? __alloc_skb+0x2b2/0x380 [ 241.425232][ T8158] __alloc_skb+0x2b2/0x380 [ 241.425268][ T8158] ? __pfx___alloc_skb+0x10/0x10 [ 241.425310][ T8158] ? if_nlmsg_size+0x475/0xaf0 [ 241.425341][ T8158] rtmsg_ifinfo_build_skb+0x81/0x280 [ 241.425378][ T8158] rtmsg_ifinfo+0x9f/0x1a0 [ 241.425414][ T8158] __dev_notify_flags+0x24c/0x2e0 [ 241.425440][ T8158] ? __pfx___dev_notify_flags+0x10/0x10 [ 241.425463][ T8158] ? __dev_change_flags+0x3d5/0x720 [ 241.425490][ T8158] ? __pfx___dev_change_flags+0x10/0x10 [ 241.425526][ T8158] netif_change_flags+0x108/0x160 [ 241.425556][ T8158] dev_change_flags+0xba/0x250 [ 241.425588][ T8158] flags_store+0x187/0x1e0 [ 241.425622][ T8158] ? __pfx_flags_store+0x10/0x10 [ 241.425657][ T8158] ? find_held_lock+0x2b/0x80 [ 241.425689][ T8158] ? __pfx_flags_store+0x10/0x10 [ 241.425722][ T8158] dev_attr_store+0x58/0x80 [ 241.425758][ T8158] ? __pfx_dev_attr_store+0x10/0x10 [ 241.425791][ T8158] sysfs_kf_write+0xf2/0x150 [ 241.425823][ T8158] kernfs_fop_write_iter+0x3af/0x570 [ 241.425855][ T8158] ? __pfx_sysfs_kf_write+0x10/0x10 [ 241.425887][ T8158] vfs_write+0x7d3/0x11d0 [ 241.425918][ T8158] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 241.425943][ T8158] ? __pfx___mutex_lock+0x10/0x10 [ 241.425974][ T8158] ? __pfx_vfs_write+0x10/0x10 [ 241.426025][ T8158] ksys_write+0x12a/0x250 [ 241.426052][ T8158] ? __pfx_ksys_write+0x10/0x10 [ 241.426088][ T8158] do_syscall_64+0xcd/0xfa0 [ 241.426120][ T8158] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.426145][ T8158] RIP: 0033:0x7efdc1b8f749 [ 241.426164][ T8158] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 241.426187][ T8158] RSP: 002b:00007efdc2a48038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 241.426210][ T8158] RAX: ffffffffffffffda RBX: 00007efdc1de6090 RCX: 00007efdc1b8f749 [ 241.426227][ T8158] RDX: 0000000000000003 RSI: 0000200000000640 RDI: 0000000000000003 [ 241.426241][ T8158] RBP: 00007efdc2a48090 R08: 0000000000000000 R09: 0000000000000000 [ 241.426256][ T8158] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 241.426271][ T8158] R13: 00007efdc1de6128 R14: 00007efdc1de6090 R15: 00007ffd1d5f3558 [ 241.426309][ T8158] [ 242.829291][ T8179] netlink: 330 bytes leftover after parsing attributes in process `syz.1.483'. [ 244.842880][ T6397] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 244.852319][ T6397] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:0' [ 244.861733][ T6397] CPU: 0 UID: 0 PID: 6397 Comm: kworker/u11:2 Not tainted syzkaller #0 PREEMPT(full) [ 244.861768][ T6397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 244.861785][ T6397] Workqueue: hci0 hci_rx_work [ 244.861818][ T6397] Call Trace: [ 244.861828][ T6397] [ 244.861838][ T6397] dump_stack_lvl+0x16c/0x1f0 [ 244.861871][ T6397] sysfs_warn_dup+0x7f/0xa0 [ 244.861903][ T6397] sysfs_create_dir_ns+0x24b/0x2b0 [ 244.861935][ T6397] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 244.861964][ T6397] ? find_held_lock+0x2b/0x80 [ 244.861998][ T6397] ? do_raw_spin_unlock+0x172/0x230 [ 244.862024][ T6397] kobject_add_internal+0x2c4/0x9b0 [ 244.862065][ T6397] kobject_add+0x16e/0x240 [ 244.862096][ T6397] ? __pfx_kobject_add+0x10/0x10 [ 244.862131][ T6397] ? do_raw_spin_unlock+0x172/0x230 [ 244.862155][ T6397] ? kobject_put+0xab/0x5a0 [ 244.862197][ T6397] device_add+0x288/0x1aa0 [ 244.862222][ T6397] ? __pfx_dev_set_name+0x10/0x10 [ 244.862250][ T6397] ? __pfx_device_add+0x10/0x10 [ 244.862274][ T6397] ? mgmt_send_event_skb+0x2fb/0x460 [ 244.862313][ T6397] hci_conn_add_sysfs+0x17e/0x230 [ 244.862346][ T6397] le_conn_complete_evt+0x1260/0x2150 [ 244.862383][ T6397] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 244.862410][ T6397] ? bt_warn+0xe4/0x120 [ 244.862433][ T6397] ? __pfx_bt_warn+0x10/0x10 [ 244.862467][ T6397] hci_le_conn_complete_evt+0x23c/0x370 [ 244.862514][ T6397] hci_le_meta_evt+0x357/0x5e0 [ 244.862544][ T6397] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 244.862577][ T6397] hci_event_packet+0x685/0x11c0 [ 244.862605][ T6397] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 244.862636][ T6397] ? __pfx_hci_event_packet+0x10/0x10 [ 244.862666][ T6397] ? kcov_remote_start+0x3c9/0x6d0 [ 244.862690][ T6397] ? lockdep_hardirqs_on+0x7c/0x110 [ 244.862729][ T6397] hci_rx_work+0x2c5/0x16b0 [ 244.862760][ T6397] ? rcu_is_watching+0x12/0xc0 [ 244.862793][ T6397] process_one_work+0x9cf/0x1b70 [ 244.862846][ T6397] ? __pfx_process_one_work+0x10/0x10 [ 244.862895][ T6397] ? assign_work+0x1a0/0x250 [ 244.862934][ T6397] worker_thread+0x6c8/0xf10 [ 244.862969][ T6397] ? __kthread_parkme+0x19e/0x250 [ 244.863001][ T6397] ? __pfx_worker_thread+0x10/0x10 [ 244.863024][ T6397] kthread+0x3c5/0x780 [ 244.863060][ T6397] ? __pfx_kthread+0x10/0x10 [ 244.863099][ T6397] ? rcu_is_watching+0x12/0xc0 [ 244.863125][ T6397] ? __pfx_kthread+0x10/0x10 [ 244.863162][ T6397] ret_from_fork+0x675/0x7d0 [ 244.863196][ T6397] ? __pfx_kthread+0x10/0x10 [ 244.863230][ T6397] ret_from_fork_asm+0x1a/0x30 [ 244.863283][ T6397] [ 244.863318][ T6397] kobject: kobject_add_internal failed for hci0:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 245.171921][ T6397] Bluetooth: hci0: failed to register connection device [ 245.588179][ T30] audit: type=1800 audit(342.557:7): pid=8215 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.487" name="features" dev="configfs" ino=20543 res=0 errno=0 [ 246.544100][ T8234] netlink: 'syz.3.496': attribute type 1 has an invalid length. [ 246.606867][ T8234] netlink: 17 bytes leftover after parsing attributes in process `syz.3.496'. [ 247.016773][ T8227] FAULT_INJECTION: forcing a failure. [ 247.016773][ T8227] name failslab, interval 1, probability 0, space 0, times 0 [ 247.141597][ T8227] CPU: 0 UID: 0 PID: 8227 Comm: syz.1.495 Not tainted syzkaller #0 PREEMPT(full) [ 247.141635][ T8227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 247.141650][ T8227] Call Trace: [ 247.141659][ T8227] [ 247.141670][ T8227] dump_stack_lvl+0x16c/0x1f0 [ 247.141707][ T8227] should_fail_ex+0x512/0x640 [ 247.141746][ T8227] ? __kmalloc_noprof+0xca/0x880 [ 247.141790][ T8227] should_failslab+0xc2/0x120 [ 247.141825][ T8227] __kmalloc_noprof+0xdd/0x880 [ 247.141864][ T8227] ? vkms_crtc_atomic_check+0x3c5/0x880 [ 247.141899][ T8227] ? vkms_crtc_atomic_check+0x3c5/0x880 [ 247.141925][ T8227] vkms_crtc_atomic_check+0x3c5/0x880 [ 247.141962][ T8227] ? __pfx_vkms_crtc_atomic_check+0x10/0x10 [ 247.141988][ T8227] drm_atomic_helper_check_planes+0x4dd/0x900 [ 247.142039][ T8227] drm_atomic_helper_check+0xae/0x190 [ 247.142076][ T8227] vkms_atomic_check+0x1d9/0x250 [ 247.142112][ T8227] ? __pfx_vkms_atomic_check+0x10/0x10 [ 247.142149][ T8227] drm_atomic_check_only+0x19ca/0x3130 [ 247.142206][ T8227] drm_atomic_commit+0x136/0x300 [ 247.142241][ T8227] ? __pfx_drm_atomic_commit+0x10/0x10 [ 247.142275][ T8227] ? __pfx___drm_printfn_info+0x10/0x10 [ 247.142309][ T8227] ? drm_client_rotation+0x4da/0x6a0 [ 247.142351][ T8227] drm_client_modeset_commit_atomic+0x69d/0x7e0 [ 247.142402][ T8227] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 247.142441][ T8227] ? rcu_is_watching+0x12/0xc0 [ 247.142505][ T8227] drm_client_modeset_commit_locked+0x14d/0x580 [ 247.142549][ T8227] drm_client_modeset_commit+0x4f/0x80 [ 247.142587][ T8227] __drm_fb_helper_restore_fbdev_mode_unlocked+0x19f/0x200 [ 247.142630][ T8227] ? __pfx_drm_fbdev_client_restore+0x10/0x10 [ 247.142663][ T8227] drm_fbdev_client_restore+0x2c/0x40 [ 247.142692][ T8227] drm_client_dev_restore+0x1f6/0x2a0 [ 247.142737][ T8227] drm_release+0x2c4/0x360 [ 247.142774][ T8227] ? __pfx_drm_release+0x10/0x10 [ 247.142807][ T8227] __fput+0x402/0xb70 [ 247.142849][ T8227] task_work_run+0x150/0x240 [ 247.142889][ T8227] ? __pfx_task_work_run+0x10/0x10 [ 247.142927][ T8227] ? __pfx___do_sys_close_range+0x10/0x10 [ 247.142965][ T8227] exit_to_user_mode_loop+0xec/0x130 [ 247.143004][ T8227] do_syscall_64+0x426/0xfa0 [ 247.143046][ T8227] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.143072][ T8227] RIP: 0033:0x7efdc1b8f749 [ 247.143094][ T8227] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 247.143119][ T8227] RSP: 002b:00007efdc2a69038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 247.143144][ T8227] RAX: 0000000000000000 RBX: 00007efdc1de5fa0 RCX: 00007efdc1b8f749 [ 247.143160][ T8227] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 247.143176][ T8227] RBP: 00007efdc1c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 247.143190][ T8227] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 247.143206][ T8227] R13: 00007efdc1de6038 R14: 00007efdc1de5fa0 R15: 00007ffd1d5f3558 [ 247.143246][ T8227] [ 247.817398][ T6397] Bluetooth: hci0: command 0x0c1a tx timeout [ 247.872225][ T8240] BUG: kernel NULL pointer dereference, address: 0000000000000000 [ 247.880959][ T8240] #PF: supervisor instruction fetch in kernel mode [ 247.887822][ T8240] #PF: error_code(0x0010) - not-present page [ 247.893987][ T8240] PGD 800000007898b067 P4D 800000007898b067 PUD 0 [ 247.900616][ T8240] Oops: Oops: 0010 [#1] SMP KASAN PTI [ 247.906609][ T8240] CPU: 0 UID: 0 PID: 8240 Comm: syz.3.497 Not tainted syzkaller #0 PREEMPT(full) [ 247.916860][ T8240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 247.927003][ T8240] RIP: 0010:0x0 [ 247.930558][ T8240] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 247.939905][ T8240] RSP: 0018:ffffc90002f179a0 EFLAGS: 00010283 [ 247.947375][ T8240] RAX: 0000000000004149 RBX: 0000000000000000 RCX: ffffc9000caed000 [ 247.956075][ T8240] RDX: 0000000000080000 RSI: ffffea00014cd580 RDI: ffff8880283e3a40 [ 247.964564][ T8240] RBP: ffffea00014cd580 R08: 0000000000000007 R09: 0000000000000000 [ 247.972811][ T8240] R10: 0000000000000000 R11: 0000000000000001 R12: 1ffff920005e2f35 [ 247.981089][ T8240] R13: ffff8880283e3a40 R14: 0000000000000000 R15: dffffc0000000000 [ 247.989487][ T8240] FS: 00007fd6529516c0(0000) GS:ffff888124a0d000(0000) knlGS:0000000000000000 [ 247.999294][ T8240] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 248.008057][ T8240] CR2: ffffffffffffffd6 CR3: 0000000022b28000 CR4: 00000000003526f0 [ 248.017334][ T8240] Call Trace: [ 248.021926][ T8240] [ 248.024855][ T8240] filemap_read_folio+0xc8/0x2a0 [ 248.030320][ T8240] ? __pfx_filemap_read_folio+0x10/0x10 [ 248.037654][ T8240] ? __filemap_get_folio+0x32b/0xc30 [ 248.043461][ T8240] ? down_read+0x13d/0x480 [ 248.049370][ T8240] do_read_cache_folio+0x263/0x5c0 [ 248.055027][ T8240] freader_get_folio+0x337/0x930 [ 248.061657][ T8240] freader_fetch+0xc2/0x5e0 [ 248.066936][ T8240] ? query_matching_vma+0x345/0x7d0 [ 248.073688][ T8240] __build_id_parse.isra.0+0xec/0x7a0 [ 248.079671][ T8240] ? query_matching_vma+0x48e/0x7d0 [ 248.085828][ T8240] ? __pfx___build_id_parse.isra.0+0x10/0x10 [ 248.092163][ T8240] do_procmap_query+0xb0e/0x1080 [ 248.098491][ T8240] ? __pfx_do_procmap_query+0x10/0x10 [ 248.104034][ T8240] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 248.110187][ T8240] ? do_vfs_ioctl+0x128/0x14f0 [ 248.115020][ T8240] ? __fget_files+0x20e/0x3c0 [ 248.120068][ T8240] procfs_procmap_ioctl+0x9d/0xe0 [ 248.125539][ T8240] ? __pfx_procfs_procmap_ioctl+0x10/0x10 [ 248.131351][ T8240] __x64_sys_ioctl+0x18e/0x210 [ 248.136163][ T8240] do_syscall_64+0xcd/0xfa0 [ 248.141205][ T8240] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.147095][ T8240] RIP: 0033:0x7fd651b8f749 [ 248.151524][ T8240] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 248.171395][ T8240] RSP: 002b:00007fd652951038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 248.179921][ T8240] RAX: ffffffffffffffda RBX: 00007fd651de6090 RCX: 00007fd651b8f749 [ 248.189338][ T8240] RDX: 0000200000000080 RSI: 00000000c0686611 RDI: 0000000000000008 [ 248.197780][ T8240] RBP: 00007fd651c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 248.206027][ T8240] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 248.215056][ T8240] R13: 00007fd651de6128 R14: 00007fd651de6090 R15: 00007ffde7990d68 [ 248.223657][ T8240] [ 248.226684][ T8240] Modules linked in: [ 248.230768][ T8240] CR2: 0000000000000000 [ 248.235099][ T8240] ---[ end trace 0000000000000000 ]--- [ 248.240957][ T8240] RIP: 0010:0x0 [ 248.244609][ T8240] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 248.252077][ T8240] RSP: 0018:ffffc90002f179a0 EFLAGS: 00010283 [ 248.258415][ T8240] RAX: 0000000000004149 RBX: 0000000000000000 RCX: ffffc9000caed000 [ 248.266473][ T8240] RDX: 0000000000080000 RSI: ffffea00014cd580 RDI: ffff8880283e3a40 [ 248.275073][ T8240] RBP: ffffea00014cd580 R08: 0000000000000007 R09: 0000000000000000 [ 248.285229][ T8240] R10: 0000000000000000 R11: 0000000000000001 R12: 1ffff920005e2f35 [ 248.294038][ T8240] R13: ffff8880283e3a40 R14: 0000000000000000 R15: dffffc0000000000 [ 248.302448][ T8240] FS: 00007fd6529516c0(0000) GS:ffff888124a0d000(0000) knlGS:0000000000000000 [ 248.312029][ T8240] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 248.319574][ T8240] CR2: ffffffffffffffd6 CR3: 0000000022b28000 CR4: 00000000003526f0 [ 248.330335][ T8240] Kernel panic - not syncing: Fatal exception [ 248.336890][ T8240] Kernel Offset: disabled [ 248.342180][ T8240] Rebooting in 86400 seconds..