last executing test programs: 10.898022438s ago: executing program 1 (id=699): r0 = openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000001180)='/dev/input/mice\x00', 0x1a1382, 0x0) write$auto_mousedev_fops_mousedev(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_tcp_metrics(&(0x7f0000000c00), r1) sendmsg$auto_TCP_METRICS_CMD_DEL(r1, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000280)={0x24, r2, 0x901, 0x70bd27, 0x25dfdbfb, {}, [@TCP_METRICS_ATTR_SADDR_IPV4={0x8, 0xb, @private=0xac14140a}, @TCP_METRICS_ATTR_ADDR_IPV4={0x8, 0x1, @remote}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x40) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x7, 0x800008000) close_range$auto(0x2, 0x8, 0x0) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) newfstatat$auto(0xffffffffffffff9c, 0x0, 0x0, 0x5000) ioctl$auto(0x3, 0x40505330, 0x38) readv$auto(r0, &(0x7f0000000040)={&(0x7f0000000000)="37dc518384a6d7962a0d064589918d6595779aef0f5d09ddf9b696d9f3b38f20b0355db4ddc22c994c42ce0eeddbdbc2c90ca96ca9ba685536abf9", 0x8001}, 0x9) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/system/cpu/cpu1/hotplug/target\x00', 0x102, 0x0) sendfile$auto(r3, r3, 0x0, 0x1f8c) 8.768732349s ago: executing program 1 (id=704): r0 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000001640)='/proc/self/mem\x00', 0x401, 0x0) write$auto_proc_mem_operations_base(r0, &(0x7f0000001680)="a7", 0xfffffc96) 8.351609195s ago: executing program 1 (id=708): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0x27, 0xdd913dd2c3a25f3a, 0x3e) mmap$auto(0x200000, 0x7, 0x1, 0xeb1, 0x401, 0x8000) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0xc0000, 0x0) ioctl$auto(r0, 0xc0184d03, 0x7) connect$auto(0x3, 0x0, 0x58) prctl$auto(0x9, 0xfffffffffffffffc, 0x0, 0x1, 0x0) r1 = socket(0x22, 0x3, 0x0) bind$auto(r1, 0x0, 0x5) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000040), 0x3, 0x0) mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x2, 0x8000) sysfs$auto(0x5df, 0xb, 0x200000000000029b) lsm_list_modules$auto(0x0, 0x0, 0x0) r3 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f00000001c0), 0x80100, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r3, 0x40146f2c, 0x0) mmap$auto(0xf500000000000000, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r4 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, 0x0, 0x40400, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r5 = openat$auto_tomoyo_self_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) read$auto(r4, 0x0, 0xa) write$auto(r5, 0x0, 0x9) select$auto(0x7, 0x0, &(0x7f0000000100)={[0x9, 0x5, 0x0, 0xfffffffffffffff6, 0x7, 0xfffffffffffdffff, 0xdffffffffffffff8, 0x2, 0x0, 0x10000005e58296f, 0x6, 0x7, 0x3, 0x200, 0x1, 0x9]}, 0x0, 0x0) ioctl$auto_KVM_CHECK_EXTENSION(r2, 0xae03, 0x51) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r6 = socket(0x11, 0x3, 0x9) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) sendmmsg$auto(r6, &(0x7f0000000640)={{&(0x7f0000000000), 0x5ae, &(0x7f0000000100)={0x0, 0x49}, 0x5, 0x0, 0x5, 0x1}, 0x1}, 0x801a000, 0xff) write$auto(0xffffffffffffffff, 0x0, 0xff) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/cgroup.threads\x00', 0x80302, 0x0) 7.877322902s ago: executing program 1 (id=712): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f00000009c0), 0xffffffffffffffff) sendmsg$auto_IPVS_CMD_SET_SERVICE(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002a80)={&(0x7f0000002b00)={0x28, r1, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@nested={0x8, 0x5, 0x0, 0x1, [@nested={0x4, 0x23}]}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x4b}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4050}, 0x4000004) r2 = openat$auto_btrfs_ctl_fops_super(0xffffffffffffff9c, &(0x7f0000003880), 0x280, 0x0) ioctl$auto_BTRFS_IOC_FORGET_DEV(r2, 0x50009405, 0x0) 7.525749613s ago: executing program 1 (id=716): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/usbip-vudc.0/usbip_sockfd\x00', 0x103041, 0x0) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1, 0x5, 0x1, 0x0) prctl$auto(0x1000000003b, 0x1, 0x4, 0xd73, 0x7) shutdown$auto(0x200000003, 0x2) recvfrom$auto(0x4, 0x0, 0x101d0, 0x3ffffd, 0x0, 0x0) 6.607622092s ago: executing program 3 (id=719): openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) getrlimit$auto(0x3, 0x0) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ram1\x00', 0x6281, 0x0) ioctl$auto_BLKZEROOUT(r0, 0x127f, 0x0) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r1, 0xc0045002, 0x0) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f00000011c0), 0xa2741, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0xe6e43, 0x0) r3 = setfsuid$auto(0xee00) r4 = setfsuid$auto(0xee01) setresuid$auto(r3, r4, r3) ioctl$auto_BLKFLSBUF(r2, 0x1261, 0x0) 6.330476285s ago: executing program 3 (id=722): socket(0x11, 0x80003, 0x1d12) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) setsockopt$auto(0x400000000000003, 0x29, 0xd3, 0x0, 0x567) r0 = socket(0x2, 0x1, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r2) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x0, 0x100000000008000) ioctl$auto_KVM_CREATE_VM(r1, 0x8138ae83, 0x0) r3 = openat$auto_binder_features_fops_(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/binderfs/features/freeze_notification\x00', 0x8000, 0x0) mmap$auto(0x4, 0x6, 0x101, 0xbadb, r3, 0xae) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2b}}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800008}, 0x6, 0x20000000) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/fail-nth\x00', 0x2, 0x0) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/fs/jbd2/sda1-8/info\x00', 0x2, 0x0) read$auto_proc_reg_file_ops_compat_inode(r5, 0x0, 0x0) write$auto(r4, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) close_range$auto(0x2, 0x8, 0x0) 6.151895973s ago: executing program 2 (id=724): r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/pci/devices\x00', 0x10b402, 0x0) pread64$auto(r0, 0x0, 0x8100000041, 0x413e) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x0, 0xfffffffffffff000, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xd4, 0x8000) r1 = open(&(0x7f0000000040)='./file0\x00', 0x2900c0, 0x1) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r3 = setfsuid$auto(0xee00) setreuid$auto(r3, 0x0) shmctl$auto_SHM_INFO(0x9, 0xe, &(0x7f0000001240)={{0x2, 0x0, 0xee01, 0xffffffff, 0x3, 0x100, 0x401}, 0x8, 0x80, 0x4, 0x9, @raw, @inferred=0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000180)="45d135b0021d43bd2be11e0d3347ba6a50800a8d9fbb707f099dc0670dbd48d2ecbf1db5bdffe68d23f3cd128ce3e76e26a51c60aae2866f1a1367100d9b99e485a6b191c483529f276dc01177be923b569e0eaffe45e6afccdda28d83e4f583d2b5bc016f7b7cd9", &(0x7f0000000240)="536a0b86ff19de6e880e1b3972b9344701c80515ff20b4e2966f493774e427ecc295c93b593a834853d3b183dfd2259b2d337353789958efac7dc9ce38629ee7dd7cf75d6ed61994fa166c470154a9d946f9eec967745bb89b67eb8e97968e895fa0907fca1c094ffc4ba388adb27e37fdb62711e9a4130086c0d5e8aa5f485b69607d8196f2cac0b71480264646a316ddc0a4b85e2a82943e524e319b26ae596295c3b4a5a8004ab7ef34c75dbb532b8059dc1e4af14cb9405f86212df46e5543772b82cfcaa9e09bb1b7a9ade9c4ac9aca162a6b3cb2bd294875913fdc9f28ee05a3dd57ab53c94d0c1c4ebf5d9b4c43794d0bfa9d12aa92d6f3659d098248ad6b9f4d6078a8742f2be0bf144e0ce51bbca7c4fad8ab6e3cc0333fb039006a601ca11da3dd2f800b9a7f7718210943cb4c2cd86ba3f61ede1439fd165ac6de34e81b4056e20b3d19e14bace52b52b21c7573cd9280d38cbd4b89e65064383875d908b8a3749a5077c64de0c93b6e105dffc38e7485748a035d533afca9f2c7153bef8f372bd3624542065122b5009e93da67a42701eb12397102f5c5849252ee6f5e77385245116753593fce6b87524a8fd09f519960e8a0940785da8dd50a1323ec50c63226f21f998ffaf1028313a56566e541adefe33748b05ed6b682820d20d2786da53d6df6c21563f721b58cd5fbdfbd459d7d8979502a5f0beb3fba5a76c108764b1e1d37319264e4a7a742afba29e8204c38c62aed2bc64c3741daf8a7a08e33217dc7cfe7a3b9afca4c677a6eb83b012984e112cf1dd2163f8eca55430abe14c14104cedc591face338686cb7cc10c32897c73e885dc886c409a51c28fc73e771ef5b9ad985fba085ab3a017aee08d9575631bfc1fec1c4f12830a6263a1dc8f8cec85db5e0320c22451ffa898e67288f1a7fe00e103eb4c19cde1b8a38d57a4095e529a5b804496e5dd94cdc39c5eb930ae17953e1f1d65cf4e6f3da0f9bbc5be95d33441cb53859c4d2c13b35d6f5da32adb2f4823a5a395ded7422e6fcd80c6da6f7b76ff7a579cc6042b2d931a3ef397cc044f3b08aa57a172198b0856545e73478ae18871b5e16bf1336940bf9c2045e7cbe52bf5852fceabadb3df8b2c92cd377e197d8b011e4dca40fd20ccae5dea7104578e2954ef33b6d1d4b0fe755f2d1ee2e1ddc2fb28cd243a34e055c266cd4dac141f7292e2be5d40b042d896c9dc7f31f48721793aa2462c3edf74b92e02c1ccd183535a0ef0c56a39792e509d762cb3e3916e3ce35f37cd2ffa5c0be17addd96b3f78dd2007a0716cae54a33cc34612bbbf6690673b9548f58cb554dcc5331b28c096881a7d3b25494dc3a85e382a7c633ab2c446d52e5b768832131e5ecba877e185f2a21da0eb0ca6d02c83d77f0b846a5ef5bd8f1c7dbc70efec31fa617faad347b38ccbacfa1291183e901a1cf1a84c11b11f7c5a7f138011ec62d88c88033f314f06929e300875b3e20b524f80cb943c2db66a24f20c07fa5a1ad641b28406d8e3293f2fc77883fb10853d56a25a96f044adac8374cdb91ac64df6c22188e29c86e6de74805abc4507a43a3056c25269ed071dba0fdf4257ac132c7b41ee595aa586da3cb02512018c85aaf13bf87c80082086a7b0edf99bb69eae932e9104f5672988b368791136702c2e58936b65fdac63b6c31d4278d0de1fb0bbdbff441ba73ac90e250023f3c45a9662cb6ae2d8e14bba94ea15c6e3391b7a344a688f89c547413781fd4317ceffa42a29bba8b3aa5491b639d18f3fd1d481d8600f7fa678c39f47b00b0414e94a9484cd0fef6a3d9111897096714a48eca7af4b00b5a1e10f7eaa0b68cf55c072361cce5366c4cd9c32b6519d77c3570cd67197a46137d1fc9dbc5361d998b1348a41c8a1fe5e65a93d6a4d6a82b2fea8414195ed633157f62fb60e7d240d69499581a3a9fa988de2e811ddc11a48754d8c062582c7e799bba2bb6ddf5a6eea795a9a94bf696a78e3412b39e0e1c06f7706bf58ca21c16f3bd7588c71ec6eeae3bd8184fc54002e344dc2e858ced39d3d69da7cb2edf8e06ab0f783602b0faaba8ee2a06320bd565980e53cf474dd21c71c63445ece3cd7e20124ce53442770bf482e27dbc6bc6d248f0e578c495ef939dd7d95592485e3b1f51322e826226c952aa4941f76101db458d83d3cb068f1be7dafbd9d967784bacc36c2ce5a29a88117240285b389e8b62dca2093aad2642f4dee84bfd95966db3d1db2f86d94573e8bd205f20366e551091b68c441c5daaba5f9fc9bf9b1db2156377cee72c14308b532f9d1ff2440c4409ed99e9f007041c62d84e2db499f1081181a5384fc43c78d0cc1b9cee5ae03d0a4c775c9b489b0bb0d2e9b885c93a80318a3bdec0245accda919efba667f1bbf4c26358cb2bcd1b5ef1a6798eaf6fca8ce1d94adc677d77dc09cdf2ccb0ffe24c0c6c5b7c722c735d0d109bdc6442086411a5f060162dcb8486bc0dec65d5e99b212b7ff0ac62f5266bf2cd13dd5f5d7f77768b2c97b278260e90b56d0e99a8512659bb904322d50f693d83b2d4ae6b27dd8512074b39821491a906687b34f4fa65c99a1834512b5518c920f88d139fdbfc763ab69d21859679a2d6383be089176ef32283f68d906fbe185a87c2a7498c9167cd93b006f306309ebf63742fcbac6cdfe28bbbdeaa80033af83e023cf7e4bf7a8e45f82a65e9480eba7a8e5d1c6d2a59216ec092a4914b132e190e23bb02406911e8ae9040273bf1cf9fdf5c11240733660daaa86ee53867d11125c9ed1cdc94a42f5fc5253698904f016dddf0e869f37ed130403dd934364b6b686b2b982902134a2407d61ca803a6426a9955bc0220c1f6578798c11028d924df234b71633ff26e9ee73b0d763133cff6213b8b040364c5ff6e4f20f23c6f4474baa92088280ab53bec11ff159b4958176cbcbef725d3e423bdffb75a7d8dd4e69c4641e0990b112428d30dd3d534e7cad5038453c00b29493af85eec0cea34735b31bc45f155494d4937d9b0b6795c620834cd605d6e5dae98e1eee0090538ae21f238d851817d13cd51eba85f7297ca651899edfa28b488ec084e3445a451e8422ef89db13367e1a850c5f16c499d6f1fb4728f85866e9369f0dff1fb8dec52f4bf89f2ef5f7a3e36fc9d835859161d6ad3dbb5c585ab337b28fe84c545e9f375ef728da142430ea91109f4d025a64ba6757710869e5ce62fb8a80560896f7deacadff7e0e0e5502361295f0ccf40169b170dd4bb0b1d3cb9452cb4efc0e23fc1ad1d654ee0cc42764a58ede40920435606b68de4a57ce2ae491e10b178ad9a20d0cd64e786ea11ef4186736869f3aacf37686c6089b773194e3f00a0e8124727557bfbdeeda3dbc26106eea17af9ce1cac58150181996c2258a11734684e0acd3012527264ba9630ad7298e671806ca31c5801726ab5ce3f2369b4c95700aa6940141027b0c5d60d8382f00a7edf3172599debc0342af472180edd4bf40b44b9ac46d95d1836748670207db05e011b1da12b68d57b1b59e9b700d87c975c52154e9355440b7dd69964700d3f40d44610e31acbaf0f02d5b33a5d1d23ea33c907a8b6e1216e4ced2657f49ad40068cb8f0fd2125eee8b8ebf099990311df40a03b8f4a279ea6ae362efdebd04f02dbf30a91710e420110c7f507f8f3850718b6eef30b8a12ec983b9cbf222b7f3e246f0dcd3ed26dedd71aab052ae4c8c4916f5419ba85ece289fae27c4713370df3483b3597f5fa4ec112ae254425ee5eeb3773d35801fb7bd857d226e3d608c80bbc78c27382657887796e707f025ba581cb3e4fdf20d848edda24cf63ee9b121d6aeee94d51c51fa00ce6c6f8fdb3ff23b632e9f8e400981732c4bc8c556a8571379860ca348bac7cf5675502a83e90d230e557a7de9528ee9aad4605f4b1362c26baf3c8d7df89369dfe798b6b2902816750880cbfe16f1ab25782bc966c059537e79383c679001b6dd0649ef27c1525d8b1802c272d92cc28a5d8df2ea473b5fdede6eb927251ee50b6074a402eee3a3afa237b853272fba1e89454fb4de9c1700e6ffb656fd14f93c61d052ab2770cc11cfd4b3ce0b2f01d2d3105e7d8ca2e52e031656b37c0ae2e5dadbb43115afa0e1a018a85f2be6635c83cf394c7e2944b92dca19259c996ccf9b321fb50d27a18c95f10ebe106978b81c5a6f5a186428541b505d7cc5f7a82ce24d9726fbf8482b29ea72c3bf2dbc62d55a1109d40d0ee7bb43a010da75a4cbce63fc2da5b225438cd97e080250f87dc80d369c0455b03f6757ece79f21ce0c148929b64bbdcc0280bf643d43cea0ed61d8a33492c29a6f12f34000290b63c3345577bd720512ffc55395549e048826fe83f94e29dd6fffb681d73d8d3215798b360a89479a51ad7134b2c4a4fbb84a7b6eb4e4d634f386c96ee6c855fde2f57ba66839e8a8a3c0b7c72125a3ea3b5130fca55214f3ffdce4e132a1599aee0a6c64417c7297a69e22a58f411d5f6cd1c497e0a45ed5df4af9b1fcc8713865b4db130889bd0a9833eae66c48ef1f5237c1bdea129754177d5f8217ed9c8113290bcaa7fca32f5a69f0c4af2ba465a6cff0538007052f7bfb84a94a16b0d1589fb618b9f7f787844b1d3c6358cd60f3c63a0cc389ae607ab16bc400d69179e6e084b933f1f42109943c596570767cc31a035272dad8216bba9656dbb637449d0c5df1b3e326cd25c80fa1344a829c38ae8cf9ac2014867f990b699b4f1c6e5afd762907e35b4decc579336b2acc76ddead9ea811deb090600eafeb1ab570eda9fe33120440cedaafc07956dfdb901235a21450d29933c271df8f32fb12759c8419a202466a5727e18dea6540bce1b254c985f4e89b7d175850cdbcdb460036bcd46689ace8801848281b10424f82b56eef92bc7e726d50a7e33a03c695de85cb408146811836466e6511351231c9d54e6396948339f895d5d7f46772b35864b80aba48496b7a6111c142c0976fd132edb6ff06438213c41b2163761fff2392f8ef959c1d1b04fec0fa37a83103f0a32033bf4134c561c7525e499d52b681ea8a5679a796ed3214c95a509199be3f4a672676efa88f035b5e10cafb10ec026670612892751d339c90b738a729ea014eb230badc50b390b8c531d661b0a4b9a83f17402a1cddbb70b87bf4f3cf57af8fb3c788766b207a75dbcef489596091cc558b099037f2fa63bec708d48cdb6af7fc6c5946e4d4414713599b5e3e13ee494b082a2e89623097fe7b9bfa071b0184ee73bfa4d71037c884ef068795a21da20d2956265b090ca95c14655c5e05398398cb0ad677d0483404ac884b5aabd0ba8c04a7be6bbcb45277f030f88958ba2580f188c49e36c97f00acd10f57aae62c70aee777a2242b9702b98827f511f4471f14ce36c5926c8cd4b92ba671f9152333dcde2f0b67bb08665e994c57a910eee99f9e8a27e9e4e1dd13eef20ca6d3b945d8b2066f2107581d21d6f087e6eb3eda212d512d5b14deb35d07361031887f46fdc3e9eb92c42a0c9ad82d791860fb48643e6dd79ee4672a2dd9b0574391804582e2c6a8d7f2d6f6c5d2493183241cb51525cb91805ae3f47550cdd643b11adf6efcc77ca9a30daea6804e0af581bcf6e9b03c0d49f2a096ae56a6af7808bb831185b3f595ead7890e35e65335c44354117a28cf8ecb7e78eb57507ed3a1bd9d4acd4140cef829b1ff01c8f83c6e357401f99049e8d40ca345bd0c3e998f76f9f78b35ad2e4f11a71bcd2"}) r5 = waitid$auto(0x9, 0xffffffffffffffff, &(0x7f00000012c0)={@_si_pad}, 0x6, &(0x7f0000001340)={{0x2, 0xfee7}, {0x8001}, 0xbee, 0x1c000000, 0x80000000, 0x5, 0x6, 0x2, 0xfffffffffffffffe, 0x2, 0x1, 0x5, 0x1866, 0x6, 0x1435, 0x76756516}) r6 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) r7 = ioctl$auto_NS_GET_TGID_IN_PIDNS(0xffffffffffffffff, 0x8004b709, &(0x7f0000000040)=0x5) prctl$auto(0x3e, 0x1, r7, 0x1, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000000580)={{@inferred=r7, 0xf0ee, 0x20009, 0x3, "790eaa833e6fc65b6b3cf705001900ffff8eac2cdafc1f64010043eeb0b0530300000000000e00", @raw=0x1}, 0x4, 0x966, 0x3, @raw=0x404, @integer={0x800000000000400e, 0x2000000b752, 0x1000000000001}, "6cc1294d63a4f1b4285854c5368de438f8cc142eff0000003373a1183bedbd31b642b4059b078fa181c61c329794e5381121c760cb9611c78e6947a99807bcc1"}) sendmsg$auto_NL80211_CMD_GET_COALESCE(r1, &(0x7f0000001680)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f0000001400)={0x24c, r2, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@NL80211_ATTR_KEY={0x235, 0x50, 0x0, 0x1, [@generic="2c8ce90e97338ca84fafa90d7e2c6bc69af09698250117009eac449eb4aa5589f8f345ce1311d20c802f9b4e7ba8cdd21afbcae8660b3a0c329858352be4637c7c4a280612c821516a4c7654f86c82c14e7e70448cc45e143a4f684a68baf98f28c3594b96497a37aa4cff454cb01dfec5773cd81b557dac0d5da89e7055bbc76ef194be7540a0b254425a0e276a3d545c41674504976869d3cceba457dd2c6e52e86b0a69678c4523bf2117e960918b713bfaceee73c9027e150dfd1d31acaa58ca0de4abcd10d7", @nested={0x93, 0xd9, 0x0, 0x1, [@nested={0x4, 0x8a}, @typed={0x8, 0x2b, 0x0, 0x0, @uid=r3}, @typed={0x8, 0x75, 0x0, 0x0, @fd=r0}, @generic="927bf3b898bbe8cc036971e42a35cee317f2ef133598f6d63412fd722950727a0862e38f9c920ecad90d26f5bf2ae5f43ba4d781d49f23fdf5ba5780b461079674fc3f48de3e386725412e", @typed={0x14, 0x2b, 0x0, 0x0, @ipv6=@mcast1}, @typed={0x13, 0x137, 0x0, 0x0, @str='/dev/sequencer\x00'}, @typed={0x8, 0xa5, 0x0, 0x0, @uid=r4}]}, @typed={0x8, 0x10b, 0x0, 0x0, @pid=r5}, @nested={0x14, 0x7e, 0x0, 0x1, [@nested={0x4, 0x89}, @typed={0x8, 0x12, 0x0, 0x0, @pid=r7}, @nested={0x4, 0x86}]}, @generic="cfd3136792708f14b6937dcb0afa986b293d9c318c6e8fb38aac1779c687219b47e2527fc5feaca263b760aa0006c42717b1e35b3faf69dd14132f8876b2a3e8b0671e24d1436993ffeb9da2eb33d8dd8a3c572dc828ed020d1e89088e966610ac033fc9d51eb79d239f3e542c11a66f609e619dd17a59e23beef62d9d4b9a7e8a", @nested={0x30, 0xb1, 0x0, 0x1, [@nested={0x4, 0x30}, @generic="4d849aec3f299d2edc621a2e6d8595e3bbc257c7858bb943b6576fd135d785c5", @typed={0x8, 0xc0, 0x0, 0x0, @u32=0x1}]}, @typed={0x8, 0x98, 0x0, 0x0, @fd=r0}]}]}, 0x24c}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) msgctl$auto(0x0, 0x3, 0x0) r8 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r8, 0x107, 0x12, 0x0, 0x8) r9 = pipe2$auto(0x0, 0x80) ioctl$auto(r9, 0x5761, r9) close_range$auto(0x2, 0x8, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x42, 0x0) openat$auto_drm_edid_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/dri/0000:00:02.0/Virtual-2/edid_override\x00', 0x10400, 0x0) socket(0x11, 0x3, 0x9) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) 5.161312577s ago: executing program 2 (id=726): socket(0x18, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r1, &(0x7f0000000040)='//\xf2\x00', 0x80000000) write$auto(r1, 0x0, 0x2) getrlimit$auto(0x3, 0x0) fdatasync$auto(r1) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) ioctl$auto_BLKZEROOUT(r2, 0x127f, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000380)='/dev/snd/controlC2\x00', 0x400, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/035/001\x00', 0x1102, 0x0) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xc8d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\xc6\x00\x89\te\x8d\a\xfb\\n\x89C:\x84D\x10u\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k', 0x100000a3d9) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x8ea182, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) init_module$auto(0x0, 0xffff9, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x8000000000000000, 0x15) madvise$auto(0x0, 0x2000000080000001, 0x3) r3 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$auto_dma_heap_fops_dma_heap(r3, 0xffffffffffdffe00, &(0x7f0000000140)=';') mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0\x00'}) close_range$auto(0x0, 0xffffffffffffffff, 0x2) socket(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 4.99779855s ago: executing program 3 (id=727): openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0) mmap$auto(0x0, 0x400008, 0x200, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r0 = openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, &(0x7f0000000600)='/proc/thread-self/clear_refs\x00', 0x2, 0x0) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB=']'], 0x1ac}}, 0x40000) recvmmsg$auto(r1, &(0x7f0000000140)={{0x0, 0x3, &(0x7f0000000080)={0x0, 0x400}, 0x5, 0x0, 0x2000000200002, 0x8}, 0x803}, 0xfffffff9, 0x10, 0x0) write$auto_proc_clear_refs_operations_internal(r0, 0x0, 0xffffff4b) write$auto_proc_mem_operations_base(0xffffffffffffffff, &(0x7f0000001680)="a7", 0xfffffc96) 3.942819192s ago: executing program 3 (id=731): r0 = socket(0x10, 0x2, 0x14) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x22, 0x3, 0x3b) mmap$auto(0x0, 0x4005, 0x2, 0x40eb2, 0x401, 0x300000000000) r2 = socket(0x10, 0x3, 0x15) sendmsg$auto_NFSD_CMD_THREADS_SET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c0000001400c7", @ANYRES8], 0x2c}}, 0x41) write$auto(r2, &(0x7f0000000000)='-\x00', 0x2fb) r3 = openat$auto_bch_chardev_fops_chardev(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) ioctl$auto_BCH_IOCTL_DISK_ONLINE(r3, 0x4010bc06, &(0x7f00000002c0)={0x380, 0x0, 0xa}) ioctl$auto_VHOST_SET_VRING_CALL(0xffffffffffffffff, 0x4008af21, &(0x7f0000000200)={0x7, r2}) r5 = syz_genetlink_get_family_id$auto_wireguard(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$auto_WG_CMD_GET_DEVICE(r4, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0008000700000000001400020076657468315f746f5f62617461647600080005000700000000000000000000000000000000d2c3c99a505afbbe35baf66d151492564aa37e51a7512cd7ee78c43cab36b198cfdef43e221349566831467e893d5306a014ba590d77361ca65479a4c549b021e347fcc373f96e7c986cc0839c2776bbff614de30fc76db5902132cd699c6396d2fb429f503bfe295eabd649a79723148f5da8e7ba2c069f58f8551d847a1f318e3e"], 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x40041) pread64$auto(0xffffffffffffffff, 0x0, 0x206, 0x14a) write$auto(0xca, &(0x7f0000000000)='\x04\x02\x00\r\xfb\xff\xf6\xdd\x90\x806\xc8\xbe\x94\xf2\xa2', 0x2d9) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x20000045}, 0x24000044) write$auto(r0, &(0x7f0000000100)='\x00', 0xfffffffffffffffa) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/platform/vhci_hcd.5/usb20/20-0:1.0/usb20-port7/state\x00', 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb4, r4, 0x8002) madvise$auto(0x0, 0xffefffffffff0001, 0x5) mbind$auto(0x0, 0x100000008, 0x2100000000, 0x0, 0x6, 0xfffffffe) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x40, 0x0) madvise$auto(0x110c230000, 0x8031ca, 0x9) r6 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) bpf$auto(0x7fffffe, &(0x7f0000000000)=@test={r1, 0x90000005, 0x9, 0x3, 0x7e, 0x7, 0x4, 0x1, 0xffffffff, 0x8, 0x1, 0x2, 0x0, 0xaed, 0xd}, 0x8) r7 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r6, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d7) r8 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) sendmsg$auto_ETHTOOL_MSG_PAUSE_SET(r7, 0x0, 0x24000000) write$auto(r8, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) 3.851250035s ago: executing program 1 (id=732): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x40081, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) listen$auto(r0, 0x81) socket(0x1, 0x800, 0x0) bind$auto(0x3, &(0x7f0000000040)=@can, 0x6a) madvise$auto(0x0, 0xffffffffffff0005, 0x19) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x2440, 0x0) r2 = ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/platform/dummy_hcd.7/usb8/power/level\x00', 0x2881, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f00000002c0)="ddc4", 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r4, &(0x7f0000000040)='//\xf2\x00', 0x80000000) write$auto(r4, 0x0, 0x2) getrlimit$auto(0x3, 0x0) fdatasync$auto(r4) r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) ioctl$auto_BLKZEROOUT(r5, 0x127f, 0x0) r6 = openat$auto_percpu_stats_fops_(0xffffffffffffff9c, 0x0, 0x303101, 0x0) getsockopt$auto_SO_PEEK_OFF(r6, 0x8, 0x2a, &(0x7f0000000040)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', &(0x7f00000001c0)=0x6) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000380)='/dev/snd/controlC2\x00', 0x400, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/bus/usb/011/001\x00', 0x1102, 0x0) mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) fspick$auto(r2, 0x0, 0xfffff350) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r7) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) ioctl$auto(0xffffffffffffffff, 0xc040564a, 0xffffffffffffffff) 3.799003159s ago: executing program 0 (id=733): unshare$auto(0x44000080) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC2\x00', 0x0, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffff7, 0x8000) bpf$auto(0x0, 0x0, 0x92) futex_requeue$auto(&(0x7f0000000040)={0xb, 0x6, 0x2, 0x2000000}, 0x0, 0xf, 0x9) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB='!\x00\''], 0x1ac}, 0x1, 0x0, 0x0, 0x44}, 0x40090) r0 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r0, &(0x7f0000000080)={{0x0, 0x8002, &(0x7f00000002c0)={0x0, 0xc4}, 0x2, 0x0, 0x0, 0x1}, 0x5}, 0x3, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) unshare$auto(0x8) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8', 0x100000a3d6) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x60042, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0x802, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x10000000000001ff, 0x7, 0xd3e, 0x20, 0x9687, 0x100000000000003, 0x3c2a19d5, 0x6, 0x3, 0x62, 0x8, 0x7, 0x6d3f, 0x6, 0xa, 0xfffffffffffffffe]}, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xfffffffffffffffb, 0x1, 0x4, 0x3, 0x3, 0x3, 0xffffffffffffffff, 0x3, 0x8000000000400000, 0x3, 0x6d3c, 0x3, 0x2, 0x8000000000000006]}, 0x0) close_range$auto(0x2, 0x8, 0x0) 2.715379349s ago: executing program 3 (id=734): openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0xc0000, 0x0) statx$auto(0x2, 0x0, 0x1000, 0x8, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc3\xdd\xa7\xee$\xf5\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xe6\x06g\x1a\xfc\xa8\x02\vw\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x3, 0x1ff, 0x1001, 0x5, 0x717e, 0x0, 0x7, 0x200000000000003, 0xd, 0x2, 0x80001, 0x4, 0x1ffffffffffd, 0xb5, 0xfffffffffffffffe, 0x7, 0x10002, 0x7f, 0x2a2, 0x5, 0xa, 0x22000, 0x200, 0x4, 0x84, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, [0x56, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, 0x400, 0x0, 0x0, 0x200000000000000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x8000000, 0x80000001, 0xffffffffffffffff, 0x3]}, 0x1fe, 0xd) r2 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f00000003c0), 0x1541, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r2, 0xfffffffffffffd03, &(0x7f00000001c0)) connect$auto(0x3, &(0x7f00000018c0)=@ethernet={0x1, @remote}, 0x8) mmap$auto(0x0, 0x400005, 0xe2, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0xd, 0x0) r3 = fsopen$auto(0x0, 0x1) fsconfig$auto(r3, 0x8, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) syz_genetlink_get_family_id$auto_vdpa(&(0x7f0000000040), r1) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x800, 0x0) ioctl$auto(0xffffffffffffffff, 0x80a86f3d, 0x38) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/cpu/smt/control\x00', 0x2ab42, 0x0) read$auto(0xffffffffffffffff, 0x0, 0x20) fsetxattr$auto(0xffffffffffffffff, &(0x7f0000002200)='*){\x85,\x00', &(0x7f0000002240), 0x8, 0x0) writev$auto(0x3, 0x0, 0x3) mmap$auto(0xf4000000, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r4 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) ioctl$auto_SNDCTL_DSP_SUBDIVIDE(r4, 0xc0045009, 0x0) mbind$auto(0x2000, 0x100000004, 0x2, 0x0, 0x1000, 0x2) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) 2.507309436s ago: executing program 2 (id=735): socket(0x11, 0x80003, 0x1d12) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) setsockopt$auto(0x400000000000003, 0x29, 0xd3, 0x0, 0x567) r0 = socket(0x2, 0x1, 0x0) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2b}}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800008}, 0x6, 0x20000000) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/fail-nth\x00', 0x2, 0x0) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/fs/jbd2/sda1-8/info\x00', 0x2, 0x0) read$auto_proc_reg_file_ops_compat_inode(r2, 0x0, 0x0) arch_prctl$auto(0x1000, 0x8) write$auto(r1, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) close_range$auto(0x2, 0x8, 0x800000) 1.891164313s ago: executing program 2 (id=736): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)) getdents$auto(r0, 0x0, 0xfff) close_range$auto(0x2, 0x8, 0x0) (async) socket(0x2, 0x80002, 0x73) (async) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/v4l-touch3\x00', 0x0, 0x0) (async) ioctl$auto(0x3, 0x4020565a, 0x38) (async) r1 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/025/001\x00', 0x400, 0x0) ioctl$auto_USBDEVFS_CLEAR_HALT(r1, 0x80045515, &(0x7f0000000080)=0x24) 1.845780561s ago: executing program 0 (id=737): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) writev$auto(0xc8, 0x0, 0x9) ptrace$auto(0x10, r0, 0x4, 0x7ff) ptrace$auto(0x80000000000000f, r0, 0xfffffffffffffffe, 0x4053) 1.548132114s ago: executing program 2 (id=738): r0 = openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/mountinfo\x00', 0x22c00, 0x0) read$auto_proc_mountinfo_operations_mnt_namespace(r0, &(0x7f0000000040)=""/4080, 0x1036) (fail_nth: 1) 1.510130768s ago: executing program 0 (id=739): openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0) mmap$auto(0x0, 0x400008, 0x200, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, &(0x7f0000000600)='/proc/thread-self/clear_refs\x00', 0x2, 0x0) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB=']'], 0x1ac}}, 0x40000) recvmmsg$auto(r0, &(0x7f0000000140)={{0x0, 0x3, &(0x7f0000000080)={0x0, 0x400}, 0x5, 0x0, 0x2000000200002, 0x8}, 0x803}, 0xfffffff9, 0x10, 0x0) r1 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000001640)='/proc/self/mem\x00', 0x401, 0x0) write$auto_proc_mem_operations_base(r1, &(0x7f0000001680)="a7", 0xfffffc96) 818.324225ms ago: executing program 2 (id=740): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/usbip-vudc.0/usbip_sockfd\x00', 0x103041, 0x0) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1, 0x5, 0x1, 0x0) prctl$auto(0x1000000003b, 0x1, 0x4, 0xd73, 0x7) shutdown$auto(0x200000003, 0x2) recvfrom$auto(0x4, 0x0, 0x101d0, 0x3ffffd, 0x0, 0x0) 565.778582ms ago: executing program 0 (id=741): r0 = openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000001180)='/dev/input/mice\x00', 0x1a1382, 0x0) write$auto_mousedev_fops_mousedev(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_TCP_METRICS_CMD_DEL(r1, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000280)={0x24, 0x0, 0x901, 0x70bd27, 0x25dfdbfb, {}, [@TCP_METRICS_ATTR_SADDR_IPV4={0x8, 0xb, @private=0xac14140a}, @TCP_METRICS_ATTR_ADDR_IPV4={0x8, 0x1, @remote}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x40) 379.397055ms ago: executing program 0 (id=742): close_range$auto(0x2, 0x8, 0x0) socket(0x1a, 0x2, 0x7ffe) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000040), 0x381901, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff001, 0x2) socket(0x29, 0x5, 0x0) r2 = open(&(0x7f00000000c0)='./cgroup\x00', 0x80400, 0xb5d1af1605322dd2) open_by_handle_at$auto(r2, &(0x7f0000001280)={0x8, 0x2, "0200000000000000"}, 0x6) sendfile$auto(r1, r1, 0x0, 0x2) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r3) ioctl$auto_KVM_GET_MSRS(r0, 0xc008ae88, &(0x7f0000000080)={0x2, 0x0, [{0x7, 0x400, 0x718c1257}]}) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) socket$nl_generic(0x10, 0x3, 0x10) pivot_root$auto(0x0, &(0x7f00000004c0)='/\x00\xf5\xdf\xeb\xa1\xb1\xccYE\x92\x0e\xf1\xb6?S\xad\xdeiN\xc0\xb6\xa7>\x95\x1e\xdd\x03;t}\"\x01\xbf\an4>j<\xcb\xe0n\xa1\xae\xf7;\xf5\tJ\xb0\x95\xd5\x96\xae(\xd2\x06\xa7\xc2o\xe25\x8b\xe4\xac\x87\x98NAe\xf0\xf1\xd9\xd36\x98\x86\xca\xf6\xf8\xd0/\x1f\xb3\xe4N\xc0\x06\'\x11\x8a\xe108N/\xcc\x1f\xa9\xd0\xac\xf2\xf5\x90\xbbO\xcc\xa9qH\x00[\x86o\xf4\xaf\x93\x14\xbf|@\xb6E\xd5\xa7\xa9^\x84\x19\xca\x84\\\xb9u8\xa4\f\x7f\xa1Vh\xdc\'\x0e\xf6\xd9;\xcf@\xea\xde\xa0\xa8\xea\xef\xfcK5\x87Z\xc1\xccOx\x8bn\x1b\x93@o\xf7\xe30\x90\b\aQ_\xb9\x9dO\xab\xea \x88\xdc\xda>\xdc.O.\xc8\xe2\x04D\xc6\x14A\x7f\x000\xdd*\a\vX\xb0\x8bI\xd0K)u\x13{-\x02\xb2B\xabd[\xdd\xdc\x10M\x9c\x88a\xfd\xa1\x12\xeb\xe0O\xf8\xbf37e\x1e\xf1@\xe3\xae\xe4\xef\xbd|D\x1e;3\x99g\xd8\xf5\xf3\xe0\x96D\x93\x93\x86m\xa0Fn;\xff\xc3}\xb8\xcd\x0f0F\x96\x98\xd0\x19\xf5\xdf\xf1B\x17_t\xe4|i\xcd\x81|w\xfcNc\xdd\xb8\xdbQ\x0fb}c`=F\x91_\xbd+E\b\x14\x848\xe3\xee/\xe37\xcb\x00\xd7\xe0\x8f\xb2\xffU\xa3\n\xb3PW\x11\xe1\xdd\x05\x86\x9c\xcf\xfe\xfapL\xb2\x05\x82\xf4\xf2v\xe8\x83\xc9*M\x90\xa6P\x98\xb1\x94\x84\xb7\x00\xf2\xf0#\xd4\xe4\xe2\xaa~\x1d\xbc \xa2y\xae@\xab\x1d\xd8pBg\xbb\xa8|g\xc70.\x04\"\ff\xb0\xc6umooMT\xa8\xd3\x97 ?\xf1\x80\x01\x80\x10\xe9\x84Ff\xd4WU\xc41\xc3}\x03\xdc\'\xdd\xecJ\x97\xdb\xed\rr\xb6-$\x8b\xc5i\xe3\x113\x89M\xe4\xd7\x1dX\xc9\x15\x00\xd7j1t\\ \x88>s\xb5\x83\xf3\xef\x05\xb8+Y\x04{\x9a\x8e|\xfd\x92\xfb\xd1\"\x85\xb1\xf4*=\xee{\x7fS%;\xfd\xc0,\xa7\x973\xdc\x7f/B\xd8pe!\xd8sl\x15g\xd5\x05\x8eRQ\nm\xaa\xf2N\x1d\xda\xeb\xe3\x06\xd1at\xd9\xd5\xb2\xcb\xf5\x83\x84\x1eF\xab\x00\x8f\xa4\xb3\xd6\xaf\xcee3s\t\xf5\xcc*\xff\xf5\xf2\x98\x89T\x80\xa8\xae\x1e0\xe5\xa6\xc9.\v}\xa3\vi\x06e\xbd\xa1u\xc5_B\x8a\xe2@sF\xfd\xa9\x8f\x11\xdc\xbe\rjrb\x8a\xa6\x0f\xb3Zq\xf2\xce\xbc\xf3X\xcc\a\xe8v\xdb\xa0\x1cbf\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x3, 0x1ff, 0x1001, 0x5, 0x717e, 0x0, 0x7, 0x200000000000003, 0xd, 0x2, 0x80001, 0x4, 0x1ffffffffffd, 0xb5, 0xfffffffffffffffe, 0x7, 0x10002, 0x7f, 0x2a2, 0x5, 0xa, 0x22000, 0x200, 0x4, 0x84, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, [0x56, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, 0x400, 0x0, 0x0, 0x200000000000000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x8000000, 0x80000001, 0xffffffffffffffff, 0x3]}, 0x1fe, 0xd) r2 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f00000003c0), 0x1541, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r2, 0xfffffffffffffd03, &(0x7f00000001c0)) connect$auto(0x3, &(0x7f00000018c0)=@ethernet={0x1, @remote}, 0x8) mmap$auto(0x0, 0x400005, 0xe2, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0xd, 0x0) r3 = fsopen$auto(0x0, 0x1) fsconfig$auto(r3, 0x8, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) syz_genetlink_get_family_id$auto_vdpa(&(0x7f0000000040), r1) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x800, 0x0) ioctl$auto(0xffffffffffffffff, 0x80a86f3d, 0x38) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/cpu/smt/control\x00', 0x2ab42, 0x0) read$auto(0xffffffffffffffff, 0x0, 0x20) fsetxattr$auto(0xffffffffffffffff, &(0x7f0000002200)='*){\x85,\x00', &(0x7f0000002240), 0x8, 0x0) writev$auto(0x3, 0x0, 0x3) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r4 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) ioctl$auto_SNDCTL_DSP_SUBDIVIDE(r4, 0xc0045009, 0x0) mbind$auto(0x800000000000000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) unshare$auto(0x40000080) 0s ago: executing program 0 (id=744): mmap$auto(0x0, 0x2000c, 0xe1, 0x20eb1, 0x40000000000a5, 0x8000) fadvise64$auto_POSIX_FADV_RANDOM(0xffffffffffffffff, 0x3, 0x100000001, 0x1) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/cpu/cpu1/online\x00', 0x62, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socketpair$auto(0x22, 0x3, 0x8000000000000000, 0x0) write$auto(r0, &(0x7f00000007c0)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef`\xd8\x9c\xf7?:\x1a\xc62\x911e\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\b};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xff\x7f\xd0UV\x11\xcb\xdd\x81\xbe\xde\f/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2|%\xbf\x02trg\x9a\xe7\x00\x85Z\x06?\x12\x98\x0f)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1;\xe4pd$\xd7\x1b\v\x82\r\f\xd0Hq\xd9\r\x88#\x89\x8d\xcd\x1e\x87N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8HR+\a\xb7R\t\n+\x7f\xd5H\x90G=\x9a\r\xb10\x1b\xf8\v\x11\v\xbb\xc8^\xa4\xe2\x05\x91|\x123\xc3:\xfd\xee\x04a\xc8\x12\xce\xa2\x12\xcb\x8c\x87f\xebGQ\xe9\x96\xd5E\x13a\xb7\x057\x1c&\xe0\x94\xa7\xfb\x9d;\xfa\xb1\x1b4a,\'\xb2Ym\xe1:\xbf\x8cs\x06\xa3u\x8d!\n\x80-\x9a\xbb;\xf4\xf3\xe1\x97\xfc8\xff\xa7\\\x8b\xf9\x95\x10$\xef\x1a #b\xfb\xfe\xe9\x06fK0\xdd\x84T,\xfa\xb5\x00\x83d\xbba\xd7\x7f\x00\x00\x00AN\x9d\xcb\x96\xc7\xe8\xe6\x8bC\xeb\xc7EZ\xc8\x1a\x81.f\tZ-sZ\x13n\xec\xa9\xbf\xd0$\xb9\xd8\x00\x00\x00\x00\x00\x00\x00\x00\x00\xec\xbd_r\xf16\xec\xf3\xbb[.\xf3\xef\xf8\x16x\x9e\xb3*:/L\xa0Kg\xf0\xa2\x84\xa3o\xcc\x9e\xd3\xeb\xd3(\xaa\x93g~\x01\x81\x1eV\xf1L\xfc\xad\xa9#O\xe4\x12\xd3\xbda\xbc\x9a\x9f+9\'\xc4\x13\xf0\xc88\x1d80?\xc2\a\af\xdc?-&\xedAd\x9c\xe5&\xb9\x14\xe1\x85 \xbf\x18\xfc:#\xcf\x7ffT\xefPb\xe1\xfa]\xcc\x8a\xe3\x99\x98u\x9bj>\x9d\xc2\x1fk\x87\x92\xfb(U\xa8\xcd4+\xf6e5],\xec\x84 \x1b\x10d\x1b@\x84X\xa1\xa8\xd7\xccO\xb0Qq\x1a\xa4<\\\x0e\xa4\x7f^\x1a|\xfd\xe6#\x00\x9e\x1d\x00k\x84\x1b\xa3\xb1O\xe0IzJRO\xf4,\xe5\xdb\x03CA\x13Q\x84\xbb\x88\xb4\xe3\xba\xf0/\xd0\x04\ny\a\x8d\x12h\xe22\xcb\"\xce\x00\x00', 0x5) ioctl$auto_USBDEVFS_CLAIMINTERFACE(0xffffffffffffffff, 0x8004550f, 0x0) r1 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/oom_adj\x00', 0x48402, 0x0) read$auto(r1, 0x0, 0x1f40) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) kernel console output (not intermixed with test programs): ff85be16038 R14: 00007ffee8f15470 R15: 00007ffee8f15558 [ 174.122598][ T7054] [ 174.556156][ T5831] Bluetooth: hci3: unexpected event 0x02 length: 726 > 260 [ 174.815975][ T7060] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input13 [ 176.358480][ T7099] FAULT_INJECTION: forcing a failure. [ 176.358480][ T7099] name failslab, interval 1, probability 0, space 0, times 0 [ 176.408585][ T7099] CPU: 1 UID: 0 PID: 7099 Comm: syz.0.262 Not tainted syzkaller #0 PREEMPT(full) [ 176.408626][ T7099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 176.408645][ T7099] Call Trace: [ 176.408655][ T7099] [ 176.408666][ T7099] dump_stack_lvl+0x100/0x190 [ 176.408722][ T7099] should_fail_ex.cold+0x5/0xa [ 176.408759][ T7099] ? genl_family_rcv_msg_attrs_parse.isra.0+0xc2/0x280 [ 176.408811][ T7099] should_failslab+0xc2/0x120 [ 176.408846][ T7099] __kmalloc_noprof+0xe0/0x850 [ 176.408899][ T7099] ? lockdep_hardirqs_on+0x78/0x100 [ 176.408948][ T7099] genl_family_rcv_msg_attrs_parse.isra.0+0xc2/0x280 [ 176.409007][ T7099] genl_family_rcv_msg_doit+0xc7/0x300 [ 176.409061][ T7099] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 176.409111][ T7099] ? genl_get_cmd+0x3ef/0x720 [ 176.409167][ T7099] ? __dev_queue_xmit+0x5af/0x4800 [ 176.409219][ T7099] ? __radix_tree_lookup+0x217/0x2b0 [ 176.409260][ T7099] genl_rcv_msg+0x560/0x800 [ 176.409314][ T7099] ? __pfx_genl_rcv_msg+0x10/0x10 [ 176.409364][ T7099] ? __pfx_ovs_ct_limit_cmd_get+0x10/0x10 [ 176.409434][ T7099] netlink_rcv_skb+0x159/0x420 [ 176.409475][ T7099] ? __pfx_genl_rcv_msg+0x10/0x10 [ 176.409531][ T7099] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 176.409585][ T7099] ? netlink_deliver_tap+0x1ae/0xcc0 [ 176.409628][ T7099] genl_rcv+0x28/0x40 [ 176.409667][ T7099] netlink_unicast+0x5aa/0x870 [ 176.409712][ T7099] ? __pfx_netlink_unicast+0x10/0x10 [ 176.409750][ T7099] ? __pfx___might_resched+0x10/0x10 [ 176.409793][ T7099] ? __lock_acquire+0x4a5/0x2630 [ 176.409842][ T7099] netlink_sendmsg+0x8b0/0xda0 [ 176.409894][ T7099] ? __pfx_netlink_sendmsg+0x10/0x10 [ 176.409931][ T7099] ? __import_iovec+0x1d2/0x640 [ 176.409963][ T7099] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 176.410010][ T7099] ____sys_sendmsg+0xa54/0xc30 [ 176.410059][ T7099] ? __pfx_____sys_sendmsg+0x10/0x10 [ 176.410116][ T7099] ___sys_sendmsg+0x190/0x1e0 [ 176.410162][ T7099] ? __pfx____sys_sendmsg+0x10/0x10 [ 176.410256][ T7099] __sys_sendmsg+0x170/0x220 [ 176.410294][ T7099] ? __pfx___sys_sendmsg+0x10/0x10 [ 176.410354][ T7099] do_syscall_64+0x106/0xf80 [ 176.410389][ T7099] ? clear_bhb_loop+0x40/0x90 [ 176.410426][ T7099] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.410456][ T7099] RIP: 0033:0x7ff85bb9c799 [ 176.410480][ T7099] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 176.410507][ T7099] RSP: 002b:00007ff85ca43028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 176.410534][ T7099] RAX: ffffffffffffffda RBX: 00007ff85be15fa0 RCX: 00007ff85bb9c799 [ 176.410552][ T7099] RDX: 0000000000004014 RSI: 00002000000028c0 RDI: 0000000000000003 [ 176.410570][ T7099] RBP: 00007ff85ca43090 R08: 0000000000000000 R09: 0000000000000000 [ 176.410587][ T7099] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 176.410603][ T7099] R13: 00007ff85be16038 R14: 00007ff85be15fa0 R15: 00007ffee8f15558 [ 176.410641][ T7099] [ 177.893407][ T7119] zswap: compressor û not available [ 178.497058][ T5831] Bluetooth: hci0: unexpected event 0x02 length: 726 > 260 [ 179.363184][ T7152] bridge0: port 3(netdevsim1) entered blocking state [ 179.413237][ T7152] bridge0: port 3(netdevsim1) entered disabled state [ 179.443566][ T7152] netdevsim netdevsim3 netdevsim1: entered allmulticast mode [ 179.497024][ T7152] netdevsim netdevsim3 netdevsim1: entered promiscuous mode [ 179.520332][ T7152] bridge0: port 3(netdevsim1) entered blocking state [ 179.527497][ T7152] bridge0: port 3(netdevsim1) entered forwarding state [ 179.531998][ T7158] FAULT_INJECTION: forcing a failure. [ 179.531998][ T7158] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 179.590463][ T7158] CPU: 1 UID: 0 PID: 7158 Comm: syz.1.271 Not tainted syzkaller #0 PREEMPT(full) [ 179.590501][ T7158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 179.590518][ T7158] Call Trace: [ 179.590527][ T7158] [ 179.590538][ T7158] dump_stack_lvl+0x100/0x190 [ 179.590586][ T7158] should_fail_ex.cold+0x5/0xa [ 179.590628][ T7158] _copy_to_user+0x32/0xd0 [ 179.590659][ T7158] simple_read_from_buffer+0xcb/0x170 [ 179.590707][ T7158] proc_fail_nth_read+0x1af/0x230 [ 179.590744][ T7158] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 179.590781][ T7158] ? rw_verify_area+0xce/0x6d0 [ 179.590840][ T7158] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 179.590877][ T7158] vfs_read+0x1e4/0xb30 [ 179.590931][ T7158] ? __pfx_vfs_read+0x10/0x10 [ 179.590977][ T7158] ? do_sys_openat2+0x157/0x1e0 [ 179.591040][ T7158] ksys_read+0x12a/0x250 [ 179.591089][ T7158] ? __pfx_ksys_read+0x10/0x10 [ 179.591170][ T7158] do_syscall_64+0x106/0xf80 [ 179.591208][ T7158] ? clear_bhb_loop+0x40/0x90 [ 179.591248][ T7158] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.591280][ T7158] RIP: 0033:0x7fe574f5cfce [ 179.591305][ T7158] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 179.591335][ T7158] RSP: 002b:00007fe575e7dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 179.591366][ T7158] RAX: ffffffffffffffda RBX: 00007fe575e7e6c0 RCX: 00007fe574f5cfce [ 179.591387][ T7158] RDX: 000000000000000f RSI: 00007fe575e7e0a0 RDI: 0000000000000009 [ 179.591406][ T7158] RBP: 00007fe575e7e090 R08: 0000000000000000 R09: 0000000000000000 [ 179.591425][ T7158] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 179.591444][ T7158] R13: 00007fe575216038 R14: 00007fe575215fa0 R15: 00007ffdced1c038 [ 179.591487][ T7158] [ 180.244900][ T7171] FAULT_INJECTION: forcing a failure. [ 180.244900][ T7171] name failslab, interval 1, probability 0, space 0, times 0 [ 180.257896][ T7168] FAULT_INJECTION: forcing a failure. [ 180.257896][ T7168] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 180.257947][ T7168] CPU: 1 UID: 0 PID: 7168 Comm: syz.3.274 Not tainted syzkaller #0 PREEMPT(full) [ 180.257977][ T7168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 180.257992][ T7168] Call Trace: [ 180.258000][ T7168] [ 180.258010][ T7168] dump_stack_lvl+0x100/0x190 [ 180.258063][ T7168] should_fail_ex.cold+0x5/0xa [ 180.258100][ T7168] _copy_to_user+0x32/0xd0 [ 180.258128][ T7168] simple_read_from_buffer+0xcb/0x170 [ 180.258174][ T7168] proc_fail_nth_read+0x1af/0x230 [ 180.258209][ T7168] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 180.258246][ T7168] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 180.258279][ T7168] vfs_read+0x1e4/0xb30 [ 180.258327][ T7168] ? __pfx_vfs_read+0x10/0x10 [ 180.258370][ T7168] ? __fget_files+0x215/0x3d0 [ 180.258403][ T7168] ? __fget_files+0x21f/0x3d0 [ 180.258438][ T7168] ksys_read+0x12a/0x250 [ 180.258481][ T7168] ? __pfx_ksys_read+0x10/0x10 [ 180.258520][ T7168] ? _raw_read_unlock+0x28/0x50 [ 180.258551][ T7168] ? ptrace_check_attach+0xa7/0x410 [ 180.258587][ T7168] do_syscall_64+0x106/0xf80 [ 180.258693][ T7168] ? clear_bhb_loop+0x40/0x90 [ 180.258807][ T7168] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.258875][ T7168] RIP: 0033:0x7f3548b5cfce [ 180.258932][ T7168] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 180.258999][ T7168] RSP: 002b:00007f3549ac5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 180.259068][ T7168] RAX: ffffffffffffffda RBX: 00007f3549ac66c0 RCX: 00007f3548b5cfce [ 180.259114][ T7168] RDX: 000000000000000f RSI: 00007f3549ac60a0 RDI: 0000000000000003 [ 180.259161][ T7168] RBP: 00007f3549ac6090 R08: 0000000000000000 R09: 0000000000000000 [ 180.259204][ T7168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 180.259242][ T7168] R13: 00007f3548e16038 R14: 00007f3548e15fa0 R15: 00007ffea4281888 [ 180.259334][ T7168] [ 180.475420][ T7171] CPU: 1 UID: 0 PID: 7171 Comm: syz.1.275 Not tainted syzkaller #0 PREEMPT(full) [ 180.475455][ T7171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 180.475483][ T7171] Call Trace: [ 180.475491][ T7171] [ 180.475501][ T7171] dump_stack_lvl+0x100/0x190 [ 180.475561][ T7171] should_fail_ex.cold+0x5/0xa [ 180.475592][ T7171] should_failslab+0xc2/0x120 [ 180.475620][ T7171] __kmalloc_cache_noprof+0x7a/0x6f0 [ 180.475654][ T7171] ? proc_thread_self_get_link+0x1a6/0x210 [ 180.475702][ T7171] proc_thread_self_get_link+0x1a6/0x210 [ 180.475743][ T7171] pick_link+0xac2/0x13c0 [ 180.475781][ T7171] ? __pfx_proc_thread_self_get_link+0x10/0x10 [ 180.475827][ T7171] step_into_slowpath+0x9ba/0xf90 [ 180.475875][ T7171] ? __pfx_step_into_slowpath+0x10/0x10 [ 180.475921][ T7171] ? lookup_fast+0x2da/0x600 [ 180.475956][ T7171] ? inode_permission+0x374/0x620 [ 180.475997][ T7171] link_path_walk+0xf28/0x1cc0 [ 180.476050][ T7171] path_openat+0x1be/0x31a0 [ 180.476093][ T7171] ? kasan_save_stack+0x3f/0x50 [ 180.476136][ T7171] ? kasan_save_stack+0x30/0x50 [ 180.476180][ T7171] ? kasan_save_track+0x14/0x30 [ 180.476222][ T7171] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 180.476276][ T7171] ? __pfx_path_openat+0x10/0x10 [ 180.476319][ T7171] do_file_open+0x20e/0x430 [ 180.476353][ T7171] ? __pfx_do_file_open+0x10/0x10 [ 180.476411][ T7171] ? alloc_fd+0x476/0x790 [ 180.476443][ T7171] ? do_getname+0x191/0x390 [ 180.476481][ T7171] do_sys_openat2+0x10d/0x1e0 [ 180.476520][ T7171] ? __pfx_do_sys_openat2+0x10/0x10 [ 180.476566][ T7171] ? blkcg_maybe_throttle_current+0x5df/0xeb0 [ 180.476612][ T7171] __x64_sys_openat+0x12d/0x210 [ 180.476651][ T7171] ? __pfx___x64_sys_openat+0x10/0x10 [ 180.476701][ T7171] do_syscall_64+0x106/0xf80 [ 180.476735][ T7171] ? clear_bhb_loop+0x40/0x90 [ 180.476772][ T7171] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.476802][ T7171] RIP: 0033:0x7fe574f5cfce [ 180.476825][ T7171] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 180.476852][ T7171] RSP: 002b:00007fe575e7df98 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 180.476897][ T7171] RAX: ffffffffffffffda RBX: 00007fe575e7e6c0 RCX: 00007fe574f5cfce [ 180.476917][ T7171] RDX: 0000000000000002 RSI: 00007fe5750324e0 RDI: ffffffffffffff9c [ 180.476936][ T7171] RBP: 00007fe575032bd9 R08: 0000000000000000 R09: 0000000000000000 [ 180.476954][ T7171] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 180.476972][ T7171] R13: 00007fe575216038 R14: 00007fe575215fa0 R15: 00007ffdced1c038 [ 180.477013][ T7171] [ 180.477610][ T7171] FAULT_INJECTION: forcing a failure. [ 180.477610][ T7171] name failslab, interval 1, probability 0, space 0, times 0 [ 180.865332][ T7171] CPU: 0 UID: 0 PID: 7171 Comm: syz.1.275 Not tainted syzkaller #0 PREEMPT(full) [ 180.865360][ T7171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 180.865371][ T7171] Call Trace: [ 180.865377][ T7171] [ 180.865385][ T7171] dump_stack_lvl+0x100/0x190 [ 180.865437][ T7171] should_fail_ex.cold+0x5/0xa [ 180.865460][ T7171] ? sk_prot_alloc+0x10b/0x2a0 [ 180.865505][ T7171] should_failslab+0xc2/0x120 [ 180.865527][ T7171] __kmalloc_noprof+0xe0/0x850 [ 180.865563][ T7171] sk_prot_alloc+0x10b/0x2a0 [ 180.865598][ T7171] sk_alloc+0x36/0xe80 [ 180.865621][ T7171] __netlink_create+0x5e/0x2c0 [ 180.865643][ T7171] ? __wake_up+0x3f/0x60 [ 180.865667][ T7171] netlink_create+0x293/0x610 [ 180.865691][ T7171] ? __pfx_genl_bind+0x10/0x10 [ 180.865719][ T7171] ? __pfx_genl_unbind+0x10/0x10 [ 180.865747][ T7171] ? __pfx_genl_release+0x10/0x10 [ 180.865781][ T7171] __sock_create+0x339/0x860 [ 180.865818][ T7171] __sys_socket+0x14d/0x260 [ 180.865850][ T7171] ? exc_page_fault+0x6f/0xd0 [ 180.865875][ T7171] ? __pfx___sys_socket+0x10/0x10 [ 180.865912][ T7171] ? do_user_addr_fault+0x8d6/0x12f0 [ 180.865950][ T7171] __x64_sys_socket+0x72/0xb0 [ 180.865983][ T7171] ? lockdep_hardirqs_on+0x78/0x100 [ 180.866009][ T7171] do_syscall_64+0x106/0xf80 [ 180.866034][ T7171] ? clear_bhb_loop+0x40/0x90 [ 180.866065][ T7171] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.866086][ T7171] RIP: 0033:0x7fe574f9e007 [ 180.866103][ T7171] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 180.866122][ T7171] RSP: 002b:00007fe575e7cf98 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 180.866141][ T7171] RAX: ffffffffffffffda RBX: 00007fe575215fa0 RCX: 00007fe574f9e007 [ 180.866154][ T7171] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 180.866167][ T7171] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 180.866179][ T7171] R10: 0000200000000240 R11: 0000000000000286 R12: 0000000000000001 [ 180.866191][ T7171] R13: 00007fe575216038 R14: 00007fe575215fa0 R15: 00007ffdced1c038 [ 180.866218][ T7171] [ 182.833900][ T5831] Bluetooth: hci1: unexpected event 0x02 length: 726 > 260 [ 183.117762][ T7206] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.310724][ T7215] FAULT_INJECTION: forcing a failure. [ 183.310724][ T7215] name failslab, interval 1, probability 0, space 0, times 0 [ 183.364195][ T7215] CPU: 0 UID: 0 PID: 7215 Comm: syz.2.285 Not tainted syzkaller #0 PREEMPT(full) [ 183.364234][ T7215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 183.364253][ T7215] Call Trace: [ 183.364262][ T7215] [ 183.364274][ T7215] dump_stack_lvl+0x100/0x190 [ 183.364325][ T7215] should_fail_ex.cold+0x5/0xa [ 183.364361][ T7215] ? sk_prot_alloc+0x10b/0x2a0 [ 183.364392][ T7215] should_failslab+0xc2/0x120 [ 183.364432][ T7215] __kmalloc_noprof+0xe0/0x850 [ 183.364464][ T7215] ? security_inode_alloc+0xcf/0x2c0 [ 183.364503][ T7215] sk_prot_alloc+0x10b/0x2a0 [ 183.364537][ T7215] sk_alloc+0x36/0xe80 [ 183.364562][ T7215] __netlink_create+0x5e/0x2c0 [ 183.364588][ T7215] __netlink_kernel_create+0xed/0x750 [ 183.364620][ T7215] ? __pfx___netlink_kernel_create+0x10/0x10 [ 183.364657][ T7215] fib_net_init+0x26d/0x3f0 [ 183.364684][ T7215] ? is_module_address+0x69/0xf0 [ 183.364713][ T7215] ? __pfx_fib_net_init+0x10/0x10 [ 183.364741][ T7215] ? timer_init_key+0x150/0x340 [ 183.364764][ T7215] ? __pfx_nl_fib_input+0x10/0x10 [ 183.364801][ T7215] ? devinet_init_net+0x56c/0x8d0 [ 183.364835][ T7215] ? __pfx_fib_net_init+0x10/0x10 [ 183.364863][ T7215] ops_init+0x1e2/0x5f0 [ 183.364894][ T7215] setup_net+0x118/0x3a0 [ 183.364923][ T7215] ? __pfx_setup_net+0x10/0x10 [ 183.364949][ T7215] ? lockdep_init_map_type+0x5c/0x250 [ 183.364980][ T7215] ? mutex_init_lockep+0x110/0x150 [ 183.365014][ T7215] copy_net_ns+0x46f/0x7c0 [ 183.365048][ T7215] create_new_namespaces+0x3ea/0xac0 [ 183.365077][ T7215] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 183.365103][ T7215] ksys_unshare+0x473/0xad0 [ 183.365133][ T7215] ? __pfx_ksys_unshare+0x10/0x10 [ 183.365170][ T7215] __x64_sys_unshare+0x31/0x40 [ 183.365223][ T7215] do_syscall_64+0x106/0xf80 [ 183.365259][ T7215] ? clear_bhb_loop+0x40/0x90 [ 183.365297][ T7215] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.365329][ T7215] RIP: 0033:0x7f5a55d9c799 [ 183.365354][ T7215] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 183.365375][ T7215] RSP: 002b:00007f5a53ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 183.365396][ T7215] RAX: ffffffffffffffda RBX: 00007f5a56015fa0 RCX: 00007f5a55d9c799 [ 183.365411][ T7215] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 183.365424][ T7215] RBP: 00007f5a55e32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 183.365437][ T7215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 183.365450][ T7215] R13: 00007f5a56016038 R14: 00007f5a56015fa0 R15: 00007ffde3828a38 [ 183.365478][ T7215] [ 184.284044][ T7221] netlink: 330 bytes leftover after parsing attributes in process `syz.1.286'. [ 185.670436][ T7267] openvswitch: netlink: Key 15 has unexpected len 1 expected 4 [ 188.144423][ T5864] Process accounting resumed [ 188.923427][ T7282] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 188.931088][ T7282] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 188.945052][ T7282] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 189.000000][ T7282] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 189.070608][ T7282] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 189.084365][ T7282] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 189.135627][ T7282] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 189.148149][ T7282] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 189.171314][ T7282] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 189.216539][ T7282] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 189.243036][ T7282] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 189.265898][ T7282] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 189.268060][ T5831] Bluetooth: hci0: command 0x0c1a tx timeout [ 191.029371][ T5831] Bluetooth: hci1: command 0x0c1a tx timeout [ 191.094759][ T30] audit: type=1800 audit(1772732489.397:5): pid=7364 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.314" name="dbroot" dev="configfs" ino=15241 res=0 errno=0 [ 191.112527][ T7364] netlink: 28 bytes leftover after parsing attributes in process `syz.1.314'. [ 191.188915][ T5831] Bluetooth: hci2: command 0x0c1a tx timeout [ 191.268940][ T5831] Bluetooth: hci3: command 0x0c1a tx timeout [ 191.350243][ T5831] Bluetooth: hci0: command 0x0c1a tx timeout [ 191.352105][ T7364] team0: Port device team_slave_1 removed [ 191.402072][ T7375] Console: switching to colour VGA+ 80x25 [ 191.603100][ T7375] Console: switching to colour frame buffer device 128x48 [ 192.062038][ T7380] FAULT_INJECTION: forcing a failure. [ 192.062038][ T7380] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 192.105678][ T7380] CPU: 0 UID: 0 PID: 7380 Comm: syz.3.315 Not tainted syzkaller #0 PREEMPT(full) [ 192.105714][ T7380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 192.105731][ T7380] Call Trace: [ 192.105740][ T7380] [ 192.105755][ T7380] dump_stack_lvl+0x100/0x190 [ 192.105794][ T7380] should_fail_ex.cold+0x5/0xa [ 192.105818][ T7380] ? prepare_alloc_pages+0x16d/0x5f0 [ 192.105846][ T7380] should_fail_alloc_page+0xeb/0x140 [ 192.105870][ T7380] prepare_alloc_pages+0x1f0/0x5f0 [ 192.105900][ T7380] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 192.105937][ T7380] ? __lock_acquire+0x4a5/0x2630 [ 192.105970][ T7380] ? __update_page_owner_handle+0x3c7/0x550 [ 192.106032][ T7380] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 192.106075][ T7380] ? __lock_acquire+0x4a5/0x2630 [ 192.106116][ T7380] ? lock_acquire+0x1cf/0x380 [ 192.106145][ T7380] ? find_held_lock+0x2b/0x80 [ 192.106165][ T7380] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 192.106207][ T7380] ? policy_nodemask+0xed/0x4f0 [ 192.106245][ T7380] alloc_pages_mpol+0x1fb/0x550 [ 192.106287][ T7380] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 192.106350][ T7380] alloc_pages_noprof+0x131/0x390 [ 192.106384][ T7380] pte_alloc_one+0x1e/0x3e0 [ 192.106417][ T7380] do_huge_pmd_anonymous_page+0x835/0x1a60 [ 192.106461][ T7380] __handle_mm_fault+0x1e9e/0x2b60 [ 192.106498][ T7380] ? mt_find+0x45e/0x8e0 [ 192.106530][ T7380] ? __pfx___handle_mm_fault+0x10/0x10 [ 192.106566][ T7380] ? __pfx_mt_find+0x10/0x10 [ 192.106620][ T7380] handle_mm_fault+0x36d/0xa20 [ 192.106658][ T7380] __get_user_pages+0xf9c/0x34d0 [ 192.106705][ T7380] ? down_read_killable+0x30e/0x4c0 [ 192.106758][ T7380] ? __lock_acquire+0x4a5/0x2630 [ 192.106789][ T7380] ? __pfx___get_user_pages+0x10/0x10 [ 192.106815][ T7380] ? __lock_acquire+0x4a5/0x2630 [ 192.106853][ T7380] __gup_longterm_locked+0x87d/0x16f0 [ 192.106889][ T7380] ? __pfx___gup_longterm_locked+0x10/0x10 [ 192.106920][ T7380] ? try_get_folio+0x262/0x750 [ 192.106942][ T7380] ? pmd_write+0xd3/0x150 [ 192.106982][ T7380] ? sanity_check_pinned_pages+0x5f6/0x1250 [ 192.107014][ T7380] gup_fast_fallback+0x18c6/0x2460 [ 192.107063][ T7380] ? __pfx_gup_fast_fallback+0x10/0x10 [ 192.107091][ T7380] ? kasan_save_stack+0x30/0x50 [ 192.107128][ T7380] ? kasan_save_track+0x14/0x30 [ 192.107165][ T7380] ? __kasan_slab_alloc+0x89/0x90 [ 192.107186][ T7380] ? mempool_alloc_noprof+0x1b7/0x310 [ 192.107211][ T7380] ? bvec_alloc+0x197/0x210 [ 192.107246][ T7380] ? bio_alloc_bioset+0x59e/0x850 [ 192.107283][ T7380] ? blkdev_direct_IO+0xeae/0x1fb0 [ 192.107311][ T7380] ? blkdev_write_iter+0x703/0xd70 [ 192.107340][ T7380] ? vfs_write+0x6ac/0x1070 [ 192.107377][ T7380] ? ksys_write+0x12a/0x250 [ 192.107414][ T7380] ? do_syscall_64+0x106/0xf80 [ 192.107442][ T7380] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.107473][ T7380] pin_user_pages_fast+0xa7/0xf0 [ 192.107502][ T7380] ? __pfx_pin_user_pages_fast+0x10/0x10 [ 192.107532][ T7380] ? iov_iter_advance+0xac/0x6d0 [ 192.107582][ T7380] iov_iter_extract_pages+0xa0d/0x1ef0 [ 192.107617][ T7380] ? __pfx_iov_iter_extract_pages+0x10/0x10 [ 192.107666][ T7380] ? iov_iter_revert+0x252/0x5b0 [ 192.107704][ T7380] ? bio_associate_blkg_from_css+0x394/0x13f0 [ 192.107738][ T7380] iov_iter_extract_bvecs+0x10e/0xf40 [ 192.107775][ T7380] ? __pfx_iov_iter_extract_bvecs+0x10/0x10 [ 192.107802][ T7380] ? bio_init+0x404/0x610 [ 192.107850][ T7380] bio_iov_iter_get_pages+0x26a/0x970 [ 192.107898][ T7380] blkdev_direct_IO+0x1302/0x1fb0 [ 192.107957][ T7380] ? __pfx_blkdev_direct_IO+0x10/0x10 [ 192.108016][ T7380] blkdev_write_iter+0x703/0xd70 [ 192.108052][ T7380] vfs_write+0x6ac/0x1070 [ 192.108091][ T7380] ? __pfx_blkdev_write_iter+0x10/0x10 [ 192.108123][ T7380] ? __pfx_vfs_write+0x10/0x10 [ 192.108169][ T7380] ? find_held_lock+0x2b/0x80 [ 192.108206][ T7380] ksys_write+0x12a/0x250 [ 192.108241][ T7380] ? __pfx_ksys_write+0x10/0x10 [ 192.108284][ T7380] do_syscall_64+0x106/0xf80 [ 192.108309][ T7380] ? clear_bhb_loop+0x40/0x90 [ 192.108337][ T7380] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.108360][ T7380] RIP: 0033:0x7f3548b9c799 [ 192.108377][ T7380] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 192.108399][ T7380] RSP: 002b:00007f3549a63028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 192.108419][ T7380] RAX: ffffffffffffffda RBX: 00007f3548e16270 RCX: 00007f3548b9c799 [ 192.108434][ T7380] RDX: 000000100000a3d9 RSI: 00002000000000c0 RDI: 0000000000000009 [ 192.108447][ T7380] RBP: 00007f3548c32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 192.108461][ T7380] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 192.108474][ T7380] R13: 00007f3548e16308 R14: 00007f3548e16270 R15: 00007ffea4281888 [ 192.108502][ T7380] [ 193.112382][ T5831] Bluetooth: hci1: command 0x0c1a tx timeout [ 193.272202][ T5831] Bluetooth: hci2: command 0x0c1a tx timeout [ 193.358081][ T5831] Bluetooth: hci3: command 0x0c1a tx timeout [ 193.430018][ T5831] Bluetooth: hci0: command 0x0c1a tx timeout [ 194.160607][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.168736][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.201028][ T5831] Bluetooth: hci1: command 0x0c1a tx timeout [ 195.351109][ T5831] Bluetooth: hci2: command 0x0c1a tx timeout [ 195.372001][ T7462] FAULT_INJECTION: forcing a failure. [ 195.372001][ T7462] name fail_futex, interval 1, probability 0, space 0, times 0 [ 195.431363][ T5831] Bluetooth: hci3: command 0x0c1a tx timeout [ 195.445453][ T7462] CPU: 1 UID: 0 PID: 7462 Comm: syz.2.334 Not tainted syzkaller #0 PREEMPT(full) [ 195.445490][ T7462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 195.445507][ T7462] Call Trace: [ 195.445517][ T7462] [ 195.445528][ T7462] dump_stack_lvl+0x100/0x190 [ 195.445577][ T7462] should_fail_ex.cold+0x5/0xa [ 195.445610][ T7462] get_futex_key+0x1d2/0x1620 [ 195.445650][ T7462] ? __pfx_get_futex_key+0x10/0x10 [ 195.445685][ T7462] ? futex_hash+0x2c5/0x380 [ 195.445731][ T7462] futex_wake+0xea/0x530 [ 195.445776][ T7462] ? __pfx_futex_wait+0x10/0x10 [ 195.445821][ T7462] ? __pfx_futex_wake+0x10/0x10 [ 195.445869][ T7462] ? __lock_acquire+0x4a5/0x2630 [ 195.445914][ T7462] do_futex+0x32b/0x350 [ 195.445953][ T7462] ? __pfx_do_futex+0x10/0x10 [ 195.445993][ T7462] ? find_held_lock+0x2b/0x80 [ 195.446025][ T7462] __x64_sys_futex+0x34f/0x4d0 [ 195.446086][ T7462] ? __pfx___x64_sys_futex+0x10/0x10 [ 195.446133][ T7462] ? __task_pid_nr_ns+0x1ca/0x510 [ 195.446173][ T7462] ? __task_pid_nr_ns+0x1ca/0x510 [ 195.446225][ T7462] do_syscall_64+0x106/0xf80 [ 195.446262][ T7462] ? clear_bhb_loop+0x40/0x90 [ 195.446301][ T7462] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.446333][ T7462] RIP: 0033:0x7f5a55d9c799 [ 195.446379][ T7462] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 195.446427][ T7462] RSP: 002b:00007f5a53ff60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 195.446460][ T7462] RAX: ffffffffffffffda RBX: 00007f5a56015fa8 RCX: 00007f5a55d9c799 [ 195.446483][ T7462] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f5a56015fac [ 195.446504][ T7462] RBP: 00007f5a56015fa0 R08: 0000000000000000 R09: 0000000000000000 [ 195.446525][ T7462] R10: 000000000000014b R11: 0000000000000246 R12: 0000000000000000 [ 195.446545][ T7462] R13: 00007f5a56016038 R14: 00007ffde3828950 R15: 00007ffde3828a38 [ 195.446589][ T7462] [ 196.174536][ T7474] netlink: zone id is out of range [ 196.179715][ T7474] netlink: zone id is out of range [ 196.187882][ T5831] Bluetooth: hci2: unexpected event 0x02 length: 726 > 260 [ 196.207359][ T7474] netlink: zone id is out of range [ 196.267579][ T7474] netlink: zone id is out of range [ 196.277574][ T7474] netlink: zone id is out of range [ 196.312264][ T7474] netlink: zone id is out of range [ 196.327865][ T7474] netlink: get zone limit has 4 unknown bytes [ 197.530577][ T7499] FAULT_INJECTION: forcing a failure. [ 197.530577][ T7499] name fail_futex, interval 1, probability 0, space 0, times 0 [ 197.580482][ T7499] CPU: 1 UID: 0 PID: 7499 Comm: syz.0.343 Not tainted syzkaller #0 PREEMPT(full) [ 197.580519][ T7499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 197.580535][ T7499] Call Trace: [ 197.580544][ T7499] [ 197.580554][ T7499] dump_stack_lvl+0x100/0x190 [ 197.580599][ T7499] should_fail_ex.cold+0x5/0xa [ 197.580630][ T7499] get_futex_key+0x1d2/0x1620 [ 197.580666][ T7499] ? __pfx_get_futex_key+0x10/0x10 [ 197.580699][ T7499] ? __x64_sys_kexec_load+0x1c9/0x230 [ 197.580728][ T7499] ? kasan_save_stack+0x3f/0x50 [ 197.580774][ T7499] ? kasan_save_stack+0x30/0x50 [ 197.580821][ T7499] ? kasan_save_track+0x14/0x30 [ 197.580866][ T7499] ? kasan_save_free_info+0x3b/0x70 [ 197.580909][ T7499] futex_wake+0xea/0x530 [ 197.580959][ T7499] ? __pfx_futex_wake+0x10/0x10 [ 197.581019][ T7499] do_futex+0x32b/0x350 [ 197.581058][ T7499] ? __pfx_do_futex+0x10/0x10 [ 197.581109][ T7499] __x64_sys_futex+0x34f/0x4d0 [ 197.581174][ T7499] ? __pfx___x64_sys_futex+0x10/0x10 [ 197.581217][ T7499] ? __x64_sys_kexec_load+0x1c9/0x230 [ 197.581257][ T7499] ? _copy_from_user+0x59/0xd0 [ 197.581324][ T7499] do_syscall_64+0x106/0xf80 [ 197.581365][ T7499] ? clear_bhb_loop+0x40/0x90 [ 197.581406][ T7499] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.581446][ T7499] RIP: 0033:0x7ff85bb9c799 [ 197.581472][ T7499] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 197.581503][ T7499] RSP: 002b:00007ff85ca430e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 197.581531][ T7499] RAX: ffffffffffffffda RBX: 00007ff85be15fa8 RCX: 00007ff85bb9c799 [ 197.581551][ T7499] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007ff85be15fac [ 197.581569][ T7499] RBP: 00007ff85be15fa0 R08: 0000000000000000 R09: 0000000000000000 [ 197.581587][ T7499] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 197.581606][ T7499] R13: 00007ff85be16038 R14: 00007ffee8f15470 R15: 00007ffee8f15558 [ 197.581644][ T7499] [ 198.070950][ T5831] Bluetooth: hci0: unexpected event 0x02 length: 726 > 260 [ 202.767533][ T7563] FAULT_INJECTION: forcing a failure. [ 202.767533][ T7563] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 202.788644][ T7563] CPU: 0 UID: 0 PID: 7563 Comm: syz.2.356 Not tainted syzkaller #0 PREEMPT(full) [ 202.788682][ T7563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 202.788699][ T7563] Call Trace: [ 202.788708][ T7563] [ 202.788719][ T7563] dump_stack_lvl+0x100/0x190 [ 202.788772][ T7563] should_fail_ex.cold+0x5/0xa [ 202.788801][ T7563] ? prepare_alloc_pages+0x16d/0x5f0 [ 202.788839][ T7563] should_fail_alloc_page+0xeb/0x140 [ 202.788873][ T7563] prepare_alloc_pages+0x1f0/0x5f0 [ 202.788914][ T7563] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 202.788965][ T7563] ? __lock_acquire+0x4a5/0x2630 [ 202.789012][ T7563] ? __update_page_owner_handle+0x3c7/0x550 [ 202.789071][ T7563] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 202.789124][ T7563] ? __page_table_check_zero+0x333/0x410 [ 202.789194][ T7563] ? post_alloc_hook+0x140/0x170 [ 202.789238][ T7563] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 202.789304][ T7563] ? policy_nodemask+0xed/0x4f0 [ 202.789338][ T7563] alloc_pages_mpol+0x1fb/0x550 [ 202.789373][ T7563] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 202.789417][ T7563] alloc_pages_noprof+0x131/0x390 [ 202.789452][ T7563] pte_alloc_one+0x1e/0x3e0 [ 202.789487][ T7563] do_huge_pmd_anonymous_page+0x835/0x1a60 [ 202.789563][ T7563] __handle_mm_fault+0x1e9e/0x2b60 [ 202.789622][ T7563] ? mt_find+0x45e/0x8e0 [ 202.789669][ T7563] ? __pfx___handle_mm_fault+0x10/0x10 [ 202.789710][ T7563] ? __pfx_mt_find+0x10/0x10 [ 202.789796][ T7563] handle_mm_fault+0x36d/0xa20 [ 202.789846][ T7563] __get_user_pages+0xf9c/0x34d0 [ 202.789893][ T7563] ? down_read_killable+0x30e/0x4c0 [ 202.789936][ T7563] ? __lock_acquire+0x4a5/0x2630 [ 202.789975][ T7563] ? __pfx___get_user_pages+0x10/0x10 [ 202.790006][ T7563] ? __lock_acquire+0x4a5/0x2630 [ 202.790056][ T7563] __gup_longterm_locked+0x87d/0x16f0 [ 202.790103][ T7563] ? __pfx___gup_longterm_locked+0x10/0x10 [ 202.790143][ T7563] ? try_get_folio+0x262/0x750 [ 202.790170][ T7563] ? pmd_write+0xd3/0x150 [ 202.790220][ T7563] ? sanity_check_pinned_pages+0x5f6/0x1250 [ 202.790282][ T7563] gup_fast_fallback+0x18c6/0x2460 [ 202.790350][ T7563] ? __pfx_gup_fast_fallback+0x10/0x10 [ 202.790387][ T7563] ? kasan_save_stack+0x30/0x50 [ 202.790437][ T7563] ? kasan_save_track+0x14/0x30 [ 202.790486][ T7563] ? __kasan_slab_alloc+0x89/0x90 [ 202.790516][ T7563] ? mempool_alloc_noprof+0x1b7/0x310 [ 202.790550][ T7563] ? bvec_alloc+0x197/0x210 [ 202.790604][ T7563] ? bio_alloc_bioset+0x59e/0x850 [ 202.790662][ T7563] ? blkdev_direct_IO+0xeae/0x1fb0 [ 202.790699][ T7563] ? blkdev_write_iter+0x703/0xd70 [ 202.790734][ T7563] ? vfs_write+0x6ac/0x1070 [ 202.790780][ T7563] ? ksys_write+0x12a/0x250 [ 202.790826][ T7563] ? do_syscall_64+0x106/0xf80 [ 202.790862][ T7563] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.790901][ T7563] pin_user_pages_fast+0xa7/0xf0 [ 202.790937][ T7563] ? __pfx_pin_user_pages_fast+0x10/0x10 [ 202.790975][ T7563] ? iov_iter_advance+0xac/0x6d0 [ 202.791030][ T7563] iov_iter_extract_pages+0xa0d/0x1ef0 [ 202.791080][ T7563] ? __pfx_iov_iter_extract_pages+0x10/0x10 [ 202.791164][ T7563] ? iov_iter_revert+0x252/0x5b0 [ 202.791216][ T7563] ? bio_associate_blkg_from_css+0x394/0x13f0 [ 202.791264][ T7563] iov_iter_extract_bvecs+0x10e/0xf40 [ 202.791317][ T7563] ? __pfx_iov_iter_extract_bvecs+0x10/0x10 [ 202.791356][ T7563] ? bio_init+0x404/0x610 [ 202.791406][ T7563] bio_iov_iter_get_pages+0x26a/0x970 [ 202.791476][ T7563] blkdev_direct_IO+0x1302/0x1fb0 [ 202.791540][ T7563] ? __pfx_blkdev_direct_IO+0x10/0x10 [ 202.791612][ T7563] blkdev_write_iter+0x703/0xd70 [ 202.791666][ T7563] vfs_write+0x6ac/0x1070 [ 202.791722][ T7563] ? __pfx_blkdev_write_iter+0x10/0x10 [ 202.791769][ T7563] ? __pfx_vfs_write+0x10/0x10 [ 202.791818][ T7563] ? find_held_lock+0x2b/0x80 [ 202.791878][ T7563] ksys_write+0x12a/0x250 [ 202.791933][ T7563] ? __pfx_ksys_write+0x10/0x10 [ 202.792001][ T7563] do_syscall_64+0x106/0xf80 [ 202.792040][ T7563] ? clear_bhb_loop+0x40/0x90 [ 202.792082][ T7563] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.792118][ T7563] RIP: 0033:0x7f5a55d9c799 [ 202.792145][ T7563] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 202.792177][ T7563] RSP: 002b:00007f5a5376e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 202.792208][ T7563] RAX: ffffffffffffffda RBX: 00007f5a56016360 RCX: 00007f5a55d9c799 [ 202.792230][ T7563] RDX: 000000100000a3d9 RSI: 00002000000000c0 RDI: 0000000000000009 [ 202.792252][ T7563] RBP: 00007f5a55e32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 202.792284][ T7563] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 202.792303][ T7563] R13: 00007f5a560163f8 R14: 00007f5a56016360 R15: 00007ffde3828a38 [ 202.792357][ T7563] [ 203.613113][ T7570] Console: switching to colour VGA+ 80x25 [ 205.544809][ T7606] process 'syz.2.366' launched '/dev/fd/4' with NULL argv: empty string added [ 207.115724][ T7631] program syz.3.374 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 209.958346][ T7675] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 209.982254][ T7675] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 209.999521][ T7675] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 210.016529][ T7675] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 210.077773][ T7681] FAULT_INJECTION: forcing a failure. [ 210.077773][ T7681] name failslab, interval 1, probability 0, space 0, times 0 [ 210.136469][ T7681] CPU: 0 UID: 0 PID: 7681 Comm: syz.3.388 Not tainted syzkaller #0 PREEMPT(full) [ 210.136514][ T7681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 210.136533][ T7681] Call Trace: [ 210.136543][ T7681] [ 210.136556][ T7681] dump_stack_lvl+0x100/0x190 [ 210.136612][ T7681] should_fail_ex.cold+0x5/0xa [ 210.136649][ T7681] ? snd_pcm_plugin_build+0x434/0x650 [ 210.136684][ T7681] should_failslab+0xc2/0x120 [ 210.136719][ T7681] __kmalloc_noprof+0xe0/0x850 [ 210.136778][ T7681] snd_pcm_plugin_build+0x434/0x650 [ 210.136810][ T7681] ? snd_pcm_plugin_build+0x4b7/0x650 [ 210.136848][ T7681] snd_pcm_plugin_build_linear+0x254/0x850 [ 210.136892][ T7681] ? __pfx_snd_pcm_plugin_build_linear+0x10/0x10 [ 210.136936][ T7681] ? snd_pcm_hw_params+0x262/0x1cb0 [ 210.136979][ T7681] snd_pcm_plug_format_plugins+0x536/0x1430 [ 210.137021][ T7681] ? __pfx_snd_pcm_plug_format_plugins+0x10/0x10 [ 210.137064][ T7681] ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10 [ 210.137133][ T7681] snd_pcm_oss_change_params_locked+0x2e3c/0x39f0 [ 210.137208][ T7681] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 210.137274][ T7681] ? __pfx___mutex_lock+0x10/0x10 [ 210.137346][ T7681] snd_pcm_oss_get_active_substream+0x175/0x1d0 [ 210.137407][ T7681] snd_pcm_oss_ioctl+0x1c08/0x3720 [ 210.137441][ T7681] ? __fget_files+0x215/0x3d0 [ 210.137478][ T7681] ? hook_file_ioctl_common+0x146/0x410 [ 210.137530][ T7681] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 210.137585][ T7681] ? __fget_files+0x21f/0x3d0 [ 210.137619][ T7681] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 210.137674][ T7681] __x64_sys_ioctl+0x18e/0x210 [ 210.137720][ T7681] do_syscall_64+0x106/0xf80 [ 210.137755][ T7681] ? clear_bhb_loop+0x40/0x90 [ 210.137792][ T7681] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.137824][ T7681] RIP: 0033:0x7f3548b9c799 [ 210.137849][ T7681] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 210.137878][ T7681] RSP: 002b:00007f3549ac6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 210.137907][ T7681] RAX: ffffffffffffffda RBX: 00007f3548e15fa0 RCX: 00007f3548b9c799 [ 210.137927][ T7681] RDX: 0000000000000000 RSI: 00000000c0045002 RDI: 0000000000000007 [ 210.137945][ T7681] RBP: 00007f3548c32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 210.137963][ T7681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 210.137981][ T7681] R13: 00007f3548e16038 R14: 00007f3548e15fa0 R15: 00007ffea4281888 [ 210.138023][ T7681] [ 210.475002][ T7685] FAULT_INJECTION: forcing a failure. [ 210.475002][ T7685] name failslab, interval 1, probability 0, space 0, times 0 [ 210.487673][ T7685] CPU: 0 UID: 0 PID: 7685 Comm: syz.0.389 Not tainted syzkaller #0 PREEMPT(full) [ 210.487701][ T7685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 210.487715][ T7685] Call Trace: [ 210.487722][ T7685] [ 210.487731][ T7685] dump_stack_lvl+0x100/0x190 [ 210.487768][ T7685] should_fail_ex.cold+0x5/0xa [ 210.487793][ T7685] ? snd_pcm_plugin_build+0x64/0x650 [ 210.487816][ T7685] should_failslab+0xc2/0x120 [ 210.487839][ T7685] __kmalloc_noprof+0xe0/0x850 [ 210.487871][ T7685] ? __kmalloc_noprof+0x320/0x850 [ 210.487909][ T7685] snd_pcm_plugin_build+0x64/0x650 [ 210.487931][ T7685] ? snd_pcm_plugin_build+0x4b7/0x650 [ 210.487957][ T7685] snd_pcm_plugin_build_linear+0x254/0x850 [ 210.487986][ T7685] ? __pfx_snd_pcm_plugin_build_linear+0x10/0x10 [ 210.488016][ T7685] ? snd_pcm_hw_params+0x262/0x1cb0 [ 210.488045][ T7685] snd_pcm_plug_format_plugins+0x536/0x1430 [ 210.488073][ T7685] ? __pfx_snd_pcm_plug_format_plugins+0x10/0x10 [ 210.488113][ T7685] ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10 [ 210.488175][ T7685] snd_pcm_oss_change_params_locked+0x2e3c/0x39f0 [ 210.488242][ T7685] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 210.488279][ T7685] ? __pfx___mutex_lock+0x10/0x10 [ 210.488324][ T7685] snd_pcm_oss_get_active_substream+0x175/0x1d0 [ 210.488384][ T7685] snd_pcm_oss_ioctl+0x1c08/0x3720 [ 210.488432][ T7685] ? __fget_files+0x215/0x3d0 [ 210.488459][ T7685] ? hook_file_ioctl_common+0x146/0x410 [ 210.488510][ T7685] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 210.488564][ T7685] ? __fget_files+0x21f/0x3d0 [ 210.488599][ T7685] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 210.488638][ T7685] __x64_sys_ioctl+0x18e/0x210 [ 210.488672][ T7685] do_syscall_64+0x106/0xf80 [ 210.488698][ T7685] ? clear_bhb_loop+0x40/0x90 [ 210.488726][ T7685] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.488750][ T7685] RIP: 0033:0x7ff85bb9c799 [ 210.488768][ T7685] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 210.488789][ T7685] RSP: 002b:00007ff85ca43028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 210.488809][ T7685] RAX: ffffffffffffffda RBX: 00007ff85be15fa0 RCX: 00007ff85bb9c799 [ 210.488824][ T7685] RDX: 0000000000000000 RSI: 00000000c0045002 RDI: 0000000000000006 [ 210.488837][ T7685] RBP: 00007ff85bc32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 210.488851][ T7685] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 210.488864][ T7685] R13: 00007ff85be16038 R14: 00007ff85be15fa0 R15: 00007ffee8f15558 [ 210.488892][ T7685] [ 211.441998][ T5831] Bluetooth: hci0: command 0x0c1a tx timeout [ 211.908833][ T5831] Bluetooth: hci1: unexpected event 0x02 length: 726 > 260 [ 212.009374][ T5831] Bluetooth: hci1: command 0x0c1a tx timeout [ 212.079425][ T5823] Bluetooth: hci2: command 0x0c1a tx timeout [ 212.085603][ T5831] Bluetooth: hci3: command 0x0c1a tx timeout [ 213.265692][ T7725] netlink: 12 bytes leftover after parsing attributes in process `syz.1.398'. [ 214.443464][ T7742] FAULT_INJECTION: forcing a failure. [ 214.443464][ T7742] name fail_futex, interval 1, probability 0, space 0, times 0 [ 214.474119][ T7742] CPU: 1 UID: 0 PID: 7742 Comm: syz.1.402 Not tainted syzkaller #0 PREEMPT(full) [ 214.474157][ T7742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 214.474175][ T7742] Call Trace: [ 214.474184][ T7742] [ 214.474195][ T7742] dump_stack_lvl+0x100/0x190 [ 214.474244][ T7742] should_fail_ex.cold+0x5/0xa [ 214.474279][ T7742] get_futex_key+0x1d2/0x1620 [ 214.474321][ T7742] ? __pfx_get_futex_key+0x10/0x10 [ 214.474364][ T7742] ? __cgroup_account_cputime+0xd5/0x130 [ 214.474423][ T7742] futex_wait_setup+0x83/0x510 [ 214.474494][ T7742] __futex_wait+0x19f/0x300 [ 214.474548][ T7742] ? __pfx___futex_wait+0x10/0x10 [ 214.474596][ T7742] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 214.474633][ T7742] ? lockdep_hardirqs_on+0x78/0x100 [ 214.474677][ T7742] ? __pfx_futex_wake_mark+0x10/0x10 [ 214.474735][ T7742] ? find_held_lock+0x2b/0x80 [ 214.474764][ T7742] ? futex_wake+0x456/0x530 [ 214.474834][ T7742] futex_wait+0xed/0x380 [ 214.474900][ T7742] ? __pfx_futex_wait+0x10/0x10 [ 214.474963][ T7742] ? find_held_lock+0x2b/0x80 [ 214.474992][ T7742] ? __might_fault+0xc5/0x140 [ 214.475043][ T7742] do_futex+0x1ef/0x350 [ 214.475086][ T7742] ? __pfx_do_futex+0x10/0x10 [ 214.475137][ T7742] ? snd_pcm_oss_ioctl+0x2b6/0x3720 [ 214.475175][ T7742] __x64_sys_futex+0x34f/0x4d0 [ 214.475221][ T7742] ? __pfx___x64_sys_futex+0x10/0x10 [ 214.475260][ T7742] ? __task_pid_nr_ns+0x1ca/0x510 [ 214.475297][ T7742] ? __task_pid_nr_ns+0x1ca/0x510 [ 214.475347][ T7742] do_syscall_64+0x106/0xf80 [ 214.475401][ T7742] ? clear_bhb_loop+0x40/0x90 [ 214.475442][ T7742] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.475483][ T7742] RIP: 0033:0x7fe574f9c799 [ 214.475509][ T7742] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 214.475541][ T7742] RSP: 002b:00007fe575e7e0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 214.475582][ T7742] RAX: ffffffffffffffda RBX: 00007fe575215fa8 RCX: 00007fe574f9c799 [ 214.475602][ T7742] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fe575215fa8 [ 214.475621][ T7742] RBP: 00007fe575215fa0 R08: 0000000000000000 R09: 0000000000000000 [ 214.475639][ T7742] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 214.475657][ T7742] R13: 00007fe575216038 R14: 00007ffdced1bf50 R15: 00007ffdced1c038 [ 214.475696][ T7742] [ 215.040809][ T5831] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 215.459917][ T7753] smc: net device dummy0 applied user defined pnetid DUMMY0 [ 215.808300][ T7761] Console: switching to colour frame buffer device 128x48 [ 215.860621][ T7763] Console: switching to colour VGA+ 80x25 [ 216.877101][ T7774] Invalid ELF header magic: != ELF [ 217.495580][ T30] audit: type=1326 audit(1772732515.794:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7783 comm="syz.3.413" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3548b9c799 code=0x0 [ 219.026882][ T7785] kexec: Could not allocate control_code_buffer [ 219.915367][ T7807] Console: switching to colour frame buffer device 128x48 [ 220.181310][ T7811] random: crng reseeded on system resumption [ 220.578220][ T5831] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 220.731790][ T7826] FAULT_INJECTION: forcing a failure. [ 220.731790][ T7826] name failslab, interval 1, probability 0, space 0, times 0 [ 220.773881][ T7826] CPU: 1 UID: 0 PID: 7826 Comm: syz.2.422 Not tainted syzkaller #0 PREEMPT(full) [ 220.773922][ T7826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 220.773941][ T7826] Call Trace: [ 220.773951][ T7826] [ 220.773963][ T7826] dump_stack_lvl+0x100/0x190 [ 220.774028][ T7826] should_fail_ex.cold+0x5/0xa [ 220.774063][ T7826] ? snd_pcm_plugin_build+0x64/0x650 [ 220.774094][ T7826] should_failslab+0xc2/0x120 [ 220.774126][ T7826] __kmalloc_noprof+0xe0/0x850 [ 220.774172][ T7826] ? __kmalloc_noprof+0x320/0x850 [ 220.774224][ T7826] snd_pcm_plugin_build+0x64/0x650 [ 220.774253][ T7826] ? snd_pcm_plugin_build+0x4b7/0x650 [ 220.774299][ T7826] snd_pcm_plugin_build_linear+0x254/0x850 [ 220.774340][ T7826] ? __pfx_snd_pcm_plugin_build_linear+0x10/0x10 [ 220.774414][ T7826] ? snd_pcm_hw_params+0x262/0x1cb0 [ 220.774456][ T7826] snd_pcm_plug_format_plugins+0x536/0x1430 [ 220.774496][ T7826] ? __pfx_snd_pcm_plug_format_plugins+0x10/0x10 [ 220.774536][ T7826] ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10 [ 220.774597][ T7826] snd_pcm_oss_change_params_locked+0x2e3c/0x39f0 [ 220.774666][ T7826] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 220.774718][ T7826] ? __pfx___mutex_lock+0x10/0x10 [ 220.774807][ T7826] snd_pcm_oss_get_active_substream+0x175/0x1d0 [ 220.774867][ T7826] snd_pcm_oss_ioctl+0x1c08/0x3720 [ 220.774902][ T7826] ? __fget_files+0x215/0x3d0 [ 220.774929][ T7826] ? hook_file_ioctl_common+0x146/0x410 [ 220.774995][ T7826] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 220.775071][ T7826] ? __fget_files+0x21f/0x3d0 [ 220.775106][ T7826] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 220.775164][ T7826] __x64_sys_ioctl+0x18e/0x210 [ 220.775214][ T7826] do_syscall_64+0x106/0xf80 [ 220.775251][ T7826] ? clear_bhb_loop+0x40/0x90 [ 220.775301][ T7826] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.775335][ T7826] RIP: 0033:0x7f5a55d9c799 [ 220.775361][ T7826] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 220.775392][ T7826] RSP: 002b:00007f5a53ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 220.775422][ T7826] RAX: ffffffffffffffda RBX: 00007f5a56015fa0 RCX: 00007f5a55d9c799 [ 220.775444][ T7826] RDX: 0000000000000000 RSI: 00000000c0045002 RDI: 0000000000000007 [ 220.775463][ T7826] RBP: 00007f5a55e32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 220.775482][ T7826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 220.775501][ T7826] R13: 00007f5a56016038 R14: 00007f5a56015fa0 R15: 00007ffde3828a38 [ 220.775545][ T7826] [ 221.801666][ T7844] netlink: 13832 bytes leftover after parsing attributes in process `syz.0.426'. [ 222.755953][ T7860] FAULT_INJECTION: forcing a failure. [ 222.755953][ T7860] name failslab, interval 1, probability 0, space 0, times 0 [ 222.823711][ T7860] CPU: 0 UID: 0 PID: 7860 Comm: syz.3.430 Not tainted syzkaller #0 PREEMPT(full) [ 222.823742][ T7860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 222.823757][ T7860] Call Trace: [ 222.823764][ T7860] [ 222.823773][ T7860] dump_stack_lvl+0x100/0x190 [ 222.823825][ T7860] should_fail_ex.cold+0x5/0xa [ 222.823871][ T7860] should_failslab+0xc2/0x120 [ 222.823897][ T7860] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 222.823934][ T7860] ? do_getname+0x35/0x390 [ 222.823970][ T7860] do_getname+0x35/0x390 [ 222.824003][ T7860] user_path_at+0x26/0x60 [ 222.824042][ T7860] __x64_sys_mount+0x1fb/0x310 [ 222.824074][ T7860] ? __pfx___x64_sys_mount+0x10/0x10 [ 222.824111][ T7860] do_syscall_64+0x106/0xf80 [ 222.824140][ T7860] ? clear_bhb_loop+0x40/0x90 [ 222.824170][ T7860] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.824196][ T7860] RIP: 0033:0x7f3548b9c799 [ 222.824216][ T7860] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 222.824239][ T7860] RSP: 002b:00007f3549ac6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 222.824261][ T7860] RAX: ffffffffffffffda RBX: 00007f3548e15fa0 RCX: 00007f3548b9c799 [ 222.824277][ T7860] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000180 [ 222.824292][ T7860] RBP: 00007f3548c32bd9 R08: 0000200000000280 R09: 0000000000000000 [ 222.824307][ T7860] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 222.824321][ T7860] R13: 00007f3548e16038 R14: 00007f3548e15fa0 R15: 00007ffea4281888 [ 222.824352][ T7860] [ 223.617938][ T7870] syz.0.432 uses obsolete (PF_INET,SOCK_PACKET) [ 224.224547][ T7878] FAULT_INJECTION: forcing a failure. [ 224.224547][ T7878] name failslab, interval 1, probability 0, space 0, times 0 [ 224.224617][ T7878] CPU: 1 UID: 0 PID: 7878 Comm: syz.3.436 Not tainted syzkaller #0 PREEMPT(full) [ 224.224681][ T7878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 224.224713][ T7878] Call Trace: [ 224.224729][ T7878] [ 224.224750][ T7878] dump_stack_lvl+0x100/0x190 [ 224.224838][ T7878] should_fail_ex.cold+0x5/0xa [ 224.224892][ T7878] should_failslab+0xc2/0x120 [ 224.224945][ T7878] __kmalloc_cache_noprof+0x7a/0x6f0 [ 224.224982][ T7878] ? device_create_groups_vargs+0x8a/0x270 [ 224.225015][ T7878] ? __lock_acquire+0x4a5/0x2630 [ 224.225056][ T7878] device_create_groups_vargs+0x8a/0x270 [ 224.225109][ T7878] device_create+0xed/0x130 [ 224.225141][ T7878] ? __pfx_device_create+0x10/0x10 [ 224.225174][ T7878] ? is_console_locked+0x9/0x20 [ 224.225208][ T7878] ? con_is_visible+0x65/0x150 [ 224.225258][ T7878] ? csi_J+0x57e/0xad0 [ 224.225304][ T7878] vcs_make_sysfs+0x32/0x80 [ 224.225334][ T7878] vc_allocate+0x539/0x880 [ 224.225371][ T7878] ? __pfx_vc_allocate+0x10/0x10 [ 224.225418][ T7878] con_install+0xa1/0x620 [ 224.225456][ T7878] ? __pfx_con_install+0x10/0x10 [ 224.225498][ T7878] ? __pfx_con_install+0x10/0x10 [ 224.225537][ T7878] tty_init_dev.part.0+0x9e/0x470 [ 224.225584][ T7878] tty_open+0xa63/0xfa0 [ 224.225633][ T7878] ? __pfx_tty_open+0x10/0x10 [ 224.225672][ T7878] ? chrdev_open+0x589/0x6a0 [ 224.225703][ T7878] ? chrdev_open+0x589/0x6a0 [ 224.225739][ T7878] ? __pfx_tty_open+0x10/0x10 [ 224.225781][ T7878] chrdev_open+0x234/0x6a0 [ 224.225814][ T7878] ? __pfx_chrdev_open+0x10/0x10 [ 224.225849][ T7878] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 224.225891][ T7878] do_dentry_open+0x6d8/0x1660 [ 224.225920][ T7878] ? __pfx_chrdev_open+0x10/0x10 [ 224.225970][ T7878] vfs_open+0x82/0x3f0 [ 224.226014][ T7878] path_openat+0x208c/0x31a0 [ 224.226059][ T7878] ? __pfx_path_openat+0x10/0x10 [ 224.226107][ T7878] do_file_open+0x20e/0x430 [ 224.226141][ T7878] ? __pfx_do_file_open+0x10/0x10 [ 224.226202][ T7878] ? alloc_fd+0x476/0x790 [ 224.226237][ T7878] ? do_getname+0x191/0x390 [ 224.226279][ T7878] do_sys_openat2+0x10d/0x1e0 [ 224.226320][ T7878] ? __pfx_do_sys_openat2+0x10/0x10 [ 224.226376][ T7878] __x64_sys_openat+0x12d/0x210 [ 224.226418][ T7878] ? __pfx___x64_sys_openat+0x10/0x10 [ 224.226475][ T7878] do_syscall_64+0x106/0xf80 [ 224.226514][ T7878] ? clear_bhb_loop+0x40/0x90 [ 224.226554][ T7878] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.226586][ T7878] RIP: 0033:0x7f3548b9c799 [ 224.226611][ T7878] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 224.226651][ T7878] RSP: 002b:00007f3549ac6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 224.226678][ T7878] RAX: ffffffffffffffda RBX: 00007f3548e15fa0 RCX: 00007f3548b9c799 [ 224.226697][ T7878] RDX: 0000000000000000 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 224.226715][ T7878] RBP: 00007f3548c32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 224.226732][ T7878] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 224.226748][ T7878] R13: 00007f3548e16038 R14: 00007f3548e15fa0 R15: 00007ffea4281888 [ 224.226786][ T7878] [ 224.287927][ T7881] netlink: 28 bytes leftover after parsing attributes in process `syz.3.436'. [ 224.296748][ T7881] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 224.296779][ T7881] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 224.298476][ T7881] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 224.298502][ T7881] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 226.109464][ T7919] FAULT_INJECTION: forcing a failure. [ 226.109464][ T7919] name failslab, interval 1, probability 0, space 0, times 0 [ 226.122267][ T7919] CPU: 1 UID: 0 PID: 7919 Comm: syz.0.443 Not tainted syzkaller #0 PREEMPT(full) [ 226.122311][ T7919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 226.122345][ T7919] Call Trace: [ 226.122356][ T7919] [ 226.122368][ T7919] dump_stack_lvl+0x100/0x190 [ 226.122423][ T7919] should_fail_ex.cold+0x5/0xa [ 226.122462][ T7919] should_failslab+0xc2/0x120 [ 226.122496][ T7919] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 226.122546][ T7919] ? sock_alloc_inode+0x25/0x1c0 [ 226.122598][ T7919] ? __pfx_sock_alloc_inode+0x10/0x10 [ 226.122647][ T7919] sock_alloc_inode+0x25/0x1c0 [ 226.122693][ T7919] alloc_inode+0x68/0x250 [ 226.122737][ T7919] sock_alloc+0x44/0x280 [ 226.122778][ T7919] ? security_socket_create+0x7f/0x250 [ 226.122827][ T7919] __sock_create+0xc2/0x860 [ 226.122883][ T7919] __sys_socket+0x14d/0x260 [ 226.122932][ T7919] ? exc_page_fault+0x6f/0xd0 [ 226.122969][ T7919] ? __pfx___sys_socket+0x10/0x10 [ 226.123026][ T7919] ? do_user_addr_fault+0x8d6/0x12f0 [ 226.123085][ T7919] __x64_sys_socket+0x72/0xb0 [ 226.123137][ T7919] ? lockdep_hardirqs_on+0x78/0x100 [ 226.123174][ T7919] do_syscall_64+0x106/0xf80 [ 226.123212][ T7919] ? clear_bhb_loop+0x40/0x90 [ 226.123261][ T7919] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.123294][ T7919] RIP: 0033:0x7ff85bb9e007 [ 226.123321][ T7919] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 226.123353][ T7919] RSP: 002b:00007ff85ca41f98 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 226.123385][ T7919] RAX: ffffffffffffffda RBX: 00007ff85be15fa0 RCX: 00007ff85bb9e007 [ 226.123408][ T7919] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 226.123428][ T7919] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 226.123448][ T7919] R10: 00002000000000c0 R11: 0000000000000286 R12: 0000000000000000 [ 226.123468][ T7919] R13: 00007ff85be16038 R14: 00007ff85be15fa0 R15: 00007ffee8f15558 [ 226.123524][ T7919] [ 226.123558][ T7919] socket: no more sockets [ 226.590427][ T7930] netlink: zone id is out of range [ 226.595623][ T7930] netlink: zone id is out of range [ 226.635898][ T7930] netlink: zone id is out of range [ 226.655609][ T7930] netlink: zone id is out of range [ 226.672729][ T7930] netlink: zone id is out of range [ 226.692622][ T7930] netlink: zone id is out of range [ 226.732123][ T7930] netlink: get zone limit has 4 unknown bytes [ 228.919045][ T8006] Invalid ELF header magic: != ELF [ 229.817306][ T8016] netlink: zone id is out of range [ 229.843011][ T8016] netlink: zone id is out of range [ 230.187827][ T5831] Bluetooth: hci0: unexpected event 0x02 length: 726 > 260 [ 232.599884][ T8032] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 232.659652][ T8032] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 232.676123][ T8032] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 232.689645][ T8032] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 233.951519][ T8068] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 233.990045][ T8068] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 234.020491][ T8068] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 234.028475][ T8068] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 234.068526][ T5823] Bluetooth: hci2: unexpected event 0x02 length: 726 > 260 [ 234.360262][ T8088] net_ratelimit: 5 callbacks suppressed [ 234.360285][ T8088] netlink: Conntrack attr has 16 unknown bytes [ 235.333155][ T8087] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 235.349360][ T8087] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 235.358728][ T8087] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 235.365434][ T8087] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 235.889148][ T8122] FAULT_INJECTION: forcing a failure. [ 235.889148][ T8122] name failslab, interval 1, probability 0, space 0, times 0 [ 235.995948][ T8122] CPU: 1 UID: 0 PID: 8122 Comm: syz.3.478 Tainted: G L syzkaller #0 PREEMPT(full) [ 235.996000][ T8122] Tainted: [L]=SOFTLOCKUP [ 235.996011][ T8122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 235.996031][ T8122] Call Trace: [ 235.996041][ T8122] [ 235.996054][ T8122] dump_stack_lvl+0x100/0x190 [ 235.996110][ T8122] should_fail_ex.cold+0x5/0xa [ 235.996150][ T8122] should_failslab+0xc2/0x120 [ 235.996185][ T8122] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 235.996233][ T8122] ? security_file_alloc+0x34/0x2c0 [ 235.996267][ T8122] ? trace_kmem_cache_alloc+0xf3/0x120 [ 235.996321][ T8122] security_file_alloc+0x34/0x2c0 [ 235.996355][ T8122] init_file+0x95/0x480 [ 235.996393][ T8122] alloc_empty_file+0x73/0x1c0 [ 235.996433][ T8122] path_openat+0xe8/0x31a0 [ 235.996461][ T8122] ? kasan_save_stack+0x3f/0x50 [ 235.996508][ T8122] ? kasan_save_stack+0x30/0x50 [ 235.996553][ T8122] ? kasan_save_track+0x14/0x30 [ 235.996599][ T8122] ? __kasan_slab_alloc+0x89/0x90 [ 235.996627][ T8122] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 235.996672][ T8122] ? do_getname+0x35/0x390 [ 235.996707][ T8122] ? do_sys_openat2+0xc5/0x1e0 [ 235.996747][ T8122] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.996784][ T8122] ? __pfx_path_openat+0x10/0x10 [ 235.996838][ T8122] do_file_open+0x20e/0x430 [ 235.996873][ T8122] ? __pfx_do_file_open+0x10/0x10 [ 235.996936][ T8122] ? alloc_fd+0x476/0x790 [ 235.996971][ T8122] ? do_getname+0x191/0x390 [ 235.997013][ T8122] do_sys_openat2+0x10d/0x1e0 [ 235.997055][ T8122] ? __pfx_do_sys_openat2+0x10/0x10 [ 235.997096][ T8122] ? __x64_sys_close_range+0x2d9/0x5d0 [ 235.997139][ T8122] __x64_sys_openat+0x12d/0x210 [ 235.997182][ T8122] ? __pfx___x64_sys_openat+0x10/0x10 [ 235.997239][ T8122] do_syscall_64+0x106/0xf80 [ 235.997276][ T8122] ? clear_bhb_loop+0x40/0x90 [ 235.997314][ T8122] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.997347][ T8122] RIP: 0033:0x7f3548b9c799 [ 235.997372][ T8122] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 235.997412][ T8122] RSP: 002b:00007f3549ac6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 235.997457][ T8122] RAX: ffffffffffffffda RBX: 00007f3548e15fa0 RCX: 00007f3548b9c799 [ 235.997478][ T8122] RDX: 0000000000101000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 235.997498][ T8122] RBP: 00007f3548c32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 235.997525][ T8122] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 235.997543][ T8122] R13: 00007f3548e16038 R14: 00007f3548e15fa0 R15: 00007ffea4281888 [ 235.997583][ T8122] [ 236.492516][ T5823] Bluetooth: hci0: command 0x0c1a tx timeout [ 237.372046][ T5823] Bluetooth: hci3: command 0x0c1a tx timeout [ 237.378210][ T5831] Bluetooth: hci2: command 0x0c1a tx timeout [ 237.378250][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 238.706263][ T51] Bluetooth: hci3: unexpected event 0x02 length: 726 > 260 [ 238.802105][ T8178] FAULT_INJECTION: forcing a failure. [ 238.802105][ T8178] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 238.873719][ T8178] CPU: 1 UID: 0 PID: 8178 Comm: syz.0.491 Tainted: G L syzkaller #0 PREEMPT(full) [ 238.873768][ T8178] Tainted: [L]=SOFTLOCKUP [ 238.873784][ T8178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 238.873797][ T8178] Call Trace: [ 238.873805][ T8178] [ 238.873813][ T8178] dump_stack_lvl+0x100/0x190 [ 238.873851][ T8178] should_fail_ex.cold+0x5/0xa [ 238.873877][ T8178] _copy_to_user+0x32/0xd0 [ 238.873901][ T8178] simple_read_from_buffer+0xcb/0x170 [ 238.873939][ T8178] proc_fail_nth_read+0x1af/0x230 [ 238.873967][ T8178] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 238.873997][ T8178] ? rw_verify_area+0xce/0x6d0 [ 238.874030][ T8178] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 238.874057][ T8178] vfs_read+0x1e4/0xb30 [ 238.874097][ T8178] ? __pfx_vfs_read+0x10/0x10 [ 238.874132][ T8178] ? __fget_files+0x215/0x3d0 [ 238.874158][ T8178] ? __fget_files+0x21f/0x3d0 [ 238.874187][ T8178] ksys_read+0x12a/0x250 [ 238.874222][ T8178] ? __pfx_ksys_read+0x10/0x10 [ 238.874266][ T8178] do_syscall_64+0x106/0xf80 [ 238.874294][ T8178] ? clear_bhb_loop+0x40/0x90 [ 238.874322][ T8178] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.874346][ T8178] RIP: 0033:0x7ff85bb5cfce [ 238.874363][ T8178] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 238.874385][ T8178] RSP: 002b:00007ff85ca21fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 238.874406][ T8178] RAX: ffffffffffffffda RBX: 00007ff85ca226c0 RCX: 00007ff85bb5cfce [ 238.874421][ T8178] RDX: 000000000000000f RSI: 00007ff85ca220a0 RDI: 0000000000000004 [ 238.874435][ T8178] RBP: 00007ff85ca22090 R08: 0000000000000000 R09: 0000000000000000 [ 238.874448][ T8178] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 238.874462][ T8178] R13: 00007ff85be16128 R14: 00007ff85be16090 R15: 00007ffee8f15558 [ 238.874491][ T8178] [ 241.225262][ T8238] program syz.1.505 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 241.515853][ T8247] netlink: zone id is out of range [ 241.553354][ T8247] netlink: zone id is out of range [ 241.586148][ T8247] netlink: zone id is out of range [ 241.604811][ T8247] netlink: zone id is out of range [ 241.634296][ T8247] netlink: zone id is out of range [ 241.641862][ T8247] netlink: get zone limit has 4 unknown bytes [ 241.651538][ T8226] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 241.678527][ T8226] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 241.723730][ T8226] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 241.815542][ T8226] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 241.874597][ T8255] ptrace attach of "./syz-executor exec"[5826] was attempted by "./syz-executor exec"[8255] [ 241.895125][ T8258] ptrace attach of "./syz-executor exec"[5826] was attempted by "./syz-executor exec"[8258] [ 241.905775][ T8256] FAULT_INJECTION: forcing a failure. [ 241.905775][ T8256] name failslab, interval 1, probability 0, space 0, times 0 [ 241.918894][ T8256] CPU: 0 UID: 0 PID: 8256 Comm: syz.2.510 Tainted: G L syzkaller #0 PREEMPT(full) [ 241.918947][ T8256] Tainted: [L]=SOFTLOCKUP [ 241.918955][ T8256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 241.918968][ T8256] Call Trace: [ 241.918976][ T8256] [ 241.918984][ T8256] dump_stack_lvl+0x100/0x190 [ 241.919023][ T8256] should_fail_ex.cold+0x5/0xa [ 241.919050][ T8256] should_failslab+0xc2/0x120 [ 241.919074][ T8256] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 241.919123][ T8256] ? security_file_alloc+0x34/0x2c0 [ 241.919145][ T8256] ? trace_kmem_cache_alloc+0xf3/0x120 [ 241.919173][ T8256] security_file_alloc+0x34/0x2c0 [ 241.919196][ T8256] init_file+0x95/0x480 [ 241.919222][ T8256] alloc_empty_file+0x73/0x1c0 [ 241.919250][ T8256] path_openat+0xe8/0x31a0 [ 241.919306][ T8256] ? kasan_save_stack+0x3f/0x50 [ 241.919341][ T8256] ? kasan_save_stack+0x30/0x50 [ 241.919376][ T8256] ? kasan_save_track+0x14/0x30 [ 241.919429][ T8256] ? __kasan_slab_alloc+0x89/0x90 [ 241.919448][ T8256] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 241.919481][ T8256] ? do_getname+0x35/0x390 [ 241.919506][ T8256] ? do_sys_openat2+0xc5/0x1e0 [ 241.919535][ T8256] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.919562][ T8256] ? __pfx_path_openat+0x10/0x10 [ 241.919595][ T8256] do_file_open+0x20e/0x430 [ 241.919620][ T8256] ? __pfx_do_file_open+0x10/0x10 [ 241.919663][ T8256] ? alloc_fd+0x476/0x790 [ 241.919687][ T8256] ? do_getname+0x191/0x390 [ 241.919717][ T8256] do_sys_openat2+0x10d/0x1e0 [ 241.919747][ T8256] ? __pfx_do_sys_openat2+0x10/0x10 [ 241.919780][ T8256] ? __sys_accept4+0x1cb/0x200 [ 241.919810][ T8256] __x64_sys_openat+0x12d/0x210 [ 241.919840][ T8256] ? __pfx___x64_sys_openat+0x10/0x10 [ 241.919880][ T8256] do_syscall_64+0x106/0xf80 [ 241.919907][ T8256] ? clear_bhb_loop+0x40/0x90 [ 241.919938][ T8256] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.919962][ T8256] RIP: 0033:0x7f5a55d5cfce [ 241.919979][ T8256] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 241.920001][ T8256] RSP: 002b:00007f5a53ff5f98 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 241.920022][ T8256] RAX: ffffffffffffffda RBX: 00007f5a53ff66c0 RCX: 00007f5a55d5cfce [ 241.920049][ T8256] RDX: 0000000000000002 RSI: 00007f5a55e324e0 RDI: ffffffffffffff9c [ 241.920062][ T8256] RBP: 00007f5a55e32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 241.920075][ T8256] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 241.920087][ T8256] R13: 00007f5a56016038 R14: 00007f5a56015fa0 R15: 00007ffde3828a38 [ 241.920114][ T8256] [ 242.242702][ T8259] FAULT_INJECTION: forcing a failure. [ 242.242702][ T8259] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 242.290676][ T8259] CPU: 1 UID: 0 PID: 8259 Comm: syz.0.512 Tainted: G L syzkaller #0 PREEMPT(full) [ 242.290717][ T8259] Tainted: [L]=SOFTLOCKUP [ 242.290727][ T8259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 242.290742][ T8259] Call Trace: [ 242.290751][ T8259] [ 242.290761][ T8259] dump_stack_lvl+0x100/0x190 [ 242.290806][ T8259] should_fail_ex.cold+0x5/0xa [ 242.290838][ T8259] _copy_to_user+0x32/0xd0 [ 242.290867][ T8259] simple_read_from_buffer+0xcb/0x170 [ 242.290910][ T8259] proc_fail_nth_read+0x1af/0x230 [ 242.290946][ T8259] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 242.290982][ T8259] ? rw_verify_area+0xce/0x6d0 [ 242.291020][ T8259] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 242.291054][ T8259] vfs_read+0x1e4/0xb30 [ 242.291106][ T8259] ? __pfx_vfs_read+0x10/0x10 [ 242.291170][ T8259] ? __fget_files+0x215/0x3d0 [ 242.291198][ T8259] ? __fget_files+0x21f/0x3d0 [ 242.291228][ T8259] ksys_read+0x12a/0x250 [ 242.291270][ T8259] ? __pfx_ksys_read+0x10/0x10 [ 242.291315][ T8259] do_syscall_64+0x106/0xf80 [ 242.291342][ T8259] ? clear_bhb_loop+0x40/0x90 [ 242.291373][ T8259] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.291397][ T8259] RIP: 0033:0x7ff85bb5cfce [ 242.291416][ T8259] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 242.291438][ T8259] RSP: 002b:00007ff85ca42fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 242.291460][ T8259] RAX: ffffffffffffffda RBX: 00007ff85ca436c0 RCX: 00007ff85bb5cfce [ 242.291476][ T8259] RDX: 000000000000000f RSI: 00007ff85ca430a0 RDI: 0000000000000005 [ 242.291490][ T8259] RBP: 00007ff85ca43090 R08: 0000000000000000 R09: 0000000000000000 [ 242.291504][ T8259] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 242.291518][ T8259] R13: 00007ff85be16038 R14: 00007ff85be15fa0 R15: 00007ffee8f15558 [ 242.291548][ T8259] [ 243.575974][ T8261] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 243.625006][ T8261] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 243.638615][ T8261] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 243.659598][ T8261] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 244.665744][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 245.616338][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 245.644537][ T8342] program syz.1.531 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 245.696105][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 245.702172][ T5823] Bluetooth: hci2: command 0x0c1a tx timeout [ 245.957503][ T8325] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 245.976689][ T8325] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 245.995242][ T8325] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 246.021498][ T8325] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 246.164777][ T51] Bluetooth: hci1: unexpected event 0x02 length: 726 > 260 [ 246.415274][ T51] Bluetooth: hci2: unexpected event 0x02 length: 726 > 260 [ 246.896718][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 248.017655][ T5823] Bluetooth: hci1: command 0x0c1a tx timeout [ 248.023708][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 248.097339][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 249.327717][ T8395] zswap: compressor û not available [ 249.742411][ T8388] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 249.898392][ T8388] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 249.906091][ T8388] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 249.985037][ T8388] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 250.409398][ T5823] Bluetooth: hci1: unexpected event 0x02 length: 726 > 260 [ 250.578718][ T5823] Bluetooth: hci0: command 0x0c1a tx timeout [ 251.939300][ T5823] Bluetooth: hci2: command 0x0c1a tx timeout [ 251.939342][ T5823] Bluetooth: hci1: command 0x0c1a tx timeout [ 252.019448][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 252.044289][ T8430] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 252.044481][ T8430] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 252.044657][ T8430] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 252.044851][ T8430] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 252.560716][ T8460] FAULT_INJECTION: forcing a failure. [ 252.560716][ T8460] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 252.591393][ T8460] CPU: 1 UID: 0 PID: 8460 Comm: syz.1.552 Tainted: G L syzkaller #0 PREEMPT(full) [ 252.591447][ T8460] Tainted: [L]=SOFTLOCKUP [ 252.591459][ T8460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 252.591478][ T8460] Call Trace: [ 252.591490][ T8460] [ 252.591502][ T8460] dump_stack_lvl+0x100/0x190 [ 252.591559][ T8460] should_fail_ex.cold+0x5/0xa [ 252.591600][ T8460] _copy_from_user+0x2e/0xd0 [ 252.591657][ T8460] copy_msghdr_from_user+0x9f/0x4f0 [ 252.591714][ T8460] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 252.591779][ T8460] ? __pfx_futex_wake_mark+0x10/0x10 [ 252.591850][ T8460] ___sys_sendmsg+0x106/0x1e0 [ 252.591906][ T8460] ? __pfx____sys_sendmsg+0x10/0x10 [ 252.592005][ T8460] __sys_sendmsg+0x170/0x220 [ 252.592047][ T8460] ? __pfx___sys_sendmsg+0x10/0x10 [ 252.592086][ T8460] ? __x64_sys_futex+0x34f/0x4d0 [ 252.592153][ T8460] do_syscall_64+0x106/0xf80 [ 252.592191][ T8460] ? clear_bhb_loop+0x40/0x90 [ 252.592232][ T8460] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.592267][ T8460] RIP: 0033:0x7fe574f9c799 [ 252.592294][ T8460] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 252.592359][ T8460] RSP: 002b:00007fe575e5d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 252.592388][ T8460] RAX: ffffffffffffffda RBX: 00007fe575216090 RCX: 00007fe574f9c799 [ 252.592408][ T8460] RDX: 0000000000044000 RSI: 0000200000000280 RDI: 0000000000000003 [ 252.592426][ T8460] RBP: 00007fe575032bd9 R08: 0000000000000000 R09: 0000000000000000 [ 252.592445][ T8460] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 252.592464][ T8460] R13: 00007fe575216128 R14: 00007fe575216090 R15: 00007ffdced1c038 [ 252.592503][ T8460] [ 253.380203][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 254.034468][ T8555] netlink: 28 bytes leftover after parsing attributes in process `syz.3.562'. [ 254.103671][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 254.103686][ T5823] Bluetooth: hci2: command 0x0c1a tx timeout [ 254.103723][ T5823] Bluetooth: hci1: command 0x0c1a tx timeout [ 255.358376][ T8569] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 255.368625][ T8569] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 255.403326][ T8569] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 255.431267][ T8569] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 255.634834][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.642988][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.809822][ T8605] capability: warning: `syz.1.577' uses 32-bit capabilities (legacy support in use) [ 256.872373][ T8601] FAULT_INJECTION: forcing a failure. [ 256.872373][ T8601] name failslab, interval 1, probability 0, space 0, times 0 [ 256.887955][ T8601] CPU: 0 UID: 0 PID: 8601 Comm: syz.2.575 Tainted: G L syzkaller #0 PREEMPT(full) [ 256.888007][ T8601] Tainted: [L]=SOFTLOCKUP [ 256.888019][ T8601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 256.888040][ T8601] Call Trace: [ 256.888050][ T8601] [ 256.888062][ T8601] dump_stack_lvl+0x100/0x190 [ 256.888118][ T8601] should_fail_ex.cold+0x5/0xa [ 256.888158][ T8601] should_failslab+0xc2/0x120 [ 256.888192][ T8601] __kmalloc_cache_noprof+0x7a/0x6f0 [ 256.888237][ T8601] ? kvm_uevent_notify_change.part.0+0x94/0x450 [ 256.888291][ T8601] kvm_uevent_notify_change.part.0+0x94/0x450 [ 256.888336][ T8601] ? __pfx_kvm_vm_release+0x10/0x10 [ 256.888373][ T8601] kvm_put_kvm+0xe4/0xb10 [ 256.888418][ T8601] ? lockdep_hardirqs_on+0x78/0x100 [ 256.888461][ T8601] ? _raw_spin_unlock_irq+0x2e/0x50 [ 256.888497][ T8601] ? __pfx_kvm_vm_release+0x10/0x10 [ 256.888534][ T8601] kvm_vm_release+0x3c/0x50 [ 256.888568][ T8601] __fput+0x3ff/0xb40 [ 256.888610][ T8601] ? _raw_spin_unlock_irq+0x23/0x50 [ 256.888649][ T8601] task_work_run+0x150/0x240 [ 256.888698][ T8601] ? __pfx_task_work_run+0x10/0x10 [ 256.888758][ T8601] exit_to_user_mode_loop+0x100/0x4a0 [ 256.888806][ T8601] do_syscall_64+0x668/0xf80 [ 256.888846][ T8601] ? clear_bhb_loop+0x40/0x90 [ 256.888887][ T8601] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.888923][ T8601] RIP: 0033:0x7f5a55d9c799 [ 256.888950][ T8601] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 256.888984][ T8601] RSP: 002b:00007f5a53ff6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 256.889015][ T8601] RAX: 0000000000000000 RBX: 00007f5a56015fa0 RCX: 00007f5a55d9c799 [ 256.889036][ T8601] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 256.889056][ T8601] RBP: 00007f5a55e32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 256.889077][ T8601] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 256.889098][ T8601] R13: 00007f5a56016038 R14: 00007f5a56015fa0 R15: 00007ffde3828a38 [ 256.889141][ T8601] [ 256.901825][ T5823] Bluetooth: hci0: command 0x0c1a tx timeout [ 257.385745][ T5823] Bluetooth: hci1: command 0x0c1a tx timeout [ 257.462135][ T5823] Bluetooth: hci3: command 0x0c1a tx timeout [ 257.462149][ T5831] Bluetooth: hci2: command 0x0c1a tx timeout [ 257.997832][ T8623] FAULT_INJECTION: forcing a failure. [ 257.997832][ T8623] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 258.048078][ T8623] CPU: 1 UID: 0 PID: 8623 Comm: syz.3.581 Tainted: G L syzkaller #0 PREEMPT(full) [ 258.048129][ T8623] Tainted: [L]=SOFTLOCKUP [ 258.048140][ T8623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 258.048159][ T8623] Call Trace: [ 258.048170][ T8623] [ 258.048182][ T8623] dump_stack_lvl+0x100/0x190 [ 258.048237][ T8623] should_fail_ex.cold+0x5/0xa [ 258.048271][ T8623] ? prepare_alloc_pages+0x16d/0x5f0 [ 258.048312][ T8623] should_fail_alloc_page+0xeb/0x140 [ 258.048351][ T8623] prepare_alloc_pages+0x1f0/0x5f0 [ 258.048395][ T8623] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 258.048452][ T8623] ? __lock_acquire+0x4a5/0x2630 [ 258.048502][ T8623] ? __update_page_owner_handle+0x3c7/0x550 [ 258.048576][ T8623] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 258.048622][ T8623] ? rcu_is_watching+0x12/0xc0 [ 258.048671][ T8623] ? trace_contention_end.constprop.0+0x15b/0x1b0 [ 258.048732][ T8623] ? __pfx_min_vruntime_cb_rotate+0x10/0x10 [ 258.048780][ T8623] ? kvm_sched_clock_read+0x11/0x20 [ 258.048814][ T8623] ? sched_clock+0x38/0x60 [ 258.048856][ T8623] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 258.048912][ T8623] ? policy_nodemask+0xed/0x4f0 [ 258.048946][ T8623] alloc_pages_mpol+0x1fb/0x550 [ 258.048980][ T8623] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 258.049012][ T8623] ? finish_task_switch.isra.0+0x205/0xb80 [ 258.049054][ T8623] alloc_pages_noprof+0x131/0x390 [ 258.049088][ T8623] pte_alloc_one+0x1e/0x3e0 [ 258.049124][ T8623] do_huge_pmd_anonymous_page+0x835/0x1a60 [ 258.049181][ T8623] __handle_mm_fault+0x1e9e/0x2b60 [ 258.049230][ T8623] ? mt_find+0x45e/0x8e0 [ 258.049274][ T8623] ? __pfx___handle_mm_fault+0x10/0x10 [ 258.049314][ T8623] ? __pfx_mt_find+0x10/0x10 [ 258.049385][ T8623] handle_mm_fault+0x36d/0xa20 [ 258.049436][ T8623] __get_user_pages+0xf9c/0x34d0 [ 258.049481][ T8623] ? down_read_killable+0x30e/0x4c0 [ 258.049524][ T8623] ? __lock_acquire+0x4a5/0x2630 [ 258.049563][ T8623] ? __pfx___get_user_pages+0x10/0x10 [ 258.049596][ T8623] ? preempt_schedule_irq+0x7b/0x90 [ 258.049640][ T8623] __gup_longterm_locked+0x87d/0x16f0 [ 258.049686][ T8623] ? __pfx___gup_longterm_locked+0x10/0x10 [ 258.049726][ T8623] ? try_get_folio+0x262/0x750 [ 258.049760][ T8623] ? pmd_write+0xd3/0x150 [ 258.049812][ T8623] ? sanity_check_pinned_pages+0x5f6/0x1250 [ 258.049853][ T8623] gup_fast_fallback+0x18c6/0x2460 [ 258.049917][ T8623] ? __pfx_gup_fast_fallback+0x10/0x10 [ 258.049953][ T8623] ? trace_sched_exit_tp+0x13a/0x180 [ 258.049989][ T8623] ? __schedule+0x1000/0x6120 [ 258.050019][ T8623] ? bvec_alloc+0x197/0x210 [ 258.050061][ T8623] ? bio_alloc_bioset+0x59e/0x850 [ 258.050105][ T8623] ? blkdev_direct_IO+0xeae/0x1fb0 [ 258.050140][ T8623] ? blkdev_write_iter+0x703/0xd70 [ 258.050188][ T8623] pin_user_pages_fast+0xa7/0xf0 [ 258.050224][ T8623] ? __pfx_pin_user_pages_fast+0x10/0x10 [ 258.050263][ T8623] ? iov_iter_advance+0xac/0x6d0 [ 258.050318][ T8623] iov_iter_extract_pages+0xa0d/0x1ef0 [ 258.050354][ T8623] ? irqentry_exit+0x180/0x670 [ 258.050390][ T8623] ? lockdep_hardirqs_on+0x78/0x100 [ 258.050427][ T8623] ? irqentry_exit+0x180/0x670 [ 258.050467][ T8623] ? __pfx_iov_iter_extract_pages+0x10/0x10 [ 258.050530][ T8623] ? iov_iter_revert+0x252/0x5b0 [ 258.050577][ T8623] ? iov_iter_extract_bvecs+0x581/0xf40 [ 258.050614][ T8623] iov_iter_extract_bvecs+0x10e/0xf40 [ 258.050662][ T8623] ? __pfx_iov_iter_extract_bvecs+0x10/0x10 [ 258.050696][ T8623] ? bio_init+0x404/0x610 [ 258.050743][ T8623] bio_iov_iter_get_pages+0x26a/0x970 [ 258.050820][ T8623] blkdev_direct_IO+0x1302/0x1fb0 [ 258.050880][ T8623] ? __pfx_blkdev_direct_IO+0x10/0x10 [ 258.050939][ T8623] blkdev_write_iter+0x703/0xd70 [ 258.050987][ T8623] vfs_write+0x6ac/0x1070 [ 258.051038][ T8623] ? __pfx_blkdev_write_iter+0x10/0x10 [ 258.051080][ T8623] ? __pfx_vfs_write+0x10/0x10 [ 258.051132][ T8623] ? find_held_lock+0x2b/0x80 [ 258.051206][ T8623] ksys_write+0x12a/0x250 [ 258.051259][ T8623] ? __pfx_ksys_write+0x10/0x10 [ 258.051326][ T8623] do_syscall_64+0x106/0xf80 [ 258.051364][ T8623] ? clear_bhb_loop+0x40/0x90 [ 258.051405][ T8623] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.051438][ T8623] RIP: 0033:0x7f3548b9c799 [ 258.051466][ T8623] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 258.051499][ T8623] RSP: 002b:00007f3549a42028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 258.051530][ T8623] RAX: ffffffffffffffda RBX: 00007f3548e16360 RCX: 00007f3548b9c799 [ 258.051552][ T8623] RDX: 000000100000a3d9 RSI: 00002000000000c0 RDI: 0000000000000009 [ 258.051573][ T8623] RBP: 00007f3548c32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 258.051593][ T8623] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 258.051613][ T8623] R13: 00007f3548e163f8 R14: 00007f3548e16360 R15: 00007ffea4281888 [ 258.051675][ T8623] [ 258.902840][ T8641] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.0.584: iget: checksum invalid [ 259.033253][ T8641] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 259.143161][ T8641] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.0.584: iget: checksum invalid [ 259.217299][ T8641] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 259.283046][ T8641] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.0.584: iget: checksum invalid [ 259.345899][ T8641] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 259.393140][ T8641] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.0.584: iget: checksum invalid [ 259.474914][ T8641] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 259.501508][ T8641] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 259.573121][ T8641] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 259.751120][ T8658] netlink: zone id is out of range [ 259.779455][ T8658] netlink: zone id is out of range [ 259.802941][ T8658] netlink: zone id is out of range [ 259.869681][ T8659] netlink: zone id is out of range [ 259.895909][ T8658] netlink: zone id is out of range [ 259.923424][ T8658] netlink: zone id is out of range [ 259.943691][ T8659] netlink: zone id is out of range [ 259.972958][ T8658] netlink: zone id is out of range [ 259.978711][ T8658] netlink: zone id is out of range [ 259.982327][ T8659] netlink: zone id is out of range [ 260.614883][ T8671] binder: 8664:8671 ioctl 4018620d 9 returned -22 [ 262.080395][ T8677] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 262.144517][ T8677] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 262.150657][ T8677] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 262.198853][ T8677] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 263.082157][ T5823] Bluetooth: hci0: command 0x0c1a tx timeout [ 263.302970][ T8716] Invalid ELF header magic: != ELF [ 263.423104][ T8721] random: crng reseeded on system resumption [ 263.636470][ T8724] netlink: 12 bytes leftover after parsing attributes in process `syz.2.609'. [ 263.938714][ T8729] FAULT_INJECTION: forcing a failure. [ 263.938714][ T8729] name failslab, interval 1, probability 0, space 0, times 0 [ 263.962654][ T8729] CPU: 1 UID: 0 PID: 8729 Comm: syz.2.610 Tainted: G L syzkaller #0 PREEMPT(full) [ 263.962699][ T8729] Tainted: [L]=SOFTLOCKUP [ 263.962709][ T8729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 263.962725][ T8729] Call Trace: [ 263.962734][ T8729] [ 263.962745][ T8729] dump_stack_lvl+0x100/0x190 [ 263.962790][ T8729] should_fail_ex.cold+0x5/0xa [ 263.962821][ T8729] should_failslab+0xc2/0x120 [ 263.962848][ T8729] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 263.962888][ T8729] ? __d_alloc+0x34/0xa80 [ 263.962916][ T8729] ? lockdep_init_map_type+0x5c/0x250 [ 263.962956][ T8729] __d_alloc+0x34/0xa80 [ 263.962986][ T8729] d_alloc_pseudo+0x1c/0xc0 [ 263.963022][ T8729] alloc_file_pseudo+0xcf/0x230 [ 263.963056][ T8729] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 263.963088][ T8729] ? alloc_fd+0x476/0x790 [ 263.963117][ T8729] sock_alloc_file+0x50/0x210 [ 263.963151][ T8729] __sys_socket+0x1c0/0x260 [ 263.963190][ T8729] ? __pfx___sys_socket+0x10/0x10 [ 263.963247][ T8729] __x64_sys_socket+0x72/0xb0 [ 263.963287][ T8729] ? lockdep_hardirqs_on+0x78/0x100 [ 263.963319][ T8729] do_syscall_64+0x106/0xf80 [ 263.963349][ T8729] ? clear_bhb_loop+0x40/0x90 [ 263.963381][ T8729] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.963407][ T8729] RIP: 0033:0x7f5a55d9e007 [ 263.963428][ T8729] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 263.963454][ T8729] RSP: 002b:00007f5a53ff4f98 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 263.963479][ T8729] RAX: ffffffffffffffda RBX: 00007f5a56015fa0 RCX: 00007f5a55d9e007 [ 263.963496][ T8729] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 263.963512][ T8729] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 263.963528][ T8729] R10: 0000200000000240 R11: 0000000000000286 R12: 0000000000000000 [ 263.963545][ T8729] R13: 00007f5a56016038 R14: 00007f5a56015fa0 R15: 00007ffde3828a38 [ 263.963579][ T8729] [ 264.227017][ T5823] Bluetooth: hci3: command 0x0c1a tx timeout [ 264.233084][ T5823] Bluetooth: hci2: command 0x0c1a tx timeout [ 264.239276][ T5823] Bluetooth: hci1: command 0x0c1a tx timeout [ 266.429039][ T51] Bluetooth: hci3: unexpected event 0x02 length: 726 > 260 [ 267.838691][ T8808] netlink: 13832 bytes leftover after parsing attributes in process `syz.2.635'. [ 268.307530][ T8819] FAULT_INJECTION: forcing a failure. [ 268.307530][ T8819] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 268.336019][ T8819] CPU: 1 UID: 0 PID: 8819 Comm: syz.0.637 Tainted: G L syzkaller #0 PREEMPT(full) [ 268.336072][ T8819] Tainted: [L]=SOFTLOCKUP [ 268.336080][ T8819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 268.336094][ T8819] Call Trace: [ 268.336101][ T8819] [ 268.336109][ T8819] dump_stack_lvl+0x100/0x190 [ 268.336147][ T8819] should_fail_ex.cold+0x5/0xa [ 268.336172][ T8819] _copy_from_user+0x2e/0xd0 [ 268.336210][ T8819] restore_altstack+0x98/0x170 [ 268.336240][ T8819] ? __pfx_restore_altstack+0x10/0x10 [ 268.336271][ T8819] ? _raw_spin_unlock_irq+0x23/0x50 [ 268.336295][ T8819] ? lockdep_hardirqs_on+0x78/0x100 [ 268.336325][ T8819] ? _raw_spin_unlock_irq+0x2e/0x50 [ 268.336351][ T8819] __do_sys_rt_sigreturn+0x1ab/0x2c0 [ 268.336379][ T8819] ? __pfx___do_sys_rt_sigreturn+0x10/0x10 [ 268.336416][ T8819] do_syscall_64+0x106/0xf80 [ 268.336442][ T8819] ? clear_bhb_loop+0x40/0x90 [ 268.336470][ T8819] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.336493][ T8819] RIP: 0033:0x7ff85bb3db19 [ 268.336510][ T8819] Code: 11 06 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 0c 25 [ 268.336532][ T8819] RSP: 002b:00007ff85ca42a80 EFLAGS: 00000246 ORIG_RAX: 000000000000000f [ 268.336554][ T8819] RAX: ffffffffffffffda RBX: 00007ff85be15fa0 RCX: 00007ff85bb3db19 [ 268.336569][ T8819] RDX: 00007ff85ca42a80 RSI: 00007ff85ca42bb0 RDI: 0000000000000011 [ 268.336583][ T8819] RBP: 00007ff85bc32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 268.336597][ T8819] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 268.336610][ T8819] R13: 00007ff85be16038 R14: 00007ff85be15fa0 R15: 00007ffee8f15558 [ 268.336649][ T8819] [ 268.952896][ T8796] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 269.012050][ T8796] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 269.037944][ T8796] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 269.054904][ T8796] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 269.108171][ T51] Bluetooth: hci3: unexpected event 0x02 length: 726 > 260 [ 269.335736][ T8834] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.1.641: iget: checksum invalid [ 269.420910][ T8834] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 269.470291][ T8834] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.1.641: iget: checksum invalid [ 269.517843][ T8834] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 269.529218][ T8834] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.1.641: iget: checksum invalid [ 269.541228][ T8834] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 269.557477][ T8834] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.1.641: iget: checksum invalid [ 269.573502][ T8834] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 269.583442][ T8834] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 269.594458][ T8834] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 269.948548][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 271.078894][ T5823] Bluetooth: hci2: command 0x0c1a tx timeout [ 271.084953][ T5823] Bluetooth: hci1: command 0x0c1a tx timeout [ 271.091022][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 271.302806][ T8843] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 271.351712][ T8843] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 271.378264][ T8843] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 271.420965][ T8843] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 271.846768][ T8870] zswap: compressor  not available [ 271.915114][ T8883] netlink: 4 bytes leftover after parsing attributes in process `syz.2.654'. [ 271.926213][ T51] Bluetooth: hci2: unexpected event 0x02 length: 726 > 260 [ 272.032495][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 272.676174][ T8895] block nbd8: shutting down sockets [ 272.809365][ T8897] FAULT_INJECTION: forcing a failure. [ 272.809365][ T8897] name failslab, interval 1, probability 0, space 0, times 0 [ 272.858469][ T8897] CPU: 0 UID: 0 PID: 8897 Comm: syz.1.658 Tainted: G L syzkaller #0 PREEMPT(full) [ 272.858508][ T8897] Tainted: [L]=SOFTLOCKUP [ 272.858516][ T8897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 272.858537][ T8897] Call Trace: [ 272.858545][ T8897] [ 272.858554][ T8897] dump_stack_lvl+0x100/0x190 [ 272.858594][ T8897] should_fail_ex.cold+0x5/0xa [ 272.858623][ T8897] should_failslab+0xc2/0x120 [ 272.858648][ T8897] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 272.858683][ T8897] ? __anon_vma_prepare+0x344/0x5e0 [ 272.858741][ T8897] __anon_vma_prepare+0x344/0x5e0 [ 272.858775][ T8897] ? do_raw_spin_lock+0x128/0x260 [ 272.858815][ T8897] __vmf_anon_prepare+0x11f/0x250 [ 272.858847][ T8897] do_huge_pmd_anonymous_page+0x15c/0x1a60 [ 272.858887][ T8897] ? __pmd_alloc+0x6aa/0x9c0 [ 272.858918][ T8897] __handle_mm_fault+0x1e9e/0x2b60 [ 272.858956][ T8897] ? mt_find+0x45e/0x8e0 [ 272.858990][ T8897] ? __pfx___handle_mm_fault+0x10/0x10 [ 272.859021][ T8897] ? __pfx_mt_find+0x10/0x10 [ 272.859084][ T8897] handle_mm_fault+0x36d/0xa20 [ 272.859135][ T8897] __get_user_pages+0xf9c/0x34d0 [ 272.859174][ T8897] ? __pfx___get_user_pages+0x10/0x10 [ 272.859210][ T8897] populate_vma_page_range+0x267/0x3f0 [ 272.859242][ T8897] ? __pfx_populate_vma_page_range+0x10/0x10 [ 272.859272][ T8897] ? __pfx_find_vma_intersection+0x10/0x10 [ 272.859300][ T8897] ? do_mmap+0x93f/0x12f0 [ 272.859329][ T8897] __mm_populate+0x107/0x3a0 [ 272.859359][ T8897] ? __pfx___mm_populate+0x10/0x10 [ 272.859391][ T8897] ? up_write+0x290/0x4f0 [ 272.859430][ T8897] vm_mmap_pgoff+0x37f/0x470 [ 272.859460][ T8897] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 272.859490][ T8897] ? do_futex+0x192/0x350 [ 272.859522][ T8897] ? __pfx_do_futex+0x10/0x10 [ 272.859584][ T8897] ksys_mmap_pgoff+0xe1/0x650 [ 272.859619][ T8897] ? __x64_sys_futex+0x34f/0x4d0 [ 272.859664][ T8897] ? __x64_sys_futex+0x358/0x4d0 [ 272.859697][ T8897] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 272.859723][ T8897] ? xfd_validate_state+0x129/0x190 [ 272.859765][ T8897] __x64_sys_mmap+0x125/0x190 [ 272.859805][ T8897] do_syscall_64+0x106/0xf80 [ 272.859834][ T8897] ? clear_bhb_loop+0x40/0x90 [ 272.859866][ T8897] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.859891][ T8897] RIP: 0033:0x7fe574f9c799 [ 272.859911][ T8897] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 272.859936][ T8897] RSP: 002b:00007fe575e7e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 272.859959][ T8897] RAX: ffffffffffffffda RBX: 00007fe575215fa0 RCX: 00007fe574f9c799 [ 272.859976][ T8897] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 272.859990][ T8897] RBP: 00007fe575032bd9 R08: 0000000000000002 R09: 0000000000008000 [ 272.860006][ T8897] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 272.860021][ T8897] R13: 00007fe575216038 R14: 00007fe575215fa0 R15: 00007ffdced1c038 [ 272.860058][ T8897] [ 273.395245][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 273.395267][ T5823] Bluetooth: hci1: command 0x0c1a tx timeout [ 273.469977][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 273.818703][ T8913] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input18 [ 274.860468][ T8907] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 274.885923][ T8907] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 274.932531][ T8907] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 274.947553][ T8907] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 275.322625][ T8930] WARNING! power/level is deprecated; use power/control instead [ 275.494131][ T8937] FAULT_INJECTION: forcing a failure. [ 275.494131][ T8937] name failslab, interval 1, probability 0, space 0, times 0 [ 275.554454][ T8937] CPU: 0 UID: 0 PID: 8937 Comm: syz.0.669 Tainted: G L syzkaller #0 PREEMPT(full) [ 275.554490][ T8937] Tainted: [L]=SOFTLOCKUP [ 275.554498][ T8937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 275.554511][ T8937] Call Trace: [ 275.554518][ T8937] [ 275.554527][ T8937] dump_stack_lvl+0x100/0x190 [ 275.554567][ T8937] should_fail_ex.cold+0x5/0xa [ 275.554592][ T8937] should_failslab+0xc2/0x120 [ 275.554615][ T8937] __kmalloc_cache_noprof+0x7a/0x6f0 [ 275.554645][ T8937] ? kvm_uevent_notify_change.part.0+0x2a6/0x450 [ 275.554682][ T8937] kvm_uevent_notify_change.part.0+0x2a6/0x450 [ 275.554712][ T8937] ? __pfx_kvm_vm_release+0x10/0x10 [ 275.554737][ T8937] kvm_put_kvm+0xe4/0xb10 [ 275.554761][ T8937] ? lockdep_hardirqs_on+0x78/0x100 [ 275.554788][ T8937] ? _raw_spin_unlock_irq+0x2e/0x50 [ 275.554813][ T8937] ? __pfx_kvm_vm_release+0x10/0x10 [ 275.554837][ T8937] kvm_vm_release+0x3c/0x50 [ 275.554861][ T8937] __fput+0x3ff/0xb40 [ 275.554890][ T8937] ? _raw_spin_unlock_irq+0x23/0x50 [ 275.554915][ T8937] task_work_run+0x150/0x240 [ 275.554985][ T8937] ? __pfx_task_work_run+0x10/0x10 [ 275.555025][ T8937] exit_to_user_mode_loop+0x100/0x4a0 [ 275.555057][ T8937] do_syscall_64+0x668/0xf80 [ 275.555083][ T8937] ? clear_bhb_loop+0x40/0x90 [ 275.555122][ T8937] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.555145][ T8937] RIP: 0033:0x7ff85bb9c799 [ 275.555163][ T8937] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 275.555186][ T8937] RSP: 002b:00007ff85ca43028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 275.555207][ T8937] RAX: 0000000000000000 RBX: 00007ff85be15fa0 RCX: 00007ff85bb9c799 [ 275.555222][ T8937] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 275.555235][ T8937] RBP: 00007ff85bc32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 275.555249][ T8937] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 275.555262][ T8937] R13: 00007ff85be16038 R14: 00007ff85be15fa0 R15: 00007ffee8f15558 [ 275.555291][ T8937] [ 275.768510][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 275.788705][ T8934] Invalid ELF header magic: != ELF [ 276.656651][ T8953] FAULT_INJECTION: forcing a failure. [ 276.656651][ T8953] name failslab, interval 1, probability 0, space 0, times 0 [ 276.724748][ T8953] CPU: 1 UID: 0 PID: 8953 Comm: syz.0.673 Tainted: G L syzkaller #0 PREEMPT(full) [ 276.724801][ T8953] Tainted: [L]=SOFTLOCKUP [ 276.724813][ T8953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 276.724831][ T8953] Call Trace: [ 276.724842][ T8953] [ 276.724854][ T8953] dump_stack_lvl+0x100/0x190 [ 276.724910][ T8953] should_fail_ex.cold+0x5/0xa [ 276.724947][ T8953] should_failslab+0xc2/0x120 [ 276.724981][ T8953] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 276.725029][ T8953] ? __pmd_alloc+0xbf/0x9c0 [ 276.725074][ T8953] __pmd_alloc+0xbf/0x9c0 [ 276.725114][ T8953] __handle_mm_fault+0xa99/0x2b60 [ 276.725164][ T8953] ? mt_find+0x45e/0x8e0 [ 276.725208][ T8953] ? __pfx___handle_mm_fault+0x10/0x10 [ 276.725250][ T8953] ? __pfx_mt_find+0x10/0x10 [ 276.725315][ T8953] ? find_vma+0xbf/0x140 [ 276.725346][ T8953] ? __pfx_find_vma+0x10/0x10 [ 276.725382][ T8953] handle_mm_fault+0x36d/0xa20 [ 276.725432][ T8953] do_user_addr_fault+0x74c/0x12f0 [ 276.725498][ T8953] exc_page_fault+0x6f/0xd0 [ 276.725548][ T8953] asm_exc_page_fault+0x26/0x30 [ 276.725580][ T8953] RIP: 0010:rep_movs_alternative+0x30/0x90 [ 276.725633][ T8953] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 fd 93 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 [ 276.725665][ T8953] RSP: 0018:ffffc90004f1fc28 EFLAGS: 00050216 [ 276.725690][ T8953] RAX: 0000000000000001 RBX: 0000000000000001 RCX: 0000000000000030 [ 276.725710][ T8953] RDX: 0000000000000001 RSI: 0000000000000001 RDI: ffffc90004f1fc88 [ 276.725731][ T8953] RBP: 0000000000000030 R08: 0000000000000001 R09: fffff520009e3f96 [ 276.725751][ T8953] R10: ffffc90004f1fcb7 R11: 0000000000000000 R12: 0000000000000000 [ 276.725772][ T8953] R13: ffffc90004f1fc88 R14: ffff88805d61e508 R15: 0000000040305829 [ 276.725816][ T8953] _copy_from_user+0x98/0xd0 [ 276.725873][ T8953] ioctl_preallocate+0xae/0x210 [ 276.725920][ T8953] ? __pfx_ioctl_preallocate+0x10/0x10 [ 276.725985][ T8953] do_vfs_ioctl+0x1157/0x13e0 [ 276.726031][ T8953] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 276.726092][ T8953] ? find_held_lock+0x2b/0x80 [ 276.726121][ T8953] ? __fget_files+0x215/0x3d0 [ 276.726149][ T8953] ? hook_file_ioctl_common+0x146/0x410 [ 276.726212][ T8953] ? __fget_files+0x21f/0x3d0 [ 276.726254][ T8953] __x64_sys_ioctl+0x114/0x210 [ 276.726305][ T8953] do_syscall_64+0x106/0xf80 [ 276.726354][ T8953] ? clear_bhb_loop+0x40/0x90 [ 276.726391][ T8953] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.726423][ T8953] RIP: 0033:0x7ff85bb9c799 [ 276.726448][ T8953] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 276.726478][ T8953] RSP: 002b:00007ff85ca43028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 276.726507][ T8953] RAX: ffffffffffffffda RBX: 00007ff85be15fa0 RCX: 00007ff85bb9c799 [ 276.726527][ T8953] RDX: 0000000000000001 RSI: 0000000040305829 RDI: 0000000000000008 [ 276.726554][ T8953] RBP: 00007ff85bc32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 276.726580][ T8953] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 276.726599][ T8953] R13: 00007ff85be16038 R14: 00007ff85be15fa0 R15: 00007ffee8f15558 [ 276.726641][ T8953] [ 277.053133][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 277.059183][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 277.065261][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 277.666290][ T8966] zswap: compressor not available [ 277.672114][ T8967] ACPI: EC: Assuming SCI_EVT clearing on QR_EC writes [ 278.362853][ T5823] Bluetooth: hci1: unexpected event 0x02 length: 726 > 260 [ 278.434847][ T8991] netlink: 338 bytes leftover after parsing attributes in process `syz.2.682'. [ 278.486542][ T8994] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input19 [ 279.365952][ T9008] FAULT_INJECTION: forcing a failure. [ 279.365952][ T9008] name failslab, interval 1, probability 0, space 0, times 0 [ 279.385049][ T9008] CPU: 0 UID: 0 PID: 9008 Comm: syz.3.686 Tainted: G L syzkaller #0 PREEMPT(full) [ 279.385091][ T9008] Tainted: [L]=SOFTLOCKUP [ 279.385101][ T9008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 279.385118][ T9008] Call Trace: [ 279.385127][ T9008] [ 279.385138][ T9008] dump_stack_lvl+0x100/0x190 [ 279.385185][ T9008] should_fail_ex.cold+0x5/0xa [ 279.385217][ T9008] should_failslab+0xc2/0x120 [ 279.385249][ T9008] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 279.385292][ T9008] ? __proc_create+0x2cb/0x8c0 [ 279.385338][ T9008] __proc_create+0x2cb/0x8c0 [ 279.385380][ T9008] ? __pfx___proc_create+0x10/0x10 [ 279.385434][ T9008] ? _raw_write_unlock+0x28/0x50 [ 279.385464][ T9008] ? proc_register+0x559/0x8a0 [ 279.385512][ T9008] proc_create_reg+0x75/0x170 [ 279.385545][ T9008] proc_create_net_data+0x8e/0x1c0 [ 279.385600][ T9008] ? __pfx_proc_create_net_data+0x10/0x10 [ 279.385648][ T9008] ? sctp_defaults_init+0x720/0xd90 [ 279.385696][ T9008] sctp_proc_init+0xfb/0x270 [ 279.385731][ T9008] ? __pfx_sctp_defaults_init+0x10/0x10 [ 279.385784][ T9008] sctp_defaults_init+0x758/0xd90 [ 279.385831][ T9008] ? __pfx_sctp_defaults_init+0x10/0x10 [ 279.385872][ T9008] ops_init+0x1e2/0x5f0 [ 279.385939][ T9008] setup_net+0x118/0x3a0 [ 279.385977][ T9008] ? __pfx_setup_net+0x10/0x10 [ 279.386011][ T9008] ? lockdep_init_map_type+0x5c/0x250 [ 279.386049][ T9008] ? mutex_init_lockep+0x110/0x150 [ 279.386094][ T9008] copy_net_ns+0x46f/0x7c0 [ 279.386136][ T9008] create_new_namespaces+0x3ea/0xac0 [ 279.386172][ T9008] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 279.386204][ T9008] ksys_unshare+0x473/0xad0 [ 279.386240][ T9008] ? __pfx_ksys_unshare+0x10/0x10 [ 279.386286][ T9008] __x64_sys_unshare+0x31/0x40 [ 279.386320][ T9008] do_syscall_64+0x106/0xf80 [ 279.386352][ T9008] ? clear_bhb_loop+0x40/0x90 [ 279.386386][ T9008] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.386420][ T9008] RIP: 0033:0x7f3548b9c799 [ 279.386443][ T9008] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 279.386470][ T9008] RSP: 002b:00007f3549ac6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 279.386497][ T9008] RAX: ffffffffffffffda RBX: 00007f3548e15fa0 RCX: 00007f3548b9c799 [ 279.386516][ T9008] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 279.386533][ T9008] RBP: 00007f3548c32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 279.386550][ T9008] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 279.386568][ T9008] R13: 00007f3548e16038 R14: 00007f3548e15fa0 R15: 00007ffea4281888 [ 279.386602][ T9008] [ 279.931982][ T9010] Console: switching to colour VGA+ 80x25 [ 280.929085][ T9033] FAULT_INJECTION: forcing a failure. [ 280.929085][ T9033] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 280.963315][ T9033] CPU: 1 UID: 0 PID: 9033 Comm: syz.3.692 Tainted: G L syzkaller #0 PREEMPT(full) [ 280.963348][ T9033] Tainted: [L]=SOFTLOCKUP [ 280.963356][ T9033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 280.963368][ T9033] Call Trace: [ 280.963375][ T9033] [ 280.963382][ T9033] dump_stack_lvl+0x100/0x190 [ 280.963419][ T9033] should_fail_ex.cold+0x5/0xa [ 280.963443][ T9033] _copy_from_user+0x2e/0xd0 [ 280.963480][ T9033] copy_from_sockptr_offset.constprop.0+0x12c/0x150 [ 280.963518][ T9033] ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10 [ 280.963556][ T9033] ? tcp_setsockopt+0xae/0x100 [ 280.963581][ T9033] smc_setsockopt+0x299/0xa10 [ 280.963638][ T9033] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 280.963693][ T9033] ? __pfx_smc_setsockopt+0x10/0x10 [ 280.963743][ T9033] ? aa_sock_opt_perm+0xfe/0x1b0 [ 280.963783][ T9033] ? __pfx_smc_setsockopt+0x10/0x10 [ 280.963832][ T9033] do_sock_setsockopt+0xf3/0x1d0 [ 280.963898][ T9033] __sys_setsockopt+0x119/0x190 [ 280.963942][ T9033] __x64_sys_setsockopt+0xbd/0x160 [ 280.963989][ T9033] ? do_syscall_64+0x95/0xf80 [ 280.964024][ T9033] ? lockdep_hardirqs_on+0x78/0x100 [ 280.964059][ T9033] do_syscall_64+0x106/0xf80 [ 280.964092][ T9033] ? clear_bhb_loop+0x40/0x90 [ 280.964129][ T9033] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.964159][ T9033] RIP: 0033:0x7f3548b9c799 [ 280.964183][ T9033] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 280.964213][ T9033] RSP: 002b:00007f3549aa5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 280.964233][ T9033] RAX: ffffffffffffffda RBX: 00007f3548e16090 RCX: 00007f3548b9c799 [ 280.964247][ T9033] RDX: 000000000000000c RSI: 0000000000000006 RDI: 0000000000000003 [ 280.964259][ T9033] RBP: 00007f3549aa5090 R08: 0000000000000fb3 R09: 0000000000000000 [ 280.964272][ T9033] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 280.964284][ T9033] R13: 00007f3548e16128 R14: 00007f3548e16090 R15: 00007ffea4281888 [ 280.964311][ T9033] [ 281.332778][ T9019] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 281.339440][ T9019] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 281.345534][ T9019] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 281.351564][ T9019] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 281.896579][ T9041] Invalid ELF header magic: != ELF [ 282.434457][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 282.872579][ T9069] FAULT_INJECTION: forcing a failure. [ 282.872579][ T9069] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 282.894080][ T9069] CPU: 0 UID: 0 PID: 9069 Comm: syz.3.701 Tainted: G L syzkaller #0 PREEMPT(full) [ 282.894128][ T9069] Tainted: [L]=SOFTLOCKUP [ 282.894140][ T9069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 282.894159][ T9069] Call Trace: [ 282.894169][ T9069] [ 282.894180][ T9069] dump_stack_lvl+0x100/0x190 [ 282.894232][ T9069] should_fail_ex.cold+0x5/0xa [ 282.894269][ T9069] _copy_from_user+0x2e/0xd0 [ 282.894323][ T9069] move_addr_to_kernel+0x65/0x170 [ 282.894378][ T9069] __sys_bind+0x11d/0x260 [ 282.894409][ T9069] ? __pfx___sys_bind+0x10/0x10 [ 282.894471][ T9069] __x64_sys_bind+0x72/0xb0 [ 282.894500][ T9069] ? lockdep_hardirqs_on+0x78/0x100 [ 282.894539][ T9069] do_syscall_64+0x106/0xf80 [ 282.894578][ T9069] ? clear_bhb_loop+0x40/0x90 [ 282.894617][ T9069] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.894650][ T9069] RIP: 0033:0x7f3548b9c799 [ 282.894676][ T9069] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 282.894707][ T9069] RSP: 002b:00007f3549aa5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 282.894737][ T9069] RAX: ffffffffffffffda RBX: 00007f3548e16090 RCX: 00007f3548b9c799 [ 282.894757][ T9069] RDX: 000000000000006a RSI: 0000000000000000 RDI: 0000000000000003 [ 282.894775][ T9069] RBP: 00007f3548c32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 282.894794][ T9069] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 282.894811][ T9069] R13: 00007f3548e16128 R14: 00007f3548e16090 R15: 00007ffea4281888 [ 282.894851][ T9069] [ 283.280757][ T9074] FAULT_INJECTION: forcing a failure. [ 283.280757][ T9074] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 283.321249][ T9074] CPU: 1 UID: 0 PID: 9074 Comm: syz.0.702 Tainted: G L syzkaller #0 PREEMPT(full) [ 283.321304][ T9074] Tainted: [L]=SOFTLOCKUP [ 283.321317][ T9074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 283.321337][ T9074] Call Trace: [ 283.321347][ T9074] [ 283.321359][ T9074] dump_stack_lvl+0x100/0x190 [ 283.321418][ T9074] should_fail_ex.cold+0x5/0xa [ 283.321451][ T9074] ? prepare_alloc_pages+0x16d/0x5f0 [ 283.321495][ T9074] should_fail_alloc_page+0xeb/0x140 [ 283.321534][ T9074] prepare_alloc_pages+0x1f0/0x5f0 [ 283.321581][ T9074] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 283.321639][ T9074] ? __lock_acquire+0x4a5/0x2630 [ 283.321694][ T9074] ? __lock_acquire+0x4a5/0x2630 [ 283.321741][ T9074] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 283.321795][ T9074] ? __lock_acquire+0x4a5/0x2630 [ 283.321845][ T9074] ? kvm_sched_clock_read+0x11/0x20 [ 283.321891][ T9074] ? sched_clock+0x38/0x60 [ 283.321945][ T9074] ? __lock_acquire+0x4a5/0x2630 [ 283.321992][ T9074] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 283.322054][ T9074] ? policy_nodemask+0xed/0x4f0 [ 283.322093][ T9074] alloc_pages_mpol+0x1fb/0x550 [ 283.322131][ T9074] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 283.322180][ T9074] alloc_pages_noprof+0x131/0x390 [ 283.322218][ T9074] pte_alloc_one+0x1e/0x3e0 [ 283.322258][ T9074] do_huge_pmd_anonymous_page+0x835/0x1a60 [ 283.322332][ T9074] __handle_mm_fault+0x1e9e/0x2b60 [ 283.322383][ T9074] ? mt_find+0x45e/0x8e0 [ 283.322429][ T9074] ? __pfx___handle_mm_fault+0x10/0x10 [ 283.322471][ T9074] ? __pfx_mt_find+0x10/0x10 [ 283.322549][ T9074] handle_mm_fault+0x36d/0xa20 [ 283.322602][ T9074] __get_user_pages+0xf9c/0x34d0 [ 283.322663][ T9074] ? down_read_killable+0x30e/0x4c0 [ 283.322703][ T9074] ? __lock_acquire+0x4a5/0x2630 [ 283.322743][ T9074] ? __pfx___get_user_pages+0x10/0x10 [ 283.322793][ T9074] ? __lock_acquire+0x4a5/0x2630 [ 283.322857][ T9074] __gup_longterm_locked+0x87d/0x16f0 [ 283.322930][ T9074] ? __pfx___gup_longterm_locked+0x10/0x10 [ 283.322974][ T9074] ? try_get_folio+0x262/0x750 [ 283.323015][ T9074] ? pmd_write+0xd3/0x150 [ 283.323065][ T9074] ? sanity_check_pinned_pages+0x5f6/0x1250 [ 283.323107][ T9074] gup_fast_fallback+0x18c6/0x2460 [ 283.323171][ T9074] ? __pfx_gup_fast_fallback+0x10/0x10 [ 283.323208][ T9074] ? kasan_save_stack+0x30/0x50 [ 283.323254][ T9074] ? kasan_save_track+0x14/0x30 [ 283.323299][ T9074] ? __kasan_slab_alloc+0x89/0x90 [ 283.323326][ T9074] ? mempool_alloc_noprof+0x1b7/0x310 [ 283.323357][ T9074] ? bvec_alloc+0x197/0x210 [ 283.323402][ T9074] ? bio_alloc_bioset+0x59e/0x850 [ 283.323447][ T9074] ? blkdev_direct_IO+0xeae/0x1fb0 [ 283.323483][ T9074] ? blkdev_write_iter+0x703/0xd70 [ 283.323518][ T9074] ? vfs_write+0x6ac/0x1070 [ 283.323565][ T9074] ? ksys_write+0x12a/0x250 [ 283.323611][ T9074] ? do_syscall_64+0x106/0xf80 [ 283.323647][ T9074] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.323686][ T9074] pin_user_pages_fast+0xa7/0xf0 [ 283.323722][ T9074] ? __pfx_pin_user_pages_fast+0x10/0x10 [ 283.323761][ T9074] ? iov_iter_advance+0xac/0x6d0 [ 283.323818][ T9074] iov_iter_extract_pages+0xa0d/0x1ef0 [ 283.323864][ T9074] ? __pfx_iov_iter_extract_pages+0x10/0x10 [ 283.323933][ T9074] ? iov_iter_revert+0x252/0x5b0 [ 283.323981][ T9074] ? bio_associate_blkg_from_css+0x394/0x13f0 [ 283.324024][ T9074] iov_iter_extract_bvecs+0x10e/0xf40 [ 283.324072][ T9074] ? __pfx_iov_iter_extract_bvecs+0x10/0x10 [ 283.324107][ T9074] ? bio_init+0x404/0x610 [ 283.324154][ T9074] bio_iov_iter_get_pages+0x26a/0x970 [ 283.324217][ T9074] blkdev_direct_IO+0x1302/0x1fb0 [ 283.324275][ T9074] ? __pfx_blkdev_direct_IO+0x10/0x10 [ 283.324333][ T9074] blkdev_write_iter+0x703/0xd70 [ 283.324381][ T9074] vfs_write+0x6ac/0x1070 [ 283.324430][ T9074] ? __pfx_blkdev_write_iter+0x10/0x10 [ 283.324474][ T9074] ? __pfx_vfs_write+0x10/0x10 [ 283.324539][ T9074] ? find_held_lock+0x2b/0x80 [ 283.324598][ T9074] ksys_write+0x12a/0x250 [ 283.324651][ T9074] ? __pfx_ksys_write+0x10/0x10 [ 283.324718][ T9074] do_syscall_64+0x106/0xf80 [ 283.324756][ T9074] ? clear_bhb_loop+0x40/0x90 [ 283.324797][ T9074] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.324833][ T9074] RIP: 0033:0x7ff85bb9c799 [ 283.324860][ T9074] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 283.324900][ T9074] RSP: 002b:00007ff85c9bf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 283.324932][ T9074] RAX: ffffffffffffffda RBX: 00007ff85be16360 RCX: 00007ff85bb9c799 [ 283.324954][ T9074] RDX: 000000100000a3d9 RSI: 00002000000000c0 RDI: 0000000000000009 [ 283.324974][ T9074] RBP: 00007ff85bc32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 283.324995][ T9074] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 283.325015][ T9074] R13: 00007ff85be163f8 R14: 00007ff85be16360 R15: 00007ffee8f15558 [ 283.325058][ T9074] [ 283.803434][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 283.810320][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 283.816545][ T5823] Bluetooth: hci1: command 0x0c1a tx timeout [ 285.215975][ T9104] netlink: 'syz.1.712': attribute type 1 has an invalid length. [ 285.523085][ T9111] zswap: compressor  not available [ 285.529306][ T9105] FAULT_INJECTION: forcing a failure. [ 285.529306][ T9105] name fail_futex, interval 1, probability 0, space 0, times 0 [ 285.583809][ T9105] CPU: 0 UID: 0 PID: 9105 Comm: syz.2.714 Tainted: G L syzkaller #0 PREEMPT(full) [ 285.583860][ T9105] Tainted: [L]=SOFTLOCKUP [ 285.583872][ T9105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 285.583891][ T9105] Call Trace: [ 285.583902][ T9105] [ 285.583913][ T9105] dump_stack_lvl+0x100/0x190 [ 285.583987][ T9105] should_fail_ex.cold+0x5/0xa [ 285.584037][ T9105] get_futex_key+0x1d2/0x1620 [ 285.584081][ T9105] ? __pfx_get_futex_key+0x10/0x10 [ 285.584133][ T9105] futex_wake+0xea/0x530 [ 285.584182][ T9105] ? __lock_acquire+0x4a5/0x2630 [ 285.584221][ T9105] ? __pfx_futex_wake+0x10/0x10 [ 285.584296][ T9105] do_futex+0x32b/0x350 [ 285.584339][ T9105] ? __pfx_do_futex+0x10/0x10 [ 285.584392][ T9105] __x64_sys_futex+0x34f/0x4d0 [ 285.584436][ T9105] ? fput+0x79/0x100 [ 285.584471][ T9105] ? __pfx___x64_sys_futex+0x10/0x10 [ 285.584528][ T9105] do_syscall_64+0x106/0xf80 [ 285.584567][ T9105] ? clear_bhb_loop+0x40/0x90 [ 285.584626][ T9105] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.584662][ T9105] RIP: 0033:0x7f5a55d9c799 [ 285.584691][ T9105] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 285.584724][ T9105] RSP: 002b:00007f5a53ff60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 285.584755][ T9105] RAX: ffffffffffffffda RBX: 00007f5a56015fa8 RCX: 00007f5a55d9c799 [ 285.584777][ T9105] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f5a56015fac [ 285.584798][ T9105] RBP: 00007f5a56015fa0 R08: 0000000000000000 R09: 0000000000000000 [ 285.584818][ T9105] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 285.584839][ T9105] R13: 00007f5a56016038 R14: 00007ffde3828950 R15: 00007ffde3828a38 [ 285.584882][ T9105] [ 286.535036][ T9129] net_ratelimit: 714 callbacks suppressed [ 286.535064][ T9129] netlink: zone id is out of range [ 286.567322][ T9129] netlink: zone id is out of range [ 286.576722][ T9129] netlink: zone id is out of range [ 286.581888][ T9129] netlink: zone id is out of range [ 286.601379][ T9129] netlink: zone id is out of range [ 286.626632][ T9129] netlink: zone id is out of range [ 286.634478][ T9129] netlink: zone id is out of range [ 286.646537][ T9129] netlink: zone id is out of range [ 286.657346][ T9129] netlink: zone id is out of range [ 286.676601][ T9129] netlink: zone id is out of range [ 286.831993][ T9135] FAULT_INJECTION: forcing a failure. [ 286.831993][ T9135] name failslab, interval 1, probability 0, space 0, times 0 [ 286.868679][ T9135] CPU: 0 UID: 0 PID: 9135 Comm: syz.0.723 Tainted: G L syzkaller #0 PREEMPT(full) [ 286.868733][ T9135] Tainted: [L]=SOFTLOCKUP [ 286.868746][ T9135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 286.868766][ T9135] Call Trace: [ 286.868776][ T9135] [ 286.868788][ T9135] dump_stack_lvl+0x100/0x190 [ 286.868856][ T9135] should_fail_ex.cold+0x5/0xa [ 286.868892][ T9135] ? iter_file_splice_write+0x1d8/0x10a0 [ 286.868922][ T9135] should_failslab+0xc2/0x120 [ 286.868955][ T9135] __kmalloc_noprof+0xe0/0x850 [ 286.868999][ T9135] ? __pfx___might_resched+0x10/0x10 [ 286.869052][ T9135] iter_file_splice_write+0x1d8/0x10a0 [ 286.869112][ T9135] ? __pfx_iter_file_splice_write+0x10/0x10 [ 286.869146][ T9135] ? __lock_acquire+0x4a5/0x2630 [ 286.869189][ T9135] ? shmem_file_splice_read+0x724/0xdd0 [ 286.869263][ T9135] ? __pfx_iter_file_splice_write+0x10/0x10 [ 286.869299][ T9135] direct_splice_actor+0x192/0x6c0 [ 286.869354][ T9135] splice_direct_to_actor+0x345/0xa30 [ 286.869410][ T9135] ? __pfx_direct_splice_actor+0x10/0x10 [ 286.869468][ T9135] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 286.869534][ T9135] do_splice_direct+0x174/0x240 [ 286.869567][ T9135] ? __pfx_do_splice_direct+0x10/0x10 [ 286.869600][ T9135] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 286.869656][ T9135] ? rw_verify_area+0xce/0x6d0 [ 286.869706][ T9135] do_sendfile+0xadc/0xe20 [ 286.869762][ T9135] ? __pfx_do_sendfile+0x10/0x10 [ 286.869825][ T9135] __x64_sys_sendfile64+0x154/0x220 [ 286.869864][ T9135] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 286.869911][ T9135] do_syscall_64+0x106/0xf80 [ 286.869948][ T9135] ? clear_bhb_loop+0x40/0x90 [ 286.869987][ T9135] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.870021][ T9135] RIP: 0033:0x7ff85bb9c799 [ 286.870047][ T9135] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 286.870085][ T9135] RSP: 002b:00007ff85ca43028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 286.870115][ T9135] RAX: ffffffffffffffda RBX: 00007ff85be15fa0 RCX: 00007ff85bb9c799 [ 286.870135][ T9135] RDX: 0000200000000000 RSI: 0000000000000006 RDI: 0000000000000006 [ 286.870155][ T9135] RBP: 00007ff85bc32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 286.870174][ T9135] R10: 0000000000000b5d R11: 0000000000000246 R12: 0000000000000000 [ 286.870194][ T9135] R13: 00007ff85be16038 R14: 00007ff85be15fa0 R15: 00007ffee8f15558 [ 286.870234][ T9135] [ 287.194844][ T9133] FAULT_INJECTION: forcing a failure. [ 287.194844][ T9133] name failslab, interval 1, probability 0, space 0, times 0 [ 287.207755][ T9133] CPU: 1 UID: 0 PID: 9133 Comm: syz.3.722 Tainted: G L syzkaller #0 PREEMPT(full) [ 287.207806][ T9133] Tainted: [L]=SOFTLOCKUP [ 287.207818][ T9133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 287.207838][ T9133] Call Trace: [ 287.207848][ T9133] [ 287.207861][ T9133] dump_stack_lvl+0x100/0x190 [ 287.207917][ T9133] should_fail_ex.cold+0x5/0xa [ 287.207956][ T9133] should_failslab+0xc2/0x120 [ 287.207991][ T9133] __kmalloc_cache_noprof+0x7a/0x6f0 [ 287.208034][ T9133] ? kvm_uevent_notify_change.part.0+0x94/0x450 [ 287.208088][ T9133] kvm_uevent_notify_change.part.0+0x94/0x450 [ 287.208133][ T9133] ? __pfx_kvm_vm_release+0x10/0x10 [ 287.208171][ T9133] kvm_put_kvm+0xe4/0xb10 [ 287.208207][ T9133] ? lockdep_hardirqs_on+0x78/0x100 [ 287.208248][ T9133] ? _raw_spin_unlock_irq+0x2e/0x50 [ 287.208286][ T9133] ? __pfx_kvm_vm_release+0x10/0x10 [ 287.208324][ T9133] kvm_vm_release+0x3c/0x50 [ 287.208359][ T9133] __fput+0x3ff/0xb40 [ 287.208401][ T9133] ? _raw_spin_unlock_irq+0x23/0x50 [ 287.208440][ T9133] task_work_run+0x150/0x240 [ 287.208490][ T9133] ? __pfx_task_work_run+0x10/0x10 [ 287.208560][ T9133] exit_to_user_mode_loop+0x100/0x4a0 [ 287.208609][ T9133] do_syscall_64+0x668/0xf80 [ 287.208651][ T9133] ? clear_bhb_loop+0x40/0x90 [ 287.208694][ T9133] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.208742][ T9133] RIP: 0033:0x7f3548b9c799 [ 287.208767][ T9133] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 287.208822][ T9133] RSP: 002b:00007f3549ac6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 287.208868][ T9133] RAX: 0000000000000000 RBX: 00007f3548e15fa0 RCX: 00007f3548b9c799 [ 287.208889][ T9133] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 287.208907][ T9133] RBP: 00007f3548c32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 287.208927][ T9133] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 287.208946][ T9133] R13: 00007f3548e16038 R14: 00007f3548e15fa0 R15: 00007ffea4281888 [ 287.208985][ T9133] [ 288.297232][ T9142] Invalid ELF header magic: != ELF [ 288.691850][ T30] audit: type=1804 audit(1772732586.948:7): pid=9158 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.730" name="/newroot/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw" dev="tracefs" ino=4164 res=1 errno=0 [ 289.206539][ T5831] Bluetooth: hci2: unexpected event 0x02 length: 726 > 260 [ 289.820508][ T9164] netlink: 342 bytes leftover after parsing attributes in process `syz.0.733'. [ 290.511256][ T9175] FAULT_INJECTION: forcing a failure. [ 290.511256][ T9175] name fail_futex, interval 1, probability 0, space 0, times 0 [ 290.554095][ T9175] CPU: 0 UID: 0 PID: 9175 Comm: syz.2.735 Tainted: G L syzkaller #0 PREEMPT(full) [ 290.554133][ T9175] Tainted: [L]=SOFTLOCKUP [ 290.554141][ T9175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 290.554155][ T9175] Call Trace: [ 290.554162][ T9175] [ 290.554171][ T9175] dump_stack_lvl+0x100/0x190 [ 290.554212][ T9175] should_fail_ex.cold+0x5/0xa [ 290.554242][ T9175] get_futex_key+0x107c/0x1620 [ 290.554273][ T9175] ? __pfx_get_futex_key+0x10/0x10 [ 290.554299][ T9175] ? lock_acquire+0x1cf/0x380 [ 290.554338][ T9175] futex_wake+0xea/0x530 [ 290.554375][ T9175] ? __pfx_futex_wake+0x10/0x10 [ 290.554410][ T9175] ? exit_mm_release+0x19/0x30 [ 290.554446][ T9175] do_futex+0x32b/0x350 [ 290.554476][ T9175] ? __pfx_do_futex+0x10/0x10 [ 290.554503][ T9175] ? __might_fault+0xc5/0x140 [ 290.554544][ T9175] mm_release+0x24a/0x2f0 [ 290.554568][ T9175] do_exit+0x704/0x2b60 [ 290.554602][ T9175] ? __pfx_do_exit+0x10/0x10 [ 290.554633][ T9175] ? do_raw_spin_lock+0x128/0x260 [ 290.554668][ T9175] ? find_held_lock+0x2b/0x80 [ 290.554689][ T9175] ? get_signal+0x7e0/0x21e0 [ 290.554716][ T9175] do_group_exit+0xd5/0x2a0 [ 290.554756][ T9175] get_signal+0x1ec7/0x21e0 [ 290.554786][ T9175] ? ksys_write+0x190/0x250 [ 290.554825][ T9175] ? __pfx_get_signal+0x10/0x10 [ 290.554850][ T9175] ? do_futex+0x192/0x350 [ 290.554883][ T9175] arch_do_signal_or_restart+0x91/0x770 [ 290.554913][ T9175] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 290.554950][ T9175] ? __pfx___x64_sys_futex+0x10/0x10 [ 290.554987][ T9175] exit_to_user_mode_loop+0x86/0x4a0 [ 290.555020][ T9175] do_syscall_64+0x668/0xf80 [ 290.555048][ T9175] ? clear_bhb_loop+0x40/0x90 [ 290.555090][ T9175] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.555113][ T9175] RIP: 0033:0x7f5a55d9c799 [ 290.555131][ T9175] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 290.555165][ T9175] RSP: 002b:00007f5a53ff60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 290.555184][ T9175] RAX: fffffffffffffe00 RBX: 00007f5a56015fa8 RCX: 00007f5a55d9c799 [ 290.555198][ T9175] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f5a56015fa8 [ 290.555211][ T9175] RBP: 00007f5a56015fa0 R08: 0000000000000000 R09: 0000000000000000 [ 290.555224][ T9175] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 290.555239][ T9175] R13: 00007f5a56016038 R14: 00007ffde3828950 R15: 00007ffde3828a38 [ 290.555266][ T9175] [ 291.476309][ T9193] FAULT_INJECTION: forcing a failure. [ 291.476309][ T9193] name failslab, interval 1, probability 0, space 0, times 0 [ 291.526079][ T9193] CPU: 0 UID: 0 PID: 9193 Comm: syz.2.738 Tainted: G L syzkaller #0 PREEMPT(full) [ 291.526129][ T9193] Tainted: [L]=SOFTLOCKUP [ 291.526139][ T9193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 291.526158][ T9193] Call Trace: [ 291.526168][ T9193] [ 291.526179][ T9193] dump_stack_lvl+0x100/0x190 [ 291.526232][ T9193] should_fail_ex.cold+0x5/0xa [ 291.526269][ T9193] should_failslab+0xc2/0x120 [ 291.526303][ T9193] __kvmalloc_node_noprof+0xfa/0xa00 [ 291.526369][ T9193] ? seq_read_iter+0x819/0x1270 [ 291.526418][ T9193] ? __pfx___might_resched+0x10/0x10 [ 291.526477][ T9193] seq_read_iter+0x819/0x1270 [ 291.526541][ T9193] ? __pfx_seq_read_iter+0x10/0x10 [ 291.526593][ T9193] vfs_read+0x825/0xb30 [ 291.526667][ T9193] ? __pfx_vfs_read+0x10/0x10 [ 291.526765][ T9193] ksys_read+0x12a/0x250 [ 291.526814][ T9193] ? __pfx_ksys_read+0x10/0x10 [ 291.526876][ T9193] do_syscall_64+0x106/0xf80 [ 291.526920][ T9193] ? clear_bhb_loop+0x40/0x90 [ 291.526973][ T9193] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.527006][ T9193] RIP: 0033:0x7f5a55d9c799 [ 291.527032][ T9193] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 291.527063][ T9193] RSP: 002b:00007f5a53ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 291.527093][ T9193] RAX: ffffffffffffffda RBX: 00007f5a56015fa0 RCX: 00007f5a55d9c799 [ 291.527113][ T9193] RDX: 0000000000001036 RSI: 0000200000000040 RDI: 0000000000000003 [ 291.527133][ T9193] RBP: 00007f5a53ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 291.527153][ T9193] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 291.527171][ T9193] R13: 00007f5a56016038 R14: 00007f5a56015fa0 R15: 00007ffde3828a38 [ 291.527214][ T9193] [ 293.150272][ T9209] smpboot: CPU 1 is now offline [ 293.415388][ T9212] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 293.436212][ T9205] ------------[ cut here ]------------ [ 293.436820][ T9205] [ 293.436827][ T9205] ====================================================== [ 293.436835][ T9205] WARNING: possible circular locking dependency detected [ 293.436847][ T9205] syzkaller #0 Tainted: G L [ 293.436859][ T9205] ------------------------------------------------------ [ 293.436866][ T9205] syz.3.743/9205 is trying to acquire lock: [ 293.436876][ T9205] ffffffff8e6f53c0 (console_owner){-...}-{0:0}, at: console_lock_spinning_enable+0x61/0x80 [ 293.436941][ T9205] [ 293.436941][ T9205] but task is already holding lock: [ 293.436948][ T9205] ffff8880b843b2e0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x88/0x140 [ 293.436993][ T9205] [ 293.436993][ T9205] which lock already depends on the new lock. [ 293.436993][ T9205] [ 293.437000][ T9205] [ 293.437000][ T9205] the existing dependency chain (in reverse order) is: [ 293.437008][ T9205] [ 293.437008][ T9205] -> #4 (&rq->__lock){-.-.}-{2:2}: [ 293.437040][ T9205] _raw_spin_lock_nested+0x31/0x40 [ 293.437062][ T9205] raw_spin_rq_lock_nested+0x2c/0x140 [ 293.437082][ T9205] _task_rq_lock+0xcf/0x490 [ 293.437103][ T9205] cgroup_move_task+0x81/0x2b0 [ 293.437125][ T9205] css_set_move_task+0x285/0x600 [ 293.437145][ T9205] cgroup_post_fork+0x202/0x9b0 [ 293.437165][ T9205] copy_process+0x5f26/0x7a10 [ 293.437204][ T9205] kernel_clone+0xfc/0x9a0 [ 293.437228][ T9205] user_mode_thread+0xcc/0x110 [ 293.437271][ T9205] rest_init+0x21/0x260 [ 293.437306][ T9205] start_kernel+0x47f/0x480 [ 293.437337][ T9205] x86_64_start_reservations+0x24/0x30 [ 293.437371][ T9205] x86_64_start_kernel+0x12b/0x130 [ 293.437403][ T9205] common_startup_64+0x13e/0x148 [ 293.437427][ T9205] [ 293.437427][ T9205] -> #3 (&p->pi_lock){-.-.}-{2:2}: [ 293.437457][ T9205] _raw_spin_lock_irqsave+0x3a/0x60 [ 293.437480][ T9205] try_to_wake_up+0xb2/0x1a80 [ 293.437501][ T9205] __wake_up_common+0x135/0x1f0 [ 293.437536][ T9205] __wake_up+0x31/0x60 [ 293.437559][ T9205] tty_port_default_wakeup+0x47/0x60 [ 293.437593][ T9205] serial8250_tx_chars+0x68f/0x860 [ 293.437624][ T9205] serial8250_handle_irq+0x73e/0xcb0 [ 293.437657][ T9205] serial8250_default_handle_irq+0x9e/0x270 [ 293.437693][ T9205] serial8250_interrupt+0xf8/0x1d0 [ 293.437730][ T9205] __handle_irq_event_percpu+0x232/0x8e0 [ 293.437769][ T9205] handle_irq_event+0xab/0x1e0 [ 293.437806][ T9205] handle_edge_irq+0x375/0x970 [ 293.437842][ T9205] __common_interrupt+0xd8/0x2f0 [ 293.437873][ T9205] common_interrupt+0xb9/0xe0 [ 293.437911][ T9205] asm_common_interrupt+0x26/0x40 [ 293.437943][ T9205] lock_is_held_type+0x1e/0x140 [ 293.437968][ T9205] lockdep_rtnl_is_held+0x1b/0x40 [ 293.438003][ T9205] mctp_dev_get_rtnl+0x61/0xe0 [ 293.438033][ T9205] mctp_fill_link_af+0x73/0x1a0 [ 293.438062][ T9205] rtnl_fill_ifinfo.isra.0+0x3375/0x4d60 [ 293.438093][ T9205] rtnl_dump_ifinfo+0xbc8/0x10b0 [ 293.438122][ T9205] rtnl_dumpit+0x19b/0x1f0 [ 293.438154][ T9205] netlink_dump+0x539/0xd30 [ 293.438180][ T9205] netlink_recvmsg+0x7dc/0xa90 [ 293.438205][ T9205] sock_recvmsg+0x1f9/0x250 [ 293.438236][ T9205] ____sys_recvmsg+0x218/0x6b0 [ 293.438268][ T9205] ___sys_recvmsg+0x16a/0x1a0 [ 293.438301][ T9205] __sys_recvmsg+0x16d/0x220 [ 293.438327][ T9205] do_syscall_64+0x106/0xf80 [ 293.438352][ T9205] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.438374][ T9205] [ 293.438374][ T9205] -> #2 (&tty->write_wait){-...}-{3:3}: [ 293.438402][ T9205] _raw_spin_lock_irqsave+0x3a/0x60 [ 293.438424][ T9205] __wake_up+0x1c/0x60 [ 293.438456][ T9205] tty_port_default_wakeup+0x47/0x60 [ 293.438482][ T9205] serial8250_tx_chars+0x68f/0x860 [ 293.438531][ T9205] serial8250_handle_irq+0x73e/0xcb0 [ 293.438561][ T9205] serial8250_default_handle_irq+0x9e/0x270 [ 293.438604][ T9205] serial8250_interrupt+0xf8/0x1d0 [ 293.438635][ T9205] __handle_irq_event_percpu+0x232/0x8e0 [ 293.438685][ T9205] handle_irq_event+0xab/0x1e0 [ 293.438718][ T9205] handle_edge_irq+0x375/0x970 [ 293.438748][ T9205] __common_interrupt+0xd8/0x2f0 [ 293.438774][ T9205] common_interrupt+0xb9/0xe0 [ 293.438805][ T9205] asm_common_interrupt+0x26/0x40 [ 293.438825][ T9205] _raw_spin_unlock_irqrestore+0x31/0x80 [ 293.438847][ T9205] uart_write+0x29d/0xb20 [ 293.438873][ T9205] n_tty_write+0x44f/0x12d0 [ 293.438904][ T9205] file_tty_write.isra.0+0x4d2/0x890 [ 293.438931][ T9205] redirected_tty_write+0xd4/0x120 [ 293.438956][ T9205] vfs_write+0x6ac/0x1070 [ 293.438989][ T9205] ksys_write+0x12a/0x250 [ 293.439022][ T9205] do_syscall_64+0x106/0xf80 [ 293.439048][ T9205] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.439069][ T9205] [ 293.439069][ T9205] -> #1 (&port_lock_key){-...}-{3:3}: [ 293.439096][ T9205] _raw_spin_lock_irqsave+0x3a/0x60 [ 293.439117][ T9205] serial8250_console_write+0x17e/0x1900 [ 293.439149][ T9205] console_flush_one_record+0x790/0xe50 [ 293.439183][ T9205] console_unlock+0x103/0x260 [ 293.439215][ T9205] vprintk_emit+0x407/0x6b0 [ 293.439232][ T9205] _printk+0xcf/0x110 [ 293.439251][ T9205] register_console.cold+0xc0/0x248 [ 293.439273][ T9205] univ8250_console_init+0x6f/0x80 [ 293.439294][ T9205] console_init+0x423/0x620 [ 293.439311][ T9205] start_kernel+0x305/0x480 [ 293.439338][ T9205] x86_64_start_reservations+0x24/0x30 [ 293.439368][ T9205] x86_64_start_kernel+0x12b/0x130 [ 293.439397][ T9205] common_startup_64+0x13e/0x148 [ 293.439417][ T9205] [ 293.439417][ T9205] -> #0 (console_owner){-...}-{0:0}: [ 293.439443][ T9205] __lock_acquire+0x14b8/0x2630 [ 293.439469][ T9205] lock_acquire+0x1cf/0x380 [ 293.439494][ T9205] console_lock_spinning_enable+0x72/0x80 [ 293.439532][ T9205] console_flush_one_record+0x739/0xe50 [ 293.439566][ T9205] console_unlock+0x103/0x260 [ 293.439597][ T9205] vprintk_emit+0x407/0x6b0 [ 293.439614][ T9205] _printk+0xcf/0x110 [ 293.439631][ T9205] __report_bug.cold+0x15/0x137 [ 293.439660][ T9205] report_bug+0xb2/0x220 [ 293.439680][ T9205] handle_bug+0x16a/0x2a0 [ 293.439706][ T9205] exc_invalid_op+0x17/0x50 [ 293.439734][ T9205] asm_exc_invalid_op+0x1a/0x20 [ 293.439753][ T9205] update_rq_clock+0x40a/0xd20 [ 293.439773][ T9205] __schedule+0x1b7d/0x6120 [ 293.439793][ T9205] schedule+0xdd/0x390 [ 293.439812][ T9205] do_nanosleep+0x206/0x560 [ 293.439847][ T9205] hrtimer_nanosleep+0x156/0x360 [ 293.439879][ T9205] common_nsleep+0xa1/0xd0 [ 293.439902][ T9205] __x64_sys_clock_nanosleep+0x336/0x480 [ 293.439937][ T9205] do_syscall_64+0x106/0xf80 [ 293.439960][ T9205] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.439981][ T9205] [ 293.439981][ T9205] other info that might help us debug this: [ 293.439981][ T9205] [ 293.439987][ T9205] Chain exists of: [ 293.439987][ T9205] console_owner --> &p->pi_lock --> &rq->__lock [ 293.439987][ T9205] [ 293.440017][ T9205] Possible unsafe locking scenario: [ 293.440017][ T9205] [ 293.440022][ T9205] CPU0 CPU1 [ 293.440028][ T9205] ---- ---- [ 293.440035][ T9205] lock(&rq->__lock); [ 293.440048][ T9205] lock(&p->pi_lock); [ 293.440062][ T9205] lock(&rq->__lock); [ 293.440076][ T9205] lock(console_owner); [ 293.440088][ T9205] [ 293.440088][ T9205] *** DEADLOCK *** [ 293.440088][ T9205] [ 293.440093][ T9205] 3 locks held by syz.3.743/9205: [ 293.440105][ T9205] #0: ffff8880b843b2e0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x88/0x140 [ 293.440153][ T9205] #1: ffffffff8e7d5800 (console_lock){+.+.}-{0:0}, at: _printk+0xcf/0x110 [ 293.440199][ T9205] #2: ffffffff8e7d5878 (console_srcu){....}-{0:0}, at: console_flush_one_record+0xfd/0xe50 [ 293.440260][ T9205] [ 293.440260][ T9205] stack backtrace: [ 293.440272][ T9205] CPU: 0 UID: 0 PID: 9205 Comm: syz.3.743 Tainted: G L syzkaller #0 PREEMPT(full) [ 293.440302][ T9205] Tainted: [L]=SOFTLOCKUP [ 293.440309][ T9205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 293.440322][ T9205] Call Trace: [ 293.440329][ T9205] [ 293.440337][ T9205] dump_stack_lvl+0x100/0x190 [ 293.440367][ T9205] print_circular_bug.cold+0x178/0x1c7 [ 293.440404][ T9205] check_noncircular+0x146/0x160 [ 293.440432][ T9205] __lock_acquire+0x14b8/0x2630 [ 293.440464][ T9205] lock_acquire+0x1cf/0x380 [ 293.440489][ T9205] ? console_lock_spinning_enable+0x61/0x80 [ 293.440524][ T9205] ? console_lock_spinning_enable+0x4a/0x80 [ 293.440567][ T9205] console_lock_spinning_enable+0x72/0x80 [ 293.440600][ T9205] ? console_lock_spinning_enable+0x61/0x80 [ 293.440633][ T9205] console_flush_one_record+0x739/0xe50 [ 293.440681][ T9205] ? __pfx_console_flush_one_record+0x10/0x10 [ 293.440717][ T9205] ? is_printk_cpu_sync_owner+0x32/0x40 [ 293.440741][ T9205] console_unlock+0x103/0x260 [ 293.440773][ T9205] ? __pfx_console_unlock+0x10/0x10 [ 293.440807][ T9205] ? do_raw_spin_unlock+0x145/0x1e0 [ 293.440838][ T9205] ? _printk+0xcf/0x110 [ 293.440859][ T9205] vprintk_emit+0x407/0x6b0 [ 293.440877][ T9205] ? __pfx_vprintk_emit+0x10/0x10 [ 293.440910][ T9205] ? do_user_addr_fault+0x5a3/0x12f0 [ 293.440943][ T9205] ? __pfx_css_rstat_updated+0x10/0x10 [ 293.440968][ T9205] _printk+0xcf/0x110 [ 293.440987][ T9205] ? __pfx__printk+0x10/0x10 [ 293.441007][ T9205] ? __lock_acquire+0x4a5/0x2630 [ 293.441035][ T9205] ? __report_bug.cold+0x5/0x137 [ 293.441062][ T9205] ? __report_bug+0x377/0x3d0 [ 293.441083][ T9205] __report_bug.cold+0x15/0x137 [ 293.441110][ T9205] ? update_rq_clock+0x40a/0xd20 [ 293.441133][ T9205] ? __pfx___report_bug+0x10/0x10 [ 293.441153][ T9205] ? __pfx_css_rstat_updated+0x10/0x10 [ 293.441196][ T9205] ? kvm_sched_clock_read+0x11/0x20 [ 293.441225][ T9205] ? update_rq_clock+0x40a/0xd20 [ 293.441248][ T9205] report_bug+0xb2/0x220 [ 293.441271][ T9205] ? update_rq_clock+0x40a/0xd20 [ 293.441293][ T9205] handle_bug+0x16a/0x2a0 [ 293.441323][ T9205] exc_invalid_op+0x17/0x50 [ 293.441353][ T9205] asm_exc_invalid_op+0x1a/0x20 [ 293.441374][ T9205] RIP: 0010:update_rq_clock+0x40a/0xd20 [ 293.441399][ T9205] Code: ab 48 0b 00 00 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc a8 04 0f 84 df fc ff ff 90 0f 0b 90 e9 d6 fc ff ff 90 <0f> 0b 90 e9 92 fc ff ff 4c 8d 83 40 0b 00 00 48 b8 00 00 00 00 00 [ 293.441421][ T9205] RSP: 0018:ffffc90003897a78 EFLAGS: 00010046 [ 293.441438][ T9205] RAX: 0000000000000000 RBX: ffff8880b853b280 RCX: 0000000000000001 [ 293.441453][ T9205] RDX: 0000000000000046 RSI: ffffffff8de55a23 RDI: ffffffff8c1af720 [ 293.441467][ T9205] RBP: ffffc90003897c20 R08: 0000000000000001 R09: 0000000000000001 [ 293.441482][ T9205] R10: ffffffff90d9b317 R11: 0000000000000000 R12: ffffffff90d9e6e4 [ 293.441497][ T9205] R13: ffff8880b853c0c0 R14: ffff888020fb9e80 R15: ffff8880b853b280 [ 293.441519][ T9205] ? update_rq_clock+0x9c/0xd20 [ 293.441545][ T9205] ? pick_task_fair+0x85/0x350 [ 293.441567][ T9205] __schedule+0x1b7d/0x6120 [ 293.441590][ T9205] ? __lock_acquire+0x4a5/0x2630 [ 293.441624][ T9205] ? __pfx___schedule+0x10/0x10 [ 293.441646][ T9205] ? find_held_lock+0x2b/0x80 [ 293.441667][ T9205] ? schedule+0x2bf/0x390 [ 293.441692][ T9205] schedule+0xdd/0x390 [ 293.441714][ T9205] do_nanosleep+0x206/0x560 [ 293.441752][ T9205] ? __pfx_do_nanosleep+0x10/0x10 [ 293.441789][ T9205] ? __asan_memset+0x23/0x50 [ 293.441821][ T9205] ? __hrtimer_setup+0x178/0x280 [ 293.441852][ T9205] hrtimer_nanosleep+0x156/0x360 [ 293.441886][ T9205] ? __pfx_hrtimer_nanosleep+0x10/0x10 [ 293.441923][ T9205] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 293.441955][ T9205] ? get_timespec64+0x136/0x1b0 [ 293.441979][ T9205] ? __pfx_get_timespec64+0x10/0x10 [ 293.442004][ T9205] common_nsleep+0xa1/0xd0 [ 293.442033][ T9205] __x64_sys_clock_nanosleep+0x336/0x480 [ 293.442072][ T9205] ? __pfx___x64_sys_clock_nanosleep+0x10/0x10 [ 293.442114][ T9205] do_syscall_64+0x106/0xf80 [ 293.442139][ T9205] ? clear_bhb_loop+0x40/0x90 [ 293.442165][ T9205] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.442188][ T9205] RIP: 0033:0x7f3548b5cfce [ 293.442205][ T9205] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 293.442227][ T9205] RSP: 002b:00007ffea4281968 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 [ 293.442246][ T9205] RAX: ffffffffffffffda RBX: 00005555777f0500 RCX: 00007f3548b5cfce [ 293.442261][ T9205] RDX: 00007ffea42819c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 293.442275][ T9205] RBP: 00007f3548e17da0 R08: 0000000000000000 R09: 0000000000000000 [ 293.442289][ T9205] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000047acb [ 293.442303][ T9205] R13: 00007f3548e1609c R14: 0000000000047932 R15: 00007ffea4281af0 [ 293.442325][ T9205] [ 294.686527][ T9205] debug_locks && !(lock_is_held(&(__rq_lockp(rq))->dep_map) != 0) [ 294.686543][ T9205] WARNING: kernel/sched/sched.h:1600 at update_rq_clock+0x40a/0xd20, CPU#0: syz.3.743/9205 [ 294.704337][ T9205] Modules linked in: [ 294.708239][ T9205] CPU: 0 UID: 0 PID: 9205 Comm: syz.3.743 Tainted: G L syzkaller #0 PREEMPT(full) [ 294.719010][ T9205] Tainted: [L]=SOFTLOCKUP [ 294.723327][ T9205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 294.733398][ T9205] RIP: 0010:update_rq_clock+0x40a/0xd20 [ 294.739000][ T9205] Code: ab 48 0b 00 00 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc a8 04 0f 84 df fc ff ff 90 0f 0b 90 e9 d6 fc ff ff 90 <0f> 0b 90 e9 92 fc ff ff 4c 8d 83 40 0b 00 00 48 b8 00 00 00 00 00 [ 294.758629][ T9205] RSP: 0018:ffffc90003897a78 EFLAGS: 00010046 [ 294.764701][ T9205] RAX: 0000000000000000 RBX: ffff8880b853b280 RCX: 0000000000000001 [ 294.772674][ T9205] RDX: 0000000000000046 RSI: ffffffff8de55a23 RDI: ffffffff8c1af720 [ 294.780651][ T9205] RBP: ffffc90003897c20 R08: 0000000000000001 R09: 0000000000000001 [ 294.788631][ T9205] R10: ffffffff90d9b317 R11: 0000000000000000 R12: ffffffff90d9e6e4 [ 294.796646][ T9205] R13: ffff8880b853c0c0 R14: ffff888020fb9e80 R15: ffff8880b853b280 [ 294.804647][ T9205] FS: 00005555777f0500(0000) GS:ffff88812434c000(0000) knlGS:0000000000000000 [ 294.813578][ T9205] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 294.820166][ T9205] CR2: 0000001b30bb9ff8 CR3: 0000000029cf6000 CR4: 00000000003526f0 [ 294.828143][ T9205] Call Trace: [ 294.831444][ T9205] [ 294.834380][ T9205] ? pick_task_fair+0x85/0x350 [ 294.839151][ T9205] __schedule+0x1b7d/0x6120 [ 294.843658][ T9205] ? __lock_acquire+0x4a5/0x2630 [ 294.848608][ T9205] ? __pfx___schedule+0x10/0x10 [ 294.853476][ T9205] ? find_held_lock+0x2b/0x80 [ 294.858154][ T9205] ? schedule+0x2bf/0x390 [ 294.862494][ T9205] schedule+0xdd/0x390 [ 294.866571][ T9205] do_nanosleep+0x206/0x560 [ 294.871093][ T9205] ? __pfx_do_nanosleep+0x10/0x10 [ 294.876129][ T9205] ? __asan_memset+0x23/0x50 [ 294.880748][ T9205] ? __hrtimer_setup+0x178/0x280 [ 294.885707][ T9205] hrtimer_nanosleep+0x156/0x360 [ 294.890659][ T9205] ? __pfx_hrtimer_nanosleep+0x10/0x10 [ 294.896132][ T9205] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 294.901350][ T9205] ? get_timespec64+0x136/0x1b0 [ 294.906213][ T9205] ? __pfx_get_timespec64+0x10/0x10 [ 294.911420][ T9205] common_nsleep+0xa1/0xd0 [ 294.915866][ T9205] __x64_sys_clock_nanosleep+0x336/0x480 [ 294.921512][ T9205] ? __pfx___x64_sys_clock_nanosleep+0x10/0x10 [ 294.927692][ T9205] do_syscall_64+0x106/0xf80 [ 294.932287][ T9205] ? clear_bhb_loop+0x40/0x90 [ 294.936995][ T9205] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.942899][ T9205] RIP: 0033:0x7f3548b5cfce [ 294.947323][ T9205] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 294.966952][ T9205] RSP: 002b:00007ffea4281968 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 [ 294.975366][ T9205] RAX: ffffffffffffffda RBX: 00005555777f0500 RCX: 00007f3548b5cfce [ 294.983333][ T9205] RDX: 00007ffea42819c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 294.991309][ T9205] RBP: 00007f3548e17da0 R08: 0000000000000000 R09: 0000000000000000 [ 294.999288][ T9205] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000047acb [ 295.007258][ T9205] R13: 00007f3548e1609c R14: 0000000000047932 R15: 00007ffea4281af0 [ 295.015236][ T9205] [ 295.018270][ T9205] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 295.025552][ T9205] CPU: 0 UID: 0 PID: 9205 Comm: syz.3.743 Tainted: G L syzkaller #0 PREEMPT(full) [ 295.036341][ T9205] Tainted: [L]=SOFTLOCKUP [ 295.040660][ T9205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 295.050714][ T9205] Call Trace: [ 295.054014][ T9205] [ 295.056942][ T9205] dump_stack_lvl+0x100/0x190 [ 295.061637][ T9205] vpanic+0x552/0x970 [ 295.065640][ T9205] ? __pfx_vpanic+0x10/0x10 [ 295.070143][ T9205] ? lock_release+0x263/0x320 [ 295.074831][ T9205] panic+0xd1/0xe0 [ 295.078575][ T9205] ? __pfx_panic+0x10/0x10 [ 295.083014][ T9205] ? check_panic_on_warn+0x1f/0x90 [ 295.088146][ T9205] check_panic_on_warn.cold+0x19/0x34 [ 295.093522][ T9205] ? update_rq_clock+0x40a/0xd20 [ 295.098464][ T9205] __warn.cold+0x191/0x348 [ 295.102899][ T9205] __report_bug+0x296/0x3d0 [ 295.107414][ T9205] ? update_rq_clock+0x40a/0xd20 [ 295.112364][ T9205] ? __pfx___report_bug+0x10/0x10 [ 295.117409][ T9205] ? __pfx_css_rstat_updated+0x10/0x10 [ 295.122884][ T9205] ? kvm_sched_clock_read+0x11/0x20 [ 295.128094][ T9205] ? update_rq_clock+0x40a/0xd20 [ 295.133053][ T9205] report_bug+0xb2/0x220 [ 295.137306][ T9205] ? update_rq_clock+0x40a/0xd20 [ 295.142258][ T9205] handle_bug+0x16a/0x2a0 [ 295.146611][ T9205] exc_invalid_op+0x17/0x50 [ 295.151127][ T9205] asm_exc_invalid_op+0x1a/0x20 [ 295.156014][ T9205] RIP: 0010:update_rq_clock+0x40a/0xd20 [ 295.161568][ T9205] Code: ab 48 0b 00 00 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc a8 04 0f 84 df fc ff ff 90 0f 0b 90 e9 d6 fc ff ff 90 <0f> 0b 90 e9 92 fc ff ff 4c 8d 83 40 0b 00 00 48 b8 00 00 00 00 00 [ 295.181222][ T9205] RSP: 0018:ffffc90003897a78 EFLAGS: 00010046 [ 295.187311][ T9205] RAX: 0000000000000000 RBX: ffff8880b853b280 RCX: 0000000000000001 [ 295.195301][ T9205] RDX: 0000000000000046 RSI: ffffffff8de55a23 RDI: ffffffff8c1af720 [ 295.203277][ T9205] RBP: ffffc90003897c20 R08: 0000000000000001 R09: 0000000000000001 [ 295.211273][ T9205] R10: ffffffff90d9b317 R11: 0000000000000000 R12: ffffffff90d9e6e4 [ 295.219256][ T9205] R13: ffff8880b853c0c0 R14: ffff888020fb9e80 R15: ffff8880b853b280 [ 295.227236][ T9205] ? update_rq_clock+0x9c/0xd20 [ 295.232091][ T9205] ? pick_task_fair+0x85/0x350 [ 295.236882][ T9205] __schedule+0x1b7d/0x6120 [ 295.241397][ T9205] ? __lock_acquire+0x4a5/0x2630 [ 295.246351][ T9205] ? __pfx___schedule+0x10/0x10 [ 295.251216][ T9205] ? find_held_lock+0x2b/0x80 [ 295.255918][ T9205] ? schedule+0x2bf/0x390 [ 295.260253][ T9205] schedule+0xdd/0x390 [ 295.264323][ T9205] do_nanosleep+0x206/0x560 [ 295.268838][ T9205] ? __pfx_do_nanosleep+0x10/0x10 [ 295.273877][ T9205] ? __asan_memset+0x23/0x50 [ 295.278489][ T9205] ? __hrtimer_setup+0x178/0x280 [ 295.283435][ T9205] hrtimer_nanosleep+0x156/0x360 [ 295.288386][ T9205] ? __pfx_hrtimer_nanosleep+0x10/0x10 [ 295.293880][ T9205] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 295.299092][ T9205] ? get_timespec64+0x136/0x1b0 [ 295.303972][ T9205] ? __pfx_get_timespec64+0x10/0x10 [ 295.309179][ T9205] common_nsleep+0xa1/0xd0 [ 295.313622][ T9205] __x64_sys_clock_nanosleep+0x336/0x480 [ 295.319336][ T9205] ? __pfx___x64_sys_clock_nanosleep+0x10/0x10 [ 295.325536][ T9205] do_syscall_64+0x106/0xf80 [ 295.330132][ T9205] ? clear_bhb_loop+0x40/0x90 [ 295.334816][ T9205] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.340712][ T9205] RIP: 0033:0x7f3548b5cfce [ 295.345126][ T9205] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 295.364821][ T9205] RSP: 002b:00007ffea4281968 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 [ 295.373235][ T9205] RAX: ffffffffffffffda RBX: 00005555777f0500 RCX: 00007f3548b5cfce [ 295.381252][ T9205] RDX: 00007ffea42819c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 295.389241][ T9205] RBP: 00007f3548e17da0 R08: 0000000000000000 R09: 0000000000000000 [ 295.397253][ T9205] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000047acb [ 295.405250][ T9205] R13: 00007f3548e1609c R14: 0000000000047932 R15: 00007ffea4281af0 [ 295.413249][ T9205] [ 295.416531][ T9205] Kernel Offset: disabled [ 295.420869][ T9205] Rebooting in 86400 seconds..