last executing test programs: 6.53741866s ago: executing program 2 (id=2837): openat$auto_u32_array_fops_file(0xffffffffffffff9c, 0x0, 0x408041, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101200, 0x0) ioctl$auto(0x3, 0xae41, 0xffffffffffffffff) ioctl$auto_KVM_GET_MSRS(r0, 0x4008ae90, &(0x7f00000000c0)={0x2}) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/devices/virtual/mac80211_hwsim/hwsim1/ieee80211/phy1/rfkill3/state\x00', 0x102, 0x0) write$auto(r1, &(0x7f0000000040)='0\x00\\9(\xba\xea\x99\xfc|U\x1c\xc7k', 0x81) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r2, &(0x7f0000004240)={0x0, 0x0, &(0x7f0000004200)={&(0x7f0000000180)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x40c8}, 0x4048000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_OVS_CT_LIMIT_CMD_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002180)=ANY=[@ANYBLOB="e0020000", @ANYRES16=r4, @ANYBLOB="01002ebd5100fbcbdf250100000004000180c802018004000680bd020480fc921cf096b39f43034e2db36a74c0ade1e6a4dafab35aa84881d05d1662bd8a8f48943ea4276b7e1465958d17dd9c9706336d0f4a94c7de9fa79cb659b67f43fa331b6f98", @ANYBLOB="08006e00ac1414aa2c02bc8028029880220242804b8ef4dea62052d4391e1b7fcd2429f7195770e4ca6f21844850ff750ce04caf301dc66838e61817fb1f807d53f524a2ac569f0f1c754ec84650d22b883479398e9d766ecc3fa8de0f83e8f703cb19a0826ec7c4949c87bab590c6305dc6f742accc66d7f2c47d87ec1d7fde707f710037006af15d7fa2ec9194354a1069b7c806492e043fa1fdad718d351a10ddade114048ff1302faa59a651c349c5ec3cede0e3949d48b97b2bd1d493852ed30d3a7c2cead7511ef0c8d71cb13b68fb7475ceac2b9816379110f6b4d10d69aea84f032ee4c179ba7929c5d06329cbdf05000000040034804d001f800400f18004006c800d7112532deb3ef76f18436c6041ed69a31df55778585e94b7244ba30fca", @ANYBLOB, @ANYRES32=0x0], 0x2e0}, 0x1, 0x0, 0x0, 0x40}, 0x4) 5.504033945s ago: executing program 2 (id=2839): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x10b142, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) io_uring_setup$auto(0x59, &(0x7f0000000080)={0xa, 0xd, 0x2, 0x6, 0x7fff, 0x8, 0xffffffffffffffff, [], {0x6, 0x416, 0xb, 0x2de, 0x504, 0x1, 0x101, 0x6, 0x6}, {0xfff7ffff, 0x2, 0x52, 0x5, 0x10001, 0x40, 0x76c5, 0x8, 0x8000000000000000}}) bpf$auto_BPF_LINK_UPDATE(0x1d, &(0x7f0000000300)=@prog_bind_map={0xffffffffffffffff, 0xffffffffffffffff, 0x6}, 0x80) close_range$auto(0x2, 0x8, 0x0) openat$auto_uprobe_events_ops_trace_uprobe(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/uprobe_events\x00', 0x2102, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC2\x00', 0x2584, 0x0) ioctl$auto(0x3, 0x40045542, 0xb551) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x80102, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/midi2\x00', 0x103, 0x0) close_range$auto(0x2, 0x8, 0x0) 4.200772788s ago: executing program 3 (id=2840): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/audit\x00', 0x40802, 0x0) ioctl$auto_SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f0000000040)="0c31575c37efc562cbb0efb6e468b155b854e6dd18e46660") read$auto(r0, 0x0, 0xb4d3) r1 = openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) read$auto_kmsg_fops_printk(r1, &(0x7f00000000c0)=""/252, 0xfc) getsockopt$auto_SO_NOFCS(r1, 0x19, 0x2b, &(0x7f00000001c0)='\x00', &(0x7f0000000200)=0x8) mmap$auto(0x0, 0xa00004, 0xfffffffffffffff7, 0x40eb1, 0x602, 0x300000000000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0xe0301, 0x0) r3 = socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) ioctl$auto(r2, 0x4b72, r3) 4.198411487s ago: executing program 0 (id=2850): openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vbi22\x00', 0x100, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) faccessat$auto(r0, &(0x7f0000000080)='./file1\x00', 0xfffffffe) syz_genetlink_get_family_id$auto_nl802154(0x0, 0xffffffffffffffff) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) mmap$auto(0x0, 0x10001, 0xdf, 0x9b71, 0xffffffffffffffff, 0x0) socket(0xa, 0x1, 0x100) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8', 0x100000a3d6) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x10000000000001ff, 0x9, 0xd3e, 0x20, 0x9687, 0x100000000000003, 0x3c2a19d5, 0x6, 0x3, 0x62, 0x8, 0x7, 0x6d3f, 0x6, 0xa, 0xfffffffffffffffe]}, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000380)={[0x1ff, 0x7, 0xfffffffffffffffb, 0x1000001, 0x4, 0x3, 0x3, 0x3, 0xffffffffffffffff, 0x3, 0x80000000003fffff, 0x3, 0x6d3c, 0x3, 0x2, 0x8000000000000006]}, 0x0) 4.197226021s ago: executing program 2 (id=2851): mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) ustat$auto(0x801, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) r0 = socket(0x21, 0x2, 0x2) openat$auto_snapshot_fops_user(0xffffffffffffff9c, 0x0, 0x604200, 0x0) ioctl$auto_SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, 0x0) poll$auto(&(0x7f0000000000)={0x3, 0x1, 0xa}, 0x5, 0x108) setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9) mknod$auto(0x0, 0x1001, 0x4) sendmsg$auto_NFC_CMD_LLC_GET_PARAMS(r0, 0x0, 0x40000) setsockopt$auto(0x3, 0x10f, 0x80, 0x0, 0x7) 3.830744481s ago: executing program 1 (id=2843): r0 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000001cc0), 0x101440, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000000c0)={{0x0, 0x2, 0x200800, 0xffffffff, 0xfffffffb}, "0dd7fd004929347eeeccdf0732f77b1f6de0d6d51768a257a97ca5e9ca6310ea"}) ioctl$auto_SNDRV_TIMER_IOCTL_STATUS64(r0, 0x80605414, &(0x7f0000000000)={0x6, 0x3, 0x200, 0xba44, 0x2, 0xb, "e00026e8fdffdbcd2c02d3c293faa80c2f5336d79fc5b8202cb37f6b6d22c42432352deb58e78afdbae70400"}) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0x20000000000e31, 0x40000000000a5, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) r1 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/netdevsim/netdevsim0/hwstats/l3/enable_ifindex\x00', 0x2641, 0x0) write$auto(r1, &(0x7f00000005c0)='0\x81=\"\xad/\x8d\b\x00\x18\xa4\xb0\xb4\xd9\x82=~\x17\xfb&L\xeb=j\a\xf1y\xb3\"\xeb\a\xdd\xf4\xf4Ry\x86\x0f\xcf\x7f\xbf\xab\x12{\xc2\xc2*\xc1M+6/v8\xea\xe9\x85s4\xfe\xe5\t\x7fc\xfb7^\xb86J_\x1d1s!\x01\xff\xff\xff\xff\xff\xff\xff\x1dF\xe6\xf6\x17\x10+\xc0\xb0\xafc\x99\xd4\x150Y~\x1e\xe2\xd6x4fW\x13\xc4U`\x9e-X\xd7\xe2H^\fLS`\xfc\xbb\r\f\x00\xeaN\xa5\xd2\x82;\x7f\xa0.\x9a\xfb\x8d\xf3l\xf2\xd3\x95\xc1M5\xcb\xa6I\x067\xe36\xea\xe9\xe3\xf44oT_`8\xb3\xef\x04 \x05K\xf9\x87pl\xac\x86\nE\xc7e\xc5Q\x89\xcd@\x1c\x92\x00\x87\x976\x9f>\xa2\xcfm\xec\r\x11\x7f\x00\x00\x00\xb1\xde@\x02\xce\x03\xb7\xb1\xfb\x9fr\v\xb2\xe3\xc7\b\x85\x00 /zm\x7f\x8fg,p81\xb6\xbb\xd8D\xde\x0eR=A\x00\x1f\x8a\xa7/Q\"J\xbb\xb0m\xf2SP\x84\x84S\xf0\xba\x9a\xf6\xb6`WI\xba\xba*8\x9f\xea\xe8K/\x98\xbc7~\b\x00\x9buB\xcb\xe4\x8aKf\xba\x8c\x19m\xe6I\x02\xde\x80\x9d\x87}\xf4\xbd9\xaa\xd6\xdb1]\xde\xa0r\x14\xca56^\x94\xd2\xd8\xe6}9\x91\xcf\xf7\xa1=\x96\x11\xf1\\\xa91\x0e\xd1\xe4z\xc1;Pw!\x8b\xf5{\xc7Xd\xe1\xf2}\x96EVf\xc9\xa8\xcd\xe4\xc9\x8d\x1d7\xd5\x94\\\xb5\r\xd2\xaa\xe6H\xfe)\xb3a\x04\x1eRMl\xa3F\xa8W0\x90\xc9Ky#\x03\xf5~\xd2Z\xe9(\x99\b\x00M\xde\x01]\r\xd09k\xc2\x84\xc1\xabN\x96\x8a6\x98@\xd3\xab\xa8m\xdf\x8d\x1d\b\x82\xfcP\x87\x93\x80\x97Q\x86\x8a\x9c\xf8L\x0f\xa8@VE2\x9d\x1e`#\xd8\xd7M\xd4k1\xe6\x13Y\\\x83E\xd0e\x0eM\xa9Q\xac\x0e\x1d]\a\x19H\x81\xd2\xccF\xc6\xd4\xe2R$\xfa\xd6}\xbdsN\x18\xdf\xf5\xffP\xf5\f\xccL\xef\x83\xb3$\xd4\xf4\xb5\xe6\xd0 \xb9\xa7\x8e6\t\x83q\xef\b\xd2\xdb\xf6n\x82\xd4\xd6\xcc\xc19\x95+\x94\xb0f\xbb\x85\xf9\x98\xf8\x85Z\x19\xc0\x8a:(\xf6\x7fR^&cU\xfc\xae\x87\xf2\\\x02\xd3\xe9\x9f\xeb&l\x86D\x98\xa0\xc0 \xcec\xa3\x13\xf7\x02\a\x9d\x9d\x8e\x81\x8eu\xc73\x9f\x02\xe7 \x03\x9c\xab\xbe\x85-\a\"H\x87\x12A\xdc\xedF\xa3t\x91\x9f!\x8c\xd1A\xe7\x95\xa7\"\x8c\xb5\x1b\x80\x12u\x90AI\xc2\xbao3Ob\x94\xfa\'\x8d\x0f\xc6&\x94C\xa6|~\xebn-\x17\x1e+-\xdc\xe6f0cm\xf2\t\xb4:\x93g}/%\xc2\xe5\x8c\xd8\xc1+T\xe9@ys\xa8\xf0\xf3\xd3\x1e\x93\xe5\xbe\xb5\xee\xbf\xb2\xbb\x1dP\xbb\xa2$\xd5`\x01\xf0G\xa8\xf2`\x9e\x98\xa6+xX6M>\x8fq\xab\xaa\xe4\x87\xa1\xaa\x1d\xee\xb1[\x9e\x03\xdd\x11\x1dTg\x1b\x91\x86\x05\xf6\xa5 1\xbeSL\x19\x80\x9f.\n\xa4\xa80\xd8\xeb\x86\xf1s\xea\x17\xb4\x1a@\xa3\x15\xd9\x8fE\xc5\x00\x00\x00\x00', 0x1) madvise$auto(0x0, 0xffffffffffff0006, 0x17) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) mmap$auto(0x1, 0x8d4, 0x6, 0x6f52, 0xffffffffffffffff, 0x8000) 3.716495106s ago: executing program 2 (id=2844): mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$auto_USB_RAW_IOCTL_EP0_STALL(0xffffffffffffffff, 0x550c, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x147) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x20007, 0x0, 0x0, 0x0, 0x8000000000000000) sendmmsg$auto(r0, &(0x7f0000000180)={{0x0, 0x0, 0x0, 0x1000000000028, 0x0, 0x1, 0x3e0}, 0x800}, 0x4, 0x4008) select$auto(0xa, 0x0, &(0x7f0000000100)={[0x20000000000d, 0x203, 0x0, 0xc, 0x5, 0x7, 0x6, 0x1f2, 0x9, 0xe8, 0x400000000ff, 0xa, 0x4, 0xaab, 0x5, 0x7]}, 0x0, 0x0) execve$auto(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) execve$auto(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) execve$auto(&(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000100)=&(0x7f0000000600)='#\xdc\xfe\xd8E\xc8\x8bu4\xd9n\xcb\xca\xc7zw \x96\x9ejh\xad\x9eEc\xae\x1e\x89\x92\x9a\xbbP[B\xae\x9cf)\x15\xac\x90)l\x06\xf0\t\x12\x05zz\xa6\xb3\xce=\x00\x00\x00\x00\x00/\xc4T\x1f\xe5P\xff\xb4\xb7s0\x02\xc5\x81\x93\xc6\xc8\xb6Sp\x1a{8\xfc\xe0,X\xc7BU\xd0\x97\x7f1\x16\x99\x04\xabu/a(\x02\x7f\xbb\xbd\x906\xa8\xce\xee\xcd\xd7\t\x00\xfb\x83\xc8\x8aO\xe9\xbe=\xf7\xf4\x84,\x06\xd3j\x99b\xe6\xf6Y3A\xbb\xa4\xb2\f\x1b\xc3\x8a,g\xc6\xe8[\xdf\x88\x01\x9f7\xb5\x19m\xd8L\x84j\x8c\xec\xdf\x1a\xbd\xc5\x94\xb9\xb7\xd5\xa4\xc0\f-6\xfe\xa8\xed/u\x81_G\xfeR\xbb\x12\x16\xb8*\xa9\xc9\xe81\x9d\x06\xbbC\x17\xbb\xe6|\x97\xabB4J\xed+-\xf8u0/n\xcf\x8b\x95\x9d\xab\xa8\xc47\xa6\x0e\xdeOq\\\xc3\'{\b\xd3m\x94\xc2\xdd{\xeaO\x0e\xe4\xe0\xb9N:\xd60\x17,\x06\xc7B#Y0\x99\xeb\x874\xab?\xc8\x82\xe5\x8f\xb7\x91\xc2\xbe\xb2\x02\xfe\xd3k\xd5\xdcZ\xdcP\x8e+\xd8\xc7C\xcb\x15\x13c\xbf\xe8\xbd\"\x8f3\"\x14\xf8(\xda\x19\xcd\xec\x03.\xd9^\xc3A\xda\r[\x1a\xda\\#/\xd4\xaf\xd0\xe8\xa2\xdd\xc5{\xfa\xe0\x90\x8f\x99lQ\xec\x84h^\x11+\x93\b\xe0c\xe6\xd22\xf9\xa5') 3.60240077s ago: executing program 3 (id=2845): mmap$auto(0x0, 0x400008, 0xdf, 0x89b72, 0xffffffffffffffff, 0x8000) r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/oom_adj\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x1f40) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f00000000c0)={0x0, 0xffffffff}, 0x6) r2 = io_uring_setup$auto(0x59, &(0x7f0000000080)={0x2, 0x3, 0x3040, 0x6, 0x7, 0x400a, 0xffffffffffffffff, [], {0x6, 0x4, 0x3, 0x7c1e, 0x3, 0x7c, 0x104, 0x101, 0xffffffffffffffff}, {0x100, 0x1, 0x52, 0x85, 0x2, 0x1a7b870a, 0x100076c5, 0x10000008, 0x100000000}}) ppoll$auto(0x0, 0x7f, 0x0, 0x0, 0x8) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x4010}, 0x48015) ioctl$auto_SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000100)="89c931bf9fdd55fee8cd03a840ef55aa71ddf8f5487eb26972c356df3454111fc0db2d1b252bc6e976da1261cc6fd2a18c16d0069fe5a76a79e119e07074ae3ae5dfddece485979317914b8db74fbd5c0a335b7458da7c793966d345c6438fbba5f5223f78e79ef05a4c556f3b696b9d186033b03719762cdeffcceaecd77b80caffd7f77a861e706d117c43ff2d46499f779d5a510bc072cb8fd2fb76e5fdf61ca833705cd44e6d42dd03cde7835a7398b84c60922a706c90fdd77191971e23555521f5ef5f6d25a5") socketpair$auto(0x1, 0x5, 0x0, 0x0) 2.783756592s ago: executing program 0 (id=2846): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) r0 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x8000, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) madvise$auto(0x0, 0xfffffffffffeffff, 0x15) r1 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x1, 0x2020009, 0x203, 0x16, 0xfffffffffffffffa, 0x7ffd) unshare$auto(0x40000080) r2 = openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) move_mount$auto(r2, 0x0, r1, 0x0, 0x9) ioctl$auto_TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000080)=0x68) ioctl$auto_FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000080)) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dri/card1\x00', 0x22003, 0x0) 2.779727118s ago: executing program 3 (id=2857): mmap$auto(0x0, 0x9d90, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) unshare$auto(0x8000400) socket(0x2b, 0x1, 0x0) socket(0x10, 0x2, 0xf) bpf$auto(0x0, 0x0, 0x210) execve$auto(&(0x7f0000000100)=':,\x00', 0x0, 0x0) mknod$auto(0x0, 0x67be, 0x7ff) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) madvise$auto_MADV_GUARD_INSTALL(0x0, 0x100000000, 0x66) r0 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) ioctl$auto_PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, 0x100000, 0x7fffffffefff, 0xfffffffffffffffe, 0x0, 0x0, 0xe8, 0x0, 0x4, 0x0, 0x2}) 2.682666067s ago: executing program 2 (id=2848): mmap$auto(0x9, 0x202000a, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fa02, 0x0) getsockopt$auto(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) mmap$auto(0x0, 0x810004, 0x400000000fff, 0x8000000008011, 0x3, 0x8000) getdents$auto(0xffffffffffffffff, 0x0, 0x400018) sendfile$auto(0x3, r0, 0x0, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x17) sendfile$auto(0x2, 0x3, 0x0, 0xc3e0) settimeofday$auto(0x0, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r1 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/event2\x00', 0x0, 0x0) ioctl$auto_EVIOCSREP(r1, 0x400845fe, 0x0) 2.391438709s ago: executing program 3 (id=2849): mmap$auto(0x0, 0x80004, 0xe2, 0xeb1, 0x405, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) r0 = socket(0x15, 0x5, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop12\x00', 0x14fa02, 0x0) socketpair$auto(0x1, 0x5, 0x1, 0x0) fanotify_init$auto(0x65, 0x2) dup2$auto(0x5, 0x4) syz_genetlink_get_family_id$auto_nl802154(0x0, 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_NOTIFY_RADAR(r0, 0x0, 0x40004) 2.260632255s ago: executing program 1 (id=2852): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYBLOB="05"], 0x28}, 0x1, 0x0, 0x0, 0x4004044}, 0x8000) recvmmsg$auto(r0, &(0x7f0000000180)={{0x0, 0x5, 0x0, 0x0, 0x0, 0x2, 0x6}, 0x803}, 0x10a, 0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) userfaultfd$auto(0x1) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0xc0400, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r2) ioctl$auto_KVM_GET_MSRS(r1, 0x4138ae84, &(0x7f0000000140)={0x7}) 2.026977866s ago: executing program 3 (id=2853): statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0xf, 0x940, 0x1ffe0, 0x3, 0x6, 0x2, 0x9, 0x5, 0x2, 0x7, 0xb0, 0x6, 0x5, 0x3, 0x5, 0x7, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc]}, 0x1fe, 0x81) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x401bf, 0x734f, 0x33, 0x67f, 0xfffffff8, 0x7, 0x3, 0x20000002, 0xd, 0x3, 0x1, 0x2091, 0xb4, 0x9, 0x6, 0x6, 0x80, 0x4, 0x1cd7, 0x1000, 0x2000, 0x203, 0x8, 0x84, 0x0, 0x0, 0x0, 0x0, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x20000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4]}, 0x1fe, 0xd) io_uring_register$auto_IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, 0x0, 0x1) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x802, 0x0) ioctl$auto(0x3, 0x40045532, 0x38) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r0 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) 1.933084665s ago: executing program 1 (id=2854): r0 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408) getdents$auto(r0, 0x0, 0x400018) ioctl$auto_TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000040)=0xc28) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/bus/pci/resource_alignment\x00', 0x8ea182, 0x0) write$auto(r1, &(0x7f0000000000)='-\xd3', 0x7f) openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000200)='/proc/meminfo\x00', 0x2800, 0x0) sendfile$auto(0x2, 0x3, &(0x7f0000000040)=0x80, 0xc3e0) mmap$auto(0x0, 0x5, 0xde, 0x9b72, 0xffffffffffffffff, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000140)='/dev/v4l-subdev0\x00', 0x0, 0x0) capset$auto(0x0, 0x0) ioctl$auto(r3, 0xc0305602, r2) 1.854575338s ago: executing program 0 (id=2855): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xc, 0x800008000) io_uring_setup$auto(0x5, 0x0) mmap$auto(0x0, 0x20008, 0xdf, 0xeb1, 0x40000000000a5, 0x7ffc) ioctl$auto_BLKPG2(0xffffffffffffffff, 0x1269, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101c81, 0x0) epoll_create$auto(0x3) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0xc01, 0x1, 0x6d, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS2\x00', 0x101f81, 0x0) ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, 0xffffffffffffffff) 1.68484112s ago: executing program 1 (id=2856): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x2, 0x0) socket(0x28, 0x1, 0x0) socket(0x2, 0x5, 0x0) sysfs$auto(0x2, 0x0, 0x0) r0 = epoll_create$auto(0x7) r1 = socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$auto(0x5, 0x1, r1, 0x0) r2 = socket(0x1, 0x5, 0x0) epoll_ctl$auto(0x5, 0x1, r2, 0x0) epoll_wait$auto(r0, 0x0, 0xe007, 0x1) 1.682371322s ago: executing program 3 (id=2858): openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vbi22\x00', 0x100, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) faccessat$auto(r0, &(0x7f0000000080)='./file1\x00', 0xfffffffe) syz_genetlink_get_family_id$auto_nl802154(0x0, 0xffffffffffffffff) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) mmap$auto(0x0, 0x10001, 0xdf, 0x9b71, 0xffffffffffffffff, 0x0) socket(0xa, 0x1, 0x100) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8', 0x100000a3d6) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x10000000000001ff, 0x9, 0xd3e, 0x20, 0x9687, 0x100000000000003, 0x3c2a19d5, 0x6, 0x3, 0x62, 0x8, 0x7, 0x6d3f, 0x6, 0xa, 0xfffffffffffffffe]}, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000380)={[0x1ff, 0x7, 0xfffffffffffffffb, 0x1000001, 0x4, 0x3, 0x3, 0x3, 0xffffffffffffffff, 0x3, 0x80000000003fffff, 0x3, 0x6d3c, 0x3, 0x2, 0x8000000000000006]}, 0x0) 1.525856071s ago: executing program 0 (id=2859): mmap$auto(0x0, 0x20009, 0xffffffffffffffff, 0xeb1, 0x401, 0x8000) pread64$auto(0xffffffffffffffff, 0x0, 0x10000, 0x87ab) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x28, 0x5, 0x0) socket(0xa, 0x801, 0x106) socket(0x10, 0x2, 0x9) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r0 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(r0, 0xffffffffffffffff, 0x0) r1 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video0\x00', 0xa200, 0x0) ioctl$auto(r1, 0xc058560f, r1) socket$nl_generic(0x10, 0x3, 0x10) 1.404019056s ago: executing program 1 (id=2860): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) ptrace$auto(0x10, 0x0, 0x1, 0x7ff) ptrace$auto(0xc, 0x0, 0x9, 0xfffffffffffff6de) unshare$auto(0x40000080) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/cpu/cpu1/online\x00', 0x62, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto_TIOCSTI2(r1, 0x5412, &(0x7f0000000040)="158f4a2b") r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd7/queue/max_discard_segments\x00', 0x80000, 0x0) read$auto(r2, 0x0, 0x9) write$auto(0x3, 0x0, 0xfdef) write$auto(r0, &(0x7f00000002c0)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef`\xd8\x9c\xf7?:\x1a\xc62\x911e\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\b};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xff\x7f\xd0UV\x11\xcb\xdd\x81\xbe\xde\f/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7\x00\x85Z\x06?\x12\x98\x0f)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1;\xe4pd$\xd7\x1b\v\x82\r\f\xd0Hq\xd9\r\x88#\x89\x8d\xcd\x1e\x87N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8HR+\a\xb7R\t\n+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb\xc8^\xa4\xe2\x05\x91|\x123\xc3:\xfd\xee\x04a\xc8\x12\xce\xa2\x12\xcb\x8c\x87f\xebGQ\xe9\x96\xd5E\x13a\xb7\x057<&\xe0\x94\xa7\xfb\x9d;\xfa\xb1\x1b4a,\'\xb2Ym\xe1:\xbf\x8cs\x06\xa3u\x8d!\n\x80-\x9a\xbb;\xf4\xf3\xe1\x97\xfc8\xff\xa7\\\x8b\xf9\x95\x10$\xef\x1a #b\xfb\xfe\xe9\x06fK0\xdd\x84T,\xfa\xb5\x00\x83d\xbba\xd7\n\x92l\xdfAN\x9d\xcb\x96\xc7\xe8\xe6\x8bC\xeb\xc7EZ\xc8\x1a\x81nf\tZ-sZ\x13n\xec\xa9\xbf\xd0$\xb9\xd8\x00\x00\x00\x00\x00\x00\x00', 0xb) 1.229702502s ago: executing program 0 (id=2861): mmap$auto(0x0, 0x2020009, 0x126, 0x19, 0xffffffffffffffff, 0x0) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x103e81, 0x0) ioctl$auto_TCSBRKP2(r0, 0x5425, 0x0) close_range$auto(0x2, 0xa, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TCFLSH2(r1, 0x5408, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS2\x00', 0x101f81, 0x0) ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0) ioctl$auto_TIOCVHANGUP2(0xffffffffffffffff, 0x5437, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) socket(0xa, 0x3, 0x3a) 633.497794ms ago: executing program 0 (id=2862): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r0, 0x1, 0x7ff) ptrace$auto(0xc, r0, 0x9, 0xfffffffffffff6de) unshare$auto(0x40000080) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/cpu/cpu1/online\x00', 0x62, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto_TIOCSTI2(r2, 0x5412, &(0x7f0000000040)="158f4a2b") r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd7/queue/max_discard_segments\x00', 0x80000, 0x0) read$auto(r3, 0x0, 0x9) write$auto(0x3, 0x0, 0xfdef) write$auto(r1, &(0x7f00000002c0)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef`\xd8\x9c\xf7?:\x1a\xc62\x911e\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\b};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xff\x7f\xd0UV\x11\xcb\xdd\x81\xbe\xde\f/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7\x00\x85Z\x06?\x12\x98\x0f)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1;\xe4pd$\xd7\x1b\v\x82\r\f\xd0Hq\xd9\r\x88#\x89\x8d\xcd\x1e\x87N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8HR+\a\xb7R\t\n+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb\xc8^\xa4\xe2\x05\x91|\x123\xc3:\xfd\xee\x04a\xc8\x12\xce\xa2\x12\xcb\x8c\x87f\xebGQ\xe9\x96\xd5E\x13a\xb7\x057<&\xe0\x94\xa7\xfb\x9d;\xfa\xb1\x1b4a,\'\xb2Ym\xe1:\xbf\x8cs\x06\xa3u\x8d!\n\x80-\x9a\xbb;\xf4\xf3\xe1\x97\xfc8\xff\xa7\\\x8b\xf9\x95\x10$\xef\x1a #b\xfb\xfe\xe9\x06fK0\xdd\x84T,\xfa\xb5\x00\x83d\xbba\xd7\n\x92l\xdfAN\x9d\xcb\x96\xc7\xe8\xe6\x8bC\xeb\xc7EZ\xc8\x1a\x81nf\tZ-sZ\x13n\xec\xa9\xbf\xd0$\xb9\xd8\x00\x00\x00\x00\x00\x00\x00', 0xb) 391.967019ms ago: executing program 2 (id=2863): mmap$auto(0x0, 0x202000d, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) r0 = fsopen$auto(0x0, 0x1) fsconfig$auto(r0, 0x3, &(0x7f0000000000)='Q**\x00', &(0x7f0000000040), 0x0) unshare$auto(0x40000080) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) sendmsg$auto_ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, 0x0, 0x2000c840) mmap$auto(0x0, 0x4020009, 0x80000000df, 0xeb1, 0xffffffffffffffff, 0x8000) setrlimit$auto(0x9, 0x0) madvise$auto(0x110c230000, 0x1, 0x9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000000000007ffe) io_setup$auto(0x7ffe, 0x0) 0s ago: executing program 1 (id=2864): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) r0 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x8000, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) madvise$auto(0x0, 0xfffffffffffeffff, 0x15) r1 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x1, 0x2020009, 0x203, 0x16, 0xfffffffffffffffa, 0x7ffd) unshare$auto(0x40000080) r2 = openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) move_mount$auto(r2, 0x0, r1, 0x0, 0x9) ioctl$auto_TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000080)=0x68) ioctl$auto_FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000080)) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dri/card1\x00', 0x22003, 0x0) kernel console output (not intermixed with test programs): nd_pcm_oss_change_params_locked+0x10/0x10 [ 440.498452][T11721] ? __pfx___mutex_lock+0x10/0x10 [ 440.498484][T11721] ? find_held_lock+0x2b/0x80 [ 440.498529][T11721] ? tomoyo_path_number_perm+0x28f/0x580 [ 440.498569][T11721] ? tomoyo_path_number_perm+0x28f/0x580 [ 440.498619][T11721] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 440.498656][T11721] ? futex_wait+0x11e/0x370 [ 440.498710][T11721] snd_pcm_oss_get_active_substream+0x175/0x1d0 [ 440.498773][T11721] snd_pcm_oss_get_formats+0x7d/0x350 [ 440.498827][T11721] ? do_vfs_ioctl+0x226/0x13e0 [ 440.498862][T11721] ? __pfx_snd_pcm_oss_get_formats+0x10/0x10 [ 440.498930][T11721] snd_pcm_oss_ioctl+0x1795/0x37c0 [ 440.498997][T11721] ? find_held_lock+0x2b/0x80 [ 440.499044][T11721] ? __fget_files+0x215/0x3d0 [ 440.499082][T11721] ? hook_file_ioctl_common+0x149/0x410 [ 440.499124][T11721] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 440.499186][T11721] ? __fget_files+0x21f/0x3d0 [ 440.499238][T11721] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 440.499299][T11721] __x64_sys_ioctl+0x18e/0x210 [ 440.499338][T11721] do_syscall_64+0x10b/0xf80 [ 440.499391][T11721] ? clear_bhb_loop+0x40/0x90 [ 440.499435][T11721] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.499472][T11721] RIP: 0033:0x7f2162d9ce59 [ 440.499500][T11721] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 440.499534][T11721] RSP: 002b:00007f2163b74028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 440.499567][T11721] RAX: ffffffffffffffda RBX: 00007f2163016090 RCX: 00007f2162d9ce59 [ 440.499590][T11721] RDX: 0000000000000000 RSI: 000000008004500b RDI: 0000000000000003 [ 440.499610][T11721] RBP: 00007f2162e32d6f R08: 0000000000000000 R09: 0000000000000000 [ 440.499631][T11721] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 440.499650][T11721] R13: 00007f2163016128 R14: 00007f2163016090 R15: 00007ffe928f3028 [ 440.499692][T11721] [ 440.650703][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 440.921380][T11733] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1866'. [ 441.401840][T11743] FAULT_INJECTION: forcing a failure. [ 441.401840][T11743] name failslab, interval 1, probability 0, space 0, times 0 [ 441.415706][T11743] CPU: 1 UID: 0 PID: 11743 Comm: syz.1.1872 Tainted: G U L syzkaller #0 PREEMPT(full) [ 441.415756][T11743] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 441.415768][T11743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 441.415788][T11743] Call Trace: [ 441.415798][T11743] [ 441.415811][T11743] dump_stack_lvl+0x100/0x190 [ 441.415855][T11743] should_fail_ex.cold+0x5/0xa [ 441.415896][T11743] should_failslab+0xc2/0x120 [ 441.415938][T11743] __kmalloc_cache_noprof+0x7a/0x6f0 [ 441.415986][T11743] ? __vb2_init_fileio+0x18f/0x1000 [ 441.416033][T11743] ? trace_contention_end+0x122/0x170 [ 441.416073][T11743] __vb2_init_fileio+0x18f/0x1000 [ 441.416117][T11743] ? aa_file_perm+0x7f3/0x14d0 [ 441.416173][T11743] __vb2_perform_fileio+0x91e/0x1380 [ 441.416229][T11743] ? __pfx___vb2_perform_fileio+0x10/0x10 [ 441.416274][T11743] ? __pfx___might_resched+0x10/0x10 [ 441.416312][T11743] ? futex_hash+0x141/0x370 [ 441.416346][T11743] vb2_fop_read+0x211/0x520 [ 441.416384][T11743] v4l2_read+0x229/0x2c0 [ 441.416427][T11743] ? __pfx_v4l2_read+0x10/0x10 [ 441.416463][T11743] vfs_read+0x1e4/0xb30 [ 441.416505][T11743] ? __pfx_vfs_read+0x10/0x10 [ 441.416540][T11743] ? find_held_lock+0x2b/0x80 [ 441.416586][T11743] ? __fget_files+0x215/0x3d0 [ 441.416626][T11743] ? __fget_files+0x215/0x3d0 [ 441.416672][T11743] ? __fget_files+0x21f/0x3d0 [ 441.416723][T11743] ksys_read+0x12a/0x250 [ 441.416763][T11743] ? __pfx_ksys_read+0x10/0x10 [ 441.416806][T11743] ? rcu_is_watching+0x12/0xc0 [ 441.416854][T11743] do_syscall_64+0x10b/0xf80 [ 441.416911][T11743] ? clear_bhb_loop+0x40/0x90 [ 441.416955][T11743] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.416989][T11743] RIP: 0033:0x7f97dad9ce59 [ 441.417016][T11743] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 441.417051][T11743] RSP: 002b:00007f97dbc01028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 441.417086][T11743] RAX: ffffffffffffffda RBX: 00007f97db015fa0 RCX: 00007f97dad9ce59 [ 441.417110][T11743] RDX: 0000000000000028 RSI: 0000200000000280 RDI: 0000000000000003 [ 441.417131][T11743] RBP: 00007f97dae32d6f R08: 0000000000000000 R09: 0000000000000000 [ 441.417153][T11743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 441.417174][T11743] R13: 00007f97db016038 R14: 00007f97db015fa0 R15: 00007ffc4b546c08 [ 441.417217][T11743] [ 442.018744][T11752] netlink: 'syz.2.1875': attribute type 29 has an invalid length. [ 442.027197][T11752] netlink: 46 bytes leftover after parsing attributes in process `syz.2.1875'. [ 442.755049][T11763] netlink: 25 bytes leftover after parsing attributes in process `syz.0.1887'. [ 443.119287][T11770] FAULT_INJECTION: forcing a failure. [ 443.119287][T11770] name failslab, interval 1, probability 0, space 0, times 0 [ 443.165076][T11770] CPU: 0 UID: 0 PID: 11770 Comm: syz.3.1881 Tainted: G U L syzkaller #0 PREEMPT(full) [ 443.165131][T11770] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 443.165143][T11770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 443.165161][T11770] Call Trace: [ 443.165171][T11770] [ 443.165183][T11770] dump_stack_lvl+0x100/0x190 [ 443.165222][T11770] should_fail_ex.cold+0x5/0xa [ 443.165261][T11770] should_failslab+0xc2/0x120 [ 443.165297][T11770] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 443.165353][T11770] ? create_new_namespaces+0x30/0xac0 [ 443.165393][T11770] ? rcu_is_watching+0x12/0xc0 [ 443.165433][T11770] create_new_namespaces+0x30/0xac0 [ 443.165470][T11770] ? bpf_lsm_capable+0x9/0x10 [ 443.165504][T11770] ? security_capable+0x80/0x260 [ 443.165553][T11770] unshare_nsproxy_namespaces+0xf2/0x220 [ 443.165596][T11770] ksys_unshare+0x438/0xab0 [ 443.165643][T11770] ? __pfx_ksys_unshare+0x10/0x10 [ 443.165685][T11770] ? xfd_validate_state+0x129/0x190 [ 443.165726][T11770] __x64_sys_unshare+0x31/0x40 [ 443.165769][T11770] do_syscall_64+0x10b/0xf80 [ 443.165814][T11770] ? clear_bhb_loop+0x40/0x90 [ 443.165851][T11770] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.165881][T11770] RIP: 0033:0x7fa6d879ce59 [ 443.165905][T11770] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 443.165936][T11770] RSP: 002b:00007fa6d973e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 443.165964][T11770] RAX: ffffffffffffffda RBX: 00007fa6d8a15fa0 RCX: 00007fa6d879ce59 [ 443.165984][T11770] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006c000000 [ 443.166003][T11770] RBP: 00007fa6d8832d6f R08: 0000000000000000 R09: 0000000000000000 [ 443.166023][T11770] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 443.166044][T11770] R13: 00007fa6d8a16038 R14: 00007fa6d8a15fa0 R15: 00007ffd0eef1358 [ 443.166085][T11770] [ 443.210947][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 443.863817][T11767] FAULT_INJECTION: forcing a failure. [ 443.863817][T11767] name failslab, interval 1, probability 0, space 0, times 0 [ 443.891454][T11767] CPU: 1 UID: 0 PID: 11767 Comm: syz.0.1880 Tainted: G U L syzkaller #0 PREEMPT(full) [ 443.891505][T11767] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 443.891515][T11767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 443.891530][T11767] Call Trace: [ 443.891539][T11767] [ 443.891570][T11767] dump_stack_lvl+0x100/0x190 [ 443.891614][T11767] should_fail_ex.cold+0x5/0xa [ 443.891653][T11767] should_failslab+0xc2/0x120 [ 443.891684][T11767] __kmalloc_cache_noprof+0x7a/0x6f0 [ 443.891722][T11767] ? snd_pcm_oss_change_params_locked+0x1db/0x39f0 [ 443.891771][T11767] snd_pcm_oss_change_params_locked+0x1db/0x39f0 [ 443.891815][T11767] ? trace_contention_end+0x125/0x170 [ 443.891852][T11767] ? snd_pcm_oss_get_active_substream+0x153/0x1d0 [ 443.891897][T11767] ? kasan_quarantine_put+0x104/0x240 [ 443.891922][T11767] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 443.891964][T11767] ? __pfx___mutex_lock+0x10/0x10 [ 443.891987][T11767] ? find_held_lock+0x2b/0x80 [ 443.892020][T11767] ? tomoyo_path_number_perm+0x28f/0x580 [ 443.892049][T11767] ? tomoyo_path_number_perm+0x28f/0x580 [ 443.892085][T11767] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 443.892113][T11767] ? futex_wait+0x11e/0x370 [ 443.892152][T11767] snd_pcm_oss_get_active_substream+0x175/0x1d0 [ 443.892199][T11767] snd_pcm_oss_get_formats+0x7d/0x350 [ 443.892239][T11767] ? do_vfs_ioctl+0x226/0x13e0 [ 443.892263][T11767] ? __pfx_snd_pcm_oss_get_formats+0x10/0x10 [ 443.892313][T11767] snd_pcm_oss_ioctl+0x1795/0x37c0 [ 443.892374][T11767] ? find_held_lock+0x2b/0x80 [ 443.892419][T11767] ? __fget_files+0x215/0x3d0 [ 443.892456][T11767] ? hook_file_ioctl_common+0x149/0x410 [ 443.892497][T11767] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 443.892555][T11767] ? __fget_files+0x21f/0x3d0 [ 443.892600][T11767] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 443.892658][T11767] __x64_sys_ioctl+0x18e/0x210 [ 443.892691][T11767] do_syscall_64+0x10b/0xf80 [ 443.892741][T11767] ? clear_bhb_loop+0x40/0x90 [ 443.892783][T11767] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.892818][T11767] RIP: 0033:0x7fc27b59ce59 [ 443.892855][T11767] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 443.892887][T11767] RSP: 002b:00007fc27c4a2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 443.892919][T11767] RAX: ffffffffffffffda RBX: 00007fc27b815fa0 RCX: 00007fc27b59ce59 [ 443.892941][T11767] RDX: 0000000000000000 RSI: 000000008004500b RDI: 0000000000000003 [ 443.892960][T11767] RBP: 00007fc27b632d6f R08: 0000000000000000 R09: 0000000000000000 [ 443.892980][T11767] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 443.892999][T11767] R13: 00007fc27b816038 R14: 00007fc27b815fa0 R15: 00007ffd65675d08 [ 443.893041][T11767] [ 444.381065][T11790] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1888'. [ 444.393636][T11790] bond0: left allmulticast mode [ 444.399898][T11790] bond_slave_0: left allmulticast mode [ 444.428091][T11790] bond_slave_1: left allmulticast mode [ 444.443980][T11790] bond0: left promiscuous mode [ 444.449138][T11790] bond_slave_0: left promiscuous mode [ 444.462263][T11790] bond_slave_1: left promiscuous mode [ 444.469074][T11790] bridge0: port 3(bond0) entered disabled state [ 444.489971][T11790] bridge_slave_1: left allmulticast mode [ 444.500517][T11790] bridge_slave_1: left promiscuous mode [ 444.506431][T11790] bridge0: port 2(bridge_slave_1) entered disabled state [ 444.522794][T11790] bridge_slave_0: left allmulticast mode [ 444.528715][T11790] bridge_slave_0: left promiscuous mode [ 444.541718][T11790] bridge0: port 1(bridge_slave_0) entered disabled state [ 444.785206][T11797] netlink: 25 bytes leftover after parsing attributes in process `syz.3.1892'. [ 446.918342][T11826] FAULT_INJECTION: forcing a failure. [ 446.918342][T11826] name failslab, interval 1, probability 0, space 0, times 0 [ 446.937051][T11826] CPU: 1 UID: 0 PID: 11826 Comm: syz.1.1899 Tainted: G U L syzkaller #0 PREEMPT(full) [ 446.937101][T11826] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 446.937111][T11826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 446.937127][T11826] Call Trace: [ 446.937135][T11826] [ 446.937145][T11826] dump_stack_lvl+0x100/0x190 [ 446.937177][T11826] should_fail_ex.cold+0x5/0xa [ 446.937209][T11826] should_failslab+0xc2/0x120 [ 446.937239][T11826] __kmalloc_cache_noprof+0x7a/0x6f0 [ 446.937277][T11826] ? snd_pcm_oss_change_params_locked+0x1db/0x39f0 [ 446.937327][T11826] snd_pcm_oss_change_params_locked+0x1db/0x39f0 [ 446.937369][T11826] ? trace_contention_end+0x125/0x170 [ 446.937400][T11826] ? snd_pcm_oss_get_active_substream+0x153/0x1d0 [ 446.937446][T11826] ? kasan_quarantine_put+0x104/0x240 [ 446.937472][T11826] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 446.937544][T11826] ? __pfx___mutex_lock+0x10/0x10 [ 446.937571][T11826] ? find_held_lock+0x2b/0x80 [ 446.937604][T11826] ? tomoyo_path_number_perm+0x28f/0x580 [ 446.937633][T11826] ? tomoyo_path_number_perm+0x28f/0x580 [ 446.937669][T11826] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 446.937696][T11826] ? futex_wait+0x11e/0x370 [ 446.937736][T11826] snd_pcm_oss_get_active_substream+0x175/0x1d0 [ 446.937782][T11826] snd_pcm_oss_get_formats+0x7d/0x350 [ 446.937823][T11826] ? do_vfs_ioctl+0x226/0x13e0 [ 446.937847][T11826] ? __pfx_snd_pcm_oss_get_formats+0x10/0x10 [ 446.937897][T11826] snd_pcm_oss_ioctl+0x1795/0x37c0 [ 446.937945][T11826] ? find_held_lock+0x2b/0x80 [ 446.937978][T11826] ? __fget_files+0x215/0x3d0 [ 446.938007][T11826] ? hook_file_ioctl_common+0x149/0x410 [ 446.938037][T11826] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 446.938082][T11826] ? __fget_files+0x21f/0x3d0 [ 446.938115][T11826] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 446.938159][T11826] __x64_sys_ioctl+0x18e/0x210 [ 446.938187][T11826] do_syscall_64+0x10b/0xf80 [ 446.938225][T11826] ? clear_bhb_loop+0x40/0x90 [ 446.938256][T11826] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 446.938282][T11826] RIP: 0033:0x7f97dad9ce59 [ 446.938302][T11826] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 446.938326][T11826] RSP: 002b:00007f97dbc01028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 446.938350][T11826] RAX: ffffffffffffffda RBX: 00007f97db015fa0 RCX: 00007f97dad9ce59 [ 446.938367][T11826] RDX: 0000000000000000 RSI: 000000008004500b RDI: 0000000000000003 [ 446.938382][T11826] RBP: 00007f97dae32d6f R08: 0000000000000000 R09: 0000000000000000 [ 446.938397][T11826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 446.938413][T11826] R13: 00007f97db016038 R14: 00007f97db015fa0 R15: 00007ffc4b546c08 [ 446.938447][T11826] [ 447.606634][T11847] FAULT_INJECTION: forcing a failure. [ 447.606634][T11847] name failslab, interval 1, probability 0, space 0, times 0 [ 447.639996][T11847] CPU: 0 UID: 0 PID: 11847 Comm: syz.1.1905 Tainted: G U L syzkaller #0 PREEMPT(full) [ 447.640067][T11847] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 447.640080][T11847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 447.640100][T11847] Call Trace: [ 447.640111][T11847] [ 447.640124][T11847] dump_stack_lvl+0x100/0x190 [ 447.640173][T11847] should_fail_ex.cold+0x5/0xa [ 447.640216][T11847] should_failslab+0xc2/0x120 [ 447.640261][T11847] __kmalloc_cache_noprof+0x7a/0x6f0 [ 447.640311][T11847] ? vidtv_mux_create_pid_ctx_once.part.0+0x49/0x200 [ 447.640361][T11847] vidtv_mux_create_pid_ctx_once.part.0+0x49/0x200 [ 447.640402][T11847] vidtv_mux_create_pid_ctx_once+0xe6/0x140 [ 447.640452][T11847] vidtv_mux_init+0x72d/0xbf0 [ 447.640490][T11847] vidtv_start_feed+0x34e/0x500 [ 447.640536][T11847] ? __pfx_vidtv_start_feed+0x10/0x10 [ 447.640581][T11847] ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10 [ 447.640646][T11847] dmx_section_feed_start_filtering+0x3a8/0x660 [ 447.640708][T11847] dvb_dmxdev_filter_start+0x767/0xdd0 [ 447.640770][T11847] dvb_demux_do_ioctl+0xe64/0x1200 [ 447.640825][T11847] dvb_usercopy+0x167/0x340 [ 447.640860][T11847] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 447.640907][T11847] ? __pfx_dvb_usercopy+0x10/0x10 [ 447.640961][T11847] ? __fget_files+0x21f/0x3d0 [ 447.641011][T11847] dvb_demux_ioctl+0x29/0x40 [ 447.641048][T11847] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 447.641087][T11847] __x64_sys_ioctl+0x18e/0x210 [ 447.641125][T11847] do_syscall_64+0x10b/0xf80 [ 447.641177][T11847] ? clear_bhb_loop+0x40/0x90 [ 447.641219][T11847] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.641254][T11847] RIP: 0033:0x7f97dad9ce59 [ 447.641291][T11847] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 447.641326][T11847] RSP: 002b:00007f97dbc01028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 447.641358][T11847] RAX: ffffffffffffffda RBX: 00007f97db015fa0 RCX: 00007f97dad9ce59 [ 447.641380][T11847] RDX: 0000000000000000 RSI: 00000000403c6f2b RDI: 0000000000000005 [ 447.641401][T11847] RBP: 00007f97dae32d6f R08: 0000000000000000 R09: 0000000000000000 [ 447.641430][T11847] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 447.641451][T11847] R13: 00007f97db016038 R14: 00007f97db015fa0 R15: 00007ffc4b546c08 [ 447.641496][T11847] [ 448.784710][T11872] ovs_: entered promiscuous mode [ 448.806909][T11874] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1914'. [ 449.138439][T11883] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1915'. [ 451.211989][T11920] FAULT_INJECTION: forcing a failure. [ 451.211989][T11920] name fail_futex, interval 1, probability 0, space 0, times 0 [ 451.296434][T11920] CPU: 1 UID: 0 PID: 11920 Comm: syz.2.1928 Tainted: G U L syzkaller #0 PREEMPT(full) [ 451.296494][T11920] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 451.296508][T11920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 451.296528][T11920] Call Trace: [ 451.296540][T11920] [ 451.296554][T11920] dump_stack_lvl+0x100/0x190 [ 451.296605][T11920] should_fail_ex.cold+0x5/0xa [ 451.296649][T11920] get_futex_key+0x1d2/0x1510 [ 451.296691][T11920] ? __pfx_get_futex_key+0x10/0x10 [ 451.296732][T11920] ? kasan_save_track+0x14/0x30 [ 451.296768][T11920] ? __kasan_kmalloc+0xaa/0xb0 [ 451.296809][T11920] futex_lock_pi+0x1d2/0x7a0 [ 451.296859][T11920] ? __pfx_futex_lock_pi+0x10/0x10 [ 451.296947][T11920] ? __pfx_futex_wake_mark+0x10/0x10 [ 451.297004][T11920] ? __get_user_nocheck_8+0x20/0x20 [ 451.297053][T11920] ? do_vfs_ioctl+0x226/0x13e0 [ 451.297094][T11920] do_futex+0x18a/0x350 [ 451.297134][T11920] ? __pfx_do_futex+0x10/0x10 [ 451.297184][T11920] ? find_held_lock+0x2b/0x80 [ 451.297238][T11920] __x64_sys_futex+0x34f/0x4d0 [ 451.297282][T11920] ? __pfx___x64_sys_futex+0x10/0x10 [ 451.297331][T11920] ? rcu_is_watching+0x12/0xc0 [ 451.297380][T11920] do_syscall_64+0x10b/0xf80 [ 451.297432][T11920] ? clear_bhb_loop+0x40/0x90 [ 451.297475][T11920] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.297511][T11920] RIP: 0033:0x7f2162d9ce59 [ 451.297540][T11920] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 451.297575][T11920] RSP: 002b:00007f2163b74028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 451.297609][T11920] RAX: ffffffffffffffda RBX: 00007f2163016090 RCX: 00007f2162d9ce59 [ 451.297632][T11920] RDX: 0000000000000008 RSI: 0000000000000006 RDI: 0000000000000000 [ 451.297652][T11920] RBP: 00007f2162e32d6f R08: 0000000000000000 R09: 000000008000fff5 [ 451.297675][T11920] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 451.297696][T11920] R13: 00007f2163016128 R14: 00007f2163016090 R15: 00007ffe928f3028 [ 451.297741][T11920] [ 452.475036][T11937] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1932'. [ 452.984913][T11944] netlink: 'syz.0.1942': attribute type 1 has an invalid length. [ 452.992941][ T30] audit: type=1804 audit(1779098656.202:11): pid=11946 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1934" name="/newroot/512/file0" dev="tmpfs" ino=2656 res=1 errno=0 [ 452.999290][T11944] netlink: 33 bytes leftover after parsing attributes in process `syz.0.1942'. [ 453.492717][T11957] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1938'. [ 454.136722][T11970] netlink: 252 bytes leftover after parsing attributes in process `syz.2.1941'. [ 454.147891][T11970] netlink: 252 bytes leftover after parsing attributes in process `syz.2.1941'. [ 455.669505][T11994] FAULT_INJECTION: forcing a failure. [ 455.669505][T11994] name failslab, interval 1, probability 0, space 0, times 0 [ 455.718081][T11994] CPU: 1 UID: 0 PID: 11994 Comm: syz.3.1947 Tainted: G U L syzkaller #0 PREEMPT(full) [ 455.718123][T11994] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 455.718133][T11994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 455.718149][T11994] Call Trace: [ 455.718158][T11994] [ 455.718167][T11994] dump_stack_lvl+0x100/0x190 [ 455.718200][T11994] should_fail_ex.cold+0x5/0xa [ 455.718232][T11994] should_failslab+0xc2/0x120 [ 455.718262][T11994] __kmalloc_cache_noprof+0x7a/0x6f0 [ 455.718308][T11994] ? __do_sys_fanotify_init+0x608/0xe80 [ 455.718345][T11994] __do_sys_fanotify_init+0x608/0xe80 [ 455.718380][T11994] do_syscall_64+0x10b/0xf80 [ 455.718420][T11994] ? clear_bhb_loop+0x40/0x90 [ 455.718450][T11994] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 455.718477][T11994] RIP: 0033:0x7fa6d879ce59 [ 455.718496][T11994] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 455.718522][T11994] RSP: 002b:00007fa6d973e028 EFLAGS: 00000246 ORIG_RAX: 000000000000012c [ 455.718546][T11994] RAX: ffffffffffffffda RBX: 00007fa6d8a15fa0 RCX: 00007fa6d879ce59 [ 455.718562][T11994] RDX: 0000000000000000 RSI: 0002000000000002 RDI: 00000000000006a1 [ 455.718578][T11994] RBP: 00007fa6d8832d6f R08: 0000000000000000 R09: 0000000000000000 [ 455.718593][T11994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 455.718608][T11994] R13: 00007fa6d8a16038 R14: 00007fa6d8a15fa0 R15: 00007ffd0eef1358 [ 455.718639][T11994] [ 456.108357][ T30] audit: type=1804 audit(1779098659.312:12): pid=12001 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1950" name="/newroot/498/file0" dev="tmpfs" ino=2590 res=1 errno=0 [ 457.890135][T12030] FAULT_INJECTION: forcing a failure. [ 457.890135][T12030] name failslab, interval 1, probability 0, space 0, times 0 [ 457.915697][T12030] CPU: 0 UID: 0 PID: 12030 Comm: syz.2.1961 Tainted: G U L syzkaller #0 PREEMPT(full) [ 457.915755][T12030] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 457.915768][T12030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 457.915789][T12030] Call Trace: [ 457.915800][T12030] [ 457.915813][T12030] dump_stack_lvl+0x100/0x190 [ 457.915858][T12030] should_fail_ex.cold+0x5/0xa [ 457.915902][T12030] should_failslab+0xc2/0x120 [ 457.915944][T12030] __kmalloc_cache_noprof+0x7a/0x6f0 [ 457.915998][T12030] ? __do_sys_fanotify_init+0x608/0xe80 [ 457.916047][T12030] __do_sys_fanotify_init+0x608/0xe80 [ 457.916095][T12030] do_syscall_64+0x10b/0xf80 [ 457.916149][T12030] ? clear_bhb_loop+0x40/0x90 [ 457.916203][T12030] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.916238][T12030] RIP: 0033:0x7f2162d9ce59 [ 457.916266][T12030] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 457.916299][T12030] RSP: 002b:00007f2163b95028 EFLAGS: 00000246 ORIG_RAX: 000000000000012c [ 457.916333][T12030] RAX: ffffffffffffffda RBX: 00007f2163015fa0 RCX: 00007f2162d9ce59 [ 457.916356][T12030] RDX: 0000000000000000 RSI: 0002000000000002 RDI: 00000000000006a1 [ 457.916378][T12030] RBP: 00007f2162e32d6f R08: 0000000000000000 R09: 0000000000000000 [ 457.916399][T12030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 457.916419][T12030] R13: 00007f2163016038 R14: 00007f2163015fa0 R15: 00007ffe928f3028 [ 457.916463][T12030] [ 461.392447][T12089] netlink: 62 bytes leftover after parsing attributes in process `syz.1.1982'. [ 461.458138][T12092] netlink: 54 bytes leftover after parsing attributes in process `syz.0.1983'. [ 463.525667][T12133] FAULT_INJECTION: forcing a failure. [ 463.525667][T12133] name failslab, interval 1, probability 0, space 0, times 0 [ 463.630440][T12133] CPU: 1 UID: 0 PID: 12133 Comm: syz.3.1994 Tainted: G U L syzkaller #0 PREEMPT(full) [ 463.630500][T12133] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 463.630514][T12133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 463.630536][T12133] Call Trace: [ 463.630548][T12133] [ 463.630561][T12133] dump_stack_lvl+0x100/0x190 [ 463.630605][T12133] should_fail_ex.cold+0x5/0xa [ 463.630652][T12133] should_failslab+0xc2/0x120 [ 463.630696][T12133] __kmalloc_cache_noprof+0x7a/0x6f0 [ 463.630747][T12133] ? kobject_uevent_env+0x263/0x18b0 [ 463.630792][T12133] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 463.630858][T12133] kobject_uevent_env+0x263/0x18b0 [ 463.630927][T12133] ? bus_to_subsys+0x114/0x150 [ 463.631079][T12133] device_add+0x116e/0x1950 [ 463.631118][T12133] ? __pfx_device_add+0x10/0x10 [ 463.631152][T12133] ? lockdep_init_map_type+0x5c/0x250 [ 463.631179][T12133] ? __init_waitqueue_head+0xca/0x150 [ 463.631224][T12133] rfkill_register+0x1ad/0xb30 [ 463.631312][T12133] nfc_register_device+0x11f/0x3e0 [ 463.631394][T12133] nci_register_device+0x7f1/0xb80 [ 463.631450][T12133] ? __pfx_nci_register_device+0x10/0x10 [ 463.631486][T12133] ? lockdep_init_map_type+0x5c/0x250 [ 463.631517][T12133] virtual_ncidev_open+0x141/0x220 [ 463.631639][T12133] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 463.631696][T12133] misc_open+0x26d/0x450 [ 463.631744][T12133] ? __pfx_misc_open+0x10/0x10 [ 463.631788][T12133] chrdev_open+0x234/0x6a0 [ 463.631833][T12133] ? __pfx_apparmor_file_open+0x10/0x10 [ 463.631894][T12133] ? __pfx_chrdev_open+0x10/0x10 [ 463.631941][T12133] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 463.632000][T12133] do_dentry_open+0x6d8/0x1660 [ 463.632044][T12133] ? __pfx_chrdev_open+0x10/0x10 [ 463.632102][T12133] vfs_open+0x82/0x3f0 [ 463.632160][T12133] path_openat+0x208c/0x31a0 [ 463.632234][T12133] ? __pfx_path_openat+0x10/0x10 [ 463.632298][T12133] do_file_open+0x20e/0x430 [ 463.632350][T12133] ? __pfx_do_file_open+0x10/0x10 [ 463.632424][T12133] ? alloc_fd+0x476/0x790 [ 463.632487][T12133] ? do_getname+0x191/0x390 [ 463.632544][T12133] do_sys_openat2+0x10d/0x1e0 [ 463.632602][T12133] ? __pfx_do_sys_openat2+0x10/0x10 [ 463.632645][T12133] ? __fget_files+0x21f/0x3d0 [ 463.632682][T12133] __x64_sys_openat+0x12d/0x210 [ 463.632749][T12133] ? __pfx___x64_sys_openat+0x10/0x10 [ 463.632813][T12133] ? rcu_is_watching+0x12/0xc0 [ 463.632864][T12133] do_syscall_64+0x10b/0xf80 [ 463.632921][T12133] ? clear_bhb_loop+0x40/0x90 [ 463.632952][T12133] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.632978][T12133] RIP: 0033:0x7fa6d879ce59 [ 463.632998][T12133] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 463.633023][T12133] RSP: 002b:00007fa6d96fc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 463.633046][T12133] RAX: ffffffffffffffda RBX: 00007fa6d8a16180 RCX: 00007fa6d879ce59 [ 463.633063][T12133] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 463.633079][T12133] RBP: 00007fa6d8832d6f R08: 0000000000000000 R09: 0000000000000000 [ 463.633094][T12133] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 463.633110][T12133] R13: 00007fa6d8a16218 R14: 00007fa6d8a16180 R15: 00007ffd0eef1358 [ 463.633141][T12133] [ 465.856678][T12165] nvme_fabrics: missing parameter 'transport=%s' [ 465.870394][T12165] nvme_fabrics: missing parameter 'nqn=%s' [ 468.165175][T12213] FAULT_INJECTION: forcing a failure. [ 468.165175][T12213] name failslab, interval 1, probability 0, space 0, times 0 [ 468.255577][T12213] CPU: 0 UID: 0 PID: 12213 Comm: syz.2.2020 Tainted: G U L syzkaller #0 PREEMPT(full) [ 468.255638][T12213] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 468.255651][T12213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 468.255673][T12213] Call Trace: [ 468.255684][T12213] [ 468.255698][T12213] dump_stack_lvl+0x100/0x190 [ 468.255743][T12213] should_fail_ex.cold+0x5/0xa [ 468.255790][T12213] should_failslab+0xc2/0x120 [ 468.255834][T12213] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 468.255899][T12213] ? do_getname+0x35/0x390 [ 468.255961][T12213] do_getname+0x35/0x390 [ 468.256018][T12213] user_path_at+0x26/0x60 [ 468.256060][T12213] __x64_sys_mount+0x1fb/0x310 [ 468.256113][T12213] ? __pfx___x64_sys_mount+0x10/0x10 [ 468.256168][T12213] ? rcu_is_watching+0x12/0xc0 [ 468.256217][T12213] do_syscall_64+0x10b/0xf80 [ 468.256270][T12213] ? clear_bhb_loop+0x40/0x90 [ 468.256313][T12213] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.256348][T12213] RIP: 0033:0x7f2162d9ce59 [ 468.256376][T12213] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 468.256413][T12213] RSP: 002b:00007f2163b95028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 468.256447][T12213] RAX: ffffffffffffffda RBX: 00007f2163015fa0 RCX: 00007f2162d9ce59 [ 468.256470][T12213] RDX: 0000200000000240 RSI: 0000200000000040 RDI: 0000200000000000 [ 468.256491][T12213] RBP: 00007f2162e32d6f R08: 0000000000000000 R09: 0000000000000000 [ 468.256512][T12213] R10: 0000000000000009 R11: 0000000000000246 R12: 0000000000000000 [ 468.256532][T12213] R13: 00007f2163016038 R14: 00007f2163015fa0 R15: 00007ffe928f3028 [ 468.256574][T12213] [ 468.657199][T12212] netlink: 54 bytes leftover after parsing attributes in process `syz.1.2018'. [ 470.046311][T12239] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2025'. [ 470.736764][T12254] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2029'. [ 470.766878][T12254] team0: Port device team_slave_1 removed [ 471.710007][T12267] FAULT_INJECTION: forcing a failure. [ 471.710007][T12267] name failslab, interval 1, probability 0, space 0, times 0 [ 471.736227][T12267] CPU: 1 UID: 0 PID: 12267 Comm: syz.3.2033 Tainted: G U L syzkaller #0 PREEMPT(full) [ 471.736287][T12267] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 471.736301][T12267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 471.736323][T12267] Call Trace: [ 471.736334][T12267] [ 471.736347][T12267] dump_stack_lvl+0x100/0x190 [ 471.736394][T12267] should_fail_ex.cold+0x5/0xa [ 471.736439][T12267] should_failslab+0xc2/0x120 [ 471.736482][T12267] __kmalloc_cache_noprof+0x7a/0x6f0 [ 471.736531][T12267] ? refill_pi_state_cache+0x91/0x260 [ 471.736584][T12267] refill_pi_state_cache+0x91/0x260 [ 471.736629][T12267] futex_lock_pi+0x16d/0x7a0 [ 471.736677][T12267] ? __pfx_futex_lock_pi+0x10/0x10 [ 471.736787][T12267] ? __pfx_futex_wake_mark+0x10/0x10 [ 471.736838][T12267] ? __get_user_nocheck_8+0x20/0x20 [ 471.736935][T12267] ? do_vfs_ioctl+0x226/0x13e0 [ 471.736976][T12267] do_futex+0x18a/0x350 [ 471.737016][T12267] ? __pfx_do_futex+0x10/0x10 [ 471.737057][T12267] ? find_held_lock+0x2b/0x80 [ 471.737118][T12267] __x64_sys_futex+0x34f/0x4d0 [ 471.737163][T12267] ? __pfx___x64_sys_futex+0x10/0x10 [ 471.737212][T12267] ? rcu_is_watching+0x12/0xc0 [ 471.737261][T12267] do_syscall_64+0x10b/0xf80 [ 471.737314][T12267] ? clear_bhb_loop+0x40/0x90 [ 471.737361][T12267] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.737397][T12267] RIP: 0033:0x7fa6d879ce59 [ 471.737425][T12267] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 471.737459][T12267] RSP: 002b:00007fa6d971d028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 471.737493][T12267] RAX: ffffffffffffffda RBX: 00007fa6d8a16090 RCX: 00007fa6d879ce59 [ 471.737516][T12267] RDX: 0000000000000008 RSI: 0000000000000006 RDI: 0000000000000000 [ 471.737536][T12267] RBP: 00007fa6d8832d6f R08: 0000000000000000 R09: 000000008000fff5 [ 471.737558][T12267] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 471.737579][T12267] R13: 00007fa6d8a16128 R14: 00007fa6d8a16090 R15: 00007ffd0eef1358 [ 471.737622][T12267] [ 474.596050][T12323] FAULT_INJECTION: forcing a failure. [ 474.596050][T12323] name failslab, interval 1, probability 0, space 0, times 0 [ 474.640429][T12323] CPU: 0 UID: 0 PID: 12323 Comm: syz.1.2050 Tainted: G U L syzkaller #0 PREEMPT(full) [ 474.640484][T12323] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 474.640495][T12323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 474.640513][T12323] Call Trace: [ 474.640522][T12323] [ 474.640534][T12323] dump_stack_lvl+0x100/0x190 [ 474.640575][T12323] should_fail_ex.cold+0x5/0xa [ 474.640614][T12323] should_failslab+0xc2/0x120 [ 474.640654][T12323] __kmalloc_cache_noprof+0x7a/0x6f0 [ 474.640697][T12323] ? refill_pi_state_cache+0x91/0x260 [ 474.640742][T12323] refill_pi_state_cache+0x91/0x260 [ 474.640783][T12323] futex_lock_pi+0x16d/0x7a0 [ 474.640829][T12323] ? __pfx_futex_lock_pi+0x10/0x10 [ 474.640910][T12323] ? __pfx_futex_wake_mark+0x10/0x10 [ 474.640958][T12323] ? __get_user_nocheck_8+0x20/0x20 [ 474.640999][T12323] ? do_vfs_ioctl+0x226/0x13e0 [ 474.641033][T12323] do_futex+0x18a/0x350 [ 474.641072][T12323] ? __pfx_do_futex+0x10/0x10 [ 474.641107][T12323] ? find_held_lock+0x2b/0x80 [ 474.641151][T12323] __x64_sys_futex+0x34f/0x4d0 [ 474.641194][T12323] ? __pfx___x64_sys_futex+0x10/0x10 [ 474.641235][T12323] ? rcu_is_watching+0x12/0xc0 [ 474.641285][T12323] do_syscall_64+0x10b/0xf80 [ 474.641330][T12323] ? clear_bhb_loop+0x40/0x90 [ 474.641367][T12323] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.641397][T12323] RIP: 0033:0x7f97dad9ce59 [ 474.641420][T12323] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 474.641450][T12323] RSP: 002b:00007f97dbbe0028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 474.641483][T12323] RAX: ffffffffffffffda RBX: 00007f97db016090 RCX: 00007f97dad9ce59 [ 474.641504][T12323] RDX: 0000000000000008 RSI: 0000000000000006 RDI: 0000000000000000 [ 474.641523][T12323] RBP: 00007f97dae32d6f R08: 0000000000000000 R09: 000000008000fff5 [ 474.641544][T12323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 474.641564][T12323] R13: 00007f97db016128 R14: 00007f97db016090 R15: 00007ffc4b546c08 [ 474.641607][T12323] [ 476.114365][T12341] FAULT_INJECTION: forcing a failure. [ 476.114365][T12341] name failslab, interval 1, probability 0, space 0, times 0 [ 476.214082][T12341] CPU: 1 UID: 0 PID: 12341 Comm: syz.0.2057 Tainted: G U L syzkaller #0 PREEMPT(full) [ 476.214141][T12341] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 476.214154][T12341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 476.214176][T12341] Call Trace: [ 476.214187][T12341] [ 476.214200][T12341] dump_stack_lvl+0x100/0x190 [ 476.214245][T12341] should_fail_ex.cold+0x5/0xa [ 476.214291][T12341] should_failslab+0xc2/0x120 [ 476.214332][T12341] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 476.214387][T12341] ? __kernfs_new_node+0xd2/0x9f0 [ 476.214433][T12341] __kernfs_new_node+0xd2/0x9f0 [ 476.214475][T12341] ? __pfx___kernfs_new_node+0x10/0x10 [ 476.214522][T12341] ? find_held_lock+0x2b/0x80 [ 476.214566][T12341] ? kernfs_root+0xee/0x2a0 [ 476.214603][T12341] ? kernfs_root+0xee/0x2a0 [ 476.214649][T12341] kernfs_new_node+0x11b/0x1a0 [ 476.214706][T12341] __kernfs_create_file+0x53/0x350 [ 476.214773][T12341] sysfs_add_file_mode_ns+0x207/0x3c0 [ 476.214819][T12341] sysfs_merge_group+0x194/0x340 [ 476.214862][T12341] ? __pfx_sysfs_merge_group+0x10/0x10 [ 476.214900][T12341] ? bus_add_device+0x368/0x6b0 [ 476.214938][T12341] ? __pfx_bus_add_device+0x10/0x10 [ 476.214972][T12341] ? __pfx_dev_add_physical_location+0x10/0x10 [ 476.215146][T12341] dpm_sysfs_add+0x237/0x280 [ 476.215238][T12341] device_add+0x9ef/0x1950 [ 476.215289][T12341] ? __pfx_device_add+0x10/0x10 [ 476.215335][T12341] ? lockdep_init_map_type+0x5c/0x250 [ 476.215373][T12341] ? __init_waitqueue_head+0xca/0x150 [ 476.215424][T12341] rfkill_register+0x1ad/0xb30 [ 476.215474][T12341] nfc_register_device+0x11f/0x3e0 [ 476.215531][T12341] nci_register_device+0x7f1/0xb80 [ 476.215578][T12341] ? __pfx_nci_register_device+0x10/0x10 [ 476.215627][T12341] ? lockdep_init_map_type+0x5c/0x250 [ 476.215669][T12341] virtual_ncidev_open+0x141/0x220 [ 476.215725][T12341] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 476.215788][T12341] misc_open+0x26d/0x450 [ 476.215832][T12341] ? __pfx_misc_open+0x10/0x10 [ 476.215875][T12341] chrdev_open+0x234/0x6a0 [ 476.215919][T12341] ? __pfx_apparmor_file_open+0x10/0x10 [ 476.215977][T12341] ? __pfx_chrdev_open+0x10/0x10 [ 476.216024][T12341] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 476.216081][T12341] do_dentry_open+0x6d8/0x1660 [ 476.216124][T12341] ? __pfx_chrdev_open+0x10/0x10 [ 476.216181][T12341] vfs_open+0x82/0x3f0 [ 476.216239][T12341] path_openat+0x208c/0x31a0 [ 476.216298][T12341] ? __pfx_path_openat+0x10/0x10 [ 476.216359][T12341] do_file_open+0x20e/0x430 [ 476.216407][T12341] ? __pfx_do_file_open+0x10/0x10 [ 476.216481][T12341] ? alloc_fd+0x476/0x790 [ 476.216528][T12341] ? do_getname+0x191/0x390 [ 476.216583][T12341] do_sys_openat2+0x10d/0x1e0 [ 476.216638][T12341] ? __pfx_do_sys_openat2+0x10/0x10 [ 476.216694][T12341] ? __fget_files+0x21f/0x3d0 [ 476.216745][T12341] __x64_sys_openat+0x12d/0x210 [ 476.216810][T12341] ? __pfx___x64_sys_openat+0x10/0x10 [ 476.216873][T12341] ? rcu_is_watching+0x12/0xc0 [ 476.216921][T12341] do_syscall_64+0x10b/0xf80 [ 476.216971][T12341] ? clear_bhb_loop+0x40/0x90 [ 476.217014][T12341] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 476.217048][T12341] RIP: 0033:0x7fc27b59ce59 [ 476.217074][T12341] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 476.217108][T12341] RSP: 002b:00007fc27c460028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 476.217140][T12341] RAX: ffffffffffffffda RBX: 00007fc27b816180 RCX: 00007fc27b59ce59 [ 476.217163][T12341] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 476.217185][T12341] RBP: 00007fc27b632d6f R08: 0000000000000000 R09: 0000000000000000 [ 476.217206][T12341] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 476.217227][T12341] R13: 00007fc27b816218 R14: 00007fc27b816180 R15: 00007ffd65675d08 [ 476.217273][T12341] [ 479.399166][T12399] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2073'. [ 479.546671][T12399] team0: Port device team_slave_1 removed [ 484.508172][T12488] FAULT_INJECTION: forcing a failure. [ 484.508172][T12488] name failslab, interval 1, probability 0, space 0, times 0 [ 484.560614][T12488] CPU: 0 UID: 0 PID: 12488 Comm: syz.1.2097 Tainted: G U L syzkaller #0 PREEMPT(full) [ 484.560672][T12488] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 484.560685][T12488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 484.560705][T12488] Call Trace: [ 484.560716][T12488] [ 484.560728][T12488] dump_stack_lvl+0x100/0x190 [ 484.560778][T12488] should_fail_ex.cold+0x5/0xa [ 484.560821][T12488] should_failslab+0xc2/0x120 [ 484.560864][T12488] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 484.560920][T12488] ? __kernfs_new_node+0xd2/0x9f0 [ 484.560975][T12488] __kernfs_new_node+0xd2/0x9f0 [ 484.561021][T12488] ? __pfx___kernfs_new_node+0x10/0x10 [ 484.561072][T12488] ? find_held_lock+0x2b/0x80 [ 484.561118][T12488] ? kernfs_root+0xee/0x2a0 [ 484.561155][T12488] ? kernfs_root+0xee/0x2a0 [ 484.561203][T12488] kernfs_new_node+0x11b/0x1a0 [ 484.561255][T12488] __kernfs_create_file+0x53/0x350 [ 484.561314][T12488] sysfs_add_file_mode_ns+0x207/0x3c0 [ 484.561360][T12488] sysfs_merge_group+0x194/0x340 [ 484.561404][T12488] ? __pfx_sysfs_merge_group+0x10/0x10 [ 484.561445][T12488] ? bus_add_device+0x368/0x6b0 [ 484.561483][T12488] ? __pfx_bus_add_device+0x10/0x10 [ 484.561516][T12488] ? __pfx_dev_add_physical_location+0x10/0x10 [ 484.561576][T12488] dpm_sysfs_add+0x237/0x280 [ 484.561627][T12488] device_add+0x9ef/0x1950 [ 484.561682][T12488] ? __pfx_device_add+0x10/0x10 [ 484.561728][T12488] ? lockdep_init_map_type+0x5c/0x250 [ 484.561765][T12488] ? __init_waitqueue_head+0xca/0x150 [ 484.561819][T12488] rfkill_register+0x1ad/0xb30 [ 484.561871][T12488] nfc_register_device+0x11f/0x3e0 [ 484.561929][T12488] nci_register_device+0x7f1/0xb80 [ 484.561983][T12488] ? __pfx_nci_register_device+0x10/0x10 [ 484.562034][T12488] ? lockdep_init_map_type+0x5c/0x250 [ 484.562078][T12488] virtual_ncidev_open+0x141/0x220 [ 484.562137][T12488] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 484.562193][T12488] misc_open+0x26d/0x450 [ 484.562239][T12488] ? __pfx_misc_open+0x10/0x10 [ 484.562284][T12488] chrdev_open+0x234/0x6a0 [ 484.562328][T12488] ? __pfx_apparmor_file_open+0x10/0x10 [ 484.562387][T12488] ? __pfx_chrdev_open+0x10/0x10 [ 484.562435][T12488] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 484.562492][T12488] do_dentry_open+0x6d8/0x1660 [ 484.562535][T12488] ? __pfx_chrdev_open+0x10/0x10 [ 484.562591][T12488] vfs_open+0x82/0x3f0 [ 484.562649][T12488] path_openat+0x208c/0x31a0 [ 484.562709][T12488] ? __pfx_path_openat+0x10/0x10 [ 484.562771][T12488] do_file_open+0x20e/0x430 [ 484.562820][T12488] ? __pfx_do_file_open+0x10/0x10 [ 484.562897][T12488] ? alloc_fd+0x476/0x790 [ 484.562951][T12488] ? do_getname+0x191/0x390 [ 484.563009][T12488] do_sys_openat2+0x10d/0x1e0 [ 484.563066][T12488] ? __pfx_do_sys_openat2+0x10/0x10 [ 484.563123][T12488] ? __fget_files+0x21f/0x3d0 [ 484.563169][T12488] __x64_sys_openat+0x12d/0x210 [ 484.563224][T12488] ? __pfx___x64_sys_openat+0x10/0x10 [ 484.563287][T12488] ? rcu_is_watching+0x12/0xc0 [ 484.563334][T12488] do_syscall_64+0x10b/0xf80 [ 484.563385][T12488] ? clear_bhb_loop+0x40/0x90 [ 484.563429][T12488] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.563465][T12488] RIP: 0033:0x7f97dad9ce59 [ 484.563495][T12488] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 484.563532][T12488] RSP: 002b:00007f97dbbbf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 484.563564][T12488] RAX: ffffffffffffffda RBX: 00007f97db016180 RCX: 00007f97dad9ce59 [ 484.563587][T12488] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 484.563606][T12488] RBP: 00007f97dae32d6f R08: 0000000000000000 R09: 0000000000000000 [ 484.563627][T12488] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 484.563646][T12488] R13: 00007f97db016218 R14: 00007f97db016180 R15: 00007ffc4b546c08 [ 484.563690][T12488] [ 485.706195][T12504] FAULT_INJECTION: forcing a failure. [ 485.706195][T12504] name failslab, interval 1, probability 0, space 0, times 0 [ 485.741485][T12504] CPU: 1 UID: 0 PID: 12504 Comm: syz.3.2104 Tainted: G U L syzkaller #0 PREEMPT(full) [ 485.741545][T12504] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 485.741558][T12504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 485.741578][T12504] Call Trace: [ 485.741589][T12504] [ 485.741601][T12504] dump_stack_lvl+0x100/0x190 [ 485.741647][T12504] should_fail_ex.cold+0x5/0xa [ 485.741692][T12504] should_failslab+0xc2/0x120 [ 485.741734][T12504] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 485.741790][T12504] ? sk_prot_alloc+0x60/0x2a0 [ 485.741917][T12504] ? kmem_cache_alloc_noprof+0x292/0x6e0 [ 485.741971][T12504] ? security_inode_alloc+0x3b/0x2c0 [ 485.742009][T12504] sk_prot_alloc+0x60/0x2a0 [ 485.742059][T12504] sk_alloc+0x36/0xe80 [ 485.742097][T12504] __vsock_create.constprop.0+0x3c/0xba0 [ 485.742205][T12504] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 485.742259][T12504] vsock_create+0x126/0x510 [ 485.742309][T12504] __sock_create+0x339/0x860 [ 485.742458][T12504] __sys_socket+0x14d/0x260 [ 485.742516][T12504] ? __pfx___sys_socket+0x10/0x10 [ 485.742570][T12504] ? ksys_write+0x1ac/0x250 [ 485.742619][T12504] __x64_sys_socket+0x72/0xb0 [ 485.742674][T12504] ? lockdep_hardirqs_on+0x78/0x100 [ 485.742729][T12504] do_syscall_64+0x10b/0xf80 [ 485.742781][T12504] ? clear_bhb_loop+0x40/0x90 [ 485.742824][T12504] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.742859][T12504] RIP: 0033:0x7fa6d879ce59 [ 485.742887][T12504] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 485.742931][T12504] RSP: 002b:00007fa6d973e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 485.742964][T12504] RAX: ffffffffffffffda RBX: 00007fa6d8a15fa0 RCX: 00007fa6d879ce59 [ 485.742987][T12504] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000028 [ 485.743008][T12504] RBP: 00007fa6d8832d6f R08: 0000000000000000 R09: 0000000000000000 [ 485.743028][T12504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 485.743047][T12504] R13: 00007fa6d8a16038 R14: 00007fa6d8a15fa0 R15: 00007ffd0eef1358 [ 485.743085][T12504] [ 487.506926][T12528] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 487.897512][T12532] futex_wake_op: syz.2.2109 tries to shift op by -2048; fix this program [ 487.938654][T12532] 0x000000000001-0x000000000003 : "" [ 487.985929][T12532] ftl_cs: FTL header corrupt! [ 488.466940][T12546] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2114'. [ 488.504223][T12546] netlink: 'syz.1.2114': attribute type 7 has an invalid length. [ 489.637011][T12569] binder: 12568:12569 ioctl 400c620e 0 returned -22 [ 490.264254][T12580] netlink: 54 bytes leftover after parsing attributes in process `syz.1.2126'. [ 491.418008][T12607] vcan0: tx drop: invalid da for name 0x000000000000003f [ 491.824637][T12624] random: crng reseeded on system resumption [ 492.353975][T12636] input: jJǸ-¶š9ã%vø“û¨lÐQ  J86Ö‘ as /devices/virtual/input/input7 [ 493.292711][T12645] zswap: compressor not available [ 494.123754][T12663] vcan0: tx drop: invalid sa for name 0x00000000000000fd [ 497.194839][T12722] FAULT_INJECTION: forcing a failure. [ 497.194839][T12722] name failslab, interval 1, probability 0, space 0, times 0 [ 497.235153][T12722] CPU: 1 UID: 0 PID: 12722 Comm: syz.3.2167 Tainted: G U L syzkaller #0 PREEMPT(full) [ 497.235211][T12722] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 497.235223][T12722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 497.235243][T12722] Call Trace: [ 497.235254][T12722] [ 497.235267][T12722] dump_stack_lvl+0x100/0x190 [ 497.235313][T12722] should_fail_ex.cold+0x5/0xa [ 497.235372][T12722] should_failslab+0xc2/0x120 [ 497.235417][T12722] __kmalloc_cache_noprof+0x7a/0x6f0 [ 497.235482][T12722] ? alloc_pipe_info+0x10e/0x590 [ 497.235530][T12722] ? security_inode_alloc+0xcf/0x2c0 [ 497.235573][T12722] alloc_pipe_info+0x10e/0x590 [ 497.235629][T12722] create_pipe_files+0x8c/0x970 [ 497.235692][T12722] do_pipe2+0xbd/0x1e0 [ 497.235778][T12722] ? __pfx_do_pipe2+0x10/0x10 [ 497.235823][T12722] ? xfd_validate_state+0x129/0x190 [ 497.235874][T12722] ? syscall_user_dispatch+0x76/0x130 [ 497.235926][T12722] __x64_sys_pipe+0x33/0x50 [ 497.235980][T12722] do_syscall_64+0x10b/0xf80 [ 497.236037][T12722] ? clear_bhb_loop+0x40/0x90 [ 497.236081][T12722] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.236117][T12722] RIP: 0033:0x7fa6d879ce59 [ 497.236147][T12722] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 497.236181][T12722] RSP: 002b:00007fa6d973e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000016 [ 497.236215][T12722] RAX: ffffffffffffffda RBX: 00007fa6d8a15fa0 RCX: 00007fa6d879ce59 [ 497.236239][T12722] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 497.236260][T12722] RBP: 00007fa6d8832d6f R08: 0000000000000000 R09: 0000000000000000 [ 497.236281][T12722] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 497.236301][T12722] R13: 00007fa6d8a16038 R14: 00007fa6d8a15fa0 R15: 00007ffd0eef1358 [ 497.236346][T12722] [ 497.811801][T12733] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2172'. [ 497.832633][T12733] veth1_macvtap: left promiscuous mode [ 497.844537][T12733] macsec0: entered promiscuous mode [ 497.855778][T12733] macsec0: entered allmulticast mode [ 498.247234][T12744] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2175'. [ 498.271896][T12741] FAULT_INJECTION: forcing a failure. [ 498.271896][T12741] name failslab, interval 1, probability 0, space 0, times 0 [ 498.336805][T12741] CPU: 1 UID: 0 PID: 12741 Comm: syz.1.2174 Tainted: G U L syzkaller #0 PREEMPT(full) [ 498.336864][T12741] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 498.336877][T12741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 498.336898][T12741] Call Trace: [ 498.336910][T12741] [ 498.336923][T12741] dump_stack_lvl+0x100/0x190 [ 498.336970][T12741] should_fail_ex.cold+0x5/0xa [ 498.337024][T12741] ? drm_atomic_state_init+0xf4/0x490 [ 498.337186][T12741] should_failslab+0xc2/0x120 [ 498.337229][T12741] __kmalloc_noprof+0xe0/0x850 [ 498.337273][T12741] drm_atomic_state_init+0xf4/0x490 [ 498.337325][T12741] ? kasan_save_track+0x14/0x30 [ 498.337367][T12741] drm_atomic_state_alloc+0xd3/0x120 [ 498.337423][T12741] drm_client_modeset_commit_atomic+0xcc/0x7e0 [ 498.337494][T12741] ? rcu_is_watching+0x12/0xc0 [ 498.337539][T12741] ? trace_contention_end+0x122/0x170 [ 498.337581][T12741] ? __mutex_lock+0x26d/0x1b10 [ 498.337618][T12741] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 498.337658][T12741] ? drm_master_internal_acquire+0x21/0x80 [ 498.337759][T12741] drm_client_modeset_commit_locked+0x14d/0x580 [ 498.337804][T12741] drm_client_modeset_commit+0x4f/0x80 [ 498.337844][T12741] __drm_fb_helper_restore_fbdev_mode_unlocked.part.0+0x137/0x160 [ 498.337976][T12741] drm_fb_helper_restore_fbdev_mode_unlocked+0x93/0xc0 [ 498.338050][T12741] drm_fbdev_client_restore+0x1b/0x30 [ 498.338126][T12741] ? __pfx_drm_fbdev_client_restore+0x10/0x10 [ 498.338175][T12741] drm_client_dev_restore+0x205/0x2a0 [ 498.338220][T12741] drm_release+0x2c6/0x360 [ 498.338352][T12741] ? __pfx_drm_release+0x10/0x10 [ 498.338408][T12741] __fput+0x3ff/0xb50 [ 498.338470][T12741] task_work_run+0x150/0x240 [ 498.338510][T12741] ? __pfx_task_work_run+0x10/0x10 [ 498.338550][T12741] ? rcu_is_watching+0x12/0xc0 [ 498.338599][T12741] exit_to_user_mode_loop+0x107/0x4f0 [ 498.338633][T12741] ? rcu_is_watching+0x12/0xc0 [ 498.338680][T12741] do_syscall_64+0x6f2/0xf80 [ 498.338732][T12741] ? clear_bhb_loop+0x40/0x90 [ 498.338775][T12741] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.338811][T12741] RIP: 0033:0x7f97dad9ce59 [ 498.338838][T12741] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 498.338871][T12741] RSP: 002b:00007f97dbc01028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 498.338904][T12741] RAX: 0000000000000000 RBX: 00007f97db015fa0 RCX: 00007f97dad9ce59 [ 498.338927][T12741] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 498.338948][T12741] RBP: 00007f97dae32d6f R08: 0000000000000000 R09: 0000000000000000 [ 498.338970][T12741] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 498.338991][T12741] R13: 00007f97db016038 R14: 00007f97db015fa0 R15: 00007ffc4b546c08 [ 498.339046][T12741] [ 499.011878][T12751] kvm: vcpu 4: requested lapic timer restore with starting count register 0x390=4294967104 (137438947328 ns) > initial count (6624 ns). Using initial count to start timer. [ 499.082279][T12758] device-mapper: ioctl: only supply one of name or uuid, cmd(5) [ 500.813750][T12785] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 501.252604][T12797] FAULT_INJECTION: forcing a failure. [ 501.252604][T12797] name failslab, interval 1, probability 0, space 0, times 0 [ 501.303810][T12794] zswap: compressor û not available [ 501.306845][T12797] CPU: 0 UID: 0 PID: 12797 Comm: syz.1.2194 Tainted: G U L syzkaller #0 PREEMPT(full) [ 501.306998][T12797] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 501.307032][T12797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 501.307084][T12797] Call Trace: [ 501.307114][T12797] [ 501.307148][T12797] dump_stack_lvl+0x100/0x190 [ 501.307264][T12797] should_fail_ex.cold+0x5/0xa [ 501.307379][T12797] should_failslab+0xc2/0x120 [ 501.307483][T12797] __kmalloc_cache_noprof+0x7a/0x6f0 [ 501.307609][T12797] ? drm_atomic_state_alloc+0xb8/0x120 [ 501.307762][T12797] drm_atomic_state_alloc+0xb8/0x120 [ 501.307898][T12797] drm_client_modeset_commit_atomic+0xcc/0x7e0 [ 501.307995][T12797] ? rcu_is_watching+0x12/0xc0 [ 501.308102][T12797] ? trace_contention_end+0x122/0x170 [ 501.308235][T12797] ? __mutex_lock+0x26d/0x1b10 [ 501.308328][T12797] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 501.308423][T12797] ? drm_master_internal_acquire+0x21/0x80 [ 501.308658][T12797] drm_client_modeset_commit_locked+0x14d/0x580 [ 501.308780][T12797] drm_client_modeset_commit+0x4f/0x80 [ 501.308876][T12797] __drm_fb_helper_restore_fbdev_mode_unlocked.part.0+0x137/0x160 [ 501.309042][T12797] drm_fb_helper_restore_fbdev_mode_unlocked+0x93/0xc0 [ 501.309132][T12797] drm_fbdev_client_restore+0x1b/0x30 [ 501.309259][T12797] ? __pfx_drm_fbdev_client_restore+0x10/0x10 [ 501.309390][T12797] drm_client_dev_restore+0x205/0x2a0 [ 501.309497][T12797] drm_release+0x2c6/0x360 [ 501.309642][T12797] ? __pfx_drm_release+0x10/0x10 [ 501.309778][T12797] __fput+0x3ff/0xb50 [ 501.309927][T12797] task_work_run+0x150/0x240 [ 501.310031][T12797] ? __pfx_task_work_run+0x10/0x10 [ 501.310136][T12797] ? rcu_is_watching+0x12/0xc0 [ 501.310247][T12797] exit_to_user_mode_loop+0x107/0x4f0 [ 501.310341][T12797] ? rcu_is_watching+0x12/0xc0 [ 501.310460][T12797] do_syscall_64+0x6f2/0xf80 [ 501.310589][T12797] ? clear_bhb_loop+0x40/0x90 [ 501.310723][T12797] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 501.310824][T12797] RIP: 0033:0x7f97dad9ce59 [ 501.310900][T12797] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 501.310977][T12797] RSP: 002b:00007f97dbc01028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 501.311061][T12797] RAX: 0000000000000000 RBX: 00007f97db015fa0 RCX: 00007f97dad9ce59 [ 501.311113][T12797] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 501.311176][T12797] RBP: 00007f97dae32d6f R08: 0000000000000000 R09: 0000000000000000 [ 501.311228][T12797] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 501.311280][T12797] R13: 00007f97db016038 R14: 00007f97db015fa0 R15: 00007ffc4b546c08 [ 501.311395][T12797] [ 501.581397][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.586267][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.839914][T12810] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 502.157359][T12818] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2203'. [ 502.176672][T12818] veth1_macvtap: entered promiscuous mode [ 502.188759][T12818] veth1_macvtap: entered allmulticast mode [ 502.220498][T12818] macsec0: left promiscuous mode [ 502.269194][T12824] netlink: 334 bytes leftover after parsing attributes in process `syz.0.2205'. [ 502.456277][T12830] netlink: 13 bytes leftover after parsing attributes in process `syz.0.2207'. [ 504.735694][T12880] FAULT_INJECTION: forcing a failure. [ 504.735694][T12880] name failslab, interval 1, probability 0, space 0, times 0 [ 504.785272][T12880] CPU: 1 UID: 0 PID: 12880 Comm: syz.2.2222 Tainted: G U L syzkaller #0 PREEMPT(full) [ 504.785333][T12880] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 504.785348][T12880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 504.785370][T12880] Call Trace: [ 504.785381][T12880] [ 504.785395][T12880] dump_stack_lvl+0x100/0x190 [ 504.785441][T12880] should_fail_ex.cold+0x5/0xa [ 504.785486][T12880] should_failslab+0xc2/0x120 [ 504.785537][T12880] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 504.785576][T12880] ? __kthread_create_on_node+0x186/0x3f0 [ 504.785639][T12880] kvasprintf+0xbc/0x150 [ 504.785708][T12880] ? __pfx_kvasprintf+0x10/0x10 [ 504.785758][T12880] ? __pfx_rescuer_thread+0x10/0x10 [ 504.785793][T12880] __kthread_create_on_node+0x186/0x3f0 [ 504.785848][T12880] ? __pfx___kthread_create_on_node+0x10/0x10 [ 504.785909][T12880] ? __pfx_vsnprintf+0x10/0x10 [ 504.786030][T12880] ? __pfx_rescuer_thread+0x10/0x10 [ 504.786071][T12880] kthread_create_on_node+0xc7/0x100 [ 504.786120][T12880] ? __pfx_kthread_create_on_node+0x10/0x10 [ 504.786169][T12880] ? __pfx_scnprintf+0x10/0x10 [ 504.786240][T12880] init_rescuer+0x321/0x550 [ 504.786296][T12880] ? __pfx_init_rescuer+0x10/0x10 [ 504.786362][T12880] ? wq_adjust_max_active+0x352/0x4a0 [ 504.786404][T12880] __alloc_workqueue+0xc70/0x1980 [ 504.786469][T12880] alloc_workqueue_noprof+0xc7/0x130 [ 504.786530][T12880] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 504.786593][T12880] ? __pfx___debug_object_init+0x10/0x10 [ 504.786720][T12880] nci_register_device+0x21e/0xb80 [ 504.786769][T12880] ? __pfx_nci_register_device+0x10/0x10 [ 504.786820][T12880] ? lockdep_init_map_type+0x5c/0x250 [ 504.786864][T12880] virtual_ncidev_open+0x141/0x220 [ 504.786923][T12880] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 504.786980][T12880] misc_open+0x26d/0x450 [ 504.787025][T12880] ? __pfx_misc_open+0x10/0x10 [ 504.787068][T12880] chrdev_open+0x234/0x6a0 [ 504.787113][T12880] ? __pfx_apparmor_file_open+0x10/0x10 [ 504.787173][T12880] ? __pfx_chrdev_open+0x10/0x10 [ 504.787221][T12880] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 504.787279][T12880] do_dentry_open+0x6d8/0x1660 [ 504.787323][T12880] ? __pfx_chrdev_open+0x10/0x10 [ 504.787378][T12880] vfs_open+0x82/0x3f0 [ 504.787435][T12880] path_openat+0x208c/0x31a0 [ 504.787495][T12880] ? __pfx_path_openat+0x10/0x10 [ 504.787564][T12880] do_file_open+0x20e/0x430 [ 504.787614][T12880] ? __pfx_do_file_open+0x10/0x10 [ 504.787691][T12880] ? alloc_fd+0x476/0x790 [ 504.787740][T12880] ? do_getname+0x191/0x390 [ 504.787794][T12880] do_sys_openat2+0x10d/0x1e0 [ 504.787848][T12880] ? __pfx_do_sys_openat2+0x10/0x10 [ 504.787918][T12880] __x64_sys_openat+0x12d/0x210 [ 504.787974][T12880] ? __pfx___x64_sys_openat+0x10/0x10 [ 504.788036][T12880] ? rcu_is_watching+0x12/0xc0 [ 504.788083][T12880] do_syscall_64+0x10b/0xf80 [ 504.788137][T12880] ? clear_bhb_loop+0x40/0x90 [ 504.788181][T12880] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.788219][T12880] RIP: 0033:0x7f2162d9ce59 [ 504.788249][T12880] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 504.788284][T12880] RSP: 002b:00007f2163b74028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 504.788319][T12880] RAX: ffffffffffffffda RBX: 00007f2163016090 RCX: 00007f2162d9ce59 [ 504.788343][T12880] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 504.788365][T12880] RBP: 00007f2162e32d6f R08: 0000000000000000 R09: 0000000000000000 [ 504.788387][T12880] R10: 000000000000003e R11: 0000000000000246 R12: 0000000000000000 [ 504.788407][T12880] R13: 00007f2163016128 R14: 00007f2163016090 R15: 00007ffe928f3028 [ 504.788452][T12880] [ 505.158458][T12880] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -ENOMEM [ 505.506733][T12895] netlink: 'syz.1.2227': attribute type 1 has an invalid length. [ 505.579449][T12895] netlink: 13 bytes leftover after parsing attributes in process `syz.1.2227'. [ 505.613569][T12895] netlink: 'syz.1.2227': attribute type 1 has an invalid length. [ 507.671199][T12939] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2240'. [ 507.693596][T12939] netlink: 25 bytes leftover after parsing attributes in process `syz.3.2240'. [ 510.477702][T12980] FAULT_INJECTION: forcing a failure. [ 510.477702][T12980] name failslab, interval 1, probability 0, space 0, times 0 [ 510.499664][T12980] CPU: 1 UID: 0 PID: 12980 Comm: syz.1.2252 Tainted: G U L syzkaller #0 PREEMPT(full) [ 510.499725][T12980] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 510.499739][T12980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 510.499761][T12980] Call Trace: [ 510.499773][T12980] [ 510.499786][T12980] dump_stack_lvl+0x100/0x190 [ 510.499837][T12980] should_fail_ex.cold+0x5/0xa [ 510.499890][T12980] should_failslab+0xc2/0x120 [ 510.499936][T12980] __kmalloc_cache_noprof+0x7a/0x6f0 [ 510.499990][T12980] ? trace_pid_list_alloc+0x2fe/0x480 [ 510.500054][T12980] trace_pid_list_alloc+0x2fe/0x480 [ 510.500111][T12980] trace_pid_write+0x110/0x460 [ 510.500166][T12980] ? __pfx_trace_pid_write+0x10/0x10 [ 510.500246][T12980] event_pid_write.isra.0+0x1e4/0x7d0 [ 510.500307][T12980] ? __pfx_event_pid_write.isra.0+0x10/0x10 [ 510.500386][T12980] vfs_write+0x2aa/0x1070 [ 510.500435][T12980] ? __pfx_ftrace_event_npid_write+0x10/0x10 [ 510.500498][T12980] ? __pfx_vfs_write+0x10/0x10 [ 510.500539][T12980] ? __fget_files+0x215/0x3d0 [ 510.500594][T12980] ? __fget_files+0x21f/0x3d0 [ 510.500651][T12980] ksys_write+0x12a/0x250 [ 510.500694][T12980] ? __pfx_ksys_write+0x10/0x10 [ 510.500741][T12980] ? rcu_is_watching+0x12/0xc0 [ 510.500795][T12980] do_syscall_64+0x10b/0xf80 [ 510.500856][T12980] ? clear_bhb_loop+0x40/0x90 [ 510.500904][T12980] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.500942][T12980] RIP: 0033:0x7f97dad9ce59 [ 510.500972][T12980] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 510.501008][T12980] RSP: 002b:00007f97dbc01028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 510.501045][T12980] RAX: ffffffffffffffda RBX: 00007f97db015fa0 RCX: 00007f97dad9ce59 [ 510.501070][T12980] RDX: 00000000fffffdef RSI: 0000000000000000 RDI: 0000000000000003 [ 510.501093][T12980] RBP: 00007f97dae32d6f R08: 0000000000000000 R09: 0000000000000000 [ 510.501116][T12980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 510.501138][T12980] R13: 00007f97db016038 R14: 00007f97db015fa0 R15: 00007ffc4b546c08 [ 510.501187][T12980] [ 514.141872][T13052] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2272'. [ 514.224073][T13055] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 516.564108][T13091] vcan0: tx drop: invalid da for name 0x000000000000003f [ 516.745601][T13096] netlink: 186 bytes leftover after parsing attributes in process `syz.0.2284'. [ 517.650060][T13105] FAULT_INJECTION: forcing a failure. [ 517.650060][T13105] name failslab, interval 1, probability 0, space 0, times 0 [ 517.719223][T13105] CPU: 1 UID: 0 PID: 13105 Comm: syz.0.2286 Tainted: G U L syzkaller #0 PREEMPT(full) [ 517.719282][T13105] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 517.719297][T13105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 517.719317][T13105] Call Trace: [ 517.719328][T13105] [ 517.719351][T13105] dump_stack_lvl+0x100/0x190 [ 517.719406][T13105] should_fail_ex.cold+0x5/0xa [ 517.719451][T13105] should_failslab+0xc2/0x120 [ 517.719495][T13105] __kvmalloc_node_noprof+0xfa/0xa00 [ 517.719534][T13105] ? io_uring_setup.cold+0x171/0x1c6e [ 517.719592][T13105] ? lockdep_init_map_type+0x5c/0x250 [ 517.719636][T13105] io_uring_setup.cold+0x171/0x1c6e [ 517.719694][T13105] ? __pfx_io_uring_setup+0x10/0x10 [ 517.719828][T13105] ? do_futex+0x192/0x350 [ 517.719863][T13105] ? __pfx_do_futex+0x10/0x10 [ 517.719914][T13105] ? xfd_validate_state+0x129/0x190 [ 517.719945][T13105] ? ksys_write+0x1ac/0x250 [ 517.719990][T13105] __x64_sys_io_uring_setup+0xc2/0x170 [ 517.720029][T13105] do_syscall_64+0x10b/0xf80 [ 517.720074][T13105] ? clear_bhb_loop+0x40/0x90 [ 517.720111][T13105] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 517.720141][T13105] RIP: 0033:0x7fc27b59ce59 [ 517.720166][T13105] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 517.720197][T13105] RSP: 002b:00007fc27c481028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 517.720229][T13105] RAX: ffffffffffffffda RBX: 00007fc27b816090 RCX: 00007fc27b59ce59 [ 517.720250][T13105] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 517.720269][T13105] RBP: 00007fc27b632d6f R08: 0000000000000000 R09: 0000000000000000 [ 517.720290][T13105] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 517.720309][T13105] R13: 00007fc27b816128 R14: 00007fc27b816090 R15: 00007ffd65675d08 [ 517.720352][T13105] [ 521.277206][T13178] FAULT_INJECTION: forcing a failure. [ 521.277206][T13178] name failslab, interval 1, probability 0, space 0, times 0 [ 521.303304][T13178] CPU: 0 UID: 0 PID: 13178 Comm: syz.3.2305 Tainted: G U L syzkaller #0 PREEMPT(full) [ 521.303359][T13178] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 521.303371][T13178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 521.303391][T13178] Call Trace: [ 521.303403][T13178] [ 521.303415][T13178] dump_stack_lvl+0x100/0x190 [ 521.303458][T13178] should_fail_ex.cold+0x5/0xa [ 521.303500][T13178] should_failslab+0xc2/0x120 [ 521.303543][T13178] __kmalloc_cache_noprof+0x7a/0x6f0 [ 521.303595][T13178] ? trace_pid_list_alloc+0x232/0x480 [ 521.303656][T13178] trace_pid_list_alloc+0x232/0x480 [ 521.303710][T13178] trace_pid_write+0x110/0x460 [ 521.303762][T13178] ? __pfx_trace_pid_write+0x10/0x10 [ 521.303835][T13178] event_pid_write.isra.0+0x1e4/0x7d0 [ 521.303890][T13178] ? __pfx_event_pid_write.isra.0+0x10/0x10 [ 521.303956][T13178] vfs_write+0x2aa/0x1070 [ 521.303998][T13178] ? __pfx_ftrace_event_npid_write+0x10/0x10 [ 521.304065][T13178] ? __pfx_vfs_write+0x10/0x10 [ 521.304105][T13178] ? __fget_files+0x215/0x3d0 [ 521.304164][T13178] ? __fget_files+0x21f/0x3d0 [ 521.304212][T13178] ksys_write+0x12a/0x250 [ 521.304253][T13178] ? __pfx_ksys_write+0x10/0x10 [ 521.304298][T13178] ? rcu_is_watching+0x12/0xc0 [ 521.304347][T13178] do_syscall_64+0x10b/0xf80 [ 521.304399][T13178] ? clear_bhb_loop+0x40/0x90 [ 521.304441][T13178] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 521.304477][T13178] RIP: 0033:0x7fa6d879ce59 [ 521.304503][T13178] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 521.304537][T13178] RSP: 002b:00007fa6d973e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 521.304570][T13178] RAX: ffffffffffffffda RBX: 00007fa6d8a15fa0 RCX: 00007fa6d879ce59 [ 521.304591][T13178] RDX: 00000000fffffdef RSI: 0000000000000000 RDI: 0000000000000003 [ 521.304609][T13178] RBP: 00007fa6d8832d6f R08: 0000000000000000 R09: 0000000000000000 [ 521.304630][T13178] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 521.304649][T13178] R13: 00007fa6d8a16038 R14: 00007fa6d8a15fa0 R15: 00007ffd0eef1358 [ 521.304692][T13178] [ 522.427499][T13194] zswap: compressor û not available [ 523.589959][T13220] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 525.598641][T13262] futex_wake_op: syz.3.2325 tries to shift op by -2048; fix this program [ 525.622887][T13262] 0x000000000001-0x000000000003 : "" [ 525.678755][T13262] ftl_cs: FTL header corrupt! [ 526.703486][T13275] zswap: compressor û not available [ 527.843769][T13304] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2338'. [ 527.987394][T13305] zswap: compressor not available [ 529.188005][T13339] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2346'. [ 529.234829][T13339] netlink: 'syz.0.2346': attribute type 7 has an invalid length. [ 530.289253][T13350] zswap: compressor not available [ 531.437704][T13376] futex_wake_op: syz.0.2355 tries to shift op by -2048; fix this program [ 531.513447][T13376] 0x000000000001-0x000000000003 : "" [ 531.541951][T13376] ftl_cs: FTL header corrupt! [ 533.648095][T13414] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2365'. [ 533.781888][T13414] team0: Port device team_slave_1 removed [ 534.157912][T13425] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 534.765692][T13433] ubi3: attaching mtd1 [ 535.009028][T13440] FAULT_INJECTION: forcing a failure. [ 535.009028][T13440] name failslab, interval 1, probability 0, space 0, times 0 [ 535.053139][T13440] CPU: 1 UID: 0 PID: 13440 Comm: syz.3.2371 Tainted: G U L syzkaller #0 PREEMPT(full) [ 535.053195][T13440] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 535.053208][T13440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 535.053229][T13440] Call Trace: [ 535.053239][T13440] [ 535.053251][T13440] dump_stack_lvl+0x100/0x190 [ 535.053295][T13440] should_fail_ex.cold+0x5/0xa [ 535.053339][T13440] should_failslab+0xc2/0x120 [ 535.053381][T13440] __kmalloc_cache_noprof+0x7a/0x6f0 [ 535.053429][T13440] ? __alloc_workqueue+0x1a0/0x1980 [ 535.053487][T13440] __alloc_workqueue+0x1a0/0x1980 [ 535.053536][T13440] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 535.053589][T13440] ? lockdep_hardirqs_on+0x78/0x100 [ 535.053644][T13440] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 535.053704][T13440] alloc_workqueue_noprof+0xc7/0x130 [ 535.053755][T13440] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 535.053814][T13440] ? __pfx___debug_object_init+0x10/0x10 [ 535.053880][T13440] nci_register_device+0x394/0xb80 [ 535.053927][T13440] ? __pfx_nci_register_device+0x10/0x10 [ 535.053987][T13440] ? lockdep_init_map_type+0x5c/0x250 [ 535.054032][T13440] virtual_ncidev_open+0x141/0x220 [ 535.054091][T13440] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 535.054145][T13440] misc_open+0x26d/0x450 [ 535.054191][T13440] ? __pfx_misc_open+0x10/0x10 [ 535.054233][T13440] chrdev_open+0x234/0x6a0 [ 535.054277][T13440] ? __pfx_apparmor_file_open+0x10/0x10 [ 535.054337][T13440] ? __pfx_chrdev_open+0x10/0x10 [ 535.054383][T13440] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 535.054441][T13440] do_dentry_open+0x6d8/0x1660 [ 535.054481][T13440] ? __pfx_chrdev_open+0x10/0x10 [ 535.054545][T13440] vfs_open+0x82/0x3f0 [ 535.054602][T13440] path_openat+0x208c/0x31a0 [ 535.054661][T13440] ? __pfx_path_openat+0x10/0x10 [ 535.054722][T13440] do_file_open+0x20e/0x430 [ 535.054783][T13440] ? __pfx_do_file_open+0x10/0x10 [ 535.054859][T13440] ? alloc_fd+0x476/0x790 [ 535.054905][T13440] ? do_getname+0x191/0x390 [ 535.054968][T13440] do_sys_openat2+0x10d/0x1e0 [ 535.055025][T13440] ? __pfx_do_sys_openat2+0x10/0x10 [ 535.055097][T13440] __x64_sys_openat+0x12d/0x210 [ 535.055153][T13440] ? __pfx___x64_sys_openat+0x10/0x10 [ 535.055217][T13440] ? rcu_is_watching+0x12/0xc0 [ 535.055267][T13440] do_syscall_64+0x10b/0xf80 [ 535.055320][T13440] ? clear_bhb_loop+0x40/0x90 [ 535.055365][T13440] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.055414][T13440] RIP: 0033:0x7fa6d879ce59 [ 535.055443][T13440] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 535.055479][T13440] RSP: 002b:00007fa6d971d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 535.055514][T13440] RAX: ffffffffffffffda RBX: 00007fa6d8a16090 RCX: 00007fa6d879ce59 [ 535.055537][T13440] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 535.055558][T13440] RBP: 00007fa6d8832d6f R08: 0000000000000000 R09: 0000000000000000 [ 535.055579][T13440] R10: 000000000000003e R11: 0000000000000246 R12: 0000000000000000 [ 535.055600][T13440] R13: 00007fa6d8a16128 R14: 00007fa6d8a16090 R15: 00007ffd0eef1358 [ 535.055646][T13440] [ 538.434957][T13494] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2387'. [ 538.479222][T13494] netlink: 354 bytes leftover after parsing attributes in process `syz.0.2387'. [ 541.098817][T13541] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2397'. [ 541.204457][T13541] team0: Port device team_slave_1 removed [ 543.173959][T13573] vhci_hcd vhci_hcd.2: invalid port number 111 [ 543.238489][T13573] vhci_hcd vhci_hcd.2: default hub control req: a356 va1b7 i006f l230 [ 543.347968][T13576] FAULT_INJECTION: forcing a failure. [ 543.347968][T13576] name failslab, interval 1, probability 0, space 0, times 0 [ 543.364110][T13576] CPU: 0 UID: 0 PID: 13576 Comm: syz.0.2407 Tainted: G U L syzkaller #0 PREEMPT(full) [ 543.364168][T13576] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 543.364180][T13576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 543.364201][T13576] Call Trace: [ 543.364212][T13576] [ 543.364224][T13576] dump_stack_lvl+0x100/0x190 [ 543.364267][T13576] should_fail_ex.cold+0x5/0xa [ 543.364311][T13576] should_failslab+0xc2/0x120 [ 543.364352][T13576] __kvmalloc_node_noprof+0xfa/0xa00 [ 543.364387][T13576] ? alloc_shrinker_info+0xf0/0x470 [ 543.364449][T13576] alloc_shrinker_info+0xf0/0x470 [ 543.364493][T13576] ? __pfx_mem_cgroup_css_online+0x10/0x10 [ 543.364563][T13576] mem_cgroup_css_online+0xa4/0xbf0 [ 543.364641][T13576] ? __pfx_mem_cgroup_css_online+0x10/0x10 [ 543.364708][T13576] online_css+0xb2/0x350 [ 543.364764][T13576] cgroup_apply_control_enable+0xa8d/0xdd0 [ 543.364869][T13576] cgroup_mkdir+0x59c/0x1310 [ 543.364933][T13576] ? __pfx_cgroup_mkdir+0x10/0x10 [ 543.364989][T13576] kernfs_iop_mkdir+0x111/0x190 [ 543.365033][T13576] ? bpf_lsm_inode_mkdir+0x9/0x10 [ 543.365089][T13576] vfs_mkdir+0x361/0x850 [ 543.365131][T13576] filename_mkdirat+0x48b/0x5e0 [ 543.365184][T13576] ? __pfx_filename_mkdirat+0x10/0x10 [ 543.365234][T13576] ? strncpy_from_user+0x19d/0x2d0 [ 543.365278][T13576] ? do_getname+0x191/0x390 [ 543.365353][T13576] __x64_sys_mkdir+0x6b/0x90 [ 543.365411][T13576] do_syscall_64+0x10b/0xf80 [ 543.365467][T13576] ? clear_bhb_loop+0x40/0x90 [ 543.365511][T13576] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 543.365549][T13576] RIP: 0033:0x7fc27b59ce59 [ 543.365577][T13576] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 543.365612][T13576] RSP: 002b:00007fc27c4a2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 543.365646][T13576] RAX: ffffffffffffffda RBX: 00007fc27b815fa0 RCX: 00007fc27b59ce59 [ 543.365669][T13576] RDX: 0000000000000000 RSI: 00000000000008cd RDI: 0000200000000000 [ 543.365691][T13576] RBP: 00007fc27b632d6f R08: 0000000000000000 R09: 0000000000000000 [ 543.365712][T13576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 543.365732][T13576] R13: 00007fc27b816038 R14: 00007fc27b815fa0 R15: 00007ffd65675d08 [ 543.365780][T13576] [ 544.474569][ T50] Bluetooth: hci2: Malformed Event: 0x02 [ 544.990169][T13608] netlink: 25 bytes leftover after parsing attributes in process `syz.2.2415'. [ 545.508556][T13611] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2417'. [ 545.541465][T13611] netlink: 13 bytes leftover after parsing attributes in process `syz.2.2417'. [ 549.861245][T13702] Invalid ELF header magic: != ELF [ 550.267711][T13710] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2442'. [ 551.206037][T13727] netlink: 334 bytes leftover after parsing attributes in process `syz.1.2447'. [ 551.398487][T13714] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 551.406345][T13732] vcan0: tx drop: invalid sa for name 0x00000000000000fd [ 551.438445][T13714] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 551.560744][T13714] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 551.580636][T13714] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 551.609497][T13714] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 551.623012][T13714] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 551.653337][T13714] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 551.660638][T13714] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 552.102289][T13737] netlink: 'syz.2.2459': attribute type 28 has an invalid length. [ 552.125736][T13737] netlink: 'syz.2.2459': attribute type 3 has an invalid length. [ 552.143448][T13737] netlink: 306 bytes leftover after parsing attributes in process `syz.2.2459'. [ 552.417477][T13747] netlink: 202 bytes leftover after parsing attributes in process `syz.1.2453'. [ 552.767787][T13759] netlink: 342 bytes leftover after parsing attributes in process `syz.3.2456'. [ 552.767814][T13759] IPv6: NLM_F_CREATE should be specified when creating new route [ 552.767996][T13759] IPv6: Can't replace route, no match found [ 552.799494][T13759] netlink: 342 bytes leftover after parsing attributes in process `syz.3.2456'. [ 552.799728][T13759] IPv6: Can't replace route, no match found [ 552.931293][ T50] Bluetooth: hci3: command 0x2016 tx timeout [ 553.256327][T13763] FAULT_INJECTION: forcing a failure. [ 553.256327][T13763] name failslab, interval 1, probability 0, space 0, times 0 [ 553.299760][T13763] CPU: 0 UID: 0 PID: 13763 Comm: syz.1.2458 Tainted: G U L syzkaller #0 PREEMPT(full) [ 553.299817][T13763] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 553.299830][T13763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 553.299849][T13763] Call Trace: [ 553.299860][T13763] [ 553.299873][T13763] dump_stack_lvl+0x100/0x190 [ 553.299917][T13763] should_fail_ex.cold+0x5/0xa [ 553.299960][T13763] ? tomoyo_realpath_from_path+0xb6/0x690 [ 553.300007][T13763] should_failslab+0xc2/0x120 [ 553.300048][T13763] __kmalloc_noprof+0xe0/0x850 [ 553.300080][T13763] ? kfree+0x1dd/0x6c0 [ 553.300136][T13763] tomoyo_realpath_from_path+0xb6/0x690 [ 553.300198][T13763] tomoyo_path_number_perm+0x23c/0x580 [ 553.300257][T13763] ? tomoyo_path_number_perm+0x22e/0x580 [ 553.300297][T13763] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 553.300371][T13763] ? current_check_access_path+0x269/0x430 [ 553.300407][T13763] ? __pfx_current_check_access_path+0x10/0x10 [ 553.300444][T13763] ? d_alloc_parallel+0x864/0x14e0 [ 553.300476][T13763] tomoyo_path_mknod+0x164/0x190 [ 553.300521][T13763] ? __pfx_tomoyo_path_mknod+0x10/0x10 [ 553.300559][T13763] ? find_held_lock+0x2b/0x80 [ 553.300594][T13763] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 553.300637][T13763] security_path_mknod+0x161/0x300 [ 553.300674][T13763] may_o_create+0x30/0x3a0 [ 553.300719][T13763] lookup_open.isra.0+0xa0d/0x11b0 [ 553.300751][T13763] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 553.300784][T13763] ? __pfx___might_resched+0x10/0x10 [ 553.300813][T13763] ? mnt_get_write_access+0x52/0x2f0 [ 553.300860][T13763] ? __pfx_down_write+0x10/0x10 [ 553.300885][T13763] ? mnt_get_write_access+0x1e9/0x2f0 [ 553.300931][T13763] path_openat+0x2291/0x31a0 [ 553.300969][T13763] ? entry_SYSCALL_64_after_hwframe+0x48/0x7f [ 553.301000][T13763] ? __pfx_path_openat+0x10/0x10 [ 553.301045][T13763] do_file_open+0x20e/0x430 [ 553.301080][T13763] ? __pfx_do_file_open+0x10/0x10 [ 553.301134][T13763] ? _raw_spin_unlock+0x28/0x50 [ 553.301169][T13763] ? alloc_fd+0x476/0x790 [ 553.301231][T13763] do_sys_openat2+0x10d/0x1e0 [ 553.301287][T13763] ? __pfx_do_sys_openat2+0x10/0x10 [ 553.301354][T13763] __x64_sys_open+0xfe/0x1d0 [ 553.301395][T13763] ? __pfx___x64_sys_open+0x10/0x10 [ 553.301434][T13763] ? ksys_write+0x1ac/0x250 [ 553.301468][T13763] ? rcu_is_watching+0x12/0xc0 [ 553.301508][T13763] do_syscall_64+0x10b/0xf80 [ 553.301548][T13763] ? clear_bhb_loop+0x40/0x90 [ 553.301580][T13763] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 553.301607][T13763] RIP: 0033:0x7f97dad9ce59 [ 553.301647][T13763] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 553.301684][T13763] RSP: 002b:00007f97dbc01028 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 553.301708][T13763] RAX: ffffffffffffffda RBX: 00007f97db015fa0 RCX: 00007f97dad9ce59 [ 553.301725][T13763] RDX: 0000000000000000 RSI: 0000000000149443 RDI: 0000200000000040 [ 553.301740][T13763] RBP: 00007f97dae32d6f R08: 0000000000000000 R09: 0000000000000000 [ 553.301756][T13763] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 553.301771][T13763] R13: 00007f97db016038 R14: 00007f97db015fa0 R15: 00007ffc4b546c08 [ 553.301803][T13763] [ 553.775512][ T50] Bluetooth: hci1: command 0x0406 tx timeout [ 553.781712][ T50] Bluetooth: hci2: command 0x0406 tx timeout [ 553.788876][ T5640] Bluetooth: hci0: command 0x0406 tx timeout [ 553.799074][T13763] ERROR: Out of memory at tomoyo_realpath_from_path. [ 553.826019][T13767] netlink: 504 bytes leftover after parsing attributes in process `syz.3.2460'. [ 553.860272][T13768] nfs4: Unknown parameter 'ECÞHš];^‘ÌYµÙ‰ÜZL‘`š~^g ¨' [ 554.104276][ T5629] Bluetooth: hci0: Malformed Event: 0x02 [ 555.010710][ T5629] Bluetooth: hci3: command 0x2016 tx timeout [ 555.388714][T13808] ubi3: attaching mtd1 [ 555.821088][ T5640] Bluetooth: hci2: command 0x0406 tx timeout [ 555.827449][ T5640] Bluetooth: hci1: command 0x0406 tx timeout [ 555.833782][ T5629] Bluetooth: hci0: command 0x0406 tx timeout [ 556.895536][T13835] syz.0.2489 (13835): /proc/13835/oom_adj is deprecated, please use /proc/13835/oom_score_adj instead. [ 556.916047][T13837] FAULT_INJECTION: forcing a failure. [ 556.916047][T13837] name failslab, interval 1, probability 0, space 0, times 0 [ 556.944117][T13837] CPU: 1 UID: 0 PID: 13837 Comm: syz.1.2481 Tainted: G U L syzkaller #0 PREEMPT(full) [ 556.944176][T13837] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 556.944190][T13837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 556.944221][T13837] Call Trace: [ 556.944233][T13837] [ 556.944246][T13837] dump_stack_lvl+0x100/0x190 [ 556.944294][T13837] should_fail_ex.cold+0x5/0xa [ 556.944340][T13837] should_failslab+0xc2/0x120 [ 556.944383][T13837] __kmalloc_cache_node_noprof+0x7d/0x770 [ 556.944421][T13837] ? alloc_shrinker_info+0x192/0x470 [ 556.944469][T13837] alloc_shrinker_info+0x192/0x470 [ 556.944515][T13837] ? __pfx_mem_cgroup_css_online+0x10/0x10 [ 556.944579][T13837] mem_cgroup_css_online+0xa4/0xbf0 [ 556.944642][T13837] ? __pfx_mem_cgroup_css_online+0x10/0x10 [ 556.944700][T13837] online_css+0xb2/0x350 [ 556.944742][T13837] cgroup_apply_control_enable+0xa8d/0xdd0 [ 556.944806][T13837] cgroup_mkdir+0x59c/0x1310 [ 556.944866][T13837] ? __pfx_cgroup_mkdir+0x10/0x10 [ 556.944921][T13837] kernfs_iop_mkdir+0x111/0x190 [ 556.944964][T13837] ? bpf_lsm_inode_mkdir+0x9/0x10 [ 556.945019][T13837] vfs_mkdir+0x361/0x850 [ 556.945059][T13837] filename_mkdirat+0x48b/0x5e0 [ 556.945113][T13837] ? __pfx_filename_mkdirat+0x10/0x10 [ 556.945161][T13837] ? strncpy_from_user+0x19d/0x2d0 [ 556.945210][T13837] ? do_getname+0x191/0x390 [ 556.945269][T13837] __x64_sys_mkdir+0x6b/0x90 [ 556.945317][T13837] do_syscall_64+0x10b/0xf80 [ 556.945372][T13837] ? clear_bhb_loop+0x40/0x90 [ 556.945416][T13837] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 556.945451][T13837] RIP: 0033:0x7f97dad9ce59 [ 556.945480][T13837] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 556.945514][T13837] RSP: 002b:00007f97dbc01028 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 556.945549][T13837] RAX: ffffffffffffffda RBX: 00007f97db015fa0 RCX: 00007f97dad9ce59 [ 556.945573][T13837] RDX: 0000000000000000 RSI: 00000000000008cd RDI: 0000200000000000 [ 556.945595][T13837] RBP: 00007f97dae32d6f R08: 0000000000000000 R09: 0000000000000000 [ 556.945616][T13837] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 556.945636][T13837] R13: 00007f97db016038 R14: 00007f97db015fa0 R15: 00007ffc4b546c08 [ 556.945683][T13837] [ 558.551920][T13855] FAULT_INJECTION: forcing a failure. [ 558.551920][T13855] name fail_futex, interval 1, probability 0, space 0, times 0 [ 558.593983][T13855] CPU: 1 UID: 0 PID: 13855 Comm: syz.2.2487 Tainted: G U L syzkaller #0 PREEMPT(full) [ 558.594040][T13855] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 558.594054][T13855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 558.594075][T13855] Call Trace: [ 558.594086][T13855] [ 558.594099][T13855] dump_stack_lvl+0x100/0x190 [ 558.594144][T13855] should_fail_ex.cold+0x5/0xa [ 558.594183][T13855] ? kfree+0x223/0x6c0 [ 558.594236][T13855] get_futex_key+0x1d2/0x1510 [ 558.594275][T13855] ? __pfx_get_futex_key+0x10/0x10 [ 558.594310][T13855] ? find_held_lock+0x2b/0x80 [ 558.594356][T13855] ? snd_pcm_oss_get_active_substream+0x17f/0x1d0 [ 558.594414][T13855] ? snd_pcm_oss_get_active_substream+0x17f/0x1d0 [ 558.594479][T13855] futex_wake+0xea/0x530 [ 558.594528][T13855] ? __pfx_futex_wake+0x10/0x10 [ 558.594581][T13855] ? find_held_lock+0x2b/0x80 [ 558.594638][T13855] ? __might_fault+0xc5/0x140 [ 558.594698][T13855] do_futex+0x32b/0x350 [ 558.594738][T13855] ? __pfx_do_futex+0x10/0x10 [ 558.594776][T13855] ? snd_pcm_oss_ioctl+0x2b6/0x37c0 [ 558.594842][T13855] __x64_sys_futex+0x34f/0x4d0 [ 558.594885][T13855] ? __fget_files+0x21f/0x3d0 [ 558.594926][T13855] ? __pfx___x64_sys_futex+0x10/0x10 [ 558.594973][T13855] ? rcu_is_watching+0x12/0xc0 [ 558.595022][T13855] do_syscall_64+0x10b/0xf80 [ 558.595074][T13855] ? clear_bhb_loop+0x40/0x90 [ 558.595117][T13855] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 558.595151][T13855] RIP: 0033:0x7f2162d9ce59 [ 558.595180][T13855] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 558.595220][T13855] RSP: 002b:00007f2163b950e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 558.595255][T13855] RAX: ffffffffffffffda RBX: 00007f2163015fa8 RCX: 00007f2162d9ce59 [ 558.595278][T13855] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f2163015fac [ 558.595301][T13855] RBP: 00007f2163015fa0 R08: 0000000000000001 R09: 0000000000000000 [ 558.595322][T13855] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 558.595343][T13855] R13: 00007f2163016038 R14: 00007ffe928f2f40 R15: 00007ffe928f3028 [ 558.595385][T13855] [ 559.414839][T13865] netlink: 246 bytes leftover after parsing attributes in process `syz.2.2492'. [ 560.788559][T13895] netlink: 202 bytes leftover after parsing attributes in process `syz.1.2503'. [ 561.509741][T13906] FAULT_INJECTION: forcing a failure. [ 561.509741][T13906] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 561.509798][T13906] CPU: 0 UID: 0 PID: 13906 Comm: syz.0.2515 Tainted: G U L syzkaller #0 PREEMPT(full) [ 561.509850][T13906] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 561.509862][T13906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 561.509882][T13906] Call Trace: [ 561.509893][T13906] [ 561.509904][T13906] dump_stack_lvl+0x100/0x190 [ 561.509949][T13906] should_fail_ex.cold+0x5/0xa [ 561.509986][T13906] ? prepare_alloc_pages+0x16d/0x5f0 [ 561.510035][T13906] should_fail_alloc_page+0xeb/0x140 [ 561.510080][T13906] prepare_alloc_pages+0x1f0/0x5f0 [ 561.510132][T13906] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 561.510196][T13906] ? rcu_is_watching+0x12/0xc0 [ 561.510248][T13906] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 561.510299][T13906] ? lockdep_hardirqs_on+0x78/0x100 [ 561.510351][T13906] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 561.510401][T13906] ? stack_depot_save_flags+0x479/0x9d0 [ 561.510450][T13906] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 561.510511][T13906] ? kasan_save_stack+0x3f/0x50 [ 561.510545][T13906] ? kasan_save_stack+0x30/0x50 [ 561.510577][T13906] ? kasan_save_track+0x14/0x30 [ 561.510612][T13906] ? kmem_cache_alloc_node_noprof+0x25a/0x6f0 [ 561.510669][T13906] ? __get_vm_area_node+0x1ca/0x330 [ 561.510710][T13906] ? get_vm_area_caller+0x71/0xa0 [ 561.510750][T13906] ? vmap+0x131/0x2f0 [ 561.510788][T13906] ? ringbuf_map_alloc+0x3a1/0x8b0 [ 561.510853][T13906] ? map_create+0x84e/0x2bc0 [ 561.510904][T13906] ? __sys_bpf+0x2091/0x4b90 [ 561.510935][T13906] ? __x64_sys_bpf+0x7b/0xc0 [ 561.510968][T13906] ? do_syscall_64+0x10b/0xf80 [ 561.511020][T13906] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 561.511072][T13906] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 561.511126][T13906] ? policy_nodemask+0xed/0x4f0 [ 561.511168][T13906] alloc_pages_mpol+0x1fb/0x540 [ 561.511212][T13906] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 561.511264][T13906] alloc_pages_noprof+0x1a/0x160 [ 561.511311][T13906] get_free_pages_noprof+0x10/0xb0 [ 561.511350][T13906] __kasan_populate_vmalloc+0xa0/0x210 [ 561.511418][T13906] alloc_vmap_area+0x95d/0x2b70 [ 561.511477][T13906] ? __pfx_alloc_vmap_area+0x10/0x10 [ 561.511535][T13906] __get_vm_area_node+0x1ca/0x330 [ 561.511583][T13906] ? ringbuf_map_alloc+0x3a1/0x8b0 [ 561.511619][T13906] get_vm_area_caller+0x71/0xa0 [ 561.511662][T13906] ? ringbuf_map_alloc+0x3a1/0x8b0 [ 561.511698][T13906] vmap+0x131/0x2f0 [ 561.511740][T13906] ? __pfx_vmap+0x10/0x10 [ 561.511793][T13906] ringbuf_map_alloc+0x3a1/0x8b0 [ 561.511834][T13906] ? __pfx_ringbuf_map_mem_usage+0x10/0x10 [ 561.511884][T13906] map_create+0x84e/0x2bc0 [ 561.511926][T13906] ? futex_unqueue+0x13d/0x2c0 [ 561.511958][T13906] ? __futex_wait+0x256/0x300 [ 561.512003][T13906] ? __pfx_map_create+0x10/0x10 [ 561.512047][T13906] ? __might_fault+0xc5/0x140 [ 561.512093][T13906] ? __might_fault+0xc5/0x140 [ 561.512150][T13906] __sys_bpf+0x2091/0x4b90 [ 561.512183][T13906] ? __pfx___sys_bpf+0x10/0x10 [ 561.512212][T13906] ? __pfx_futex_wait+0x10/0x10 [ 561.512258][T13906] ? errseq_sample+0x51/0x70 [ 561.512287][T13906] ? file_init_path+0x48e/0x670 [ 561.512337][T13906] ? do_futex+0x192/0x350 [ 561.512386][T13906] ? xfd_validate_state+0x129/0x190 [ 561.512426][T13906] __x64_sys_bpf+0x7b/0xc0 [ 561.512456][T13906] ? lockdep_hardirqs_on+0x78/0x100 [ 561.512501][T13906] do_syscall_64+0x10b/0xf80 [ 561.512553][T13906] ? clear_bhb_loop+0x40/0x90 [ 561.512588][T13906] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 561.512621][T13906] RIP: 0033:0x7fc27b59ce59 [ 561.512648][T13906] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 561.512679][T13906] RSP: 002b:00007fc27c4a2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 561.512708][T13906] RAX: ffffffffffffffda RBX: 00007fc27b815fa0 RCX: 00007fc27b59ce59 [ 561.512728][T13906] RDX: 0000000000000010 RSI: 00002000000000c0 RDI: 0000000000000000 [ 561.512746][T13906] RBP: 00007fc27b632d6f R08: 0000000000000000 R09: 0000000000000000 [ 561.512765][T13906] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 561.512782][T13906] R13: 00007fc27b816038 R14: 00007fc27b815fa0 R15: 00007ffd65675d08 [ 561.512819][T13906] [ 561.857476][T13919] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2511'. [ 562.322921][T13927] netlink: 330 bytes leftover after parsing attributes in process `syz.0.2513'. [ 563.015193][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.023824][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.424168][T13940] FAULT_INJECTION: forcing a failure. [ 563.424168][T13940] name failslab, interval 1, probability 0, space 0, times 0 [ 563.468347][T13940] CPU: 0 UID: 0 PID: 13940 Comm: syz.0.2523 Tainted: G U L syzkaller #0 PREEMPT(full) [ 563.468390][T13940] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 563.468399][T13940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 563.468415][T13940] Call Trace: [ 563.468423][T13940] [ 563.468433][T13940] dump_stack_lvl+0x100/0x190 [ 563.468464][T13940] should_fail_ex.cold+0x5/0xa [ 563.468495][T13940] should_failslab+0xc2/0x120 [ 563.468525][T13940] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 563.468567][T13940] ? __mpol_dup+0x74/0x390 [ 563.468606][T13940] __mpol_dup+0x74/0x390 [ 563.468639][T13940] ? __pfx___mpol_dup+0x10/0x10 [ 563.468682][T13940] mbind_range+0x2ad/0x550 [ 563.468721][T13940] do_mbind+0x7dc/0xfd0 [ 563.468764][T13940] ? __pfx_do_mbind+0x10/0x10 [ 563.468799][T13940] ? ksys_write+0x190/0x250 [ 563.468841][T13940] ? __pfx_get_nodes+0x10/0x10 [ 563.468875][T13940] kernel_mbind+0x1b7/0x200 [ 563.468913][T13940] ? __pfx_kernel_mbind+0x10/0x10 [ 563.468952][T13940] ? rcu_is_watching+0x12/0xc0 [ 563.468987][T13940] do_syscall_64+0x10b/0xf80 [ 563.469026][T13940] ? clear_bhb_loop+0x40/0x90 [ 563.469078][T13940] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 563.469115][T13940] RIP: 0033:0x7fc27b59ce59 [ 563.469143][T13940] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 563.469186][T13940] RSP: 002b:00007fc27c460028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 563.469219][T13940] RAX: ffffffffffffffda RBX: 00007fc27b816180 RCX: 00007fc27b59ce59 [ 563.469243][T13940] RDX: 0000000000000004 RSI: 00000000002091d2 RDI: 0000000000000000 [ 563.469267][T13940] RBP: 00007fc27b632d6f R08: 0000000000000006 R09: 0000000000000002 [ 563.469288][T13940] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 563.469309][T13940] R13: 00007fc27b816218 R14: 00007fc27b816180 R15: 00007ffd65675d08 [ 563.469354][T13940] [ 563.488284][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 564.779100][T13955] netlink: 9 bytes leftover after parsing attributes in process `syz.0.2529'. [ 564.814499][T13955] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2529'. [ 565.467205][T13814] Bluetooth: hci1: unexpected subevent 0x01 length: 3 < 18 [ 566.206237][T13975] FAULT_INJECTION: forcing a failure. [ 566.206237][T13975] name failslab, interval 1, probability 0, space 0, times 0 [ 566.232850][T13975] CPU: 0 UID: 0 PID: 13975 Comm: syz.0.2527 Tainted: G U L syzkaller #0 PREEMPT(full) [ 566.232903][T13975] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 566.232934][T13975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 566.232955][T13975] Call Trace: [ 566.232965][T13975] [ 566.232977][T13975] dump_stack_lvl+0x100/0x190 [ 566.233021][T13975] should_fail_ex.cold+0x5/0xa [ 566.233066][T13975] should_failslab+0xc2/0x120 [ 566.233107][T13975] __kvmalloc_node_noprof+0xfa/0xa00 [ 566.233141][T13975] ? __do_sys_setgroups+0x126/0x4f0 [ 566.233186][T13975] __do_sys_setgroups+0x126/0x4f0 [ 566.233220][T13975] ? 0xffffffffff600000 [ 566.233253][T13975] do_syscall_64+0x10b/0xf80 [ 566.233306][T13975] ? clear_bhb_loop+0x40/0x90 [ 566.233348][T13975] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 566.233382][T13975] RIP: 0033:0x7fc27b59ce59 [ 566.233408][T13975] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 566.233440][T13975] RSP: 002b:00007fc27c481028 EFLAGS: 00000246 ORIG_RAX: 0000000000000074 [ 566.233481][T13975] RAX: ffffffffffffffda RBX: 00007fc27b816090 RCX: 00007fc27b59ce59 [ 566.233503][T13975] RDX: 0000000000000000 RSI: ffffffffff600000 RDI: 0000000000000005 [ 566.233523][T13975] RBP: 00007fc27b632d6f R08: 0000000000000000 R09: 0000000000000000 [ 566.233544][T13975] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 566.233564][T13975] R13: 00007fc27b816128 R14: 00007fc27b816090 R15: 00007ffd65675d08 [ 566.233600][T13975] ? 0xffffffffff600000 [ 566.233631][T13975] [ 566.255781][T13972] pim6reg: entered allmulticast mode [ 567.256342][T13814] Bluetooth: hci0: unexpected subevent 0x18 length: 123 > 19 [ 567.265218][T13996] binder: 13995:13996 ioctl c0306201 200000000000 returned -11 [ 567.266044][T13814] Bluetooth: hci0: Unable to find connection for dst f9:56:cc:cc:70:a9 sid 0x00 [ 567.879888][T14009] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2541'. [ 572.159967][T14050] FAULT_INJECTION: forcing a failure. [ 572.159967][T14050] name failslab, interval 1, probability 0, space 0, times 0 [ 572.201897][T14050] CPU: 0 UID: 0 PID: 14050 Comm: syz.2.2552 Tainted: G U L syzkaller #0 PREEMPT(full) [ 572.201954][T14050] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 572.201968][T14050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 572.201989][T14050] Call Trace: [ 572.201999][T14050] [ 572.202012][T14050] dump_stack_lvl+0x100/0x190 [ 572.202056][T14050] should_fail_ex.cold+0x5/0xa [ 572.202099][T14050] should_failslab+0xc2/0x120 [ 572.202139][T14050] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 572.202192][T14050] ? vm_area_dup+0x27/0x8e0 [ 572.202244][T14050] ? kernel_text_address+0x8d/0x100 [ 572.202288][T14050] vm_area_dup+0x27/0x8e0 [ 572.202343][T14050] __split_vma+0x18c/0xd90 [ 572.202395][T14050] ? __mpol_equal+0xaf/0x340 [ 572.202441][T14050] ? __pfx___split_vma+0x10/0x10 [ 572.202522][T14050] vma_modify+0x12ad/0x25c0 [ 572.202591][T14050] ? __pfx_vma_modify+0x10/0x10 [ 572.202670][T14050] vma_modify_policy+0x238/0x300 [ 572.202727][T14050] ? __pfx_vma_modify_policy+0x10/0x10 [ 572.202783][T14050] ? find_held_lock+0x2b/0x80 [ 572.202860][T14050] mbind_range+0x175/0x550 [ 572.202911][T14050] do_mbind+0x7dc/0xfd0 [ 572.202969][T14050] ? __pfx_do_mbind+0x10/0x10 [ 572.203029][T14050] ? ksys_write+0x190/0x250 [ 572.203088][T14050] ? __pfx_get_nodes+0x10/0x10 [ 572.203135][T14050] kernel_mbind+0x1b7/0x200 [ 572.203196][T14050] ? __pfx_kernel_mbind+0x10/0x10 [ 572.203249][T14050] ? rcu_is_watching+0x12/0xc0 [ 572.203300][T14050] do_syscall_64+0x10b/0xf80 [ 572.203361][T14050] ? clear_bhb_loop+0x40/0x90 [ 572.203405][T14050] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 572.203441][T14050] RIP: 0033:0x7f2162d9ce59 [ 572.203474][T14050] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 572.203516][T14050] RSP: 002b:00007f2163b95028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 572.203548][T14050] RAX: ffffffffffffffda RBX: 00007f2163015fa0 RCX: 00007f2162d9ce59 [ 572.203571][T14050] RDX: 0000000000000004 RSI: 00000000002091d2 RDI: 0000000000000000 [ 572.203592][T14050] RBP: 00007f2162e32d6f R08: 0000000000000006 R09: 0000000000000002 [ 572.203617][T14050] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 572.203638][T14050] R13: 00007f2163016038 R14: 00007f2163015fa0 R15: 00007ffe928f3028 [ 572.203683][T14050] [ 576.187691][T14103] netlink: 330 bytes leftover after parsing attributes in process `syz.2.2563'. [ 576.414045][T14107] netlink: 'syz.2.2564': attribute type 10 has an invalid length. [ 576.453975][T14107] netlink: 230 bytes leftover after parsing attributes in process `syz.2.2564'. [ 577.497811][T14115] netlink: 9 bytes leftover after parsing attributes in process `syz.2.2566'. [ 577.521870][T14115] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2566'. [ 577.833101][T14118] netlink: 330 bytes leftover after parsing attributes in process `syz.2.2568'. [ 578.703910][T14137] FAULT_INJECTION: forcing a failure. [ 578.703910][T14137] name failslab, interval 1, probability 0, space 0, times 0 [ 578.753096][T14137] CPU: 0 UID: 0 PID: 14137 Comm: syz.2.2574 Tainted: G U L syzkaller #0 PREEMPT(full) [ 578.753142][T14137] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 578.753152][T14137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 578.753166][T14137] Call Trace: [ 578.753174][T14137] [ 578.753184][T14137] dump_stack_lvl+0x100/0x190 [ 578.753216][T14137] should_fail_ex.cold+0x5/0xa [ 578.753248][T14137] should_failslab+0xc2/0x120 [ 578.753278][T14137] __kvmalloc_node_noprof+0xfa/0xa00 [ 578.753304][T14137] ? alloc_shrinker_info+0xf0/0x470 [ 578.753339][T14137] alloc_shrinker_info+0xf0/0x470 [ 578.753373][T14137] ? __pfx_mem_cgroup_css_online+0x10/0x10 [ 578.753417][T14137] mem_cgroup_css_online+0xa4/0xbf0 [ 578.753469][T14137] ? __pfx_mem_cgroup_css_online+0x10/0x10 [ 578.753513][T14137] online_css+0xb2/0x350 [ 578.753544][T14137] cgroup_apply_control_enable+0xa8d/0xdd0 [ 578.753590][T14137] cgroup_mkdir+0x59c/0x1310 [ 578.753633][T14137] ? __pfx_cgroup_mkdir+0x10/0x10 [ 578.753672][T14137] kernfs_iop_mkdir+0x111/0x190 [ 578.753704][T14137] ? bpf_lsm_inode_mkdir+0x9/0x10 [ 578.753744][T14137] vfs_mkdir+0x361/0x850 [ 578.753772][T14137] filename_mkdirat+0x48b/0x5e0 [ 578.753810][T14137] ? __pfx_filename_mkdirat+0x10/0x10 [ 578.753845][T14137] ? strncpy_from_user+0x19d/0x2d0 [ 578.753876][T14137] ? do_getname+0x191/0x390 [ 578.753918][T14137] __x64_sys_mkdir+0x6b/0x90 [ 578.753961][T14137] do_syscall_64+0x10b/0xf80 [ 578.754001][T14137] ? clear_bhb_loop+0x40/0x90 [ 578.754032][T14137] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 578.754058][T14137] RIP: 0033:0x7f2162d9ce59 [ 578.754079][T14137] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 578.754104][T14137] RSP: 002b:00007f2163b95028 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 578.754128][T14137] RAX: ffffffffffffffda RBX: 00007f2163015fa0 RCX: 00007f2162d9ce59 [ 578.754145][T14137] RDX: 0000000000000000 RSI: 00000000000008cd RDI: 0000200000000000 [ 578.754160][T14137] RBP: 00007f2162e32d6f R08: 0000000000000000 R09: 0000000000000000 [ 578.754176][T14137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 578.754191][T14137] R13: 00007f2163016038 R14: 00007f2163015fa0 R15: 00007ffe928f3028 [ 578.754223][T14137] [ 580.316838][T14152] netlink: 'syz.0.2580': attribute type 10 has an invalid length. [ 580.340414][T14152] netlink: 'syz.0.2580': attribute type 13 has an invalid length. [ 580.768384][T14164] netlink: 'syz.0.2584': attribute type 15 has an invalid length. [ 580.776518][T14164] netlink: 'syz.0.2584': attribute type 16 has an invalid length. [ 580.776524][T14159] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2581'. [ 580.798271][T14159] veth1_vlan: left promiscuous mode [ 580.805731][T14164] netlink: 194 bytes leftover after parsing attributes in process `syz.0.2584'. [ 581.378891][T14175] FAULT_INJECTION: forcing a failure. [ 581.378891][T14175] name failslab, interval 1, probability 0, space 0, times 0 [ 581.460263][T14175] CPU: 1 UID: 0 PID: 14175 Comm: syz.0.2589 Tainted: G U L syzkaller #0 PREEMPT(full) [ 581.460320][T14175] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 581.460332][T14175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 581.460361][T14175] Call Trace: [ 581.460374][T14175] [ 581.460387][T14175] dump_stack_lvl+0x100/0x190 [ 581.460432][T14175] should_fail_ex.cold+0x5/0xa [ 581.460477][T14175] should_failslab+0xc2/0x120 [ 581.460520][T14175] __kmalloc_cache_noprof+0x7a/0x6f0 [ 581.460573][T14175] ? ring_buffer_read_start+0x149/0x450 [ 581.460630][T14175] ring_buffer_read_start+0x149/0x450 [ 581.460681][T14175] ? __pfx_ring_buffer_read_start+0x10/0x10 [ 581.460729][T14175] ? lockdep_init_map_type+0x5c/0x250 [ 581.460770][T14175] ? ring_buffer_overruns+0x14e/0x1a0 [ 581.460815][T14175] __tracing_open+0x74e/0xa80 [ 581.460860][T14175] tracing_open+0x26b/0x4d0 [ 581.460903][T14175] do_dentry_open+0x6d8/0x1660 [ 581.460949][T14175] ? __pfx_tracing_open+0x10/0x10 [ 581.460998][T14175] vfs_open+0x82/0x3f0 [ 581.461054][T14175] path_openat+0x208c/0x31a0 [ 581.461113][T14175] ? __pfx_path_openat+0x10/0x10 [ 581.461177][T14175] do_file_open+0x20e/0x430 [ 581.461226][T14175] ? __pfx_do_file_open+0x10/0x10 [ 581.461303][T14175] ? alloc_fd+0x476/0x790 [ 581.461361][T14175] ? do_getname+0x191/0x390 [ 581.461422][T14175] do_sys_openat2+0x10d/0x1e0 [ 581.461478][T14175] ? __pfx_do_sys_openat2+0x10/0x10 [ 581.461536][T14175] ? __fget_files+0x21f/0x3d0 [ 581.461586][T14175] __x64_sys_openat+0x12d/0x210 [ 581.461642][T14175] ? __pfx___x64_sys_openat+0x10/0x10 [ 581.461711][T14175] ? rcu_is_watching+0x12/0xc0 [ 581.461759][T14175] do_syscall_64+0x10b/0xf80 [ 581.461814][T14175] ? clear_bhb_loop+0x40/0x90 [ 581.461858][T14175] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 581.461895][T14175] RIP: 0033:0x7fc27b59ce59 [ 581.461923][T14175] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 581.461957][T14175] RSP: 002b:00007fc27c4a2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 581.461991][T14175] RAX: ffffffffffffffda RBX: 00007fc27b815fa0 RCX: 00007fc27b59ce59 [ 581.462013][T14175] RDX: 1a6b75d638828712 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 581.462036][T14175] RBP: 00007fc27b632d6f R08: 0000000000000000 R09: 0000000000000000 [ 581.462057][T14175] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 581.462077][T14175] R13: 00007fc27b816038 R14: 00007fc27b815fa0 R15: 00007ffd65675d08 [ 581.462122][T14175] [ 581.880091][T14183] FAULT_INJECTION: forcing a failure. [ 581.880091][T14183] name failslab, interval 1, probability 0, space 0, times 0 [ 581.932369][T14183] CPU: 0 UID: 8 PID: 14183 Comm: syz.2.2591 Tainted: G U L syzkaller #0 PREEMPT(full) [ 581.932428][T14183] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 581.932443][T14183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 581.932463][T14183] Call Trace: [ 581.932475][T14183] [ 581.932489][T14183] dump_stack_lvl+0x100/0x190 [ 581.932535][T14183] should_fail_ex.cold+0x5/0xa [ 581.932581][T14183] should_failslab+0xc2/0x120 [ 581.932625][T14183] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 581.932694][T14183] ? key_alloc+0x3c5/0x1310 [ 581.932744][T14183] key_alloc+0x3c5/0x1310 [ 581.932800][T14183] ? __pfx_key_alloc+0x10/0x10 [ 581.932852][T14183] keyring_alloc+0x44/0xc0 [ 581.932903][T14183] lookup_user_key+0x9b8/0x1300 [ 581.932954][T14183] ? __pfx_lookup_user_key+0x10/0x10 [ 581.932996][T14183] ? __pfx_futex_wait+0x10/0x10 [ 581.933050][T14183] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 581.933108][T14183] keyctl_get_persistent+0x197/0x8b0 [ 581.933159][T14183] ? __pfx_keyctl_get_persistent+0x10/0x10 [ 581.933211][T14183] ? __x64_sys_futex+0x34f/0x4d0 [ 581.933252][T14183] ? __x64_sys_futex+0x358/0x4d0 [ 581.933295][T14183] ? xfd_validate_state+0x129/0x190 [ 581.933332][T14183] ? ksys_write+0x1ac/0x250 [ 581.933382][T14183] __do_sys_keyctl+0x3b2/0x5a0 [ 581.933418][T14183] do_syscall_64+0x10b/0xf80 [ 581.933473][T14183] ? clear_bhb_loop+0x40/0x90 [ 581.933516][T14183] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 581.933553][T14183] RIP: 0033:0x7f2162d9ce59 [ 581.933583][T14183] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 581.933618][T14183] RSP: 002b:00007f2163b95028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 581.933652][T14183] RAX: ffffffffffffffda RBX: 00007f2163015fa0 RCX: 00007f2162d9ce59 [ 581.933685][T14183] RDX: 7fffffffffffffff RSI: 0000000000000000 RDI: 0000000000000016 [ 581.933708][T14183] RBP: 00007f2162e32d6f R08: 0000000000000002 R09: 0000000000000000 [ 581.933729][T14183] R10: ffffffffffffe6d6 R11: 0000000000000246 R12: 0000000000000000 [ 581.933759][T14183] R13: 00007f2163016038 R14: 00007f2163015fa0 R15: 00007ffe928f3028 [ 581.933808][T14183] [ 582.533320][T14193] netlink: 146 bytes leftover after parsing attributes in process `syz.2.2594'. [ 586.545658][T14255] FAULT_INJECTION: forcing a failure. [ 586.545658][T14255] name fail_futex, interval 1, probability 0, space 0, times 0 [ 586.559063][T14255] CPU: 1 UID: 0 PID: 14255 Comm: syz.0.2613 Tainted: G U L syzkaller #0 PREEMPT(full) [ 586.559124][T14255] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 586.559138][T14255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 586.559159][T14255] Call Trace: [ 586.559170][T14255] [ 586.559184][T14255] dump_stack_lvl+0x100/0x190 [ 586.559230][T14255] should_fail_ex.cold+0x5/0xa [ 586.559274][T14255] get_futex_key+0x1d2/0x1510 [ 586.559315][T14255] ? __pfx_get_futex_key+0x10/0x10 [ 586.559352][T14255] ? find_held_lock+0x2b/0x80 [ 586.559397][T14255] ? futex_wake+0x456/0x530 [ 586.559547][T14255] futex_wake+0xea/0x530 [ 586.559625][T14255] ? __pfx_futex_wake+0x10/0x10 [ 586.559680][T14255] ? __lock_acquire+0x4a5/0x2630 [ 586.559725][T14255] do_futex+0x32b/0x350 [ 586.559764][T14255] ? __pfx_do_futex+0x10/0x10 [ 586.559811][T14255] __x64_sys_futex+0x34f/0x4d0 [ 586.559852][T14255] ? fdget_pos+0x2c0/0x380 [ 586.559897][T14255] ? __pfx___x64_sys_futex+0x10/0x10 [ 586.559936][T14255] ? ksys_write+0x1ac/0x250 [ 586.559976][T14255] ? __pfx_ksys_write+0x10/0x10 [ 586.560020][T14255] ? rcu_is_watching+0x12/0xc0 [ 586.560067][T14255] do_syscall_64+0x10b/0xf80 [ 586.560121][T14255] ? clear_bhb_loop+0x40/0x90 [ 586.560163][T14255] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.560200][T14255] RIP: 0033:0x7fc27b59ce59 [ 586.560226][T14255] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 586.560260][T14255] RSP: 002b:00007fc27c4a20e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 586.560293][T14255] RAX: ffffffffffffffda RBX: 00007fc27b815fa8 RCX: 00007fc27b59ce59 [ 586.560318][T14255] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fc27b815fac [ 586.560339][T14255] RBP: 00007fc27b815fa0 R08: 0000000000000001 R09: 0000000000000000 [ 586.560360][T14255] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 586.560394][T14255] R13: 00007fc27b816038 R14: 00007ffd65675c20 R15: 00007ffd65675d08 [ 586.560440][T14255] [ 587.270907][T14260] MTRR 2 not used [ 588.058962][T14299] netlink: 246 bytes leftover after parsing attributes in process `syz.2.2624'. [ 588.629743][T14317] netlink: 206 bytes leftover after parsing attributes in process `syz.3.2628'. [ 589.715436][T14344] FAULT_INJECTION: forcing a failure. [ 589.715436][T14344] name failslab, interval 1, probability 0, space 0, times 0 [ 589.772183][T14344] CPU: 1 UID: 0 PID: 14344 Comm: syz.0.2642 Tainted: G U L syzkaller #0 PREEMPT(full) [ 589.772242][T14344] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 589.772262][T14344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 589.772283][T14344] Call Trace: [ 589.772294][T14344] [ 589.772306][T14344] dump_stack_lvl+0x100/0x190 [ 589.772353][T14344] should_fail_ex.cold+0x5/0xa [ 589.772398][T14344] should_failslab+0xc2/0x120 [ 589.772442][T14344] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 589.772502][T14344] ? sock_alloc_inode+0x26/0x290 [ 589.772568][T14344] ? __pfx_sock_alloc_inode+0x10/0x10 [ 589.772622][T14344] sock_alloc_inode+0x26/0x290 [ 589.772670][T14344] ? __pfx_sock_alloc_inode+0x10/0x10 [ 589.772718][T14344] alloc_inode+0x68/0x250 [ 589.772776][T14344] sock_alloc+0x44/0x280 [ 589.772818][T14344] ? security_socket_create+0x7f/0x250 [ 589.772877][T14344] sock_create_lite+0x82/0x120 [ 589.772926][T14344] __netlink_kernel_create+0xbd/0x750 [ 589.773105][T14344] ? __pfx___netlink_kernel_create+0x10/0x10 [ 589.773175][T14344] uevent_net_init+0xf8/0x330 [ 589.773221][T14344] ? __pfx_uevent_net_init+0x10/0x10 [ 589.773277][T14344] ? __pfx_uevent_net_rcv+0x10/0x10 [ 589.773323][T14344] ? __kmalloc_noprof+0x320/0x850 [ 589.773363][T14344] ? __pfx_uevent_net_init+0x10/0x10 [ 589.773405][T14344] ops_init+0x1e2/0x5f0 [ 589.773510][T14344] setup_net+0x118/0x3a0 [ 589.773557][T14344] ? __pfx_setup_net+0x10/0x10 [ 589.773605][T14344] ? mutex_init_lockdep+0xf1/0x120 [ 589.773651][T14344] copy_net_ns+0x46f/0x7c0 [ 589.773712][T14344] create_new_namespaces+0x3ea/0xac0 [ 589.773768][T14344] unshare_nsproxy_namespaces+0xf2/0x220 [ 589.773821][T14344] ksys_unshare+0x438/0xab0 [ 589.773884][T14344] ? __pfx_ksys_unshare+0x10/0x10 [ 589.773936][T14344] ? xfd_validate_state+0x129/0x190 [ 589.773971][T14344] ? exit_to_user_mode_loop+0xe2/0x4f0 [ 589.774021][T14344] __x64_sys_unshare+0x31/0x40 [ 589.774083][T14344] do_syscall_64+0x10b/0xf80 [ 589.774147][T14344] ? clear_bhb_loop+0x40/0x90 [ 589.774199][T14344] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 589.774236][T14344] RIP: 0033:0x7fc27b59ce59 [ 589.774280][T14344] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 589.774323][T14344] RSP: 002b:00007fc27c4a2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 589.774358][T14344] RAX: ffffffffffffffda RBX: 00007fc27b815fa0 RCX: 00007fc27b59ce59 [ 589.774382][T14344] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 589.774403][T14344] RBP: 00007fc27b632d6f R08: 0000000000000000 R09: 0000000000000000 [ 589.774430][T14344] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 589.774450][T14344] R13: 00007fc27b816038 R14: 00007fc27b815fa0 R15: 00007ffd65675d08 [ 589.774491][T14344] [ 589.774536][T14344] kobject_uevent: unable to create netlink socket! [ 592.826932][T14399] FAULT_INJECTION: forcing a failure. [ 592.826932][T14399] name failslab, interval 1, probability 0, space 0, times 0 [ 592.895232][T14399] CPU: 1 UID: 0 PID: 14399 Comm: syz.0.2650 Tainted: G U L syzkaller #0 PREEMPT(full) [ 592.895275][T14399] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 592.895284][T14399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 592.895299][T14399] Call Trace: [ 592.895308][T14399] [ 592.895317][T14399] dump_stack_lvl+0x100/0x190 [ 592.895349][T14399] should_fail_ex.cold+0x5/0xa [ 592.895382][T14399] should_failslab+0xc2/0x120 [ 592.895413][T14399] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 592.895461][T14399] ? ima_inode_get+0x11f/0x580 [ 592.895538][T14399] ima_inode_get+0x11f/0x580 [ 592.895589][T14399] process_measurement+0x1213/0x2350 [ 592.895636][T14399] ? stack_depot_save_flags+0x27/0x9d0 [ 592.895667][T14399] ? stack_trace_save+0x8e/0xc0 [ 592.895704][T14399] ? __pfx_process_measurement+0x10/0x10 [ 592.895745][T14399] ? __lock_acquire+0x4a5/0x2630 [ 592.895770][T14399] ? __kasan_slab_alloc+0x89/0x90 [ 592.895796][T14399] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 592.895839][T14399] ? init_file+0x95/0x480 [ 592.895872][T14399] ? alloc_empty_file+0x79/0x1c0 [ 592.895911][T14399] ? alloc_file_pseudo+0x13a/0x230 [ 592.895951][T14399] ? ksys_mmap_pgoff+0x242/0x610 [ 592.895980][T14399] ? __x64_sys_mmap+0x125/0x190 [ 592.896007][T14399] ? do_syscall_64+0x10b/0xf80 [ 592.896074][T14399] ? __pfx_aa_file_perm+0x10/0x10 [ 592.896117][T14399] ima_file_mmap+0x1c4/0x1f0 [ 592.896158][T14399] ? __pfx_ima_file_mmap+0x10/0x10 [ 592.896206][T14399] security_mmap_file+0x278/0x9b0 [ 592.896239][T14399] vm_mmap_pgoff+0xec/0x470 [ 592.896274][T14399] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 592.896305][T14399] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 592.896346][T14399] ? hugetlbfs_get_inode+0x3f5/0x700 [ 592.896394][T14399] ksys_mmap_pgoff+0x285/0x610 [ 592.896435][T14399] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 592.896467][T14399] ? __pfx___x64_sys_futex+0x10/0x10 [ 592.896496][T14399] ? __pfx___do_sys_prctl+0x10/0x10 [ 592.896527][T14399] __x64_sys_mmap+0x125/0x190 [ 592.896558][T14399] do_syscall_64+0x10b/0xf80 [ 592.896597][T14399] ? clear_bhb_loop+0x40/0x90 [ 592.896627][T14399] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 592.896653][T14399] RIP: 0033:0x7fc27b59ce59 [ 592.896674][T14399] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 592.896699][T14399] RSP: 002b:00007fc27c4a2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 592.896722][T14399] RAX: ffffffffffffffda RBX: 00007fc27b815fa0 RCX: 00007fc27b59ce59 [ 592.896739][T14399] RDX: 00004000000000df RSI: 0000000000000004 RDI: 0000000000000000 [ 592.896754][T14399] RBP: 00007fc27b632d6f R08: 0000000000000401 R09: 0000300000000000 [ 592.896770][T14399] R10: 0000000000040eb1 R11: 0000000000000246 R12: 0000000000000000 [ 592.896786][T14399] R13: 00007fc27b816038 R14: 00007fc27b815fa0 R15: 00007ffd65675d08 [ 592.896817][T14399] [ 593.656595][T14415] netlink: 'syz.0.2655': attribute type 19 has an invalid length. [ 593.665751][T14415] netlink: 226 bytes leftover after parsing attributes in process `syz.0.2655'. [ 594.188415][T14428] netlink: 25 bytes leftover after parsing attributes in process `syz.0.2659'. [ 595.094926][T14439] netlink: 202 bytes leftover after parsing attributes in process `syz.2.2663'. [ 595.466066][T14454] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2668'. [ 595.507441][T14454] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 595.557343][T14454] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 596.818158][T14470] FAULT_INJECTION: forcing a failure. [ 596.818158][T14470] name failslab, interval 1, probability 0, space 0, times 0 [ 596.840745][T14470] CPU: 1 UID: 0 PID: 14470 Comm: syz.1.2672 Tainted: G U L syzkaller #0 PREEMPT(full) [ 596.840799][T14470] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 596.840810][T14470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 596.840828][T14470] Call Trace: [ 596.840838][T14470] [ 596.840849][T14470] dump_stack_lvl+0x100/0x190 [ 596.840889][T14470] should_fail_ex.cold+0x5/0xa [ 596.840931][T14470] should_failslab+0xc2/0x120 [ 596.840966][T14470] __kmalloc_cache_noprof+0x7a/0x6f0 [ 596.841010][T14470] ? snd_seq_oss_timer_new+0x43/0x230 [ 596.841161][T14470] ? __raw_spin_lock_init+0x3a/0x110 [ 596.841203][T14470] snd_seq_oss_timer_new+0x43/0x230 [ 596.841248][T14470] snd_seq_oss_open+0x4fc/0xa10 [ 596.841297][T14470] odev_open+0x6f/0x90 [ 596.841333][T14470] ? __pfx_odev_open+0x10/0x10 [ 596.841372][T14470] soundcore_open+0x2e3/0x5a0 [ 596.841467][T14470] ? __pfx_soundcore_open+0x10/0x10 [ 596.841512][T14470] chrdev_open+0x234/0x6a0 [ 596.841557][T14470] ? __pfx_apparmor_file_open+0x10/0x10 [ 596.841615][T14470] ? __pfx_chrdev_open+0x10/0x10 [ 596.841656][T14470] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 596.841704][T14470] do_dentry_open+0x6d8/0x1660 [ 596.841738][T14470] ? __pfx_chrdev_open+0x10/0x10 [ 596.841784][T14470] vfs_open+0x82/0x3f0 [ 596.841831][T14470] path_openat+0x208c/0x31a0 [ 596.841880][T14470] ? __pfx_path_openat+0x10/0x10 [ 596.841936][T14470] do_file_open+0x20e/0x430 [ 596.841976][T14470] ? __pfx_do_file_open+0x10/0x10 [ 596.842039][T14470] ? alloc_fd+0x476/0x790 [ 596.842088][T14470] ? do_getname+0x191/0x390 [ 596.842135][T14470] do_sys_openat2+0x10d/0x1e0 [ 596.842181][T14470] ? __pfx_do_sys_openat2+0x10/0x10 [ 596.842240][T14470] __x64_sys_openat+0x12d/0x210 [ 596.842287][T14470] ? __pfx___x64_sys_openat+0x10/0x10 [ 596.842340][T14470] ? rcu_is_watching+0x12/0xc0 [ 596.842379][T14470] do_syscall_64+0x10b/0xf80 [ 596.842423][T14470] ? clear_bhb_loop+0x40/0x90 [ 596.842458][T14470] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 596.842487][T14470] RIP: 0033:0x7f97dad9ce59 [ 596.842512][T14470] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 596.842540][T14470] RSP: 002b:00007f97dbc01028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 596.842570][T14470] RAX: ffffffffffffffda RBX: 00007f97db015fa0 RCX: 00007f97dad9ce59 [ 596.842592][T14470] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 596.842611][T14470] RBP: 00007f97dae32d6f R08: 0000000000000000 R09: 0000000000000000 [ 596.842629][T14470] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 596.842646][T14470] R13: 00007f97db016038 R14: 00007f97db015fa0 R15: 00007ffc4b546c08 [ 596.842684][T14470] [ 596.845436][T14470] ALSA: seq_oss: can't alloc timer [ 599.455142][T14515] netlink: 'syz.3.2684': attribute type 11 has an invalid length. [ 599.560463][T13814] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 600.212441][T14533] netlink: 252 bytes leftover after parsing attributes in process `syz.2.2692'. [ 600.241249][T14533] netlink: 252 bytes leftover after parsing attributes in process `syz.2.2692'. [ 601.118622][T14553] zswap: compressor not available [ 601.972711][T14571] usb usb37: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 602.012154][T14571] vhci_hcd vhci_hcd.2: default hub control req: 0000 v0000 i0000 l0 [ 603.853721][ T50] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 603.886147][T14614] netlink: 62 bytes leftover after parsing attributes in process `syz.2.2715'. [ 605.033125][T14636] zswap: compressor not available [ 609.588318][T14716] FAULT_INJECTION: forcing a failure. [ 609.588318][T14716] name failslab, interval 1, probability 0, space 0, times 0 [ 609.622656][T14716] CPU: 0 UID: 0 PID: 14716 Comm: syz.1.2755 Tainted: G U L syzkaller #0 PREEMPT(full) [ 609.622715][T14716] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 609.622729][T14716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 609.622750][T14716] Call Trace: [ 609.622762][T14716] [ 609.622774][T14716] dump_stack_lvl+0x100/0x190 [ 609.622819][T14716] should_fail_ex.cold+0x5/0xa [ 609.622863][T14716] should_failslab+0xc2/0x120 [ 609.622905][T14716] __kmalloc_cache_noprof+0x7a/0x6f0 [ 609.622955][T14716] ? trace_pid_list_alloc+0x2fe/0x480 [ 609.623013][T14716] trace_pid_list_alloc+0x2fe/0x480 [ 609.623080][T14716] trace_pid_write+0x110/0x460 [ 609.623136][T14716] ? __pfx_trace_pid_write+0x10/0x10 [ 609.623211][T14716] event_pid_write.isra.0+0x1e4/0x7d0 [ 609.623266][T14716] ? __pfx_event_pid_write.isra.0+0x10/0x10 [ 609.623332][T14716] vfs_write+0x2aa/0x1070 [ 609.623372][T14716] ? __pfx_ftrace_event_npid_write+0x10/0x10 [ 609.623430][T14716] ? __pfx_vfs_write+0x10/0x10 [ 609.623469][T14716] ? __fget_files+0x215/0x3d0 [ 609.623521][T14716] ? __fget_files+0x21f/0x3d0 [ 609.623568][T14716] ksys_write+0x12a/0x250 [ 609.623607][T14716] ? __pfx_ksys_write+0x10/0x10 [ 609.623653][T14716] ? rcu_is_watching+0x12/0xc0 [ 609.623702][T14716] do_syscall_64+0x10b/0xf80 [ 609.623755][T14716] ? clear_bhb_loop+0x40/0x90 [ 609.623797][T14716] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 609.623832][T14716] RIP: 0033:0x7f97dad9ce59 [ 609.623860][T14716] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 609.623893][T14716] RSP: 002b:00007f97dbc01028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 609.623926][T14716] RAX: ffffffffffffffda RBX: 00007f97db015fa0 RCX: 00007f97dad9ce59 [ 609.623950][T14716] RDX: 00000000fffffdef RSI: 0000000000000000 RDI: 0000000000000003 [ 609.623971][T14716] RBP: 00007f97dae32d6f R08: 0000000000000000 R09: 0000000000000000 [ 609.623992][T14716] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 609.624012][T14716] R13: 00007f97db016038 R14: 00007f97db015fa0 R15: 00007ffc4b546c08 [ 609.624073][T14716] [ 611.825879][T14744] netlink: 'syz.1.2750': attribute type 11 has an invalid length. [ 612.352985][ T50] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 614.600702][T14767] kexec: Could not allocate control_code_buffer [ 621.724511][T14866] kexec: Could not allocate control_code_buffer [ 624.454926][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.465559][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.267269][T14937] bond0: invalid ARP target specified [ 631.109305][T15040] netlink: zone id is out of range [ 631.132008][T15040] netlink: zone id is out of range [ 631.152291][T15040] netlink: zone id is out of range [ 631.219130][T15040] netlink: zone id is out of range [ 631.245842][T15040] netlink: zone id is out of range [ 631.268981][T15040] netlink: zone id is out of range [ 631.309012][T15040] netlink: zone id is out of range [ 631.335902][T15040] netlink: zone id is out of range [ 631.366073][T15040] netlink: zone id is out of range [ 631.374928][T15040] netlink: zone id is out of range [ 632.134128][T15058] netlink: 98 bytes leftover after parsing attributes in process `syz.0.2847'. [ 632.182643][T15058] netlink: 50 bytes leftover after parsing attributes in process `syz.0.2847'. [ 632.442759][T15035] kexec: Could not allocate control_code_buffer [ 635.558909][T15126] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2853'. [ 635.630572][T15126] virt_wifi0: entered allmulticast mode [ 636.549039][T15143] smpboot: CPU 1 is now offline [ 637.465341][T15152] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 637.501770][T15137] ------------[ cut here ]------------ [ 637.502682][T15137] [ 637.502694][T15137] ====================================================== [ 637.502706][T15137] WARNING: possible circular locking dependency detected [ 637.502723][T15137] syzkaller #0 Tainted: G U L [ 637.502740][T15137] ------------------------------------------------------ [ 637.502750][T15137] syz.3.2858/15137 is trying to acquire lock: [ 637.502767][T15137] ffffffff8e6f1560 (console_owner){-.-.}-{0:0}, at: console_lock_spinning_enable+0x61/0x80 [ 637.502890][T15137] [ 637.502890][T15137] but task is already holding lock: [ 637.502899][T15137] ffff8880b843b3e0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x88/0x140 [ 637.502977][T15137] [ 637.502977][T15137] which lock already depends on the new lock. [ 637.502977][T15137] [ 637.502987][T15137] [ 637.502987][T15137] the existing dependency chain (in reverse order) is: [ 637.502998][T15137] [ 637.502998][T15137] -> #4 (&rq->__lock){-.-.}-{2:2}: [ 637.503039][T15137] _raw_spin_lock_nested+0x31/0x40 [ 637.503119][T15137] raw_spin_rq_lock_nested+0x2c/0x140 [ 637.503158][T15137] _task_rq_lock+0xcf/0x510 [ 637.503197][T15137] cgroup_move_task+0x81/0x320 [ 637.503244][T15137] css_set_move_task+0x285/0x600 [ 637.503280][T15137] cgroup_post_fork+0x202/0x9b0 [ 637.503324][T15137] copy_process+0x5b9a/0x7ed0 [ 637.503371][T15137] kernel_clone+0x12e/0x9c0 [ 637.503410][T15137] user_mode_thread+0xcc/0x110 [ 637.503450][T15137] rest_init+0x21/0x260 [ 637.503486][T15137] start_kernel+0x484/0x490 [ 637.503615][T15137] x86_64_start_reservations+0x24/0x30 [ 637.503687][T15137] x86_64_start_kernel+0x12b/0x130 [ 637.503732][T15137] common_startup_64+0x13e/0x148 [ 637.503792][T15137] [ 637.503792][T15137] -> #3 (&p->pi_lock){-.-.}-{2:2}: [ 637.503830][T15137] _raw_spin_lock_irqsave+0x3a/0x60 [ 637.503871][T15137] try_to_wake_up+0xb5/0x1900 [ 637.503909][T15137] __wake_up_common+0x135/0x1f0 [ 637.503935][T15137] __wake_up+0x31/0x60 [ 637.503978][T15137] tty_port_default_wakeup+0x52/0x70 [ 637.504081][T15137] serial8250_tx_chars+0x68f/0x860 [ 637.504133][T15137] serial8250_handle_irq_locked+0x5e6/0x7e0 [ 637.504164][T15137] serial8250_handle_irq.part.0+0xb4/0x530 [ 637.504194][T15137] serial8250_default_handle_irq+0xc2/0x290 [ 637.504225][T15137] serial8250_interrupt+0xf8/0x1c0 [ 637.504280][T15137] __handle_irq_event_percpu+0x235/0x8c0 [ 637.504319][T15137] handle_irq_event+0xab/0x1e0 [ 637.504355][T15137] handle_edge_irq+0x35e/0x960 [ 637.504389][T15137] __common_interrupt+0xd8/0x2f0 [ 637.504441][T15137] common_interrupt+0xb9/0xe0 [ 637.504480][T15137] asm_common_interrupt+0x26/0x40 [ 637.504524][T15137] unwind_next_frame+0x14f0/0x2090 [ 637.504568][T15137] arch_stack_walk+0x94/0xf0 [ 637.504605][T15137] stack_trace_save+0x8e/0xc0 [ 637.504649][T15137] kasan_save_stack+0x30/0x50 [ 637.504694][T15137] kasan_save_track+0x14/0x30 [ 637.504721][T15137] __kasan_slab_alloc+0x89/0x90 [ 637.504751][T15137] kmem_cache_alloc_from_sheaf_noprof+0xa9/0x190 [ 637.504790][T15137] dst_setup+0x339/0x950 [ 637.504833][T15137] mas_wr_split+0xa79/0x3960 [ 637.504859][T15137] mas_wr_store_entry+0xd06/0x1e80 [ 637.504889][T15137] mas_store_prealloc+0x6df/0x1090 [ 637.504918][T15137] __mmap_region+0x181e/0x2da0 [ 637.504962][T15137] mmap_region+0x35d/0x620 [ 637.504988][T15137] do_mmap+0xc63/0x12f0 [ 637.505021][T15137] vm_mmap_pgoff+0x29e/0x470 [ 637.505064][T15137] ksys_mmap_pgoff+0xe4/0x610 [ 637.505098][T15137] __x64_sys_mmap+0x125/0x190 [ 637.505129][T15137] do_syscall_64+0x10b/0xf80 [ 637.505174][T15137] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 637.505203][T15137] [ 637.505203][T15137] -> #2 (&tty->write_wait){-.-.}-{3:3}: [ 637.505242][T15137] _raw_spin_lock_irqsave+0x3a/0x60 [ 637.505283][T15137] __wake_up+0x1c/0x60 [ 637.505324][T15137] tty_port_default_wakeup+0x52/0x70 [ 637.505352][T15137] serial8250_tx_chars+0x68f/0x860 [ 637.505380][T15137] serial8250_handle_irq_locked+0x5e6/0x7e0 [ 637.505410][T15137] serial8250_handle_irq.part.0+0xb4/0x530 [ 637.505441][T15137] serial8250_default_handle_irq+0xc2/0x290 [ 637.505478][T15137] serial8250_interrupt+0xf8/0x1c0 [ 637.505513][T15137] __handle_irq_event_percpu+0x235/0x8c0 [ 637.505551][T15137] handle_irq_event+0xab/0x1e0 [ 637.505587][T15137] handle_edge_irq+0x35e/0x960 [ 637.505620][T15137] __common_interrupt+0xd8/0x2f0 [ 637.505667][T15137] common_interrupt+0xb9/0xe0 [ 637.505699][T15137] asm_common_interrupt+0x26/0x40 [ 637.505728][T15137] pv_native_safe_halt+0xf/0x20 [ 637.505771][T15137] default_idle+0x9/0x10 [ 637.505798][T15137] default_idle_call+0x6c/0xb0 [ 637.505828][T15137] do_idle+0x464/0x590 [ 637.505863][T15137] cpu_startup_entry+0x4f/0x60 [ 637.505901][T15137] rest_init+0x251/0x260 [ 637.505932][T15137] start_kernel+0x484/0x490 [ 637.505972][T15137] x86_64_start_reservations+0x24/0x30 [ 637.506018][T15137] x86_64_start_kernel+0x12b/0x130 [ 637.506062][T15137] common_startup_64+0x13e/0x148 [ 637.506100][T15137] [ 637.506100][T15137] -> #1 (&port_lock_key){-.-.}-{3:3}: [ 637.506137][T15137] _raw_spin_lock_irqsave+0x3a/0x60 [ 637.506177][T15137] serial8250_console_write+0x17e/0x1900 [ 637.506233][T15137] console_flush_one_record+0x790/0xe50 [ 637.506271][T15137] console_unlock+0x103/0x260 [ 637.506306][T15137] vprintk_emit+0x407/0x6b0 [ 637.506343][T15137] _printk+0xcf/0x110 [ 637.506369][T15137] register_console.cold+0xc0/0x248 [ 637.506399][T15137] univ8250_console_init+0x6f/0x80 [ 637.506475][T15137] console_init+0x3f7/0x5e0 [ 637.506509][T15137] start_kernel+0x30a/0x490 [ 637.506549][T15137] x86_64_start_reservations+0x24/0x30 [ 637.506596][T15137] x86_64_start_kernel+0x12b/0x130 [ 637.506640][T15137] common_startup_64+0x13e/0x148 [ 637.506679][T15137] [ 637.506679][T15137] -> #0 (console_owner){-.-.}-{0:0}: [ 637.506716][T15137] __lock_acquire+0x14b8/0x2630 [ 637.506743][T15137] lock_acquire+0x1b1/0x370 [ 637.506768][T15137] console_lock_spinning_enable+0x72/0x80 [ 637.506804][T15137] console_flush_one_record+0x739/0xe50 [ 637.506841][T15137] console_unlock+0x103/0x260 [ 637.506876][T15137] vprintk_emit+0x407/0x6b0 [ 637.506913][T15137] _printk+0xcf/0x110 [ 637.506938][T15137] __report_bug.cold+0x15/0x137 [ 637.506977][T15137] report_bug+0xb2/0x220 [ 637.507067][T15137] handle_bug+0x16a/0x2a0 [ 637.507095][T15137] exc_invalid_op+0x17/0x50 [ 637.507124][T15137] asm_exc_invalid_op+0x1a/0x20 [ 637.507150][T15137] update_rq_clock+0x40a/0xd20 [ 637.507192][T15137] __schedule+0x1e84/0x67a0 [ 637.507232][T15137] preempt_schedule_irq+0x50/0x90 [ 637.507294][T15137] irqentry_exit+0x205/0x7e0 [ 637.507339][T15137] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 637.507372][T15137] __sanitizer_cov_trace_pc+0x3f/0x70 [ 637.507421][T15137] __vb2_queue_free+0x5fd/0xa30 [ 637.507485][T15137] vb2_core_queue_release+0x70/0x190 [ 637.507522][T15137] _vb2_fop_release+0xe8/0x280 [ 637.507553][T15137] vivid_fop_release+0x155/0xc30 [ 637.507630][T15137] v4l2_release+0x1cf/0x390 [ 637.507741][T15137] __fput+0x3ff/0xb50 [ 637.507792][T15137] task_work_run+0x150/0x240 [ 637.507823][T15137] get_signal+0x1b9/0x2210 [ 637.507859][T15137] arch_do_signal_or_restart+0x91/0x7a0 [ 637.507903][T15137] exit_to_user_mode_loop+0x8b/0x4f0 [ 637.507932][T15137] do_syscall_64+0x6f2/0xf80 [ 637.507976][T15137] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 637.508005][T15137] [ 637.508005][T15137] other info that might help us debug this: [ 637.508005][T15137] [ 637.508014][T15137] Chain exists of: [ 637.508014][T15137] console_owner --> &p->pi_lock --> &rq->__lock [ 637.508014][T15137] [ 637.508057][T15137] Possible unsafe locking scenario: [ 637.508057][T15137] [ 637.508065][T15137] CPU0 CPU1 [ 637.508073][T15137] ---- ---- [ 637.508082][T15137] lock(&rq->__lock); [ 637.508099][T15137] lock(&p->pi_lock); [ 637.508119][T15137] lock(&rq->__lock); [ 637.508138][T15137] lock(console_owner); [ 637.508156][T15137] [ 637.508156][T15137] *** DEADLOCK *** [ 637.508156][T15137] [ 637.508163][T15137] 6 locks held by syz.3.2858/15137: [ 637.508180][T15137] #0: ffff888030310438 (&mdev->req_queue_mutex){+.+.}-{4:4}, at: v4l2_release+0x179/0x390 [ 637.508267][T15137] #1: ffff888030315e10 (&dev->mutex#3){+.+.}-{4:4}, at: _vb2_fop_release+0x43/0x280 [ 637.508344][T15137] #2: ffff8880303184c0 (&q->mmap_lock){+.+.}-{4:4}, at: vb2_core_queue_release+0x31/0x190 [ 637.508420][T15137] #3: ffff8880b843b3e0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x88/0x140 [ 637.508505][T15137] #4: ffffffff8e7d19a0 (console_lock){+.+.}-{0:0}, at: _printk+0xcf/0x110 [ 637.508569][T15137] #5: ffffffff8e7d1a18 (console_srcu){....}-{0:0}, at: console_flush_one_record+0xfd/0xe50 [ 637.508647][T15137] [ 637.508647][T15137] stack backtrace: [ 637.508664][T15137] CPU: 0 UID: 0 PID: 15137 Comm: syz.3.2858 Tainted: G U L syzkaller #0 PREEMPT(full) [ 637.508711][T15137] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 637.508723][T15137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 637.508742][T15137] Call Trace: [ 637.508760][T15137] [ 637.508772][T15137] dump_stack_lvl+0x100/0x190 [ 637.508803][T15137] print_circular_bug.cold+0x178/0x1c7 [ 637.508854][T15137] check_noncircular+0x146/0x160 [ 637.508906][T15137] __lock_acquire+0x14b8/0x2630 [ 637.508941][T15137] lock_acquire+0x1b1/0x370 [ 637.508969][T15137] ? console_lock_spinning_enable+0x61/0x80 [ 637.509009][T15137] ? console_lock_spinning_enable+0x4a/0x80 [ 637.509052][T15137] console_lock_spinning_enable+0x72/0x80 [ 637.509090][T15137] ? console_lock_spinning_enable+0x61/0x80 [ 637.509128][T15137] console_flush_one_record+0x739/0xe50 [ 637.509172][T15137] ? __pfx_console_flush_one_record+0x10/0x10 [ 637.509218][T15137] ? is_printk_cpu_sync_owner+0x32/0x40 [ 637.509265][T15137] console_unlock+0x103/0x260 [ 637.509303][T15137] ? __pfx_console_unlock+0x10/0x10 [ 637.509343][T15137] ? do_raw_spin_unlock+0x145/0x1e0 [ 637.509380][T15137] ? _printk+0xcf/0x110 [ 637.509410][T15137] vprintk_emit+0x407/0x6b0 [ 637.509451][T15137] ? __pfx_vprintk_emit+0x10/0x10 [ 637.509497][T15137] ? __lock_acquire+0x4a5/0x2630 [ 637.509529][T15137] _printk+0xcf/0x110 [ 637.509556][T15137] ? __pfx__printk+0x10/0x10 [ 637.509590][T15137] ? __report_bug.cold+0x5/0x137 [ 637.509621][T15137] __report_bug.cold+0x15/0x137 [ 637.509649][T15137] ? update_rq_clock+0x40a/0xd20 [ 637.509693][T15137] ? __pfx___report_bug+0x10/0x10 [ 637.509736][T15137] ? do_raw_spin_unlock+0x145/0x1e0 [ 637.509772][T15137] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 637.509818][T15137] ? debug_object_activate+0x331/0x490 [ 637.509901][T15137] ? __pfx_debug_object_activate+0x10/0x10 [ 637.509951][T15137] ? update_rq_clock+0x40a/0xd20 [ 637.509994][T15137] report_bug+0xb2/0x220 [ 637.510036][T15137] ? update_rq_clock+0x40a/0xd20 [ 637.510078][T15137] handle_bug+0x16a/0x2a0 [ 637.510108][T15137] exc_invalid_op+0x17/0x50 [ 637.510138][T15137] asm_exc_invalid_op+0x1a/0x20 [ 637.510168][T15137] RIP: 0010:update_rq_clock+0x40a/0xd20 [ 637.510213][T15137] Code: ab 88 0b 00 00 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc a8 04 0f 84 df fc ff ff 90 0f 0b 90 e9 d6 fc ff ff 90 <0f> 0b 90 e9 92 fc ff ff 4c 8d 83 80 0b 00 00 48 b8 00 00 00 00 00 [ 637.510244][T15137] RSP: 0018:ffffc90004127738 EFLAGS: 00010046 [ 637.510268][T15137] RAX: 0000000000000000 RBX: ffff8880b853b380 RCX: 0000000000000001 [ 637.510287][T15137] RDX: 0000000000000046 RSI: ffffffff8def921a RDI: ffffffff8c1c3a00 [ 637.510307][T15137] RBP: ffffc900041278e8 R08: 0000000000000001 R09: 0000000000000001 [ 637.510326][T15137] R10: ffffffff90d7fb57 R11: 0000000000000000 R12: ffffffff90d82ec4 [ 637.510344][T15137] R13: ffff8880b853c220 R14: ffff88801e681ec0 R15: ffff8880b853b380 [ 637.510373][T15137] ? update_rq_clock+0x9c/0xd20 [ 637.510419][T15137] __schedule+0x1e84/0x67a0 [ 637.510460][T15137] ? ktime_get+0x1a4/0x320 [ 637.510523][T15137] ? __pfx___schedule+0x10/0x10 [ 637.510568][T15137] ? mark_held_locks+0x40/0x70 [ 637.510597][T15137] preempt_schedule_irq+0x50/0x90 [ 637.510642][T15137] irqentry_exit+0x205/0x7e0 [ 637.510692][T15137] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 637.510725][T15137] RIP: 0010:__sanitizer_cov_trace_pc+0x3f/0x70 [ 637.510772][T15137] Code: 02 12 a9 00 01 ff 00 74 1b f6 c4 01 74 07 a9 00 00 ff 00 74 05 e9 11 80 83 09 8b 82 d4 16 00 00 85 c0 74 f1 8b 82 b0 16 00 00 <83> f8 02 75 e6 48 8b 8a b8 16 00 00 8b 92 b4 16 00 00 48 8b 01 48 [ 637.510801][T15137] RSP: 0018:ffffc90004127a00 EFLAGS: 00000246 [ 637.510823][T15137] RAX: 0000000000000002 RBX: 000000000000722c RCX: ffffffff87fc3553 [ 637.510841][T15137] RDX: ffff8880281bbd80 RSI: ffffffff87fc344d RDI: ffff8880281bbd80 [ 637.510862][T15137] RBP: ffff8880303183b8 R08: 0000000000000004 R09: 000000000000722c [ 637.510880][T15137] R10: 0000000000008000 R11: 0000000000000000 R12: dffffc0000000000 [ 637.510899][T15137] R13: 000000000000722b R14: 0000000000008000 R15: 1ffff110060630a0 [ 637.510922][T15137] ? __vb2_queue_free+0x703/0xa30 [ 637.510957][T15137] ? __vb2_queue_free+0x5fd/0xa30 [ 637.510996][T15137] __vb2_queue_free+0x5fd/0xa30 [ 637.511038][T15137] vb2_core_queue_release+0x70/0x190 [ 637.511077][T15137] _vb2_fop_release+0xe8/0x280 [ 637.511111][T15137] vivid_fop_release+0x155/0xc30 [ 637.511158][T15137] v4l2_release+0x1cf/0x390 [ 637.511207][T15137] ? __pfx_v4l2_release+0x10/0x10 [ 637.511255][T15137] __fput+0x3ff/0xb50 [ 637.511300][T15137] task_work_run+0x150/0x240 [ 637.511331][T15137] ? __pfx_task_work_run+0x10/0x10 [ 637.511366][T15137] get_signal+0x1b9/0x2210 [ 637.511408][T15137] ? poll_select_finish+0x36e/0x670 [ 637.511443][T15137] ? __pfx_get_signal+0x10/0x10 [ 637.511492][T15137] arch_do_signal_or_restart+0x91/0x7a0 [ 637.511540][T15137] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 637.511595][T15137] ? rcu_is_watching+0x12/0xc0 [ 637.511634][T15137] exit_to_user_mode_loop+0x8b/0x4f0 [ 637.511663][T15137] ? rcu_is_watching+0x12/0xc0 [ 637.511702][T15137] do_syscall_64+0x6f2/0xf80 [ 637.511747][T15137] ? clear_bhb_loop+0x40/0x90 [ 637.511782][T15137] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 637.511813][T15137] RIP: 0033:0x7fa6d879ce59 [ 637.511836][T15137] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 637.511865][T15137] RSP: 002b:00007fa6d971d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000017 [ 637.511892][T15137] RAX: 0000000000000006 RBX: 00007fa6d8a16090 RCX: 00007fa6d879ce59 [ 637.511911][T15137] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000e [ 637.511928][T15137] RBP: 00007fa6d8832d6f R08: 0000000000000000 R09: 0000000000000000 [ 637.511946][T15137] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000000 [ 637.511965][T15137] R13: 00007fa6d8a16128 R14: 00007fa6d8a16090 R15: 00007ffd0eef1358 [ 637.511995][T15137] [ 638.985105][T15137] debug_locks && !(lock_is_held(&(__rq_lockp(rq))->dep_map) != 0) [ 638.985142][T15137] WARNING: kernel/sched/sched.h:1612 at update_rq_clock+0x40a/0xd20, CPU#0: syz.3.2858/15137 [ 639.003176][T15137] Modules linked in: [ 639.007138][T15137] CPU: 0 UID: 0 PID: 15137 Comm: syz.3.2858 Tainted: G U L syzkaller #0 PREEMPT(full) [ 639.018126][T15137] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 639.023345][T15137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 639.033781][T15137] RIP: 0010:update_rq_clock+0x40a/0xd20 [ 639.039383][T15137] Code: ab 88 0b 00 00 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc a8 04 0f 84 df fc ff ff 90 0f 0b 90 e9 d6 fc ff ff 90 <0f> 0b 90 e9 92 fc ff ff 4c 8d 83 80 0b 00 00 48 b8 00 00 00 00 00 [ 639.059031][T15137] RSP: 0018:ffffc90004127738 EFLAGS: 00010046 [ 639.065136][T15137] RAX: 0000000000000000 RBX: ffff8880b853b380 RCX: 0000000000000001 [ 639.073157][T15137] RDX: 0000000000000046 RSI: ffffffff8def921a RDI: ffffffff8c1c3a00 [ 639.081169][T15137] RBP: ffffc900041278e8 R08: 0000000000000001 R09: 0000000000000001 [ 639.089172][T15137] R10: ffffffff90d7fb57 R11: 0000000000000000 R12: ffffffff90d82ec4 [ 639.097175][T15137] R13: ffff8880b853c220 R14: ffff88801e681ec0 R15: ffff8880b853b380 [ 639.105175][T15137] FS: 00007fa6d971d6c0(0000) GS:ffff888124374000(0000) knlGS:0000000000000000 [ 639.114143][T15137] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 639.120774][T15137] CR2: 0000001b349fbff8 CR3: 0000000025d04000 CR4: 00000000003526f0 [ 639.128779][T15137] Call Trace: [ 639.132086][T15137] [ 639.135045][T15137] __schedule+0x1e84/0x67a0 [ 639.139607][T15137] ? ktime_get+0x1a4/0x320 [ 639.144093][T15137] ? __pfx___schedule+0x10/0x10 [ 639.148998][T15137] ? mark_held_locks+0x40/0x70 [ 639.153804][T15137] preempt_schedule_irq+0x50/0x90 [ 639.158880][T15137] irqentry_exit+0x205/0x7e0 [ 639.163531][T15137] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 639.169556][T15137] RIP: 0010:__sanitizer_cov_trace_pc+0x3f/0x70 [ 639.175773][T15137] Code: 02 12 a9 00 01 ff 00 74 1b f6 c4 01 74 07 a9 00 00 ff 00 74 05 e9 11 80 83 09 8b 82 d4 16 00 00 85 c0 74 f1 8b 82 b0 16 00 00 <83> f8 02 75 e6 48 8b 8a b8 16 00 00 8b 92 b4 16 00 00 48 8b 01 48 [ 639.195420][T15137] RSP: 0018:ffffc90004127a00 EFLAGS: 00000246 [ 639.201523][T15137] RAX: 0000000000000002 RBX: 000000000000722c RCX: ffffffff87fc3553 [ 639.209522][T15137] RDX: ffff8880281bbd80 RSI: ffffffff87fc344d RDI: ffff8880281bbd80 [ 639.217528][T15137] RBP: ffff8880303183b8 R08: 0000000000000004 R09: 000000000000722c [ 639.225531][T15137] R10: 0000000000008000 R11: 0000000000000000 R12: dffffc0000000000 [ 639.233534][T15137] R13: 000000000000722b R14: 0000000000008000 R15: 1ffff110060630a0 [ 639.241545][T15137] ? __vb2_queue_free+0x703/0xa30 [ 639.246651][T15137] ? __vb2_queue_free+0x5fd/0xa30 [ 639.251726][T15137] __vb2_queue_free+0x5fd/0xa30 [ 639.256634][T15137] vb2_core_queue_release+0x70/0x190 [ 639.261979][T15137] _vb2_fop_release+0xe8/0x280 [ 639.267222][T15137] vivid_fop_release+0x155/0xc30 [ 639.272215][T15137] v4l2_release+0x1cf/0x390 [ 639.276777][T15137] ? __pfx_v4l2_release+0x10/0x10 [ 639.281857][T15137] __fput+0x3ff/0xb50 [ 639.285896][T15137] task_work_run+0x150/0x240 [ 639.290526][T15137] ? __pfx_task_work_run+0x10/0x10 [ 639.295684][T15137] get_signal+0x1b9/0x2210 [ 639.300150][T15137] ? poll_select_finish+0x36e/0x670 [ 639.305396][T15137] ? __pfx_get_signal+0x10/0x10 [ 639.310299][T15137] arch_do_signal_or_restart+0x91/0x7a0 [ 639.315901][T15137] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 639.322112][T15137] ? rcu_is_watching+0x12/0xc0 [ 639.326919][T15137] exit_to_user_mode_loop+0x8b/0x4f0 [ 639.332240][T15137] ? rcu_is_watching+0x12/0xc0 [ 639.337054][T15137] do_syscall_64+0x6f2/0xf80 [ 639.341724][T15137] ? clear_bhb_loop+0x40/0x90 [ 639.346443][T15137] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 639.352375][T15137] RIP: 0033:0x7fa6d879ce59 [ 639.356916][T15137] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 639.376563][T15137] RSP: 002b:00007fa6d971d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000017 [ 639.385032][T15137] RAX: 0000000000000006 RBX: 00007fa6d8a16090 RCX: 00007fa6d879ce59 [ 639.393039][T15137] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000e [ 639.401039][T15137] RBP: 00007fa6d8832d6f R08: 0000000000000000 R09: 0000000000000000 [ 639.409045][T15137] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000000 [ 639.417050][T15137] R13: 00007fa6d8a16128 R14: 00007fa6d8a16090 R15: 00007ffd0eef1358 [ 639.425065][T15137] [ 639.428125][T15137] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 639.435443][T15137] CPU: 0 UID: 0 PID: 15137 Comm: syz.3.2858 Tainted: G U L syzkaller #0 PREEMPT(full) [ 639.446423][T15137] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 639.451664][T15137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 639.461753][T15137] Call Trace: [ 639.465059][T15137] [ 639.468015][T15137] dump_stack_lvl+0x100/0x190 [ 639.472737][T15137] vpanic+0x552/0x970 [ 639.476758][T15137] ? __pfx_vpanic+0x10/0x10 [ 639.481308][T15137] ? lock_release+0x245/0x310 [ 639.486058][T15137] panic+0xd1/0xe0 [ 639.489813][T15137] ? __pfx_panic+0x10/0x10 [ 639.494280][T15137] check_panic_on_warn.cold+0x19/0x34 [ 639.499781][T15137] ? update_rq_clock+0x40a/0xd20 [ 639.504773][T15137] __warn.cold+0x191/0x328 [ 639.509236][T15137] __report_bug+0x296/0x3d0 [ 639.513797][T15137] ? update_rq_clock+0x40a/0xd20 [ 639.518788][T15137] ? __pfx___report_bug+0x10/0x10 [ 639.523864][T15137] ? do_raw_spin_unlock+0x145/0x1e0 [ 639.529112][T15137] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 639.534986][T15137] ? debug_object_activate+0x331/0x490 [ 639.540510][T15137] ? __pfx_debug_object_activate+0x10/0x10 [ 639.546376][T15137] ? update_rq_clock+0x40a/0xd20 [ 639.551365][T15137] report_bug+0xb2/0x220 [ 639.555661][T15137] ? update_rq_clock+0x40a/0xd20 [ 639.560650][T15137] handle_bug+0x16a/0x2a0 [ 639.565016][T15137] exc_invalid_op+0x17/0x50 [ 639.569561][T15137] asm_exc_invalid_op+0x1a/0x20 [ 639.574460][T15137] RIP: 0010:update_rq_clock+0x40a/0xd20 [ 639.580155][T15137] Code: ab 88 0b 00 00 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc a8 04 0f 84 df fc ff ff 90 0f 0b 90 e9 d6 fc ff ff 90 <0f> 0b 90 e9 92 fc ff ff 4c 8d 83 80 0b 00 00 48 b8 00 00 00 00 00 [ 639.599801][T15137] RSP: 0018:ffffc90004127738 EFLAGS: 00010046 [ 639.605909][T15137] RAX: 0000000000000000 RBX: ffff8880b853b380 RCX: 0000000000000001 [ 639.613914][T15137] RDX: 0000000000000046 RSI: ffffffff8def921a RDI: ffffffff8c1c3a00 [ 639.621919][T15137] RBP: ffffc900041278e8 R08: 0000000000000001 R09: 0000000000000001 [ 639.629937][T15137] R10: ffffffff90d7fb57 R11: 0000000000000000 R12: ffffffff90d82ec4 [ 639.637942][T15137] R13: ffff8880b853c220 R14: ffff88801e681ec0 R15: ffff8880b853b380 [ 639.645954][T15137] ? update_rq_clock+0x9c/0xd20 [ 639.650865][T15137] __schedule+0x1e84/0x67a0 [ 639.655417][T15137] ? ktime_get+0x1a4/0x320 [ 639.659898][T15137] ? __pfx___schedule+0x10/0x10 [ 639.664799][T15137] ? mark_held_locks+0x40/0x70 [ 639.669598][T15137] preempt_schedule_irq+0x50/0x90 [ 639.674682][T15137] irqentry_exit+0x205/0x7e0 [ 639.679335][T15137] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 639.685354][T15137] RIP: 0010:__sanitizer_cov_trace_pc+0x3f/0x70 [ 639.691562][T15137] Code: 02 12 a9 00 01 ff 00 74 1b f6 c4 01 74 07 a9 00 00 ff 00 74 05 e9 11 80 83 09 8b 82 d4 16 00 00 85 c0 74 f1 8b 82 b0 16 00 00 <83> f8 02 75 e6 48 8b 8a b8 16 00 00 8b 92 b4 16 00 00 48 8b 01 48 [ 639.711212][T15137] RSP: 0018:ffffc90004127a00 EFLAGS: 00000246 [ 639.717317][T15137] RAX: 0000000000000002 RBX: 000000000000722c RCX: ffffffff87fc3553 [ 639.725329][T15137] RDX: ffff8880281bbd80 RSI: ffffffff87fc344d RDI: ffff8880281bbd80 [ 639.733353][T15137] RBP: ffff8880303183b8 R08: 0000000000000004 R09: 000000000000722c [ 639.741354][T15137] R10: 0000000000008000 R11: 0000000000000000 R12: dffffc0000000000 [ 639.749358][T15137] R13: 000000000000722b R14: 0000000000008000 R15: 1ffff110060630a0 [ 639.757370][T15137] ? __vb2_queue_free+0x703/0xa30 [ 639.762441][T15137] ? __vb2_queue_free+0x5fd/0xa30 [ 639.767516][T15137] __vb2_queue_free+0x5fd/0xa30 [ 639.772421][T15137] vb2_core_queue_release+0x70/0x190 [ 639.777757][T15137] _vb2_fop_release+0xe8/0x280 [ 639.782561][T15137] vivid_fop_release+0x155/0xc30 [ 639.787560][T15137] v4l2_release+0x1cf/0x390 [ 639.792156][T15137] ? __pfx_v4l2_release+0x10/0x10 [ 639.797234][T15137] __fput+0x3ff/0xb50 [ 639.801281][T15137] task_work_run+0x150/0x240 [ 639.805910][T15137] ? __pfx_task_work_run+0x10/0x10 [ 639.811062][T15137] get_signal+0x1b9/0x2210 [ 639.815533][T15137] ? poll_select_finish+0x36e/0x670 [ 639.820778][T15137] ? __pfx_get_signal+0x10/0x10 [ 639.825682][T15137] arch_do_signal_or_restart+0x91/0x7a0 [ 639.831283][T15137] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 639.837496][T15137] ? rcu_is_watching+0x12/0xc0 [ 639.842305][T15137] exit_to_user_mode_loop+0x8b/0x4f0 [ 639.847626][T15137] ? rcu_is_watching+0x12/0xc0 [ 639.852449][T15137] do_syscall_64+0x6f2/0xf80 [ 639.857095][T15137] ? clear_bhb_loop+0x40/0x90 [ 639.861820][T15137] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 639.867755][T15137] RIP: 0033:0x7fa6d879ce59 [ 639.872204][T15137] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 639.891851][T15137] RSP: 002b:00007fa6d971d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000017 [ 639.900307][T15137] RAX: 0000000000000006 RBX: 00007fa6d8a16090 RCX: 00007fa6d879ce59 [ 639.908313][T15137] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000e [ 639.916332][T15137] RBP: 00007fa6d8832d6f R08: 0000000000000000 R09: 0000000000000000 [ 639.924349][T15137] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000000 [ 639.932355][T15137] R13: 00007fa6d8a16128 R14: 00007fa6d8a16090 R15: 00007ffd0eef1358 [ 639.940375][T15137] [ 639.943501][T15137] Kernel Offset: disabled [ 639.947867][T15137] Rebooting in 86400 seconds..