last executing test programs: 3.778001552s ago: executing program 3 (id=644): r0 = socket$kcm(0x10, 0x400000002, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x10e, 0x2, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x10e, 0x2, 0x0, 0x0) (async) socketpair(0x2c, 0x3, 0x0, &(0x7f0000000580)={0xffffffffffffffff}) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1, 0x4, 0x4, 0x4, 0x1}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff850000000400000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000001c0)={r4, r3}, 0xfffffffffffffe15) (async) r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040), 0x4) write$cgroup_devices(r2, &(0x7f0000000140)={'a', ' *:* ', 'rwm\x00'}, 0xa) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0xa5, 0xfffffbff, 0x6, 0x40840, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x2, 0x7}, 0x50) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100)={r5, r6}, 0xc) 3.618089815s ago: executing program 3 (id=646): syz_clone(0x2180600, 0x0, 0x0, &(0x7f0000000540), 0x0, 0x0) 3.554623997s ago: executing program 1 (id=647): r0 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x800, @dev={0xfe, 0x80, '\x00', 0x1c}}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000100)="fd505c8674", 0xfe2f}], 0x1}, 0x20004000) r1 = perf_event_open$cgroup(&(0x7f0000000040)={0x3, 0x80, 0x4, 0xe, 0xff, 0xa, 0x0, 0xff, 0x10600, 0x4, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6, 0x4, @perf_bp={&(0x7f0000000000), 0x6}, 0x0, 0x0, 0x7fff, 0x9, 0x7, 0x4, 0x3597, 0x0, 0x5, 0x0, 0x6b8c}, 0xffffffffffffffff, 0x6, 0xffffffffffffffff, 0x3) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000045"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x10, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000de92f4000000000009000000186a00000f00000000000000400000008510000001000000852000000300000018110000", @ANYRES32=r3, @ANYBLOB="000000000000000018000000070000000000000007000000184b00000800000000000000000000008520000005000000184000000000000000000000000000009500000000000000"], &(0x7f0000000340)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0xa, '\x00', 0x0, 0x0, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f00000003c0)={0x1, 0x4, 0xffffffff}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000400)=[r2, r3, r3], &(0x7f0000000440)=[{0x1, 0x4, 0x0, 0x6}, {0x4, 0x2, 0x0, 0x9}, {0x2, 0x2, 0xb}, {0x5, 0x1, 0x6, 0x2}], 0x10, 0x7fff}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff850000001000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r5}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x10}]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, r1, 0x0, 0xb, &(0x7f00000000c0)='^[:+]\\\x92&{#\x00'}, 0x30) 3.42885443s ago: executing program 2 (id=649): syz_clone(0x2180600, 0x0, 0x0, &(0x7f0000000540), 0x0, 0x0) (fail_nth: 2) 3.258016634s ago: executing program 1 (id=650): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400030000120800040043000000a8001600a400014020000700ffffff7fb94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0) 3.204439626s ago: executing program 3 (id=651): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socket$kcm(0x10, 0x3, 0x10) (async) socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, @perf_bp={0x0, 0x2}, 0x100301, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x9, 0x7, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x200000000000006, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000840)={0xffffffffffffffff, 0x2, 0x18}, 0xc) (async) r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000840)={0xffffffffffffffff, 0x2, 0x18}, 0xc) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000880)={&(0x7f00000002c0)="b8e15ed36afa1f4f4d64e931c4182faf98ee7c80caf83e582d2f5b0b51fad212227511dbf45fb4614f6ccabdda9b63aca0b4f8a5afd68b624e81747ef627f18c37d05e9c8283f8276493bc2851658d35423dae889266797eb1559c46d8b65c1dd781695b49b1ecf63708cd95feaedff88af756a7a2038630b6f2bb1f03ca01ad4a00f06f34fff917e92021ff8a261588acf71fdd86e0973db578bc430670d775021a662598fb0b9e2d5b585b2c8c2988a2d1a7f720c9a0e138ae2c541b0bb4d4e96733f9295a4a27af1c2320497642ecd07ee21d", &(0x7f00000003c0)=""/33, &(0x7f00000006c0)="817021d2c3235b3d547920c2609dd3c51cf6332c2fd775faca9f09c5c0913ea3e75623955a3eb66657d5f61f1b40ae8b91914eb432cfaa04071ac311dbd6defb77db5c26b020062b20766b6b550bceea80f5786d0d6076075f691a59439674849cd0b7b7c643ab0d1eb42ec4f902c2797e106c89e2f838436633099071a20c8d3a201b04b17d390e7cd7bbaf5eefeca7c9ef1b006f02c36b81a169", &(0x7f0000000780)="3494d6609d95fbd10b6e908148d10d418e5fa31c522880dad36a53b3bbfd3a3c56ac7254be493f0d64a390214c5fb23e58084aafa1bdd389df50ad5d6d75b8e6a750b0fa87cc70b5b7adcf252ece5161bf63275e5c5b20638c4513909fa32f7b8f5be7b58979aa644c2673b570f018a831e2cba7c422d63f2b665b24ec3c78d2b83355f0d4e6d2cc", 0xe9a1, r0, 0x4}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040), 0x10}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800"/15], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800"/15], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) syz_open_procfs$namespace(0x0, 0x0) (async) syz_open_procfs$namespace(0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) (async) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, 0x0) (async) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2, 0x0, 0xff, 0x5, 0x0, 0x0, 0x0, 0x8ed9e90c1d4f2726, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0xe, 0x66c}, 0x104101, 0x3, 0x2, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2, 0x0, 0xff, 0x5, 0x0, 0x0, 0x0, 0x8ed9e90c1d4f2726, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0xe, 0x66c}, 0x104101, 0x3, 0x2, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="d80000001e0081124e81f782db4cb9040a1d080006007c095dd2086518000a800de7ffff02600e1208000f0000000406a80016c0080009", 0x37}], 0x1}, 0x40000) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x7, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa500000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) 3.154963557s ago: executing program 0 (id=652): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400030000120800040043000000a8001600a400014020000700ffffff7fb94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0) (fail_nth: 2) 2.397940737s ago: executing program 2 (id=653): r0 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty, 0x2}, 0x80, 0x0}, 0x20000001) recvmsg$kcm(r0, &(0x7f0000005140)={0x0, 0x0, 0x0}, 0x10000) (fail_nth: 1) 2.397791457s ago: executing program 0 (id=654): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb9041c1d0800fe007c05e8fe55a104000100ff02142603600e12080005007a010401a80016002000034004020000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x58, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r3 = socket$kcm(0x2, 0x5, 0x84) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400, 0x94001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x8000, 0x5, 0x3, 0x46ab52bf2228c1d1, 0x9, 0x6, 0xfffe, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x2, 0x5, 0x84) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r4, 0x84, 0x77, &(0x7f0000000000)=r5, 0x62) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000007c0)='memory.events\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r3, 0x84, 0x78, &(0x7f0000000040)=r6, 0x4) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000100)={r1, 0x2c5}, 0xc) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140), 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, r7, 0x6, '\x00', r2, r8, 0x4, 0x3, 0x4}, 0x50) 2.343420099s ago: executing program 1 (id=655): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x16, 0x2, 0x0, 0x0, 0x4, 0x8a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801, 0x0, @perf_config_ext={0x3, 0x6c99e481}, 0x100001, 0xca, 0x5, 0x5, 0xd12, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x2000000000000000}, 0x0, 0x3, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x7, &(0x7f00000002c0)=@framed={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00'}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000010040)) perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xbb, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0xc, 0xff}, 0x0, 0x2000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYRES8=r1, @ANYBLOB="3eca", @ANYRES8=r2], 0x9a) 2.200602483s ago: executing program 3 (id=656): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f00000003c0)='syzkaller\x00'}, 0x51) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x18, 0x0, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e08906200060000021", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x50) 1.654036077s ago: executing program 2 (id=657): r0 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty, 0x2}, 0x80, 0x0}, 0x20000001) recvmsg$kcm(r0, &(0x7f0000005140)={0x0, 0x0, 0x0}, 0x10000) 1.652134747s ago: executing program 3 (id=658): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0x4, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x1}, 0x94) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x18, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000f00)={0x6, 0x18, &(0x7f0000000a00)=@raw=[@generic={0x5, 0x7, 0x5, 0x40, 0x101}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, @tail_call, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfeaa}}, @map_fd={0x18, 0x1}, @alu={0x7, 0x1, 0x6, 0x9, 0x1, 0x50, 0xfffffffffffffff0}], &(0x7f0000000380)='syzkaller\x00', 0x1ff, 0x0, 0x0, 0x41000, 0x60}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0}, 0x4100, 0x0, 0x0, 0x9, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="02000000040000000800000001"], 0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@snprintf={{0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x11}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xd}, {}, {}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffe00}, {}, {0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffe00}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0xc5}}]}, &(0x7f0000000300)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.52137614s ago: executing program 0 (id=659): r0 = socket$kcm(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xaba, 0x7}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030033000b63d25a80648c2594f91224fc60100c214002000003050582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty, 0x2}, 0x80, 0x0}, 0x20000001) recvmsg$kcm(r0, &(0x7f0000005140)={0x0, 0x0, 0x0}, 0x10000) 1.298121726s ago: executing program 1 (id=660): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x0, 0x2, 0x0, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) ioctl$SIOCSIFHWADDR(r2, 0x541b, &(0x7f0000000180)={'veth0_virt_wifi\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x41}}) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x90}, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000280), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00', 0x200}) socketpair(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, &(0x7f0000000080)) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b400000000000000791028000000000069000c00000000009500740000000000", @ANYRESDEC], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/164, 0x0, 0x25, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff8f}, 0x48) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000080)) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000300)="d8000000180081034e81f783db4cb9040a1d020006007c09e8fc55a10a0015000300142603600e120800060000000441a800080004001040040000000c5c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/215, 0xd7}, {&(0x7f00000001c0)=']', 0x1}], 0x2}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)="2e00000010008188040f80ec59acbc041389810039000000030fe30c000000000e0027008f000000028002922d1f", 0x2e}], 0x1}, 0x40) 1.235695048s ago: executing program 2 (id=661): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)}, 0x4000000) 1.163475709s ago: executing program 3 (id=662): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x9, 0x1, 0x0, 0x0, 0x0, 0x400, 0x9c001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x2, 0x7, 0x9, 0xd3d, 0xfffe, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xc, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x1}, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_subtree(r3, &(0x7f0000000040), 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000200)={[{0x6, 'net'}, {0x2b, 'hugetlb'}, {0x2d, 'net_cls'}, {0x2d, 'perf_event'}, {0x2d, 'io'}]}, 0x27) r5 = openat$cgroup_pressure(r3, &(0x7f0000000180)='memory.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r5, &(0x7f0000000080)={'some', 0x20, 0x2000000005, 0x20, 0x10000000fffff}, 0x2f) write$cgroup_pressure(r5, &(0x7f0000000140)={'some', 0x20, 0x6, 0x20, 0xffffffff}, 0x2f) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0x5, &(0x7f00000001c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x20000000, 0xe, 0x0, &(0x7f0000000680)="00fa711700"/14, 0x0, 0x21008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x8}, 0x50) 1.049903663s ago: executing program 1 (id=663): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000040000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r1, &(0x7f0000000840)={&(0x7f0000000000)={0x2, 0x4e23}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_retopts={{0x18, 0x0, 0x7, {[@noop, @lsrr={0x83, 0x7, 0x4, [@rand_addr=0x64010101]}]}}}], 0x18}, 0x0) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) (async) r4 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r6}, 0xc) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r7}, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r10}, &(0x7f0000000280), &(0x7f0000000240)=r2}, 0x20) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r10, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f00000000c0)=r11, 0x4) (async) sendmsg$inet(r9, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 996.119564ms ago: executing program 2 (id=664): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0x5, &(0x7f00000001c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x20000000, 0xe, 0x0, &(0x7f0000000680)="548852ac5b4eba7aeaccd2c62b2b", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x8}, 0x50) (fail_nth: 2) 913.411846ms ago: executing program 0 (id=665): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0x5, &(0x7f00000001c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x20000000, 0xe, 0x0, &(0x7f0000000680)="548852ac5b4eba7aeaccd2c62b2b", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x8}, 0x50) 419.596239ms ago: executing program 0 (id=666): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f00000003c0)='syzkaller\x00'}, 0x51) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x18, 0x0, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e08906200060000021", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x50) 161.805626ms ago: executing program 1 (id=667): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x0, 0x32, 0x43a1bd76, 0x7, 0xd, 0x6, 0x2, 0x0, 0xffffffff, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1e, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000a1800000000000002000000418009738e63c4997b3a14fc5a5ff280000000000000040000000000000fc99e9bb6290085ca0f3fbbf3b6bd31c85c43480fabfc6ea7947b3c958adfe9563493b4019bff18319b62044b29840b2de2b1bcf6a01492e2a06720514fe8d38"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x4, 0x310c, 0x0, 0x0, 0xffffffff, 0xfffe, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x2, 0x5, 0x84) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1f, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000490000000000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffec, 0x0, &(0x7f00000008c0)="89", 0x0, 0xf, 0x0, 0x2}, 0x32) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000001300)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x143}, 0x48) 26.960659ms ago: executing program 0 (id=668): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x16, 0x2, 0x0, 0x0, 0x4, 0x8a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801, 0x0, @perf_config_ext={0x3, 0x6c99e481}, 0x100001, 0xca, 0x5, 0x5, 0xd12, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x2000000000000000}, 0x0, 0x3, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x7, &(0x7f00000002c0)=@framed={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00'}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000010040)) perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xbb, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0xc, 0xff}, 0x0, 0x2000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYRES8=r1, @ANYBLOB="3eca", @ANYRES8=r2], 0x9a) 0s ago: executing program 2 (id=669): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="94020000af"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops=0x3}, 0x94) perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x9c, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x182, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b00000000010000000100000600000001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0x8, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3, r0}, 0x38) r1 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="110000001e007f109e03e601d8878d53d3", 0x11}], 0x1}, 0x0) kernel console output (not intermixed with test programs): 174.460429][ T7141] CPU: 1 PID: 7141 Comm: syz.0.463 Not tainted syzkaller #0 [ 174.467796][ T7141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 174.477889][ T7141] Call Trace: [ 174.481203][ T7141] [ 174.484168][ T7141] dump_stack_lvl+0x18c/0x250 [ 174.488900][ T7141] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 174.495104][ T7141] ? show_regs_print_info+0x20/0x20 [ 174.500342][ T7141] ? load_image+0x420/0x420 [ 174.504898][ T7141] should_fail_ex+0x394/0x4c0 [ 174.509616][ T7141] _copy_from_user+0x2f/0xe0 [ 174.514227][ T7141] ___sys_sendmsg+0x1c7/0x360 [ 174.518931][ T7141] ? __sys_sendmsg+0x2b0/0x2b0 [ 174.523723][ T7141] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 174.529909][ T7141] __se_sys_sendmsg+0x1d0/0x2c0 [ 174.534776][ T7141] ? __x64_sys_sendmsg+0x80/0x80 [ 174.539741][ T7141] ? syscall_enter_from_user_mode+0x2e/0x80 [ 174.545653][ T7141] do_syscall_64+0x55/0xb0 [ 174.550078][ T7141] ? clear_bhb_loop+0x40/0x90 [ 174.554761][ T7141] ? clear_bhb_loop+0x40/0x90 [ 174.559449][ T7141] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 174.565351][ T7141] RIP: 0033:0x7fcf47d9e0d9 [ 174.569779][ T7141] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 174.589394][ T7141] RSP: 002b:00007fcf48c12028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 174.597824][ T7141] RAX: ffffffffffffffda RBX: 00007fcf48025fa0 RCX: 00007fcf47d9e0d9 [ 174.605818][ T7141] RDX: 000000003406c096 RSI: 0000200000000240 RDI: 0000000000000003 [ 174.613813][ T7141] RBP: 00007fcf48c12090 R08: 0000000000000000 R09: 0000000000000000 [ 174.621805][ T7141] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 174.629792][ T7141] R13: 00007fcf48026038 R14: 00007fcf48025fa0 R15: 00007ffd0fe4c478 [ 174.637812][ T7141] [ 175.312987][ T7153] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 175.340267][ T7153] syzkaller1: linktype set to 773 [ 175.380400][ T7160] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.467'. [ 175.414022][ T7160] openvswitch: netlink: Tunnel attr 0 has unexpected len 60 expected 8 [ 175.535427][ T5785] Bluetooth: hci1: command tx timeout [ 175.783576][ T5785] Bluetooth: hci0: unexpected subevent 0x0a length: 150 > 30 [ 175.792850][ T5785] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:0' [ 175.803044][ T5785] CPU: 1 PID: 5785 Comm: kworker/u5:3 Not tainted syzkaller #0 [ 175.810650][ T5785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 175.820755][ T5785] Workqueue: hci0 hci_rx_work [ 175.825585][ T5785] Call Trace: [ 175.828905][ T5785] [ 175.831877][ T5785] dump_stack_lvl+0x18c/0x250 [ 175.836605][ T5785] ? show_regs_print_info+0x20/0x20 [ 175.841827][ T5785] ? load_image+0x420/0x420 [ 175.846370][ T5785] sysfs_create_dir_ns+0x26e/0x2a0 [ 175.851494][ T5785] ? __lock_acquire+0x7d80/0x7d80 [ 175.856548][ T5785] ? sysfs_warn_dup+0xa0/0xa0 [ 175.861250][ T5785] ? do_raw_spin_unlock+0x121/0x230 [ 175.866481][ T5785] kobject_add_internal+0x617/0xc90 [ 175.871710][ T5785] kobject_add+0x164/0x240 [ 175.876151][ T5785] ? kobject_init+0x1d0/0x1d0 [ 175.880856][ T5785] ? get_device_parent+0x366/0x390 [ 175.886004][ T5785] device_add+0x3fa/0xc40 [ 175.890354][ T5785] hci_conn_add_sysfs+0xd5/0x1e0 [ 175.895316][ T5785] le_conn_complete_evt+0xe9f/0x1480 [ 175.900627][ T5785] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 175.906887][ T5785] ? bt_info+0x180/0x180 [ 175.911230][ T5785] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 175.916883][ T5785] ? mutex_unlock+0x10/0x10 [ 175.921405][ T5785] ? skb_pull_data+0xf0/0x1f0 [ 175.926103][ T5785] hci_le_enh_conn_complete_evt+0x189/0x460 [ 175.932014][ T5785] ? hci_le_remote_conn_param_req_evt+0xcb0/0xcb0 [ 175.938467][ T5785] ? hci_remote_host_features_evt+0x150/0x150 [ 175.944570][ T5785] hci_event_packet+0x7b4/0x1280 [ 175.949558][ T5785] ? __lock_acquire+0x7d80/0x7d80 [ 175.954596][ T5785] ? lock_chain_count+0x20/0x20 [ 175.959461][ T5785] ? bis_list+0x290/0x290 [ 175.963809][ T5785] ? lockdep_hardirqs_on+0x98/0x150 [ 175.969036][ T5785] ? hci_send_to_monitor+0xd7/0x4f0 [ 175.974267][ T5785] hci_rx_work+0x43a/0xd60 [ 175.978709][ T5785] ? process_scheduled_works+0x975/0x1600 [ 175.984446][ T5785] process_scheduled_works+0xa60/0x1600 [ 175.990037][ T5785] ? worker_attach_to_pool+0x370/0x370 [ 175.995517][ T5785] ? assign_work+0x3cc/0x5d0 [ 176.000135][ T5785] worker_thread+0xa5e/0xfe0 [ 176.004769][ T5785] kthread+0x2fa/0x390 [ 176.008848][ T5785] ? pr_cont_work+0x550/0x550 [ 176.013547][ T5785] ? kthread_blkcg+0xd0/0xd0 [ 176.018235][ T5785] ret_from_fork+0x48/0x80 [ 176.022694][ T5785] ? kthread_blkcg+0xd0/0xd0 [ 176.027303][ T5785] ret_from_fork_asm+0x11/0x20 [ 176.032110][ T5785] [ 176.038438][ T5785] kobject: kobject_add_internal failed for hci0:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 176.052901][ T5785] Bluetooth: hci0: failed to register connection device [ 176.183609][ T7170] FAULT_INJECTION: forcing a failure. [ 176.183609][ T7170] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 176.201487][ T7170] CPU: 1 PID: 7170 Comm: syz.1.471 Not tainted syzkaller #0 [ 176.208851][ T7170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 176.218941][ T7170] Call Trace: [ 176.222240][ T7170] [ 176.225186][ T7170] dump_stack_lvl+0x18c/0x250 [ 176.229897][ T7170] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 176.236100][ T7170] ? show_regs_print_info+0x20/0x20 [ 176.241312][ T7170] ? load_image+0x420/0x420 [ 176.245854][ T7170] should_fail_ex+0x394/0x4c0 [ 176.250560][ T7170] _copy_from_user+0x2f/0xe0 [ 176.255168][ T7170] ___sys_sendmsg+0x1c7/0x360 [ 176.259866][ T7170] ? __sys_sendmsg+0x2b0/0x2b0 [ 176.264659][ T7170] ? ktime_get+0x7f/0x280 [ 176.269026][ T7170] __se_sys_sendmsg+0x1d0/0x2c0 [ 176.273892][ T7170] ? __x64_sys_sendmsg+0x80/0x80 [ 176.278861][ T7170] ? syscall_enter_from_user_mode+0x2e/0x80 [ 176.284772][ T7170] do_syscall_64+0x55/0xb0 [ 176.289203][ T7170] ? clear_bhb_loop+0x40/0x90 [ 176.293891][ T7170] ? clear_bhb_loop+0x40/0x90 [ 176.298582][ T7170] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 176.304483][ T7170] RIP: 0033:0x7fecb899e0d9 [ 176.308912][ T7170] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 176.328533][ T7170] RSP: 002b:00007fecb9902028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 176.336966][ T7170] RAX: ffffffffffffffda RBX: 00007fecb8c26090 RCX: 00007fecb899e0d9 [ 176.344954][ T7170] RDX: 000000003406c096 RSI: 0000200000000240 RDI: 0000000000000003 [ 176.352944][ T7170] RBP: 00007fecb9902090 R08: 0000000000000000 R09: 0000000000000000 [ 176.360924][ T7170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 176.368910][ T7170] R13: 00007fecb8c26128 R14: 00007fecb8c26090 R15: 00007ffd7e9ebf08 [ 176.376910][ T7170] [ 176.716980][ T7178] FAULT_INJECTION: forcing a failure. [ 176.716980][ T7178] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 176.732219][ T7178] CPU: 1 PID: 7178 Comm: syz.3.475 Not tainted syzkaller #0 [ 176.739570][ T7178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 176.749664][ T7178] Call Trace: [ 176.752974][ T7178] [ 176.755943][ T7178] dump_stack_lvl+0x18c/0x250 [ 176.760669][ T7178] ? show_regs_print_info+0x20/0x20 [ 176.765908][ T7178] ? load_image+0x420/0x420 [ 176.770473][ T7178] ? __lock_acquire+0x7d80/0x7d80 [ 176.775545][ T7178] ? snprintf+0xe9/0x140 [ 176.779835][ T7178] should_fail_ex+0x394/0x4c0 [ 176.784565][ T7178] _copy_to_user+0x2f/0xa0 [ 176.789026][ T7178] simple_read_from_buffer+0xe7/0x150 [ 176.794445][ T7178] proc_fail_nth_read+0x1e8/0x260 [ 176.799532][ T7178] ? proc_fault_inject_write+0x360/0x360 [ 176.805221][ T7178] ? fsnotify_perm+0x271/0x5e0 [ 176.810031][ T7178] ? proc_fault_inject_write+0x360/0x360 [ 176.815762][ T7178] vfs_read+0x298/0x990 [ 176.819979][ T7178] ? kernel_read+0x1e0/0x1e0 [ 176.824618][ T7178] ? __fget_files+0x28/0x460 [ 176.829339][ T7178] ? __fget_files+0x3fc/0x460 [ 176.834063][ T7178] ? __fdget_pos+0x2a3/0x330 [ 176.838689][ T7178] ? ksys_read+0x74/0x260 [ 176.843064][ T7178] ksys_read+0x151/0x260 [ 176.847357][ T7178] ? vfs_write+0x9a0/0x9a0 [ 176.851834][ T7178] ? lockdep_hardirqs_on+0x98/0x150 [ 176.857255][ T7178] do_syscall_64+0x55/0xb0 [ 176.861713][ T7178] ? clear_bhb_loop+0x40/0x90 [ 176.866425][ T7178] ? clear_bhb_loop+0x40/0x90 [ 176.871160][ T7178] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 176.877095][ T7178] RIP: 0033:0x7fa38d15e90e [ 176.881552][ T7178] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 176.901201][ T7178] RSP: 002b:00007fa38e08bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 176.909660][ T7178] RAX: ffffffffffffffda RBX: 00007fa38e08c6c0 RCX: 00007fa38d15e90e [ 176.917672][ T7178] RDX: 000000000000000f RSI: 00007fa38e08c0a0 RDI: 0000000000000004 [ 176.925684][ T7178] RBP: 00007fa38e08c090 R08: 0000000000000000 R09: 0000000000000000 [ 176.933690][ T7178] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 176.941700][ T7178] R13: 00007fa38d426038 R14: 00007fa38d425fa0 R15: 00007fff843676b8 [ 176.949738][ T7178] [ 177.565998][ T7198] netlink: 'syz.0.480': attribute type 10 has an invalid length. [ 177.574038][ T7198] netlink: 40 bytes leftover after parsing attributes in process `syz.0.480'. [ 177.574793][ T51] Bluetooth: hci2: unexpected subevent 0x0a length: 150 > 30 [ 177.588859][ T7198] bond0: entered promiscuous mode [ 177.592308][ T51] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:0' [ 177.601747][ T7198] bond_slave_0: entered promiscuous mode [ 177.605162][ T51] CPU: 0 PID: 51 Comm: kworker/u5:0 Not tainted syzkaller #0 [ 177.611505][ T7198] bond_slave_1: entered promiscuous mode [ 177.618175][ T51] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 177.618194][ T51] Workqueue: hci2 hci_rx_work [ 177.618225][ T51] Call Trace: [ 177.618235][ T51] [ 177.618245][ T51] dump_stack_lvl+0x18c/0x250 [ 177.625707][ T7198] bridge0: port 3(bond0) entered blocking state [ 177.633954][ T51] ? show_regs_print_info+0x20/0x20 [ 177.633989][ T51] ? load_image+0x420/0x420 [ 177.639567][ T7198] bridge0: port 3(bond0) entered disabled state [ 177.641978][ T51] sysfs_create_dir_ns+0x26e/0x2a0 [ 177.645564][ T7198] bond0: entered allmulticast mode [ 177.649604][ T51] ? __lock_acquire+0x7d80/0x7d80 [ 177.649637][ T51] ? sysfs_warn_dup+0xa0/0xa0 [ 177.649672][ T51] ? do_raw_spin_unlock+0x121/0x230 [ 177.656634][ T7198] bond_slave_0: entered allmulticast mode [ 177.661116][ T51] kobject_add_internal+0x617/0xc90 [ 177.708114][ T51] kobject_add+0x164/0x240 [ 177.712581][ T51] ? kobject_init+0x1d0/0x1d0 [ 177.717286][ T51] ? get_device_parent+0x366/0x390 [ 177.722416][ T51] device_add+0x3fa/0xc40 [ 177.726763][ T51] hci_conn_add_sysfs+0xd5/0x1e0 [ 177.731720][ T51] le_conn_complete_evt+0xe9f/0x1480 [ 177.737032][ T51] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 177.743284][ T51] ? bt_info+0x180/0x180 [ 177.747540][ T51] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 177.753191][ T51] ? mutex_unlock+0x10/0x10 [ 177.757707][ T51] ? skb_pull_data+0xf0/0x1f0 [ 177.762400][ T51] hci_le_enh_conn_complete_evt+0x189/0x460 [ 177.768309][ T51] ? hci_le_remote_conn_param_req_evt+0xcb0/0xcb0 [ 177.774742][ T51] ? hci_remote_host_features_evt+0x150/0x150 [ 177.780824][ T51] hci_event_packet+0x7b4/0x1280 [ 177.785783][ T51] ? __lock_acquire+0x7d80/0x7d80 [ 177.790822][ T51] ? lock_chain_count+0x20/0x20 [ 177.795709][ T51] ? bis_list+0x290/0x290 [ 177.800055][ T51] ? lockdep_hardirqs_on+0x98/0x150 [ 177.805270][ T51] ? hci_send_to_monitor+0xd7/0x4f0 [ 177.810487][ T51] hci_rx_work+0x43a/0xd60 [ 177.814928][ T51] ? process_scheduled_works+0x975/0x1600 [ 177.820681][ T51] process_scheduled_works+0xa60/0x1600 [ 177.826274][ T51] ? worker_attach_to_pool+0x370/0x370 [ 177.831753][ T51] ? assign_work+0x3cc/0x5d0 [ 177.836363][ T51] worker_thread+0xa5e/0xfe0 [ 177.840995][ T51] kthread+0x2fa/0x390 [ 177.845159][ T51] ? pr_cont_work+0x550/0x550 [ 177.849854][ T51] ? kthread_blkcg+0xd0/0xd0 [ 177.854454][ T51] ret_from_fork+0x48/0x80 [ 177.858887][ T51] ? kthread_blkcg+0xd0/0xd0 [ 177.863506][ T51] ret_from_fork_asm+0x11/0x20 [ 177.868310][ T51] [ 177.873068][ T51] kobject: kobject_add_internal failed for hci2:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 177.881640][ T7198] bond_slave_1: entered allmulticast mode [ 177.887411][ T51] Bluetooth: hci2: failed to register connection device [ 177.903619][ T7198] bridge0: port 3(bond0) entered blocking state [ 177.910303][ T7198] bridge0: port 3(bond0) entered forwarding state [ 178.111313][ T5785] Bluetooth: hci0: command tx timeout [ 178.504213][ T7207] FAULT_INJECTION: forcing a failure. [ 178.504213][ T7207] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 178.524136][ T7207] CPU: 1 PID: 7207 Comm: syz.0.484 Not tainted syzkaller #0 [ 178.531479][ T7207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 178.541566][ T7207] Call Trace: [ 178.544874][ T7207] [ 178.547834][ T7207] dump_stack_lvl+0x18c/0x250 [ 178.552551][ T7207] ? show_regs_print_info+0x20/0x20 [ 178.557786][ T7207] ? load_image+0x420/0x420 [ 178.562338][ T7207] ? __might_fault+0xaa/0x120 [ 178.567061][ T7207] ? __lock_acquire+0x7d80/0x7d80 [ 178.572128][ T7207] should_fail_ex+0x394/0x4c0 [ 178.576848][ T7207] _copy_from_user+0x2f/0xe0 [ 178.581477][ T7207] ___sys_sendmsg+0x1c7/0x360 [ 178.586200][ T7207] ? __sys_sendmsg+0x2b0/0x2b0 [ 178.591027][ T7207] ? __lock_acquire+0x7d80/0x7d80 [ 178.596127][ T7207] __se_sys_sendmsg+0x1d0/0x2c0 [ 178.601017][ T7207] ? __x64_sys_sendmsg+0x80/0x80 [ 178.606016][ T7207] ? lockdep_hardirqs_on+0x98/0x150 [ 178.611265][ T7207] do_syscall_64+0x55/0xb0 [ 178.615724][ T7207] ? clear_bhb_loop+0x40/0x90 [ 178.620441][ T7207] ? clear_bhb_loop+0x40/0x90 [ 178.625156][ T7207] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 178.631068][ T7207] RIP: 0033:0x7fcf47d9e0d9 [ 178.635488][ T7207] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 178.655095][ T7207] RSP: 002b:00007fcf48c12028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 178.663506][ T7207] RAX: ffffffffffffffda RBX: 00007fcf48025fa0 RCX: 00007fcf47d9e0d9 [ 178.671474][ T7207] RDX: 0000000000044000 RSI: 0000200000000140 RDI: 0000000000000003 [ 178.679443][ T7207] RBP: 00007fcf48c12090 R08: 0000000000000000 R09: 0000000000000000 [ 178.687412][ T7207] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 178.695382][ T7207] R13: 00007fcf48026038 R14: 00007fcf48025fa0 R15: 00007ffd0fe4c478 [ 178.703385][ T7207] [ 178.879285][ T7211] netlink: 'syz.0.485': attribute type 10 has an invalid length. [ 178.893598][ T7211] netlink: 40 bytes leftover after parsing attributes in process `syz.0.485'. [ 179.206767][ T7222] FAULT_INJECTION: forcing a failure. [ 179.206767][ T7222] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 179.246906][ T7222] CPU: 1 PID: 7222 Comm: syz.3.489 Not tainted syzkaller #0 [ 179.254275][ T7222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 179.264369][ T7222] Call Trace: [ 179.267680][ T7222] [ 179.270637][ T7222] dump_stack_lvl+0x18c/0x250 [ 179.275350][ T7222] ? show_regs_print_info+0x20/0x20 [ 179.280576][ T7222] ? load_image+0x420/0x420 [ 179.285118][ T7222] ? __might_fault+0xaa/0x120 [ 179.289831][ T7222] ? __lock_acquire+0x7d80/0x7d80 [ 179.294885][ T7222] should_fail_ex+0x394/0x4c0 [ 179.299589][ T7222] _copy_from_user+0x2f/0xe0 [ 179.304203][ T7222] ___sys_sendmsg+0x1c7/0x360 [ 179.308903][ T7222] ? __sys_sendmsg+0x2b0/0x2b0 [ 179.313713][ T7222] __se_sys_sendmsg+0x1d0/0x2c0 [ 179.318567][ T7222] ? __x64_sys_sendmsg+0x80/0x80 [ 179.323514][ T7222] ? syscall_enter_from_user_mode+0x2e/0x80 [ 179.329424][ T7222] do_syscall_64+0x55/0xb0 [ 179.333859][ T7222] ? clear_bhb_loop+0x40/0x90 [ 179.338534][ T7222] ? clear_bhb_loop+0x40/0x90 [ 179.343229][ T7222] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 179.349172][ T7222] RIP: 0033:0x7fa38d19e0d9 [ 179.353628][ T7222] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 179.373280][ T7222] RSP: 002b:00007fa38e08c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 179.381742][ T7222] RAX: ffffffffffffffda RBX: 00007fa38d425fa0 RCX: 00007fa38d19e0d9 [ 179.389751][ T7222] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 179.397757][ T7222] RBP: 00007fa38e08c090 R08: 0000000000000000 R09: 0000000000000000 [ 179.406640][ T7222] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 179.414649][ T7222] R13: 00007fa38d426038 R14: 00007fa38d425fa0 R15: 00007fff843676b8 [ 179.422688][ T7222] [ 179.936761][ T5785] Bluetooth: hci2: command tx timeout [ 180.022709][ T7237] FAULT_INJECTION: forcing a failure. [ 180.022709][ T7237] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 180.075346][ T7237] CPU: 0 PID: 7237 Comm: syz.3.495 Not tainted syzkaller #0 [ 180.082716][ T7237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 180.092812][ T7237] Call Trace: [ 180.096127][ T7237] [ 180.099094][ T7237] dump_stack_lvl+0x18c/0x250 [ 180.103815][ T7237] ? show_regs_print_info+0x20/0x20 [ 180.109054][ T7237] ? load_image+0x420/0x420 [ 180.113609][ T7237] ? __might_fault+0xaa/0x120 [ 180.118331][ T7237] ? __lock_acquire+0x7d80/0x7d80 [ 180.123411][ T7237] should_fail_ex+0x394/0x4c0 [ 180.128143][ T7237] _copy_from_user+0x2f/0xe0 [ 180.132768][ T7237] ___sys_recvmsg+0x174/0x590 [ 180.137485][ T7237] ? __sys_recvmsg+0x2a0/0x2a0 [ 180.142475][ T7237] ? __fget_files+0x3fc/0x460 [ 180.147201][ T7237] __x64_sys_recvmsg+0x21e/0x2f0 [ 180.152169][ T7237] ? ___sys_recvmsg+0x590/0x590 [ 180.157062][ T7237] ? syscall_enter_from_user_mode+0x2e/0x80 [ 180.162991][ T7237] do_syscall_64+0x55/0xb0 [ 180.167429][ T7237] ? clear_bhb_loop+0x40/0x90 [ 180.172135][ T7237] ? clear_bhb_loop+0x40/0x90 [ 180.176840][ T7237] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 180.182758][ T7237] RIP: 0033:0x7fa38d19e0d9 [ 180.187198][ T7237] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 180.206920][ T7237] RSP: 002b:00007fa38e08c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 180.215373][ T7237] RAX: ffffffffffffffda RBX: 00007fa38d425fa0 RCX: 00007fa38d19e0d9 [ 180.223369][ T7237] RDX: 0000000040000240 RSI: 0000200000001500 RDI: 0000000000000006 [ 180.231361][ T7237] RBP: 00007fa38e08c090 R08: 0000000000000000 R09: 0000000000000000 [ 180.239357][ T7237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 180.247348][ T7237] R13: 00007fa38d426038 R14: 00007fa38d425fa0 R15: 00007fff843676b8 [ 180.255379][ T7237] [ 180.493759][ T5785] Bluetooth: hci0: unexpected subevent 0x0a length: 150 > 30 [ 180.502209][ T5785] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:0' [ 180.511810][ T5785] CPU: 1 PID: 5785 Comm: kworker/u5:3 Not tainted syzkaller #0 [ 180.519408][ T5785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 180.529501][ T5785] Workqueue: hci0 hci_rx_work [ 180.534205][ T5785] Call Trace: [ 180.537505][ T5785] [ 180.540447][ T5785] dump_stack_lvl+0x18c/0x250 [ 180.545151][ T5785] ? show_regs_print_info+0x20/0x20 [ 180.550364][ T5785] ? load_image+0x420/0x420 [ 180.554907][ T5785] sysfs_create_dir_ns+0x26e/0x2a0 [ 180.560046][ T5785] ? __lock_acquire+0x7d80/0x7d80 [ 180.565087][ T5785] ? sysfs_warn_dup+0xa0/0xa0 [ 180.569779][ T5785] ? do_raw_spin_unlock+0x121/0x230 [ 180.575001][ T5785] kobject_add_internal+0x617/0xc90 [ 180.580233][ T5785] kobject_add+0x164/0x240 [ 180.584671][ T5785] ? kobject_init+0x1d0/0x1d0 [ 180.589371][ T5785] ? get_device_parent+0x366/0x390 [ 180.594498][ T5785] device_add+0x3fa/0xc40 [ 180.598848][ T5785] hci_conn_add_sysfs+0xd5/0x1e0 [ 180.603808][ T5785] le_conn_complete_evt+0xe9f/0x1480 [ 180.609140][ T5785] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 180.615487][ T5785] ? bt_info+0x180/0x180 [ 180.619740][ T5785] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 180.625391][ T5785] ? mutex_unlock+0x10/0x10 [ 180.629912][ T5785] ? skb_pull_data+0xf0/0x1f0 [ 180.634605][ T5785] hci_le_enh_conn_complete_evt+0x189/0x460 [ 180.640517][ T5785] ? hci_le_remote_conn_param_req_evt+0xcb0/0xcb0 [ 180.646948][ T5785] ? hci_remote_host_features_evt+0x150/0x150 [ 180.653042][ T5785] hci_event_packet+0x7b4/0x1280 [ 180.658002][ T5785] ? __lock_acquire+0x7d80/0x7d80 [ 180.663053][ T5785] ? lock_chain_count+0x20/0x20 [ 180.667917][ T5785] ? bis_list+0x290/0x290 [ 180.672265][ T5785] ? lockdep_hardirqs_on+0x98/0x150 [ 180.677485][ T5785] ? hci_send_to_monitor+0xd7/0x4f0 [ 180.682699][ T5785] hci_rx_work+0x43a/0xd60 [ 180.687155][ T5785] ? process_scheduled_works+0x975/0x1600 [ 180.692896][ T5785] process_scheduled_works+0xa60/0x1600 [ 180.698490][ T5785] ? worker_attach_to_pool+0x370/0x370 [ 180.703974][ T5785] ? assign_work+0x3cc/0x5d0 [ 180.708589][ T5785] worker_thread+0xa5e/0xfe0 [ 180.713223][ T5785] kthread+0x2fa/0x390 [ 180.717307][ T5785] ? pr_cont_work+0x550/0x550 [ 180.722002][ T5785] ? kthread_blkcg+0xd0/0xd0 [ 180.726614][ T5785] ret_from_fork+0x48/0x80 [ 180.731047][ T5785] ? kthread_blkcg+0xd0/0xd0 [ 180.735649][ T5785] ret_from_fork_asm+0x11/0x20 [ 180.740448][ T5785] [ 180.746840][ T5785] kobject: kobject_add_internal failed for hci0:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 180.761240][ T5785] Bluetooth: hci0: failed to register connection device [ 181.386983][ T7261] netlink: 'syz.0.502': attribute type 6 has an invalid length. [ 181.417326][ T7258] FAULT_INJECTION: forcing a failure. [ 181.417326][ T7258] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 181.430947][ T7261] netlink: 'syz.0.502': attribute type 3 has an invalid length. [ 181.430998][ T7261] netlink: 153952 bytes leftover after parsing attributes in process `syz.0.502'. [ 181.494407][ T7258] CPU: 0 PID: 7258 Comm: syz.2.501 Not tainted syzkaller #0 [ 181.501781][ T7258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 181.511883][ T7258] Call Trace: [ 181.515203][ T7258] [ 181.518168][ T7258] dump_stack_lvl+0x18c/0x250 [ 181.522881][ T7258] ? show_regs_print_info+0x20/0x20 [ 181.528103][ T7258] ? load_image+0x420/0x420 [ 181.532657][ T7258] ? __lock_acquire+0x7d80/0x7d80 [ 181.537723][ T7258] ? lockdep_hardirqs_on+0x98/0x150 [ 181.542974][ T7258] should_fail_ex+0x394/0x4c0 [ 181.547700][ T7258] _copy_to_user+0x2f/0xa0 [ 181.552164][ T7258] simple_read_from_buffer+0xe7/0x150 [ 181.557580][ T7258] proc_fail_nth_read+0x1e8/0x260 [ 181.562648][ T7258] ? proc_fault_inject_write+0x360/0x360 [ 181.568332][ T7258] ? fsnotify_perm+0x271/0x5e0 [ 181.573146][ T7258] ? proc_fault_inject_write+0x360/0x360 [ 181.578829][ T7258] vfs_read+0x298/0x990 [ 181.583032][ T7258] ? kernel_read+0x1e0/0x1e0 [ 181.587664][ T7258] ? __fget_files+0x28/0x460 [ 181.592296][ T7258] ? __fget_files+0x3fc/0x460 [ 181.597024][ T7258] ? __fdget_pos+0x2a3/0x330 [ 181.601646][ T7258] ? ksys_read+0x74/0x260 [ 181.605995][ T7258] ksys_read+0x151/0x260 [ 181.610256][ T7258] ? vfs_write+0x9a0/0x9a0 [ 181.614691][ T7258] ? lockdep_hardirqs_on+0x98/0x150 [ 181.619911][ T7258] do_syscall_64+0x55/0xb0 [ 181.624340][ T7258] ? clear_bhb_loop+0x40/0x90 [ 181.629025][ T7258] ? clear_bhb_loop+0x40/0x90 [ 181.633713][ T7258] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 181.639613][ T7258] RIP: 0033:0x7f35a8f5e90e [ 181.644041][ T7258] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 181.663656][ T7258] RSP: 002b:00007f35a9f0efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 181.672084][ T7258] RAX: ffffffffffffffda RBX: 00007f35a9f0f6c0 RCX: 00007f35a8f5e90e [ 181.680064][ T7258] RDX: 000000000000000f RSI: 00007f35a9f0f0a0 RDI: 0000000000000008 [ 181.688146][ T7258] RBP: 00007f35a9f0f090 R08: 0000000000000000 R09: 0000000000000000 [ 181.696128][ T7258] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 181.704104][ T7258] R13: 00007f35a9226038 R14: 00007f35a9225fa0 R15: 00007ffe2e6012e8 [ 181.712097][ T7258] [ 182.076415][ T7270] FAULT_INJECTION: forcing a failure. [ 182.076415][ T7270] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 182.147860][ T7270] CPU: 1 PID: 7270 Comm: syz.1.505 Not tainted syzkaller #0 [ 182.155242][ T7270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 182.165348][ T7270] Call Trace: [ 182.168670][ T7270] [ 182.171641][ T7270] dump_stack_lvl+0x18c/0x250 [ 182.176366][ T7270] ? show_regs_print_info+0x20/0x20 [ 182.181625][ T7270] ? load_image+0x420/0x420 [ 182.186158][ T7270] ? __lock_acquire+0x7d80/0x7d80 [ 182.191202][ T7270] ? snprintf+0xe9/0x140 [ 182.195469][ T7270] should_fail_ex+0x394/0x4c0 [ 182.200171][ T7270] _copy_to_user+0x2f/0xa0 [ 182.204606][ T7270] simple_read_from_buffer+0xe7/0x150 [ 182.209993][ T7270] proc_fail_nth_read+0x1e8/0x260 [ 182.215044][ T7270] ? proc_fault_inject_write+0x360/0x360 [ 182.220713][ T7270] ? fsnotify_perm+0x271/0x5e0 [ 182.225491][ T7270] ? proc_fault_inject_write+0x360/0x360 [ 182.231149][ T7270] vfs_read+0x298/0x990 [ 182.235327][ T7270] ? kernel_read+0x1e0/0x1e0 [ 182.239936][ T7270] ? __fget_files+0x28/0x460 [ 182.244539][ T7270] ? __fget_files+0x3fc/0x460 [ 182.249242][ T7270] ? __fdget_pos+0x2a3/0x330 [ 182.253850][ T7270] ? ksys_read+0x74/0x260 [ 182.258195][ T7270] ksys_read+0x151/0x260 [ 182.262452][ T7270] ? vfs_write+0x9a0/0x9a0 [ 182.266890][ T7270] ? lockdep_hardirqs_on+0x98/0x150 [ 182.272102][ T7270] do_syscall_64+0x55/0xb0 [ 182.276526][ T7270] ? clear_bhb_loop+0x40/0x90 [ 182.281213][ T7270] ? clear_bhb_loop+0x40/0x90 [ 182.285904][ T7270] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 182.291819][ T7270] RIP: 0033:0x7fecb895e90e [ 182.296249][ T7270] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 182.315866][ T7270] RSP: 002b:00007fecb9922fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 182.324289][ T7270] RAX: ffffffffffffffda RBX: 00007fecb99236c0 RCX: 00007fecb895e90e [ 182.332267][ T7270] RDX: 000000000000000f RSI: 00007fecb99230a0 RDI: 0000000000000009 [ 182.340253][ T7270] RBP: 00007fecb9923090 R08: 0000000000000000 R09: 0000000000000000 [ 182.348234][ T7270] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 182.356210][ T7270] R13: 00007fecb8c26038 R14: 00007fecb8c25fa0 R15: 00007ffd7e9ebf08 [ 182.364292][ T7270] [ 182.833119][ T51] Bluetooth: hci0: command tx timeout [ 182.871704][ T7277] syzkaller0: entered promiscuous mode [ 182.891348][ T7277] syzkaller0: entered allmulticast mode [ 183.345844][ T51] Bluetooth: hci1: unexpected subevent 0x0a length: 150 > 30 [ 183.353614][ T51] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:0' [ 183.364129][ T51] CPU: 1 PID: 51 Comm: kworker/u5:0 Not tainted syzkaller #0 [ 183.371555][ T51] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 183.381634][ T51] Workqueue: hci1 hci_rx_work [ 183.386340][ T51] Call Trace: [ 183.389656][ T51] [ 183.392625][ T51] dump_stack_lvl+0x18c/0x250 [ 183.397360][ T51] ? show_regs_print_info+0x20/0x20 [ 183.402622][ T51] ? load_image+0x420/0x420 [ 183.407203][ T51] sysfs_create_dir_ns+0x26e/0x2a0 [ 183.412360][ T51] ? __lock_acquire+0x7d80/0x7d80 [ 183.417445][ T51] ? sysfs_warn_dup+0xa0/0xa0 [ 183.422179][ T51] ? do_raw_spin_unlock+0x121/0x230 [ 183.427446][ T51] kobject_add_internal+0x617/0xc90 [ 183.432704][ T51] kobject_add+0x164/0x240 [ 183.437182][ T51] ? kobject_init+0x1d0/0x1d0 [ 183.441919][ T51] ? get_device_parent+0x366/0x390 [ 183.447082][ T51] device_add+0x3fa/0xc40 [ 183.451481][ T51] hci_conn_add_sysfs+0xd5/0x1e0 [ 183.456492][ T51] le_conn_complete_evt+0xe9f/0x1480 [ 183.461849][ T51] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 183.468143][ T51] ? bt_info+0x180/0x180 [ 183.472481][ T51] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 183.478179][ T51] ? mutex_unlock+0x10/0x10 [ 183.482742][ T51] ? skb_pull_data+0xf0/0x1f0 [ 183.487472][ T51] hci_le_enh_conn_complete_evt+0x189/0x460 [ 183.493438][ T51] ? hci_le_remote_conn_param_req_evt+0xcb0/0xcb0 [ 183.499919][ T51] ? hci_remote_host_features_evt+0x150/0x150 [ 183.506225][ T51] hci_event_packet+0x7b4/0x1280 [ 183.511224][ T51] ? __lock_acquire+0x7d80/0x7d80 [ 183.516309][ T51] ? lock_chain_count+0x20/0x20 [ 183.521244][ T51] ? bis_list+0x290/0x290 [ 183.525645][ T51] ? lockdep_hardirqs_on+0x98/0x150 [ 183.530906][ T51] ? hci_send_to_monitor+0xd7/0x4f0 [ 183.536166][ T51] hci_rx_work+0x43a/0xd60 [ 183.540645][ T51] ? process_scheduled_works+0x975/0x1600 [ 183.546420][ T51] process_scheduled_works+0xa60/0x1600 [ 183.552072][ T51] ? worker_attach_to_pool+0x370/0x370 [ 183.557596][ T51] ? assign_work+0x3cc/0x5d0 [ 183.562247][ T51] worker_thread+0xa5e/0xfe0 [ 183.566931][ T51] kthread+0x2fa/0x390 [ 183.571057][ T51] ? pr_cont_work+0x550/0x550 [ 183.575779][ T51] ? kthread_blkcg+0xd0/0xd0 [ 183.580828][ T51] ret_from_fork+0x48/0x80 [ 183.585263][ T51] ? kthread_blkcg+0xd0/0xd0 [ 183.589879][ T51] ret_from_fork_asm+0x11/0x20 [ 183.594673][ T51] [ 183.607442][ T51] kobject: kobject_add_internal failed for hci1:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 183.621935][ T51] Bluetooth: hci1: failed to register connection device [ 183.949742][ T7300] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 183.964342][ T7300] FAULT_INJECTION: forcing a failure. [ 183.964342][ T7300] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 183.983624][ T7300] CPU: 1 PID: 7300 Comm: syz.3.513 Not tainted syzkaller #0 [ 183.991057][ T7300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 184.001216][ T7300] Call Trace: [ 184.004508][ T7300] [ 184.007460][ T7300] dump_stack_lvl+0x18c/0x250 [ 184.012157][ T7300] ? show_regs_print_info+0x20/0x20 [ 184.017464][ T7300] ? load_image+0x420/0x420 [ 184.021991][ T7300] ? __might_fault+0xaa/0x120 [ 184.026687][ T7300] ? __lock_acquire+0x7d80/0x7d80 [ 184.031732][ T7300] should_fail_ex+0x394/0x4c0 [ 184.036441][ T7300] _copy_from_user+0x2f/0xe0 [ 184.041045][ T7300] ___sys_sendmsg+0x1c7/0x360 [ 184.045743][ T7300] ? __sys_sendmsg+0x2b0/0x2b0 [ 184.050543][ T7300] ? __lock_acquire+0x7d80/0x7d80 [ 184.055607][ T7300] __se_sys_sendmsg+0x1d0/0x2c0 [ 184.060560][ T7300] ? __x64_sys_sendmsg+0x80/0x80 [ 184.065535][ T7300] ? lockdep_hardirqs_on+0x98/0x150 [ 184.070753][ T7300] do_syscall_64+0x55/0xb0 [ 184.075187][ T7300] ? clear_bhb_loop+0x40/0x90 [ 184.079977][ T7300] ? clear_bhb_loop+0x40/0x90 [ 184.084664][ T7300] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 184.090569][ T7300] RIP: 0033:0x7fa38d19e0d9 [ 184.095001][ T7300] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 184.114672][ T7300] RSP: 002b:00007fa38e06b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 184.123116][ T7300] RAX: ffffffffffffffda RBX: 00007fa38d426090 RCX: 00007fa38d19e0d9 [ 184.131101][ T7300] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000014 [ 184.139082][ T7300] RBP: 00007fa38e06b090 R08: 0000000000000000 R09: 0000000000000000 [ 184.147066][ T7300] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 184.155051][ T7300] R13: 00007fa38d426128 R14: 00007fa38d426090 R15: 00007fff843676b8 [ 184.163047][ T7300] [ 184.190829][ T7301] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 185.415156][ T7301] netlink: 132 bytes leftover after parsing attributes in process `syz.1.514'. [ 185.582447][ T7303] netlink: 'syz.3.515': attribute type 10 has an invalid length. [ 185.599991][ T7303] mac80211_hwsim hwsim5 wlan1: left allmulticast mode [ 185.712006][ T5785] Bluetooth: hci1: command tx timeout [ 185.758868][ T7303] team0: Port device wlan1 added [ 185.782757][ T7309] netlink: 26 bytes leftover after parsing attributes in process `syz.0.518'. [ 185.895441][ T7312] IPv6: NLM_F_CREATE should be specified when creating new route [ 185.919731][ T7312] netlink: 1 bytes leftover after parsing attributes in process `syz.1.517'. [ 186.442024][ T5785] Bluetooth: hci0: unexpected subevent 0x0a length: 150 > 30 [ 186.452924][ T5785] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:0' [ 186.462614][ T5785] CPU: 0 PID: 5785 Comm: kworker/u5:3 Not tainted syzkaller #0 [ 186.470204][ T5785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 186.480267][ T5785] Workqueue: hci0 hci_rx_work [ 186.485005][ T5785] Call Trace: [ 186.488311][ T5785] [ 186.491265][ T5785] dump_stack_lvl+0x18c/0x250 [ 186.495978][ T5785] ? show_regs_print_info+0x20/0x20 [ 186.501185][ T5785] ? load_image+0x420/0x420 [ 186.505710][ T5785] sysfs_create_dir_ns+0x26e/0x2a0 [ 186.510849][ T5785] ? __lock_acquire+0x7d80/0x7d80 [ 186.515903][ T5785] ? sysfs_warn_dup+0xa0/0xa0 [ 186.520715][ T5785] ? do_raw_spin_unlock+0x121/0x230 [ 186.525927][ T5785] kobject_add_internal+0x617/0xc90 [ 186.531146][ T5785] kobject_add+0x164/0x240 [ 186.535580][ T5785] ? kobject_init+0x1d0/0x1d0 [ 186.540267][ T5785] ? get_device_parent+0x366/0x390 [ 186.545407][ T5785] device_add+0x3fa/0xc40 [ 186.549793][ T5785] hci_conn_add_sysfs+0xd5/0x1e0 [ 186.554767][ T5785] le_conn_complete_evt+0xe9f/0x1480 [ 186.560157][ T5785] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 186.566429][ T5785] ? bt_info+0x180/0x180 [ 186.570700][ T5785] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 186.576346][ T5785] ? mutex_unlock+0x10/0x10 [ 186.580857][ T5785] ? skb_pull_data+0xf0/0x1f0 [ 186.585545][ T5785] hci_le_enh_conn_complete_evt+0x189/0x460 [ 186.591450][ T5785] ? hci_le_remote_conn_param_req_evt+0xcb0/0xcb0 [ 186.597871][ T5785] ? hci_remote_host_features_evt+0x150/0x150 [ 186.603950][ T5785] hci_event_packet+0x7b4/0x1280 [ 186.608903][ T5785] ? __lock_acquire+0x7d80/0x7d80 [ 186.613933][ T5785] ? lock_chain_count+0x20/0x20 [ 186.618895][ T5785] ? bis_list+0x290/0x290 [ 186.623266][ T5785] ? lockdep_hardirqs_on+0x98/0x150 [ 186.628471][ T5785] ? hci_send_to_monitor+0xd7/0x4f0 [ 186.633705][ T5785] hci_rx_work+0x43a/0xd60 [ 186.638153][ T5785] ? process_scheduled_works+0x975/0x1600 [ 186.643882][ T5785] process_scheduled_works+0xa60/0x1600 [ 186.649455][ T5785] ? worker_attach_to_pool+0x370/0x370 [ 186.654925][ T5785] ? assign_work+0x3cc/0x5d0 [ 186.659534][ T5785] worker_thread+0xa5e/0xfe0 [ 186.664145][ T5785] kthread+0x2fa/0x390 [ 186.668218][ T5785] ? pr_cont_work+0x550/0x550 [ 186.672899][ T5785] ? kthread_blkcg+0xd0/0xd0 [ 186.677490][ T5785] ret_from_fork+0x48/0x80 [ 186.681908][ T5785] ? kthread_blkcg+0xd0/0xd0 [ 186.686497][ T5785] ret_from_fork_asm+0x11/0x20 [ 186.691274][ T5785] [ 186.695274][ T5785] kobject: kobject_add_internal failed for hci0:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 186.709225][ T5785] Bluetooth: hci0: failed to register connection device [ 187.420454][ T7340] FAULT_INJECTION: forcing a failure. [ 187.420454][ T7340] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 187.465206][ T7340] CPU: 0 PID: 7340 Comm: syz.3.528 Not tainted syzkaller #0 [ 187.472602][ T7340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 187.482739][ T7340] Call Trace: [ 187.486354][ T7340] [ 187.489355][ T7340] dump_stack_lvl+0x18c/0x250 [ 187.494121][ T7340] ? show_regs_print_info+0x20/0x20 [ 187.499395][ T7340] ? load_image+0x420/0x420 [ 187.503994][ T7340] ? __might_fault+0xaa/0x120 [ 187.508741][ T7340] ? __lock_acquire+0x7d80/0x7d80 [ 187.513859][ T7340] should_fail_ex+0x394/0x4c0 [ 187.518624][ T7340] _copy_from_user+0x2f/0xe0 [ 187.523281][ T7340] ___sys_recvmsg+0x174/0x590 [ 187.528137][ T7340] ? __sys_recvmsg+0x2a0/0x2a0 [ 187.532988][ T7340] ? ksys_write+0x1d2/0x260 [ 187.537603][ T7340] ? __fget_files+0x3fc/0x460 [ 187.542412][ T7340] __x64_sys_recvmsg+0x21e/0x2f0 [ 187.547425][ T7340] ? ___sys_recvmsg+0x590/0x590 [ 187.552415][ T7340] ? lockdep_hardirqs_on+0x98/0x150 [ 187.557698][ T7340] do_syscall_64+0x55/0xb0 [ 187.562172][ T7340] ? clear_bhb_loop+0x40/0x90 [ 187.566906][ T7340] ? clear_bhb_loop+0x40/0x90 [ 187.571651][ T7340] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 187.577684][ T7340] RIP: 0033:0x7fa38d19e0d9 [ 187.582157][ T7340] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 187.601819][ T7340] RSP: 002b:00007fa38e06b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 187.610305][ T7340] RAX: ffffffffffffffda RBX: 00007fa38d426090 RCX: 00007fa38d19e0d9 [ 187.618347][ T7340] RDX: 0000000000010000 RSI: 0000200000005140 RDI: 0000000000000003 [ 187.626381][ T7340] RBP: 00007fa38e06b090 R08: 0000000000000000 R09: 0000000000000000 [ 187.634401][ T7340] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 187.642433][ T7340] R13: 00007fa38d426128 R14: 00007fa38d426090 R15: 00007fff843676b8 [ 187.650520][ T7340] [ 187.679732][ T7339] netlink: 'syz.2.527': attribute type 11 has an invalid length. [ 187.689166][ T7339] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.527'. [ 187.744023][ T7343] FAULT_INJECTION: forcing a failure. [ 187.744023][ T7343] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 187.762970][ T7343] CPU: 1 PID: 7343 Comm: syz.0.529 Not tainted syzkaller #0 [ 187.770321][ T7343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 187.780417][ T7343] Call Trace: [ 187.783746][ T7343] [ 187.786746][ T7343] dump_stack_lvl+0x18c/0x250 [ 187.791469][ T7343] ? show_regs_print_info+0x20/0x20 [ 187.796707][ T7343] ? load_image+0x420/0x420 [ 187.801256][ T7343] ? __might_fault+0xaa/0x120 [ 187.805965][ T7343] ? __lock_acquire+0x7d80/0x7d80 [ 187.811029][ T7343] should_fail_ex+0x394/0x4c0 [ 187.815754][ T7343] _copy_from_user+0x2f/0xe0 [ 187.820363][ T7343] ___sys_sendmsg+0x1c7/0x360 [ 187.825053][ T7343] ? get_pid_task+0x20/0x1e0 [ 187.829668][ T7343] ? __sys_sendmsg+0x2b0/0x2b0 [ 187.834442][ T7343] ? __lock_acquire+0x7d80/0x7d80 [ 187.839491][ T7343] __se_sys_sendmsg+0x1d0/0x2c0 [ 187.844357][ T7343] ? __x64_sys_sendmsg+0x80/0x80 [ 187.849326][ T7343] ? lockdep_hardirqs_on+0x98/0x150 [ 187.854545][ T7343] do_syscall_64+0x55/0xb0 [ 187.858970][ T7343] ? clear_bhb_loop+0x40/0x90 [ 187.863658][ T7343] ? clear_bhb_loop+0x40/0x90 [ 187.868346][ T7343] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 187.874248][ T7343] RIP: 0033:0x7fcf47d9e0d9 [ 187.878673][ T7343] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 187.898292][ T7343] RSP: 002b:00007fcf48c12028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 187.906743][ T7343] RAX: ffffffffffffffda RBX: 00007fcf48025fa0 RCX: 00007fcf47d9e0d9 [ 187.914723][ T7343] RDX: 0000000000000080 RSI: 0000200000001f40 RDI: 0000000000000003 [ 187.922703][ T7343] RBP: 00007fcf48c12090 R08: 0000000000000000 R09: 0000000000000000 [ 187.930686][ T7343] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 187.938665][ T7343] R13: 00007fcf48026038 R14: 00007fcf48025fa0 R15: 00007ffd0fe4c478 [ 187.946665][ T7343] [ 188.198549][ T51] Bluetooth: hci0: unexpected subevent 0x0a length: 150 > 30 [ 188.207183][ T51] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:0' [ 188.216757][ T51] CPU: 1 PID: 51 Comm: kworker/u5:0 Not tainted syzkaller #0 [ 188.224172][ T51] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 188.234262][ T51] Workqueue: hci0 hci_rx_work [ 188.238981][ T51] Call Trace: [ 188.242292][ T51] [ 188.245254][ T51] dump_stack_lvl+0x18c/0x250 [ 188.249975][ T51] ? show_regs_print_info+0x20/0x20 [ 188.255213][ T51] ? load_image+0x420/0x420 [ 188.259796][ T51] sysfs_create_dir_ns+0x26e/0x2a0 [ 188.264953][ T51] ? __lock_acquire+0x7d80/0x7d80 [ 188.270018][ T51] ? sysfs_warn_dup+0xa0/0xa0 [ 188.274713][ T51] ? do_raw_spin_unlock+0x121/0x230 [ 188.279934][ T51] kobject_add_internal+0x617/0xc90 [ 188.285172][ T51] kobject_add+0x164/0x240 [ 188.289616][ T51] ? kobject_init+0x1d0/0x1d0 [ 188.294317][ T51] ? get_device_parent+0x366/0x390 [ 188.299448][ T51] device_add+0x3fa/0xc40 [ 188.303821][ T51] hci_conn_add_sysfs+0xd5/0x1e0 [ 188.308795][ T51] le_conn_complete_evt+0xe9f/0x1480 [ 188.314117][ T51] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 188.320371][ T51] ? bt_info+0x180/0x180 [ 188.324624][ T51] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 188.330294][ T51] ? mutex_unlock+0x10/0x10 [ 188.334823][ T51] ? skb_pull_data+0xf0/0x1f0 [ 188.339534][ T51] hci_le_enh_conn_complete_evt+0x189/0x460 [ 188.345455][ T51] ? hci_le_remote_conn_param_req_evt+0xcb0/0xcb0 [ 188.351900][ T51] ? hci_remote_host_features_evt+0x150/0x150 [ 188.357988][ T51] hci_event_packet+0x7b4/0x1280 [ 188.362951][ T51] ? __lock_acquire+0x7d80/0x7d80 [ 188.367996][ T51] ? lock_chain_count+0x20/0x20 [ 188.372862][ T51] ? bis_list+0x290/0x290 [ 188.377215][ T51] ? lockdep_hardirqs_on+0x98/0x150 [ 188.382436][ T51] ? hci_send_to_monitor+0xd7/0x4f0 [ 188.387653][ T51] hci_rx_work+0x43a/0xd60 [ 188.392093][ T51] ? process_scheduled_works+0x975/0x1600 [ 188.397834][ T51] process_scheduled_works+0xa60/0x1600 [ 188.403425][ T51] ? worker_attach_to_pool+0x370/0x370 [ 188.408907][ T51] ? assign_work+0x3cc/0x5d0 [ 188.413524][ T51] worker_thread+0xa5e/0xfe0 [ 188.418196][ T51] kthread+0x2fa/0x390 [ 188.422282][ T51] ? pr_cont_work+0x550/0x550 [ 188.426976][ T51] ? kthread_blkcg+0xd0/0xd0 [ 188.431580][ T51] ret_from_fork+0x48/0x80 [ 188.436011][ T51] ? kthread_blkcg+0xd0/0xd0 [ 188.440617][ T51] ret_from_fork_asm+0x11/0x20 [ 188.445413][ T51] [ 188.449397][ T51] kobject: kobject_add_internal failed for hci0:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 188.463463][ T51] Bluetooth: hci0: failed to register connection device [ 188.735321][ T5785] Bluetooth: hci0: command tx timeout [ 189.015925][ T7358] netlink: 140 bytes leftover after parsing attributes in process `syz.1.536'. [ 189.028188][ T7358] netlink: 10 bytes leftover after parsing attributes in process `syz.1.536'. [ 189.064820][ T7358] bond0: (slave bond_slave_0): Releasing backup interface [ 189.133061][ T7358] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 189.421955][ T7372] FAULT_INJECTION: forcing a failure. [ 189.421955][ T7372] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 189.441651][ T7372] CPU: 0 PID: 7372 Comm: syz.2.540 Not tainted syzkaller #0 [ 189.449009][ T7372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 189.459091][ T7372] Call Trace: [ 189.462416][ T7372] [ 189.465388][ T7372] dump_stack_lvl+0x18c/0x250 [ 189.470124][ T7372] ? show_regs_print_info+0x20/0x20 [ 189.475362][ T7372] ? load_image+0x420/0x420 [ 189.479911][ T7372] ? __might_fault+0xaa/0x120 [ 189.484622][ T7372] ? __lock_acquire+0x7d80/0x7d80 [ 189.489704][ T7372] should_fail_ex+0x394/0x4c0 [ 189.494440][ T7372] _copy_from_user+0x2f/0xe0 [ 189.499078][ T7372] ___sys_sendmsg+0x1c7/0x360 [ 189.503789][ T7372] ? get_pid_task+0x20/0x1e0 [ 189.508430][ T7372] ? __sys_sendmsg+0x2b0/0x2b0 [ 189.513245][ T7372] ? __lock_acquire+0x7d80/0x7d80 [ 189.518333][ T7372] __se_sys_sendmsg+0x1d0/0x2c0 [ 189.523220][ T7372] ? __x64_sys_sendmsg+0x80/0x80 [ 189.528207][ T7372] ? lockdep_hardirqs_on+0x98/0x150 [ 189.533444][ T7372] do_syscall_64+0x55/0xb0 [ 189.537887][ T7372] ? clear_bhb_loop+0x40/0x90 [ 189.542605][ T7372] ? clear_bhb_loop+0x40/0x90 [ 189.547318][ T7372] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 189.553242][ T7372] RIP: 0033:0x7f35a8f9e0d9 [ 189.557687][ T7372] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 189.577335][ T7372] RSP: 002b:00007f35a9f0f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 189.585782][ T7372] RAX: ffffffffffffffda RBX: 00007f35a9225fa0 RCX: 00007f35a8f9e0d9 [ 189.593791][ T7372] RDX: 0000000000000080 RSI: 0000200000001f40 RDI: 0000000000000003 [ 189.601814][ T7372] RBP: 00007f35a9f0f090 R08: 0000000000000000 R09: 0000000000000000 [ 189.609833][ T7372] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 189.617845][ T7372] R13: 00007f35a9226038 R14: 00007f35a9225fa0 R15: 00007ffe2e6012e8 [ 189.625875][ T7372] [ 189.790234][ T7373] netlink: 149044 bytes leftover after parsing attributes in process `syz.0.539'. [ 189.831095][ T7379] netlink: 'syz.2.542': attribute type 7 has an invalid length. [ 189.986016][ T5785] Bluetooth: hci0: unexpected subevent 0x0a length: 150 > 30 [ 189.993956][ T5785] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:0' [ 190.003543][ T5785] CPU: 1 PID: 5785 Comm: kworker/u5:3 Not tainted syzkaller #0 [ 190.011132][ T5785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 190.016351][ T7385] FAULT_INJECTION: forcing a failure. [ 190.016351][ T7385] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 190.021211][ T5785] Workqueue: hci0 hci_rx_work [ 190.021247][ T5785] Call Trace: [ 190.021257][ T5785] [ 190.021266][ T5785] dump_stack_lvl+0x18c/0x250 [ 190.021296][ T5785] ? show_regs_print_info+0x20/0x20 [ 190.021328][ T5785] ? load_image+0x420/0x420 [ 190.021379][ T5785] sysfs_create_dir_ns+0x26e/0x2a0 [ 190.021402][ T5785] ? __lock_acquire+0x7d80/0x7d80 [ 190.021428][ T5785] ? sysfs_warn_dup+0xa0/0xa0 [ 190.021454][ T5785] ? do_raw_spin_unlock+0x121/0x230 [ 190.021487][ T5785] kobject_add_internal+0x617/0xc90 [ 190.021526][ T5785] kobject_add+0x164/0x240 [ 190.021564][ T5785] ? kobject_init+0x1d0/0x1d0 [ 190.021600][ T5785] ? get_device_parent+0x366/0x390 [ 190.021630][ T5785] device_add+0x3fa/0xc40 [ 190.021658][ T5785] hci_conn_add_sysfs+0xd5/0x1e0 [ 190.021690][ T5785] le_conn_complete_evt+0xe9f/0x1480 [ 190.021729][ T5785] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 190.021754][ T5785] ? bt_info+0x180/0x180 [ 190.021776][ T5785] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 190.021806][ T5785] ? mutex_unlock+0x10/0x10 [ 190.021830][ T5785] ? skb_pull_data+0xf0/0x1f0 [ 190.139324][ T5785] hci_le_enh_conn_complete_evt+0x189/0x460 [ 190.145245][ T5785] ? hci_le_remote_conn_param_req_evt+0xcb0/0xcb0 [ 190.151678][ T5785] ? hci_remote_host_features_evt+0x150/0x150 [ 190.157762][ T5785] hci_event_packet+0x7b4/0x1280 [ 190.162740][ T5785] ? __lock_acquire+0x7d80/0x7d80 [ 190.167780][ T5785] ? lock_chain_count+0x20/0x20 [ 190.172647][ T5785] ? bis_list+0x290/0x290 [ 190.176996][ T5785] ? lockdep_hardirqs_on+0x98/0x150 [ 190.182217][ T5785] ? hci_send_to_monitor+0xd7/0x4f0 [ 190.187434][ T5785] hci_rx_work+0x43a/0xd60 [ 190.191872][ T5785] ? process_scheduled_works+0x975/0x1600 [ 190.197619][ T5785] process_scheduled_works+0xa60/0x1600 [ 190.203210][ T5785] ? worker_attach_to_pool+0x370/0x370 [ 190.208776][ T5785] ? assign_work+0x3cc/0x5d0 [ 190.213387][ T5785] worker_thread+0xa5e/0xfe0 [ 190.218020][ T5785] kthread+0x2fa/0x390 [ 190.222098][ T5785] ? pr_cont_work+0x550/0x550 [ 190.226793][ T5785] ? kthread_blkcg+0xd0/0xd0 [ 190.231398][ T5785] ret_from_fork+0x48/0x80 [ 190.235843][ T5785] ? kthread_blkcg+0xd0/0xd0 [ 190.240458][ T5785] ret_from_fork_asm+0x11/0x20 [ 190.245269][ T5785] [ 190.251841][ T5785] kobject: kobject_add_internal failed for hci0:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 190.265943][ T5785] Bluetooth: hci0: failed to register connection device [ 190.297704][ T7385] CPU: 1 PID: 7385 Comm: syz.3.545 Not tainted syzkaller #0 [ 190.305087][ T7385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 190.315182][ T7385] Call Trace: [ 190.318504][ T7385] [ 190.321467][ T7385] dump_stack_lvl+0x18c/0x250 [ 190.326191][ T7385] ? show_regs_print_info+0x20/0x20 [ 190.331425][ T7385] ? load_image+0x420/0x420 [ 190.335976][ T7385] ? __might_fault+0xaa/0x120 [ 190.340693][ T7385] ? __lock_acquire+0x7d80/0x7d80 [ 190.345772][ T7385] should_fail_ex+0x394/0x4c0 [ 190.350508][ T7385] _copy_from_user+0x2f/0xe0 [ 190.355138][ T7385] ___sys_sendmsg+0x1c7/0x360 [ 190.359855][ T7385] ? __sys_sendmsg+0x2b0/0x2b0 [ 190.364656][ T7385] ? trace_call_bpf+0xc3/0x6c0 [ 190.369455][ T7385] __se_sys_sendmsg+0x1d0/0x2c0 [ 190.374317][ T7385] ? perf_trace_preemptirq_template+0x269/0x330 [ 190.380577][ T7385] ? __x64_sys_sendmsg+0x80/0x80 [ 190.385546][ T7385] ? lockdep_hardirqs_on+0x98/0x150 [ 190.390766][ T7385] do_syscall_64+0x55/0xb0 [ 190.395197][ T7385] ? clear_bhb_loop+0x40/0x90 [ 190.399888][ T7385] ? clear_bhb_loop+0x40/0x90 [ 190.404576][ T7385] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 190.410485][ T7385] RIP: 0033:0x7fa38d19e0d9 [ 190.414909][ T7385] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 190.434530][ T7385] RSP: 002b:00007fa38e08c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 190.442958][ T7385] RAX: ffffffffffffffda RBX: 00007fa38d425fa0 RCX: 00007fa38d19e0d9 [ 190.450941][ T7385] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 190.458920][ T7385] RBP: 00007fa38e08c090 R08: 0000000000000000 R09: 0000000000000000 [ 190.466900][ T7385] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 190.474897][ T7385] R13: 00007fa38d426038 R14: 00007fa38d425fa0 R15: 00007fff843676b8 [ 190.482897][ T7385] [ 190.640293][ T7389] netlink: 'syz.3.547': attribute type 7 has an invalid length. [ 190.818113][ T5785] Bluetooth: hci0: command tx timeout [ 190.901676][ T7403] FAULT_INJECTION: forcing a failure. [ 190.901676][ T7403] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 190.929910][ T7403] CPU: 1 PID: 7403 Comm: syz.0.554 Not tainted syzkaller #0 [ 190.937277][ T7403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 190.947359][ T7403] Call Trace: [ 190.950651][ T7403] [ 190.953600][ T7403] dump_stack_lvl+0x18c/0x250 [ 190.958301][ T7403] ? show_regs_print_info+0x20/0x20 [ 190.963508][ T7403] ? load_image+0x420/0x420 [ 190.968028][ T7403] ? __might_fault+0xaa/0x120 [ 190.972713][ T7403] ? __lock_acquire+0x7d80/0x7d80 [ 190.977751][ T7403] should_fail_ex+0x394/0x4c0 [ 190.982473][ T7403] _copy_from_user+0x2f/0xe0 [ 190.987075][ T7403] ___sys_recvmsg+0x174/0x590 [ 190.991772][ T7403] ? __sys_recvmsg+0x2a0/0x2a0 [ 190.996556][ T7403] ? ksys_write+0x1d2/0x260 [ 191.001082][ T7403] ? __fget_files+0x3fc/0x460 [ 191.005787][ T7403] __x64_sys_recvmsg+0x21e/0x2f0 [ 191.010736][ T7403] ? ___sys_recvmsg+0x590/0x590 [ 191.015626][ T7403] ? lockdep_hardirqs_on+0x98/0x150 [ 191.020840][ T7403] do_syscall_64+0x55/0xb0 [ 191.025268][ T7403] ? clear_bhb_loop+0x40/0x90 [ 191.029979][ T7403] ? clear_bhb_loop+0x40/0x90 [ 191.034664][ T7403] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 191.040565][ T7403] RIP: 0033:0x7fcf47d9e0d9 [ 191.045001][ T7403] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 191.064623][ T7403] RSP: 002b:00007fcf48c12028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 191.073047][ T7403] RAX: ffffffffffffffda RBX: 00007fcf48025fa0 RCX: 00007fcf47d9e0d9 [ 191.081040][ T7403] RDX: 0000000000010000 RSI: 0000200000005140 RDI: 0000000000000003 [ 191.089020][ T7403] RBP: 00007fcf48c12090 R08: 0000000000000000 R09: 0000000000000000 [ 191.097001][ T7403] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 191.104979][ T7403] R13: 00007fcf48026038 R14: 00007fcf48025fa0 R15: 00007ffd0fe4c478 [ 191.112973][ T7403] [ 191.136513][ T7406] FAULT_INJECTION: forcing a failure. [ 191.136513][ T7406] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 191.150597][ T7406] CPU: 0 PID: 7406 Comm: syz.2.553 Not tainted syzkaller #0 [ 191.157932][ T7406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 191.168024][ T7406] Call Trace: [ 191.171336][ T7406] [ 191.174309][ T7406] dump_stack_lvl+0x18c/0x250 [ 191.179033][ T7406] ? show_regs_print_info+0x20/0x20 [ 191.184273][ T7406] ? load_image+0x420/0x420 [ 191.188822][ T7406] ? __might_fault+0xaa/0x120 [ 191.193542][ T7406] ? __lock_acquire+0x7d80/0x7d80 [ 191.198616][ T7406] should_fail_ex+0x394/0x4c0 [ 191.203349][ T7406] _copy_from_user+0x2f/0xe0 [ 191.208001][ T7406] __sys_bpf+0x23e/0x890 [ 191.212291][ T7406] ? bpf_link_show_fdinfo+0x390/0x390 [ 191.217718][ T7406] ? lock_chain_count+0x20/0x20 [ 191.222620][ T7406] __x64_sys_bpf+0x7c/0x90 [ 191.227081][ T7406] do_syscall_64+0x55/0xb0 [ 191.231534][ T7406] ? clear_bhb_loop+0x40/0x90 [ 191.236271][ T7406] ? clear_bhb_loop+0x40/0x90 [ 191.240988][ T7406] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 191.246916][ T7406] RIP: 0033:0x7f35a8f9e0d9 [ 191.251367][ T7406] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 191.271025][ T7406] RSP: 002b:00007f35a9eee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 191.279479][ T7406] RAX: ffffffffffffffda RBX: 00007f35a9226090 RCX: 00007f35a8f9e0d9 [ 191.287480][ T7406] RDX: 0000000000000020 RSI: 0000200000000380 RDI: 0000000000000004 [ 191.295479][ T7406] RBP: 00007f35a9eee090 R08: 0000000000000000 R09: 0000000000000000 [ 191.303481][ T7406] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 191.311490][ T7406] R13: 00007f35a9226128 R14: 00007f35a9226090 R15: 00007ffe2e6012e8 [ 191.319509][ T7406] [ 192.701398][ T5785] Bluetooth: hci0: unexpected subevent 0x0a length: 150 > 30 [ 192.709463][ T5785] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:0' [ 192.719263][ T5785] CPU: 1 PID: 5785 Comm: kworker/u5:3 Not tainted syzkaller #0 [ 192.726867][ T5785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 192.736938][ T5785] Workqueue: hci0 hci_rx_work [ 192.741638][ T5785] Call Trace: [ 192.744926][ T5785] [ 192.747874][ T5785] dump_stack_lvl+0x18c/0x250 [ 192.752572][ T5785] ? show_regs_print_info+0x20/0x20 [ 192.757783][ T5785] ? load_image+0x420/0x420 [ 192.762343][ T5785] sysfs_create_dir_ns+0x26e/0x2a0 [ 192.767468][ T5785] ? __lock_acquire+0x7d80/0x7d80 [ 192.772508][ T5785] ? sysfs_warn_dup+0xa0/0xa0 [ 192.777206][ T5785] ? do_raw_spin_unlock+0x121/0x230 [ 192.782425][ T5785] kobject_add_internal+0x617/0xc90 [ 192.787649][ T5785] kobject_add+0x164/0x240 [ 192.792086][ T5785] ? kobject_init+0x1d0/0x1d0 [ 192.796786][ T5785] ? get_device_parent+0x366/0x390 [ 192.801941][ T5785] device_add+0x3fa/0xc40 [ 192.806300][ T5785] hci_conn_add_sysfs+0xd5/0x1e0 [ 192.811373][ T5785] le_conn_complete_evt+0xe9f/0x1480 [ 192.816687][ T5785] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 192.822941][ T5785] ? bt_info+0x180/0x180 [ 192.827197][ T5785] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 192.832848][ T5785] ? mutex_unlock+0x10/0x10 [ 192.837367][ T5785] ? skb_pull_data+0xf0/0x1f0 [ 192.842062][ T5785] hci_le_enh_conn_complete_evt+0x189/0x460 [ 192.847971][ T5785] ? hci_le_remote_conn_param_req_evt+0xcb0/0xcb0 [ 192.854400][ T5785] ? hci_remote_host_features_evt+0x150/0x150 [ 192.860482][ T5785] hci_event_packet+0x7b4/0x1280 [ 192.865445][ T5785] ? __lock_acquire+0x7d80/0x7d80 [ 192.870483][ T5785] ? lock_chain_count+0x20/0x20 [ 192.875351][ T5785] ? bis_list+0x290/0x290 [ 192.879707][ T5785] ? lockdep_hardirqs_on+0x98/0x150 [ 192.884939][ T5785] ? hci_send_to_monitor+0xd7/0x4f0 [ 192.890167][ T5785] hci_rx_work+0x43a/0xd60 [ 192.894612][ T5785] ? process_scheduled_works+0x975/0x1600 [ 192.900352][ T5785] process_scheduled_works+0xa60/0x1600 [ 192.905944][ T5785] ? worker_attach_to_pool+0x370/0x370 [ 192.911425][ T5785] ? assign_work+0x3cc/0x5d0 [ 192.916039][ T5785] worker_thread+0xa5e/0xfe0 [ 192.920672][ T5785] kthread+0x2fa/0x390 [ 192.924752][ T5785] ? pr_cont_work+0x550/0x550 [ 192.929455][ T5785] ? kthread_blkcg+0xd0/0xd0 [ 192.934055][ T5785] ret_from_fork+0x48/0x80 [ 192.938486][ T5785] ? kthread_blkcg+0xd0/0xd0 [ 192.943092][ T5785] ret_from_fork_asm+0x11/0x20 [ 192.947887][ T5785] [ 192.954737][ T5785] kobject: kobject_add_internal failed for hci0:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 192.968850][ T5785] Bluetooth: hci0: failed to register connection device [ 192.978877][ T5785] Bluetooth: hci0: command tx timeout [ 193.310329][ T7443] FAULT_INJECTION: forcing a failure. [ 193.310329][ T7443] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 193.323652][ T7443] CPU: 1 PID: 7443 Comm: syz.2.565 Not tainted syzkaller #0 [ 193.330987][ T7443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 193.341093][ T7443] Call Trace: [ 193.344391][ T7443] [ 193.347337][ T7443] dump_stack_lvl+0x18c/0x250 [ 193.352037][ T7443] ? show_regs_print_info+0x20/0x20 [ 193.357254][ T7443] ? load_image+0x420/0x420 [ 193.361783][ T7443] ? __might_fault+0xaa/0x120 [ 193.366475][ T7443] ? __lock_acquire+0x7d80/0x7d80 [ 193.371602][ T7443] should_fail_ex+0x394/0x4c0 [ 193.376299][ T7443] _copy_from_user+0x2f/0xe0 [ 193.380909][ T7443] ___sys_recvmsg+0x174/0x590 [ 193.385604][ T7443] ? __sys_recvmsg+0x2a0/0x2a0 [ 193.390406][ T7443] ? ksys_write+0x1d2/0x260 [ 193.394961][ T7443] ? __fget_files+0x3fc/0x460 [ 193.399685][ T7443] __x64_sys_recvmsg+0x21e/0x2f0 [ 193.404638][ T7443] ? ___sys_recvmsg+0x590/0x590 [ 193.409515][ T7443] ? lockdep_hardirqs_on+0x98/0x150 [ 193.414731][ T7443] do_syscall_64+0x55/0xb0 [ 193.419157][ T7443] ? clear_bhb_loop+0x40/0x90 [ 193.423856][ T7443] ? clear_bhb_loop+0x40/0x90 [ 193.428544][ T7443] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 193.434444][ T7443] RIP: 0033:0x7f35a8f9e0d9 [ 193.438878][ T7443] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 193.458500][ T7443] RSP: 002b:00007f35a9f0f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 193.466929][ T7443] RAX: ffffffffffffffda RBX: 00007f35a9225fa0 RCX: 00007f35a8f9e0d9 [ 193.474908][ T7443] RDX: 0000000000010000 RSI: 0000200000005140 RDI: 0000000000000003 [ 193.482890][ T7443] RBP: 00007f35a9f0f090 R08: 0000000000000000 R09: 0000000000000000 [ 193.490890][ T7443] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 193.498870][ T7443] R13: 00007f35a9226038 R14: 00007f35a9225fa0 R15: 00007ffe2e6012e8 [ 193.506962][ T7443] [ 194.420921][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.427357][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.485651][ T7427] netlink: 140 bytes leftover after parsing attributes in process `syz.0.560'. [ 194.494686][ T7427] netlink: 10 bytes leftover after parsing attributes in process `syz.0.560'. [ 194.506362][ T7427] bond0: (slave bond_slave_0): Releasing backup interface [ 194.517373][ T7427] bond_slave_0: left promiscuous mode [ 194.523010][ T7427] bond_slave_0: left allmulticast mode [ 194.531081][ T7427] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 194.780469][ T7459] FAULT_INJECTION: forcing a failure. [ 194.780469][ T7459] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 194.795717][ T5785] Bluetooth: hci3: unexpected subevent 0x0a length: 150 > 30 [ 194.803412][ T5785] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 194.812837][ T7459] CPU: 0 PID: 7459 Comm: syz.3.570 Not tainted syzkaller #0 [ 194.820169][ T7459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 194.830272][ T7459] Call Trace: [ 194.833591][ T7459] [ 194.836563][ T7459] dump_stack_lvl+0x18c/0x250 [ 194.841295][ T7459] ? show_regs_print_info+0x20/0x20 [ 194.846536][ T7459] ? load_image+0x420/0x420 [ 194.851089][ T7459] ? __might_fault+0xaa/0x120 [ 194.855805][ T7459] ? __lock_acquire+0x7d80/0x7d80 [ 194.860882][ T7459] should_fail_ex+0x394/0x4c0 [ 194.865609][ T7459] _copy_from_user+0x2f/0xe0 [ 194.870219][ T7459] ___sys_sendmsg+0x1c7/0x360 [ 194.874922][ T7459] ? __sys_sendmsg+0x2b0/0x2b0 [ 194.879733][ T7459] ? __lock_acquire+0x7d80/0x7d80 [ 194.884808][ T7459] __se_sys_sendmsg+0x1d0/0x2c0 [ 194.889682][ T7459] ? __x64_sys_sendmsg+0x80/0x80 [ 194.895452][ T7459] ? lockdep_hardirqs_on+0x98/0x150 [ 194.900719][ T7459] do_syscall_64+0x55/0xb0 [ 194.905169][ T7459] ? clear_bhb_loop+0x40/0x90 [ 194.909886][ T7459] ? clear_bhb_loop+0x40/0x90 [ 194.914591][ T7459] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 194.920510][ T7459] RIP: 0033:0x7fa38d19e0d9 [ 194.924951][ T7459] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 194.944586][ T7459] RSP: 002b:00007fa38e06b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 194.953019][ T7459] RAX: ffffffffffffffda RBX: 00007fa38d426090 RCX: 00007fa38d19e0d9 [ 194.961010][ T7459] RDX: 00000000000052cc RSI: 0000200000000040 RDI: 0000000000000003 [ 194.968997][ T7459] RBP: 00007fa38e06b090 R08: 0000000000000000 R09: 0000000000000000 [ 194.976986][ T7459] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 194.984978][ T7459] R13: 00007fa38d426128 R14: 00007fa38d426090 R15: 00007fff843676b8 [ 194.992994][ T7459] [ 194.996026][ T5785] CPU: 1 PID: 5785 Comm: kworker/u5:3 Not tainted syzkaller #0 [ 195.003623][ T5785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 195.013692][ T5785] Workqueue: hci3 hci_rx_work [ 195.018399][ T5785] Call Trace: [ 195.021687][ T5785] [ 195.024627][ T5785] dump_stack_lvl+0x18c/0x250 [ 195.029321][ T5785] ? show_regs_print_info+0x20/0x20 [ 195.034538][ T5785] ? load_image+0x420/0x420 [ 195.039076][ T5785] sysfs_create_dir_ns+0x26e/0x2a0 [ 195.044203][ T5785] ? __lock_acquire+0x7d80/0x7d80 [ 195.049249][ T5785] ? sysfs_warn_dup+0xa0/0xa0 [ 195.053946][ T5785] ? do_raw_spin_unlock+0x121/0x230 [ 195.059166][ T5785] kobject_add_internal+0x617/0xc90 [ 195.064388][ T5785] kobject_add+0x164/0x240 [ 195.068825][ T5785] ? kobject_init+0x1d0/0x1d0 [ 195.073527][ T5785] ? get_device_parent+0x366/0x390 [ 195.078663][ T5785] device_add+0x3fa/0xc40 [ 195.083013][ T5785] hci_conn_add_sysfs+0xd5/0x1e0 [ 195.087976][ T5785] le_conn_complete_evt+0xe9f/0x1480 [ 195.093282][ T5785] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 195.099542][ T5785] ? bt_info+0x180/0x180 [ 195.103803][ T5785] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 195.109460][ T5785] ? mutex_unlock+0x10/0x10 [ 195.113980][ T5785] ? skb_pull_data+0xf0/0x1f0 [ 195.118688][ T5785] hci_le_enh_conn_complete_evt+0x189/0x460 [ 195.124601][ T5785] ? hci_le_remote_conn_param_req_evt+0xcb0/0xcb0 [ 195.131031][ T5785] ? hci_remote_host_features_evt+0x150/0x150 [ 195.137114][ T5785] hci_event_packet+0x7b4/0x1280 [ 195.142071][ T5785] ? __lock_acquire+0x7d80/0x7d80 [ 195.147111][ T5785] ? lock_chain_count+0x20/0x20 [ 195.151973][ T5785] ? bis_list+0x290/0x290 [ 195.156322][ T5785] ? lockdep_hardirqs_on+0x98/0x150 [ 195.161537][ T5785] ? hci_send_to_monitor+0xd7/0x4f0 [ 195.166761][ T5785] hci_rx_work+0x43a/0xd60 [ 195.171195][ T5785] ? process_scheduled_works+0x975/0x1600 [ 195.176937][ T5785] process_scheduled_works+0xa60/0x1600 [ 195.182530][ T5785] ? worker_attach_to_pool+0x370/0x370 [ 195.188009][ T5785] ? assign_work+0x3cc/0x5d0 [ 195.192622][ T5785] worker_thread+0xa5e/0xfe0 [ 195.197264][ T5785] kthread+0x2fa/0x390 [ 195.201352][ T5785] ? pr_cont_work+0x550/0x550 [ 195.206044][ T5785] ? kthread_blkcg+0xd0/0xd0 [ 195.210658][ T5785] ret_from_fork+0x48/0x80 [ 195.215088][ T5785] ? kthread_blkcg+0xd0/0xd0 [ 195.219702][ T5785] ret_from_fork_asm+0x11/0x20 [ 195.224519][ T5785] [ 195.230174][ T51] Bluetooth: hci0: command tx timeout [ 195.246690][ T5785] kobject: kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 195.261471][ T5785] Bluetooth: hci3: failed to register connection device [ 195.819093][ T7475] FAULT_INJECTION: forcing a failure. [ 195.819093][ T7475] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 195.839752][ T7475] CPU: 1 PID: 7475 Comm: syz.0.577 Not tainted syzkaller #0 [ 195.847112][ T7475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 195.852229][ T7477] netlink: 60 bytes leftover after parsing attributes in process `syz.1.578'. [ 195.857183][ T7475] Call Trace: [ 195.857196][ T7475] [ 195.857205][ T7475] dump_stack_lvl+0x18c/0x250 [ 195.857237][ T7475] ? show_regs_print_info+0x20/0x20 [ 195.857259][ T7475] ? load_image+0x420/0x420 [ 195.857286][ T7475] ? __might_fault+0xaa/0x120 [ 195.857307][ T7475] ? __lock_acquire+0x7d80/0x7d80 [ 195.866446][ T7477] netlink: 60 bytes leftover after parsing attributes in process `syz.1.578'. [ 195.869454][ T7475] should_fail_ex+0x394/0x4c0 [ 195.869491][ T7475] _copy_from_user+0x2f/0xe0 [ 195.876256][ T7477] netlink: 60 bytes leftover after parsing attributes in process `syz.1.578'. [ 195.877092][ T7475] ___sys_recvmsg+0x174/0x590 [ 195.877129][ T7475] ? __sys_recvmsg+0x2a0/0x2a0 [ 195.933093][ T7475] ? ksys_write+0x1d2/0x260 [ 195.937665][ T7475] ? __fget_files+0x3fc/0x460 [ 195.942426][ T7475] __x64_sys_recvmsg+0x21e/0x2f0 [ 195.947421][ T7475] ? ___sys_recvmsg+0x590/0x590 [ 195.952332][ T7475] ? lockdep_hardirqs_on+0x98/0x150 [ 195.957585][ T7475] do_syscall_64+0x55/0xb0 [ 195.962046][ T7475] ? clear_bhb_loop+0x40/0x90 [ 195.966766][ T7475] ? clear_bhb_loop+0x40/0x90 [ 195.971489][ T7475] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 195.977427][ T7475] RIP: 0033:0x7fcf47d9e0d9 [ 195.981875][ T7475] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 196.001529][ T7475] RSP: 002b:00007fcf48c12028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 196.009983][ T7475] RAX: ffffffffffffffda RBX: 00007fcf48025fa0 RCX: 00007fcf47d9e0d9 [ 196.017988][ T7475] RDX: 0000000000010000 RSI: 0000200000005140 RDI: 0000000000000003 [ 196.025990][ T7475] RBP: 00007fcf48c12090 R08: 0000000000000000 R09: 0000000000000000 [ 196.033988][ T7475] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 196.041987][ T7475] R13: 00007fcf48026038 R14: 00007fcf48025fa0 R15: 00007ffd0fe4c478 [ 196.050007][ T7475] [ 196.387678][ T5785] Bluetooth: hci0: unexpected subevent 0x0a length: 150 > 30 [ 196.396487][ T5785] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:0' [ 196.406362][ T5785] CPU: 1 PID: 5785 Comm: kworker/u5:3 Not tainted syzkaller #0 [ 196.413959][ T5785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 196.424054][ T5785] Workqueue: hci0 hci_rx_work [ 196.428797][ T5785] Call Trace: [ 196.432123][ T5785] [ 196.435088][ T5785] dump_stack_lvl+0x18c/0x250 [ 196.439819][ T5785] ? show_regs_print_info+0x20/0x20 [ 196.445063][ T5785] ? load_image+0x420/0x420 [ 196.449614][ T5785] sysfs_create_dir_ns+0x26e/0x2a0 [ 196.454749][ T5785] ? __lock_acquire+0x7d80/0x7d80 [ 196.459801][ T5785] ? sysfs_warn_dup+0xa0/0xa0 [ 196.464506][ T5785] ? do_raw_spin_unlock+0x121/0x230 [ 196.469733][ T5785] kobject_add_internal+0x617/0xc90 [ 196.474976][ T5785] kobject_add+0x164/0x240 [ 196.479426][ T5785] ? kobject_init+0x1d0/0x1d0 [ 196.484133][ T5785] ? get_device_parent+0x366/0x390 [ 196.489273][ T5785] device_add+0x3fa/0xc40 [ 196.493630][ T5785] hci_conn_add_sysfs+0xd5/0x1e0 [ 196.498596][ T5785] le_conn_complete_evt+0xe9f/0x1480 [ 196.503921][ T5785] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 196.510222][ T5785] ? bt_info+0x180/0x180 [ 196.514512][ T5785] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 196.520368][ T5785] ? mutex_unlock+0x10/0x10 [ 196.524898][ T5785] ? skb_pull_data+0xf0/0x1f0 [ 196.529613][ T5785] hci_le_enh_conn_complete_evt+0x189/0x460 [ 196.535534][ T5785] ? hci_le_remote_conn_param_req_evt+0xcb0/0xcb0 [ 196.541974][ T5785] ? hci_remote_host_features_evt+0x150/0x150 [ 196.548065][ T5785] hci_event_packet+0x7b4/0x1280 [ 196.553030][ T5785] ? __lock_acquire+0x7d80/0x7d80 [ 196.558106][ T5785] ? lock_chain_count+0x20/0x20 [ 196.562983][ T5785] ? bis_list+0x290/0x290 [ 196.567339][ T5785] ? lockdep_hardirqs_on+0x98/0x150 [ 196.572561][ T5785] ? hci_send_to_monitor+0xd7/0x4f0 [ 196.577787][ T5785] hci_rx_work+0x43a/0xd60 [ 196.582242][ T5785] ? process_scheduled_works+0x975/0x1600 [ 196.587989][ T5785] process_scheduled_works+0xa60/0x1600 [ 196.593685][ T5785] ? worker_attach_to_pool+0x370/0x370 [ 196.599174][ T5785] ? assign_work+0x3cc/0x5d0 [ 196.603810][ T5785] worker_thread+0xa5e/0xfe0 [ 196.608465][ T5785] kthread+0x2fa/0x390 [ 196.612552][ T5785] ? pr_cont_work+0x550/0x550 [ 196.617254][ T5785] ? kthread_blkcg+0xd0/0xd0 [ 196.621876][ T5785] ret_from_fork+0x48/0x80 [ 196.626312][ T5785] ? kthread_blkcg+0xd0/0xd0 [ 196.630921][ T5785] ret_from_fork_asm+0x11/0x20 [ 196.635740][ T5785] [ 196.646511][ T5785] kobject: kobject_add_internal failed for hci0:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 196.661110][ T5785] Bluetooth: hci0: failed to register connection device [ 196.817231][ T7491] netlink: 60 bytes leftover after parsing attributes in process `syz.3.583'. [ 196.826539][ T7491] netlink: 60 bytes leftover after parsing attributes in process `syz.3.583'. [ 196.838809][ T7491] netlink: 60 bytes leftover after parsing attributes in process `syz.3.583'. [ 196.930236][ T7493] netlink: 60 bytes leftover after parsing attributes in process `syz.1.584'. [ 196.940327][ T7493] netlink: 60 bytes leftover after parsing attributes in process `syz.1.584'. [ 196.956591][ T7493] FAULT_INJECTION: forcing a failure. [ 196.956591][ T7493] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 196.987771][ T7493] CPU: 0 PID: 7493 Comm: syz.1.584 Not tainted syzkaller #0 [ 196.995138][ T7493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 197.005239][ T7493] Call Trace: [ 197.008546][ T7493] [ 197.011494][ T7493] dump_stack_lvl+0x18c/0x250 [ 197.016195][ T7493] ? show_regs_print_info+0x20/0x20 [ 197.021408][ T7493] ? load_image+0x420/0x420 [ 197.025930][ T7493] ? __might_fault+0xaa/0x120 [ 197.030615][ T7493] ? __lock_acquire+0x7d80/0x7d80 [ 197.035655][ T7493] should_fail_ex+0x394/0x4c0 [ 197.040352][ T7493] _copy_from_user+0x2f/0xe0 [ 197.044960][ T7493] ___sys_recvmsg+0x174/0x590 [ 197.049664][ T7493] ? __sys_recvmsg+0x2a0/0x2a0 [ 197.054447][ T7493] ? ksys_write+0x1d2/0x260 [ 197.058974][ T7493] ? __fget_files+0x3fc/0x460 [ 197.063676][ T7493] __x64_sys_recvmsg+0x21e/0x2f0 [ 197.068625][ T7493] ? ___sys_recvmsg+0x590/0x590 [ 197.073497][ T7493] ? lockdep_hardirqs_on+0x98/0x150 [ 197.078710][ T7493] do_syscall_64+0x55/0xb0 [ 197.083134][ T7493] ? clear_bhb_loop+0x40/0x90 [ 197.087823][ T7493] ? clear_bhb_loop+0x40/0x90 [ 197.092509][ T7493] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 197.098419][ T7493] RIP: 0033:0x7fecb899e0d9 [ 197.102849][ T7493] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 197.122464][ T7493] RSP: 002b:00007fecb9923028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 197.130892][ T7493] RAX: ffffffffffffffda RBX: 00007fecb8c25fa0 RCX: 00007fecb899e0d9 [ 197.138872][ T7493] RDX: 0000000000000022 RSI: 0000200000000300 RDI: 0000000000000003 [ 197.146850][ T7493] RBP: 00007fecb9923090 R08: 0000000000000000 R09: 0000000000000000 [ 197.154827][ T7493] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 197.162808][ T7493] R13: 00007fecb8c26038 R14: 00007fecb8c25fa0 R15: 00007ffd7e9ebf08 [ 197.170802][ T7493] [ 197.305080][ T5785] Bluetooth: hci3: command tx timeout [ 197.453601][ T7507] FAULT_INJECTION: forcing a failure. [ 197.453601][ T7507] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 197.489708][ T7507] CPU: 0 PID: 7507 Comm: syz.3.589 Not tainted syzkaller #0 [ 197.497096][ T7507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 197.507209][ T7507] Call Trace: [ 197.510529][ T7507] [ 197.513497][ T7507] dump_stack_lvl+0x18c/0x250 [ 197.518219][ T7507] ? show_regs_print_info+0x20/0x20 [ 197.523467][ T7507] ? load_image+0x420/0x420 [ 197.528027][ T7507] ? __might_fault+0xaa/0x120 [ 197.532746][ T7507] ? __lock_acquire+0x7d80/0x7d80 [ 197.537822][ T7507] should_fail_ex+0x394/0x4c0 [ 197.542554][ T7507] _copy_from_user+0x2f/0xe0 [ 197.547192][ T7507] ___sys_recvmsg+0x174/0x590 [ 197.551923][ T7507] ? __sys_recvmsg+0x2a0/0x2a0 [ 197.556735][ T7507] ? ksys_write+0x1d2/0x260 [ 197.561289][ T7507] ? __fget_files+0x3fc/0x460 [ 197.566040][ T7507] __x64_sys_recvmsg+0x21e/0x2f0 [ 197.571025][ T7507] ? ___sys_recvmsg+0x590/0x590 [ 197.575928][ T7507] ? lockdep_hardirqs_on+0x98/0x150 [ 197.581168][ T7507] do_syscall_64+0x55/0xb0 [ 197.585618][ T7507] ? clear_bhb_loop+0x40/0x90 [ 197.590339][ T7507] ? clear_bhb_loop+0x40/0x90 [ 197.595056][ T7507] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 197.600983][ T7507] RIP: 0033:0x7fa38d19e0d9 [ 197.605436][ T7507] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 197.625088][ T7507] RSP: 002b:00007fa38e08c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 197.633554][ T7507] RAX: ffffffffffffffda RBX: 00007fa38d425fa0 RCX: 00007fa38d19e0d9 [ 197.641565][ T7507] RDX: 0000000000000080 RSI: 0000200000000900 RDI: 0000000000000003 [ 197.649575][ T7507] RBP: 00007fa38e08c090 R08: 0000000000000000 R09: 0000000000000000 [ 197.657584][ T7507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 197.665632][ T7507] R13: 00007fa38d426038 R14: 00007fa38d425fa0 R15: 00007fff843676b8 [ 197.673666][ T7507] [ 198.017539][ T7525] FAULT_INJECTION: forcing a failure. [ 198.017539][ T7525] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 198.031341][ T5785] Bluetooth: hci2: unexpected subevent 0x0a length: 150 > 30 [ 198.039502][ T5785] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:0' [ 198.049382][ T5785] CPU: 1 PID: 5785 Comm: kworker/u5:3 Not tainted syzkaller #0 [ 198.056981][ T5785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 198.067073][ T5785] Workqueue: hci2 hci_rx_work [ 198.071784][ T5785] Call Trace: [ 198.075084][ T5785] [ 198.078027][ T5785] dump_stack_lvl+0x18c/0x250 [ 198.082725][ T5785] ? show_regs_print_info+0x20/0x20 [ 198.087937][ T5785] ? load_image+0x420/0x420 [ 198.092475][ T5785] sysfs_create_dir_ns+0x26e/0x2a0 [ 198.097602][ T5785] ? __lock_acquire+0x7d80/0x7d80 [ 198.102645][ T5785] ? sysfs_warn_dup+0xa0/0xa0 [ 198.107338][ T5785] ? do_raw_spin_unlock+0x121/0x230 [ 198.112556][ T5785] kobject_add_internal+0x617/0xc90 [ 198.117785][ T5785] kobject_add+0x164/0x240 [ 198.122234][ T5785] ? kobject_init+0x1d0/0x1d0 [ 198.126937][ T5785] ? get_device_parent+0x366/0x390 [ 198.132065][ T5785] device_add+0x3fa/0xc40 [ 198.136425][ T5785] hci_conn_add_sysfs+0xd5/0x1e0 [ 198.141381][ T5785] le_conn_complete_evt+0xe9f/0x1480 [ 198.146690][ T5785] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 198.152953][ T5785] ? bt_info+0x180/0x180 [ 198.157210][ T5785] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 198.162865][ T5785] ? mutex_unlock+0x10/0x10 [ 198.167385][ T5785] ? skb_pull_data+0xf0/0x1f0 [ 198.172104][ T5785] hci_le_enh_conn_complete_evt+0x189/0x460 [ 198.178045][ T5785] ? hci_le_remote_conn_param_req_evt+0xcb0/0xcb0 [ 198.184488][ T5785] ? hci_remote_host_features_evt+0x150/0x150 [ 198.190579][ T5785] hci_event_packet+0x7b4/0x1280 [ 198.195547][ T5785] ? __lock_acquire+0x7d80/0x7d80 [ 198.200598][ T5785] ? lock_chain_count+0x20/0x20 [ 198.205473][ T5785] ? bis_list+0x290/0x290 [ 198.209911][ T5785] ? lockdep_hardirqs_on+0x98/0x150 [ 198.215129][ T5785] ? hci_send_to_monitor+0xd7/0x4f0 [ 198.220345][ T5785] hci_rx_work+0x43a/0xd60 [ 198.224781][ T5785] ? process_scheduled_works+0x975/0x1600 [ 198.230518][ T5785] process_scheduled_works+0xa60/0x1600 [ 198.236151][ T5785] ? worker_attach_to_pool+0x370/0x370 [ 198.241652][ T5785] ? assign_work+0x3cc/0x5d0 [ 198.246282][ T5785] worker_thread+0xa5e/0xfe0 [ 198.250928][ T5785] kthread+0x2fa/0x390 [ 198.255021][ T5785] ? pr_cont_work+0x550/0x550 [ 198.259734][ T5785] ? kthread_blkcg+0xd0/0xd0 [ 198.264340][ T5785] ret_from_fork+0x48/0x80 [ 198.268775][ T5785] ? kthread_blkcg+0xd0/0xd0 [ 198.273382][ T5785] ret_from_fork_asm+0x11/0x20 [ 198.278181][ T5785] [ 198.282342][ T5785] kobject: kobject_add_internal failed for hci2:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 198.286996][ T7525] CPU: 0 PID: 7525 Comm: syz.1.596 Not tainted syzkaller #0 [ 198.296428][ T5785] Bluetooth: hci2: failed to register connection device [ 198.303482][ T7525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 198.320522][ T7525] Call Trace: [ 198.323815][ T7525] [ 198.326759][ T7525] dump_stack_lvl+0x18c/0x250 [ 198.331458][ T7525] ? show_regs_print_info+0x20/0x20 [ 198.336672][ T7525] ? load_image+0x420/0x420 [ 198.341203][ T7525] ? __might_fault+0xaa/0x120 [ 198.345893][ T7525] ? __lock_acquire+0x7d80/0x7d80 [ 198.350934][ T7525] should_fail_ex+0x394/0x4c0 [ 198.355634][ T7525] _copy_from_user+0x2f/0xe0 [ 198.360239][ T7525] ___sys_recvmsg+0x174/0x590 [ 198.364936][ T7525] ? __sys_recvmsg+0x2a0/0x2a0 [ 198.369723][ T7525] ? ksys_write+0x1d2/0x260 [ 198.374278][ T7525] ? __fget_files+0x3fc/0x460 [ 198.378988][ T7525] __x64_sys_recvmsg+0x21e/0x2f0 [ 198.383938][ T7525] ? ___sys_recvmsg+0x590/0x590 [ 198.388816][ T7525] ? lockdep_hardirqs_on+0x98/0x150 [ 198.394035][ T7525] do_syscall_64+0x55/0xb0 [ 198.398466][ T7525] ? clear_bhb_loop+0x40/0x90 [ 198.403154][ T7525] ? clear_bhb_loop+0x40/0x90 [ 198.407855][ T7525] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 198.413759][ T7525] RIP: 0033:0x7fecb899e0d9 [ 198.418190][ T7525] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 198.437805][ T7525] RSP: 002b:00007fecb9923028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 198.446233][ T7525] RAX: ffffffffffffffda RBX: 00007fecb8c25fa0 RCX: 00007fecb899e0d9 [ 198.454213][ T7525] RDX: 0000000000000080 RSI: 0000200000000900 RDI: 0000000000000003 [ 198.462196][ T7525] RBP: 00007fecb9923090 R08: 0000000000000000 R09: 0000000000000000 [ 198.470183][ T7525] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 198.478168][ T7525] R13: 00007fecb8c26038 R14: 00007fecb8c25fa0 R15: 00007ffd7e9ebf08 [ 198.486169][ T7525] [ 198.701626][ T7531] FAULT_INJECTION: forcing a failure. [ 198.701626][ T7531] name failslab, interval 1, probability 0, space 0, times 0 [ 198.740567][ T7531] CPU: 0 PID: 7531 Comm: syz.0.599 Not tainted syzkaller #0 [ 198.745585][ T51] Bluetooth: hci0: command tx timeout [ 198.747912][ T7531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 198.763394][ T7531] Call Trace: [ 198.766706][ T7531] [ 198.769672][ T7531] dump_stack_lvl+0x18c/0x250 [ 198.774393][ T7531] ? show_regs_print_info+0x20/0x20 [ 198.779630][ T7531] ? load_image+0x420/0x420 [ 198.784185][ T7531] ? __might_sleep+0xe0/0xe0 [ 198.788819][ T7531] ? __lock_acquire+0x7d80/0x7d80 [ 198.793883][ T7531] should_fail_ex+0x394/0x4c0 [ 198.798606][ T7531] should_failslab+0x9/0x20 [ 198.803150][ T7531] slab_pre_alloc_hook+0x59/0x300 [ 198.808232][ T7531] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 198.814025][ T7531] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 198.819784][ T7531] __kmem_cache_alloc_node+0x53/0x250 [ 198.825205][ T7531] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 198.830975][ T7531] __kmalloc+0xa7/0x240 [ 198.835178][ T7531] tomoyo_realpath_from_path+0xe6/0x5c0 [ 198.840784][ T7531] ? tomoyo_domain+0xd6/0x120 [ 198.845523][ T7531] tomoyo_path_number_perm+0x248/0x5e0 [ 198.851118][ T7531] ? tomoyo_path_number_perm+0x217/0x5e0 [ 198.856796][ T7531] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 198.862306][ T7531] ? ksys_write+0x1d2/0x260 [ 198.867165][ T7531] ? __fget_files+0x28/0x460 [ 198.871820][ T7531] security_file_ioctl+0x70/0xa0 [ 198.876799][ T7531] __se_sys_ioctl+0x48/0x170 [ 198.881424][ T7531] do_syscall_64+0x55/0xb0 [ 198.885873][ T7531] ? clear_bhb_loop+0x40/0x90 [ 198.890583][ T7531] ? clear_bhb_loop+0x40/0x90 [ 198.895296][ T7531] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 198.901230][ T7531] RIP: 0033:0x7fcf47d9e0d9 [ 198.905682][ T7531] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 198.925332][ T7531] RSP: 002b:00007fcf48c12028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 198.933799][ T7531] RAX: ffffffffffffffda RBX: 00007fcf48025fa0 RCX: 00007fcf47d9e0d9 [ 198.941814][ T7531] RDX: 0000200000000080 RSI: 0000000000008924 RDI: 0000000000000004 [ 198.949825][ T7531] RBP: 00007fcf48c12090 R08: 0000000000000000 R09: 0000000000000000 [ 198.957841][ T7531] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 198.965854][ T7531] R13: 00007fcf48026038 R14: 00007fcf48025fa0 R15: 00007ffd0fe4c478 [ 198.973882][ T7531] [ 198.994435][ T7531] ERROR: Out of memory at tomoyo_realpath_from_path. [ 199.435630][ T7552] FAULT_INJECTION: forcing a failure. [ 199.435630][ T7552] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 199.466774][ T7552] CPU: 0 PID: 7552 Comm: syz.0.606 Not tainted syzkaller #0 [ 199.474159][ T7552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 199.484252][ T7552] Call Trace: [ 199.487558][ T7552] [ 199.490528][ T7552] dump_stack_lvl+0x18c/0x250 [ 199.495264][ T7552] ? show_regs_print_info+0x20/0x20 [ 199.500504][ T7552] ? load_image+0x420/0x420 [ 199.505060][ T7552] ? __lock_acquire+0x7d80/0x7d80 [ 199.510151][ T7552] ? snprintf+0xe9/0x140 [ 199.514445][ T7552] should_fail_ex+0x394/0x4c0 [ 199.519164][ T7552] _copy_to_user+0x2f/0xa0 [ 199.523613][ T7552] simple_read_from_buffer+0xe7/0x150 [ 199.529015][ T7552] proc_fail_nth_read+0x1e8/0x260 [ 199.534091][ T7552] ? proc_fault_inject_write+0x360/0x360 [ 199.539780][ T7552] ? fsnotify_perm+0x271/0x5e0 [ 199.544583][ T7552] ? proc_fault_inject_write+0x360/0x360 [ 199.550260][ T7552] vfs_read+0x298/0x990 [ 199.554474][ T7552] ? kernel_read+0x1e0/0x1e0 [ 199.559115][ T7552] ? __fget_files+0x28/0x460 [ 199.563758][ T7552] ? __fget_files+0x3fc/0x460 [ 199.568487][ T7552] ? __fdget_pos+0x2a3/0x330 [ 199.573126][ T7552] ? ksys_read+0x74/0x260 [ 199.577506][ T7552] ksys_read+0x151/0x260 [ 199.581800][ T7552] ? vfs_write+0x9a0/0x9a0 [ 199.586280][ T7552] ? lockdep_hardirqs_on+0x98/0x150 [ 199.591527][ T7552] do_syscall_64+0x55/0xb0 [ 199.595982][ T7552] ? clear_bhb_loop+0x40/0x90 [ 199.600700][ T7552] ? clear_bhb_loop+0x40/0x90 [ 199.605412][ T7552] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 199.611319][ T7552] RIP: 0033:0x7fcf47d5e90e [ 199.615750][ T7552] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 199.635368][ T7552] RSP: 002b:00007fcf48c11fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 199.643794][ T7552] RAX: ffffffffffffffda RBX: 00007fcf48c126c0 RCX: 00007fcf47d5e90e [ 199.651793][ T7552] RDX: 000000000000000f RSI: 00007fcf48c120a0 RDI: 0000000000000005 [ 199.659787][ T7552] RBP: 00007fcf48c12090 R08: 0000000000000000 R09: 0000000000000000 [ 199.667786][ T7552] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 199.675778][ T7552] R13: 00007fcf48026038 R14: 00007fcf48025fa0 R15: 00007ffd0fe4c478 [ 199.683784][ T7552] [ 199.771768][ T51] Bluetooth: hci0: unexpected subevent 0x0a length: 150 > 30 [ 199.780380][ T51] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:0' [ 199.791197][ T51] CPU: 1 PID: 51 Comm: kworker/u5:0 Not tainted syzkaller #0 [ 199.798632][ T51] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 199.808735][ T51] Workqueue: hci0 hci_rx_work [ 199.813459][ T51] Call Trace: [ 199.816776][ T51] [ 199.819744][ T51] dump_stack_lvl+0x18c/0x250 [ 199.824464][ T51] ? show_regs_print_info+0x20/0x20 [ 199.829709][ T51] ? load_image+0x420/0x420 [ 199.834244][ T51] sysfs_create_dir_ns+0x26e/0x2a0 [ 199.839373][ T51] ? __lock_acquire+0x7d80/0x7d80 [ 199.844415][ T51] ? sysfs_warn_dup+0xa0/0xa0 [ 199.849114][ T51] ? do_raw_spin_unlock+0x121/0x230 [ 199.854339][ T51] kobject_add_internal+0x617/0xc90 [ 199.859564][ T51] kobject_add+0x164/0x240 [ 199.864004][ T51] ? kobject_init+0x1d0/0x1d0 [ 199.868702][ T51] ? get_device_parent+0x366/0x390 [ 199.873833][ T51] device_add+0x3fa/0xc40 [ 199.878181][ T51] hci_conn_add_sysfs+0xd5/0x1e0 [ 199.883141][ T51] le_conn_complete_evt+0xe9f/0x1480 [ 199.888450][ T51] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 199.894703][ T51] ? bt_info+0x180/0x180 [ 199.898960][ T51] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 199.904615][ T51] ? mutex_unlock+0x10/0x10 [ 199.909171][ T51] ? skb_pull_data+0xf0/0x1f0 [ 199.913871][ T51] hci_le_enh_conn_complete_evt+0x189/0x460 [ 199.919783][ T51] ? hci_le_remote_conn_param_req_evt+0xcb0/0xcb0 [ 199.926218][ T51] ? hci_remote_host_features_evt+0x150/0x150 [ 199.932299][ T51] hci_event_packet+0x7b4/0x1280 [ 199.937260][ T51] ? __lock_acquire+0x7d80/0x7d80 [ 199.942298][ T51] ? lock_chain_count+0x20/0x20 [ 199.947249][ T51] ? bis_list+0x290/0x290 [ 199.951595][ T51] ? lockdep_hardirqs_on+0x98/0x150 [ 199.956814][ T51] ? hci_send_to_monitor+0xd7/0x4f0 [ 199.962029][ T51] hci_rx_work+0x43a/0xd60 [ 199.966466][ T51] ? process_scheduled_works+0x975/0x1600 [ 199.972201][ T51] process_scheduled_works+0xa60/0x1600 [ 199.977798][ T51] ? worker_attach_to_pool+0x370/0x370 [ 199.983281][ T51] ? assign_work+0x3cc/0x5d0 [ 199.987894][ T51] worker_thread+0xa5e/0xfe0 [ 199.992529][ T51] kthread+0x2fa/0x390 [ 199.996612][ T51] ? pr_cont_work+0x550/0x550 [ 200.001306][ T51] ? kthread_blkcg+0xd0/0xd0 [ 200.005909][ T51] ret_from_fork+0x48/0x80 [ 200.010354][ T51] ? kthread_blkcg+0xd0/0xd0 [ 200.014960][ T51] ret_from_fork_asm+0x11/0x20 [ 200.019786][ T51] [ 200.024265][ T51] kobject: kobject_add_internal failed for hci0:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 200.038241][ T51] Bluetooth: hci0: failed to register connection device [ 200.122572][ T7565] FAULT_INJECTION: forcing a failure. [ 200.122572][ T7565] name failslab, interval 1, probability 0, space 0, times 0 [ 200.136124][ T7565] CPU: 1 PID: 7565 Comm: syz.0.610 Not tainted syzkaller #0 [ 200.143462][ T7565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 200.153562][ T7565] Call Trace: [ 200.156880][ T7565] [ 200.159844][ T7565] dump_stack_lvl+0x18c/0x250 [ 200.164576][ T7565] ? show_regs_print_info+0x20/0x20 [ 200.169818][ T7565] ? load_image+0x420/0x420 [ 200.174379][ T7565] ? __might_sleep+0xe0/0xe0 [ 200.179013][ T7565] ? __lock_acquire+0x7d80/0x7d80 [ 200.184094][ T7565] should_fail_ex+0x394/0x4c0 [ 200.188844][ T7565] should_failslab+0x9/0x20 [ 200.193391][ T7565] slab_pre_alloc_hook+0x59/0x300 [ 200.198466][ T7565] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 200.204235][ T7565] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 200.210002][ T7565] __kmem_cache_alloc_node+0x53/0x250 [ 200.215428][ T7565] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 200.221184][ T7565] __kmalloc+0xa7/0x240 [ 200.225369][ T7565] tomoyo_realpath_from_path+0xe6/0x5c0 [ 200.230939][ T7565] ? tomoyo_domain+0xd6/0x120 [ 200.235648][ T7565] tomoyo_path_number_perm+0x248/0x5e0 [ 200.241123][ T7565] ? tomoyo_path_number_perm+0x217/0x5e0 [ 200.246771][ T7565] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 200.252247][ T7565] ? ksys_write+0x1d2/0x260 [ 200.256801][ T7565] ? __fget_files+0x28/0x460 [ 200.261417][ T7565] security_file_ioctl+0x70/0xa0 [ 200.266372][ T7565] __se_sys_ioctl+0x48/0x170 [ 200.270983][ T7565] do_syscall_64+0x55/0xb0 [ 200.275413][ T7565] ? clear_bhb_loop+0x40/0x90 [ 200.280110][ T7565] ? clear_bhb_loop+0x40/0x90 [ 200.284797][ T7565] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 200.290706][ T7565] RIP: 0033:0x7fcf47d9e0d9 [ 200.295136][ T7565] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 200.314755][ T7565] RSP: 002b:00007fcf48c12028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 200.323183][ T7565] RAX: ffffffffffffffda RBX: 00007fcf48025fa0 RCX: 00007fcf47d9e0d9 [ 200.331165][ T7565] RDX: 0000000000000000 RSI: 000000000000894b RDI: 0000000000000003 [ 200.339143][ T7565] RBP: 00007fcf48c12090 R08: 0000000000000000 R09: 0000000000000000 [ 200.347127][ T7565] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 200.355114][ T7565] R13: 00007fcf48026038 R14: 00007fcf48025fa0 R15: 00007ffd0fe4c478 [ 200.363120][ T7565] [ 200.377816][ T51] Bluetooth: hci2: command tx timeout [ 200.386704][ T7565] ERROR: Out of memory at tomoyo_realpath_from_path. [ 200.774180][ T7584] FAULT_INJECTION: forcing a failure. [ 200.774180][ T7584] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 200.811916][ T7584] CPU: 0 PID: 7584 Comm: syz.3.618 Not tainted syzkaller #0 [ 200.819283][ T7584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 200.829372][ T7584] Call Trace: [ 200.832690][ T7584] [ 200.835663][ T7584] dump_stack_lvl+0x18c/0x250 [ 200.840392][ T7584] ? show_regs_print_info+0x20/0x20 [ 200.845630][ T7584] ? load_image+0x420/0x420 [ 200.850200][ T7584] ? __might_fault+0xaa/0x120 [ 200.854922][ T7584] ? __lock_acquire+0x7d80/0x7d80 [ 200.859990][ T7584] should_fail_ex+0x394/0x4c0 [ 200.864695][ T7584] _copy_from_user+0x2f/0xe0 [ 200.869307][ T7584] ___sys_recvmsg+0x174/0x590 [ 200.874088][ T7584] ? __sys_recvmsg+0x2a0/0x2a0 [ 200.878869][ T7584] ? ksys_write+0x1d2/0x260 [ 200.883394][ T7584] ? __fget_files+0x3fc/0x460 [ 200.888102][ T7584] __x64_sys_recvmsg+0x21e/0x2f0 [ 200.893064][ T7584] ? ___sys_recvmsg+0x590/0x590 [ 200.897940][ T7584] ? lockdep_hardirqs_on+0x98/0x150 [ 200.903157][ T7584] do_syscall_64+0x55/0xb0 [ 200.907583][ T7584] ? clear_bhb_loop+0x40/0x90 [ 200.912268][ T7584] ? clear_bhb_loop+0x40/0x90 [ 200.916956][ T7584] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 200.922861][ T7584] RIP: 0033:0x7fa38d19e0d9 [ 200.927288][ T7584] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 200.946906][ T7584] RSP: 002b:00007fa38e08c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 200.955336][ T7584] RAX: ffffffffffffffda RBX: 00007fa38d425fa0 RCX: 00007fa38d19e0d9 [ 200.963314][ T7584] RDX: 0000000000000020 RSI: 0000200000000080 RDI: 0000000000000003 [ 200.971328][ T7584] RBP: 00007fa38e08c090 R08: 0000000000000000 R09: 0000000000000000 [ 200.979305][ T7584] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 200.987285][ T7584] R13: 00007fa38d426038 R14: 00007fa38d425fa0 R15: 00007fff843676b8 [ 200.995302][ T7584] [ 201.300587][ T7591] __nla_validate_parse: 18 callbacks suppressed [ 201.300605][ T7591] netlink: 15231 bytes leftover after parsing attributes in process `syz.2.616'. [ 201.400945][ T7598] netlink: 132 bytes leftover after parsing attributes in process `syz.1.620'. [ 201.524181][ T7603] FAULT_INJECTION: forcing a failure. [ 201.524181][ T7603] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 201.562628][ T7603] CPU: 1 PID: 7603 Comm: syz.3.621 Not tainted syzkaller #0 [ 201.570011][ T7603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 201.580097][ T7603] Call Trace: [ 201.583393][ T7603] [ 201.586336][ T7603] dump_stack_lvl+0x18c/0x250 [ 201.591028][ T7603] ? show_regs_print_info+0x20/0x20 [ 201.596240][ T7603] ? load_image+0x420/0x420 [ 201.600760][ T7603] ? __might_fault+0xaa/0x120 [ 201.605447][ T7603] ? __lock_acquire+0x7d80/0x7d80 [ 201.610495][ T7603] should_fail_ex+0x394/0x4c0 [ 201.615193][ T7603] _copy_from_user+0x2f/0xe0 [ 201.619795][ T7603] ___sys_sendmsg+0x1c7/0x360 [ 201.624480][ T7603] ? get_pid_task+0x20/0x1e0 [ 201.629089][ T7603] ? __sys_sendmsg+0x2b0/0x2b0 [ 201.633881][ T7603] ? __lock_acquire+0x7d80/0x7d80 [ 201.638940][ T7603] __se_sys_sendmsg+0x1d0/0x2c0 [ 201.643836][ T7603] ? __x64_sys_sendmsg+0x80/0x80 [ 201.648817][ T7603] ? lockdep_hardirqs_on+0x98/0x150 [ 201.654043][ T7603] do_syscall_64+0x55/0xb0 [ 201.658480][ T7603] ? clear_bhb_loop+0x40/0x90 [ 201.663177][ T7603] ? clear_bhb_loop+0x40/0x90 [ 201.667869][ T7603] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 201.673779][ T7603] RIP: 0033:0x7fa38d19e0d9 [ 201.678205][ T7603] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 201.697823][ T7603] RSP: 002b:00007fa38e08c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 201.706249][ T7603] RAX: ffffffffffffffda RBX: 00007fa38d425fa0 RCX: 00007fa38d19e0d9 [ 201.714231][ T7603] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000003 [ 201.722212][ T7603] RBP: 00007fa38e08c090 R08: 0000000000000000 R09: 0000000000000000 [ 201.730283][ T7603] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 201.738260][ T7603] R13: 00007fa38d426038 R14: 00007fa38d425fa0 R15: 00007fff843676b8 [ 201.746258][ T7603] [ 201.923937][ T51] Bluetooth: hci3: unexpected subevent 0x0a length: 150 > 30 [ 201.932219][ T51] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 201.942154][ T51] CPU: 1 PID: 51 Comm: kworker/u5:0 Not tainted syzkaller #0 [ 201.949581][ T51] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 201.959681][ T51] Workqueue: hci3 hci_rx_work [ 201.964416][ T51] Call Trace: [ 201.967753][ T51] [ 201.970735][ T51] dump_stack_lvl+0x18c/0x250 [ 201.975478][ T51] ? show_regs_print_info+0x20/0x20 [ 201.980719][ T51] ? load_image+0x420/0x420 [ 201.985296][ T51] sysfs_create_dir_ns+0x26e/0x2a0 [ 201.990459][ T51] ? __lock_acquire+0x7d80/0x7d80 [ 201.995532][ T51] ? sysfs_warn_dup+0xa0/0xa0 [ 202.000233][ T51] ? do_raw_spin_unlock+0x121/0x230 [ 202.005466][ T51] kobject_add_internal+0x617/0xc90 [ 202.010697][ T51] kobject_add+0x164/0x240 [ 202.015403][ T51] ? kobject_init+0x1d0/0x1d0 [ 202.020107][ T51] ? get_device_parent+0x366/0x390 [ 202.025242][ T51] device_add+0x3fa/0xc40 [ 202.029592][ T51] hci_conn_add_sysfs+0xd5/0x1e0 [ 202.034550][ T51] le_conn_complete_evt+0xe9f/0x1480 [ 202.039865][ T51] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 202.046148][ T51] ? bt_info+0x180/0x180 [ 202.050414][ T51] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 202.056098][ T51] ? mutex_unlock+0x10/0x10 [ 202.060625][ T51] ? skb_pull_data+0xf0/0x1f0 [ 202.065328][ T51] hci_le_enh_conn_complete_evt+0x189/0x460 [ 202.071240][ T51] ? hci_le_remote_conn_param_req_evt+0xcb0/0xcb0 [ 202.077673][ T51] ? hci_remote_host_features_evt+0x150/0x150 [ 202.083765][ T51] hci_event_packet+0x7b4/0x1280 [ 202.088723][ T51] ? __lock_acquire+0x7d80/0x7d80 [ 202.093771][ T51] ? lock_chain_count+0x20/0x20 [ 202.098677][ T51] ? bis_list+0x290/0x290 [ 202.103049][ T51] ? lockdep_hardirqs_on+0x98/0x150 [ 202.108272][ T51] ? hci_send_to_monitor+0xd7/0x4f0 [ 202.113513][ T51] hci_rx_work+0x43a/0xd60 [ 202.117955][ T51] ? process_scheduled_works+0x975/0x1600 [ 202.123691][ T51] process_scheduled_works+0xa60/0x1600 [ 202.129288][ T51] ? worker_attach_to_pool+0x370/0x370 [ 202.134768][ T51] ? assign_work+0x3cc/0x5d0 [ 202.139387][ T51] worker_thread+0xa5e/0xfe0 [ 202.144028][ T51] kthread+0x2fa/0x390 [ 202.148112][ T51] ? pr_cont_work+0x550/0x550 [ 202.152823][ T51] ? kthread_blkcg+0xd0/0xd0 [ 202.157447][ T51] ret_from_fork+0x48/0x80 [ 202.161875][ T51] ? kthread_blkcg+0xd0/0xd0 [ 202.166480][ T51] ret_from_fork_asm+0x11/0x20 [ 202.171283][ T51] [ 202.176859][ T5785] Bluetooth: hci0: command tx timeout [ 202.182356][ T51] kobject: kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 202.196286][ T51] Bluetooth: hci3: failed to register connection device [ 202.276728][ T7613] netlink: 'syz.1.626': attribute type 21 has an invalid length. [ 202.292295][ T7613] netlink: 128 bytes leftover after parsing attributes in process `syz.1.626'. [ 202.337335][ T7613] netlink: 3 bytes leftover after parsing attributes in process `syz.1.626'. [ 202.454320][ T7619] netlink: 144 bytes leftover after parsing attributes in process `syz.2.629'. [ 202.506417][ T7619] netlink: 60 bytes leftover after parsing attributes in process `syz.2.629'. [ 202.816578][ T7624] FAULT_INJECTION: forcing a failure. [ 202.816578][ T7624] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 202.864899][ T7624] CPU: 0 PID: 7624 Comm: syz.0.630 Not tainted syzkaller #0 [ 202.872274][ T7624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 202.882363][ T7624] Call Trace: [ 202.885669][ T7624] [ 202.888633][ T7624] dump_stack_lvl+0x18c/0x250 [ 202.893350][ T7624] ? show_regs_print_info+0x20/0x20 [ 202.898587][ T7624] ? load_image+0x420/0x420 [ 202.903134][ T7624] ? __might_fault+0xaa/0x120 [ 202.907845][ T7624] ? __lock_acquire+0x7d80/0x7d80 [ 202.912908][ T7624] should_fail_ex+0x394/0x4c0 [ 202.917628][ T7624] _copy_from_user+0x2f/0xe0 [ 202.922258][ T7624] ___sys_sendmsg+0x1c7/0x360 [ 202.927065][ T7624] ? __sys_sendmsg+0x2b0/0x2b0 [ 202.931914][ T7624] ? __lock_acquire+0x7d80/0x7d80 [ 202.937012][ T7624] __se_sys_sendmsg+0x1d0/0x2c0 [ 202.941903][ T7624] ? __x64_sys_sendmsg+0x80/0x80 [ 202.946895][ T7624] ? lockdep_hardirqs_on+0x98/0x150 [ 202.952133][ T7624] do_syscall_64+0x55/0xb0 [ 202.956586][ T7624] ? clear_bhb_loop+0x40/0x90 [ 202.961293][ T7624] ? clear_bhb_loop+0x40/0x90 [ 202.966005][ T7624] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 202.971928][ T7624] RIP: 0033:0x7fcf47d9e0d9 [ 202.976374][ T7624] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 202.996009][ T7624] RSP: 002b:00007fcf48c12028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 203.004489][ T7624] RAX: ffffffffffffffda RBX: 00007fcf48025fa0 RCX: 00007fcf47d9e0d9 [ 203.012489][ T7624] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000004 [ 203.020492][ T7624] RBP: 00007fcf48c12090 R08: 0000000000000000 R09: 0000000000000000 [ 203.028490][ T7624] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 203.036488][ T7624] R13: 00007fcf48026038 R14: 00007fcf48025fa0 R15: 00007ffd0fe4c478 [ 203.044518][ T7624] [ 203.304140][ T7635] FAULT_INJECTION: forcing a failure. [ 203.304140][ T7635] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 203.339882][ T7635] CPU: 1 PID: 7635 Comm: syz.1.634 Not tainted syzkaller #0 [ 203.347256][ T7635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 203.357352][ T7635] Call Trace: [ 203.360666][ T7635] [ 203.363637][ T7635] dump_stack_lvl+0x18c/0x250 [ 203.368453][ T7635] ? show_regs_print_info+0x20/0x20 [ 203.373703][ T7635] ? load_image+0x420/0x420 [ 203.378261][ T7635] ? __might_fault+0xaa/0x120 [ 203.382992][ T7635] ? __lock_acquire+0x7d80/0x7d80 [ 203.388107][ T7635] should_fail_ex+0x394/0x4c0 [ 203.392828][ T7635] _copy_from_user+0x2f/0xe0 [ 203.397456][ T7635] ___sys_sendmsg+0x1c7/0x360 [ 203.402172][ T7635] ? __sys_sendmsg+0x2b0/0x2b0 [ 203.407099][ T7635] ? __lock_acquire+0x7d80/0x7d80 [ 203.412195][ T7635] __se_sys_sendmsg+0x1d0/0x2c0 [ 203.417093][ T7635] ? __x64_sys_sendmsg+0x80/0x80 [ 203.422097][ T7635] ? lockdep_hardirqs_on+0x98/0x150 [ 203.427342][ T7635] do_syscall_64+0x55/0xb0 [ 203.431803][ T7635] ? clear_bhb_loop+0x40/0x90 [ 203.436518][ T7635] ? clear_bhb_loop+0x40/0x90 [ 203.441234][ T7635] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 203.447169][ T7635] RIP: 0033:0x7fecb899e0d9 [ 203.451707][ T7635] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 203.471442][ T7635] RSP: 002b:00007fecb9923028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 203.479907][ T7635] RAX: ffffffffffffffda RBX: 00007fecb8c25fa0 RCX: 00007fecb899e0d9 [ 203.487928][ T7635] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000004 [ 203.495948][ T7635] RBP: 00007fecb9923090 R08: 0000000000000000 R09: 0000000000000000 [ 203.503965][ T7635] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 203.511981][ T7635] R13: 00007fecb8c26038 R14: 00007fecb8c25fa0 R15: 00007ffd7e9ebf08 [ 203.520022][ T7635] [ 203.574144][ T7640] netlink: 'syz.0.635': attribute type 10 has an invalid length. [ 203.644636][ T7640] team0: Device hsr_slave_0 failed to register rx_handler [ 203.809200][ T7646] netlink: 'syz.3.637': attribute type 10 has an invalid length. [ 203.890469][ T7646] team0: Device hsr_slave_0 failed to register rx_handler [ 204.140768][ T51] Bluetooth: hci1: unexpected subevent 0x0a length: 150 > 30 [ 204.148876][ T51] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:0' [ 204.159382][ T51] CPU: 1 PID: 51 Comm: kworker/u5:0 Not tainted syzkaller #0 [ 204.166812][ T51] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 204.176916][ T51] Workqueue: hci1 hci_rx_work [ 204.181639][ T51] Call Trace: [ 204.184934][ T51] [ 204.187884][ T51] dump_stack_lvl+0x18c/0x250 [ 204.192583][ T51] ? show_regs_print_info+0x20/0x20 [ 204.197804][ T51] ? load_image+0x420/0x420 [ 204.202344][ T51] sysfs_create_dir_ns+0x26e/0x2a0 [ 204.207484][ T51] ? __lock_acquire+0x7d80/0x7d80 [ 204.212531][ T51] ? sysfs_warn_dup+0xa0/0xa0 [ 204.217228][ T51] ? do_raw_spin_unlock+0x121/0x230 [ 204.222445][ T51] kobject_add_internal+0x617/0xc90 [ 204.227667][ T51] kobject_add+0x164/0x240 [ 204.232109][ T51] ? kobject_init+0x1d0/0x1d0 [ 204.236832][ T51] ? get_device_parent+0x366/0x390 [ 204.241969][ T51] device_add+0x3fa/0xc40 [ 204.246316][ T51] hci_conn_add_sysfs+0xd5/0x1e0 [ 204.251272][ T51] le_conn_complete_evt+0xe9f/0x1480 [ 204.256584][ T51] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 204.262837][ T51] ? bt_info+0x180/0x180 [ 204.267094][ T51] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 204.272744][ T51] ? mutex_unlock+0x10/0x10 [ 204.277260][ T51] ? skb_pull_data+0xf0/0x1f0 [ 204.281954][ T51] hci_le_enh_conn_complete_evt+0x189/0x460 [ 204.287864][ T51] ? hci_le_remote_conn_param_req_evt+0xcb0/0xcb0 [ 204.294294][ T51] ? hci_remote_host_features_evt+0x150/0x150 [ 204.300377][ T51] hci_event_packet+0x7b4/0x1280 [ 204.305338][ T51] ? __lock_acquire+0x7d80/0x7d80 [ 204.310382][ T51] ? lock_chain_count+0x20/0x20 [ 204.315244][ T51] ? bis_list+0x290/0x290 [ 204.319595][ T51] ? lockdep_hardirqs_on+0x98/0x150 [ 204.324816][ T51] ? hci_send_to_monitor+0xd7/0x4f0 [ 204.330034][ T51] hci_rx_work+0x43a/0xd60 [ 204.334483][ T51] ? process_scheduled_works+0x975/0x1600 [ 204.340223][ T51] process_scheduled_works+0xa60/0x1600 [ 204.345824][ T51] ? worker_attach_to_pool+0x370/0x370 [ 204.351306][ T51] ? assign_work+0x3cc/0x5d0 [ 204.355917][ T51] worker_thread+0xa5e/0xfe0 [ 204.360554][ T51] kthread+0x2fa/0x390 [ 204.364632][ T51] ? pr_cont_work+0x550/0x550 [ 204.369331][ T51] ? kthread_blkcg+0xd0/0xd0 [ 204.373938][ T51] ret_from_fork+0x48/0x80 [ 204.378375][ T51] ? kthread_blkcg+0xd0/0xd0 [ 204.382983][ T51] ret_from_fork_asm+0x11/0x20 [ 204.387779][ T51] [ 204.393645][ T5785] Bluetooth: hci3: command tx timeout [ 204.405146][ T51] kobject: kobject_add_internal failed for hci1:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 204.419395][ T51] Bluetooth: hci1: failed to register connection device [ 204.434211][ T7658] FAULT_INJECTION: forcing a failure. [ 204.434211][ T7658] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 204.455031][ T7658] CPU: 1 PID: 7658 Comm: syz.3.642 Not tainted syzkaller #0 [ 204.462387][ T7658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 204.472482][ T7658] Call Trace: [ 204.475796][ T7658] [ 204.478759][ T7658] dump_stack_lvl+0x18c/0x250 [ 204.483577][ T7658] ? show_regs_print_info+0x20/0x20 [ 204.488816][ T7658] ? load_image+0x420/0x420 [ 204.493378][ T7658] ? __lock_acquire+0x7d80/0x7d80 [ 204.498455][ T7658] should_fail_ex+0x394/0x4c0 [ 204.503187][ T7658] prepare_alloc_pages+0x1e1/0x5b0 [ 204.508445][ T7658] __alloc_pages+0x134/0x460 [ 204.513111][ T7658] ? zone_statistics+0x170/0x170 [ 204.518113][ T7658] __pmd_alloc+0x9a/0x8c0 [ 204.522483][ T7658] ? __rwlock_init+0x150/0x150 [ 204.527292][ T7658] ? __pud_alloc+0x200/0x200 [ 204.531919][ T7658] ? hugepage_vma_check+0x471/0x560 [ 204.537175][ T7658] handle_mm_fault+0xb75/0x4a50 [ 204.542075][ T7658] ? handle_mm_fault+0xe6/0x4a50 [ 204.547081][ T7658] ? numa_migrate_prep+0x350/0x350 [ 204.552256][ T7658] ? lock_chain_count+0x20/0x20 [ 204.557150][ T7658] ? perf_trace_lock+0xfc/0x3b0 [ 204.562044][ T7658] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 204.567384][ T7658] do_user_addr_fault+0x736/0x12d0 [ 204.572567][ T7658] exc_page_fault+0x64/0x100 [ 204.577211][ T7658] asm_exc_page_fault+0x26/0x30 [ 204.582096][ T7658] RIP: 0010:__put_user_4+0x11/0x20 [ 204.587260][ T7658] Code: 01 ca c3 90 90 90 90 90 90 f3 0f 1e fa 0f 01 cb 66 89 01 31 c9 0f 01 ca c3 f3 0f 1e fa 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 90 90 90 90 90 90 90 f3 0f 1e fa 0f 01 cb [ 204.606911][ T7658] RSP: 0018:ffffc9000b9efe80 EFLAGS: 00050206 [ 204.613126][ T7658] RAX: 0000000000000004 RBX: 0000000000000000 RCX: 0000200000000000 [ 204.621143][ T7658] RDX: 0000000000000000 RSI: ffffffff8acadd60 RDI: ffffffff8b1d0ca0 [ 204.629159][ T7658] RBP: 0000000000000004 R08: ffffffff8e8c7aef R09: 1ffffffff1d18f5d [ 204.637177][ T7658] R10: dffffc0000000000 R11: fffffbfff1d18f5e R12: 0000000000000000 [ 204.645182][ T7658] R13: 0000200000000000 R14: 000000000000002c R15: 0000000000000003 [ 204.653223][ T7658] __sys_socketpair+0xb8/0x550 [ 204.658051][ T7658] __x64_sys_socketpair+0x9b/0xb0 [ 204.663140][ T7658] do_syscall_64+0x55/0xb0 [ 204.667597][ T7658] ? clear_bhb_loop+0x40/0x90 [ 204.672308][ T7658] ? clear_bhb_loop+0x40/0x90 [ 204.677023][ T7658] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 204.682951][ T7658] RIP: 0033:0x7fa38d19e0d9 [ 204.687398][ T7658] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 204.707052][ T7658] RSP: 002b:00007fa38e08c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 204.715608][ T7658] RAX: ffffffffffffffda RBX: 00007fa38d425fa0 RCX: 00007fa38d19e0d9 [ 204.723622][ T7658] RDX: 0000000000000006 RSI: 0000000000000003 RDI: 000000000000002c [ 204.731640][ T7658] RBP: 00007fa38e08c090 R08: 0000000000000000 R09: 0000000000000000 [ 204.739649][ T7658] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 204.747657][ T7658] R13: 00007fa38d426038 R14: 00007fa38d425fa0 R15: 00007fff843676b8 [ 204.755687][ T7658] [ 205.437731][ T7681] FAULT_INJECTION: forcing a failure. [ 205.437731][ T7681] name failslab, interval 1, probability 0, space 0, times 0 [ 205.507229][ T7683] netlink: 128 bytes leftover after parsing attributes in process `syz.1.650'. [ 205.556766][ T7681] CPU: 1 PID: 7681 Comm: syz.2.649 Not tainted syzkaller #0 [ 205.564135][ T7681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 205.565303][ T7683] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 205.574211][ T7681] Call Trace: [ 205.574224][ T7681] [ 205.574232][ T7681] dump_stack_lvl+0x18c/0x250 [ 205.574265][ T7681] ? show_regs_print_info+0x20/0x20 [ 205.605539][ T7681] ? load_image+0x420/0x420 [ 205.610116][ T7681] ? __might_sleep+0xe0/0xe0 [ 205.614758][ T7681] ? __lock_acquire+0x7d80/0x7d80 [ 205.619826][ T7681] ? get_random_u64+0x170/0x8f0 [ 205.624726][ T7681] should_fail_ex+0x394/0x4c0 [ 205.629450][ T7681] should_failslab+0x9/0x20 [ 205.633992][ T7681] slab_pre_alloc_hook+0x59/0x300 [ 205.639085][ T7681] kmem_cache_alloc+0x5a/0x2c0 [ 205.643901][ T7681] ? prepare_creds+0x30/0x5d0 [ 205.648632][ T7681] prepare_creds+0x30/0x5d0 [ 205.653194][ T7681] copy_creds+0x105/0xa70 [ 205.657588][ T7681] copy_process+0x973/0x3da0 [ 205.662228][ T7681] ? __might_fault+0xaa/0x120 [ 205.666975][ T7681] ? get_pid_task+0x20/0x1e0 [ 205.671615][ T7681] ? __pidfd_prepare+0x140/0x140 [ 205.676600][ T7681] kernel_clone+0x24b/0x8a0 [ 205.681147][ T7681] ? create_io_thread+0x190/0x190 [ 205.686235][ T7681] __x64_sys_clone+0x1b7/0x230 [ 205.691033][ T7681] ? __fget_files+0x3fc/0x460 [ 205.695733][ T7681] ? __ia32_sys_vfork+0x140/0x140 [ 205.700779][ T7681] ? lock_chain_count+0x20/0x20 [ 205.705647][ T7681] ? lockdep_hardirqs_on+0x98/0x150 [ 205.710865][ T7681] do_syscall_64+0x55/0xb0 [ 205.715292][ T7681] ? clear_bhb_loop+0x40/0x90 [ 205.719983][ T7681] ? clear_bhb_loop+0x40/0x90 [ 205.724671][ T7681] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 205.730575][ T7681] RIP: 0033:0x7f35a8f9e0d9 [ 205.735002][ T7681] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 205.754706][ T7681] RSP: 002b:00007f35a9f0efd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 205.763130][ T7681] RAX: ffffffffffffffda RBX: 00007f35a9225fa0 RCX: 00007f35a8f9e0d9 [ 205.771115][ T7681] RDX: 0000200000000540 RSI: 0000000000000000 RDI: 0000000002180600 [ 205.779097][ T7681] RBP: 00007f35a9f0f090 R08: 0000000000000000 R09: 0000000000000000 [ 205.787076][ T7681] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 205.795056][ T7681] R13: 00007f35a9226038 R14: 00007f35a9225fa0 R15: 00007ffe2e6012e8 [ 205.803046][ T7681] [ 205.845753][ T7689] FAULT_INJECTION: forcing a failure. [ 205.845753][ T7689] name failslab, interval 1, probability 0, space 0, times 0 [ 205.895473][ T7689] CPU: 0 PID: 7689 Comm: syz.0.652 Not tainted syzkaller #0 [ 205.902847][ T7689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 205.912957][ T7689] Call Trace: [ 205.916276][ T7689] [ 205.919244][ T7689] dump_stack_lvl+0x18c/0x250 [ 205.923972][ T7689] ? show_regs_print_info+0x20/0x20 [ 205.929250][ T7689] ? load_image+0x420/0x420 [ 205.933807][ T7689] ? __might_sleep+0xe0/0xe0 [ 205.938441][ T7689] ? __lock_acquire+0x7d80/0x7d80 [ 205.943516][ T7689] should_fail_ex+0x394/0x4c0 [ 205.948244][ T7689] should_failslab+0x9/0x20 [ 205.952786][ T7689] slab_pre_alloc_hook+0x59/0x300 [ 205.957841][ T7689] ? __lock_acquire+0x7d80/0x7d80 [ 205.962882][ T7689] kmem_cache_alloc_node+0x5e/0x310 [ 205.968100][ T7689] ? __alloc_skb+0x103/0x2c0 [ 205.972706][ T7689] __alloc_skb+0x103/0x2c0 [ 205.977135][ T7689] netlink_sendmsg+0x66a/0xbf0 [ 205.981931][ T7689] ? netlink_getsockopt+0x590/0x590 [ 205.987145][ T7689] ? apparmor_socket_sendmsg+0x8e/0x330 [ 205.992703][ T7689] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 205.998003][ T7689] ? security_socket_sendmsg+0x80/0xa0 [ 206.003467][ T7689] ? netlink_getsockopt+0x590/0x590 [ 206.008678][ T7689] ____sys_sendmsg+0x61b/0x980 [ 206.013458][ T7689] ? __asan_memset+0x22/0x40 [ 206.018062][ T7689] ? __sys_sendmsg_sock+0x30/0x30 [ 206.023093][ T7689] ? __import_iovec+0x5f2/0x850 [ 206.027965][ T7689] ? import_iovec+0x73/0xa0 [ 206.032484][ T7689] ___sys_sendmsg+0x2a6/0x360 [ 206.037176][ T7689] ? __sys_sendmsg+0x2b0/0x2b0 [ 206.041970][ T7689] ? __lock_acquire+0x7d80/0x7d80 [ 206.047033][ T7689] __se_sys_sendmsg+0x1d0/0x2c0 [ 206.051897][ T7689] ? __x64_sys_sendmsg+0x80/0x80 [ 206.056860][ T7689] ? lockdep_hardirqs_on+0x98/0x150 [ 206.062075][ T7689] do_syscall_64+0x55/0xb0 [ 206.066504][ T7689] ? clear_bhb_loop+0x40/0x90 [ 206.071190][ T7689] ? clear_bhb_loop+0x40/0x90 [ 206.075879][ T7689] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 206.081782][ T7689] RIP: 0033:0x7fcf47d9e0d9 [ 206.086212][ T7689] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 206.105830][ T7689] RSP: 002b:00007fcf48c12028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 206.114256][ T7689] RAX: ffffffffffffffda RBX: 00007fcf48025fa0 RCX: 00007fcf47d9e0d9 [ 206.122238][ T7689] RDX: 0000000000000000 RSI: 0000200000000940 RDI: 0000000000000003 [ 206.130216][ T7689] RBP: 00007fcf48c12090 R08: 0000000000000000 R09: 0000000000000000 [ 206.138195][ T7689] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 206.146178][ T7689] R13: 00007fcf48026038 R14: 00007fcf48025fa0 R15: 00007ffd0fe4c478 [ 206.154173][ T7689] [ 206.336755][ T7692] netlink: 'syz.0.654': attribute type 1 has an invalid length. [ 206.405966][ T7696] FAULT_INJECTION: forcing a failure. [ 206.405966][ T7696] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 206.472097][ T7696] CPU: 1 PID: 7696 Comm: syz.2.653 Not tainted syzkaller #0 [ 206.479469][ T7696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 206.489566][ T7696] Call Trace: [ 206.492878][ T7696] [ 206.495866][ T7696] dump_stack_lvl+0x18c/0x250 [ 206.500585][ T7696] ? show_regs_print_info+0x20/0x20 [ 206.505822][ T7696] ? load_image+0x420/0x420 [ 206.510367][ T7696] ? __might_fault+0xaa/0x120 [ 206.515089][ T7696] ? __lock_acquire+0x7d80/0x7d80 [ 206.520153][ T7696] should_fail_ex+0x394/0x4c0 [ 206.524869][ T7696] _copy_from_user+0x2f/0xe0 [ 206.530106][ T7696] ___sys_recvmsg+0x174/0x590 [ 206.534815][ T7696] ? __sys_recvmsg+0x2a0/0x2a0 [ 206.539610][ T7696] ? ksys_write+0x1d2/0x260 [ 206.544162][ T7696] ? __fget_files+0x3fc/0x460 [ 206.548886][ T7696] __x64_sys_recvmsg+0x21e/0x2f0 [ 206.553852][ T7696] ? ___sys_recvmsg+0x590/0x590 [ 206.558755][ T7696] ? lockdep_hardirqs_on+0x98/0x150 [ 206.564168][ T7696] do_syscall_64+0x55/0xb0 [ 206.568610][ T7696] ? clear_bhb_loop+0x40/0x90 [ 206.573311][ T7696] ? clear_bhb_loop+0x40/0x90 [ 206.578021][ T7696] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 206.583941][ T7696] RIP: 0033:0x7f35a8f9e0d9 [ 206.588380][ T7696] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 206.608013][ T7696] RSP: 002b:00007f35a9f0f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 206.616464][ T7696] RAX: ffffffffffffffda RBX: 00007f35a9225fa0 RCX: 00007f35a8f9e0d9 [ 206.624464][ T7696] RDX: 0000000000010000 RSI: 0000200000005140 RDI: 0000000000000003 [ 206.632570][ T7696] RBP: 00007f35a9f0f090 R08: 0000000000000000 R09: 0000000000000000 [ 206.640567][ T7696] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 206.648564][ T7696] R13: 00007f35a9226038 R14: 00007f35a9225fa0 R15: 00007ffe2e6012e8 [ 206.656582][ T7696] [ 206.697656][ T5782] Bluetooth: hci1: command tx timeout [ 206.741708][ T5782] Bluetooth: hci1: unexpected subevent 0x0a length: 150 > 30 [ 206.749680][ T5782] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:0' [ 206.765077][ T5782] CPU: 1 PID: 5782 Comm: kworker/u5:2 Not tainted syzkaller #0 [ 206.772687][ T5782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 206.782788][ T5782] Workqueue: hci1 hci_rx_work [ 206.787522][ T5782] Call Trace: [ 206.790833][ T5782] [ 206.793797][ T5782] dump_stack_lvl+0x18c/0x250 [ 206.798531][ T5782] ? show_regs_print_info+0x20/0x20 [ 206.803777][ T5782] ? load_image+0x420/0x420 [ 206.808357][ T5782] sysfs_create_dir_ns+0x26e/0x2a0 [ 206.813521][ T5782] ? __lock_acquire+0x7d80/0x7d80 [ 206.815137][ T5790] Bluetooth: hci0: command 0x0406 tx timeout [ 206.818575][ T5782] ? sysfs_warn_dup+0xa0/0xa0 [ 206.818608][ T5782] ? do_raw_spin_unlock+0x121/0x230 [ 206.826475][ T5792] Bluetooth: hci3: command 0x0406 tx timeout [ 206.829792][ T5782] kobject_add_internal+0x617/0xc90 [ 206.835040][ T5789] Bluetooth: hci2: command 0x0406 tx timeout [ 206.840966][ T5782] kobject_add+0x164/0x240 [ 206.856655][ T5782] ? kobject_init+0x1d0/0x1d0 [ 206.861398][ T5782] ? get_device_parent+0x366/0x390 [ 206.866565][ T5782] device_add+0x3fa/0xc40 [ 206.870955][ T5782] hci_conn_add_sysfs+0xd5/0x1e0 [ 206.875951][ T5782] le_conn_complete_evt+0xe9f/0x1480 [ 206.881312][ T5782] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 206.887599][ T5782] ? bt_info+0x180/0x180 [ 206.891883][ T5782] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 206.897570][ T5782] ? mutex_unlock+0x10/0x10 [ 206.902115][ T5782] ? skb_pull_data+0xf0/0x1f0 [ 206.906947][ T5782] hci_le_enh_conn_complete_evt+0x189/0x460 [ 206.912892][ T5782] ? hci_le_remote_conn_param_req_evt+0xcb0/0xcb0 [ 206.919363][ T5782] ? hci_remote_host_features_evt+0x150/0x150 [ 206.925485][ T5782] hci_event_packet+0x7b4/0x1280 [ 206.930493][ T5782] ? __lock_acquire+0x7d80/0x7d80 [ 206.935571][ T5782] ? lock_chain_count+0x20/0x20 [ 206.940466][ T5782] ? bis_list+0x290/0x290 [ 206.944852][ T5782] ? lockdep_hardirqs_on+0x98/0x150 [ 206.950115][ T5782] ? hci_send_to_monitor+0xd7/0x4f0 [ 206.955368][ T5782] hci_rx_work+0x43a/0xd60 [ 206.959847][ T5782] ? process_scheduled_works+0x975/0x1600 [ 206.965623][ T5782] process_scheduled_works+0xa60/0x1600 [ 206.971260][ T5782] ? worker_attach_to_pool+0x370/0x370 [ 206.976781][ T5782] ? assign_work+0x3cc/0x5d0 [ 206.981437][ T5782] worker_thread+0xa5e/0xfe0 [ 206.986143][ T5782] kthread+0x2fa/0x390 [ 206.990255][ T5782] ? pr_cont_work+0x550/0x550 [ 206.994981][ T5782] ? kthread_blkcg+0xd0/0xd0 [ 206.999614][ T5782] ret_from_fork+0x48/0x80 [ 207.004079][ T5782] ? kthread_blkcg+0xd0/0xd0 [ 207.008711][ T5782] ret_from_fork_asm+0x11/0x20 [ 207.013544][ T5782] [ 207.021386][ T5782] kobject: kobject_add_internal failed for hci1:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 207.035532][ T5782] Bluetooth: hci1: failed to register connection device [ 207.851443][ T7725] FAULT_INJECTION: forcing a failure. [ 207.851443][ T7725] name failslab, interval 1, probability 0, space 0, times 0 [ 207.889344][ T7725] CPU: 0 PID: 7725 Comm: syz.2.664 Not tainted syzkaller #0 [ 207.896715][ T7725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 207.906798][ T7725] Call Trace: [ 207.910097][ T7725] [ 207.913052][ T7725] dump_stack_lvl+0x18c/0x250 [ 207.917759][ T7725] ? show_regs_print_info+0x20/0x20 [ 207.922981][ T7725] ? load_image+0x420/0x420 [ 207.927515][ T7725] ? __lock_acquire+0x7d80/0x7d80 [ 207.932584][ T7725] should_fail_ex+0x394/0x4c0 [ 207.937299][ T7725] should_failslab+0x9/0x20 [ 207.941828][ T7725] slab_pre_alloc_hook+0x59/0x300 [ 207.946888][ T7725] ? bpf_test_init+0x9f/0x140 [ 207.951588][ T7725] ? bpf_test_init+0x9f/0x140 [ 207.956286][ T7725] __kmem_cache_alloc_node+0x53/0x250 [ 207.961695][ T7725] ? bpf_test_init+0x9f/0x140 [ 207.966397][ T7725] __kmalloc+0xa7/0x240 [ 207.970590][ T7725] bpf_test_init+0x9f/0x140 [ 207.975121][ T7725] bpf_prog_test_run_xdp+0x4cd/0x1140 [ 207.980519][ T7725] ? __lock_acquire+0x7d80/0x7d80 [ 207.985593][ T7725] ? dev_put+0x80/0x80 [ 207.989701][ T7725] ? dev_put+0x80/0x80 [ 207.993802][ T7725] bpf_prog_test_run+0x31f/0x390 [ 207.998768][ T7725] __sys_bpf+0x49d/0x890 [ 208.003040][ T7725] ? bpf_link_show_fdinfo+0x390/0x390 [ 208.008452][ T7725] ? lock_chain_count+0x20/0x20 [ 208.013334][ T7725] __x64_sys_bpf+0x7c/0x90 [ 208.017776][ T7725] do_syscall_64+0x55/0xb0 [ 208.022213][ T7725] ? clear_bhb_loop+0x40/0x90 [ 208.026913][ T7725] ? clear_bhb_loop+0x40/0x90 [ 208.031615][ T7725] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 208.037533][ T7725] RIP: 0033:0x7f35a8f9e0d9 [ 208.041992][ T7725] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 208.061626][ T7725] RSP: 002b:00007f35a9f0f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 208.070067][ T7725] RAX: ffffffffffffffda RBX: 00007f35a9225fa0 RCX: 00007f35a8f9e0d9 [ 208.078062][ T7725] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 208.086053][ T7725] RBP: 00007f35a9f0f090 R08: 0000000000000000 R09: 0000000000000000 [ 208.094046][ T7725] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 208.102036][ T7725] R13: 00007f35a9226038 R14: 00007f35a9225fa0 R15: 00007ffe2e6012e8 [ 208.110046][ T7725] [ 208.735782][ T5787] Bluetooth: hci1: command 0x0406 tx timeout [ 209.227117][ T5787] Bluetooth: hci3: unexpected subevent 0x0a length: 150 > 30 [ 209.235473][ T5787] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 209.244832][ T5787] CPU: 0 PID: 5787 Comm: kworker/u5:4 Not tainted syzkaller #0 [ 209.252414][ T5787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 209.262520][ T5787] Workqueue: hci3 hci_rx_work [ 209.267248][ T5787] Call Trace: [ 209.270557][ T5787] [ 209.273524][ T5787] dump_stack_lvl+0x18c/0x250 [ 209.278246][ T5787] ? show_regs_print_info+0x20/0x20 [ 209.283479][ T5787] ? load_image+0x420/0x420 [ 209.288054][ T5787] sysfs_create_dir_ns+0x26e/0x2a0 [ 209.293203][ T5787] ? __lock_acquire+0x7d80/0x7d80 [ 209.298270][ T5787] ? sysfs_warn_dup+0xa0/0xa0 [ 209.302990][ T5787] ? do_raw_spin_unlock+0x121/0x230 [ 209.308239][ T5787] kobject_add_internal+0x617/0xc90 [ 209.313499][ T5787] kobject_add+0x164/0x240 [ 209.318001][ T5787] ? kobject_init+0x1d0/0x1d0 [ 209.322733][ T5787] ? get_device_parent+0x366/0x390 [ 209.327894][ T5787] device_add+0x3fa/0xc40 [ 209.332276][ T5787] hci_conn_add_sysfs+0xd5/0x1e0 [ 209.337268][ T5787] le_conn_complete_evt+0xe9f/0x1480 [ 209.342623][ T5787] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 209.349001][ T5787] ? bt_info+0x180/0x180 [ 209.353292][ T5787] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 209.358981][ T5787] ? mutex_unlock+0x10/0x10 [ 209.363533][ T5787] ? skb_pull_data+0xf0/0x1f0 [ 209.368264][ T5787] hci_le_enh_conn_complete_evt+0x189/0x460 [ 209.374213][ T5787] ? hci_le_remote_conn_param_req_evt+0xcb0/0xcb0 [ 209.380683][ T5787] ? hci_remote_host_features_evt+0x150/0x150 [ 209.386805][ T5787] hci_event_packet+0x7b4/0x1280 [ 209.391810][ T5787] ? __lock_acquire+0x7d80/0x7d80 [ 209.396883][ T5787] ? lock_chain_count+0x20/0x20 [ 209.401775][ T5787] ? bis_list+0x290/0x290 [ 209.406164][ T5787] ? lockdep_hardirqs_on+0x98/0x150 [ 209.411415][ T5787] ? hci_send_to_monitor+0xd7/0x4f0 [ 209.413450][ T7737] [ 209.416634][ T5787] hci_rx_work+0x43a/0xd60 [ 209.418961][ T7737] ====================================================== [ 209.423377][ T5787] ? process_scheduled_works+0x975/0x1600 [ 209.430412][ T7737] WARNING: possible circular locking dependency detected [ 209.430423][ T7737] syzkaller #0 Not tainted [ 209.436148][ T5787] process_scheduled_works+0xa60/0x1600 [ 209.443180][ T7737] ------------------------------------------------------ [ 209.443191][ T7737] syz.2.669/7737 is trying to acquire lock: [ 209.447614][ T5787] ? worker_attach_to_pool+0x370/0x370 [ 209.453134][ T7737] ffff8880b8f37de8 [ 209.460154][ T5787] ? assign_work+0x3cc/0x5d0 [ 209.466041][ T7737] (stock_lock [ 209.471508][ T5787] worker_thread+0xa5e/0xfe0 [ 209.475211][ T7737] ){-.-.}-{2:2} [ 209.479816][ T5787] kthread+0x2fa/0x390 [ 209.483165][ T7737] , at: obj_cgroup_charge+0xed/0x630 [ 209.487744][ T5787] ? pr_cont_work+0x550/0x550 [ 209.491191][ T7737] [ 209.491191][ T7737] but task is already holding lock: [ 209.495250][ T5787] ? kthread_blkcg+0xd0/0xd0 [ 209.500796][ T7737] ffff88807da7da38 [ 209.505483][ T5787] ret_from_fork+0x48/0x80 [ 209.512837][ T7737] (&trie->lock [ 209.517418][ T5787] ? kthread_blkcg+0xd0/0xd0 [ 209.521140][ T7737] ){-.-.}-{2:2} [ 209.525555][ T5787] ret_from_fork_asm+0x11/0x20 [ 209.529012][ T7737] , at: trie_update_elem+0xc4/0xd60 [ 209.533623][ T5787] [ 209.537067][ T7737] [ 209.537067][ T7737] which lock already depends on the new lock. [ 209.537067][ T7737] [ 209.556243][ T5787] kobject: kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 209.560448][ T7737] [ 209.560448][ T7737] the existing dependency chain (in reverse order) is: [ 209.560458][ T7737] [ 209.560458][ T7737] -> #1 [ 209.574323][ T5787] Bluetooth: hci3: failed to register connection device [ 209.583244][ T7737] (&trie->lock){-.-.}-{2:2}: [ 209.583276][ T7737] _raw_spin_lock_irqsave+0xb4/0x100 [ 209.605975][ T7737] trie_delete_elem+0x94/0x630 [ 209.611302][ T7737] bpf_prog_4578c34332490223+0x2a/0x46 [ 209.617308][ T7737] trace_call_bpf+0x333/0x6c0 [ 209.622529][ T7737] perf_trace_run_bpf_submit+0x7a/0x1c0 [ 209.628632][ T7737] perf_trace_lock_acquire+0x342/0x400 [ 209.634720][ T7737] lock_acquire+0x3ef/0x420 [ 209.639775][ T7737] percpu_ref_put+0x35/0x180 [ 209.644911][ T7737] __refill_stock+0x12a/0x3d0 [ 209.650154][ T7737] refill_stock+0x19e/0x450 [ 209.655217][ T7737] try_charge_memcg+0x1281/0x17c0 [ 209.660797][ T7737] obj_cgroup_charge+0x36e/0x630 [ 209.666283][ T7737] slab_pre_alloc_hook+0x2e2/0x300 [ 209.671947][ T7737] kmem_cache_alloc_lru+0x4d/0x2b0 [ 209.677616][ T7737] __d_alloc+0x31/0x710 [ 209.682311][ T7737] d_alloc_pseudo+0x1d/0x70 [ 209.687350][ T7737] alloc_file_pseudo+0xe4/0x210 [ 209.692743][ T7737] anon_inode_getfile+0xc5/0x1a0 [ 209.698232][ T7737] __se_sys_perf_event_open+0xeed/0x1c60 [ 209.704410][ T7737] do_syscall_64+0x55/0xb0 [ 209.709367][ T7737] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 209.715802][ T7737] [ 209.715802][ T7737] -> #0 (stock_lock){-.-.}-{2:2}: [ 209.723041][ T7737] __lock_acquire+0x37ef/0x7d80 [ 209.728438][ T7737] lock_acquire+0x19e/0x420 [ 209.733486][ T7737] obj_cgroup_charge+0x10a/0x630 [ 209.738974][ T7737] slab_pre_alloc_hook+0x2e2/0x300 [ 209.744638][ T7737] __kmem_cache_alloc_node+0x53/0x250 [ 209.750560][ T7737] __kmalloc_node+0xa6/0x240 [ 209.755697][ T7737] bpf_map_kmalloc_node+0xbc/0x1b0 [ 209.761355][ T7737] trie_update_elem+0x172/0xd60 [ 209.766752][ T7737] bpf_map_update_value+0x64b/0x710 [ 209.772575][ T7737] generic_map_update_batch+0x5de/0x800 [ 209.778662][ T7737] bpf_map_do_batch+0x3f2/0x600 [ 209.784058][ T7737] __sys_bpf+0x381/0x890 [ 209.788850][ T7737] __x64_sys_bpf+0x7c/0x90 [ 209.793826][ T7737] do_syscall_64+0x55/0xb0 [ 209.798792][ T7737] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 209.805236][ T7737] [ 209.805236][ T7737] other info that might help us debug this: [ 209.805236][ T7737] [ 209.815484][ T7737] Possible unsafe locking scenario: [ 209.815484][ T7737] [ 209.822947][ T7737] CPU0 CPU1 [ 209.828338][ T7737] ---- ---- [ 209.833716][ T7737] lock(&trie->lock); [ 209.837899][ T7737] lock(stock_lock); [ 209.844426][ T7737] lock(&trie->lock); [ 209.851036][ T7737] lock(stock_lock); [ 209.855039][ T7737] [ 209.855039][ T7737] *** DEADLOCK *** [ 209.855039][ T7737] [ 209.863196][ T7737] 2 locks held by syz.2.669/7737: [ 209.868236][ T7737] #0: ffffffff8d131da0 (rcu_read_lock){....}-{1:2}, at: bpf_map_update_value+0x408/0x710 [ 209.878194][ T7737] #1: ffff88807da7da38 (&trie->lock){-.-.}-{2:2}, at: trie_update_elem+0xc4/0xd60 [ 209.887552][ T7737] [ 209.887552][ T7737] stack backtrace: [ 209.893451][ T7737] CPU: 1 PID: 7737 Comm: syz.2.669 Not tainted syzkaller #0 [ 209.900758][ T7737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 209.910829][ T7737] Call Trace: [ 209.914133][ T7737] [ 209.917088][ T7737] dump_stack_lvl+0x18c/0x250 [ 209.921789][ T7737] ? load_image+0x420/0x420 [ 209.926322][ T7737] ? show_regs_print_info+0x20/0x20 [ 209.931550][ T7737] ? print_circular_bug+0x12b/0x1a0 [ 209.936870][ T7737] check_noncircular+0x2fc/0x400 [ 209.941838][ T7737] ? print_deadlock_bug+0x5d0/0x5d0 [ 209.947062][ T7737] ? lockdep_lock+0xf5/0x230 [ 209.951690][ T7737] ? _find_first_zero_bit+0xd6/0x100 [ 209.957098][ T7737] __lock_acquire+0x37ef/0x7d80 [ 209.961993][ T7737] ? verify_lock_unused+0x140/0x140 [ 209.967216][ T7737] ? verify_lock_unused+0x140/0x140 [ 209.972426][ T7737] ? perf_trace_lock+0xfc/0x3b0 [ 209.977285][ T7737] lock_acquire+0x19e/0x420 [ 209.981801][ T7737] ? obj_cgroup_charge+0xed/0x630 [ 209.986838][ T7737] ? read_lock_is_recursive+0x20/0x20 [ 209.992223][ T7737] obj_cgroup_charge+0x10a/0x630 [ 209.997170][ T7737] ? obj_cgroup_charge+0xed/0x630 [ 210.002212][ T7737] ? get_obj_cgroup_from_current+0xd4/0x280 [ 210.008112][ T7737] ? __lock_acquire+0x7d80/0x7d80 [ 210.013146][ T7737] ? obj_cgroup_charge+0xed/0x630 [ 210.018179][ T7737] ? mod_objcg_mlstate+0x320/0x320 [ 210.023297][ T7737] ? percpu_ref_tryget+0x15/0x180 [ 210.028341][ T7737] ? get_obj_cgroup_from_current+0xd4/0x280 [ 210.034245][ T7737] slab_pre_alloc_hook+0x2e2/0x300 [ 210.039377][ T7737] ? perf_trace_lock+0xfc/0x3b0 [ 210.044235][ T7737] ? bpf_map_kmalloc_node+0xbc/0x1b0 [ 210.049542][ T7737] ? bpf_map_kmalloc_node+0xbc/0x1b0 [ 210.054836][ T7737] __kmem_cache_alloc_node+0x53/0x250 [ 210.060225][ T7737] ? bpf_map_kmalloc_node+0xbc/0x1b0 [ 210.065524][ T7737] __kmalloc_node+0xa6/0x240 [ 210.070131][ T7737] bpf_map_kmalloc_node+0xbc/0x1b0 [ 210.075266][ T7737] trie_update_elem+0x172/0xd60 [ 210.080139][ T7737] bpf_map_update_value+0x64b/0x710 [ 210.085352][ T7737] generic_map_update_batch+0x5de/0x800 [ 210.090911][ T7737] ? rcu_read_unlock+0xa0/0xa0 [ 210.095692][ T7737] ? __fdget+0x180/0x210 [ 210.099943][ T7737] ? rcu_read_unlock+0xa0/0xa0 [ 210.104720][ T7737] bpf_map_do_batch+0x3f2/0x600 [ 210.109584][ T7737] ? bpf_lsm_xfrm_policy_delete_security+0x10/0x10 [ 210.116103][ T7737] __sys_bpf+0x381/0x890 [ 210.120353][ T7737] ? bpf_link_show_fdinfo+0x390/0x390 [ 210.125742][ T7737] ? lock_chain_count+0x20/0x20 [ 210.130607][ T7737] __x64_sys_bpf+0x7c/0x90 [ 210.135029][ T7737] do_syscall_64+0x55/0xb0 [ 210.139539][ T7737] ? clear_bhb_loop+0x40/0x90 [ 210.144226][ T7737] ? clear_bhb_loop+0x40/0x90 [ 210.148916][ T7737] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 210.154822][ T7737] RIP: 0033:0x7f35a8f9e0d9 [ 210.159242][ T7737] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 210.178854][ T7737] RSP: 002b:00007f35a9f0f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 210.187275][ T7737] RAX: ffffffffffffffda RBX: 00007f35a9225fa0 RCX: 00007f35a8f9e0d9 [ 210.195252][ T7737] RDX: 0000000000000038 RSI: 0000200000000640 RDI: 000000000000001a [ 210.203230][ T7737] RBP: 00007f35a9035024 R08: 0000000000000000 R09: 0000000000000000 [ 210.211204][ T7737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 210.219183][ T7737] R13: 00007f35a9226038 R14: 00007f35a9225fa0 R15: 00007ffe2e6012e8 [ 210.227167][ T7737] [ 210.816635][ T5787] Bluetooth: hci1: command 0x0406 tx timeout [ 211.625015][ T5787] Bluetooth: hci3: command 0x0406 tx timeout