last executing test programs: 6.47803731s ago: executing program 2 (id=2828): msgctl$auto_IPC_INFO(0xfffffff7, 0x3, &(0x7f0000000600)={{0x81, 0x0, 0x0, 0x8215, 0xae5, 0x3ff, 0x4}, 0x0, &(0x7f00000005c0)=0xd9, 0x2, 0x3, 0x9, 0x7, 0x101, 0x3, 0xe, 0x2, @raw=0x2, @raw=0x2}) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) getegid() r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/dummy_hcd.7/usb8/bConfigurationValue\x00', 0x28f02, 0x0) write$auto(r0, &(0x7f00000000c0)='7\x7f\xb4\x86\x04|\x03\xcba\x00\x00\x00\x00\x00', 0x84) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) modify_ldt$auto(0x11, 0x0, 0x10) socket(0xa, 0x2, 0x0) setsockopt$auto(0x400000000000003, 0x29, 0x6, 0x0, 0x3) setreuid$auto(0x15, 0x5) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) r1 = socket(0x10, 0x2, 0xc) sendmsg$auto_NETDEV_CMD_NAPI_GET2(r1, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0xdc93f75efa074bf9}, 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x400c080}, 0xd0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0xc8841, 0x0) r2 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x1, 0x1, 0xa, 0x711, 0xb, 0x5, 0x1ffde, 0x3, 0x6, 0x2, 0x2, 0x5, 0x20000000003, 0x5, 0xb0, 0x7, 0x10000001, 0x3, 0x5, 0x8000000000000001, 0x2, 0x0, 0x42, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, [0x1, 0x20000400, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x8000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x7, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x8, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x1fe, 0x81) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x800}, 0x40000) bind$auto(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x1d, "ffffff0b000000000000000700"}, 0x13) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0xc20f0000, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x8) 5.828347678s ago: executing program 2 (id=2832): mmap$auto(0x0, 0x1, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder1\x00', 0x1, 0x0) ioctl$auto(0xffffffffffffffff, 0x4018620d, 0x9) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x55) r0 = socket(0x2, 0x3, 0xa) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x8) connect$auto(r0, 0x0, 0x59) write$auto(0x3, 0x0, 0x800) 5.608077886s ago: executing program 1 (id=2834): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x2, 0x2, 0x1) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000240)='/dev/video37\x00', 0x8a240, 0x0) mmap$auto(0x0, 0x40000c, 0x45bd, 0x9b72, 0x2, 0x8000) epoll_create$auto(0x4) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x2200, 0x0) openat$auto_tracing_mark_raw_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/trace_marker_raw\x00', 0x401, 0x0) write$auto(0x3, 0x0, 0x5c8) statmount$auto(0x0, &(0x7f0000000180)={0x770, 0xfffffffe, 0x8, 0x4, 0x4005, 0x0, 0x5, 0x400, 0x3, 0x9, 0x5, 0x6, 0x4, 0x11ffffffffffb, 0xb2, 0x2, 0x6, 0x10, 0x480, 0x7ff, 0x8000, 0x1, 0x1, 0x202, 0x9, 0xbca7, 0x4, 0x0, 0x0, 0x0, 0x694, [0x2, 0x6, 0x0, 0x5, 0x0, 0x0, 0x20000000000, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffc01, 0x7fffffff, 0xfffffffffffffffb, 0x0, 0x9, 0x1ffffff, 0xfffffffffffffffe, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8000000000000000, 0x0, 0x1, 0x0, 0x7fffffff, 0x0, 0x0, 0x20000000000000, 0x0, 0x1000000000000200, 0x14, 0x400, 0x96, 0x4000000000009, 0xff, 0xe17, 0x0, 0x6]}, 0x1fe, 0x1) openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) sendfile$auto(r0, r0, 0x0, 0x3) 5.542075171s ago: executing program 2 (id=2835): mmap$auto(0x0, 0x2020009, 0x100000005, 0xeb2, 0xfffffffffffffffa, 0x8000) mprotect$auto(0x0, 0x8, 0x2000006) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_BEARER_SET(r1, &(0x7f0000002040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001500)=ANY=[@ANYBLOB="180080009f8bc87a86582ac5fca2f200884f2cd6812fed4c27ec6e2f95c9ff94e01ce3937b95a1fe04d7feba3ea9b8e1c16bfefda01d9ba7bd696c7d57a7d275cfab93890583cc769c8dd53559be6e6e46841f5988d2934b91c4fb61df9e814e96a15aee3910e9c7ffbc723d6653032cd9bfe71114aa65b3113d036f19b972ba5095c08d947c32b955af4e151b23505ea1b7bf96135512c5bd5c49ce7d95f80b6df2ac592069dcf0", @ANYRES16=r2, @ANYBLOB="01002dbd7000fedbdf250500000004000180"], 0x18}, 0x1, 0x0, 0x0, 0x44}, 0x40044) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) mmap$auto(0x4000000000000000, 0x202000a, 0x1, 0xeb1, 0xfffffffffffffffa, 0xf344) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getrlimit$auto(0x8, 0x0) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) ioctl$auto_BLKZEROOUT(r3, 0x127f, 0x0) ioctl$auto_BCH_IOCTL_DISK_RESIZE(0xffffffffffffffff, 0x4018bc0e, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2600, 0x0) newfstatat$auto(0xffffffffffffffff, &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x784a) r4 = socket(0xa, 0x5, 0x84) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000240), r4) syz_clone3(&(0x7f0000001480)={0x114880500, &(0x7f0000000280), &(0x7f00000002c0)=0x0, &(0x7f0000000340), {0x32}, &(0x7f0000000380)=""/4096, 0x1000, &(0x7f0000001380)=""/166, &(0x7f0000001440)=[0x0], 0x1}, 0x58) r6 = setfsuid$auto(0xee00) r7 = setfsuid$auto(0xee01) setresuid$auto(r6, r7, r6) sendmsg$auto_NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000001940)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001900)={&(0x7f0000001980)=ANY=[@ANYBLOB="fc030000", @ANYRES16=r5, @ANYBLOB="00012cbd7000fbdbdf2577000000a80384805400b2801b4f7be518a928f33b85d797ca888ade170257c2fad282e1541ddbbcbfe961dbd374a4f9bcde49cef734b7ba0400248004009d800400448014004e00fe8000000000000000000000000000350400b680140042000000000000000000000000000000000129614d2fa2289208d7f560bae0d943c0c564b47f2cc257b46731d6549caabd64c3df9e0150f0574e6b96a6656be6ecf63994760de7b4a1ec56aa352b920986bd69c8c5005c728d5daffd46c93ba95b9c97fb45263ab3d40ecaa2f4a6a962b0ae0192a0ccee00a38008008700", @ANYRES32=r5, @ANYBLOB="19002e00cda37b9693e923d4f6a043e2dc85bb09f9690a16850000001400ab00fc00000000000000000000000000000004004a800c00c6006b000000000000000400258070cd3bd0bfdd381ed991c70f78c7a5a65bfc0b4d4ffb9f71f779e7ee0daa1b657937adfbc077699783df4430727f4c63c46cbb8f9d856676c5dbb4ea582aee4ca63ff8da7cd93289d36180c1761722a0b36cf75aafc486bb599fae1780d8577e1470afa7185e22ddb05f13192fbcb8639418461cf88e556bc7fd3a347fd8b0801c3cfc89bd5febf7b7402300186fca5643d0bdd6fa06eb2b14d9190d7f0100003801218004002e00ea6825fe97e0e53dc78370ffdacd5e32576bd3b3225d459c5c6252298e66813e1da827ad47a45b9633b766c696801f0e61b5c3f2aeebbe9cd1641529b4c36d4fbf937b96131d73a9bff45bf69993b0e4cad130eb20accca5f79b0678b401f06b785c27bd23a13456c11e98532a844925f266dc13e72154fc2b1639df8a34c18339161f698543ffcf17b5696515d5dbee3d0219fa5381547d3458955db3764a9908000c00b558b20273ac1830caa6b033e4efa1a471943bc4993443bc00416f1a3c8812ad3f952e38222e4520685328a857b0e02900abe0fcfa1cd20039906cbb31510e70e60a181be4a7d73ae8bb39d3bfe78279971426fdbf8a9edf90cc2023519bdcedc7339f95c56e6dd82141ddacb98942639ca3fbca92e7f239b67ef9a7e1", @ANYRES32=r7, @ANYBLOB='\b\x00.\x00', @ANYRES32, @ANYBLOB="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"], 0x3fc}, 0x1, 0x0, 0x0, 0x20000100}, 0x4041) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r8 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/block/loop15/queue/max_integrity_segments\x00', 0x440, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r8, &(0x7f0000000040)=""/195, 0xc3) ioctl$auto(0x3, 0x541b, 0xfffffffffffff4e0) 4.068545951s ago: executing program 1 (id=2839): r0 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x38, r0, 0x8000) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_SMC_NETLINK_REMOVE_UEID(0xffffffffffffffff, 0x0, 0x20000000) socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) r1 = prctl$auto(0x16, 0x2, 0x2, 0x4000000d, 0x100) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/adsp1\x00', 0x1, 0x0) ioctl$auto_SNDCTL_DSP_GETODELAY(r2, 0x80045017, &(0x7f0000000c00)) mq_open$auto(&(0x7f0000000280)='\\*)A\x00', 0x7e, 0x9, 0x0) mmap$auto(0x0, 0x2020006, 0x5, 0xeb1, r1, 0x8000) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x2a, 0x2, 0x1) openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x882, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0x10002}, 0x1) close_range$auto(0x2, 0x8, 0x0) pread64$auto(0xffffffffffffffff, 0x0, 0x1ffffffffffe, 0xd59f) r3 = socket(0x2b, 0x1, 0x1) socketpair$auto(0xfffffffe, 0x1, 0x8000000000000000, 0x0) ioctl$auto(r3, 0x89a0, 0x4) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x40000008000) sendmsg$auto_NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x2404c800) kexec_load$auto(0x5, 0x2, &(0x7f0000000040)={@kbuf=0x0, 0x800c000, 0x4800c000, 0x800c000}, 0x4) io_uring_setup$auto(0x6, 0x0) 3.967001647s ago: executing program 3 (id=2840): mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x8000000000000003, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) utime$auto(&(0x7f0000000040)='}[,&*}\x00', 0x0) socket(0x22, 0x6, 0x0) mmap$auto(0x8, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/oom_adj\x00', 0x300, 0x0) read$auto(r0, 0x0, 0x1f40) ioperm$auto(0xefdd, 0x4, 0xfffffffa) semget$auto(0x80000000, 0x13c, 0x3ff) unshare$auto(0x40000080) semctl$auto_SETVAL(0x0, 0x7, 0x10, 0xfff) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x7fffffff) mmap$auto(0x0, 0x7f, 0x1, 0xeb1, 0x401, 0x8000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/midiC2D0\x00', 0x80102, 0x0) sendmsg$auto_GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002dbd7000fbdbdf250200000008000700", @ANYBLOB="0800080004000000"], 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x0) r1 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x8) 2.616900935s ago: executing program 3 (id=2842): mmap$auto(0x0, 0x1, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$auto(0xffffffffffffffff, 0x4018620d, 0x9) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x55) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x8) connect$auto(0xffffffffffffffff, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @loopback, 0x1}, 0x59) write$auto(0x3, 0x0, 0x800) 2.544726365s ago: executing program 2 (id=2844): mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x8000000000000003, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) utime$auto(&(0x7f0000000040)='}[,&*}\x00', 0x0) socket(0x22, 0x6, 0x0) mmap$auto(0x8, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/oom_adj\x00', 0x300, 0x0) read$auto(r0, 0x0, 0x1f40) ioperm$auto(0xefdd, 0x4, 0xfffffffa) semget$auto(0x80000000, 0x13c, 0x3ff) unshare$auto(0x40000080) semctl$auto_SETVAL(0x0, 0x7, 0x10, 0xfff) 2.187437496s ago: executing program 0 (id=2845): r0 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000580), 0xffffffffffffffff) mremap$auto(0x0, 0xbdb2, 0xffffffff00000000, 0x3, 0x7fffffffb000) mmap$auto(0x0, 0x20009, 0xffffffffffffffff, 0xeb1, 0x401, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x82002, 0x0) write$auto_ocfs2_control_fops_stack_user(r1, &(0x7f0000003900)="fb", 0x1) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/vhci_hcd.5/usb19/ep_00/power/runtime_active_time\x00', 0x40000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000003940)=""/4119, 0x1017) r3 = socket(0x11, 0xa, 0x300) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r4 = fsmount$auto(r3, 0x0, 0x6) r5 = socket(0x11, 0x80003, 0x300) name_to_handle_at$auto(0xffffffffffffffff, &(0x7f00000001c0)='/\x00', &(0x7f0000000200)={0x0, 0x200}, 0x0, 0x1001) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x6) r6 = fanotify_init$auto(0x205, 0x0) fanotify_mark$auto(r6, 0x209, 0xa, r6, 0x0) linkat$auto(r6, &(0x7f0000000140)='./cgroup.cpu/cpuset.cpus/file0\x00', 0xffffffffffffffff, &(0x7f0000000240)='./cgroup.cpu/cpuset.cpus\x00', 0x4) sendmmsg$auto(r4, &(0x7f00000001c0)={{0x0, 0x5ac, &(0x7f0000000100)={&(0x7f0000000200)="6c0c5833b1dcff", 0x49}, 0x2000000000000005, 0x0, 0x5, 0xe}, 0x5}, 0x2, 0xfe) setsockopt$auto(r5, 0x107, 0x12, 0x0, 0x4) r7 = socket(0x11, 0x3, 0x9) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) sendmmsg$auto(r7, &(0x7f00000006c0)={{&(0x7f0000000180), 0x5ae, &(0x7f0000000100)={&(0x7f0000000200)="4c0300", 0x49}, 0x5, 0x0, 0x5, 0x1}, 0x5}, 0x2, 0x100) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001080)='/sys/module/i915/parameters/mitigations\x00', 0x88302, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000300)='/dev/dri/card1\x00', 0x48000, 0x0) ioctl$auto(r1, 0x1000029, r7) r8 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x4101, 0x0) ioctl$auto(r8, 0x40045566, r8) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NFSD_CMD_POOL_MODE_SET(r9, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000007936950d98b22950c25be8f0373efef8081b28e62b6c76ba3fabf1a1f6055eef912559b7184382687ee987e6087b2ea1210922c541adddca93284ed25eda44ca6434d1c65ef96718ca59c858263688a8eed41aac3b935319426362bd2e", @ANYRES16=r0, @ANYBLOB="01481cbd7000ecdbdf2508000000"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4054) 1.883228945s ago: executing program 3 (id=2846): preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x7fffffff, 0x3ef) 1.796430813s ago: executing program 3 (id=2847): r0 = socket(0x1d, 0x3, 0x11) pwritev$auto(r0, &(0x7f0000000040)={&(0x7f00000001c0)="af9afb48af3333918eeed3a47a0bb4f7c065fa76df29031961ffdfdb6fefa31d1dd8179cf8f28571de34346c4d4a1a8ac05c74321c27288ea5af0d6d2e85f52f788cef67e165009c23db3a1b31eaa1a749e4219bbf30e0b9777655db32c01b08509e472c77a1b3c8115cc283f9feab2d8bc64b35e628449ebfc364d983ee420d311351789be96102557bcf", 0x2}, 0xa7, 0x4, 0x3) setsockopt$auto(r0, 0x65, 0x3, 0x0, 0x0) r1 = socket(0xa, 0x2, 0x3a) setsockopt$auto(r1, 0x29, 0x18, 0x0, 0x1ff) close_range$auto(0x2, 0x8, 0x0) open(&(0x7f00000002c0)='./file0\x00', 0x22240, 0x3d4) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x80, 0x0) mmap$auto(0x0, 0x20009, 0x4285, 0xeb1, 0x401, 0x8000) close_range$auto(0xffffffffffffffff, 0x8, 0x2) move_pages$auto(0x1, 0x20007, 0x0, 0x0, 0x0, 0x8000000000000000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000180)={{0x0, 0x1, &(0x7f0000000100)={0x0, 0xfc2}, 0x9, 0x0, 0x4000000000007, 0xa505}, 0x800}, 0x4, 0x4008) setsockopt$auto(0xffffffffffffffff, 0x0, 0xc, 0x0, 0x7ffffffd) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) execve$auto(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x22240, 0x18) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x2964c0, 0x0) execve$auto(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) execve$auto(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)=&(0x7f0000000300)='#\xdc\xfe\xd8E\xc8\x8bu4\xd9n\xcb\xca\xc7zw \x96\x9ejh\xad\x9eEc\xae\x1e\x89\x92\x9a\xbbP[B\xae\x9cf)\x15\xac\x90)l\x06\xf0\t\x12\x05zz\xa6\xb3\xce=\x00\x00\x00\xf20/\xc4T\x1f\xe5P\xff\xb4\xb7s0\x02\xc5\x81\x93\xc6\xc8\xb6Sp\x1a{8\xfc\xe0,X\xc7BU\xd0\x97\x7f1\x16\x99\x04\xabu/a0\x02\x7f\xbb\xbd\x906\xa8\xce\xee\xcd\xd7\t\x00\xfb\x83\xc8\x8aO\xe9\xbe=\xf7\xf4\x84,\x06\xd3j\x99b\xe6\xf6Y3A\xbb\xa4\xb2\f\x1b\xc3\x8a,g\xc6\xe8[\xdf\x88\x01\x9f7\xb5\x19m\xd8\xc0\f-6\xfe\xa8\xed/u\x81_G\xfeR\xbb\x12|\x97\xabB4J\xed+-\xf8u0/n\xcf\x8b\x95\x9d\xab\xa8\xc47\xa6\x0e\xdeOq\\\xc3\'{\b\xd3m\x94\xc2\xdd{\xeaO\x0e\xe4\xe0\xb9N:\xd60\x17,\x06\xc7B#Y0\x99\xeb\x02\xfe\xd3k\xd5\xdcZ\xdcP\x8e+\xd8\xc7C\xcb\x15\x13c\xbf\xe8\xbd\"\x8f3\"\x14\xf8(\xda\x19\xcd\xec\x03.\xd9^\xc3A\xda\r[\x1a\xda\\#/\xd4\xaf\xd0\xe8\xa2\xdd\xc5{\xfa\xe0\x90\x8f\x99lQ\xec\x84h^\x11+\x93\b\xe0c\xe6\xd22\xf9\xa5\x94\xd0\xf5\xe7\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00') ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$auto_TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sysfs$auto(0x2, 0xc, 0x0) socket(0x25, 0x1, 0x0) r3 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000140), 0x180b03, 0x0) ioctl$auto_SNAPSHOT_ALLOC_SWAP_PAGE(r3, 0x80083314, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) 1.794910931s ago: executing program 0 (id=2855): bpf$auto(0x9, 0x0, 0x9) socket(0x2, 0x80000, 0xfffffffc) mmap$auto(0x1, 0x20009, 0xe2, 0xeb1, 0xffffffffffffffff, 0x8000) getcwd$auto(0x0, 0xffffffffffffffff) setsockopt$auto(0x3, 0x10000000084, 0x2, 0x0, 0x8) shutdown$auto(0x200000003, 0x2) unshare$auto(0x40000080) connect$auto(0x3, &(0x7f00000018c0)=@in={0x2, 0x300, @loopback=0xac14140a}, 0x55) mmap$auto(0x0, 0x400008, 0xdf, 0xf1, 0x2, 0x8000) remap_file_pages$auto(0x5, 0x9, 0x0, 0x8, 0x10007) semctl$auto_SETVAL(0xb134, 0x9, 0x10, 0xcc) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x311200, 0x0) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x7fffffff, 0x3ef) 1.411324807s ago: executing program 0 (id=2848): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000140), 0x8040, 0x0) io_uring_setup$auto(0xc, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r0, 0x403c6f2b, 0x0) read$auto(0x3, 0x0, 0x80) io_uring_setup$auto(0x6, 0x0) readv$auto(0x3, 0x0, 0x1) r1 = openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f00000002c0), 0x20001, 0x0) writev$auto(r1, &(0x7f0000001c80)={0x0, 0x101}, 0x6) close_range$auto(0x2, 0x8, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000040)='\xdb\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x8) fsmount$auto(0xffffffffffffffff, 0x400, 0x1) 1.331359414s ago: executing program 1 (id=2849): r0 = pidfd_open$auto(0x1, 0x0) setns(r0, 0x20000) 1.152348314s ago: executing program 2 (id=2850): mmap$auto(0x0, 0x20004, 0x4000001ff, 0x17, 0x8000000000000024, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/graphics/fbcon/cursor_blink\x00', 0xa001, 0x0) write$auto(r0, &(0x7f0000000100)='7\x81=\f\xad\xff\x8d\xf9P\x18\xa4\xb0\xb4\xfe\x82=\xe1P\x05@\xfb&\xe8\xbf\x90\xad{\xd1\xb5x\x05V*\x8a1\a2\xa2X`\a\xf1x\xb3\"=\xdb\xa1rg| \xe0\xfd\xf4\xaa\xcb\xbaKC\x8f:\xc8iO\xb6&\xfezf\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) close_range$auto(0x0, 0xfffffffffffff001, 0x2) socket(0x11, 0x80003, 0x300) socket(0x28, 0x80000, 0xfffffffc) open(&(0x7f0000000040)='\x00', 0x80, 0xbff5cba6847b42d2) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram0\x00', 0x0, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1, 0x800, 0x5) 1.107271928s ago: executing program 1 (id=2851): socket(0x18, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) 1.071588471s ago: executing program 0 (id=2852): r0 = openat$auto_trace_clock_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/trace_clock\x00', 0xa82, 0x0) shmctl$auto_SHM_LOCK(0xb464, 0xb, &(0x7f0000000240)={{0x3, 0xffffffffffffffff, 0x0, 0x9, 0x2, 0x659de2ff, 0x4}, 0x80000001, 0x5, 0x2, 0x8, @raw=0xcd7, @inferred=0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000040)="846598ffebca4e797d1d1c4291bd2e397e4263587cb896aed1c2a9cf3e385e91160c6d96f0b6102d4376257d0c96050f28b07ea89dce64a84ae6b90f4bdae8a0bba33924962823891d67e9626d8465c82245f3b30d465b1f270f91a570027be5e78b4f2062e3fa33e1915ec60a6069ad76f1df3aa4734ecd9941ec98a14ad70ea7321ccdbf5e3efd660b963b01527ceba3d3aae5b29e6d41de103fb8de7b24dc767104db417cf57155389dc8bfc8ec1ec3097897d4343dd2b38e5e29d30c30118c8fdc8cd2bd014cfc881ed0e21195", &(0x7f0000000140)="565872b1982b35682d3181abb130b700b2c41c4de78ea608c917eb8de9f882ffc63712ab5cf2659a2e7bc963521af7d7d15ac0e33f6301b4afe1ef8cbb93db91db7bf07858b60b59b746b7da07497fec50e861bb9f046f0492e38a29a4bcf313132302573b1fdef9882483002abdf245381b44cec1f28f65eb615bbd0ae583670ef0c58d294b788e7840dce83c336c6184d93edd0923e625d69504bb0c7c7b7239d2237c4fd878e4e418c1f612c2f86941a83b664131d3679bdef2d31e5b3cb79b4f08520e97b9c33a3cf71640a2cd49b569"}) shmctl$auto(0x4, 0xe0ec, &(0x7f0000000400)={{0x80000000, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x5, 0x7fff, 0x200}, 0x3, 0x5, 0x3583, 0x7, @inferred=0xffffffffffffffff, @raw=0x3, 0x6, 0x0, &(0x7f00000002c0)="7045e2501789e281fb817b007d890918e5473c98a55585cef273f19aa79a6f77b4108860ade49f0780ca3b1754607f9181ff32b76d2387dd6f7db0a3e4a6d0f9aaf50e13ff299135211008ec7dbab5c63a12b8ddf85fb2821b9e7a3d4e9aecfb9c3e4449f638c3a9d96ae8ff0edc8fdca3c895aabbd29a1775b1aec5dc56f773b8f5a9cea6d33c1a9e9388e0cfc2d98d7c1cef09622558fc21eba9e7e9460acbea7cba21ab2acdbcbe17e0f0c0e5317598b421ad9da97b7c08c5133c68762f03916b9c3ea4e88bbdee9df32b3bcfd1e499cf09951e0f8e08ae", &(0x7f00000003c0)="c30f3e9bbc1e47c4100d07633027b86b2be926aba8d260e0960926b98daacfa2b8ce0a67f72b6644eb064399ad1fba7abbd996120a4ac67d7f18d651cea0be"}) fstat$auto(r0, &(0x7f0000000480)={0x100000001, 0x8b0d, 0xc, 0x2, r1, r3, 0x0, 0x0, 0x5, 0xaa, 0x9, 0x2, 0x9, 0x5, 0xfd72, 0x8000000000000001, 0x6}) r7 = epoll_create1$auto(0x5914) write$auto_bm_status_operations_binfmt_misc(r7, &(0x7f0000000540), 0x0) ioctl$auto_XFS_IOC_ATTRMULTI_BY_HANDLE(r7, 0x4048587b, &(0x7f0000000880)={{r7, &(0x7f0000000580)="856a4664ef863546e7fc80dc6295d9e3966101972797f5fbe3bc878c59cf78f90db1a6abe227fef96b76a5138d634f15ef6623c42cb808fc5a50671b7d6834b23f2526d1b54d0f7cee262d628986e5aee96a49ec7b46", 0x48, &(0x7f0000000600)="083961d7c54eb81eaa5c7db42156152151001877e8ff767fcc9085e2a302e026bf6dde54bb333c344261959b1d8d20665c5bf4850ba1777cab84d765bc74484c4f15fbd4e8a9c3fc0082811d82aeb7d8111c8393241b05a26aca0e0d3cb31a9273eeef9b6a1b914f5146c27ebd0d414f2205b83d785c13ef81df73389281c25a18c24c6d850ad40bffa48203d5aee00e0d0c332054c90841fcf0686de68a2c29a4406c8d176f6ca88e6085b19b0ad88a7421c0829ac46f18b74519b4ee00ea7349604705e63ef791a0f1f1cf87b5eb049909169e246698ed380b24549d7340e66ab46aa3715f19b3a43b9f9a5e5440120d1d2825", 0x6d7, &(0x7f0000000700)="239d5b609730264372ba37489285e8057f7a929bc141a78827469bc64b871746ae11433caa00612e09416a494aa68dcdcf9ce4d6", &(0x7f0000000740)=0x46e}, 0x1, &(0x7f0000000840)={0x0, 0x6, &(0x7f0000000780)="21160aa5ff063aed092610b77aa795d08b163b913cc087", &(0x7f00000007c0)="a262b7c2c0b28f1f1a43174bba2c5a1a8590c63921b2265987e3c6cffaf1a8700c82c30b1ae7245f3ed61a7079d23d08471b1cdf56c5", 0x48, 0x6}}) readahead$auto(r0, 0x3, 0x4) r9 = ioctl$auto_KVM_CREATE_VM(r7, 0xae01, 0x0) mmap$auto(0x0, 0x100000000, 0x4, 0x8011, r8, 0x1ff) r10 = openat$auto_hwsim_fops_rx_rssi_(0xffffffffffffff9c, &(0x7f0000000900)='/sys/kernel/debug/ieee80211/phy15/hwsim/rx_rssi\x00', 0x2, 0x0) pread64$auto(r10, &(0x7f0000000940)='\x00', 0x7fffffff, 0x6) close_range$auto(r9, r0, 0x100) ioctl$auto_XFS_IOC_ALLOCSP64(r8, 0x40305824, &(0x7f0000000980)={0xfffe, 0xc, 0xfffffffffffffffa, 0x65, 0x4, r4}) shmctl$auto_IPC_RMID(0x8379, 0x0, &(0x7f0000000b80)={{0xffff, 0x0, r6, 0x0, 0x1, 0x0, 0x2}, 0xc9, 0x7, 0x0, 0x4b7, @inferred=r4, @inferred=r11, 0x6, 0x0, &(0x7f00000009c0)="a4b0d48512cc335fbb43be48f1193ba202b64af260cff9bfae5545e119232ebdb739237a2212ec05bbb01f8f3ffa53d905feaf61ec64552615c79a24ccfab45786c6ad23d581f0da341fa58f7a30827a34e32622c94dcceb3cae0e4cc8ca35a6c3d0ab6cbcb958fafe5184d49ad12a63b3611df257687cc2496d4f50d95f8ec357d4c9bd17829ee265d2bcbcbf2cd66509d2546000786b4dd1ce45cddb413c550fba64080f9f052f33ccca8c622524c40e19f05c07171d0a919f1fee3a6cf6494258d9e42ca200dd6b579c0f71eb4f9a9bf41c62f6cb6aa01f72505a4ccd9dec2200f1", &(0x7f0000000ac0)="056896b6b37391011dfa860bef44b944991f6536e2fd0c86b1085785d28d5c578e9bb7dc2cb2aeededee1e35ed940c59287a021dfa8009a3a95abd46cd95ad8d2a13443e1c7e03cb4a88459b00f37414bb5d113e742ba9271fb218db1820dbbfa15d6e31e4797a911cb77432c75dd2a1181893dba6f4bb0ff685aa94d0082ced9106a0ce76ebb807c46189eed1b8a085fbac069e0fa0b43b44a751b936c0fa10f83988623aa6822d0fa6906c9c"}) r13 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x26, 0xa, 0x6) shmctl$auto_SHM_STAT(0x7, 0xd, &(0x7f0000000d40)={{0x42d, r5, r2, 0x8001, 0x9, 0x100, 0xa4}, 0x8001, 0x4e7d, 0x2, 0x7, @inferred=r11, @inferred=r11, 0x2, 0x0, &(0x7f0000000c00)="0462c21fdaccf81b5d1080b251b6c1719a5b6fe97c55ac176cc01bff7ed34f37dc7cb8b0a44d460f406206032619ba198e6eece5231d638b6f6e943ce3ba9b74ff859ffd82a55066c70e794901db5274c06748b8d9290500d35c5124970df6b2f93cf58731d825ac3f5ce5b08f0fe7c47b9bad68f4cb8c8ab75d262d4e9b071549a6011b232550370e01228606a13785966c3e8f72c06bab97142542ca2e5847ad138724c1af8c4ad959fcc1d179b3772dd2d35cbfb5f88201e3c8c44927c7759de8157f7e600d87c2b9b2a0b1ed1bf195e9f1b8edd40b53493fbff69ce998e9", &(0x7f0000000d00)="768b59"}) r17 = bpf$auto(0x8, &(0x7f0000000dc0)=@token_create={0x8, r13}, 0x401) recvfrom$auto(r8, &(0x7f0000000e80)="94eb8973735719235c3ba64c7ccdd687b4ac90243c065b0d8e77d2df47c04c36df11764c4b703c5adc6d4ffe5153aea5f71579952737b49f995d319e68b782f1a6", 0xaca6, 0xfffffff7, &(0x7f0000000f00)=@generic={0xf, "93f655dcc532518002f057d12e3a"}, &(0x7f0000000f40)=0x9) io_cancel$auto(0x11f, &(0x7f0000000f80)={0x1, 0x1, 0x6, 0x68d, 0x10, 0xffffffffffffffff, 0x80000001, 0x0, 0x3ff, 0x0, 0xfffffffe, r8}, &(0x7f0000000fc0)={0x1ff, 0xfa8b, 0x1, 0x1}) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000001000)='/dev/snd/pcmC0D0c\x00', 0x270842, 0x0) r19 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000001080), r17) r20 = getpgrp(r11) sendmsg$auto_TIPC_NL_NODE_GET(r18, &(0x7f00000050c0)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000005080)={&(0x7f00000010c0)={0x3efc, r19, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_UNSPEC={0x55, 0x0, "a794b50a2318583580729a197087676d54c9744c73dfe0c457fc789b9e5ea98d194e397be45104fb3217ac4f8bdf58f3184a70068ea532f853f592fc9e568be2b960629b03e0d1327149be401ef0d6a47d"}, @TIPC_NLA_SOCK={0x183, 0x2, 0x0, 0x1, [@nested={0x8, 0x15, 0x0, 0x1, [@nested={0x4, 0xb1}]}, @generic="41c747498ebb1e89e777520c7e5642810cc56714ace08f975227f48d1e19e7c91668", @typed={0x16, 0x17, 0x0, 0x0, @str='/dev/snd/pcmC0D0c\x00'}, @generic="8acf6802aecd40047f9ab516c77242fcc9c6684833abf9f95a64932dc190f8f19e6ace15f93e5aea24b010dcd1863914c334d0d4d832823b39cc300859da8127bb1d17ef9492ea35ea5041a75640c210400cfaedb3331d67", @typed={0x8, 0x73, 0x0, 0x0, @uid=r12}, @generic="6f422b770bffa1b15732c295f2f43edfda6953242763c6628254338511c2e3d159413b1452cb4b326dcd4135f1aec6297c47a82f7ac8e8156ef113d5c019f2be809d52943d2215b9cc6f3b77eeff2c29743bb17117c6b52213833b279a2775c2859caac37a207716b53f97f97c1a", @generic="32f64a81d63f93a075ab1f463e17e7179d3761c58cdd46fd5d2372fdd56bae4dfe68350bbb52d0a6d04c4d62a0df746c5dd5ffa3b6be39c8d9d4e86925c3776ca82ecfac91b7485d5c605df20cca22a941d0123c350f02a252c062d7e854561e78a4c1ac5b794f", @typed={0x8, 0xa5, 0x0, 0x0, @uid=0xee01}]}, @TIPC_NLA_NODE={0x1139, 0x6, 0x0, 0x1, [@generic="1fe10b56fc64f11546dc630ade9820e5a60a548398b5b1da56b073d08e", @nested={0x103f, 0x87, 0x0, 0x1, [@generic="d4f334588d0a49aba8096146020785a34498e3b896fa17d2ecaeb529f37cb8728b00cf49ae0f00023eda1180225c9e1f910a6b0a408c8c", @nested={0x4, 0x92}, @generic="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"]}, @nested={0x85, 0x18, 0x0, 0x1, [@typed={0x2a, 0xeb, 0x0, 0x0, @str='/sys/kernel/debug/tracing/trace_clock\x00'}, @nested={0x4, 0xe9}, @generic="1d0d1498c49e51c57d7a6055f2c5db47fc75f4f86668b25cac5f56e21227f521e63a82a1db64000b82ea161505d3701c2c", @typed={0x8, 0x135, 0x0, 0x0, @uid=r12}, @nested={0x4, 0x88}, @typed={0x8, 0x23, 0x0, 0x0, @u32=0x7f6}, @typed={0x8, 0x103, 0x0, 0x0, @u32=0x7ff}, @typed={0x4, 0xca}]}, @nested={0x4f, 0x10, 0x0, 0x1, [@nested={0x4, 0x86}, @nested={0x4, 0xb8}, @nested={0x4, 0x47}, @generic="8a22e5be199cb4d0ad6d21f89260089f6cb1e34b80c524b8e1132f67c7a890aa7d315a909961fef37b268208d2", @generic="004d86d3e8747ece1ba7d7aa1a055b973b83"]}]}, @TIPC_NLA_MON={0x164, 0x9, 0x0, 0x1, [@generic="7ab2d8c3e3900e1373d16a4a44356c8b44dd7d0eaea798070d04f379a2725d4c6f134b1ca68fe5b366b7aabb97699d7ee4cf311e8fb1b5962f368432f92ddc926b93c72220c1587ab1aa769dbaca08f37c3e675c3b8371d7dbd2de308339c2a5d8c6c378797ea6c28ed2e370593c965f006b8a0369678c5119727117f0b487d8a95814f8833665185632e7ff37b495a889d6cb00f2a36ead729174d17373b4087063", @typed={0xc, 0x7e, 0x0, 0x0, @u64=0x10}, @generic="a4f9a997f0fafbcb99925987abb19a01ff401e175a366f4da917d62e05a08ec709ddf7022e93b7faa0ff4dfc2b348323aee2d3514ffb96958e27862c5c7f636e8fd490bce264a09da807464bc42e2bad343ed0ad644e1ea0ecb2555446759f35f475f7a0b549beb0f7339e6bb6df0b039d93d40098d8d9f85db3dd9ddcff2c758a1ba9ae0d591e565b99b097eb37c5ad620c238e134b69e008d8ca8d8a33e251f37588c6433b3b0b8f856ddd94592216ca6e"]}, @TIPC_NLA_NAME_TABLE={0xa8, 0x8, 0x0, 0x1, [@typed={0xa3, 0xd0, 0x0, 0x0, @binary="8dfd1174bfd45948194917808fd7d984b9a1bb13994fed1218b53f28e8a3a61551bf346a323ae75ab300b78d5cb4fa48adfd29ab3bbb104ad0d2cec316e22629df17dd48194aec744324383b72ef2ae0fbb3b288d25adb8b911ae7376473a146eaeb44d3d170df8a4e880f4e2bbb9b313103db0648c70b0e22d26a327673aa8d1e6175f90fde965edde44e21bb8947a7f76698a50621577f9ba173d5e614ea"}]}, @TIPC_NLA_NODE={0x1008, 0x6, 0x0, 0x1, [@typed={0x4, 0x9f}, @generic="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"]}, @TIPC_NLA_SOCK={0x1cc, 0x2, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @pid=r20}, @typed={0x8, 0x8d, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @typed={0x8, 0x12c, 0x0, 0x0, @u32=0x7}, @nested={0x1b0, 0xad, 0x0, 0x1, [@generic="9ae29cab6dd560c839a0965de277d7e3571e5e6949394bfd9457c52b44c75002c8666a1f09d8a160b0fde9dfbae53ab972e175c0d3ea05998840b61fe513eed4836f640937b2a6e5206c32a41e3e23ae5c7a3d9ac0e44b97fe28b1211f2bc311da82ad0e583aefbc5ab631aa880527819dd45e71b161eeb7b9abce72721b5df1958c0ca8ab2f970a9ccc8447939054c4f1d5c76ce22514dce90a3cd0599da106dad991e0fcb4f085a9bbc80ba5adb187bc0df141d15bbbe0ddb245d54f61bd58b4b91415087397004456fe", @nested={0x4, 0x8f}, @typed={0x8, 0xf2, 0x0, 0x0, @pid=r15}, @typed={0x8, 0x118, 0x0, 0x0, @uid=r5}, @generic="3ba9a524a1a420a26f2fa6e55fec518aac8e7ac071923634405599b5e65950c69b4ae17f4b01997cf6a7813ba1cf519286a670bd79a1d23dd8bbe59c5314a2831dbf18aa5a03d6a8bb5c990e943ea549f63408bee22afb780e40b4fb88fe4710534bad3ce4375b1428db8679e036e228940ea7dbe8d6d819ff129e3f01c5d38077fe3f817c799242609b87", @generic="7ab07a38154a1424a406a84a4688bdfaac14c6f393191cca5af380b3bf70ac10a1975ea068ba3392b4e2871b4705ffa5ac5be072d3aa", @typed={0x8, 0xee, 0x0, 0x0, @pid=r16}, @nested={0x4, 0x1d}]}]}, @TIPC_NLA_PUBL={0x153e, 0x3, 0x0, 0x1, [@generic="ef423469a500df984d9e22d4fccbbe983a838f4dc256dca7c33dd4eaa4d65be88005ac28fd8bdf1bdb992c9086a63eabb0f54f7a04b8f54cfba9179efa245d71555f918b20275f57bf45578a78d88ebd2c9afd935c967a7d34f26f2b7654bcbf6272bdd9d9ac0f74553e35ba0213061230d59e1cc4a1d35b655f1264d238930de8a3736728feab", @nested={0x73, 0x29, 0x0, 0x1, [@nested={0x4, 0x137}, @typed={0x8, 0x58, 0x0, 0x0, @uid=r5}, @typed={0x8, 0xd1, 0x0, 0x0, @u32=0x8}, @nested={0x4, 0x6c}, @generic="9a64bb97dc6425efa676b1079a13991da21d293c541e665a58c672323983bcb17fc7de8c57cfbf1711de74e52f270643ff7dfd406dd19d68db920a95a1e630aa0a400f52b167555a9064a657869e76ecc9659c2414345c"]}, @generic="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", @nested={0x184, 0x9b, 0x0, 0x1, [@nested={0x4, 0x101}, @nested={0x4, 0xe}, @nested={0x4, 0xd2}, @generic="b9f7da3462003140e9029e7b52efe4f350496450a5e6fc0b843bf91e2d8259a21a41561368a1ab8fdd2f7b54dbfc24204b0259855dedb7881dbd7e3994c3ee7552", @typed={0x8, 0x2a, 0x0, 0x0, @uid=r14}, @typed={0x8, 0x127, 0x0, 0x0, @u32=0x80000000}, @generic, @generic="eff2b393da02cd04396186418e2a773c81114f0348fba47526d1f8d62776e6667fc4dcd57e4d6d945c8575e775ae2f95b73affc05dbb3c32150c8fa61a6fd2d16d164afacbebdf9e3ed1b259f964df5568dd50170dbc9d2d94fa52828854b24af840ef71e855b2892efe97c0c3e849baaa21195cb7c31111052c29e8019fb56ddacf8df7e21458253d000e4cd54a327f0eba101105c53d0b13351caa12cfc19fb8b336bd73b44541b5a226c5510e9a2bb2e20c59d8e3374f178760412d34e9f3ab3db2a23bc1af2349eb25", @generic="3d79a8091d5879150009e077ee08e1340b707c8b15d7160cb4110322619f52c15e35d70e1dfc6442f0415cdf5dda3af638846404fe53a1aeaf8ccf13049bb61703640184ff160c07cd8743ff05f49916dd92908b9cd56838"]}, @nested={0x206, 0x114, 0x0, 0x1, [@nested={0x4, 0x38}, @typed={0x7e, 0x57, 0x0, 0x0, @binary="14c9dff594a5d8a2ab52f13d4531d7af39cbbf0408d59a35635962cf284571ce3455d67b2256fa73e691b8d4ccc943ff9d8d5dbe27d63ede9be292cce078ce4bc068cacff80558c9f469949dcd118e5b0fdd1f33f7f2294ad7fb7805a2f454d7f4875463fb9f17990c87801882142ae527b0318059bea6877d3d"}, @generic="f69ea4bcfc1307165b9bfe2a1d310fe646a17a0106b08a8e2688e250d7e3524dec1689482effb160db0b4d2974664939163df4fb06c1dcf242a5518520726ea24b3efcc598d97b08bc50da9fa55a11bc42593e6afe8e5977b33b23af03de8573fabf56a5017d3f885c0453e5829e962710ff2c7c223dd47a2f7464f0f0c53dbc16a993d731a8800a71c09fcaedc6f5f21f628d9645e271c93f7641e3f1", @generic="7c3d05218b4963c5aca0db741f2b8d6d72a97ba774f87e705a4d107cb1a148906d32e9e2340e4bec0d319acccca0d68a88f37ed65f9f1fc89bc5d7abe7c7dc793bad1bf1e650eb8e292c645556b9021175211c4fb67d276b4c5680c108f3fc7f97b0de2f1719818fd137e880965ae14daf08a4d1e6e415a7cbc975cdb71413243e6bdf7a105386d4c0a5979c60e9e8178af82abf65d91280227ac3006031dafe7e58f29721cb13eb8c6d5834927a4b51d99a568426d906b0f2affb18514895d26c66a22a8fdc3eb2b42ce42ccd5c579b7304a0cd940a5f7493", @nested={0x4, 0x4a}, @nested={0x4, 0xad}, @generic]}, @nested={0x1c, 0x138, 0x0, 0x1, [@generic, @typed={0x14, 0x130, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @local}}, @nested={0x4, 0xf4}]}, @generic="2eef624cf0da1849602edb74e668a8da196a643a967dbc101fa944b2fd4ccfcd456b3a7fe1f6f5454493cae0d01c0911bab4d13b2aeb6ce67c8e75bea91d9e4cb0149fc71d95cafed9fdaafce015302ef4584dc5f0547ca4687be0d4fdaa828366083f7ef624b304a61ba4c52b0bece822f3f31f178eafebaab75b34406589eef0db0c5c2b02f5184d9d3a4ee0fd2ef5ed0082415c70f4"]}, @TIPC_NLA_PUBL={0x29e, 0x3, 0x0, 0x1, [@generic="6d2b4533efc2001bb82835fae0e1f3113723214b5a0e81dcedd4dc60ccf6d7a3145141054e0b30d068cfef2e95344f363df60749cee80b4e0bbbbfabcf", @generic="2758c8c78a348e01f393c635febc2e12a385e8be7688649b39110aaeb28ddff065d75724c8116c81b14069c74a95503d36acd5bb2bc1be922d5d856d47536078fc60ee2b0ad133dda5f936343cdcbcb1a8dfc58db543e156271f421123d2673ed524a5413f945f7de632ce6810142d44785360064fc235e61394ac69119f0aa50c6da60c79", @typed={0x8, 0x107, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x11}}, @nested={0x1b0, 0x103, 0x0, 0x1, [@generic="9c162964b33ab39a95d0671d0381cfcb3680f03fe57f81980f8e77cd26ba2253fcdcfe40f8d45043bd50a5e8722029110f4cee348aaa8d418afbced3e91a34edd6325e88ee243c4673afeecc3e565e887a84ba43957e47cb6e7fc122d6d106e80d82d105a681411806ada7af5386c129c97bca2d819bfbd3c29592e5c3a2d4efe62cab17a32192e5455df4c988ccd965e657e31f402133277ce3b6e61b", @nested={0x4, 0x17}, @typed={0x4, 0xee}, @nested={0x4, 0x39}, @nested={0x4, 0x1d}, @generic="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"]}, @typed={0x8, 0xf9, 0x0, 0x0, @u32=0xb}, @nested={0x10, 0xc4, 0x0, 0x1, [@nested={0x4, 0x10b}, @typed={0x8, 0x55, 0x0, 0x0, @fd=r8}]}, @typed={0x8, 0xfa, 0x0, 0x0, @ipv4=@rand_addr=0x64010100}]}, @TIPC_NLA_NAME_TABLE={0x10, 0x8, 0x0, 0x1, [@typed={0xc, 0x2c, 0x0, 0x0, @u64=0x7}]}]}, 0x3efc}, 0x1, 0x0, 0x0, 0x20000000}, 0x8444) r21 = syz_genetlink_get_family_id$auto_gtp(&(0x7f0000005140), r8) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000005200)={&(0x7f0000005100), 0xc, &(0x7f00000051c0)={&(0x7f0000005180)={0x38, r21, 0x300, 0x70bd27, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_PEER_ADDR6={0x14, 0xb, @loopback}]}, 0x38}, 0x1, 0x0, 0x0, 0x8010}, 0x884) read$auto_ima_ascii_measurements_ops_ima_fs(r8, &(0x7f0000005240)=""/113, 0x71) r22 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f00000052c0)='/dev/sequencer\x00', 0x20000, 0x0) ioctl$auto_SNDCTL_SEQ_GETINCOUNT(r22, 0x80045105, &(0x7f0000005300)="8928d64abafe91f3e12307e0875d2280282e3e74745294a55d537c9e9e7ea4de046d0793be9a6873fe4eca1594c411087717b61a2855395b5a9874a31bec29d26618d1b374145bbd17a77905620187b80959a7e9ccefc7a2d272edb6d50e6134ef15174c4c08dd91027655d48ba263ddd3dfe09d17cf19836c2aea99506823a73811428b2fe62f91c3aa0012a77c3aec6bcda6571995b0b623b476a03955b923a76cf9a4f368573a97a226104f75b0438f0d14ea8cca1dddb7f49497ec121ab71cb4a242d349cbe383b614d04974f88712704be2e5aa183085f73eaea4d91535f2e2") 969.730907ms ago: executing program 0 (id=2853): mmap$auto(0xa8d7, 0x4, 0x4000000000df, 0x14, 0xffffffffffffffff, 0x8003) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, 0x0, 0x20000010) ioctl$auto_XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f00000005c0)={{0xffffffffffffffff, &(0x7f0000000100), 0x101, &(0x7f0000000340), 0x5, 0x0, 0x0}, {[0x4, 0xfffffffd, 0x8, 0x7a]}, 0x14, 0x0, &(0x7f0000000680)="852dd6a7b259d9e7a5eb74ac697cd21ee6065f7f2a9058eed931d9b0c0d805052cd988c92166a90e294d94a568efb6f43e267a720745ddb7a6dd3667d63cf0a0446995e3f0fe3f976d21b67165901c14425fcaeb4f411a50a5a7a3f23e1aae0a582de63d8ce514ba277b9fa21aabb0990ae4611a"}) r1 = socket(0x2, 0x80000, 0xa) mmap$auto(0x8000000000000000, 0xffffffff, 0x3, 0x18, r0, 0x4000008000) unshare$auto(0x40000084) r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC2\x00', 0x0, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, &(0x7f0000000040)=0x5) request_key$auto_KEY_SPEC_REQKEY_AUTH_KEY(&(0x7f0000000640)='J^[^\x00', &(0x7f00000000c0)=',^@\\([-$&$(}/\x00', 0x0, 0xfffffffffffffff9) fcntl$auto(0x3, 0x4, 0xa553) r3 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f00000002c0)={{@inferred, 0x5, 0x9, 0x1, "4941aa833e2fc65b6b3cf7cec76d6778ad8eac3cda35ba9c2b2d43eeb0dc59c8dd3500f11581916caa0d3053", @inferred=0x0}, 0x4, 0xfffffff9, 0x1, @inferred, @integer64={0x1, 0x65, 0x8}, "6cc1888a6393f1b4285854c5368de438f8cc142ef6df1259b05ba1183bedbd31b642b4051bc7955610c61c329794e53111217b0000000000000047a99807bcc1"}) mmap$auto(0x8, 0x420006, 0xdf, 0x17, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0002, 0x19) madvise$auto(0x0, 0x2003f0, 0x15) r5 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x9, 0x80000001, 0x100000000000df, 0x13, r1, 0x1) r6 = socket(0x22, 0x5, 0x7ffffffd) getsockopt$auto(r6, 0x0, 0x482, 0x0, &(0x7f0000000040)=0x83) r7 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_MON_SET(r5, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r7, @ANYRES32, @ANYBLOB="fd2df94f80916045a5f07e980000a48e33a6b9431be4b6c6ab643fef1cd10e9bde7fcde60c6eef074a3cf863d0fe4b3b01c4b4f0036cc029ea60ffac12a70000000000"], 0x20}, 0x1, 0x0, 0x0, 0x4000010}, 0xc050) sendmsg$auto_TIPC_NL_ADDR_LEGACY_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="00012abd7000fedbdf25190000005e000780a8e3d8b476efdaca9cb1602c2a22f64cbaf50d48fe8260820e73da3f974ad18f03e387da91039faa4a80149b91c3dbf418816720df05d42000"/86, @ANYRES32=r4, @ANYBLOB="0c00d6800800d6243b1ea9f3730d"], 0x74}, 0x1, 0x0, 0x0, 0x4000040}, 0xc4004) select$auto(0xe, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x0, 0xb}) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) r8 = openat$auto_drm_crtc_crc_control_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f0000001380), 0x8c000, 0x0) pread64$auto(r8, 0x0, 0x73, 0x3) r9 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) write$auto(r2, &(0x7f0000000400)='2\b\x1c\x87k\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x481) write$auto(r9, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, r9, 0x8000) 717.896718ms ago: executing program 1 (id=2854): r0 = socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = openat$auto_xfs_dir_file_operations_xfs_file(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/bluetooth/hci4/hci4:201\x00', 0x40020, 0x0) getsockopt$auto_SO_BPF_EXTENSIONS(r1, 0x6, 0x30, &(0x7f0000000180)='\x00', &(0x7f00000001c0)=0x3) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004c18}, 0x810) setsockopt$auto_SO_RCVPRIORITY(r0, 0x6, 0x52, &(0x7f0000000100)='{*!*{,\xcc\x00', 0x2) r2 = socket(0x2c, 0x3, 0x0) bind$auto(r2, &(0x7f0000000080)=@xdp={0x2c, 0x74600abe7658dfb8, 0x0, 0x1c}, 0x6b) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000480)='/dev/video18\x00', 0x802, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x3000, 0x8000006, 0x4, 0x7fffffff, 0xffffffffffffffff, [], {0x6, 0x6, 0x8c48, 0x29f, 0x100, 0x77fffffb, 0x101, 0xb0d, 0x3}, {0x100, 0x1, 0x52, 0x5, 0x2, 0x40, 0x76c5, 0xb, 0x100000000}}) r3 = epoll_create$auto(0x3e) epoll_ctl$auto(r3, 0x1, 0x8000000000000000, 0x0) 347.462564ms ago: executing program 3 (id=2856): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCVHANGUP2(r0, 0x5437, 0x0) 321.444129ms ago: executing program 1 (id=2857): mbind$auto(0x0, 0x7, 0x10000000000008, 0x0, 0x80000000, 0x10000) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) rt_tgsigqueueinfo$auto(0xffffffffffffffff, 0x0, 0x8, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) shutdown$auto(0x200000003, 0x2) fchown$auto(0xffffffffffffffff, 0x0, 0x0) ioctl$auto(0x3, 0x541b, 0xfffffffffffff4e0) recvmmsg$auto(0x3, 0x0, 0x86873cbd, 0xa, 0x0) lstat$auto(&(0x7f0000000140)='./file0\x00', 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/nbd3/queue/nr_requests\x00', 0x143262, 0x0) write$auto(r1, &(0x7f00000000c0)='1\x00\xc7k\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00j(=\xd1<\xf9\x96\x10>\xb9\x05\xbe\xc8v\x81-ILplM\x98\x88J\xfd\x17\xc8K\xdd\x89;T@d\xa3_\xfcb8\x7fA\x11\xba\xefL\xe1L\x8aE}\xa7\x05\b\xd7\xe2\xae\xfek\xbbw\x8c\x88\x1emW-\xf5\x94\xdak\x81\xe4\x1e\x1dS\xf2~>\xb1\xc6\xd1\xee\xc8\x19e\xc1w\xf05%\xd76]\x0f\v\x01\xa4(\xec\xd3\xca\a\x15&nv\xc1}\xfcD', 0x81) syz_clone3(&(0x7f0000000500)={0x200248400, &(0x7f0000000200), &(0x7f0000000240), 0x0, {}, &(0x7f00000002c0)=""/111, 0x6f, &(0x7f0000000340)=""/236, &(0x7f0000000440)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x7, {r0}}, 0x58) getrandom$auto(0x0, 0x8, 0x403) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/devices/pci0000:00/0000:00:03.0/virtio0/modalias\x00', 0x12bf40, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000040)=""/120, 0x78) socket(0xa, 0x5, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card1/pcm0p/sub0/hw_params\x00', 0x42000, 0x0) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/fs/ext4/sda1/mb_groups\x00', 0x109180, 0x0) prctl$auto(0x1000000003b, 0x1, 0x0, 0x3, 0x2a) statmount$auto(0x0, 0x0, 0x81, 0x968c) mmap$auto(0x0, 0x40009, 0xdf, 0x11, r2, 0x28000) epoll_create1$auto(0x0) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) 181.729253ms ago: executing program 0 (id=2858): bpf$auto(0x9, 0x0, 0x9) socket(0x2, 0x80000, 0xfffffffc) mmap$auto(0x1, 0x20009, 0xe2, 0xeb1, 0xffffffffffffffff, 0x8000) getcwd$auto(0x0, 0xffffffffffffffff) setsockopt$auto(0x3, 0x10000000084, 0x2, 0x0, 0x8) shutdown$auto(0x200000003, 0x2) unshare$auto(0x40000080) connect$auto(0x3, &(0x7f00000018c0)=@in={0x2, 0x300, @loopback=0xac14140a}, 0x55) mmap$auto(0x0, 0x400008, 0xdf, 0xf1, 0x2, 0x8000) remap_file_pages$auto(0x5, 0x9, 0x0, 0x8, 0x10007) semctl$auto_SETVAL(0xb134, 0x9, 0x10, 0xcc) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x311200, 0x0) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x7fffffff, 0x3ef) 97.250009ms ago: executing program 2 (id=2859): r0 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x38, r0, 0x8000) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_SMC_NETLINK_REMOVE_UEID(0xffffffffffffffff, 0x0, 0x20000000) socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) r1 = prctl$auto(0x16, 0x2, 0x2, 0x4000000d, 0x100) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/adsp1\x00', 0x1, 0x0) ioctl$auto_SNDCTL_DSP_GETODELAY(r2, 0x80045017, &(0x7f0000000c00)) mq_open$auto(&(0x7f0000000280)='\\*)A\x00', 0x7e, 0x9, 0x0) mmap$auto(0x0, 0x2020006, 0x5, 0xeb1, r1, 0x8000) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x2a, 0x2, 0x1) openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x882, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0x10002}, 0x1) close_range$auto(0x2, 0x8, 0x0) pread64$auto(0xffffffffffffffff, 0x0, 0x1ffffffffffe, 0xd59f) r3 = socket(0x2b, 0x1, 0x1) socketpair$auto(0xfffffffe, 0x1, 0x8000000000000000, 0x0) ioctl$auto(r3, 0x89a0, 0x4) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x40000008000) sendmsg$auto_NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x2404c800) kexec_load$auto(0x5, 0x2, &(0x7f0000000040)={@kbuf=0x0, 0x800c000, 0x4800c000, 0x800c000}, 0x4) io_uring_setup$auto(0x6, 0x0) 0s ago: executing program 3 (id=2860): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fa02, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14fa02, 0x0) mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000000008011, 0x3, 0x8000) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, 0x0, 0x0, 0x0) setresuid$auto(0x0, 0x0, 0x0) sendmsg$auto_NL80211_CMD_GET_STATION(0xffffffffffffffff, 0x0, 0x8000) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x181500, 0x0) sched_setattr$auto(0x0, 0x0, 0x7b) r3 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000000), 0x880183, 0x0) ioctl$auto_USB_RAW_IOCTL_EP0_READ(r3, 0xc0085504, &(0x7f0000000040)={0x6, 0x0, 0x8001}) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) mmap$auto(0x0, 0x7f, 0xdf, 0x9b72, 0x2, 0x8000) open(&(0x7f0000000100)='.\x00', 0x0, 0x408) preadv2$auto(r0, 0x0, 0x6, 0xffffffffffffffff, 0x4, 0x2e) read$auto(0xffffffffffffffff, 0x0, 0x7) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x1492c1, 0x0) writev$auto(r4, &(0x7f0000000200)={0x0, 0x7}, 0x3) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r2) sendmsg$auto_NL80211_CMD_VENDOR(r2, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x54, r5, 0x8, 0x70bd2d, 0x25dfdbfc, {}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x10}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x305}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x5}, @NL80211_ATTR_MNTR_FLAGS={0x19, 0x17, "858ca40e1a5063eb9a0abcbdf8464322d3944420b4"}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x40001, 0x0) r6 = openat$auto_ep0_operations_inode(0xffffffffffffff9c, &(0x7f0000000000), 0x8a001, 0x0) write$auto(r6, &(0x7f0000000180)='k:\x1f\x8eF!D?B@\xa3\x86L\xd3=\x8e\xf9=y\xd7\tHB\xa9ngn\xa8\x86\xfcA.\xc4\x04\xd3\xe5J\xf9\xfasE\x85\xc3\x01\x11e\x90\x92\xcc\x82\xbb\x06\xe7Bg\x1b~\x9e\x05z\x10\xd7\"\xab\f\x1d\xcf\xa3\xee`M\xebhWp\xa4\xc5\x96\xd9\nD\x16X\f\x9e\xd4\x03z#\xef_G\xec\xba\r/\xc2\"A\x8e\x8fl\t\xc7_u\xed\xe6\xf0\x9bL\xc0L\xbb\xdd\x87\xb9W\xb5O}\xd3\xd3F\x0e\x9b\xc74\x13\xce1\xa5\x9fo\xdds\x90\xb5\xdc\x16\x02\xb1q\xc7\xee\x1b\x9d\xd5q\xa3&\xf7\xfb\xa1g\x10\xc6\xd2\x15', 0x60) kernel console output (not intermixed with test programs): 9935] do_syscall_64+0xcd/0xfa0 [ 567.300369][ T9935] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 567.300393][ T9935] RIP: 0033:0x7f74c0f8f7c9 [ 567.300411][ T9935] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 567.300433][ T9935] RSP: 002b:00007f74c1e83038 EFLAGS: 00000246 ORIG_RAX: 0000000000000075 [ 567.300456][ T9935] RAX: ffffffffffffffda RBX: 00007f74c11e5fa0 RCX: 00007f74c0f8f7c9 [ 567.300471][ T9935] RDX: ffffffffffffffff RSI: 000000000000ee00 RDI: 0000000000000000 [ 567.300486][ T9935] RBP: 00007f74c1e83090 R08: 0000000000000000 R09: 0000000000000000 [ 567.300499][ T9935] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 567.300513][ T9935] R13: 00007f74c11e6038 R14: 00007f74c11e5fa0 R15: 00007fffb00e9d28 [ 567.300548][ T9935] [ 567.495097][ T9916] snd_aloop snd_aloop.0: control 7:265:7:ª¸è:2 is already present syzkaller syzkaller login: [ 568.755643][ T9958] FAULT_INJECTION: forcing a failure. [ 568.755643][ T9958] name failslab, interval 1, probability 0, space 0, times 0 [ 568.773010][ T9958] CPU: 0 UID: 0 PID: 9958 Comm: syz.0.908 Not tainted syzkaller #0 PREEMPT(full) [ 568.773050][ T9958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 568.773064][ T9958] Call Trace: [ 568.773073][ T9958] [ 568.773083][ T9958] dump_stack_lvl+0x16c/0x1f0 [ 568.773117][ T9958] should_fail_ex+0x512/0x640 [ 568.773145][ T9958] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 568.773176][ T9958] should_failslab+0xc2/0x120 [ 568.773210][ T9958] kmem_cache_alloc_noprof+0x75/0x6e0 [ 568.773238][ T9958] ? vm_area_dup+0x27/0x8d0 [ 568.773270][ T9958] ? vm_area_dup+0x27/0x8d0 [ 568.773295][ T9958] vm_area_dup+0x27/0x8d0 [ 568.773324][ T9958] dup_mmap+0x86f/0x2280 [ 568.773375][ T9958] ? __pfx_dup_mmap+0x10/0x10 [ 568.773437][ T9958] copy_process+0x3f14/0x76b0 [ 568.773466][ T9958] ? __pfx___futex_wait+0x10/0x10 [ 568.773505][ T9958] ? __pfx_copy_process+0x10/0x10 [ 568.773535][ T9958] ? find_held_lock+0x2b/0x80 [ 568.773568][ T9958] ? futex_private_hash_put+0xd5/0x190 [ 568.773610][ T9958] kernel_clone+0xfc/0x930 [ 568.773642][ T9958] ? __pfx_kernel_clone+0x10/0x10 [ 568.773694][ T9958] __do_sys_clone+0xce/0x120 [ 568.773723][ T9958] ? __pfx___do_sys_clone+0x10/0x10 [ 568.773779][ T9958] ? xfd_validate_state+0x61/0x180 [ 568.773813][ T9958] ? __pfx_from_kuid_munged+0x10/0x10 [ 568.773854][ T9958] do_syscall_64+0xcd/0xfa0 [ 568.773883][ T9958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 568.773909][ T9958] RIP: 0033:0x7f74c0f8f7c9 [ 568.773931][ T9958] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 568.773956][ T9958] RSP: 002b:00007f74c1e1ffe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 568.773980][ T9958] RAX: ffffffffffffffda RBX: 00007f74c11e6270 RCX: 00007f74c0f8f7c9 [ 568.773997][ T9958] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000002360411 [ 568.774012][ T9958] RBP: 00007f74c1013f91 R08: 0000000000000000 R09: 0000000000000000 [ 568.774027][ T9958] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 568.774042][ T9958] R13: 00007f74c11e6308 R14: 00007f74c11e6270 R15: 00007fffb00e9d28 [ 568.774079][ T9958] [ 569.002774][ T9962] FAULT_INJECTION: forcing a failure. [ 569.002774][ T9962] name failslab, interval 1, probability 0, space 0, times 0 [ 569.160196][ T9962] CPU: 1 UID: 0 PID: 9962 Comm: syz.1.909 Not tainted syzkaller #0 PREEMPT(full) [ 569.160233][ T9962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 569.160249][ T9962] Call Trace: [ 569.160258][ T9962] [ 569.160270][ T9962] dump_stack_lvl+0x16c/0x1f0 [ 569.160305][ T9962] should_fail_ex+0x512/0x640 [ 569.160336][ T9962] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 569.160373][ T9962] should_failslab+0xc2/0x120 [ 569.160413][ T9962] kmem_cache_alloc_noprof+0x75/0x6e0 [ 569.160445][ T9962] ? vm_area_dup+0x27/0x8d0 [ 569.160480][ T9962] ? vm_area_dup+0x27/0x8d0 [ 569.160505][ T9962] vm_area_dup+0x27/0x8d0 [ 569.160535][ T9962] dup_mmap+0x86f/0x2280 [ 569.160587][ T9962] ? __pfx_dup_mmap+0x10/0x10 [ 569.160651][ T9962] copy_process+0x3f14/0x76b0 [ 569.160682][ T9962] ? preempt_schedule_thunk+0x16/0x30 [ 569.160737][ T9962] ? __pfx_copy_process+0x10/0x10 [ 569.160767][ T9962] ? find_held_lock+0x2b/0x80 [ 569.160810][ T9962] ? futex_private_hash_put+0xd5/0x190 [ 569.160856][ T9962] kernel_clone+0xfc/0x930 [ 569.160889][ T9962] ? __pfx_futex_wake+0x10/0x10 [ 569.160914][ T9962] ? __pfx_kernel_clone+0x10/0x10 [ 569.160970][ T9962] __do_sys_clone+0xce/0x120 [ 569.161001][ T9962] ? __pfx___do_sys_clone+0x10/0x10 [ 569.161049][ T9962] ? xfd_validate_state+0x61/0x180 [ 569.161082][ T9962] ? __pfx_from_kuid_munged+0x10/0x10 [ 569.161122][ T9962] do_syscall_64+0xcd/0xfa0 [ 569.161153][ T9962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 569.161179][ T9962] RIP: 0033:0x7f4d3898f7c9 [ 569.161200][ T9962] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 569.161225][ T9962] RSP: 002b:00007f4d397e5fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 569.161250][ T9962] RAX: ffffffffffffffda RBX: 00007f4d38be6270 RCX: 00007f4d3898f7c9 [ 569.161268][ T9962] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000002360411 [ 569.161284][ T9962] RBP: 00007f4d38a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 569.161301][ T9962] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 569.161316][ T9962] R13: 00007f4d38be6308 R14: 00007f4d38be6270 R15: 00007ffcc197aa08 [ 569.161356][ T9962] [ 570.227990][ T9967] FAULT_INJECTION: forcing a failure. [ 570.227990][ T9967] name fail_futex, interval 1, probability 0, space 0, times 1 [ 570.244170][ T9967] CPU: 0 UID: 0 PID: 9967 Comm: syz.2.910 Not tainted syzkaller #0 PREEMPT(full) [ 570.244204][ T9967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 570.244219][ T9967] Call Trace: [ 570.244227][ T9967] [ 570.244236][ T9967] dump_stack_lvl+0x16c/0x1f0 [ 570.244272][ T9967] should_fail_ex+0x512/0x640 [ 570.244307][ T9967] get_futex_key+0x1d0/0x1560 [ 570.244346][ T9967] ? __pfx_get_futex_key+0x10/0x10 [ 570.244377][ T9967] ? find_held_lock+0x2b/0x80 [ 570.244404][ T9967] ? futex_wake+0x456/0x530 [ 570.244436][ T9967] futex_wake+0xea/0x530 [ 570.244470][ T9967] ? futex_wait+0x120/0x380 [ 570.244497][ T9967] ? __pfx_futex_wait+0x10/0x10 [ 570.244523][ T9967] ? __pfx_futex_wake+0x10/0x10 [ 570.244556][ T9967] ? ksys_write+0x190/0x250 [ 570.244592][ T9967] do_futex+0x1e3/0x350 [ 570.244627][ T9967] ? __pfx_do_futex+0x10/0x10 [ 570.244660][ T9967] ? get_nodes+0x18b/0x210 [ 570.244691][ T9967] ? __pfx_get_nodes+0x10/0x10 [ 570.244728][ T9967] __x64_sys_futex+0x1e0/0x4c0 [ 570.244768][ T9967] ? kernel_mbind+0x155/0x1f0 [ 570.244791][ T9967] ? __pfx___x64_sys_futex+0x10/0x10 [ 570.244827][ T9967] ? xfd_validate_state+0x61/0x180 [ 570.244858][ T9967] ? __pfx_kernel_mbind+0x10/0x10 [ 570.244893][ T9967] do_syscall_64+0xcd/0xfa0 [ 570.244920][ T9967] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 570.244943][ T9967] RIP: 0033:0x7f168f58f7c9 [ 570.244962][ T9967] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 570.244985][ T9967] RSP: 002b:00007f169047f0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 570.245008][ T9967] RAX: ffffffffffffffda RBX: 00007f168f7e6098 RCX: 00007f168f58f7c9 [ 570.245025][ T9967] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f168f7e609c [ 570.245040][ T9967] RBP: 00007f168f7e6090 R08: 00007f16904a1000 R09: 0000000000000000 [ 570.245054][ T9967] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 570.245068][ T9967] R13: 00007f168f7e6128 R14: 00007fff4619dc00 R15: 00007fff4619dce8 [ 570.245101][ T9967] [ 570.758294][ T9967] zswap: compressor not available syzkaller syzkaller login: [ 573.788093][T10082] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(3) [ 575.783326][T10153] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(3) syzkaller syzkaller login: [ 577.209851][T10189] netlink: Unknown NAT attribute (type=262, max=9) syzkaller syzkaller login: [ 578.276262][T10237] writes to the poll attribute are ignored. [ 578.290467][T10237] please use driver specific parameters instead. [ 579.477453][T10259] FAULT_INJECTION: forcing a failure. [ 579.477453][T10259] name failslab, interval 1, probability 0, space 0, times 0 [ 579.499508][T10259] CPU: 1 UID: 0 PID: 10259 Comm: syz.1.1006 Not tainted syzkaller #0 PREEMPT(full) [ 579.499544][T10259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 579.499560][T10259] Call Trace: [ 579.499568][T10259] [ 579.499578][T10259] dump_stack_lvl+0x16c/0x1f0 [ 579.499610][T10259] should_fail_ex+0x512/0x640 [ 579.499640][T10259] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 579.499674][T10259] should_failslab+0xc2/0x120 [ 579.499713][T10259] kmem_cache_alloc_noprof+0x75/0x6e0 [ 579.499744][T10259] ? vm_area_dup+0x27/0x8d0 [ 579.499783][T10259] ? vm_area_dup+0x27/0x8d0 [ 579.499807][T10259] vm_area_dup+0x27/0x8d0 [ 579.499837][T10259] dup_mmap+0x86f/0x2280 [ 579.499883][T10259] ? __pfx_dup_mmap+0x10/0x10 [ 579.499938][T10259] copy_process+0x3f14/0x76b0 [ 579.499969][T10259] ? __pfx___futex_wait+0x10/0x10 [ 579.499994][T10259] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 579.500045][T10259] ? __pfx_copy_process+0x10/0x10 [ 579.500073][T10259] ? find_held_lock+0x2b/0x80 [ 579.500105][T10259] ? futex_private_hash_put+0xd5/0x190 [ 579.500151][T10259] kernel_clone+0xfc/0x930 [ 579.500186][T10259] ? __pfx_kernel_clone+0x10/0x10 [ 579.500239][T10259] __do_sys_clone+0xce/0x120 [ 579.500267][T10259] ? __pfx___do_sys_clone+0x10/0x10 [ 579.500311][T10259] ? xfd_validate_state+0x61/0x180 [ 579.500345][T10259] ? __pfx_from_kuid_munged+0x10/0x10 [ 579.500386][T10259] do_syscall_64+0xcd/0xfa0 [ 579.500416][T10259] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 579.500443][T10259] RIP: 0033:0x7f4d3898f7c9 [ 579.500464][T10259] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 579.500490][T10259] RSP: 002b:00007f4d39806fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 579.500514][T10259] RAX: ffffffffffffffda RBX: 00007f4d38be6180 RCX: 00007f4d3898f7c9 [ 579.500531][T10259] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000002360411 [ 579.500547][T10259] RBP: 00007f4d38a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 579.500564][T10259] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 579.500579][T10259] R13: 00007f4d38be6218 R14: 00007f4d38be6180 R15: 00007ffcc197aa08 [ 579.500618][T10259] [ 580.674810][T10300] process 'syz.0.1024' launched ':,' with NULL argv: empty string added syzkaller syzkaller login: syzkaller syzkaller login: syzkaller syzkaller login: syzkaller syzkaller login: syzkaller syzkaller login: [ 590.427329][T10644] ======================================================= [ 590.427329][T10644] WARNING: The mand mount option has been deprecated and [ 590.427329][T10644] and is ignored by this kernel. Remove the mand [ 590.427329][T10644] option from the mount to silence this warning. [ 590.427329][T10644] ======================================================= syzkaller syzkaller login: syzkaller syzkaller login: syzkaller syzkaller login: syzkaller syzkaller login: syzkaller syzkaller login: syzkaller syzkaller login: syzkaller syzkaller login: syzkaller syzkaller login: [ 613.117022][T11117] FAULT_INJECTION: forcing a failure. [ 613.117022][T11117] name failslab, interval 1, probability 0, space 0, times 0 [ 613.194396][T11117] CPU: 0 UID: 0 PID: 11117 Comm: syz.2.1234 Not tainted syzkaller #0 PREEMPT(full) [ 613.194428][T11117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 613.194441][T11117] Call Trace: [ 613.194449][T11117] [ 613.194458][T11117] dump_stack_lvl+0x16c/0x1f0 [ 613.194488][T11117] should_fail_ex+0x512/0x640 [ 613.194515][T11117] ? __kvmalloc_node_noprof+0x12e/0x9c0 [ 613.194548][T11117] should_failslab+0xc2/0x120 [ 613.194595][T11117] __kvmalloc_node_noprof+0x141/0x9c0 [ 613.194625][T11117] ? __lock_acquire+0xb8a/0x1c90 [ 613.194659][T11117] ? io_sqe_buffers_register+0x131/0x860 [ 613.194696][T11117] ? io_sqe_buffers_register+0x131/0x860 [ 613.194721][T11117] io_sqe_buffers_register+0x131/0x860 [ 613.194754][T11117] ? __pfx___mutex_trylock_common+0x10/0x10 [ 613.194793][T11117] ? __pfx_io_sqe_buffers_register+0x10/0x10 [ 613.194819][T11117] ? rcu_is_watching+0x12/0xc0 [ 613.194845][T11117] ? trace_contention_end+0xdd/0x130 [ 613.194888][T11117] __io_uring_register+0x1ff8/0x20d0 [ 613.194918][T11117] ? __pfx___io_uring_register+0x10/0x10 [ 613.194945][T11117] ? __fget_files+0x20e/0x3c0 [ 613.194984][T11117] __x64_sys_io_uring_register+0x169/0x280 [ 613.195013][T11117] do_syscall_64+0xcd/0xfa0 [ 613.195041][T11117] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 613.195066][T11117] RIP: 0033:0x7f168f58f7c9 [ 613.195086][T11117] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 613.195108][T11117] RSP: 002b:00007f16904a0038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 613.195132][T11117] RAX: ffffffffffffffda RBX: 00007f168f7e5fa0 RCX: 00007f168f58f7c9 [ 613.195146][T11117] RDX: 0000200000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 613.195160][T11117] RBP: 00007f16904a0090 R08: 0000000000000000 R09: 0000000000000000 [ 613.195173][T11117] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 613.195186][T11117] R13: 00007f168f7e6038 R14: 00007f168f7e5fa0 R15: 00007fff4619dce8 [ 613.195221][T11117] syzkaller syzkaller login: [ 614.911204][T11151] netlink: 'syz.1.1243': attribute type 11 has an invalid length. [ 614.941708][T11151] netlink: 'syz.1.1243': attribute type 11 has an invalid length. [ 614.960894][T11151] netlink: 'syz.1.1243': attribute type 11 has an invalid length. [ 615.002760][T11151] netlink: 208 bytes leftover after parsing attributes in process `syz.1.1243'. syzkaller syzkaller login: [ 618.230871][T11227] vhci_hcd: invalid port number 16 syzkaller syzkaller login: [ 623.406004][T11327] vhci_hcd: Wrong hub descriptor type for USB 3.0 roothub. [ 624.426860][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.433210][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 syzkaller syzkaller login: syzkaller syzkaller login: [ 631.658403][T11471] FAULT_INJECTION: forcing a failure. [ 631.658403][T11471] name fail_futex, interval 1, probability 0, space 0, times 0 [ 631.706495][T11471] CPU: 0 UID: 0 PID: 11471 Comm: syz.3.1310 Not tainted syzkaller #0 PREEMPT(full) [ 631.706531][T11471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 631.706547][T11471] Call Trace: [ 631.706556][T11471] [ 631.706566][T11471] dump_stack_lvl+0x16c/0x1f0 [ 631.706599][T11471] should_fail_ex+0x512/0x640 [ 631.706629][T11471] ? __pfx_mt_find+0x10/0x10 [ 631.706660][T11471] get_futex_key+0x1d0/0x1560 [ 631.706702][T11471] ? __pfx_get_futex_key+0x10/0x10 [ 631.706739][T11471] ? __up_read+0x1f8/0x750 [ 631.706770][T11471] futex_wake+0xea/0x530 [ 631.706801][T11471] ? __pfx_futex_wake+0x10/0x10 [ 631.706834][T11471] ? up_write+0x1b2/0x520 [ 631.706863][T11471] do_futex+0x1e3/0x350 [ 631.706901][T11471] ? __pfx_do_futex+0x10/0x10 [ 631.706949][T11471] __x64_sys_futex+0x1e0/0x4c0 [ 631.706991][T11471] ? __pfx___x64_sys_futex+0x10/0x10 [ 631.707024][T11471] ? ksys_mmap_pgoff+0x85/0x5c0 [ 631.707054][T11471] ? xfd_validate_state+0x61/0x180 [ 631.707082][T11471] ? __pfx_ksys_write+0x10/0x10 [ 631.707118][T11471] do_syscall_64+0xcd/0xfa0 [ 631.707146][T11471] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 631.707172][T11471] RIP: 0033:0x7f592a18f7c9 [ 631.707192][T11471] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 631.707216][T11471] RSP: 002b:00007f592af820e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 631.707240][T11471] RAX: ffffffffffffffda RBX: 00007f592a3e5fa8 RCX: 00007f592a18f7c9 [ 631.707257][T11471] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f592a3e5fac [ 631.707273][T11471] RBP: 00007f592a3e5fa0 R08: 00007f592af83000 R09: 0000000000000000 [ 631.707289][T11471] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 631.707304][T11471] R13: 00007f592a3e6038 R14: 00007fff1bf4f220 R15: 00007fff1bf4f308 [ 631.707340][T11471] syzkaller syzkaller login: syzkaller syzkaller login: [ 635.297407][T11561] Invalid ELF header magic: != ELF syzkaller syzkaller login: [ 637.525457][T11595] random: crng reseeded on system resumption syzkaller syzkaller login: [ 641.864936][T11678] Invalid ELF header magic: != ELF [ 642.296498][T11686] random: crng reseeded on system resumption syzkaller syzkaller login: syzkaller syzkaller login: syzkaller syzkaller login: [ 646.194162][T11737] random: crng reseeded on system resumption [ 646.834842][T11751] Invalid ELF header magic: != ELF [ 647.930222][ T5150] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 syzkaller syzkaller login: [ 649.070397][T11786] Invalid ELF header magic: != ELF [ 649.960084][T11800] random: crng reseeded on system resumption [ 650.005391][ T5872] Bluetooth: hci2: command 0x0406 tx timeout syzkaller syzkaller login: [ 652.957071][T11823] Invalid ELF header magic: != ELF syzkaller syzkaller login: syzkaller syzkaller login: syzkaller syzkaller login: syzkaller syzkaller login: syzkaller syzkaller login: syzkaller syzkaller login: syzkaller syzkaller login: syzkaller syzkaller login: syzkaller syzkaller login: [ 667.134562][T12113] Invalid ELF header magic: != ELF [ 669.123183][T12157] Invalid ELF header magic: != ELF syzkaller syzkaller login: syzkaller syzkaller login: [ 673.022660][ T5872] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 673.511307][T12282] ptrace attach of "./syz-executor exec"[12285] was attempted by "./syz-executor exec"[12282] syzkaller syzkaller login: [ 675.036325][ T5872] Bluetooth: hci0: command 0x0406 tx timeout [ 683.573505][T12470] bridge0: port 3(netdevsim1) entered blocking state [ 683.596859][T12470] bridge0: port 3(netdevsim1) entered disabled state [ 683.668883][T12470] netdevsim netdevsim2 netdevsim1: entered allmulticast mode [ 683.684174][T12472] WARNING! power/level is deprecated; use power/control instead [ 683.910241][T12470] netdevsim netdevsim2 netdevsim1: entered promiscuous mode [ 684.097035][T12470] bridge0: port 3(netdevsim1) entered blocking state [ 684.104586][T12470] bridge0: port 3(netdevsim1) entered forwarding state [ 685.207712][T12494] blk_print_req_error: 58 callbacks suppressed [ 685.207732][T12494] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 685.329663][T12494] buffer_io_error: 56 callbacks suppressed [ 685.329685][T12494] Buffer I/O error on dev nbd6, logical block 0, async page read [ 685.344902][T12494] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 685.435486][T12494] Buffer I/O error on dev nbd6, logical block 0, async page read [ 685.526632][T12494] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 685.535722][T12494] Buffer I/O error on dev nbd6, logical block 0, async page read [ 685.702201][T12494] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 685.828259][T12494] Buffer I/O error on dev nbd6, logical block 0, async page read [ 685.856470][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.862833][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.969943][T12494] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 686.221025][T12494] Buffer I/O error on dev nbd6, logical block 0, async page read [ 686.371533][T12494] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 686.559201][T12494] Buffer I/O error on dev nbd6, logical block 0, async page read [ 686.699405][T12494] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 686.767006][T12494] Buffer I/O error on dev nbd6, logical block 0, async page read [ 686.775015][T12494] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 686.906275][T12494] Buffer I/O error on dev nbd6, logical block 0, async page read [ 687.026323][T12494] ldm_validate_partition_table(): Disk read failed. [ 687.033621][T12494] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 687.080913][T12494] Buffer I/O error on dev nbd6, logical block 0, async page read [ 687.166391][T12494] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 687.246236][T12494] Buffer I/O error on dev nbd6, logical block 0, async page read [ 687.296679][T12494] Dev nbd6: unable to read RDB block 0 [ 687.303017][T12494] nbd6: unable to read partition table [ 687.401019][T12520] FAULT_INJECTION: forcing a failure. [ 687.401019][T12520] name failslab, interval 1, probability 0, space 0, times 0 [ 687.474826][T12520] CPU: 1 UID: 0 PID: 12520 Comm: syz.0.1599 Not tainted syzkaller #0 PREEMPT(full) [ 687.474847][T12520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 687.474855][T12520] Call Trace: [ 687.474861][T12520] [ 687.474867][T12520] dump_stack_lvl+0x16c/0x1f0 [ 687.474888][T12520] should_fail_ex+0x512/0x640 [ 687.474905][T12520] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 687.474924][T12520] should_failslab+0xc2/0x120 [ 687.474945][T12520] kmem_cache_alloc_noprof+0x75/0x6e0 [ 687.474961][T12520] ? vm_area_dup+0x27/0x8d0 [ 687.474979][T12520] ? vm_area_dup+0x27/0x8d0 [ 687.474991][T12520] vm_area_dup+0x27/0x8d0 [ 687.475006][T12520] __split_vma+0x18e/0x1070 [ 687.475023][T12520] ? __pfx___split_vma+0x10/0x10 [ 687.475044][T12520] ? up_write+0x1b2/0x520 [ 687.475060][T12520] vms_gather_munmap_vmas+0x1cb/0x1340 [ 687.475079][T12520] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 687.475097][T12520] ? __lock_acquire+0x622/0x1c90 [ 687.475123][T12520] do_vmi_align_munmap+0x286/0x7e0 [ 687.475141][T12520] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 687.475182][T12520] do_vmi_munmap+0x204/0x3e0 [ 687.475200][T12520] shrink_vma+0x1c5/0x380 [ 687.475232][T12520] ? __pfx_shrink_vma+0x10/0x10 [ 687.475252][T12520] ? __pfx_down_write_killable+0x10/0x10 [ 687.475268][T12520] ? check_prep_vma+0x248/0xd40 [ 687.475287][T12520] do_mremap+0x147d/0x2020 [ 687.475306][T12520] ? get_pid_task+0x106/0x250 [ 687.475325][T12520] ? proc_fail_nth_write+0x9f/0x220 [ 687.475344][T12520] ? find_held_lock+0x2b/0x80 [ 687.475359][T12520] ? __pfx_do_mremap+0x10/0x10 [ 687.475376][T12520] ? find_held_lock+0x2b/0x80 [ 687.475391][T12520] ? ksys_write+0x190/0x250 [ 687.475414][T12520] __do_sys_mremap+0x119/0x170 [ 687.475429][T12520] ? __pfx___do_sys_mremap+0x10/0x10 [ 687.475444][T12520] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 687.475477][T12520] do_syscall_64+0xcd/0xfa0 [ 687.475495][T12520] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 687.475509][T12520] RIP: 0033:0x7f74c0f8f7c9 [ 687.475521][T12520] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 687.475534][T12520] RSP: 002b:00007f74c1e83038 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 687.475548][T12520] RAX: ffffffffffffffda RBX: 00007f74c11e5fa0 RCX: 00007f74c0f8f7c9 [ 687.475557][T12520] RDX: 0000000000003fd7 RSI: 0000000004000007 RDI: 0000000000000000 [ 687.475566][T12520] RBP: 00007f74c1e83090 R08: 0020000020000000 R09: 0000000000000000 [ 687.475574][T12520] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 687.475582][T12520] R13: 00007f74c11e6038 R14: 00007f74c11e5fa0 R15: 00007fffb00e9d28 [ 687.475601][T12520] [ 688.499834][ T5872] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 688.508644][ T5872] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:0' [ 688.519404][ T5872] CPU: 0 UID: 0 PID: 5872 Comm: kworker/u9:2 Not tainted syzkaller #0 PREEMPT(full) [ 688.519438][ T5872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 688.519456][ T5872] Workqueue: hci0 hci_rx_work [ 688.519500][ T5872] Call Trace: [ 688.519510][ T5872] [ 688.519520][ T5872] dump_stack_lvl+0x16c/0x1f0 [ 688.519550][ T5872] sysfs_warn_dup+0x7f/0xa0 [ 688.519588][ T5872] sysfs_create_dir_ns+0x24b/0x2b0 [ 688.519626][ T5872] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 688.519663][ T5872] ? find_held_lock+0x2b/0x80 [ 688.519708][ T5872] ? do_raw_spin_unlock+0x172/0x230 [ 688.519739][ T5872] kobject_add_internal+0x2c4/0x9b0 [ 688.519777][ T5872] kobject_add+0x16e/0x240 [ 688.519806][ T5872] ? __pfx_kobject_add+0x10/0x10 [ 688.519838][ T5872] ? do_raw_spin_unlock+0x172/0x230 [ 688.519864][ T5872] ? kobject_put+0xab/0x5a0 [ 688.519903][ T5872] device_add+0x288/0x1aa0 [ 688.519935][ T5872] ? __pfx_dev_set_name+0x10/0x10 [ 688.519971][ T5872] ? __pfx_device_add+0x10/0x10 [ 688.520003][ T5872] ? mgmt_send_event_skb+0x2fb/0x460 [ 688.520051][ T5872] hci_conn_add_sysfs+0x17e/0x230 [ 688.520080][ T5872] le_conn_complete_evt+0x1260/0x2150 [ 688.520129][ T5872] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 688.520165][ T5872] ? bt_warn+0xe4/0x120 [ 688.520198][ T5872] ? __pfx_bt_warn+0x10/0x10 [ 688.520241][ T5872] hci_le_conn_complete_evt+0x23c/0x370 [ 688.520288][ T5872] hci_le_meta_evt+0x357/0x5e0 [ 688.520312][ T5872] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 688.520356][ T5872] hci_event_packet+0x685/0x11c0 [ 688.520395][ T5872] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 688.520422][ T5872] ? __pfx_hci_event_packet+0x10/0x10 [ 688.520463][ T5872] ? kcov_remote_start+0x3c9/0x6d0 [ 688.520490][ T5872] ? lockdep_hardirqs_on+0x7c/0x110 [ 688.520526][ T5872] hci_rx_work+0x2c9/0xeb0 [ 688.520571][ T5872] process_one_work+0x9cf/0x1b70 [ 688.520624][ T5872] ? __pfx_process_one_work+0x10/0x10 [ 688.520671][ T5872] ? assign_work+0x1a0/0x250 [ 688.520717][ T5872] worker_thread+0x6c8/0xf10 [ 688.520768][ T5872] ? __kthread_parkme+0x19e/0x250 [ 688.520802][ T5872] ? __pfx_worker_thread+0x10/0x10 [ 688.520839][ T5872] kthread+0x3c5/0x780 [ 688.520876][ T5872] ? __pfx_kthread+0x10/0x10 [ 688.520913][ T5872] ? rcu_is_watching+0x12/0xc0 [ 688.520943][ T5872] ? __pfx_kthread+0x10/0x10 [ 688.520980][ T5872] ret_from_fork+0x675/0x7d0 [ 688.521015][ T5872] ? __pfx_kthread+0x10/0x10 [ 688.521051][ T5872] ret_from_fork_asm+0x1a/0x30 [ 688.521107][ T5872] [ 688.521140][ T5872] kobject: kobject_add_internal failed for hci0:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 688.782770][ T5872] Bluetooth: hci0: failed to register connection device [ 689.644637][T12547] ICMPv6: process `syz.0.1607' is using deprecated sysctl (syscall) net.ipv6.neigh.wg1.retrans_time - use net.ipv6.neigh.wg1.retrans_time_ms instead [ 690.435721][T12562] netlink: 'syz.1.1611': attribute type 7 has an invalid length. [ 690.456257][T12562] netlink: 17 bytes leftover after parsing attributes in process `syz.1.1611'. [ 690.796292][ T5872] Bluetooth: hci0: command 0x0406 tx timeout [ 695.426336][ T5872] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 696.476516][T12348] syz.2.1549 (12348) used greatest stack depth: 19960 bytes left [ 697.516281][ T5150] Bluetooth: hci1: command 0x0406 tx timeout [ 697.921503][T12700] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 697.928370][T12700] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 699.356410][ T5872] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 700.297744][T12717] netlink: 'syz.3.1655': attribute type 7 has an invalid length. [ 700.328948][T12717] netlink: 17 bytes leftover after parsing attributes in process `syz.3.1655'. [ 701.840743][ T5872] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 701.936826][ T5872] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:0' [ 701.946345][ T5872] CPU: 0 UID: 0 PID: 5872 Comm: kworker/u9:2 Not tainted syzkaller #0 PREEMPT(full) [ 701.946377][ T5872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 701.946393][ T5872] Workqueue: hci0 hci_rx_work [ 701.946432][ T5872] Call Trace: [ 701.946440][ T5872] [ 701.946449][ T5872] dump_stack_lvl+0x16c/0x1f0 [ 701.946575][ T5872] sysfs_warn_dup+0x7f/0xa0 [ 701.946612][ T5872] sysfs_create_dir_ns+0x24b/0x2b0 [ 701.946646][ T5872] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 701.946679][ T5872] ? find_held_lock+0x2b/0x80 [ 701.946711][ T5872] ? do_raw_spin_unlock+0x172/0x230 [ 701.946737][ T5872] kobject_add_internal+0x2c4/0x9b0 [ 701.946768][ T5872] kobject_add+0x16e/0x240 [ 701.946792][ T5872] ? __pfx_kobject_add+0x10/0x10 [ 701.946820][ T5872] ? do_raw_spin_unlock+0x172/0x230 [ 701.946843][ T5872] ? kobject_put+0xab/0x5a0 [ 701.946876][ T5872] device_add+0x288/0x1aa0 [ 701.946903][ T5872] ? __pfx_dev_set_name+0x10/0x10 [ 701.946933][ T5872] ? __pfx_device_add+0x10/0x10 [ 701.946960][ T5872] ? mgmt_send_event_skb+0x2fb/0x460 [ 701.947001][ T5872] hci_conn_add_sysfs+0x17e/0x230 [ 701.947036][ T5872] le_conn_complete_evt+0x1260/0x2150 [ 701.947080][ T5872] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 701.947114][ T5872] ? bt_warn+0xe4/0x120 [ 701.947143][ T5872] ? __pfx_bt_warn+0x10/0x10 [ 701.947182][ T5872] hci_le_conn_complete_evt+0x23c/0x370 [ 701.947225][ T5872] hci_le_meta_evt+0x357/0x5e0 [ 701.947244][ T5872] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 701.947282][ T5872] hci_event_packet+0x685/0x11c0 [ 701.947315][ T5872] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 701.947337][ T5872] ? __pfx_hci_event_packet+0x10/0x10 [ 701.947373][ T5872] ? kcov_remote_start+0x3c9/0x6d0 [ 701.947396][ T5872] ? lockdep_hardirqs_on+0x7c/0x110 [ 701.947426][ T5872] hci_rx_work+0x2c9/0xeb0 [ 701.947463][ T5872] process_one_work+0x9cf/0x1b70 [ 701.947517][ T5872] ? __pfx_process_one_work+0x10/0x10 [ 701.947561][ T5872] ? assign_work+0x1a0/0x250 [ 701.947597][ T5872] worker_thread+0x6c8/0xf10 [ 701.947645][ T5872] ? __kthread_parkme+0x19e/0x250 [ 701.947673][ T5872] ? __pfx_worker_thread+0x10/0x10 [ 701.947706][ T5872] kthread+0x3c5/0x780 [ 701.947738][ T5872] ? __pfx_kthread+0x10/0x10 [ 701.947770][ T5872] ? rcu_is_watching+0x12/0xc0 [ 701.947795][ T5872] ? __pfx_kthread+0x10/0x10 [ 701.947827][ T5872] ret_from_fork+0x675/0x7d0 [ 701.947857][ T5872] ? __pfx_kthread+0x10/0x10 [ 701.947888][ T5872] ret_from_fork_asm+0x1a/0x30 [ 701.947934][ T5872] [ 701.947970][ T5872] kobject: kobject_add_internal failed for hci0:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 702.206107][ T5872] Bluetooth: hci0: failed to register connection device [ 703.082562][T12392] syz.2.1559 (12392) used greatest stack depth: 19224 bytes left [ 704.246734][ T5872] Bluetooth: hci0: command 0x0406 tx timeout [ 705.278426][T12792] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 706.203939][T12814] netlink: 'syz.3.1687': attribute type 3 has an invalid length. [ 707.650979][T12843] netlink: 'syz.1.1698': attribute type 7 has an invalid length. [ 707.676678][T12843] netlink: 17 bytes leftover after parsing attributes in process `syz.1.1698'. [ 707.708309][T12846] netlink: 'syz.0.1699': attribute type 3 has an invalid length. [ 707.869940][ T5872] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 709.388731][T12883] netlink: 'syz.0.1712': attribute type 3 has an invalid length. [ 709.488279][ T5150] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 709.497093][ T5150] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:0' [ 709.508035][ T5150] CPU: 0 UID: 0 PID: 5150 Comm: kworker/u9:1 Not tainted syzkaller #0 PREEMPT(full) [ 709.508069][ T5150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 709.508088][ T5150] Workqueue: hci1 hci_rx_work [ 709.508130][ T5150] Call Trace: [ 709.508139][ T5150] [ 709.508150][ T5150] dump_stack_lvl+0x16c/0x1f0 [ 709.508179][ T5150] sysfs_warn_dup+0x7f/0xa0 [ 709.508219][ T5150] sysfs_create_dir_ns+0x24b/0x2b0 [ 709.508257][ T5150] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 709.508293][ T5150] ? find_held_lock+0x2b/0x80 [ 709.508329][ T5150] ? do_raw_spin_unlock+0x172/0x230 [ 709.508358][ T5150] kobject_add_internal+0x2c4/0x9b0 [ 709.508396][ T5150] kobject_add+0x16e/0x240 [ 709.508425][ T5150] ? __pfx_kobject_add+0x10/0x10 [ 709.508456][ T5150] ? do_raw_spin_unlock+0x172/0x230 [ 709.508483][ T5150] ? kobject_put+0xab/0x5a0 [ 709.508522][ T5150] device_add+0x288/0x1aa0 [ 709.508554][ T5150] ? __pfx_dev_set_name+0x10/0x10 [ 709.508589][ T5150] ? __pfx_device_add+0x10/0x10 [ 709.508620][ T5150] ? mgmt_send_event_skb+0x2fb/0x460 [ 709.508668][ T5150] hci_conn_add_sysfs+0x17e/0x230 [ 709.508697][ T5150] le_conn_complete_evt+0x1260/0x2150 [ 709.508745][ T5150] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 709.508781][ T5150] ? bt_warn+0xe4/0x120 [ 709.508814][ T5150] ? __pfx_bt_warn+0x10/0x10 [ 709.508857][ T5150] hci_le_conn_complete_evt+0x23c/0x370 [ 709.508905][ T5150] hci_le_meta_evt+0x357/0x5e0 [ 709.508929][ T5150] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 709.508982][ T5150] hci_event_packet+0x685/0x11c0 [ 709.509022][ T5150] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 709.509049][ T5150] ? __pfx_hci_event_packet+0x10/0x10 [ 709.509093][ T5150] ? kcov_remote_start+0x3c9/0x6d0 [ 709.509121][ T5150] ? lockdep_hardirqs_on+0x7c/0x110 [ 709.509158][ T5150] hci_rx_work+0x2c9/0xeb0 [ 709.509202][ T5150] process_one_work+0x9cf/0x1b70 [ 709.509255][ T5150] ? __pfx_process_one_work+0x10/0x10 [ 709.509305][ T5150] ? assign_work+0x1a0/0x250 [ 709.509345][ T5150] worker_thread+0x6c8/0xf10 [ 709.509399][ T5150] ? __pfx_worker_thread+0x10/0x10 [ 709.509437][ T5150] kthread+0x3c5/0x780 [ 709.509473][ T5150] ? __pfx_kthread+0x10/0x10 [ 709.509511][ T5150] ? rcu_is_watching+0x12/0xc0 [ 709.509540][ T5150] ? __pfx_kthread+0x10/0x10 [ 709.509577][ T5150] ret_from_fork+0x675/0x7d0 [ 709.509612][ T5150] ? __pfx_kthread+0x10/0x10 [ 709.509647][ T5150] ret_from_fork_asm+0x1a/0x30 [ 709.509701][ T5150] [ 709.509732][ T5150] kobject: kobject_add_internal failed for hci1:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 709.764533][ T5150] Bluetooth: hci1: failed to register connection device [ 709.917063][ T5150] Bluetooth: hci3: command 0x0406 tx timeout [ 710.369503][T12897] snd_virmidi snd_virmidi.0: control 5:9:1:IAªƒ>/Æ[k<÷ÎÇmgx­Ž¬<Ú5ºœ+-Cî°ÜYÈÝ5:0 is already present [ 711.066394][ T5150] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 711.075297][ T5150] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:0' [ 711.086199][ T5150] CPU: 1 UID: 0 PID: 5150 Comm: kworker/u9:1 Not tainted syzkaller #0 PREEMPT(full) [ 711.086233][ T5150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 711.086250][ T5150] Workqueue: hci2 hci_rx_work [ 711.086290][ T5150] Call Trace: [ 711.086300][ T5150] [ 711.086309][ T5150] dump_stack_lvl+0x16c/0x1f0 [ 711.086337][ T5150] sysfs_warn_dup+0x7f/0xa0 [ 711.086376][ T5150] sysfs_create_dir_ns+0x24b/0x2b0 [ 711.086414][ T5150] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 711.086452][ T5150] ? find_held_lock+0x2b/0x80 [ 711.086486][ T5150] ? do_raw_spin_unlock+0x172/0x230 [ 711.086509][ T5150] kobject_add_internal+0x2c4/0x9b0 [ 711.086542][ T5150] kobject_add+0x16e/0x240 [ 711.086567][ T5150] ? __pfx_kobject_add+0x10/0x10 [ 711.086598][ T5150] ? do_raw_spin_unlock+0x172/0x230 [ 711.086625][ T5150] ? kobject_put+0xab/0x5a0 [ 711.086664][ T5150] device_add+0x288/0x1aa0 [ 711.086696][ T5150] ? __pfx_dev_set_name+0x10/0x10 [ 711.086731][ T5150] ? __pfx_device_add+0x10/0x10 [ 711.086763][ T5150] ? mgmt_send_event_skb+0x2fb/0x460 [ 711.086812][ T5150] hci_conn_add_sysfs+0x17e/0x230 [ 711.086841][ T5150] le_conn_complete_evt+0x1260/0x2150 [ 711.086888][ T5150] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 711.086924][ T5150] ? bt_warn+0xe4/0x120 [ 711.086955][ T5150] ? __pfx_bt_warn+0x10/0x10 [ 711.087000][ T5150] hci_le_conn_complete_evt+0x23c/0x370 [ 711.087049][ T5150] hci_le_meta_evt+0x357/0x5e0 [ 711.087073][ T5150] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 711.087122][ T5150] hci_event_packet+0x685/0x11c0 [ 711.087160][ T5150] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 711.087186][ T5150] ? __pfx_hci_event_packet+0x10/0x10 [ 711.087233][ T5150] ? kcov_remote_start+0x3c9/0x6d0 [ 711.087257][ T5150] ? lockdep_hardirqs_on+0x7c/0x110 [ 711.087294][ T5150] hci_rx_work+0x2c9/0xeb0 [ 711.087338][ T5150] process_one_work+0x9cf/0x1b70 [ 711.087392][ T5150] ? __pfx_process_one_work+0x10/0x10 [ 711.087442][ T5150] ? assign_work+0x1a0/0x250 [ 711.087482][ T5150] worker_thread+0x6c8/0xf10 [ 711.087536][ T5150] ? __pfx_worker_thread+0x10/0x10 [ 711.087574][ T5150] kthread+0x3c5/0x780 [ 711.087611][ T5150] ? __pfx_kthread+0x10/0x10 [ 711.087648][ T5150] ? rcu_is_watching+0x12/0xc0 [ 711.087677][ T5150] ? __pfx_kthread+0x10/0x10 [ 711.087712][ T5150] ret_from_fork+0x675/0x7d0 [ 711.087747][ T5150] ? __pfx_kthread+0x10/0x10 [ 711.087783][ T5150] ret_from_fork_asm+0x1a/0x30 [ 711.087836][ T5150] [ 711.087938][ T5150] kobject: kobject_add_internal failed for hci2:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 711.346762][ T5150] Bluetooth: hci2: failed to register connection device [ 711.594591][T12930] snd_virmidi snd_virmidi.0: control 5:9:1:IAªƒ>/Æ[k<÷ÎÇmgx­Ž¬<Ú5ºœ+-Cî°ÜYÈÝ5:0 is already present [ 711.844994][ T5150] Bluetooth: hci1: command 0x0406 tx timeout [ 712.293079][T12951] sctp: [Deprecated]: syz.3.1735 (pid 12951) Use of struct sctp_assoc_value in delayed_ack socket option. [ 712.293079][T12951] Use struct sctp_sack_info instead [ 712.348859][ T5150] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 712.356740][ T5150] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:0' [ 712.366054][ T5150] CPU: 0 UID: 0 PID: 5150 Comm: kworker/u9:1 Not tainted syzkaller #0 PREEMPT(full) [ 712.366088][ T5150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 712.366105][ T5150] Workqueue: hci0 hci_rx_work [ 712.366154][ T5150] Call Trace: [ 712.366162][ T5150] [ 712.366171][ T5150] dump_stack_lvl+0x16c/0x1f0 [ 712.366200][ T5150] sysfs_warn_dup+0x7f/0xa0 [ 712.366238][ T5150] sysfs_create_dir_ns+0x24b/0x2b0 [ 712.366274][ T5150] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 712.366309][ T5150] ? find_held_lock+0x2b/0x80 [ 712.366345][ T5150] ? do_raw_spin_unlock+0x172/0x230 [ 712.366374][ T5150] kobject_add_internal+0x2c4/0x9b0 [ 712.366411][ T5150] kobject_add+0x16e/0x240 [ 712.366439][ T5150] ? __pfx_kobject_add+0x10/0x10 [ 712.366472][ T5150] ? do_raw_spin_unlock+0x172/0x230 [ 712.366499][ T5150] ? kobject_put+0xab/0x5a0 [ 712.366537][ T5150] device_add+0x288/0x1aa0 [ 712.366568][ T5150] ? __pfx_dev_set_name+0x10/0x10 [ 712.366602][ T5150] ? __pfx_device_add+0x10/0x10 [ 712.366631][ T5150] ? mgmt_send_event_skb+0x2fb/0x460 [ 712.366680][ T5150] hci_conn_add_sysfs+0x17e/0x230 [ 712.366709][ T5150] le_conn_complete_evt+0x1260/0x2150 [ 712.366755][ T5150] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 712.366801][ T5150] ? bt_warn+0xe4/0x120 [ 712.366833][ T5150] ? __pfx_bt_warn+0x10/0x10 [ 712.366874][ T5150] hci_le_conn_complete_evt+0x23c/0x370 [ 712.366920][ T5150] hci_le_meta_evt+0x357/0x5e0 [ 712.366944][ T5150] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 712.366987][ T5150] hci_event_packet+0x685/0x11c0 [ 712.367024][ T5150] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 712.367049][ T5150] ? __pfx_hci_event_packet+0x10/0x10 [ 712.367089][ T5150] ? kcov_remote_start+0x3c9/0x6d0 [ 712.367115][ T5150] ? lockdep_hardirqs_on+0x7c/0x110 [ 712.367159][ T5150] hci_rx_work+0x2c9/0xeb0 [ 712.367202][ T5150] process_one_work+0x9cf/0x1b70 [ 712.367252][ T5150] ? __pfx_process_one_work+0x10/0x10 [ 712.367300][ T5150] ? assign_work+0x1a0/0x250 [ 712.367339][ T5150] worker_thread+0x6c8/0xf10 [ 712.367389][ T5150] ? __pfx_worker_thread+0x10/0x10 [ 712.367424][ T5150] kthread+0x3c5/0x780 [ 712.367461][ T5150] ? __pfx_kthread+0x10/0x10 [ 712.367496][ T5150] ? rcu_is_watching+0x12/0xc0 [ 712.367525][ T5150] ? __pfx_kthread+0x10/0x10 [ 712.367560][ T5150] ret_from_fork+0x675/0x7d0 [ 712.367594][ T5150] ? __pfx_kthread+0x10/0x10 [ 712.367629][ T5150] ret_from_fork_asm+0x1a/0x30 [ 712.367683][ T5150] [ 712.604122][ T5150] kobject: kobject_add_internal failed for hci0:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 712.618961][ T5150] Bluetooth: hci0: failed to register connection device [ 713.367535][ T5872] Bluetooth: hci2: command 0x0406 tx timeout [ 714.636343][ T5872] Bluetooth: hci0: command 0x0406 tx timeout [ 717.051571][ T5872] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 717.059344][ T5872] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:0' [ 717.068707][ T5872] CPU: 0 UID: 0 PID: 5872 Comm: kworker/u9:2 Not tainted syzkaller #0 PREEMPT(full) [ 717.068738][ T5872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 717.068752][ T5872] Workqueue: hci0 hci_rx_work [ 717.068790][ T5872] Call Trace: [ 717.068798][ T5872] [ 717.068806][ T5872] dump_stack_lvl+0x16c/0x1f0 [ 717.068834][ T5872] sysfs_warn_dup+0x7f/0xa0 [ 717.068873][ T5872] sysfs_create_dir_ns+0x24b/0x2b0 [ 717.068914][ T5872] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 717.068952][ T5872] ? find_held_lock+0x2b/0x80 [ 717.068988][ T5872] ? do_raw_spin_unlock+0x172/0x230 [ 717.069017][ T5872] kobject_add_internal+0x2c4/0x9b0 [ 717.069054][ T5872] kobject_add+0x16e/0x240 [ 717.069084][ T5872] ? __pfx_kobject_add+0x10/0x10 [ 717.069116][ T5872] ? do_raw_spin_unlock+0x172/0x230 [ 717.069142][ T5872] ? kobject_put+0xab/0x5a0 [ 717.069180][ T5872] device_add+0x288/0x1aa0 [ 717.069212][ T5872] ? __pfx_dev_set_name+0x10/0x10 [ 717.069246][ T5872] ? __pfx_device_add+0x10/0x10 [ 717.069276][ T5872] ? mgmt_send_event_skb+0x2fb/0x460 [ 717.069324][ T5872] hci_conn_add_sysfs+0x17e/0x230 [ 717.069352][ T5872] le_conn_complete_evt+0x1260/0x2150 [ 717.069394][ T5872] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 717.069427][ T5872] ? bt_warn+0xe4/0x120 [ 717.069457][ T5872] ? __pfx_bt_warn+0x10/0x10 [ 717.069502][ T5872] hci_le_conn_complete_evt+0x23c/0x370 [ 717.069559][ T5872] hci_le_meta_evt+0x357/0x5e0 [ 717.069584][ T5872] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 717.069629][ T5872] hci_event_packet+0x685/0x11c0 [ 717.069669][ T5872] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 717.069696][ T5872] ? __pfx_hci_event_packet+0x10/0x10 [ 717.069737][ T5872] ? kcov_remote_start+0x3c9/0x6d0 [ 717.069765][ T5872] ? lockdep_hardirqs_on+0x7c/0x110 [ 717.069800][ T5872] hci_rx_work+0x2c9/0xeb0 [ 717.069843][ T5872] process_one_work+0x9cf/0x1b70 [ 717.069896][ T5872] ? __pfx_process_one_work+0x10/0x10 [ 717.069947][ T5872] ? assign_work+0x1a0/0x250 [ 717.069989][ T5872] worker_thread+0x6c8/0xf10 [ 717.070040][ T5872] ? __kthread_parkme+0x19e/0x250 [ 717.070073][ T5872] ? __pfx_worker_thread+0x10/0x10 [ 717.070109][ T5872] kthread+0x3c5/0x780 [ 717.070145][ T5872] ? __pfx_kthread+0x10/0x10 [ 717.070182][ T5872] ? rcu_is_watching+0x12/0xc0 [ 717.070212][ T5872] ? __pfx_kthread+0x10/0x10 [ 717.070249][ T5872] ret_from_fork+0x675/0x7d0 [ 717.070284][ T5872] ? __pfx_kthread+0x10/0x10 [ 717.070320][ T5872] ret_from_fork_asm+0x1a/0x30 [ 717.070373][ T5872] [ 717.070404][ T5872] kobject: kobject_add_internal failed for hci0:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 717.327156][ T5872] Bluetooth: hci0: failed to register connection device [ 719.366169][ T5884] Bluetooth: hci0: command 0x0406 tx timeout [ 719.851665][ T5872] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 719.916538][ T5150] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 724.097354][T13139] program syz.3.1797 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 724.161676][T13139] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 724.168176][T13139] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 726.050800][T13172] snd_virmidi snd_virmidi.0: control 5:9:1:IAªƒ>/Æ[k<÷ÎÇmgx­Ž¬<Ú5ºœ+-Cî°ÜYÈÝ5:0 is already present [ 727.995229][T13200] netlink: 'syz.1.1816': attribute type 7 has an invalid length. [ 728.003055][T13200] netlink: 17 bytes leftover after parsing attributes in process `syz.1.1816'. [ 729.002501][T13227] netlink: 'syz.2.1827': attribute type 7 has an invalid length. [ 729.092243][T13227] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1827'. [ 731.171421][T13261] netlink: 'syz.0.1837': attribute type 7 has an invalid length. [ 731.197520][T13261] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1837'. [ 733.908100][T13321] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(16) [ 734.311628][T13333] program syz.3.1858 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 734.322284][T13333] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 734.328793][T13333] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 735.338749][T13359] syz.2.1866 uses obsolete (PF_INET,SOCK_PACKET) [ 735.346579][T13361] FAULT_INJECTION: forcing a failure. [ 735.346579][T13361] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 735.366343][T13361] CPU: 0 UID: 0 PID: 13361 Comm: syz.3.1867 Not tainted syzkaller #0 PREEMPT(full) [ 735.366378][T13361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 735.366395][T13361] Call Trace: [ 735.366404][T13361] [ 735.366414][T13361] dump_stack_lvl+0x16c/0x1f0 [ 735.366448][T13361] should_fail_ex+0x512/0x640 [ 735.366485][T13361] _copy_from_user+0x2e/0xd0 [ 735.366518][T13361] restore_sigcontext+0xcb/0x6a0 [ 735.366551][T13361] ? __pfx_restore_sigcontext+0x10/0x10 [ 735.366605][T13361] ? __pfx_restore_altstack+0x10/0x10 [ 735.366641][T13361] ? _raw_spin_unlock_irq+0x23/0x50 [ 735.366680][T13361] ? lockdep_hardirqs_on+0x7c/0x110 [ 735.366712][T13361] __do_sys_rt_sigreturn+0x229/0x2c0 [ 735.366744][T13361] ? __pfx___do_sys_rt_sigreturn+0x10/0x10 [ 735.366787][T13361] do_syscall_64+0xcd/0xfa0 [ 735.366816][T13361] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 735.366841][T13361] RIP: 0033:0x7f592a12b889 [ 735.366863][T13361] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25 [ 735.366887][T13361] RSP: 002b:00007f592af81a80 EFLAGS: 00000202 ORIG_RAX: 000000000000000f [ 735.366911][T13361] RAX: ffffffffffffffda RBX: 00007f592a3e5fa0 RCX: 00007f592a12b889 [ 735.366928][T13361] RDX: 00007f592af81a80 RSI: 00007f592af81bb0 RDI: 0000000000000021 [ 735.366945][T13361] RBP: 00007f592a213f91 R08: 0000000000000000 R09: 0000000000000000 [ 735.366960][T13361] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 735.366976][T13361] R13: 00007f592a3e6038 R14: 00007f592a3e5fa0 R15: 00007fff1bf4f308 [ 735.367012][T13361] [ 735.369014][T13361] FAULT_INJECTION: forcing a failure. [ 735.369014][T13361] name failslab, interval 1, probability 0, space 0, times 0 [ 735.556639][T13361] CPU: 1 UID: 0 PID: 13361 Comm: syz.3.1867 Not tainted syzkaller #0 PREEMPT(full) [ 735.556676][T13361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 735.556691][T13361] Call Trace: [ 735.556700][T13361] [ 735.556710][T13361] dump_stack_lvl+0x16c/0x1f0 [ 735.556744][T13361] should_fail_ex+0x512/0x640 [ 735.556773][T13361] ? fs_reclaim_acquire+0xae/0x150 [ 735.556812][T13361] should_failslab+0xc2/0x120 [ 735.556850][T13361] __kmalloc_noprof+0xdd/0x880 [ 735.556879][T13361] ? tomoyo_encode2+0x100/0x3e0 [ 735.556922][T13361] ? tomoyo_encode2+0x100/0x3e0 [ 735.556956][T13361] tomoyo_encode2+0x100/0x3e0 [ 735.556998][T13361] tomoyo_encode+0x29/0x50 [ 735.557032][T13361] tomoyo_realpath_from_path+0x18f/0x6e0 [ 735.557080][T13361] tomoyo_check_open_permission+0x2ab/0x3c0 [ 735.557115][T13361] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 735.557148][T13361] ? __lock_acquire+0xb8a/0x1c90 [ 735.557221][T13361] ? do_raw_spin_lock+0x12c/0x2b0 [ 735.557257][T13361] tomoyo_file_open+0x6b/0x90 [ 735.557284][T13361] security_file_open+0x84/0x1e0 [ 735.557320][T13361] do_dentry_open+0x597/0x1560 [ 735.557366][T13361] vfs_open+0x82/0x3f0 [ 735.557394][T13361] path_openat+0x2016/0x2f90 [ 735.557439][T13361] ? __pfx_path_openat+0x10/0x10 [ 735.557475][T13361] ? __lock_acquire+0xb8a/0x1c90 [ 735.557524][T13361] do_filp_open+0x20b/0x470 [ 735.557557][T13361] ? __pfx_do_filp_open+0x10/0x10 [ 735.557620][T13361] ? alloc_fd+0x471/0x7d0 [ 735.557662][T13361] do_sys_openat2+0x11b/0x1d0 [ 735.557687][T13361] ? __pfx_do_sys_openat2+0x10/0x10 [ 735.557727][T13361] __x64_sys_openat+0x174/0x210 [ 735.557753][T13361] ? __pfx___x64_sys_openat+0x10/0x10 [ 735.557789][T13361] do_syscall_64+0xcd/0xfa0 [ 735.557816][T13361] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 735.557841][T13361] RIP: 0033:0x7f592a18f7c9 [ 735.557862][T13361] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 735.557887][T13361] RSP: 002b:00007f592af82038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 735.557911][T13361] RAX: ffffffffffffffda RBX: 00007f592a3e5fa0 RCX: 00007f592a18f7c9 [ 735.557925][T13361] RDX: 0000000000020100 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 735.557937][T13361] RBP: 00007f592a213f91 R08: 0000000000000000 R09: 0000000000000000 [ 735.557949][T13361] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 735.557959][T13361] R13: 00007f592a3e6038 R14: 00007f592a3e5fa0 R15: 00007fff1bf4f308 [ 735.557987][T13361] [ 735.559069][T13361] ERROR: Out of memory at tomoyo_realpath_from_path. [ 735.760205][ C1] vkms_vblank_simulate: vblank timer overrun [ 738.811830][T13448] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(16) [ 740.055959][T13474] snd_virmidi snd_virmidi.0: control 5:9:1:IAªƒ>/Æ[k<÷ÎÇmgx­Ž¬<Ú5ºœ+-Cî°ÜYÈÝ5:0 is already present [ 746.151728][T13590] snd_virmidi snd_virmidi.0: control 5:9:1:IAªƒ>/Æ[k<÷ÎÇmgx­Ž¬<Ú5ºœ+-Cî°ÜYÈÝ5:0 is already present [ 747.108878][T13604] netlink: 'syz.0.1941': attribute type 7 has an invalid length. [ 747.140234][T13604] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1941'. [ 747.279041][ T5150] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 747.286614][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.293038][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.403057][T13629] netlink: 'syz.3.1951': attribute type 7 has an invalid length. [ 748.411279][T13629] netlink: 17 bytes leftover after parsing attributes in process `syz.3.1951'. [ 751.276731][T13680] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input12 [ 751.853524][T13683] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input13 [ 752.076263][ T5150] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 753.684007][T13716] snd_virmidi snd_virmidi.0: control 5:9:1:IAªƒ>/Æ[k<÷ÎÇmgx­Ž¬<Ú5ºœ+-Cî°ÜYÈÝ5:0 is already present [ 754.271992][T13721] KVM: debugfs: duplicate directory 13721-3 [ 754.809140][T13751] snd_virmidi snd_virmidi.0: control 5:9:1:IAªƒ>/Æ[k<÷ÎÇmgx­Ž¬<Ú5ºœ+-Cî°ÜYÈÝ5:0 is already present [ 755.747273][T13768] QAT: Stopping all acceleration devices. [ 755.877336][T13770] Kernel: The 'panic_print' parameter is now deprecated. Please use 'panic_sys_info' and 'panic_console_replay' instead. [ 756.304170][T13777] snd_virmidi snd_virmidi.0: control 5:9:1:IAªƒ>/Æ[k<÷ÎÇmgx­Ž¬<Ú5ºœ+-Cî°ÜYÈÝ5:0 is already present [ 756.542535][T13780] Process accounting resumed [ 757.671861][T13805] Process accounting resumed [ 758.074157][T13818] snd_virmidi snd_virmidi.0: control 5:9:1:IAªƒ>/Æ[k<÷ÎÇmgx­Ž¬<Ú5ºœ+-Cî°ÜYÈÝ5:0 is already present [ 761.291536][T13892] netlink: 'syz.3.2035': attribute type 7 has an invalid length. [ 761.316761][T13892] netlink: 17 bytes leftover after parsing attributes in process `syz.3.2035'. [ 763.442541][T13942] blk_print_req_error: 6 callbacks suppressed [ 763.442564][T13942] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 763.506568][T13942] buffer_io_error: 6 callbacks suppressed [ 763.506587][T13942] Buffer I/O error on dev nbd6, logical block 0, async page read [ 763.543429][T13942] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 763.587986][T13942] Buffer I/O error on dev nbd6, logical block 0, async page read [ 763.601479][T13942] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 763.610920][T13942] Buffer I/O error on dev nbd6, logical block 0, async page read [ 763.620346][T13942] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 763.667457][T13942] Buffer I/O error on dev nbd6, logical block 0, async page read [ 763.706422][T13942] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 763.730773][T13942] Buffer I/O error on dev nbd6, logical block 0, async page read [ 763.765525][T13942] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 763.777961][T13942] Buffer I/O error on dev nbd6, logical block 0, async page read [ 763.790454][T13942] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 763.824877][T13942] Buffer I/O error on dev nbd6, logical block 0, async page read [ 763.845834][T13942] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 763.856555][T13942] Buffer I/O error on dev nbd6, logical block 0, async page read [ 763.884908][T13942] ldm_validate_partition_table(): Disk read failed. [ 763.899270][T13942] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 763.910723][T13942] Buffer I/O error on dev nbd6, logical block 0, async page read [ 763.924746][T13942] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 763.996562][T13942] Buffer I/O error on dev nbd6, logical block 0, async page read [ 764.025268][T13969] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2057'. [ 764.037976][T13942] Dev nbd6: unable to read RDB block 0 [ 764.051386][T13942] nbd6: unable to read partition table [ 764.181833][T13957] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 764.189509][T13957] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 764.204425][T13957] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 764.213788][T13957] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 764.221840][T13957] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 764.229826][T13957] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 764.236264][T13957] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 764.244513][T13957] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 764.251011][T13957] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 764.259106][T13957] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 764.268397][T13957] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 764.280322][T13957] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 764.286530][T13957] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 764.297719][T13957] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 764.307822][T13957] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 764.317051][T13957] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 764.323172][T13957] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 764.333389][T13957] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 764.409235][ T5200] ldm_validate_partition_table(): Disk read failed. [ 764.417046][ T5200] Dev nbd6: unable to read RDB block 0 [ 764.423208][ T5200] nbd6: unable to read partition table [ 764.438183][ T5200] ldm_validate_partition_table(): Disk read failed. [ 764.447370][ T5200] Dev nbd6: unable to read RDB block 0 [ 764.453585][ T5200] nbd6: unable to read partition table [ 764.495521][ T5887] ldm_validate_partition_table(): Disk read failed. [ 764.522176][ T5887] Dev nbd6: unable to read RDB block 0 [ 764.546907][ T5887] nbd6: unable to read partition table [ 764.592613][ T5887] ldm_validate_partition_table(): Disk read failed. [ 764.614636][ T5887] Dev nbd6: unable to read RDB block 0 [ 764.652766][ T5887] nbd6: unable to read partition table [ 765.509295][T14003] capability: warning: `syz.1.2068' uses 32-bit capabilities (legacy support in use) [ 765.708822][T14014] Process accounting resumed [ 765.996222][ T5150] Bluetooth: hci0: command 0x0406 tx timeout [ 766.326456][ T5872] Bluetooth: hci1: command 0x0406 tx timeout [ 766.332722][ T5150] Bluetooth: hci2: command 0x0406 tx timeout [ 766.396241][ T5150] Bluetooth: hci3: command 0x0406 tx timeout [ 767.215565][T14056] netlink: 342 bytes leftover after parsing attributes in process `syz.1.2085'. [ 768.021601][T14076] binder: BINDER_SET_CONTEXT_MGR already set [ 768.036238][T14076] binder: 14075:14076 ioctl 4018620d 9 returned -16 [ 768.079237][ T5150] Bluetooth: hci0: command 0x0406 tx timeout [ 768.397486][ T5150] Bluetooth: hci2: command 0x0406 tx timeout [ 768.403592][ T5872] Bluetooth: hci1: command 0x0406 tx timeout [ 768.476364][ T5150] Bluetooth: hci3: command 0x0406 tx timeout [ 768.749801][T14096] syz.0.2100 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 770.159031][ T5150] Bluetooth: hci0: command 0x0406 tx timeout [ 770.478535][ T5150] Bluetooth: hci2: command 0x0406 tx timeout [ 770.484560][ T5872] Bluetooth: hci1: command 0x0406 tx timeout [ 770.556277][ T5150] Bluetooth: hci3: command 0x0406 tx timeout [ 772.241528][ T5150] Bluetooth: hci0: command 0x0406 tx timeout [ 772.566882][ T5150] Bluetooth: hci2: command 0x0406 tx timeout [ 772.572951][ T5150] Bluetooth: hci1: command 0x0406 tx timeout [ 774.318945][ T5150] Bluetooth: hci0: command 0x0406 tx timeout [ 774.843792][T14207] snd_virmidi snd_virmidi.0: control 5:9:1:IAªƒ>/Æ[k<÷ÎÇmgx­Ž¬<Ú5ºœ+-Cî°ÜYÈÝ5:0 is already present [ 776.411725][ T5150] Bluetooth: hci0: command 0x0406 tx timeout [ 778.076047][T14238] binder: BINDER_SET_CONTEXT_MGR already set [ 778.194798][T14238] binder: 14237:14238 ioctl 4018620d 9 returned -16 [ 778.225933][T14251] snd_virmidi snd_virmidi.0: control 5:9:1:IAªƒ>/Æ[k<÷ÎÇmgx­Ž¬<Ú5ºœ+-Cî°ÜYÈÝ5:0 is already present [ 778.479027][ T5150] Bluetooth: hci0: command 0x0406 tx timeout [ 780.172440][T14256] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 780.206338][T14256] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 780.267017][T14256] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 780.273088][T14256] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 780.636982][T14275] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2153'. [ 780.741209][T14280] netlink: 'syz.0.2154': attribute type 7 has an invalid length. [ 780.749071][T14280] netlink: 17 bytes leftover after parsing attributes in process `syz.0.2154'. [ 781.203899][ T5872] Bluetooth: hci0: command 0x0406 tx timeout [ 782.237238][ T5872] Bluetooth: hci1: command 0x0406 tx timeout [ 782.316291][ T5872] Bluetooth: hci3: command 0x0406 tx timeout [ 782.322361][ T5872] Bluetooth: hci2: command 0x0406 tx timeout [ 782.426305][T14305] snd_virmidi snd_virmidi.0: control 5:9:1:IAªƒ>/Æ[k<÷ÎÇmgx­Ž¬<Ú5ºœ+-Cî°ÜYÈÝ5:0 is already present [ 782.864411][T14315] netlink: 'syz.1.2167': attribute type 7 has an invalid length. [ 782.906206][T14315] netlink: 17 bytes leftover after parsing attributes in process `syz.1.2167'. [ 785.202056][T14351] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2178'. [ 785.213247][T14352] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2180'. [ 785.422377][T14343] binder: BINDER_SET_CONTEXT_MGR already set [ 785.432950][T14343] binder: 14340:14343 ioctl 4018620d 9 returned -16 [ 785.801426][T14356] netlink: 'syz.3.2182': attribute type 7 has an invalid length. [ 785.908735][T14356] netlink: 17 bytes leftover after parsing attributes in process `syz.3.2182'. [ 787.544737][T14396] binder: BINDER_SET_CONTEXT_MGR already set [ 787.564044][T14396] binder: 14395:14396 ioctl 4018620d 9 returned -16 [ 789.092630][T14394] Process accounting paused [ 790.577476][T14438] binder: BINDER_SET_CONTEXT_MGR already set [ 790.583519][T14438] binder: 14437:14438 ioctl 4018620d 9 returned -16 [ 791.644448][T14460] binder: BINDER_SET_CONTEXT_MGR already set [ 791.699279][T14460] binder: 14459:14460 ioctl 4018620d 9 returned -16 [ 793.255064][T14485] binder: BINDER_SET_CONTEXT_MGR already set [ 793.296420][T14485] binder: 14479:14485 ioctl 4018620d 9 returned -16 [ 794.991388][T14509] netlink: 'syz.2.2226': attribute type 7 has an invalid length. [ 794.999293][T14509] netlink: 17 bytes leftover after parsing attributes in process `syz.2.2226'. [ 795.549356][T14514] hub 1-0:1.0: USB hub found [ 795.607562][T14514] hub 1-0:1.0: 1 port detected [ 796.049557][T14517] Process accounting paused [ 796.114960][T14520] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input16 [ 797.406080][T14543] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2234'. [ 798.427482][T14552] binder: BINDER_SET_CONTEXT_MGR already set [ 798.433479][T14552] binder: 14550:14552 ioctl 4018620d 9 returned -16 [ 800.719329][T14582] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2249'. [ 802.569887][T14592] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2250'. [ 803.469757][T14601] binder: BINDER_SET_CONTEXT_MGR already set [ 803.475754][T14601] binder: 14600:14601 ioctl 4018620d 9 returned -16 [ 804.359714][T14614] netlink: 25 bytes leftover after parsing attributes in process `syz.2.2258'. [ 807.477966][T14651] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input17 [ 808.723462][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.729903][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.973238][T14673] can: request_module (can-proto-3) failed. [ 809.499610][T14683] binder: BINDER_SET_CONTEXT_MGR already set [ 809.505820][T14683] binder: 14681:14683 ioctl 4018620d 9 returned -16 [ 810.842851][T14707] snd_virmidi snd_virmidi.0: control 5:9:1:IAªƒ>/Æ[k<÷ÎÇmgx­Ž¬<Ú5ºœ+-Cî°ÜYÈÝ5:0 is already present [ 814.551279][T14773] __vm_enough_memory: pid: 14773, comm: syz.2.2311, bytes: 4398046511104 not enough memory for the allocation [ 816.056368][T14800] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input18 [ 817.188565][T14804] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input19 [ 818.326836][T14845] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:104: comm syz-executor: Corrupt inode bitmap - block_group = 0, inode_bitmap = 137 [ 818.378477][T14845] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:104: comm syz-executor: Corrupt inode bitmap - block_group = 1, inode_bitmap = 138 [ 818.452544][T14845] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz-executor: bg 0: bad block bitmap checksum [ 819.266981][ T5150] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 819.449434][ T5150] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 819.466369][ T5150] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 819.475540][T14809] Process accounting resumed [ 819.485586][ T5150] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 819.496292][ T5150] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 820.007533][T14870] snd_virmidi snd_virmidi.0: control 5:9:1:IAªƒ>/Æ[k<÷ÎÇmgx­Ž¬<Ú5ºœ+-Cî°ÜYÈÝ5:0 is already present [ 820.065982][T14855] chnl_net:caif_netlink_parms(): no params data found [ 820.834611][T14855] bridge0: port 1(bridge_slave_0) entered blocking state [ 820.853934][T14855] bridge0: port 1(bridge_slave_0) entered disabled state [ 820.906386][T14855] bridge_slave_0: entered allmulticast mode [ 820.914228][T14855] bridge_slave_0: entered promiscuous mode [ 820.939000][T14855] bridge0: port 2(bridge_slave_1) entered blocking state [ 820.956257][T14855] bridge0: port 2(bridge_slave_1) entered disabled state [ 820.963520][T14855] bridge_slave_1: entered allmulticast mode [ 820.989843][T14855] bridge_slave_1: entered promiscuous mode [ 821.092361][T14855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 821.113798][T14855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 821.199588][T14855] team0: Port device team_slave_0 added [ 821.209186][T14855] team0: Port device team_slave_1 added [ 821.361593][T14855] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 821.376231][T14855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 821.403531][T14855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 821.461276][T14855] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 821.484629][T14855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 821.596833][ T5150] Bluetooth: hci2: command tx timeout [ 821.816816][T14855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 822.253683][T14855] hsr_slave_0: entered promiscuous mode [ 822.277306][T14855] hsr_slave_1: entered promiscuous mode [ 822.293489][T14855] debugfs: 'hsr0' already exists in 'hsr' [ 822.316494][T14855] Cannot create hsr debugfs directory [ 822.606711][T14912] binder: BINDER_SET_CONTEXT_MGR already set [ 822.617691][T14912] binder: 14910:14912 ioctl 4018620d 9 returned -16 [ 822.949978][T14855] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 823.171049][T14855] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 823.298446][T14929] snd_virmidi snd_virmidi.0: control 5:9:1:IAªƒ>/Æ[k<÷ÎÇmgx­Ž¬<Ú5ºœ+-Cî°ÜYÈÝ5:0 is already present [ 823.404822][T14855] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 823.569202][T14855] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 823.662229][T14939] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input20 [ 823.676583][ T5150] Bluetooth: hci2: command tx timeout [ 823.819272][T14940] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input21 [ 824.093957][T14855] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 824.124714][T14855] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 824.146580][T14855] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 824.320144][T14855] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 824.482921][T14855] 8021q: adding VLAN 0 to HW filter on device bond0 [ 824.529916][T14855] 8021q: adding VLAN 0 to HW filter on device team0 [ 824.565657][ T3503] bridge0: port 1(bridge_slave_0) entered blocking state [ 824.572961][ T3503] bridge0: port 1(bridge_slave_0) entered forwarding state [ 824.630339][ T5943] bridge0: port 2(bridge_slave_1) entered blocking state [ 824.637648][ T5943] bridge0: port 2(bridge_slave_1) entered forwarding state [ 824.746563][T14961] snd_virmidi snd_virmidi.0: control 5:9:1:IAªƒ>/Æ[k<÷ÎÇmgx­Ž¬<Ú5ºœ+-Cî°ÜYÈÝ5:0 is already present [ 825.405469][T14855] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 825.652334][T14855] veth0_vlan: entered promiscuous mode [ 825.672779][T14855] veth1_vlan: entered promiscuous mode [ 825.695980][T14991] binder: BINDER_SET_CONTEXT_MGR already set [ 825.735908][T14855] veth0_macvtap: entered promiscuous mode [ 825.748864][T14855] veth1_macvtap: entered promiscuous mode [ 825.757410][ T5150] Bluetooth: hci2: command tx timeout [ 825.784003][T14855] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 825.797775][T14855] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 825.859934][T14991] binder: 14990:14991 ioctl 4018620d 9 returned -16 [ 826.001994][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 826.033800][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 826.067839][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 826.081834][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 826.083785][ T3503] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 826.111552][ T3503] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 826.257320][ T3489] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 826.265185][ T3489] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 826.576571][T15012] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2337'. [ 826.654646][T14998] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 826.663405][T14998] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 826.683692][T14998] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 826.690475][T14998] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 826.718554][T14998] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 826.793912][T14998] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 828.372459][ T5872] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 828.382868][ T5872] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 828.393308][ T5872] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 828.401442][ T5872] Bluetooth: hci0: command 0x0406 tx timeout [ 828.412500][T15048] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 828.421141][T15048] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 828.718190][T15048] Bluetooth: hci2: command 0x0c1a tx timeout [ 828.724398][T15048] Bluetooth: hci3: command 0x0406 tx timeout [ 828.730852][ T5150] Bluetooth: hci1: command 0x0406 tx timeout [ 829.351462][T15043] chnl_net:caif_netlink_parms(): no params data found [ 829.542308][T15076] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input22 [ 829.765989][T15080] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input23 [ 829.797500][T15043] bridge0: port 1(bridge_slave_0) entered blocking state [ 829.826474][T15043] bridge0: port 1(bridge_slave_0) entered disabled state [ 829.834372][T15043] bridge_slave_0: entered allmulticast mode [ 829.850570][T15043] bridge_slave_0: entered promiscuous mode [ 829.881010][T15043] bridge0: port 2(bridge_slave_1) entered blocking state [ 829.896474][T15043] bridge0: port 2(bridge_slave_1) entered disabled state [ 829.909308][T15043] bridge_slave_1: entered allmulticast mode [ 829.918626][T15043] bridge_slave_1: entered promiscuous mode [ 830.063516][T15043] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 830.088308][T15043] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 830.138761][T15043] team0: Port device team_slave_0 added [ 830.150188][T15043] team0: Port device team_slave_1 added [ 830.209296][T15043] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 830.225958][T15043] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 830.263607][T15097] FAULT_INJECTION: forcing a failure. [ 830.263607][T15097] name fail_futex, interval 1, probability 0, space 0, times 0 [ 830.274741][T15043] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 830.295003][T15043] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 830.302970][T15043] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 830.305749][T15097] CPU: 1 UID: 0 PID: 15097 Comm: syz.3.2407 Not tainted syzkaller #0 PREEMPT(full) [ 830.305787][T15097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 830.305804][T15097] Call Trace: [ 830.305814][T15097] [ 830.305824][T15097] dump_stack_lvl+0x16c/0x1f0 [ 830.305858][T15097] should_fail_ex+0x512/0x640 [ 830.305905][T15097] get_futex_key+0x1d0/0x1560 [ 830.305947][T15097] ? __pfx_get_futex_key+0x10/0x10 [ 830.305995][T15097] futex_wake+0xea/0x530 [ 830.306023][T15097] ? __pfx_futex_wake+0x10/0x10 [ 830.306048][T15097] ? rcu_is_watching+0x12/0xc0 [ 830.306095][T15097] do_futex+0x1e3/0x350 [ 830.306130][T15097] ? __pfx_do_futex+0x10/0x10 [ 830.306165][T15097] ? __fput+0x68d/0xb70 [ 830.306201][T15097] ? __pfx___might_resched+0x10/0x10 [ 830.306237][T15097] __x64_sys_futex+0x1e0/0x4c0 [ 830.306275][T15097] ? __pfx_blkcg_maybe_throttle_current+0x10/0x10 [ 830.306314][T15097] ? __pfx___x64_sys_futex+0x10/0x10 [ 830.306354][T15097] ? __pfx___do_sys_close_range+0x10/0x10 [ 830.306397][T15097] do_syscall_64+0xcd/0xfa0 [ 830.306426][T15097] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 830.306456][T15097] RIP: 0033:0x7faf4cf8f7c9 [ 830.306478][T15097] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 830.306503][T15097] RSP: 002b:00007faf4dd870e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 830.306529][T15097] RAX: ffffffffffffffda RBX: 00007faf4d1e5fa8 RCX: 00007faf4cf8f7c9 [ 830.306546][T15097] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007faf4d1e5fac [ 830.306562][T15097] RBP: 00007faf4d1e5fa0 R08: 00007faf4dd88000 R09: 0000000000000000 [ 830.306579][T15097] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 830.306594][T15097] R13: 00007faf4d1e6038 R14: 00007ffc977598b0 R15: 00007ffc97759998 [ 830.306629][T15097] [ 830.330712][ C0] vkms_vblank_simulate: vblank timer overrun [ 830.472398][ C0] vkms_vblank_simulate: vblank timer overrun [ 830.516506][ T5872] Bluetooth: hci4: command tx timeout [ 830.546356][T15043] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 830.662902][T15043] hsr_slave_0: entered promiscuous mode [ 830.670512][T15043] hsr_slave_1: entered promiscuous mode [ 830.678004][T15043] debugfs: 'hsr0' already exists in 'hsr' [ 830.684934][T15043] Cannot create hsr debugfs directory [ 830.797312][ T5872] Bluetooth: hci2: command 0x0c1a tx timeout [ 831.026443][T15108] snd_virmidi snd_virmidi.0: control 5:9:1:IAªƒ>/Æ[k<÷ÎÇmgx­Ž¬<Ú5ºœ+-Cî°ÜYÈÝ5:0 is already present [ 831.132625][T15043] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 831.359026][T15043] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 831.467594][T15043] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 831.573445][T15043] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 831.835666][T15043] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 831.861051][T15043] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 831.881548][T15043] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 831.900626][T15043] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 832.131987][T15043] 8021q: adding VLAN 0 to HW filter on device bond0 [ 832.182971][T15043] 8021q: adding VLAN 0 to HW filter on device team0 [ 832.238942][ T5947] bridge0: port 1(bridge_slave_0) entered blocking state [ 832.246248][ T5947] bridge0: port 1(bridge_slave_0) entered forwarding state [ 832.278564][ T5947] bridge0: port 2(bridge_slave_1) entered blocking state [ 832.285867][ T5947] bridge0: port 2(bridge_slave_1) entered forwarding state [ 832.549684][T15153] FAULT_INJECTION: forcing a failure. [ 832.549684][T15153] name failslab, interval 1, probability 0, space 0, times 0 [ 832.566292][ T5872] Bluetooth: hci4: command tx timeout [ 832.606642][T15153] CPU: 0 UID: 0 PID: 15153 Comm: syz.3.2426 Not tainted syzkaller #0 PREEMPT(full) [ 832.606680][T15153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 832.606698][T15153] Call Trace: [ 832.606707][T15153] [ 832.606717][T15153] dump_stack_lvl+0x16c/0x1f0 [ 832.606753][T15153] should_fail_ex+0x512/0x640 [ 832.606785][T15153] ? kmem_cache_alloc_lru_noprof+0x66/0x6e0 [ 832.606820][T15153] should_failslab+0xc2/0x120 [ 832.606860][T15153] kmem_cache_alloc_lru_noprof+0x79/0x6e0 [ 832.606892][T15153] ? __d_alloc+0x35/0xae0 [ 832.606932][T15153] ? __d_alloc+0x35/0xae0 [ 832.606962][T15153] __d_alloc+0x35/0xae0 [ 832.607009][T15153] d_alloc_pseudo+0x1c/0xc0 [ 832.607033][T15153] alloc_file_pseudo+0xcf/0x230 [ 832.607074][T15153] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 832.607115][T15153] ? alloc_fd+0x471/0x7d0 [ 832.607158][T15153] sock_alloc_file+0x50/0x210 [ 832.607198][T15153] __sys_socket+0x1c0/0x260 [ 832.607226][T15153] ? __pfx___sys_socket+0x10/0x10 [ 832.607256][T15153] ? do_user_addr_fault+0x843/0x1370 [ 832.607302][T15153] __x64_sys_socket+0x72/0xb0 [ 832.607326][T15153] ? lockdep_hardirqs_on+0x7c/0x110 [ 832.607352][T15153] do_syscall_64+0xcd/0xfa0 [ 832.607382][T15153] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 832.607408][T15153] RIP: 0033:0x7faf4cf916e7 [ 832.607429][T15153] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 832.607453][T15153] RSP: 002b:00007faf4dd85fa8 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 832.607477][T15153] RAX: ffffffffffffffda RBX: 00007faf4d1e5fa0 RCX: 00007faf4cf916e7 [ 832.607495][T15153] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 832.607510][T15153] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 832.607523][T15153] R10: 0000200000000040 R11: 0000000000000286 R12: 0000000000000000 [ 832.607537][T15153] R13: 00007faf4d1e6038 R14: 00007faf4d1e5fa0 R15: 00007ffc97759998 [ 832.607573][T15153] [ 833.056461][ T5872] Bluetooth: hci2: command 0x0c1a tx timeout [ 833.772085][T15043] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 833.957343][T15174] netlink: 342 bytes leftover after parsing attributes in process `syz.0.2432'. [ 834.102534][T15043] veth0_vlan: entered promiscuous mode [ 834.226873][T15043] veth1_vlan: entered promiscuous mode [ 834.412412][T15043] veth0_macvtap: entered promiscuous mode [ 834.636560][ T5872] Bluetooth: hci4: command tx timeout [ 834.709285][T15043] veth1_macvtap: entered promiscuous mode [ 834.727651][T15185] warning: `syz.3.2434' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 834.801765][T15043] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 834.967417][T15043] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 835.041450][ T5947] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 835.060070][ T5947] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 835.524887][ T5947] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 835.536301][ T5947] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 835.700653][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 835.737316][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 836.098199][T15200] random: crng reseeded on system resumption [ 836.269465][ T6429] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 836.295003][ T6429] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 836.716673][ T5872] Bluetooth: hci4: command tx timeout [ 836.970010][T15205] binder: BINDER_SET_CONTEXT_MGR already set [ 837.037499][T15205] binder: 15201:15205 ioctl 4018620d 9 returned -16 [ 837.295934][T15219] binder: BINDER_SET_CONTEXT_MGR already set [ 837.307243][T15219] binder: 15212:15219 ioctl 4018620d 9 returned -16 [ 837.925214][ T5150] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 837.935885][ T5150] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 837.955975][ T5150] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 837.973984][ T5150] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 837.984472][ T5150] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 838.496826][T15238] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 838.504080][T15238] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 838.510713][T15238] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 838.518257][T15238] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 838.530620][T15238] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 838.541593][T15238] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 838.548728][T15238] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 838.564335][T15238] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 839.054429][T15249] netlink: 25 bytes leftover after parsing attributes in process `syz.1.2451'. [ 839.164476][T15232] chnl_net:caif_netlink_parms(): no params data found [ 839.381642][T15255] binder: BINDER_SET_CONTEXT_MGR already set [ 839.396690][T15255] binder: 15254:15255 ioctl 4018620d 9 returned -16 [ 839.433027][T15232] bridge0: port 1(bridge_slave_0) entered blocking state [ 839.446686][T15232] bridge0: port 1(bridge_slave_0) entered disabled state [ 839.460163][T15232] bridge_slave_0: entered allmulticast mode [ 839.471194][T15232] bridge_slave_0: entered promiscuous mode [ 839.483277][T15232] bridge0: port 2(bridge_slave_1) entered blocking state [ 839.491414][T15232] bridge0: port 2(bridge_slave_1) entered disabled state [ 839.498896][T15232] bridge_slave_1: entered allmulticast mode [ 839.529805][T15232] bridge_slave_1: entered promiscuous mode [ 839.593189][T15232] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 839.623017][T15232] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 839.712632][T15232] team0: Port device team_slave_0 added [ 839.729797][T15232] team0: Port device team_slave_1 added [ 839.799780][T15232] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 839.816416][T15232] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 839.884256][T15232] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 839.897453][T15272] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2457'. [ 839.919285][T15232] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 839.936163][T15232] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 839.975865][T15232] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 840.244257][T15232] hsr_slave_0: entered promiscuous mode [ 840.252239][T15232] hsr_slave_1: entered promiscuous mode [ 840.259887][T15232] debugfs: 'hsr0' already exists in 'hsr' [ 840.296255][T15232] Cannot create hsr debugfs directory [ 840.319574][ T5150] Bluetooth: hci3: command 0x0406 tx timeout [ 840.570477][ T5150] Bluetooth: hci4: command 0x0c1a tx timeout [ 840.570511][T15048] Bluetooth: hci2: command 0x0c1a tx timeout [ 840.584662][ T5872] Bluetooth: hci0: command 0x041b tx timeout [ 840.640189][T15286] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 840.669811][T15232] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 840.904822][T15232] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 841.091952][T15290] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 841.107944][T15290] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 841.119803][T15290] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 841.133670][T15232] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 841.156547][T15290] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 841.315302][T15232] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 841.765721][T15232] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 841.795351][T15232] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 841.812225][T15232] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 841.847834][T15232] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 842.079047][T15232] 8021q: adding VLAN 0 to HW filter on device bond0 [ 842.129818][T15232] 8021q: adding VLAN 0 to HW filter on device team0 [ 842.169650][ T3503] bridge0: port 1(bridge_slave_0) entered blocking state [ 842.178424][ T3503] bridge0: port 1(bridge_slave_0) entered forwarding state [ 842.224241][ T3503] bridge0: port 2(bridge_slave_1) entered blocking state [ 842.231667][ T3503] bridge0: port 2(bridge_slave_1) entered forwarding state [ 842.548425][T15325] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input24 [ 842.722439][T15232] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 842.809078][T15232] veth0_vlan: entered promiscuous mode [ 842.832870][T15232] veth1_vlan: entered promiscuous mode [ 842.863617][T15329] binder: BINDER_SET_CONTEXT_MGR already set [ 842.906901][T15329] binder: 15327:15329 ioctl 4018620d 9 returned -16 [ 842.934955][T15328] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input25 [ 842.937189][T15232] veth0_macvtap: entered promiscuous mode [ 842.980872][T15232] veth1_macvtap: entered promiscuous mode [ 843.103529][T15232] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 843.127632][ T5872] Bluetooth: hci2: command 0x0c1a tx timeout [ 843.134711][ T5872] Bluetooth: hci3: command 0x0406 tx timeout [ 843.148632][T15232] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 843.172420][ T3503] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 843.198100][ T5872] Bluetooth: hci0: command 0x041b tx timeout [ 843.204189][ T5872] Bluetooth: hci4: command 0x0c1a tx timeout [ 843.224006][ T3503] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 843.271378][ T3503] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 843.399218][ T3503] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 843.582462][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 843.635104][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 843.727596][ T3503] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 843.735567][ T3503] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 843.837364][T15349] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 843.882189][T15352] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input26 [ 844.158218][T15360] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2482'. [ 844.375973][T15353] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input27 [ 844.923435][T15366] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 844.997550][T15366] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 845.006774][T15366] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 845.067456][T15366] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 845.270077][T15377] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input28 [ 845.601620][T15378] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input29 [ 845.769475][T15048] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 845.780193][T15048] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 845.791114][T15048] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 845.801620][T15048] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 845.810059][T15048] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 846.116608][T15390] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 846.624517][T15382] chnl_net:caif_netlink_parms(): no params data found [ 846.748158][T15398] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2492'. [ 847.049127][T15048] Bluetooth: hci2: command 0x0c1a tx timeout [ 847.049126][ T5872] Bluetooth: hci4: command 0x0c1a tx timeout [ 847.120248][T15048] Bluetooth: hci0: command 0x041b tx timeout [ 847.280590][T15400] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 847.296528][T15400] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 847.303998][T15400] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 847.412759][T15400] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 847.427770][T15382] bridge0: port 1(bridge_slave_0) entered blocking state [ 847.435865][T15382] bridge0: port 1(bridge_slave_0) entered disabled state [ 847.444545][T15382] bridge_slave_0: entered allmulticast mode [ 847.452630][T15382] bridge_slave_0: entered promiscuous mode [ 847.459836][T15400] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 847.470271][T15382] bridge0: port 2(bridge_slave_1) entered blocking state [ 847.479359][T15382] bridge0: port 2(bridge_slave_1) entered disabled state [ 847.486926][T15382] bridge_slave_1: entered allmulticast mode [ 847.498694][T15382] bridge_slave_1: entered promiscuous mode [ 847.543802][T15400] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 847.699862][T15382] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 847.736242][T15382] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 847.881502][T15382] team0: Port device team_slave_0 added [ 847.963595][T15382] team0: Port device team_slave_1 added [ 848.131865][T15382] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 848.146160][T15382] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 848.154879][T15419] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input30 [ 848.209649][T15382] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 848.245853][T15382] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 848.271230][T15382] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 848.346122][T15382] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 848.449929][T15427] random: crng reseeded on system resumption [ 848.539270][T15382] hsr_slave_0: entered promiscuous mode [ 848.560004][T15420] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input31 [ 848.579351][T15382] hsr_slave_1: entered promiscuous mode [ 848.610514][T15382] debugfs: 'hsr0' already exists in 'hsr' [ 848.628726][T15382] Cannot create hsr debugfs directory [ 849.276412][ T5872] Bluetooth: hci2: command 0x0c1a tx timeout [ 849.356397][T15048] Bluetooth: hci0: command 0x041b tx timeout [ 849.363226][ T5872] Bluetooth: hci4: command 0x0c1a tx timeout [ 849.437265][ T5872] Bluetooth: hci1: command 0x041b tx timeout [ 850.000582][T15382] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 850.488183][T15382] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 850.628584][T15382] bridge0: port 3(netdevsim1) entered disabled state [ 850.713053][T15382] netdevsim netdevsim2 netdevsim1 (unregistering): left allmulticast mode [ 850.735845][T15382] netdevsim netdevsim2 netdevsim1 (unregistering): left promiscuous mode [ 850.747177][T15382] bridge0: port 3(netdevsim1) entered disabled state [ 850.791114][T15382] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 851.123951][T15457] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 851.133517][T15457] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 851.144411][T15382] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 851.155261][T15457] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 851.162299][T15457] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 851.919884][T15470] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2513'. [ 851.928467][T15382] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 851.978416][T15382] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 852.001875][T15382] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 852.097736][T15382] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 852.127549][T15469] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 852.135795][T15469] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 852.255173][T15469] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 852.264246][T15469] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 852.727097][T15382] 8021q: adding VLAN 0 to HW filter on device bond0 [ 852.810199][T15382] 8021q: adding VLAN 0 to HW filter on device team0 [ 852.826435][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 852.833618][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 852.924810][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 852.932156][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 853.456572][T15501] random: crng reseeded on system resumption [ 853.641739][T15382] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 854.082720][ T5872] Bluetooth: hci2: command 0x0c1a tx timeout [ 854.094953][T15382] veth0_vlan: entered promiscuous mode [ 854.153151][T15382] veth1_vlan: entered promiscuous mode [ 854.160551][ T5872] Bluetooth: hci4: command 0x0c1a tx timeout [ 854.204575][T15382] veth0_macvtap: entered promiscuous mode [ 854.221308][T15507] binder: BINDER_SET_CONTEXT_MGR already set [ 854.245460][T15382] veth1_macvtap: entered promiscuous mode [ 854.292137][T15382] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 854.307616][T15507] binder: 15505:15507 ioctl 4018620d 9 returned -16 [ 854.316993][T15048] Bluetooth: hci0: command 0x041b tx timeout [ 854.323459][ T5872] Bluetooth: hci1: command 0x041b tx timeout [ 854.405933][T15382] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 854.670656][ T6429] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 854.686417][ T6429] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 854.943422][ T3503] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 854.956144][ T3503] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 855.011187][ T6429] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 855.048635][ T6429] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 855.114552][T15523] binder: BINDER_SET_CONTEXT_MGR already set [ 855.121970][T15523] binder: 15522:15523 ioctl 4018620d 9 returned -16 [ 855.142193][ T3489] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 855.153800][ T3489] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 855.492919][T15536] snd_virmidi snd_virmidi.0: control 5:9:1:IAªƒ>/Æ[k<÷ÎÇmgx­Ž¬<Ú5ºœ+-Cî°ÜYÈÝ5:0 is already present [ 855.501077][T15538] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2527'. [ 855.626453][T15540] random: crng reseeded on system resumption [ 856.054424][T15548] binder: BINDER_SET_CONTEXT_MGR already set [ 856.065680][T15548] binder: 15547:15548 ioctl 4018620d 9 returned -16 [ 856.223567][T15556] binder: BINDER_SET_CONTEXT_MGR already set [ 856.264711][T15556] binder: 15554:15556 ioctl 4018620d 9 returned -16 [ 856.398104][ T5872] Bluetooth: hci1: command 0x041b tx timeout [ 856.405583][T15048] Bluetooth: hci0: command 0x041b tx timeout [ 856.619755][T15572] snd_virmidi snd_virmidi.0: control 5:9:1:IAªƒ>/Æ[k<÷ÎÇmgx­Ž¬<Ú5ºœ+-Cî°ÜYÈÝ5:0 is already present [ 857.468304][T15596] blktrace: Concurrent blktraces are not allowed on loop2 [ 858.264058][T15594] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 858.287119][T15594] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 858.293465][T15594] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 858.305804][T15594] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 859.629052][T15611] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 859.639951][T15611] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 859.663715][T15611] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 859.703183][T15611] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 859.712881][T15615] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 860.331552][T15634] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 860.364988][T15634] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 860.374988][T15634] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 860.407870][T15634] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 860.915236][T15631] vidtv vidtv.0: No streaming. Skipping. [ 861.901670][T15674] snd_virmidi snd_virmidi.0: control 5:9:1:IAªƒ>/Æ[k<÷ÎÇmgx­Ž¬<Ú5ºœ+-Cî°ÜYÈÝ5:0 is already present [ 862.236408][T15048] Bluetooth: hci2: command 0x0c1a tx timeout [ 862.406971][T15048] Bluetooth: hci0: command 0x041b tx timeout [ 862.414015][T15048] Bluetooth: hci4: command 0x0c1a tx timeout [ 862.484669][T15048] Bluetooth: hci1: command 0x041b tx timeout [ 864.308186][T15729] zswap: compressor û not available [ 864.338005][T15738] Setting dangerous option i915.mitigations - tainting kernel [ 864.556465][T15048] Bluetooth: hci1: command 0x041b tx timeout [ 866.402555][T15792] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 866.436741][T15792] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 866.449496][T15792] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 866.509903][T15792] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 868.052585][T15825] FAULT_INJECTION: forcing a failure. [ 868.052585][T15825] name failslab, interval 1, probability 0, space 0, times 0 [ 868.090817][T15826] ecryptfs_miscdev_write: Acceptable packet size range is [6-531], but amount of data written is [2147479552]. [ 868.118373][T15825] CPU: 0 UID: 0 PID: 15825 Comm: syz.0.2613 Tainted: G U syzkaller #0 PREEMPT(full) [ 868.118416][T15825] Tainted: [U]=USER [ 868.118424][T15825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 868.118439][T15825] Call Trace: [ 868.118447][T15825] [ 868.118457][T15825] dump_stack_lvl+0x16c/0x1f0 [ 868.118489][T15825] should_fail_ex+0x512/0x640 [ 868.118517][T15825] ? fs_reclaim_acquire+0xae/0x150 [ 868.118562][T15825] should_failslab+0xc2/0x120 [ 868.118598][T15825] __kmalloc_noprof+0xdd/0x880 [ 868.118629][T15825] ? tomoyo_encode2+0x100/0x3e0 [ 868.118670][T15825] ? tomoyo_encode2+0x100/0x3e0 [ 868.118702][T15825] tomoyo_encode2+0x100/0x3e0 [ 868.118742][T15825] tomoyo_encode+0x29/0x50 [ 868.118775][T15825] tomoyo_realpath_from_path+0x18f/0x6e0 [ 868.118821][T15825] tomoyo_path_number_perm+0x245/0x580 [ 868.118851][T15825] ? tomoyo_path_number_perm+0x237/0x580 [ 868.118885][T15825] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 868.118922][T15825] ? find_held_lock+0x2b/0x80 [ 868.118988][T15825] ? find_held_lock+0x2b/0x80 [ 868.119014][T15825] ? hook_file_ioctl_common+0x145/0x410 [ 868.119055][T15825] ? __fget_files+0x20e/0x3c0 [ 868.119091][T15825] security_file_ioctl+0x9b/0x240 [ 868.119125][T15825] __x64_sys_ioctl+0xb7/0x210 [ 868.119153][T15825] do_syscall_64+0xcd/0xfa0 [ 868.119181][T15825] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 868.119207][T15825] RIP: 0033:0x7fc05118f7c9 [ 868.119226][T15825] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 868.119249][T15825] RSP: 002b:00007fc052063038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 868.119273][T15825] RAX: ffffffffffffffda RBX: 00007fc0513e5fa0 RCX: 00007fc05118f7c9 [ 868.119295][T15825] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000003 [ 868.119309][T15825] RBP: 00007fc052063090 R08: 0000000000000000 R09: 0000000000000000 [ 868.119324][T15825] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 868.119338][T15825] R13: 00007fc0513e6038 R14: 00007fc0513e5fa0 R15: 00007ffcf8b64eb8 [ 868.119375][T15825] [ 868.120596][T15825] ERROR: Out of memory at tomoyo_realpath_from_path. [ 868.239488][T15048] Bluetooth: hci2: command 0x0c1a tx timeout [ 868.479303][T15048] Bluetooth: hci0: command 0x041b tx timeout [ 868.489087][ T5872] Bluetooth: hci4: command 0x0c1a tx timeout [ 868.556898][T15048] Bluetooth: hci1: command 0x041b tx timeout [ 869.004614][T15840] snd_virmidi snd_virmidi.0: control 5:9:1:IAªƒ>/Æ[k<÷ÎÇmgx­Ž¬<Ú5ºœ+-Cî°ÜYÈÝ5:0 is already present [ 869.167422][T15841] FAULT_INJECTION: forcing a failure. [ 869.167422][T15841] name failslab, interval 1, probability 0, space 0, times 0 [ 869.185526][ C0] vkms_vblank_simulate: vblank timer overrun [ 869.227519][T15841] CPU: 0 UID: 0 PID: 15841 Comm: syz.0.2618 Tainted: G U syzkaller #0 PREEMPT(full) [ 869.227558][T15841] Tainted: [U]=USER [ 869.227567][T15841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 869.227580][T15841] Call Trace: [ 869.227588][T15841] [ 869.227597][T15841] dump_stack_lvl+0x16c/0x1f0 [ 869.227628][T15841] should_fail_ex+0x512/0x640 [ 869.227655][T15841] ? __kmalloc_cache_noprof+0x5f/0x780 [ 869.227688][T15841] should_failslab+0xc2/0x120 [ 869.227729][T15841] __kmalloc_cache_noprof+0x72/0x780 [ 869.227759][T15841] ? pagemap_read+0x296/0x890 [ 869.227816][T15841] ? pagemap_read+0x296/0x890 [ 869.227848][T15841] pagemap_read+0x296/0x890 [ 869.227885][T15841] ? __pfx_pagemap_read+0x10/0x10 [ 869.227919][T15841] ? rw_verify_area+0xcf/0x6c0 [ 869.227944][T15841] ? __pfx_pagemap_read+0x10/0x10 [ 869.227977][T15841] vfs_read+0x1e4/0xcf0 [ 869.228010][T15841] ? __pfx___mutex_lock+0x10/0x10 [ 869.228034][T15841] ? __pfx_vfs_read+0x10/0x10 [ 869.228072][T15841] ? __fget_files+0x20e/0x3c0 [ 869.228112][T15841] ksys_read+0x12a/0x250 [ 869.228141][T15841] ? __pfx_ksys_read+0x10/0x10 [ 869.228178][T15841] do_syscall_64+0xcd/0xfa0 [ 869.228203][T15841] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 869.228226][T15841] RIP: 0033:0x7fc05118f7c9 [ 869.228243][T15841] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 869.228266][T15841] RSP: 002b:00007fc052063038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 869.228290][T15841] RAX: ffffffffffffffda RBX: 00007fc0513e5fa0 RCX: 00007fc05118f7c9 [ 869.228306][T15841] RDX: 00000000000039b8 RSI: 0000000000000000 RDI: 0000000000000002 [ 869.228320][T15841] RBP: 00007fc052063090 R08: 0000000000000000 R09: 0000000000000000 [ 869.228334][T15841] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 869.228348][T15841] R13: 00007fc0513e6038 R14: 00007fc0513e5fa0 R15: 00007ffcf8b64eb8 [ 869.228384][T15841] [ 869.482646][ C0] vkms_vblank_simulate: vblank timer overrun [ 870.178683][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.187086][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.996040][T15876] snd_virmidi snd_virmidi.0: control 5:9:1:IAªƒ>/Æ[k<÷ÎÇmgx­Ž¬<Ú5ºœ+-Cî°ÜYÈÝ5:0 is already present [ 871.291256][T15881] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2630'. [ 872.286888][T15892] FAULT_INJECTION: forcing a failure. [ 872.286888][T15892] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 872.334463][T15892] CPU: 0 UID: 0 PID: 15892 Comm: syz.0.2634 Tainted: G U syzkaller #0 PREEMPT(full) [ 872.334503][T15892] Tainted: [U]=USER [ 872.334511][T15892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 872.334525][T15892] Call Trace: [ 872.334533][T15892] [ 872.334544][T15892] dump_stack_lvl+0x16c/0x1f0 [ 872.334575][T15892] should_fail_ex+0x512/0x640 [ 872.334610][T15892] _copy_from_user+0x2e/0xd0 [ 872.334641][T15892] __x64_sys_timer_create+0x10d/0x1d0 [ 872.334667][T15892] ? __pfx___x64_sys_timer_create+0x10/0x10 [ 872.334709][T15892] do_syscall_64+0xcd/0xfa0 [ 872.334737][T15892] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 872.334762][T15892] RIP: 0033:0x7fc05118f7c9 [ 872.334781][T15892] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 872.334804][T15892] RSP: 002b:00007fc052063038 EFLAGS: 00000246 ORIG_RAX: 00000000000000de [ 872.334827][T15892] RAX: ffffffffffffffda RBX: 00007fc0513e5fa0 RCX: 00007fc05118f7c9 [ 872.334844][T15892] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000000 [ 872.334858][T15892] RBP: 00007fc052063090 R08: 0000000000000000 R09: 0000000000000000 [ 872.334873][T15892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 872.334888][T15892] R13: 00007fc0513e6038 R14: 00007fc0513e5fa0 R15: 00007ffcf8b64eb8 [ 872.334954][T15892] [ 873.106904][T15904] random: crng reseeded on system resumption [ 874.070675][T15922] snd_virmidi snd_virmidi.0: control 5:9:1:IAªƒ>/Æ[k<÷ÎÇmgx­Ž¬<Ú5ºœ+-Cî°ÜYÈÝ5:0 is already present [ 874.697365][T15932] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 874.704929][T15932] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 874.717070][T15932] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 874.726706][T15932] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 876.567410][ T5872] Bluetooth: hci2: command 0x0c1a tx timeout [ 876.724772][T15048] Bluetooth: hci4: command 0x0c1a tx timeout [ 876.796445][T15048] Bluetooth: hci0: command 0x041b tx timeout [ 876.802632][T15048] Bluetooth: hci1: command 0x041b tx timeout [ 876.980686][T15973] snd_virmidi snd_virmidi.0: control 5:9:1:IAªƒ>/Æ[k<÷ÎÇmgx­Ž¬<Ú5ºœ+-Cî°ÜYÈÝ5:0 is already present [ 878.077947][T15991] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 878.296012][T15994] FAULT_INJECTION: forcing a failure. [ 878.296012][T15994] name fail_futex, interval 1, probability 0, space 0, times 0 [ 878.396404][T15994] CPU: 1 UID: 0 PID: 15994 Comm: syz.0.2665 Tainted: G U syzkaller #0 PREEMPT(full) [ 878.396449][T15994] Tainted: [U]=USER [ 878.396458][T15994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 878.396474][T15994] Call Trace: [ 878.396482][T15994] [ 878.396492][T15994] dump_stack_lvl+0x16c/0x1f0 [ 878.396549][T15994] should_fail_ex+0x512/0x640 [ 878.396587][T15994] get_futex_key+0x1d0/0x1560 [ 878.396629][T15994] ? __pfx_get_futex_key+0x10/0x10 [ 878.396678][T15994] futex_wake+0xea/0x530 [ 878.396719][T15994] ? __pfx_futex_wake+0x10/0x10 [ 878.396746][T15994] ? rcu_is_watching+0x12/0xc0 [ 878.396788][T15994] do_futex+0x1e3/0x350 [ 878.396825][T15994] ? __pfx_do_futex+0x10/0x10 [ 878.396862][T15994] ? __fput+0x68d/0xb70 [ 878.396908][T15994] ? __pfx___might_resched+0x10/0x10 [ 878.396940][T15994] __x64_sys_futex+0x1e0/0x4c0 [ 878.396981][T15994] ? __pfx_blkcg_maybe_throttle_current+0x10/0x10 [ 878.397028][T15994] ? __pfx___x64_sys_futex+0x10/0x10 [ 878.397066][T15994] ? __pfx___do_sys_close_range+0x10/0x10 [ 878.397110][T15994] do_syscall_64+0xcd/0xfa0 [ 878.397139][T15994] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 878.397165][T15994] RIP: 0033:0x7fc05118f7c9 [ 878.397186][T15994] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 878.397211][T15994] RSP: 002b:00007fc0520630e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 878.397235][T15994] RAX: ffffffffffffffda RBX: 00007fc0513e5fa8 RCX: 00007fc05118f7c9 [ 878.397252][T15994] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fc0513e5fac [ 878.397268][T15994] RBP: 00007fc0513e5fa0 R08: 00007fc052064000 R09: 0000000000000000 [ 878.397284][T15994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 878.397298][T15994] R13: 00007fc0513e6038 R14: 00007ffcf8b64dd0 R15: 00007ffcf8b64eb8 [ 878.397334][T15994] [ 878.802390][T15997] mmap: syz.3.2666 (15997): VmData 45883392 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 879.093042][T16002] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2667'. [ 880.039793][T16014] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input32 [ 881.148904][T16020] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 881.206390][T16020] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 881.223189][T16020] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 881.246630][T16020] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 882.617444][T16032] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 882.626874][T16032] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 882.646660][T16032] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 882.653815][T16032] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 883.468946][T16047] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 883.502694][T16047] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 883.547110][T16047] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 883.602807][T16047] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 885.524588][ T5872] Bluetooth: hci4: command 0x0c1a tx timeout [ 885.596326][ T5872] Bluetooth: hci0: command 0x041b tx timeout [ 885.677423][ T5872] Bluetooth: hci1: command 0x041b tx timeout [ 885.844768][T16074] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 885.926482][T16074] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 886.005573][T16074] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 886.013603][T16074] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 886.541697][T16092] FAULT_INJECTION: forcing a failure. [ 886.541697][T16092] name fail_futex, interval 1, probability 0, space 0, times 0 [ 886.593834][T16092] CPU: 0 UID: 0 PID: 16092 Comm: syz.2.2690 Tainted: G U syzkaller #0 PREEMPT(full) [ 886.593875][T16092] Tainted: [U]=USER [ 886.593885][T16092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 886.593897][T16092] Call Trace: [ 886.593905][T16092] [ 886.593915][T16092] dump_stack_lvl+0x16c/0x1f0 [ 886.593978][T16092] should_fail_ex+0x512/0x640 [ 886.594024][T16092] get_futex_key+0x1d0/0x1560 [ 886.594065][T16092] ? find_held_lock+0x2b/0x80 [ 886.594094][T16092] ? __pfx_get_futex_key+0x10/0x10 [ 886.594136][T16092] ? tomoyo_path_number_perm+0x18d/0x580 [ 886.594174][T16092] futex_wake+0xea/0x530 [ 886.594204][T16092] ? __pfx_futex_wake+0x10/0x10 [ 886.594268][T16092] ? do_vfs_ioctl+0x128/0x14f0 [ 886.594303][T16092] do_futex+0x1e3/0x350 [ 886.594341][T16092] ? __pfx_do_futex+0x10/0x10 [ 886.594378][T16092] ? find_held_lock+0x2b/0x80 [ 886.594411][T16092] __x64_sys_futex+0x1e0/0x4c0 [ 886.594453][T16092] ? __fget_files+0x20e/0x3c0 [ 886.594483][T16092] ? __pfx___x64_sys_futex+0x10/0x10 [ 886.594522][T16092] ? syscall_user_dispatch+0x78/0x140 [ 886.594550][T16092] ? fput+0x9b/0xd0 [ 886.594592][T16092] do_syscall_64+0xcd/0xfa0 [ 886.594623][T16092] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 886.594650][T16092] RIP: 0033:0x7f198738f7c9 [ 886.594671][T16092] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 886.594696][T16092] RSP: 002b:00007f19882110e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 886.594721][T16092] RAX: ffffffffffffffda RBX: 00007f19875e5fa8 RCX: 00007f198738f7c9 [ 886.594741][T16092] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f19875e5fac [ 886.594760][T16092] RBP: 00007f19875e5fa0 R08: 00007f1988212000 R09: 0000000000000000 [ 886.594778][T16092] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 886.594794][T16092] R13: 00007f19875e6038 R14: 00007ffcb3d7e440 R15: 00007ffcb3d7e528 [ 886.594831][T16092] [ 887.360723][ T5872] Bluetooth: hci2: command 0x0c1a tx timeout [ 887.918107][ T5872] Bluetooth: hci4: command 0x0c1a tx timeout [ 888.078766][ T5872] Bluetooth: hci1: command 0x041b tx timeout [ 888.078890][T15048] Bluetooth: hci0: command 0x041b tx timeout [ 888.198947][T15048] Bluetooth: hci0: unknown advertising packet type: 0xea [ 888.261522][T16124] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2696'. [ 889.323310][T16138] snd_virmidi snd_virmidi.0: control 5:9:1:IAªƒ>/Æ[k<÷ÎÇmgx­Ž¬<Ú5ºœ+-Cî°ÜYÈÝ5:0 is already present [ 889.363135][T16138] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input33 [ 889.722583][T16130] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 889.878240][T16130] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 889.933011][T16130] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 889.981716][T16130] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 890.177576][T16150] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2700'. [ 890.567665][T16160] random: crng reseeded on system resumption [ 890.594707][T16155] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2703'. [ 891.677181][T15048] Bluetooth: hci2: command 0x0c1a tx timeout [ 891.849416][T16168] netlink: 186 bytes leftover after parsing attributes in process `syz.1.2708'. [ 891.916617][T15048] Bluetooth: hci4: command 0x0c1a tx timeout [ 891.941757][T16178] netlink: 186 bytes leftover after parsing attributes in process `syz.1.2708'. [ 891.996335][T15048] Bluetooth: hci1: command 0x041b tx timeout [ 892.002892][T15048] Bluetooth: hci0: command 0x041b tx timeout [ 892.106571][T16193] random: crng reseeded on system resumption [ 894.036995][T16227] random: crng reseeded on system resumption [ 894.937351][T16241] binder: 16239:16241 ioctl 4018620d 9 returned -22 [ 895.120416][T16247] FAULT_INJECTION: forcing a failure. [ 895.120416][T16247] name failslab, interval 1, probability 0, space 0, times 0 [ 895.176327][T16247] CPU: 0 UID: 0 PID: 16247 Comm: syz.2.2731 Tainted: G U syzkaller #0 PREEMPT(full) [ 895.176372][T16247] Tainted: [U]=USER [ 895.176380][T16247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 895.176398][T16247] Call Trace: [ 895.176407][T16247] [ 895.176417][T16247] dump_stack_lvl+0x16c/0x1f0 [ 895.176464][T16247] should_fail_ex+0x512/0x640 [ 895.176496][T16247] ? kmem_cache_alloc_lru_noprof+0x66/0x6e0 [ 895.176532][T16247] should_failslab+0xc2/0x120 [ 895.176571][T16247] kmem_cache_alloc_lru_noprof+0x79/0x6e0 [ 895.176604][T16247] ? __d_alloc+0x35/0xae0 [ 895.176644][T16247] ? __d_alloc+0x35/0xae0 [ 895.176681][T16247] __d_alloc+0x35/0xae0 [ 895.176719][T16247] ? stack_trace_save+0x8e/0xc0 [ 895.176756][T16247] d_alloc_parallel+0x111/0x1510 [ 895.176790][T16247] ? __lock_acquire+0xb8a/0x1c90 [ 895.176832][T16247] ? __pfx_d_alloc_parallel+0x10/0x10 [ 895.176860][T16247] ? lockdep_init_map_type+0x5c/0x280 [ 895.176920][T16247] ? lockdep_init_map_type+0x5c/0x280 [ 895.176971][T16247] __lookup_slow+0x193/0x460 [ 895.177000][T16247] ? __pfx___lookup_slow+0x10/0x10 [ 895.177041][T16247] ? __d_lookup+0x266/0x4a0 [ 895.177074][T16247] lookup_slow+0x50/0x70 [ 895.177099][T16247] link_path_walk+0x12e1/0x1c70 [ 895.177141][T16247] path_openat+0x1b0/0x2f90 [ 895.177186][T16247] ? __pfx_path_openat+0x10/0x10 [ 895.177221][T16247] ? __lock_acquire+0xb8a/0x1c90 [ 895.177262][T16247] do_filp_open+0x20b/0x470 [ 895.177296][T16247] ? __pfx_do_filp_open+0x10/0x10 [ 895.177355][T16247] ? alloc_fd+0x471/0x7d0 [ 895.177396][T16247] do_sys_openat2+0x11b/0x1d0 [ 895.177421][T16247] ? __pfx_do_sys_openat2+0x10/0x10 [ 895.177456][T16247] ? __fget_files+0x204/0x3c0 [ 895.177504][T16247] __x64_sys_openat+0x174/0x210 [ 895.177533][T16247] ? __pfx___x64_sys_openat+0x10/0x10 [ 895.177576][T16247] do_syscall_64+0xcd/0xfa0 [ 895.177606][T16247] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 895.177636][T16247] RIP: 0033:0x7f198738f7c9 [ 895.177658][T16247] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 895.177682][T16247] RSP: 002b:00007f1988211038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 895.177705][T16247] RAX: ffffffffffffffda RBX: 00007f19875e5fa0 RCX: 00007f198738f7c9 [ 895.177718][T16247] RDX: 0000000000004802 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 895.177737][T16247] RBP: 00007f1987413f91 R08: 0000000000000000 R09: 0000000000000000 [ 895.177755][T16247] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 895.177772][T16247] R13: 00007f19875e6038 R14: 00007f19875e5fa0 R15: 00007ffcb3d7e528 [ 895.177810][T16247] [ 895.736931][T16253] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2732'. [ 896.730219][T16263] snd_virmidi snd_virmidi.0: control 5:9:1:IAªƒ>/Æ[k<÷ÎÇmgx­Ž¬<Ú5ºœ+-Cî°ÜYÈÝ5:0 is already present [ 896.975066][T16268] random: crng reseeded on system resumption [ 897.265199][T16273] synth uevent: /devices/platform/vimc.0/video4linux/video5: unknown uevent action string [ 897.286285][T16273] video4linux video5: uevent: failed to send synthetic uevent: -22 [ 897.470011][T16278] binder: 16276:16278 ioctl 4018620d 9 returned -22 [ 898.855045][T16301] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2743'. [ 899.088354][T16305] snd_virmidi snd_virmidi.0: control 5:9:1:IAªƒ>/Æ[k<÷ÎÇmgx­Ž¬<Ú5ºœ+-Cî°ÜYÈÝ5:0 is already present [ 900.181562][T16318] FAULT_INJECTION: forcing a failure. [ 900.181562][T16318] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 900.275138][T16318] CPU: 1 UID: 0 PID: 16318 Comm: syz.3.2748 Tainted: G U syzkaller #0 PREEMPT(full) [ 900.275179][T16318] Tainted: [U]=USER [ 900.275187][T16318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 900.275201][T16318] Call Trace: [ 900.275209][T16318] [ 900.275219][T16318] dump_stack_lvl+0x16c/0x1f0 [ 900.275250][T16318] should_fail_ex+0x512/0x640 [ 900.275283][T16318] _copy_from_user+0x2e/0xd0 [ 900.275313][T16318] do_semtimedop+0x182/0x2e0 [ 900.275343][T16318] ? __pfx_do_semtimedop+0x10/0x10 [ 900.275413][T16318] ? __fget_files+0x20e/0x3c0 [ 900.275451][T16318] __x64_sys_semtimedop+0x1b4/0x1f0 [ 900.275482][T16318] ? __pfx___x64_sys_semtimedop+0x10/0x10 [ 900.275522][T16318] do_syscall_64+0xcd/0xfa0 [ 900.275549][T16318] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 900.275573][T16318] RIP: 0033:0x7faf4cf8f7c9 [ 900.275592][T16318] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 900.275614][T16318] RSP: 002b:00007faf4dd87038 EFLAGS: 00000246 ORIG_RAX: 00000000000000dc [ 900.275637][T16318] RAX: ffffffffffffffda RBX: 00007faf4d1e5fa0 RCX: 00007faf4cf8f7c9 [ 900.275653][T16318] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000000 [ 900.275667][T16318] RBP: 00007faf4dd87090 R08: 0000000000000000 R09: 0000000000000000 [ 900.275682][T16318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 900.275695][T16318] R13: 00007faf4d1e6038 R14: 00007faf4d1e5fa0 R15: 00007ffc97759998 [ 900.275730][T16318] [ 900.525830][T16323] binder: 16320:16323 ioctl 4018620d 9 returned -22 [ 900.980727][T16337] random: crng reseeded on system resumption [ 901.255588][T16344] snd_virmidi snd_virmidi.0: control 5:9:1:IAªƒ>/Æ[k<÷ÎÇmgx­Ž¬<Ú5ºœ+-Cî°ÜYÈÝ5:0 is already present [ 903.482497][T16368] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 903.509588][T16368] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 903.584786][T16368] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 903.616632][T16368] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 905.358486][T15048] Bluetooth: hci2: command 0x0c1a tx timeout [ 905.523030][T15048] Bluetooth: hci4: command 0x0c1a tx timeout [ 905.596201][T15048] Bluetooth: hci0: command 0x041b tx timeout [ 905.676452][T15048] Bluetooth: hci1: command 0x041b tx timeout [ 908.036435][T16419] random: crng reseeded on system resumption [ 908.209732][T16426] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2778'. [ 909.159972][T16435] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2782'. [ 909.774983][T16445] vhci_hcd: Wrong hub descriptor type for USB 3.0 roothub. [ 909.918631][T16433] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 909.937108][T16433] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 910.053795][T16433] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 910.098152][T16433] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 910.986730][T16453] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 911.025741][T16453] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 911.047294][T16453] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 911.059703][T16453] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 911.512010][T16473] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2790'. [ 912.055271][T16488] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2794'. [ 912.636315][T15048] Bluetooth: hci2: command 0x0c1a tx timeout [ 913.037312][T15048] Bluetooth: hci4: command 0x0c1a tx timeout [ 913.116201][T15048] Bluetooth: hci1: command 0x041b tx timeout [ 913.123544][ T5872] Bluetooth: hci0: command 0x041b tx timeout [ 913.694050][T16508] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 913.739577][T16508] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 913.863560][T16508] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 913.905370][T16527] netlink: 342 bytes leftover after parsing attributes in process `syz.0.2801'. [ 913.940180][T16508] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 915.065765][T16542] binder: 16541:16542 ioctl c0306201 2000000002c0 returned -14 [ 915.598758][T15048] Bluetooth: hci2: command 0x0c1a tx timeout [ 915.756250][T15048] Bluetooth: hci4: command 0x0c1a tx timeout [ 915.926350][T15048] Bluetooth: hci0: command 0x041b tx timeout [ 915.997731][T15048] Bluetooth: hci1: command 0x041b tx timeout [ 919.837410][T16592] binder: 16590:16592 unknown command 1969382756 [ 919.863631][T16592] binder: 16590:16592 ioctl c0306201 0 returned -22 [ 921.417249][T16609] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 921.446702][T16609] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 921.464177][T16609] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 921.483088][T16609] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 922.758988][T16636] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2828'. [ 923.363571][T15048] Bluetooth: hci2: command 0x0c1a tx timeout [ 923.517101][T15048] Bluetooth: hci1: command 0x041b tx timeout [ 923.524011][ T5872] Bluetooth: hci0: command 0x041b tx timeout [ 923.524026][ T5150] Bluetooth: hci4: command 0x0c1a tx timeout [ 923.733445][T16651] zswap: compressor û not available [ 923.741005][T16655] Setting dangerous option i915.mitigations - tainting kernel [ 926.299083][T16220] syz.3.2725 (16220) used greatest stack depth: 19208 bytes left [ 926.563738][T16691] FAULT_INJECTION: forcing a failure. [ 926.563738][T16691] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 926.579150][T16691] CPU: 0 UID: 0 PID: 16691 Comm: syz.0.2843 Tainted: G U syzkaller #0 PREEMPT(full) [ 926.579189][T16691] Tainted: [U]=USER [ 926.579198][T16691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 926.579212][T16691] Call Trace: [ 926.579221][T16691] [ 926.579230][T16691] dump_stack_lvl+0x16c/0x1f0 [ 926.579262][T16691] should_fail_ex+0x512/0x640 [ 926.579295][T16691] _copy_from_user+0x2e/0xd0 [ 926.579325][T16691] copy_msghdr_from_user+0x98/0x160 [ 926.579358][T16691] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 926.579396][T16691] ? __pfx__kstrtoull+0x10/0x10 [ 926.579440][T16691] ___sys_sendmsg+0xfe/0x1d0 [ 926.579473][T16691] ? __pfx____sys_sendmsg+0x10/0x10 [ 926.579522][T16691] ? find_held_lock+0x2b/0x80 [ 926.579581][T16691] __sys_sendmmsg+0x200/0x420 [ 926.579617][T16691] ? __pfx___sys_sendmmsg+0x10/0x10 [ 926.579660][T16691] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 926.579702][T16691] ? fput+0x9b/0xd0 [ 926.579737][T16691] ? ksys_write+0x1ac/0x250 [ 926.579767][T16691] ? __pfx_ksys_write+0x10/0x10 [ 926.579803][T16691] __x64_sys_sendmmsg+0x9c/0x100 [ 926.579833][T16691] ? lockdep_hardirqs_on+0x7c/0x110 [ 926.579858][T16691] do_syscall_64+0xcd/0xfa0 [ 926.579885][T16691] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 926.579911][T16691] RIP: 0033:0x7fc05118f7c9 [ 926.579930][T16691] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 926.579954][T16691] RSP: 002b:00007fc052063038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 926.579978][T16691] RAX: ffffffffffffffda RBX: 00007fc0513e5fa0 RCX: 00007fc05118f7c9 [ 926.579994][T16691] RDX: 00000000000009a6 RSI: 0000200000000000 RDI: 0000000000000003 [ 926.580009][T16691] RBP: 00007fc052063090 R08: 0000000000000000 R09: 0000000000000000 [ 926.580024][T16691] R10: 000000000000ff00 R11: 0000000000000246 R12: 0000000000000001 [ 926.580039][T16691] R13: 00007fc0513e6038 R14: 00007fc0513e5fa0 R15: 00007ffcf8b64eb8 [ 926.580075][T16691] [ 926.820800][ C0] vkms_vblank_simulate: vblank timer overrun [ 927.103000][T16698] zswap: compressor û not available [ 927.650711][T16711] random: crng reseeded on system resumption [ 928.374554][T16731] snd_virmidi snd_virmidi.0: control 5:9:1:IAªƒ>/Æ[k<÷ÎÇmgx­Ž¬<Ú5ºœ+-Cî°ÜYÈÝ5:0 is already present [ 929.236642][T16743] [ 929.239148][T16743] ====================================================== [ 929.247159][T16743] WARNING: possible circular locking dependency detected [ 929.255511][T16743] syzkaller #0 Tainted: G U [ 929.262454][T16743] ------------------------------------------------------ [ 929.270291][T16743] syz.1.2857/16743 is trying to acquire lock: [ 929.277795][T16743] ffff888025a4a358 (&q->elevator_lock){+.+.}-{4:4}, at: queue_requests_store+0x3a7/0x670 [ 929.288996][T16743] [ 929.288996][T16743] but task is already holding lock: [ 929.296960][T16743] ffff888025a49e18 (&q->q_usage_counter(io)#52){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 929.309261][T16743] [ 929.309261][T16743] which lock already depends on the new lock. [ 929.309261][T16743] [ 929.320899][T16743] [ 929.320899][T16743] the existing dependency chain (in reverse order) is: [ 929.332300][T16743] [ 929.332300][T16743] -> #7 (&q->q_usage_counter(io)#52){++++}-{0:0}: [ 929.341552][T16743] blk_mq_submit_bio+0x2b70/0x3380 [ 929.347671][T16743] __submit_bio+0x3cf/0x690 [ 929.353417][T16743] submit_bio_noacct_nocheck+0x53d/0xc10 [ 929.360228][T16743] submit_bio_noacct+0x5bd/0x1f60 [ 929.366369][T16743] mpage_readahead+0x435/0x5a0 [ 929.372124][T16743] read_pages+0x1c4/0xc70 [ 929.377645][T16743] page_cache_ra_unbounded+0x4b9/0xa10 [ 929.384572][T16743] force_page_cache_ra+0x246/0x340 [ 929.390422][T16743] page_cache_sync_ra+0x20c/0xbf0 [ 929.396133][T16743] filemap_get_pages+0x717/0x1d30 [ 929.401888][T16743] filemap_read+0x3d2/0xe40 [ 929.407220][T16743] blkdev_read_iter+0x1ac/0x500 [ 929.413068][T16743] vfs_read+0x8bf/0xcf0 [ 929.418430][T16743] ksys_read+0x12a/0x250 [ 929.423390][T16743] do_syscall_64+0xcd/0xfa0 [ 929.429405][T16743] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 929.436220][T16743] [ 929.436220][T16743] -> #6 (mapping.invalidate_lock){++++}-{4:4}: [ 929.445063][T16743] down_read+0x9b/0x480 [ 929.450917][T16743] filemap_fault+0x2d8/0x29a0 [ 929.456609][T16743] __do_fault+0x10d/0x490 [ 929.462285][T16743] do_pte_missing+0xf4a/0x3ba0 [ 929.468383][T16743] __handle_mm_fault+0x1556/0x2aa0 [ 929.474475][T16743] handle_mm_fault+0x589/0xd10 [ 929.480564][T16743] __get_user_pages+0x54e/0x3530 [ 929.486601][T16743] populate_vma_page_range+0x267/0x3f0 [ 929.493057][T16743] __mm_populate+0x1d8/0x380 [ 929.499125][T16743] vm_mmap_pgoff+0x37f/0x470 [ 929.504690][T16743] ksys_mmap_pgoff+0x32c/0x5c0 [ 929.510352][T16743] __x64_sys_mmap+0x125/0x190 [ 929.516740][T16743] do_syscall_64+0xcd/0xfa0 [ 929.522349][T16743] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 929.529562][T16743] [ 929.529562][T16743] -> #5 (&mm->mmap_lock){++++}-{4:4}: [ 929.537660][T16743] __might_fault+0x113/0x190 [ 929.543183][T16743] _copy_from_iter+0x1c2/0x1720 [ 929.549131][T16743] tcp_sendmsg_locked+0x2900/0x42e0 [ 929.555580][T16743] tcp_sendmsg+0x2e/0x50 [ 929.560854][T16743] inet_sendmsg+0xb9/0x140 [ 929.566080][T16743] sock_write_iter+0x509/0x610 [ 929.571905][T16743] vfs_write+0x7d3/0x11d0 [ 929.577743][T16743] ksys_write+0x1f8/0x250 [ 929.583775][T16743] do_syscall_64+0xcd/0xfa0 [ 929.589341][T16743] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 929.596730][T16743] [ 929.596730][T16743] -> #4 (sk_lock-AF_INET){+.+.}-{0:0}: [ 929.605494][T16743] lock_sock_nested+0x41/0xf0 [ 929.611682][T16743] inet_shutdown+0x67/0x440 [ 929.617520][T16743] nbd_mark_nsock_dead+0xae/0x5d0 [ 929.623878][T16743] recv_work+0x671/0xa80 [ 929.629214][T16743] process_one_work+0x9cf/0x1b70 [ 929.636041][T16743] worker_thread+0x6c8/0xf10 [ 929.642272][T16743] kthread+0x3c5/0x780 [ 929.647247][T16743] ret_from_fork+0x675/0x7d0 [ 929.652829][T16743] ret_from_fork_asm+0x1a/0x30 [ 929.658745][T16743] [ 929.658745][T16743] -> #3 (&nsock->tx_lock){+.+.}-{4:4}: [ 929.667070][T16743] __mutex_lock+0x193/0x1060 [ 929.672480][T16743] nbd_queue_rq+0x423/0x12d0 [ 929.677808][T16743] blk_mq_dispatch_rq_list+0x416/0x1e20 [ 929.684175][T16743] __blk_mq_sched_dispatch_requests+0xcb7/0x15f0 [ 929.691572][T16743] blk_mq_sched_dispatch_requests+0xd8/0x1b0 [ 929.698556][T16743] blk_mq_run_hw_queue+0x239/0x670 [ 929.704483][T16743] blk_mq_dispatch_list+0x514/0x1310 [ 929.710535][T16743] blk_mq_flush_plug_list+0x130/0x600 [ 929.716459][T16743] __blk_flush_plug+0x2c4/0x4b0 [ 929.722152][T16743] __submit_bio+0x545/0x690 [ 929.727550][T16743] submit_bio_noacct_nocheck+0x53d/0xc10 [ 929.734252][T16743] submit_bio_noacct+0x5bd/0x1f60 [ 929.740521][T16743] block_read_full_folio+0x4db/0x850 [ 929.746959][T16743] filemap_read_folio+0xc8/0x2a0 [ 929.753115][T16743] do_read_cache_folio+0x263/0x5c0 [ 929.759208][T16743] read_part_sector+0xd4/0x370 [ 929.764885][T16743] adfspart_check_ICS+0x93/0x940 [ 929.772369][T16743] bdev_disk_changed+0x723/0x1520 [ 929.778809][T16743] blkdev_get_whole+0x187/0x290 [ 929.784561][T16743] bdev_open+0x2c7/0xe40 [ 929.791435][T16743] blkdev_open+0x34e/0x4f0 [ 929.797268][T16743] do_dentry_open+0x6fe/0x1560 [ 929.802843][T16743] vfs_open+0x82/0x3f0 [ 929.808520][T16743] path_openat+0x2016/0x2f90 [ 929.813923][T16743] do_filp_open+0x20b/0x470 [ 929.819878][T16743] do_sys_openat2+0x11b/0x1d0 [ 929.825635][T16743] __x64_sys_openat+0x174/0x210 [ 929.831501][T16743] do_syscall_64+0xcd/0xfa0 [ 929.836901][T16743] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 929.843912][T16743] [ 929.843912][T16743] -> #2 (&cmd->lock){+.+.}-{4:4}: [ 929.852498][T16743] __mutex_lock+0x193/0x1060 [ 929.859091][T16743] nbd_queue_rq+0xbd/0x12d0 [ 929.864915][T16743] blk_mq_dispatch_rq_list+0x416/0x1e20 [ 929.871965][T16743] __blk_mq_sched_dispatch_requests+0xcb7/0x15f0 [ 929.879201][T16743] blk_mq_sched_dispatch_requests+0xd8/0x1b0 [ 929.886812][T16743] blk_mq_run_hw_queue+0x239/0x670 [ 929.892640][T16743] blk_mq_dispatch_list+0x514/0x1310 [ 929.898814][T16743] blk_mq_flush_plug_list+0x130/0x600 [ 929.905369][T16743] __blk_flush_plug+0x2c4/0x4b0 [ 929.911722][T16743] __submit_bio+0x545/0x690 [ 929.917439][T16743] submit_bio_noacct_nocheck+0x53d/0xc10 [ 929.924919][T16743] submit_bio_noacct+0x5bd/0x1f60 [ 929.930945][T16743] block_read_full_folio+0x4db/0x850 [ 929.937978][T16743] filemap_read_folio+0xc8/0x2a0 [ 929.945024][T16743] do_read_cache_folio+0x263/0x5c0 [ 929.952180][T16743] read_part_sector+0xd4/0x370 [ 929.958473][T16743] adfspart_check_ICS+0x93/0x940 [ 929.964100][T16743] bdev_disk_changed+0x723/0x1520 [ 929.970374][T16743] blkdev_get_whole+0x187/0x290 [ 929.976002][T16743] bdev_open+0x2c7/0xe40 [ 929.981529][T16743] blkdev_open+0x34e/0x4f0 [ 929.986847][T16743] do_dentry_open+0x6fe/0x1560 [ 929.993391][T16743] vfs_open+0x82/0x3f0 [ 929.999542][T16743] path_openat+0x2016/0x2f90 [ 930.005124][T16743] do_filp_open+0x20b/0x470 [ 930.011430][T16743] do_sys_openat2+0x11b/0x1d0 [ 930.017170][T16743] __x64_sys_openat+0x174/0x210 [ 930.023518][T16743] do_syscall_64+0xcd/0xfa0 [ 930.029058][T16743] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 930.036967][T16743] [ 930.036967][T16743] -> #1 (set->srcu){.+.+}-{0:0}: [ 930.044671][T16743] __synchronize_srcu+0xa1/0x290 [ 930.051050][T16743] blk_mq_quiesce_queue+0x149/0x1b0 [ 930.057836][T16743] elevator_switch+0x17d/0x810 [ 930.063461][T16743] elevator_change+0x391/0x5d0 [ 930.069333][T16743] elevator_set_default+0x2e9/0x380 [ 930.076846][T16743] blk_register_queue+0x384/0x4e0 [ 930.083106][T16743] __add_disk+0x74a/0xf00 [ 930.088427][T16743] add_disk_fwnode+0x13f/0x5d0 [ 930.094171][T16743] nbd_dev_add+0x783/0xbb0 [ 930.099585][T16743] nbd_init+0x181/0x320 [ 930.106492][T16743] do_one_initcall+0x123/0x6e0 [ 930.113208][T16743] kernel_init_freeable+0x5c8/0x920 [ 930.119581][T16743] kernel_init+0x1c/0x2b0 [ 930.125370][T16743] ret_from_fork+0x675/0x7d0 [ 930.131308][T16743] ret_from_fork_asm+0x1a/0x30 [ 930.137144][T16743] [ 930.137144][T16743] -> #0 (&q->elevator_lock){+.+.}-{4:4}: [ 930.145931][T16743] __lock_acquire+0x126f/0x1c90 [ 930.152029][T16743] lock_acquire+0x179/0x350 [ 930.157481][T16743] __mutex_lock+0x193/0x1060 [ 930.163161][T16743] queue_requests_store+0x3a7/0x670 [ 930.169074][T16743] queue_attr_store+0x26b/0x310 [ 930.174710][T16743] sysfs_kf_write+0xf2/0x150 [ 930.180380][T16743] kernfs_fop_write_iter+0x3af/0x570 [ 930.186638][T16743] vfs_write+0x7d3/0x11d0 [ 930.191787][T16743] ksys_write+0x12a/0x250 [ 930.197293][T16743] do_syscall_64+0xcd/0xfa0 [ 930.202795][T16743] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 930.209793][T16743] [ 930.209793][T16743] other info that might help us debug this: [ 930.209793][T16743] [ 930.220650][T16743] Chain exists of: [ 930.220650][T16743] &q->elevator_lock --> mapping.invalidate_lock --> &q->q_usage_counter(io)#52 [ 930.220650][T16743] [ 930.236670][T16743] Possible unsafe locking scenario: [ 930.236670][T16743] [ 930.244905][T16743] CPU0 CPU1 [ 930.250896][T16743] ---- ---- [ 930.257396][T16743] lock(&q->q_usage_counter(io)#52); [ 930.263238][T16743] lock(mapping.invalidate_lock); [ 930.271592][T16743] lock(&q->q_usage_counter(io)#52); [ 930.279946][T16743] lock(&q->elevator_lock); [ 930.285179][T16743] [ 930.285179][T16743] *** DEADLOCK *** [ 930.285179][T16743] [ 930.294032][T16743] 7 locks held by syz.1.2857/16743: [ 930.299326][T16743] #0: ffff88802236aef8 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2a2/0x370 [ 930.308676][T16743] #1: ffff88802466e420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 930.318645][T16743] #2: ffff888079e96088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x570 [ 930.329516][T16743] #3: ffff8881437da2d8 (kn->active#132){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2ff/0x570 [ 930.340542][T16743] #4: ffff888025bf01c8 (&set->update_nr_hwq_lock){++++}-{4:4}, at: queue_requests_store+0x136/0x670 [ 930.352328][T16743] #5: ffff888025a49e18 (&q->q_usage_counter(io)#52){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 930.365164][T16743] #6: ffff888025a49e50 (&q->q_usage_counter(queue)#36){+.+.}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 930.377870][T16743] [ 930.377870][T16743] stack backtrace: [ 930.384998][T16743] CPU: 0 UID: 0 PID: 16743 Comm: syz.1.2857 Tainted: G U syzkaller #0 PREEMPT(full) [ 930.385040][T16743] Tainted: [U]=USER [ 930.385048][T16743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 930.385061][T16743] Call Trace: [ 930.385070][T16743] [ 930.385080][T16743] dump_stack_lvl+0x116/0x1f0 [ 930.385107][T16743] print_circular_bug+0x275/0x350 [ 930.385139][T16743] check_noncircular+0x14c/0x170 [ 930.385171][T16743] __lock_acquire+0x126f/0x1c90 [ 930.385205][T16743] lock_acquire+0x179/0x350 [ 930.385232][T16743] ? queue_requests_store+0x3a7/0x670 [ 930.385255][T16743] ? __pfx___might_resched+0x10/0x10 [ 930.385282][T16743] ? queue_requests_store+0x3a7/0x670 [ 930.385301][T16743] __mutex_lock+0x193/0x1060 [ 930.385324][T16743] ? queue_requests_store+0x3a7/0x670 [ 930.385346][T16743] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 930.385379][T16743] ? __pfx___mutex_lock+0x10/0x10 [ 930.385402][T16743] ? blk_mq_freeze_queue_wait+0xad/0x1b0 [ 930.385436][T16743] ? __pfx_autoremove_wake_function+0x10/0x10 [ 930.385467][T16743] ? queue_requests_store+0x3a7/0x670 [ 930.385487][T16743] queue_requests_store+0x3a7/0x670 [ 930.385508][T16743] ? __pfx_queue_requests_store+0x10/0x10 [ 930.385529][T16743] ? __mutex_trylock_common+0xe9/0x250 [ 930.385560][T16743] ? __pfx_queue_requests_store+0x10/0x10 [ 930.385580][T16743] queue_attr_store+0x26b/0x310 [ 930.385602][T16743] ? __pfx_queue_attr_store+0x10/0x10 [ 930.385621][T16743] ? __lock_acquire+0x622/0x1c90 [ 930.385655][T16743] ? find_held_lock+0x2b/0x80 [ 930.385677][T16743] ? sysfs_file_kobj+0xe4/0x290 [ 930.385708][T16743] ? __pfx_queue_attr_store+0x10/0x10 [ 930.385728][T16743] sysfs_kf_write+0xf2/0x150 [ 930.385756][T16743] kernfs_fop_write_iter+0x3af/0x570 [ 930.385780][T16743] ? __pfx_sysfs_kf_write+0x10/0x10 [ 930.385808][T16743] vfs_write+0x7d3/0x11d0 [ 930.385835][T16743] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 930.385878][T16743] ? __pfx___mutex_lock+0x10/0x10 [ 930.385899][T16743] ? __pfx_vfs_write+0x10/0x10 [ 930.385932][T16743] ksys_write+0x12a/0x250 [ 930.385958][T16743] ? __pfx_ksys_write+0x10/0x10 [ 930.385986][T16743] do_syscall_64+0xcd/0xfa0 [ 930.386008][T16743] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 930.386029][T16743] RIP: 0033:0x7fb65b78f7c9 [ 930.386053][T16743] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 930.386071][T16743] RSP: 002b:00007fb65c559038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 930.386089][T16743] RAX: ffffffffffffffda RBX: 00007fb65b9e6180 RCX: 00007fb65b78f7c9 [ 930.386102][T16743] RDX: 0000000000000081 RSI: 00002000000000c0 RDI: 0000000000000005 [ 930.386114][T16743] RBP: 00007fb65b813f91 R08: 0000000000000000 R09: 0000000000000000 [ 930.386126][T16743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 930.386138][T16743] R13: 00007fb65b9e6218 R14: 00007fb65b9e6180 R15: 00007ffefeeac0b8 [ 930.386160][T16743] [ 930.386183][ C0] vkms_vblank_simulate: vblank timer overrun [ 930.734949][ C0] vkms_vblank_simulate: vblank timer overrun [ 931.602750][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.611461][ T1303] ieee802154 phy1 wpan1: encryption failed: -22