last executing test programs: 8m13.830662346s ago: executing program 0 (id=928): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x101000, 0x0) unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) syz_genetlink_get_family_id$auto_tcp_metrics(&(0x7f0000000180), r0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x745100, 0x0) io_uring_setup$auto(0x89, 0x0) prctl$auto(0x43, 0x17, 0x0, 0x0, 0x0) r1 = openat$auto_proc_uid_map_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/uid_map\x00', 0x8081, 0x0) writev$auto(r1, &(0x7f0000000140)={0x0, 0x6}, 0x7) prctl$auto(0x43, 0x17, 0x0, 0x0, 0x0) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) r2 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x11}}, 0x6a) sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x3, 0x20000000) sendfile$auto(0x1, 0x3, 0x0, 0x7ff) sendto$auto(0x3, 0x0, 0x7, 0x101, 0x0, 0x6) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) r3 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bus/usb/034/001\x00', 0x20882, 0x0) ioctl$auto_USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000000240)={0x23, 0x1, 0x8, 0x5, 0x7ff, 0x7fb, 0x0}) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x4020, 0x0) close_range$auto(0x0, 0x5, 0x0) 8m12.807871089s ago: executing program 0 (id=930): write$auto(0xffffffffffffffff, &(0x7f0000000080)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94&\x81\xe2\x13\x8f\xea#\xf8F\xbbOO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\b\xc1\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(', 0xa) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = openat$auto_proc_environ_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/environ\x00', 0x2000, 0x0) read$auto_proc_environ_operations_base(r2, &(0x7f0000000240)=""/80, 0x50) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x6, 0xffffffff, 0xdc, r0, 0x28000) sendmsg$auto_NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000001500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000400)={&(0x7f0000000700)={0xb94, 0x0, 0x800, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_QOS_MAP={0xfa, 0xc7, "de3f9ca56bccc7cbb7f81fe72ea08601eaade84b6f39bf7c6fdd4cefcd5e5e0a80e16c3c95aa0b1cddab01ab243dc37fb928e90f9686b72b64108e3bea4e35d97f211646fbaff836dc20c429b7828bfb1f649187fe2616a83efa291db0cf21f6a3acabd04c5f0dc18e4367fc5b206f144e46ef414e2dd5fd56bbb0bd3ef6d08a2f7ae68cc545ad17f65b6ad537e594efe8d418bdedafc4efadc4a86d9a3fbff531965344e25b54e6a01053745d298beade6d59dbd052a103c14cf0e1c6de68a55409da974ef6047b195dea27028047e47c8b88d606c28ee126913ee5d41d713632afffc31e436fac5dc857eae1fdd030f3d922c801d0"}, @NL80211_ATTR_NOACK_MAP={0x6}, @NL80211_ATTR_FTM_RESPONDER={0x204, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0x66, 0x3, "9a9c671ed8a778982cd37c8fa2186fab984d6ea7a601e3940a731d07c3f3015acb86de5e1b3a72b35d164194ca52a62c67b62866bc3b46f99f49aea7fb64d4dc3ba6a5558d9355d6be35fb47a0677e375480a2873a42a527105c4663878ccd0c17ec"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0x86, 0x2, "e2d8aca9590f2fd64972aa50b4140e4e91af475ca0279f25e50ee45fce5b5bca1e8b027e8371568aa9ff3bbb9b6e522ddf6c0a1873b9bf4f819e66ce8e06c5ef210301f3c2ff72ab548dd6418cf2922cf5103d123b67867857d40953dee2e6e24f95d8f27a7d7f9f07cd5325d9bb3e709c1d02614b6d6968870bfe18376e6f468781"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0x8f, 0x2, "3057bb0d60a9afd43569b18c8af97221f39d5bcd2e12e882201defe499236b42735c414381771e1dba8f70b0211bdcc499ccf4e639046ee05b0020ec94acbb2d7fe77ec3a07d2bb30c2232b9bd5a25ac58319098a7247b145a8b5897e8ec6ea5a77ad0a68cf4953215d3da1b0aaab5ae64703bba5c82d860baded51e7063753eede42aca5a6b0a2db36de1"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x75, 0x3, "a70defa104405b0bcf0985eac30e9b1103c0965c4a0e0dd726df8f89e5d738486cc180cfb56921c8603e610c1f2b933460fc808718a96ca35cc08e062acdad7467e2ac226f5c8b188371947264a1c70e6b1f77573baf420e3c2d52105bcb7f2304fcaa5806baa7b5f70804595a8215b52f"}]}, @NL80211_ATTR_WIPHY_NAME={0xe, 0x2, '/dev/zero\x00'}, @NL80211_ATTR_FRAME={0x766, 0x33, "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"}, @NL80211_ATTR_EPCS={0x4}, @NL80211_ATTR_STA_PLINK_STATE={0x5}, @NL80211_ATTR_AUTH_DATA={0xc7, 0x9c, "34bb54ba41de5ba8926f4ddb14a9dc34d55834a89a10890b27bb98fe837ae621c59764dd1cb0d796161aa34520fc3f13e500a4b78500785fdd5d83c01a2cf0f7b4db8965b664d8f21f383cb800f67a40bfdac7f98d936d452f4ffe19065d6f519bef088e376353f324782abbbc00c9f83be796fb966981c2b2e5588b1b323308abdbde44214956aa38ed65e02c9f7a25d93b05236fb9dc1b6098c5092ed27bb8537c603df6a3632f2378c47a2f429864ca0f2cdaa210db3748eed059d4252d2a258d6a"}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0x66}, @NL80211_ATTR_STA_FLAGS2={0x24, 0x43, "d5c88ce4845c84cf816cbc14cc1ed28c63404d982c769a7038292176d0c33e6a"}]}, 0xb94}, 0x1, 0x0, 0x0, 0x800}, 0x400d8) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) madvise$auto(0x0, 0x2003f2, 0x15) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x24048084) rseq$auto(&(0x7f0000000480)={0x5, 0x1000, 0xfaf, 0xb6, 0xf19, 0x6, "b71bd8a1b005f2e95a21d6e6977b88693ee7ca998d5cccdcc70128144cf63705b591190ce51f37be8a6e0e6bd833b5a5e423a0d1e6ea16eda6e051da270e2643235d5c9c32a82f951c65212ac7d79f9e5f4d9e7500e206aab0136758a1262e64fa63be5240f4cededbca556553b86b4cfec64daa7a7ebe605430cd5d102ceb03fa765a24b1299c92c03c881c3d9004ca9cc014023fbe4d382c56d619d7fb492ca8d8fc0949e9d8438da34bba3a29d022612d51481bad6d35024d72845743d173d2182ff8cdf731d03b4e7688b60bf36139f80f3bc99c377a748a963479025e9900678717"}, 0x7f, 0x8, 0x4b4f) madvise$auto(0x0, 0x200007, 0x19) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, 0x0, 0x103003, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0) r4 = ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000200), r4) sendmsg$auto_NL80211_CMD_DEAUTHENTICATE(r1, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000580)={0x14, r5, 0x100, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x24000040}, 0x88c4) r6 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0) pread64$auto(r6, &(0x7f0000000240)='\x03W\x96l\x15\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@', 0x100000002, 0x100000001) mq_timedsend$auto(0xffffffffffffffff, 0x0, 0x2, 0x9, 0x0) 8m9.861810196s ago: executing program 0 (id=936): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) timer_create$auto(0x2, 0x0, 0x0) timer_settime$auto(0x0, 0x7ff, &(0x7f0000000000)={{0xa6, 0x7}, {0x0, 0x3}}, 0x0) pwrite64$auto(0xc8, &(0x7f0000000140)='\vX\xb5n\x91p\xe6\x1eRNM\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00,\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbe\x01;\x00\x00\'\x03\x00\x00\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^B\xb8\xe4j\t,\xe4\x90\xcc\x9d\xc5\x0fo\x84\xf4\x89\v\xea\x1b\x95\xafQ;CL\"\x01@\x00\x00\x00\x00\f\x00\xc0\x13\xc8\xe2\xae\xf5\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8d\x81\x81O*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,8\x93\xba\x88\x93\x9d\xb6\x1a\x7f\xc0%\xb0\x83ROJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd6eWj\xdc\xac\x88\xf0\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00\x00\xff\xff\x00'/242, 0xfdf0, 0x39) 8m9.40928209s ago: executing program 0 (id=937): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2f212cbd7000fcdbdf250100000008000300", @ANYRES32=r2], 0x30}}, 0x4000000) 8m8.767330118s ago: executing program 0 (id=938): r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) close_range$auto(r0, r0, 0x9) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mtdblock0\x00', 0x14f602, 0x0) openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/x86/tlb_single_page_flush_ceiling\x00', 0x22001, 0x0) r1 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x4fc480, 0x0) r2 = openat$auto_percpu_stats_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x40080, 0x0) read$auto_percpu_stats_fops_(r2, &(0x7f0000000040)=""/83, 0x53) read$auto(r1, 0x0, 0x1f40) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, 0x0, 0x8000) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0xfffffffffffffffd, 0xb, 0xa, 0x40007fff, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x1, 0x5e, 0x80000001, 0x7, 0x2, 0x93, 0x400000001, 0x5]}, 0x0) writev$auto(0x3, &(0x7f0000000080)={0x0, 0x1}, 0x3) r3 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_LINK_GET(r0, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002900)={&(0x7f0000000500)=ANY=[@ANYBLOB="1d000000", @ANYRES16=r3, @ANYBLOB="010026bd7000fedbdf250800000004000480"], 0x18}, 0x1, 0x0, 0x0, 0x14880}, 0x4044090) unshare$auto(0x40000080) lstat$auto(0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), r0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/cpu/smt/control\x00', 0x2ab42, 0x0) rename$auto(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000080)='./file0\x00') sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x4000804) r6 = fcntl$auto_F_RDLCK(r4, 0x8, 0x0) setsockopt$auto_SO_ATTACH_FILTER(r6, 0x8001, 0x1a, &(0x7f0000000380)='nl80211\x00', 0x4) lstat$auto(0x0, &(0x7f0000000180)={0xd, 0x2, 0xfffffffd, 0x2, 0x0, 0x0, 0x0, 0xfa9a, 0x8, 0x7fffffffffffffff, 0x8000000004, 0x100000007fffffff, 0x8000000005, 0x0, 0x7, 0x4, 0x2}) write$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f0000000040)='1', 0x1) 8m6.764611488s ago: executing program 0 (id=942): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) umount2$auto(&(0x7f0000000180)='/proc/bus/pci/00/01.3\x00', 0x1) (async) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/module/nfs/parameters/nfs_mountpoint_expiry_timeout\x00', 0xa001, 0x0) write$auto(r0, &(0x7f0000000040)='1\xadk\xf8\x02\x00\x00\x00\x00\x00\x00\x00\f\x03', 0x7f) (async, rerun: 64) openat$auto_debugfs_devm_entry_ops_file(0xffffffffffffff9c, 0x0, 0x505100, 0x0) (async, rerun: 64) ioctl$auto(0x3, 0x400454ca, 0x38) sysfs$auto(0x2, 0x1e, 0x0) (async) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async) io_uring_setup$auto(0x1, 0x0) (async) r1 = openat$auto_bm_entry_operations_binfmt_misc(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x20000, 0x0) setsockopt$auto_SO_REUSEADDR(r1, 0x6, 0x2, &(0x7f00000000c0)='#.\\\x00', 0x9) (async) close_range$auto(0x2, 0x8, 0x0) (async, rerun: 32) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20b42, 0x0) (rerun: 32) write$auto_snd_pcm_oss_f_reg_pcm_oss(r2, &(0x7f0000000200)="6ec5d761d86388e7b26cc785db7d5c50f39fe32130c4f95a3851bcd41227b48f99d30ed2e0e6b62ff592c46105c4f83157db3ceb5dfa309a5b8b66bcfa669e7bb8308764aeb9c55608ced302e82cb89d531fd64aa4ceda9609e302bfd924767cdc58edc9794e7935533fb01b28640c8972029cc53ffb13e5486fb87744cf97d166f9ec641d0f", 0x86) (async, rerun: 64) r3 = socket(0x1d, 0x3, 0x1) (rerun: 64) setsockopt$auto(r3, 0x65, 0x1, 0x0, 0x800) (async, rerun: 64) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, 0x0, 0xfd}, 0x6a) (async, rerun: 64) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_fops_u16_(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim1/psample/out_tc\x00', 0x8ec80, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f00000010c0)='./file0\x00', 0x2001, 0x8) (async, rerun: 32) r6 = getuid() (async, rerun: 32) r7 = getegid() setregid$auto(r7, r7) (async, rerun: 64) statx$auto(r5, &(0x7f0000001100)='./file0\x00', 0x0, 0x10001, &(0x7f0000001140)={0x3, 0x6, 0x9, 0x8, r6, r7, 0x5, 0x1, 0x3, 0xffff, 0xb, 0xb6, {0x10, 0xfffffffa}, {0x1, 0x2}, {0x5, 0x8001}, {0x8, 0x101}, 0x7e05b10d, 0x7, 0x7b6, 0x1, 0xb, 0x7, 0xa, 0x2, 0x5, 0x3, 0x3, 0x1c5, [0x3ff, 0x2, 0x80000001, 0x8, 0x96, 0x0, 0x20, 0x0, 0xffffffffffff0000]}) (async, rerun: 64) r8 = socket(0x2c, 0x3, 0x0) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb2, 0x403, 0x8000) getsockopt$auto(r8, 0x11b, 0x7, 0x0, 0x0) (async) fsconfig$auto_FSCONFIG_SET_PATH(r4, 0x3, &(0x7f0000000140)=',#\x00', &(0x7f00000001c0)="d5b522acda8f230dd2f6bbac498ec2d272b172032c48898ef976c3fde5827f1d5df2c0ee7f6d5b57b48710368f1aa1cdc45d", r7) (async) ioctl$auto_TUNSETVNETLE2(0xffffffffffffffff, 0x400454dc, 0x0) 7m51.405933858s ago: executing program 32 (id=942): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) umount2$auto(&(0x7f0000000180)='/proc/bus/pci/00/01.3\x00', 0x1) (async) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/module/nfs/parameters/nfs_mountpoint_expiry_timeout\x00', 0xa001, 0x0) write$auto(r0, &(0x7f0000000040)='1\xadk\xf8\x02\x00\x00\x00\x00\x00\x00\x00\f\x03', 0x7f) (async, rerun: 64) openat$auto_debugfs_devm_entry_ops_file(0xffffffffffffff9c, 0x0, 0x505100, 0x0) (async, rerun: 64) ioctl$auto(0x3, 0x400454ca, 0x38) sysfs$auto(0x2, 0x1e, 0x0) (async) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async) io_uring_setup$auto(0x1, 0x0) (async) r1 = openat$auto_bm_entry_operations_binfmt_misc(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x20000, 0x0) setsockopt$auto_SO_REUSEADDR(r1, 0x6, 0x2, &(0x7f00000000c0)='#.\\\x00', 0x9) (async) close_range$auto(0x2, 0x8, 0x0) (async, rerun: 32) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20b42, 0x0) (rerun: 32) write$auto_snd_pcm_oss_f_reg_pcm_oss(r2, &(0x7f0000000200)="6ec5d761d86388e7b26cc785db7d5c50f39fe32130c4f95a3851bcd41227b48f99d30ed2e0e6b62ff592c46105c4f83157db3ceb5dfa309a5b8b66bcfa669e7bb8308764aeb9c55608ced302e82cb89d531fd64aa4ceda9609e302bfd924767cdc58edc9794e7935533fb01b28640c8972029cc53ffb13e5486fb87744cf97d166f9ec641d0f", 0x86) (async, rerun: 64) r3 = socket(0x1d, 0x3, 0x1) (rerun: 64) setsockopt$auto(r3, 0x65, 0x1, 0x0, 0x800) (async, rerun: 64) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, 0x0, 0xfd}, 0x6a) (async, rerun: 64) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_fops_u16_(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim1/psample/out_tc\x00', 0x8ec80, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f00000010c0)='./file0\x00', 0x2001, 0x8) (async, rerun: 32) r6 = getuid() (async, rerun: 32) r7 = getegid() setregid$auto(r7, r7) (async, rerun: 64) statx$auto(r5, &(0x7f0000001100)='./file0\x00', 0x0, 0x10001, &(0x7f0000001140)={0x3, 0x6, 0x9, 0x8, r6, r7, 0x5, 0x1, 0x3, 0xffff, 0xb, 0xb6, {0x10, 0xfffffffa}, {0x1, 0x2}, {0x5, 0x8001}, {0x8, 0x101}, 0x7e05b10d, 0x7, 0x7b6, 0x1, 0xb, 0x7, 0xa, 0x2, 0x5, 0x3, 0x3, 0x1c5, [0x3ff, 0x2, 0x80000001, 0x8, 0x96, 0x0, 0x20, 0x0, 0xffffffffffff0000]}) (async, rerun: 64) r8 = socket(0x2c, 0x3, 0x0) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb2, 0x403, 0x8000) getsockopt$auto(r8, 0x11b, 0x7, 0x0, 0x0) (async) fsconfig$auto_FSCONFIG_SET_PATH(r4, 0x3, &(0x7f0000000140)=',#\x00', &(0x7f00000001c0)="d5b522acda8f230dd2f6bbac498ec2d272b172032c48898ef976c3fde5827f1d5df2c0ee7f6d5b57b48710368f1aa1cdc45d", r7) (async) ioctl$auto_TUNSETVNETLE2(0xffffffffffffffff, 0x400454dc, 0x0) 3m54.826078341s ago: executing program 1 (id=1571): openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sg0\x00', 0x8001, 0x0) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000040)) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/oom_adj\x00', 0x48402, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) mmap$auto(0x2000, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) ioctl$auto_PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f000000c380)={0x60, 0x0, 0x100000, 0x7fffffffefff, 0xfffffffffffffffe, 0x1, 0x8, 0xbff, 0x2c, 0x2c, 0x3, 0x2}) mmap$auto(0x0, 0x202000b, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0x2c, 0x0) r3 = fsopen$auto(0x0, 0x1) fsconfig$auto(r3, 0x8, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D0\x00', 0x8001, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) msync$auto(0x1ffff000, 0x1800000ff000600, 0x400000004) r4 = openat$auto_proc_pid_smaps_operations_internal(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/smaps\x00', 0x42000, 0x0) read$auto_proc_pid_smaps_operations_internal(r4, &(0x7f00000002c0)=""/190, 0xfffffe39) 3m52.787656161s ago: executing program 1 (id=1576): mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r1, &(0x7f0000004240)={0x0, 0x0, &(0x7f0000004200)={&(0x7f0000000140)={0x28, r0, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@HWSIM_ATTR_PMSR_SUPPORT={0x14, 0x1a, 0x0, 0x1, [@NL80211_PMSR_ATTR_TYPE_CAPA={0x10, 0x4, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_CAPA_ATTR_PREAMBLES={0x8, 0x5, 0x2}]}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40c8}, 0x4048000) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder1\x00', 0x1, 0x0) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder1\x00', 0x1, 0x0) socket(0x10, 0x2, 0x6) socketpair$auto(0x5, 0x5, 0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x55) socket(0x2, 0x3, 0xa) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x8) mmap$auto(0x0, 0x2000c, 0xdf, 0xe31, 0x40000000000a5, 0x8000) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, 0x0) ioctl$auto(0x3, 0xc0383e04, 0xffffffffffffffff) connect$auto(0x3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @multicast1}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0xe000) write$auto(0x3, 0x0, 0x800) getpid() openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/platform/dummy_hcd.2/usb3/3-0:1.0/authorized\x00', 0x220080, 0x0) socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) recvmmsg$auto(0xffffffffffffffff, 0x0, 0xffffff00, 0x3, 0x0) 3m50.735005485s ago: executing program 1 (id=1581): openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sg0\x00', 0x8001, 0x0) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000040)) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/oom_adj\x00', 0x48402, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r2 = syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) mmap$auto(0x2000, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) ioctl$auto_PAGEMAP_SCAN(r3, 0xc0606610, &(0x7f000000c380)={0x60, 0x0, 0x100000, 0x7fffffffefff, 0xfffffffffffffffe, 0x1, 0x8, 0xbff, 0x2c, 0x2c, 0x3, 0x2}) r4 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$auto(r4, 0x10e, 0x3, 0x0, 0x0) sendmsg$auto_NL80211_CMD_SET_MAC_ACL(r4, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000002f80)=ANY=[@ANYBLOB="f0110000", @ANYRES16=r2, @ANYBLOB="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"], 0x11f0}, 0x1, 0x0, 0x0, 0x8810}, 0x4) mmap$auto(0x0, 0x202000b, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0x2c, 0x0) r5 = fsopen$auto(0x0, 0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001a40), r6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001a80)={'wg2\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r6, &(0x7f0000002f40)={0x0, 0x0, &(0x7f0000002f00)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002bbd700000dcdf251b0000000c00018008000100", @ANYRES32=r8, @ANYBLOB="0c00028008000200", @ANYRES32=0x0, @ANYBLOB="a04165d2c2b91d0aea5a22d5e6bc846a90a0cf3cbebf1280b39d1e59eba194b59bf2603f175b34bd1f8f6dc1e5d541d8901dfdb57d8684e6cbe842826c0840dd1d9d"], 0x2c}, 0x1, 0x0, 0x0, 0x24044001}, 0x0) fsconfig$auto(r5, 0x8, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D0\x00', 0x8001, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) msync$auto(0x1ffff000, 0x1800000ff000000, 0x400000004) r9 = openat$auto_proc_pid_smaps_operations_internal(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/smaps\x00', 0x42000, 0x0) read$auto_proc_pid_smaps_operations_internal(r9, &(0x7f00000002c0)=""/190, 0xfffffe39) 3m48.927990507s ago: executing program 1 (id=1584): r0 = socket(0xa, 0x2, 0x3a) setsockopt$auto(r0, 0x29, 0x18, 0x0, 0x110) mmap$auto(0x0, 0x20009, 0xdf, 0x40ebf, r0, 0x8000) madvise$auto(0x8, 0xffffffffffff0001, 0x15) mmap$auto(0x400, 0x2020009, 0x800000000003, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/irq/12/hwirq\x00', 0x2000, 0x0) read$auto(r1, 0x0, 0x20) r2 = openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, &(0x7f0000004080)='/sys/kernel/tracing/per_cpu/cpu1/buffer_size_kb\x00', 0x88201, 0x0) madvise$auto(0xfff, 0x101, 0x1a6) writev$auto(r2, &(0x7f0000005f00)={0x0, 0x4}, 0x6) mmap$auto(0x0, 0x276, 0x80000000df, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x2008000) close_range$auto(r1, 0x8, 0x0) socket(0x10, 0x2, 0x4) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = socketcall$auto(0x1, 0x0) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r4) ioctl$auto_KVM_GET_MSRS(r3, 0x4008ae8a, &(0x7f0000000140)={0x10000000}) setsockopt$auto(0x200000000000003, 0x1, 0x1, 0x0, 0x300) openat$auto_xfs_dir_file_operations_xfs_file(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/mac80211_hwsim/hwsim13\x00', 0x53f561, 0x0) r6 = landlock_create_ruleset$auto(&(0x7f0000000000)={0x4, 0x8000000000001, 0x5}, 0x9, 0x0) setsockopt$auto_SO_ATTACH_BPF(r2, 0x3, 0x32, &(0x7f0000000140)='/sys/kernel/tracing/per_cpu/cpu0/buffer_size_kb\x00', 0x8) landlock_restrict_self$auto(r6, 0x7) setresuid$auto(0x0, 0x8, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) 3m48.548824694s ago: executing program 1 (id=1588): socket(0x2, 0x801, 0x100) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000003040), 0xffffffffffffffff) sendmsg$auto_OVS_METER_CMD_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000003200)={&(0x7f0000000640)={0x2fc, r1, 0x159198c6007aa95d, 0x70bd29, 0x25dfdbfc, {}, [@OVS_METER_ATTR_KBPS={0x4}, @OVS_METER_ATTR_ID={0x8, 0x1, 0x5}, @OVS_METER_ATTR_BANDS={0x2dc, 0x4, 0x0, 0x1, [@generic, @nested={0x2d5, 0x10d, 0x0, 0x1, [@generic="430b9d17a8ecfa48c0e17755ecd5d46a8588fcd7cc3ad678edd7dac0aa4f92db17405d344d3202b390afa845d5378143a8f98e1ac2ec2396fa0ef5e35851efee7eec", @generic="d844d437e16a767fd1e4f94ca4e001894820f11f7c08f1a63851783f64a351d8b194575afba6e3d3334aa84448a2a59c5522386d2acf3163ec517e558256747ac80cb9235605d79e304c779ee91c1115172e3012daf3662a479d26c054c0b6f826cab6fc1ee0a0b18419c94b6a5ed58587256cf0a6ed968bedf42e9a70fc66f0a4be7f845d0d39e3fe1471583353d7c2862b523dd589a993e7cfe591a58afe6130b5be028264cc902c792a892246d064c4bcae0f45e40caf8170224200d461364828", @typed={0x8, 0xc4, 0x0, 0x0, @pid}, @nested={0xbd, 0x122, 0x0, 0x1, [@generic="da0b0f3687a69245b6f6730a58dec2fcf783f8ec2c6e77d8f3098e3a45b17ad31f3ded4947974900350b7216ee8f68ad096bd66649b48f2edf7458e00363da324a7bff68753b7e37cb89c965ad543cbd44c3ce1b56a569fbf2b766549267fbd63da8f2e1589d4930d8475b09fc460c972ced3c9d554ad5213808e15f3032baf25f54de5e66c28e9be00ec217ab1ecd7f11462bc9201a5aa4f392ece95e11b86871556c6b566d0b63102cafb54e3243b3c38dbf03fc30af1b1b"]}, @generic="57bd5577b095bc0707", @typed={0x2b, 0x9b, 0x0, 0x0, @binary="1ccdaff36829caeffe8ca2bec7831839bb8e9bbedfcc7bc9c6f99e6d9873a1af1f8d7d06e20fc6"}, @typed={0x16, 0xcb, 0x0, 0x0, @binary="0853f092e07d31f8eb8809564d700de8aa06"}, @nested={0xb7, 0xca, 0x0, 0x1, [@nested={0x24, 0x104, 0x0, 0x1, [@generic="be5fc8351fe62be0bc1551fd3e077313b4a95a2d7580a454a57e36d2", @nested={0x4, 0xee}]}, @generic="5009778284e30825f5cade16ca948ca5c396ea01254ca4a0a9390d7b57f915624d33817847cf6182fd92e8eb5c4f883fe75ee2e35c17e4de7becf724583e2b38159a40d8db0d3224811d9668ae91121a15293863e017d310613b1aabb6ce8bafc0973d48738630d6459d4765cf541d610e413cc5c984cb368ac9c5b44bd3e51a8e79c3e14eaf5712ffcffa7c38cd0e"]}]}]}]}, 0x2fc}, 0x1, 0x0, 0x0, 0x20008040}, 0x40) mmap$auto(0x0, 0x2020007, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x6, 0x0) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) ioctl$auto(r3, 0x5393, r2) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @empty}, 0x51) select$auto(0x6, 0x0, &(0x7f0000000100)={[0x8, 0x200000000005, 0x7, 0x7, 0x8, 0x80000004, 0xc, 0x6, 0x8fc, 0xb80, 0xe34c, 0x9, 0x3, 0xfffffffffffff954, 0xfffffffffffffffc, 0xfff]}, 0x0, 0x0) 3m46.24644931s ago: executing program 1 (id=1591): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) madvise$auto(0x0, 0x20499d, 0x9) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) listen$auto(0x3, 0x81) madvise$auto(0x0, 0x2003f2, 0x15) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) r3 = openat$auto_proc_uid_map_operations_base(0xffffffffffffff9c, &(0x7f00000013c0)='/proc/self/uid_map\x00', 0x8006, 0x0) write$auto_proc_uid_map_operations_base(r3, 0x0, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="a8000000", @ANYRES16=r2, @ANYBLOB="01002cbd7000fddbdf2502000000810004006e66736600d8efe42d133772f30c54315aa74a5b8107cf2ddf901f8fc81365e252374483326ace7da356b7a16f5ce613bc0ce3aeb87ed3d22b4a27c3ecc90c70c861befe60a7a9414b446427a001f61379e8caf4519e032a5dda1e1174e2d5756a2b93fc046cd3a674866b80d91473ece248c03d28f9398a63a785998700000008000300850000000800010002000000"], 0xa8}}, 0x4000) madvise$auto(0x0, 0x200007, 0x19) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x404001, 0x0) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0xffffffffffffffff, 0x4, 0x805, 0x2) r4 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC2\x00', 0x20802, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc4c85513, &(0x7f0000000840)={{@raw=0x8, 0x7, 0xba28, 0x0, "708c58271a7985a7704331f78af8d149fc53d81fd4a7553c2ff48b48a8a57689adcc1ca6d2cbfa93b50590c9", @raw=0x6}, 0x0, @bytes=@data_ptr=0x0, "fa491e08108961dd5708680f1134935851612a52d629535f54f3832490fc4e7f79daef312b3df3307044713a4801d409aefe3f932f78fc311771094e769c0095f94ee6d74f2517f34a0bbbf502bf3392ac4d93bde5f733ba936c0890312cf035bc44117db9b683eedc5e02a703fc82750d8d6ebac0c3019ef8e6c1eecea33a59"}) madvise$auto(0x0, 0xffffffffffff0005, 0x19) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0xb74, 0x66a) madvise$auto(0x0, 0xffffffffffff0001, 0x15) socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x54) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) read$auto_mon_fops_text_t_mon_text(0xffffffffffffffff, &(0x7f0000000380)=""/100, 0x64) sendmsg$auto_ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="3facfb2c7e1b12975c47006bebf4b434c436156ab10811c02816adfe46babd9248ab1f0d11e2"], 0xd4}, 0x1, 0x0, 0x0, 0x20000880}, 0x40015) socket(0x10, 0x2, 0x0) 3m31.064211064s ago: executing program 33 (id=1591): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) madvise$auto(0x0, 0x20499d, 0x9) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) listen$auto(0x3, 0x81) madvise$auto(0x0, 0x2003f2, 0x15) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) r3 = openat$auto_proc_uid_map_operations_base(0xffffffffffffff9c, &(0x7f00000013c0)='/proc/self/uid_map\x00', 0x8006, 0x0) write$auto_proc_uid_map_operations_base(r3, 0x0, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="a8000000", @ANYRES16=r2, @ANYBLOB="01002cbd7000fddbdf2502000000810004006e66736600d8efe42d133772f30c54315aa74a5b8107cf2ddf901f8fc81365e252374483326ace7da356b7a16f5ce613bc0ce3aeb87ed3d22b4a27c3ecc90c70c861befe60a7a9414b446427a001f61379e8caf4519e032a5dda1e1174e2d5756a2b93fc046cd3a674866b80d91473ece248c03d28f9398a63a785998700000008000300850000000800010002000000"], 0xa8}}, 0x4000) madvise$auto(0x0, 0x200007, 0x19) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x404001, 0x0) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0xffffffffffffffff, 0x4, 0x805, 0x2) r4 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC2\x00', 0x20802, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc4c85513, &(0x7f0000000840)={{@raw=0x8, 0x7, 0xba28, 0x0, "708c58271a7985a7704331f78af8d149fc53d81fd4a7553c2ff48b48a8a57689adcc1ca6d2cbfa93b50590c9", @raw=0x6}, 0x0, @bytes=@data_ptr=0x0, "fa491e08108961dd5708680f1134935851612a52d629535f54f3832490fc4e7f79daef312b3df3307044713a4801d409aefe3f932f78fc311771094e769c0095f94ee6d74f2517f34a0bbbf502bf3392ac4d93bde5f733ba936c0890312cf035bc44117db9b683eedc5e02a703fc82750d8d6ebac0c3019ef8e6c1eecea33a59"}) madvise$auto(0x0, 0xffffffffffff0005, 0x19) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0xb74, 0x66a) madvise$auto(0x0, 0xffffffffffff0001, 0x15) socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x54) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) read$auto_mon_fops_text_t_mon_text(0xffffffffffffffff, &(0x7f0000000380)=""/100, 0x64) sendmsg$auto_ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="3facfb2c7e1b12975c47006bebf4b434c436156ab10811c02816adfe46babd9248ab1f0d11e2"], 0xd4}, 0x1, 0x0, 0x0, 0x20000880}, 0x40015) socket(0x10, 0x2, 0x0) 2m33.940800502s ago: executing program 5 (id=1920): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x101000, 0x0) unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) syz_genetlink_get_family_id$auto_tcp_metrics(&(0x7f0000000180), r0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x745100, 0x0) io_uring_setup$auto(0x89, 0x0) prctl$auto(0x43, 0x17, 0x0, 0x0, 0x0) r1 = openat$auto_proc_uid_map_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/uid_map\x00', 0x8081, 0x0) writev$auto(r1, &(0x7f0000000140)={0x0, 0x6}, 0x7) prctl$auto(0x43, 0x17, 0x0, 0x0, 0x0) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) r2 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, 0x0, 0x6a) sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x3, 0x20000000) sendfile$auto(0x1, 0x3, 0x0, 0x7ff) sendto$auto(0x3, 0x0, 0x7, 0x101, 0x0, 0x6) sendmsg$auto_NL80211_CMD_STOP_NAN(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)={0x14, 0x0, 0x100, 0x70bd26, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x841) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) r3 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bus/usb/034/001\x00', 0x20882, 0x0) ioctl$auto_USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000000240)={0x23, 0x1, 0x8, 0x5, 0x7ff, 0x7fb, 0x0}) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x4020, 0x0) close_range$auto(0x0, 0x5, 0x0) 2m32.543531681s ago: executing program 5 (id=1931): r0 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket(0xa, 0x5, 0x84) fsconfig$auto(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022dbd7000fbdbdf781d2502000000080002"], 0x24}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYRES16=r1, @ANYBLOB], 0x1ac}}, 0x20000092) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004804}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x8, 0x0, 0x8, 0x9}, 0x7}, 0x3, 0x8) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) uname$auto(0x0) setsockopt$auto(0x3, 0x10000000084, 0x1f, 0x0, 0x3ff) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'pim6reg\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r2, &(0x7f0000004240)={0x0, 0x0, &(0x7f0000004200)={&(0x7f00000041c0)={0x1c, r0, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@HWSIM_ATTR_IFTYPE_SUPPORT={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40c8}, 0x4048000) 2m31.573019187s ago: executing program 5 (id=1936): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/ram3/trace/enable\x00', 0x2062, 0x0) r1 = socket(0x2, 0x5, 0x0) getsockopt$auto(r1, 0x84, 0x84, 0x0, &(0x7f00000000c0)=0x10008) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_KSMBD_EVENT_SPNEGO_AUTHEN_RESPONSE(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8800}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x10, 0x70bd27, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) write$auto(r0, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) sysfs$auto(0x2, 0x4, 0x0) (async) getsockopt$auto_SO_PROTOCOL(r0, 0x5, 0x26, &(0x7f0000000040)='\\+%\x00', &(0x7f0000000080)=0x7f) (async) r3 = fsopen$auto(0x0, 0x1) fsconfig$auto(r3, 0x8, 0x0, 0x0, 0x0) (async) write$auto(r0, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9 \xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x11\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) 2m31.24450987s ago: executing program 5 (id=1938): socket(0x2, 0x801, 0x100) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000003040), 0xffffffffffffffff) sendmsg$auto_OVS_METER_CMD_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000003200)={&(0x7f0000000640)={0x320, r1, 0x159198c6007aa95d, 0x70bd29, 0x25dfdbfc, {}, [@OVS_METER_ATTR_KBPS={0x4}, @OVS_METER_ATTR_ID={0x8, 0x1, 0x5}, @OVS_METER_ATTR_BANDS={0x300, 0x4, 0x0, 0x1, [@generic, @nested={0x2fc, 0x10d, 0x0, 0x1, [@generic="430b9d17a8ecfa48c0e17755ecd5d46a8588fcd7cc3ad678edd7dac0aa4f92db17405d344d3202b390afa845d5378143a8f98e1ac2ec2396fa0ef5e35851efee7eec", @generic="d844d437e16a767fd1e4f94ca4e001894820f11f7c08f1a63851783f64a351d8b194575afba6e3d3334aa84448a2a59c5522386d2acf3163ec517e558256747ac80cb9235605d79e304c779ee91c1115172e3012daf3662a479d26c054c0b6f826cab6fc1ee0a0b18419c94b6a5ed58587256cf0a6ed968bedf42e9a70fc66f0a4be7f845d0d39e3fe1471583353d7c2862b523dd589a993e7cfe591a58afe6130b5be028264cc902c792a892246d064c4bcae0f45e40caf8170224200d461364828", @typed={0x8, 0xc4, 0x0, 0x0, @pid}, @nested={0xbd, 0x122, 0x0, 0x1, [@generic="da0b0f3687a69245b6f6730a58dec2fcf783f8ec2c6e77d8f3098e3a45b17ad31f3ded4947974900350b7216ee8f68ad096bd66649b48f2edf7458e00363da324a7bff68753b7e37cb89c965ad543cbd44c3ce1b56a569fbf2b766549267fbd63da8f2e1589d4930d8475b09fc460c972ced3c9d554ad5213808e15f3032baf25f54de5e66c28e9be00ec217ab1ecd7f11462bc9201a5aa4f392ece95e11b86871556c6b566d0b63102cafb54e3243b3c38dbf03fc30af1b1b"]}, @generic="57bd5577b095bc07", @typed={0x52, 0x9b, 0x0, 0x0, @binary="1ccdaff36829caeffe8ca2bec7831839bb8e9bbedfcc7bc9c6f99e6d9873a1af1f8d7d06e20fc6c8c7e2877a7f46735318f474ceb4bd161be52f5716f6f019b1cefa8a526f3a5ac78057b4bd8455"}, @typed={0x16, 0xcb, 0x0, 0x0, @binary="0853f092e07d31f8eb8809564d700de8aa06"}, @nested={0xb7, 0xca, 0x0, 0x1, [@nested={0x24, 0x104, 0x0, 0x1, [@generic="be5fc8351fe62be0bc1551fd3e077313b4a95a2d7580a454a57e36d2", @nested={0x4, 0xee}]}, @generic="5009778284e30825f5cade16ca948ca5c396ea01254ca4a0a9390d7b57f915624d33817847cf6182fd92e8eb5c4f883fe75ee2e35c17e4de7becf724583e2b38159a40d8db0d3224811d9668ae91121a15293863e017d310613b1aabb6ce8bafc0973d48738630d6459d4765cf541d610e413cc5c984cb368ac9c5b44bd3e51a8e79c3e14eaf5712ffcffa7c38cd0e"]}]}]}]}, 0x320}, 0x1, 0x0, 0x0, 0x20008040}, 0x40) mmap$auto(0x0, 0x2020007, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x6, 0x0) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) ioctl$auto(r3, 0x5393, r2) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @empty}, 0x51) select$auto(0x6, 0x0, &(0x7f0000000100)={[0x8, 0x200000000005, 0x7, 0x7, 0x8, 0x80000004, 0xc, 0x6, 0x8fc, 0xb80, 0xe34c, 0x9, 0x3, 0xfffffffffffff954, 0xfffffffffffffffc, 0xfff]}, 0x0, 0x0) 2m30.386103071s ago: executing program 5 (id=1943): write$auto(0xffffffffffffffff, 0x0, 0xa) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = openat$auto_proc_environ_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/environ\x00', 0x2000, 0x0) read$auto_proc_environ_operations_base(r2, &(0x7f0000000240)=""/80, 0x50) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x6, 0xffffffff, 0xdc, r0, 0x28000) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001400), r1) sendmsg$auto_NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x400d8) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x24048084) rseq$auto(&(0x7f0000000480)={0x5, 0x1000, 0xfaf, 0xb6, 0xf19, 0x6, "b71bd8a1b005f2e95a21d6e6977b88693ee7ca998d5cccdcc70128144cf63705b591190ce51f37be8a6e0e6bd833b5a5e423a0d1e6ea16eda6e051da270e2643235d5c9c32a82f951c65212ac7d79f9e5f4d9e7500e206aab0136758a1262e64fa63be5240f4cededbca556553b86b4cfec64daa7a7ebe605430cd5d102ceb03fa765a24b1299c92c03c881c3d9004ca9cc014023fbe4d382c56d619d7fb492ca8d8fc0949e9d8438da34bba3a29d022612d51481bad6d35024d72845743d173d2182ff8cdf731d03b4e7688b60bf36139f80f3bc99c377a748a963479025e9900678717"}, 0x7f, 0x8, 0x4b4f) madvise$auto(0x0, 0x200007, 0x19) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, 0x0, 0x103003, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x101001, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0) r4 = ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = syz_genetlink_get_family_id$auto_nl80211(0x0, r4) sendmsg$auto_NL80211_CMD_DEAUTHENTICATE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)={0x14c, r5, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, 0x52}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, 0x9}, @NL80211_ATTR_PREV_BSSID={0x8d, 0x4f, "ec646b3e01aa8d28e287077d7bacec5cc0b9e02f0a7ec8adfd515b4daca39123ba1ac3868031723d714777381f7dd8b1c4b3d3bc5c0d65224c3e9466a7977136619fb9a16f8b6c65d1d4017c5fe4d208378c3f7afaa41fbecbcd05b6dbcd102c9b4bd510672ec9f4a17f4449af7eef50bd47cfc645493f7af012d5d551e14fba90e919eace8eae834c"}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, "0bb1bd85fbb5ceb8878972aff5c303e623da83fcb0d96dc917df"}, @NL80211_ATTR_STA_FLAGS2={0x66, 0x43, "75aa0c15136afcaf78edfc61253910aba64aa2abb1aa50ad08f16161bc42364383e17ebf5a119edb67103ff81a90bb6f1e2f7f69d11b8616a35a931acbe22854614468e429f8c8faa30c2579da185c76c0ef885bbfd0549f8d16917530d2e6468a55"}, @NL80211_ATTR_BSS_DUMP_INCLUDE_USE_DATA={0x4}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x9}]}, 0x14c}, 0x1, 0x0, 0x0, 0x24000040}, 0x88c4) r6 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0) pread64$auto(r6, &(0x7f0000000240)='\x03W\x96l\x15\x00'/21, 0x100000002, 0x100000001) mq_timedsend$auto(0xffffffffffffffff, 0x0, 0x2, 0x9, 0x0) 2m29.031569686s ago: executing program 5 (id=1951): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x28, r1, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NFSD_A_SERVER_SCOPE={0x9, 0x4, 'nfsd\x00'}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0xffff}]}, 0x28}, 0x1, 0x0, 0x0, 0x4002000}, 0x40010) 2m13.91856454s ago: executing program 34 (id=1951): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x28, r1, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NFSD_A_SERVER_SCOPE={0x9, 0x4, 'nfsd\x00'}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0xffff}]}, 0x28}, 0x1, 0x0, 0x0, 0x4002000}, 0x40010) 6.194622799s ago: executing program 3 (id=2624): name_to_handle_at$auto(0xffffffffffffffff, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0, 0x2) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, 0x0, 0x107601, 0x0) mmap$auto(0x1, 0x200000020009, 0x10000000000df, 0xeb2, 0x401, 0x8006) close_range$auto(0x2, 0x8, 0x0) setsockopt$auto(0x400000000000003, 0x29, 0x1b, 0x0, 0x56b) mprotect$auto(0x110c230000, 0xa588, 0x6) mremap$auto(0x110c231000, 0xfffffffffffffffc, 0x101, 0x3, 0x0) timer_create$auto(0xfffffffa, &(0x7f0000000100)={@sival_ptr=0x0, @inferred, 0x1, @_tid=0xffffffffffffffff}, 0x0) timer_settime$auto(0x0, 0xeb17, &(0x7f0000000180)={{0xf, 0x10007}, {0x9}}, 0x0) timer_gettime$auto(0x0, 0x0) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) setuid$auto(0x0) r0 = epoll_create$auto(0x1) capset$auto(0x0, 0x0) epoll_ctl$auto(r0, 0x1, 0x8000000000000000, 0x0) rt_sigprocmask$auto_SIG_UNBLOCK(0x1, &(0x7f0000000000)={0x2}, 0x0, 0x8) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count\x00', 0xc0082, 0x0) read$auto(r1, 0x0, 0x8) close_range$auto(r0, 0xffffffffffffffff, 0x0) socket(0x1e, 0x4, 0x0) setsockopt$auto(r1, 0xfffffffa, 0xfffff6de, 0x0, 0x6) socket(0x2a, 0x2, 0x1) bind$auto(0x3, &(0x7f0000000080)=@qipcrtr={0x2a, 0x1, 0x1}, 0x6b) 5.597023551s ago: executing program 3 (id=2628): openat$auto_hsr_node_table_fops_(0xffffffffffffff9c, 0x0, 0x861c2, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001040)='/sys/devices/platform/vhci_hcd.14/usb37/37-0:1.0/usb37-port5/power/control\x00', 0x6700, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f00000000c0)=""/73, 0x49) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0xe, 0x940, 0x1ffde, 0x8, 0x2000000000000006, 0x2, 0x9, 0x5, 0xfffffffffffffffe, 0x7, 0xb0, 0x7, 0x2, 0x3, 0x5, 0x7, 0x0, 0x6, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40]}, 0x1fe, 0x81) prctl$auto(0x34, 0x0, 0x0, 0x0, 0x0) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\'', @ANYRES16, @ANYBLOB="000226bd7000fedbdf25040000000600060009000800000000040000000008000200", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a0005000180c200000e00000a0001000000000000000000080004001400000008000300050000000a00"], 0x6c}, 0x1, 0x0, 0x0, 0x4040840}, 0x44890) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) r1 = socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) remap_file_pages$auto(0x6a27, 0x7ffffffff000, 0x0, 0x3, 0x4) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40400c4) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) 5.344302295s ago: executing program 3 (id=2630): mmap$auto(0x0, 0x2, 0x8004000080000df, 0x40eb2, 0x401, 0x300000000001) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000680), 0xffffffffffffffff) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x80802, 0x0) openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f00000000c0), 0x3c3501, 0x0) write$auto(r0, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) close_range$auto(0x2, 0x8, 0x0) 3.973552041s ago: executing program 3 (id=2636): r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) close_range$auto(r0, r0, 0x9) openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/x86/tlb_single_page_flush_ceiling\x00', 0x22001, 0x0) r1 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x4fc480, 0x0) r2 = openat$auto_percpu_stats_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x40080, 0x0) read$auto_percpu_stats_fops_(r2, &(0x7f0000000040)=""/83, 0x53) read$auto(r1, 0x0, 0x1f40) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, 0x0, 0x8000) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0xfffffffffffffffd, 0xb, 0xa, 0x40007fff, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x1, 0x5e, 0x80000001, 0x7, 0x2, 0x93, 0x400000001, 0x5]}, 0x0) writev$auto(0x3, &(0x7f0000000080)={0x0, 0x1}, 0x3) r3 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_LINK_GET(r0, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002900)={&(0x7f0000000500)=ANY=[@ANYBLOB="1d000000", @ANYRES16=r3, @ANYBLOB="010026bd7000fedbdf250800000004000480"], 0x18}, 0x1, 0x0, 0x0, 0x14880}, 0x4044090) unshare$auto(0x40000080) lstat$auto(0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), r0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/cpu/smt/control\x00', 0x2ab42, 0x0) rename$auto(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000080)='./file0\x00') setsockopt$auto_SO_ATTACH_FILTER(0xffffffffffffffff, 0x8001, 0x1a, &(0x7f0000000380)='nl80211\x00', 0x4) lstat$auto(0x0, &(0x7f0000000180)={0xd, 0x2, 0xfffffffd, 0x2, 0x0, 0x0, 0x0, 0xfa9a, 0x8, 0x7fffffffffffffff, 0x8000000004, 0x100000007fffffff, 0x8000000005, 0x0, 0x7, 0x4, 0x2}) write$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000000040)='1', 0x1) 3.972705048s ago: executing program 6 (id=2637): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000006c0)={'batadv0\x00'}) sendmsg$auto_BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0}, 0x1, 0x0, 0x0, 0x4001}, 0x9800) 3.854634128s ago: executing program 6 (id=2639): openat$auto_hsr_node_table_fops_(0xffffffffffffff9c, 0x0, 0x861c2, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001040)='/sys/devices/platform/vhci_hcd.14/usb37/37-0:1.0/usb37-port5/power/control\x00', 0x6700, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0xe, 0x940, 0x1ffde, 0x8, 0x2000000000000006, 0x2, 0x9, 0x5, 0xfffffffffffffffe, 0x7, 0xb0, 0x7, 0x2, 0x3, 0x5, 0x7, 0x0, 0x6, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40]}, 0x1fe, 0x81) prctl$auto(0x34, 0x0, 0x0, 0x0, 0x0) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\'', @ANYRES16, @ANYBLOB="000226bd7000fedbdf25040000000600060009000800000000040000000008000200", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a0005000180c200000e00000a0001000000000000000000080004001400000008000300050000000a00"], 0x6c}, 0x1, 0x0, 0x0, 0x4040840}, 0x44890) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) r0 = socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) remap_file_pages$auto(0x6a27, 0x7ffffffff000, 0x0, 0x3, 0x4) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40400c4) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) 3.438258282s ago: executing program 6 (id=2641): name_to_handle_at$auto(0xffffffffffffffff, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0, 0x2) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, 0x0, 0x107601, 0x0) mmap$auto(0x1, 0x200000020009, 0x10000000000df, 0xeb2, 0x401, 0x8006) close_range$auto(0x2, 0x8, 0x0) setsockopt$auto(0x400000000000003, 0x29, 0x1b, 0x0, 0x56b) mprotect$auto(0x110c230000, 0xa588, 0x6) mremap$auto(0x110c231000, 0xfffffffffffffffc, 0x101, 0x3, 0x0) timer_create$auto(0xfffffffa, &(0x7f0000000100)={@sival_ptr=0x0, @inferred, 0x1, @_tid=0xffffffffffffffff}, 0x0) timer_settime$auto(0x0, 0xeb17, &(0x7f0000000180)={{0xf, 0x10007}, {0x9}}, 0x0) timer_gettime$auto(0x0, 0x0) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) setuid$auto(0x0) r0 = epoll_create$auto(0x1) capset$auto(0x0, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count\x00', 0xc0082, 0x0) read$auto(r1, 0x0, 0x8) close_range$auto(r0, 0xffffffffffffffff, 0x0) 3.251297189s ago: executing program 6 (id=2642): openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sg0\x00', 0x8001, 0x0) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000040)) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/oom_adj\x00', 0x48402, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) mmap$auto(0x2000, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) ioctl$auto_PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f000000c380)={0x60, 0x0, 0x100000, 0x7fffffffefff, 0xfffffffffffffffe, 0x1, 0x8, 0xbff, 0x2c, 0x2c, 0x3, 0x2}) (fail_nth: 1) mmap$auto(0x0, 0x202000b, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0x2c, 0x0) r3 = fsopen$auto(0x0, 0x1) fsconfig$auto(r3, 0x8, 0x0, 0x0, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D0\x00', 0x8001, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) msync$auto(0x1ffff000, 0x1800000ff000000, 0x400000004) r4 = openat$auto_proc_pid_smaps_operations_internal(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/smaps\x00', 0x42000, 0x0) read$auto_proc_pid_smaps_operations_internal(r4, &(0x7f00000002c0)=""/190, 0xfffffe39) 2.255310635s ago: executing program 4 (id=2646): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/irq/12/hwirq\x00', 0x2000, 0x0) unlink$auto(&(0x7f0000000000)='.\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x14, r2, 0x936355e497c8b7e5, 0x70bd25, 0x25dddbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4010}, 0x4048800) sendfile$auto(0x1, 0x3, 0x0, 0x40000000c07) read$auto(r0, 0x0, 0x20) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/loop2/queue/nomerges\x00', 0xa001, 0x0) write$auto(r3, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) r4 = openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, &(0x7f0000004080)='/sys/kernel/tracing/per_cpu/cpu0/buffer_size_kb\x00', 0x80201, 0x0) madvise$auto(0xfff, 0x101, 0x1a6) writev$auto(r4, &(0x7f0000005f00)={0x0, 0x4}, 0x6) r5 = openat$auto_xfs_dir_file_operations_xfs_file(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/bluetooth/hci7/hci7:201\x00', 0x20c00, 0x0) ioctl$auto_XFS_IOC_RTGROUP_GEOMETRY(r5, 0xc0805841, &(0x7f0000000040)={0xfffffffe, 0x0, 0x1ff, 0x4724, 0xd}) r6 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) timerfd_gettime$auto(r6, &(0x7f0000000100)={{0x30e9, 0x9}, {0x7, 0x2}}) madvise$auto(0x26, 0x0, 0x821) mmap$auto(0x0, 0x2020009, 0x207, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) msgget$auto(0xb, 0x80000001) 2.048425301s ago: executing program 3 (id=2647): sendmsg$auto_BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x9800) r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r0, &(0x7f0000000000)="c80d1b5d399b39", 0xfdef) 2.026495199s ago: executing program 2 (id=2648): name_to_handle_at$auto(0xffffffffffffffff, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0, 0x2) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, 0x0, 0x107601, 0x0) mmap$auto(0x1, 0x200000020009, 0x10000000000df, 0xeb2, 0x401, 0x8006) close_range$auto(0x2, 0x8, 0x0) setsockopt$auto(0x400000000000003, 0x29, 0x1b, 0x0, 0x56b) mprotect$auto(0x110c230000, 0xa588, 0x6) mremap$auto(0x110c231000, 0xfffffffffffffffc, 0x101, 0x3, 0x0) timer_create$auto(0xfffffffa, &(0x7f0000000100)={@sival_ptr=0x0, @inferred, 0x1, @_tid=0xffffffffffffffff}, 0x0) timer_settime$auto(0x0, 0xeb17, &(0x7f0000000180)={{0xf, 0x10007}, {0x9}}, 0x0) timer_gettime$auto(0x0, 0x0) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) setuid$auto(0x0) r0 = epoll_create$auto(0x1) capset$auto(0x0, 0x0) epoll_ctl$auto(r0, 0x1, 0x8000000000000000, 0x0) rt_sigprocmask$auto_SIG_UNBLOCK(0x1, &(0x7f0000000000)={0x2}, 0x0, 0x8) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count\x00', 0xc0082, 0x0) read$auto(r1, 0x0, 0x8) close_range$auto(r0, 0xffffffffffffffff, 0x0) socket(0x1e, 0x4, 0x0) setsockopt$auto(r1, 0xfffffffa, 0xfffff6de, 0x0, 0x6) 1.747518144s ago: executing program 2 (id=2649): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000006c0)={'batadv0\x00', 0x0}) sendmsg$auto_BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)={0x1c, r2, 0xb11, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x9800) 1.688933188s ago: executing program 4 (id=2650): mmap$auto(0x0, 0x2, 0x8004000080000df, 0x40eb2, 0x401, 0x300000000001) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000680), 0xffffffffffffffff) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x80802, 0x0) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x501, 0x0) write$auto(r0, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) close_range$auto(0x2, 0x8, 0x0) 1.681707291s ago: executing program 3 (id=2651): socket(0x2, 0x801, 0x100) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000003040), 0xffffffffffffffff) sendmsg$auto_OVS_METER_CMD_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000003200)={&(0x7f0000000640)={0x320, r1, 0x159198c6007aa95d, 0x70bd29, 0x25dfdbfc, {}, [@OVS_METER_ATTR_KBPS={0x4}, @OVS_METER_ATTR_ID={0x8, 0x1, 0x5}, @OVS_METER_ATTR_BANDS={0x300, 0x4, 0x0, 0x1, [@generic, @nested={0x2fa, 0x10d, 0x0, 0x1, [@generic="430b9d17a8ecfa48c0e17755ecd5d46a8588fcd7cc3ad678edd7dac0aa4f92db17405d344d3202b390afa845d5378143a8f98e1ac2ec2396fa0ef5e35851efee7eec", @generic="d844d437e16a767fd1e4f94ca4e001894820f11f7c08f1a63851783f64a351d8b194575afba6e3d3334aa84448a2a59c5522386d2acf3163ec517e558256747ac80cb9235605d79e304c779ee91c1115172e3012daf3662a479d26c054c0b6f826cab6fc1ee0a0b18419c94b6a5ed58587256cf0a6ed968bedf42e9a70fc66f0a4be7f845d0d39e3fe1471583353d7c2862b523dd589a993e7cfe591a58afe6130b5be028264cc902c792a892246d064c4bcae0f45e40caf8170224200d461", @typed={0x8, 0xc4, 0x0, 0x0, @pid}, @nested={0xbd, 0x122, 0x0, 0x1, [@generic="da0b0f3687a69245b6f6730a58dec2fcf783f8ec2c6e77d8f3098e3a45b17ad31f3ded4947974900350b7216ee8f68ad096bd66649b48f2edf7458e00363da324a7bff68753b7e37cb89c965ad543cbd44c3ce1b56a569fbf2b766549267fbd63da8f2e1589d4930d8475b09fc460c972ced3c9d554ad5213808e15f3032baf25f54de5e66c28e9be00ec217ab1ecd7f11462bc9201a5aa4f392ece95e11b86871556c6b566d0b63102cafb54e3243b3c38dbf03fc30af1b1b"]}, @generic="57bd5577b095bc0707", @typed={0x52, 0x9b, 0x0, 0x0, @binary="1ccdaff36829caeffe8ca2bec7831839bb8e9bbedfcc7bc9c6f99e6d9873a1af1f8d7d06e20fc6c8c7e2877a7f46735318f474ceb4bd161be52f5716f6f019b1cefa8a526f3a5ac78057b4bd8455"}, @typed={0x16, 0xcb, 0x0, 0x0, @binary="0853f092e07d31f8eb8809564d700de8aa06"}, @nested={0xb7, 0xca, 0x0, 0x1, [@nested={0x24, 0x104, 0x0, 0x1, [@generic="be5fc8351fe62be0bc1551fd3e077313b4a95a2d7580a454a57e36d2", @nested={0x4, 0xee}]}, @generic="5009778284e30825f5cade16ca948ca5c396ea01254ca4a0a9390d7b57f915624d33817847cf6182fd92e8eb5c4f883fe75ee2e35c17e4de7becf724583e2b38159a40d8db0d3224811d9668ae91121a15293863e017d310613b1aabb6ce8bafc0973d48738630d6459d4765cf541d610e413cc5c984cb368ac9c5b44bd3e51a8e79c3e14eaf5712ffcffa7c38cd0e"]}]}]}]}, 0x320}, 0x1, 0x0, 0x0, 0x20008040}, 0x40) mmap$auto(0x0, 0x2020007, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x6, 0x0) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) ioctl$auto(r3, 0x5393, r2) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @empty}, 0x51) select$auto(0x6, 0x0, &(0x7f0000000100)={[0x8, 0x200000000005, 0x7, 0x7, 0x8, 0x80000004, 0xc, 0x6, 0x8fc, 0xb80, 0xe34c, 0x9, 0x3, 0xfffffffffffff954, 0xfffffffffffffffc, 0xfff]}, 0x0, 0x0) 1.580204023s ago: executing program 6 (id=2652): openat$auto_hsr_node_table_fops_(0xffffffffffffff9c, 0x0, 0x861c2, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001040)='/sys/devices/platform/vhci_hcd.14/usb37/37-0:1.0/usb37-port5/power/control\x00', 0x6700, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0xe, 0x940, 0x1ffde, 0x8, 0x2000000000000006, 0x2, 0x9, 0x5, 0xfffffffffffffffe, 0x7, 0xb0, 0x7, 0x2, 0x3, 0x5, 0x7, 0x0, 0x6, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40]}, 0x1fe, 0x81) prctl$auto(0x34, 0x0, 0x0, 0x0, 0x0) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\'', @ANYRES16, @ANYBLOB="000226bd7000fedbdf25040000000600060009000800000000040000000008000200", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a0005000180c200000e00000a0001000000000000000000080004001400000008000300050000000a00"], 0x6c}, 0x1, 0x0, 0x0, 0x4040840}, 0x44890) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) r0 = socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) remap_file_pages$auto(0x6a27, 0x7ffffffff000, 0x0, 0x3, 0x4) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40400c4) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) 1.503208178s ago: executing program 2 (id=2653): name_to_handle_at$auto(0xffffffffffffffff, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0, 0x2) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, 0x0, 0x107601, 0x0) mmap$auto(0x1, 0x200000020009, 0x10000000000df, 0xeb2, 0x401, 0x8006) close_range$auto(0x2, 0x8, 0x0) setsockopt$auto(0x400000000000003, 0x29, 0x1b, 0x0, 0x56b) mprotect$auto(0x110c230000, 0xa588, 0x6) mremap$auto(0x110c231000, 0xfffffffffffffffc, 0x101, 0x3, 0x0) timer_create$auto(0xfffffffa, &(0x7f0000000100)={@sival_ptr=0x0, @inferred, 0x1, @_tid=0xffffffffffffffff}, 0x0) timer_settime$auto(0x0, 0xeb17, &(0x7f0000000180)={{0xf, 0x10007}, {0x9}}, 0x0) timer_gettime$auto(0x0, 0x0) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) setuid$auto(0x0) r0 = epoll_create$auto(0x1) epoll_ctl$auto(r0, 0x1, 0x8000000000000000, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count\x00', 0xc0082, 0x0) read$auto(r1, 0x0, 0x8) close_range$auto(r0, 0xffffffffffffffff, 0x0) 1.116540438s ago: executing program 4 (id=2654): r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mtdblock0\x00', 0x14f602, 0x0) openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/x86/tlb_single_page_flush_ceiling\x00', 0x22001, 0x0) r1 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x4fc480, 0x0) r2 = openat$auto_percpu_stats_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x40080, 0x0) read$auto_percpu_stats_fops_(r2, &(0x7f0000000040)=""/83, 0x53) read$auto(r1, 0x0, 0x1f40) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, 0x0, 0x8000) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0xfffffffffffffffd, 0xb, 0xa, 0x40007fff, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x1, 0x5e, 0x80000001, 0x7, 0x2, 0x93, 0x400000001, 0x5]}, 0x0) writev$auto(0x3, &(0x7f0000000080)={0x0, 0x1}, 0x3) r3 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_LINK_GET(r0, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002900)={&(0x7f0000000500)=ANY=[@ANYBLOB="1d000000", @ANYRES16=r3, @ANYBLOB="010026bd7000fedbdf250800000004000480"], 0x18}, 0x1, 0x0, 0x0, 0x14880}, 0x4044090) unshare$auto(0x40000080) lstat$auto(0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), r0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/cpu/smt/control\x00', 0x2ab42, 0x0) rename$auto(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000080)='./file0\x00') setsockopt$auto_SO_ATTACH_FILTER(0xffffffffffffffff, 0x8001, 0x1a, &(0x7f0000000380)='nl80211\x00', 0x4) lstat$auto(0x0, &(0x7f0000000180)={0xd, 0x2, 0xfffffffd, 0x2, 0x0, 0x0, 0x0, 0xfa9a, 0x8, 0x7fffffffffffffff, 0x8000000004, 0x100000007fffffff, 0x8000000005, 0x0, 0x7, 0x4, 0x2}) write$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000000040)='1', 0x1) 1.11554294s ago: executing program 2 (id=2655): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) clock_gettime$auto(0x1, 0x0) r0 = socket(0x2, 0x5, 0x0) getsockopt$auto(r0, 0x84, 0xd, 0x0, 0x0) mlockall$auto(0x7) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) mprotect$auto(0x0, 0x806121, 0x6) clock_adjtime$auto(0x0, &(0x7f0000000040)={0xfbb, 0x0, 0x7f, 0xfffffffff7fffffe, 0x0, 0x8, 0x7, 0x0, 0x7, 0x8, 0x52, {0x3ff, 0x7}, 0xfffffffffffffffa, 0xa5, 0xa, 0x13c, 0x0, 0x4, 0x1000, 0x800000000000007, 0x1, 0x90, 0xfffffff5}) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x1d, 0x2, 0x7) r2 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r3}, 0x6a) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000000), r1) r4 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r4, &(0x7f0000000840)="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", 0x56e) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = open(0x0, 0x10840, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000000040), r6) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004a80)={0x3c, r7, 0x1b, 0x70bd26, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0xc, 0x3, 0x0, 0x1, [@nested={0x8, 0x17, 0x0, 0x1, [@nested={0x4, 0x7f}]}]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f1779048590828847"}, @OVS_PACKET_ATTR_KEY={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) mmap$auto(0x0, 0x1, 0xfd5, 0x12, r5, 0x0) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, 0x0, 0x668401, 0x0) 887.683203ms ago: executing program 6 (id=2656): openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sg0\x00', 0x8001, 0x0) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd8/size\x00', 0x80000, 0x0) read$auto(r1, 0x0, 0xc) ioctl$auto_SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000040)) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/oom_adj\x00', 0x48402, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) mmap$auto(0x2000, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) ioctl$auto_PAGEMAP_SCAN(r3, 0xc0606610, &(0x7f000000c380)={0x60, 0x0, 0x100000, 0x7fffffffefff, 0xfffffffffffffffe, 0x1, 0x8, 0xbff, 0x2c, 0x2c, 0x3, 0x2}) mmap$auto(0x0, 0x202000b, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0x2c, 0x0) r4 = fsopen$auto(0x0, 0x1) fsconfig$auto(r4, 0x8, 0x0, 0x0, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D0\x00', 0x8001, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) msync$auto(0x1ffff000, 0x1800000ff000000, 0x400000004) r5 = openat$auto_proc_pid_smaps_operations_internal(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/smaps\x00', 0x42000, 0x0) read$auto_proc_pid_smaps_operations_internal(r5, &(0x7f00000002c0)=""/190, 0xfffffe39) 882.932037ms ago: executing program 2 (id=2657): r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(r0, r0, 0x9) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mtdblock0\x00', 0x14f602, 0x0) openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/x86/tlb_single_page_flush_ceiling\x00', 0x22001, 0x0) r1 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x4fc480, 0x0) r2 = openat$auto_percpu_stats_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x40080, 0x0) read$auto_percpu_stats_fops_(r2, &(0x7f0000000040)=""/83, 0x53) read$auto(r1, 0x0, 0x1f40) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, 0x0, 0x8000) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0xfffffffffffffffd, 0xb, 0xa, 0x40007fff, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x1, 0x5e, 0x80000001, 0x7, 0x2, 0x93, 0x400000001, 0x5]}, 0x0) writev$auto(0x3, &(0x7f0000000080)={0x0, 0x1}, 0x3) r3 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_LINK_GET(r0, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002900)={&(0x7f0000000500)=ANY=[@ANYBLOB="1d000000", @ANYRES16=r3, @ANYBLOB="010026bd7000fedbdf250800000004000480"], 0x18}, 0x1, 0x0, 0x0, 0x14880}, 0x4044090) unshare$auto(0x40000080) lstat$auto(0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), r0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/cpu/smt/control\x00', 0x2ab42, 0x0) rename$auto(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000080)='./file0\x00') setsockopt$auto_SO_ATTACH_FILTER(0xffffffffffffffff, 0x8001, 0x1a, &(0x7f0000000380)='nl80211\x00', 0x4) lstat$auto(0x0, &(0x7f0000000180)={0xd, 0x2, 0xfffffffd, 0x2, 0x0, 0x0, 0x0, 0xfa9a, 0x8, 0x7fffffffffffffff, 0x8000000004, 0x100000007fffffff, 0x8000000005, 0x0, 0x7, 0x4, 0x2}) write$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000000040)='1', 0x1) 591.671084ms ago: executing program 4 (id=2658): name_to_handle_at$auto(0xffffffffffffffff, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0, 0x2) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, 0x0, 0x107601, 0x0) mmap$auto(0x1, 0x200000020009, 0x10000000000df, 0xeb2, 0x401, 0x8006) close_range$auto(0x2, 0x8, 0x0) setsockopt$auto(0x400000000000003, 0x29, 0x1b, 0x0, 0x56b) mprotect$auto(0x110c230000, 0xa588, 0x6) mremap$auto(0x110c231000, 0xfffffffffffffffc, 0x101, 0x3, 0x0) timer_create$auto(0xfffffffa, &(0x7f0000000100)={@sival_ptr=0x0, @inferred, 0x1, @_tid=0xffffffffffffffff}, 0x0) timer_settime$auto(0x0, 0xeb17, &(0x7f0000000180)={{0xf, 0x10007}, {0x9}}, 0x0) timer_gettime$auto(0x0, 0x0) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) setuid$auto(0x0) r0 = epoll_create$auto(0x1) capset$auto(0x0, 0x0) epoll_ctl$auto(r0, 0x1, 0x8000000000000000, 0x0) rt_sigprocmask$auto_SIG_UNBLOCK(0x1, &(0x7f0000000000)={0x2}, 0x0, 0x8) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count\x00', 0xc0082, 0x0) read$auto(r1, 0x0, 0x8) close_range$auto(r0, 0xffffffffffffffff, 0x0) socket(0x1e, 0x4, 0x0) 480.897168ms ago: executing program 2 (id=2659): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/irq/12/hwirq\x00', 0x2000, 0x0) unlink$auto(&(0x7f0000000000)='.\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x14, r2, 0x936355e497c8b7e5, 0x70bd25, 0x25dddbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4010}, 0x4048800) sendfile$auto(0x1, 0x3, 0x0, 0x40000000c07) read$auto(r0, 0x0, 0x20) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/loop2/queue/nomerges\x00', 0xa001, 0x0) write$auto(r3, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) r4 = openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, &(0x7f0000004080)='/sys/kernel/tracing/per_cpu/cpu0/buffer_size_kb\x00', 0x80201, 0x0) madvise$auto(0xfff, 0x101, 0x1a6) writev$auto(r4, &(0x7f0000005f00)={0x0, 0x4}, 0x6) r5 = openat$auto_xfs_dir_file_operations_xfs_file(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/bluetooth/hci7/hci7:201\x00', 0x20c00, 0x0) ioctl$auto_XFS_IOC_RTGROUP_GEOMETRY(r5, 0xc0805841, &(0x7f0000000040)={0xfffffffe, 0x0, 0x1ff, 0x4724, 0xd}) r6 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) timerfd_gettime$auto(r6, &(0x7f0000000100)={{0x30e9, 0x9}, {0x7, 0x2}}) madvise$auto(0x26, 0x0, 0x821) mmap$auto(0x0, 0x2020009, 0x207, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) msgget$auto(0xb, 0x80000001) 373.543313ms ago: executing program 4 (id=2660): sendmsg$auto_BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x9800) r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r0, &(0x7f0000000000)="c80d1b5d399b39", 0xfdef) 0s ago: executing program 4 (id=2661): name_to_handle_at$auto(0xffffffffffffffff, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0, 0x2) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, 0x0, 0x107601, 0x0) mmap$auto(0x1, 0x200000020009, 0x10000000000df, 0xeb2, 0x401, 0x8006) close_range$auto(0x2, 0x8, 0x0) setsockopt$auto(0x400000000000003, 0x29, 0x1b, 0x0, 0x56b) mprotect$auto(0x110c230000, 0xa588, 0x6) mremap$auto(0x110c231000, 0xfffffffffffffffc, 0x101, 0x3, 0x0) timer_create$auto(0xfffffffa, &(0x7f0000000100)={@sival_ptr=0x0, @inferred, 0x1, @_tid=0xffffffffffffffff}, 0x0) timer_settime$auto(0x0, 0xeb17, &(0x7f0000000180)={{0xf, 0x10007}, {0x9}}, 0x0) timer_gettime$auto(0x0, 0x0) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) setuid$auto(0x0) r0 = epoll_create$auto(0x1) capset$auto(0x0, 0x0) epoll_ctl$auto(r0, 0x1, 0x8000000000000000, 0x0) rt_sigprocmask$auto_SIG_UNBLOCK(0x1, &(0x7f0000000000)={0x2}, 0x0, 0x8) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count\x00', 0xc0082, 0x0) read$auto(r1, 0x0, 0x8) close_range$auto(r0, 0xffffffffffffffff, 0x0) socket(0x1e, 0x4, 0x0) setsockopt$auto(r1, 0xfffffffa, 0xfffff6de, 0x0, 0x6) kernel console output (not intermixed with test programs): 18 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 692.266852][ C0] sd 0:0:1:0: [sda] tag#4418 CDB: Read(6) 08 00 00 00 10 00 00 00 00 00 00 00 [ 693.302583][T14572] netlink: 330 bytes leftover after parsing attributes in process `syz.5.1810'. [ 693.406698][T14578] netlink: 330 bytes leftover after parsing attributes in process `syz.5.1810'. [ 694.647031][T14604] netlink: 752 bytes leftover after parsing attributes in process `syz.4.1815'. [ 694.851267][ C0] sd 0:0:1:0: [sda] tag#4441 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 694.861948][ C0] sd 0:0:1:0: [sda] tag#4441 CDB: Read(6) 08 00 00 00 10 00 00 00 00 00 00 00 [ 696.405565][T14646] netlink: 752 bytes leftover after parsing attributes in process `syz.5.1825'. [ 696.658140][ C0] sd 0:0:1:0: [sda] tag#4446 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 696.668811][ C0] sd 0:0:1:0: [sda] tag#4446 CDB: Read(6) 08 00 00 00 10 00 00 00 00 00 00 00 [ 698.798575][T14702] netlink: 752 bytes leftover after parsing attributes in process `syz.3.1838'. [ 699.006421][ C0] sd 0:0:1:0: [sda] tag#4463 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 699.016875][ C0] sd 0:0:1:0: [sda] tag#4463 CDB: Read(6) 08 00 00 00 10 00 00 00 00 00 00 00 [ 700.093298][T14740] program syz.4.1847 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 700.159583][T14740] vivid-007: ================= START STATUS ================= [ 700.205449][T14740] vivid-007: Generate PTS: true [ 700.223860][T14740] vivid-007: Generate SCR: true [ 700.254442][T14740] tpg source WxH: 320x240 (Y'CbCr) [ 700.271958][T14740] tpg field: 1 [ 700.342633][T14740] tpg crop: (0,0)/320x240 [ 700.386201][T14740] tpg compose: (0,0)/320x240 [ 700.455725][T14740] tpg colorspace: 8 [ 700.503692][T14740] tpg transfer function: 0/0 [ 700.555046][T14740] tpg Y'CbCr encoding: 0/0 [ 700.624647][T14740] tpg quantization: 0/0 [ 700.650545][T14740] tpg RGB range: 0/2 [ 700.689002][T14740] vivid-007: ================== END STATUS ================== [ 700.980914][T14765] netlink: 757 bytes leftover after parsing attributes in process `syz.4.1853'. [ 701.158678][ C0] sd 0:0:1:0: [sda] tag#4424 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 701.169175][ C0] sd 0:0:1:0: [sda] tag#4424 CDB: Read(6) 08 00 00 00 10 00 00 00 00 00 00 00 [ 703.438425][T14815] netlink: 757 bytes leftover after parsing attributes in process `syz.3.1864'. [ 703.656813][ C0] sd 0:0:1:0: [sda] tag#4448 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 703.667253][ C0] sd 0:0:1:0: [sda] tag#4448 CDB: Read(6) 08 00 00 00 10 00 00 00 00 00 00 00 [ 703.785552][T14828] FAULT_INJECTION: forcing a failure. [ 703.785552][T14828] name failslab, interval 1, probability 0, space 0, times 0 [ 703.873979][T14828] CPU: 0 UID: 0 PID: 14828 Comm: syz.2.1867 Tainted: G L syzkaller #0 PREEMPT(full) [ 703.874005][T14828] Tainted: [L]=SOFTLOCKUP [ 703.874010][T14828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 703.874020][T14828] Call Trace: [ 703.874025][T14828] [ 703.874031][T14828] dump_stack_lvl+0x100/0x190 [ 703.874060][T14828] should_fail_ex.cold+0x5/0xa [ 703.874079][T14828] should_failslab+0xc2/0x120 [ 703.874095][T14828] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 703.874116][T14828] ? security_inode_alloc+0x3b/0x2c0 [ 703.874132][T14828] ? lockdep_init_map_type+0x5c/0x250 [ 703.874154][T14828] security_inode_alloc+0x3b/0x2c0 [ 703.874169][T14828] inode_init_always_gfp+0xced/0x1040 [ 703.874186][T14828] alloc_inode+0x8e/0x250 [ 703.874204][T14828] sock_alloc+0x44/0x280 [ 703.874346][T14828] ? security_socket_create+0x7f/0x250 [ 703.874370][T14828] __sock_create+0xc2/0x860 [ 703.874389][T14828] __sys_socket+0x14d/0x260 [ 703.874405][T14828] ? __pfx___sys_socket+0x10/0x10 [ 703.874425][T14828] __x64_sys_socket+0x72/0xb0 [ 703.874439][T14828] ? lockdep_hardirqs_on+0x78/0x100 [ 703.874491][T14828] do_syscall_64+0x106/0xf80 [ 703.874511][T14828] ? clear_bhb_loop+0x40/0x90 [ 703.874529][T14828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 703.874543][T14828] RIP: 0033:0x7f0cf199c799 [ 703.874557][T14828] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 703.874572][T14828] RSP: 002b:00007f0cf287c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 703.874586][T14828] RAX: ffffffffffffffda RBX: 00007f0cf1c15fa0 RCX: 00007f0cf199c799 [ 703.874595][T14828] RDX: 0000000000000084 RSI: 0000000000000005 RDI: 000000000000000a [ 703.874603][T14828] RBP: 00007f0cf1a32c99 R08: 0000000000000000 R09: 0000000000000000 [ 703.874612][T14828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 703.874620][T14828] R13: 00007f0cf1c16038 R14: 00007f0cf1c15fa0 R15: 00007fff9197f398 [ 703.874640][T14828] [ 703.874668][T14828] socket: no more sockets [ 705.273839][T14869] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1876'. [ 705.846827][T14880] netlink: 757 bytes leftover after parsing attributes in process `syz.5.1878'. [ 706.011618][ C0] sd 0:0:1:0: [sda] tag#4465 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 706.022206][ C0] sd 0:0:1:0: [sda] tag#4465 CDB: Read(6) 08 00 00 00 10 00 00 00 00 00 00 00 [ 706.831000][T14904] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1884'. [ 707.856217][T14923] netlink: Unknown conntrack attr (type=257, max=9) [ 708.025529][T14926] netlink: 759 bytes leftover after parsing attributes in process `syz.3.1889'. [ 708.210188][ C0] sd 0:0:1:0: [sda] tag#4423 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 708.220769][ C0] sd 0:0:1:0: [sda] tag#4423 CDB: Read(6) 08 00 00 00 10 00 00 00 00 00 00 00 [ 708.957710][T14940] openvswitch: netlink: Key 15 has unexpected len 16 expected 4 [ 709.185133][T14948] netlink: 25 bytes leftover after parsing attributes in process `syz.3.1896'. [ 710.325632][T14976] netlink: 759 bytes leftover after parsing attributes in process `syz.5.1900'. [ 710.663373][ C0] sd 0:0:1:0: [sda] tag#4435 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 710.673830][ C0] sd 0:0:1:0: [sda] tag#4435 CDB: Read(6) 08 00 00 00 10 00 00 00 00 00 00 00 [ 712.305471][ T9690] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 712.906171][T15028] device-mapper: ioctl: device name cannot contain '/' [ 713.539577][T15036] netlink: 759 bytes leftover after parsing attributes in process `syz.4.1914'. [ 713.822388][ C0] sd 0:0:1:0: [sda] tag#4457 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 713.832877][ C0] sd 0:0:1:0: [sda] tag#4457 CDB: Read(6) 08 00 00 00 10 00 00 00 00 00 00 00 [ 715.087343][T15083] netlink: 760 bytes leftover after parsing attributes in process `syz.2.1927'. [ 715.286297][ C0] sd 0:0:1:0: [sda] tag#4462 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 715.296771][ C0] sd 0:0:1:0: [sda] tag#4462 CDB: Read(6) 08 00 00 00 10 00 00 00 00 00 00 00 [ 717.117827][T15128] netlink: 760 bytes leftover after parsing attributes in process `syz.5.1938'. [ 717.263162][ C0] sd 0:0:1:0: [sda] tag#4474 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 717.273759][ C0] sd 0:0:1:0: [sda] tag#4474 CDB: Read(6) 08 00 00 00 10 00 00 00 00 00 00 00 [ 719.487285][T15188] netlink: 760 bytes leftover after parsing attributes in process `syz.3.1952'. [ 719.637298][ C0] sd 0:0:1:0: [sda] tag#4438 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 719.647812][ C0] sd 0:0:1:0: [sda] tag#4438 CDB: Read(6) 08 00 00 00 10 00 00 00 00 00 00 00 [ 720.552003][T15211] FAULT_INJECTION: forcing a failure. [ 720.552003][T15211] name failslab, interval 1, probability 0, space 0, times 0 [ 720.610945][T15211] CPU: 0 UID: 0 PID: 15211 Comm: syz.4.1957 Tainted: G L syzkaller #0 PREEMPT(full) [ 720.610969][T15211] Tainted: [L]=SOFTLOCKUP [ 720.610975][T15211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 720.610983][T15211] Call Trace: [ 720.610988][T15211] [ 720.610994][T15211] dump_stack_lvl+0x100/0x190 [ 720.611018][T15211] should_fail_ex.cold+0x5/0xa [ 720.611035][T15211] should_failslab+0xc2/0x120 [ 720.611049][T15211] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 720.611069][T15211] ? __d_alloc+0x34/0xa80 [ 720.611084][T15211] ? lockdep_init_map_type+0x5c/0x250 [ 720.611104][T15211] __d_alloc+0x34/0xa80 [ 720.611120][T15211] d_alloc_pseudo+0x1c/0xc0 [ 720.611138][T15211] alloc_file_pseudo+0xcf/0x230 [ 720.611155][T15211] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 720.611172][T15211] ? alloc_fd+0x476/0x790 [ 720.611188][T15211] sock_alloc_file+0x50/0x210 [ 720.611210][T15211] __sys_socket+0x1c0/0x260 [ 720.611225][T15211] ? __pfx___sys_socket+0x10/0x10 [ 720.611244][T15211] __x64_sys_socket+0x72/0xb0 [ 720.611258][T15211] ? lockdep_hardirqs_on+0x78/0x100 [ 720.611278][T15211] do_syscall_64+0x106/0xf80 [ 720.611295][T15211] ? clear_bhb_loop+0x40/0x90 [ 720.611311][T15211] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 720.611325][T15211] RIP: 0033:0x7f577659c799 [ 720.611337][T15211] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 720.611350][T15211] RSP: 002b:00007f577753d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 720.611363][T15211] RAX: ffffffffffffffda RBX: 00007f5776815fa0 RCX: 00007f577659c799 [ 720.611373][T15211] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 720.611380][T15211] RBP: 00007f5776632c99 R08: 0000000000000000 R09: 0000000000000000 [ 720.611388][T15211] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 720.611396][T15211] R13: 00007f5776816038 R14: 00007f5776815fa0 R15: 00007ffeae6bfda8 [ 720.611421][T15211] [ 721.315342][T15211] kAFS: Invalid Command on /proc/fs/afs/cells file [ 721.847425][T15237] netlink: 569 bytes leftover after parsing attributes in process `syz.4.1963'. [ 722.001930][ C0] sd 0:0:1:0: [sda] tag#4443 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 722.012512][ C0] sd 0:0:1:0: [sda] tag#4443 CDB: Read(6) 08 00 00 00 10 00 00 00 00 00 00 00 [ 723.276292][T15269] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !PjE r҄y*"l-y– [ 723.630115][T15269] sysfs: cannot create duplicate filename '/class/ieee80211/!PjE r҄y*"l-y–L̓]' [ 723.716533][T15278] FAULT_INJECTION: forcing a failure. [ 723.716533][T15278] name failslab, interval 1, probability 0, space 0, times 0 [ 723.763558][T15278] CPU: 0 UID: 0 PID: 15278 Comm: syz.4.1972 Tainted: G L syzkaller #0 PREEMPT(full) [ 723.763585][T15278] Tainted: [L]=SOFTLOCKUP [ 723.763591][T15278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 723.763600][T15278] Call Trace: [ 723.763605][T15278] [ 723.763611][T15278] dump_stack_lvl+0x100/0x190 [ 723.763638][T15278] should_fail_ex.cold+0x5/0xa [ 723.763655][T15278] should_failslab+0xc2/0x120 [ 723.763671][T15278] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 723.763691][T15278] ? fcntl_setlk+0xaa/0xe40 [ 723.763740][T15278] ? __lock_acquire+0x4a5/0x2630 [ 723.763762][T15278] fcntl_setlk+0xaa/0xe40 [ 723.763779][T15278] ? __pfx_fcntl_setlk+0x10/0x10 [ 723.763797][T15278] ? find_held_lock+0x2b/0x80 [ 723.763811][T15278] ? __might_fault+0xc5/0x140 [ 723.763830][T15278] ? __might_fault+0xc5/0x140 [ 723.763855][T15278] do_fcntl+0xf39/0x1670 [ 723.763874][T15278] ? __pfx_do_fcntl+0x10/0x10 [ 723.763890][T15278] ? __fget_files+0x215/0x3d0 [ 723.763909][T15278] ? tomoyo_file_fcntl+0x6c/0xc0 [ 723.764010][T15278] __x64_sys_fcntl+0x163/0x200 [ 723.764031][T15278] do_syscall_64+0x106/0xf80 [ 723.764061][T15278] ? clear_bhb_loop+0x40/0x90 [ 723.764079][T15278] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 723.764094][T15278] RIP: 0033:0x7f577659c799 [ 723.764107][T15278] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 723.764125][T15278] RSP: 002b:00007f577753d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 723.764140][T15278] RAX: ffffffffffffffda RBX: 00007f5776815fa0 RCX: 00007f577659c799 [ 723.764150][T15278] RDX: 0000000000000004 RSI: 0000000000000026 RDI: 0000000000000003 [ 723.764158][T15278] RBP: 00007f5776632c99 R08: 0000000000000000 R09: 0000000000000000 [ 723.764167][T15278] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 723.764176][T15278] R13: 00007f5776816038 R14: 00007f5776815fa0 R15: 00007ffeae6bfda8 [ 723.764194][T15278] [ 723.992189][T15269] CPU: 0 UID: 0 PID: 15269 Comm: syz.3.1969 Tainted: G L syzkaller #0 PREEMPT(full) [ 723.992213][T15269] Tainted: [L]=SOFTLOCKUP [ 723.992218][T15269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 723.992226][T15269] Call Trace: [ 723.992231][T15269] [ 723.992236][T15269] dump_stack_lvl+0x100/0x190 [ 723.992263][T15269] sysfs_warn_dup.cold+0x1c/0x28 [ 723.992310][T15269] sysfs_do_create_link_sd+0x113/0x140 [ 723.992332][T15269] sysfs_create_link+0x61/0xc0 [ 723.992350][T15269] device_add+0x675/0x1950 [ 723.992431][T15269] ? __pfx_device_add+0x10/0x10 [ 723.992446][T15269] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 723.992470][T15269] ? ieee80211_set_bitrate_flags+0x41b/0x6b0 [ 723.992557][T15269] wiphy_register+0x1e5b/0x2d30 [ 723.992599][T15269] ? __rtnl_unlock+0xb9/0xf0 [ 723.992646][T15269] ? netdev_run_todo+0x7a0/0x12c0 [ 723.992708][T15269] ? __pfx_wiphy_register+0x10/0x10 [ 723.992728][T15269] ? __asan_memset+0x23/0x50 [ 723.992747][T15269] ? minstrel_ht_alloc+0x5e6/0x7f0 [ 723.992830][T15269] ieee80211_register_hw+0x2cfd/0x4140 [ 723.992906][T15269] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 723.992926][T15269] ? __pfx___debug_object_init+0x10/0x10 [ 723.992997][T15269] ? find_held_lock+0x2b/0x80 [ 723.993011][T15269] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 723.993033][T15269] ? __hrtimer_setup+0x178/0x280 [ 723.993053][T15269] mac80211_hwsim_new_radio+0x2847/0x57d0 [ 723.993111][T15269] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 723.993145][T15269] hwsim_new_radio_nl+0xc1f/0x1340 [ 723.993168][T15269] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 723.993194][T15269] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1a0/0x280 [ 723.993245][T15269] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1aa/0x280 [ 723.993263][T15269] genl_family_rcv_msg_doit+0x214/0x300 [ 723.993280][T15269] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 723.993294][T15269] ? genl_get_cmd+0x3ef/0x720 [ 723.993311][T15269] ? bpf_lsm_capable+0x9/0x10 [ 723.993326][T15269] ? security_capable+0x80/0x260 [ 723.993374][T15269] ? ns_capable+0xd2/0xf0 [ 723.993397][T15269] genl_rcv_msg+0x560/0x800 [ 723.993413][T15269] ? __pfx_genl_rcv_msg+0x10/0x10 [ 723.993428][T15269] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 723.993455][T15269] netlink_rcv_skb+0x159/0x420 [ 723.993496][T15269] ? __pfx_genl_rcv_msg+0x10/0x10 [ 723.993511][T15269] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 723.993538][T15269] ? netlink_deliver_tap+0x1ae/0xcc0 [ 723.993560][T15269] genl_rcv+0x28/0x40 [ 723.993571][T15269] netlink_unicast+0x5aa/0x870 [ 723.993594][T15269] ? __pfx_netlink_unicast+0x10/0x10 [ 723.993612][T15269] ? __pfx___might_resched+0x10/0x10 [ 723.993632][T15269] ? __lock_acquire+0x4a5/0x2630 [ 723.993654][T15269] netlink_sendmsg+0x8b0/0xda0 [ 723.993676][T15269] ? __pfx_netlink_sendmsg+0x10/0x10 [ 723.993695][T15269] ? __import_iovec+0x1d2/0x640 [ 723.993713][T15269] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 723.993758][T15269] ____sys_sendmsg+0x9e1/0xb70 [ 723.993771][T15269] ? __pfx_netlink_sendmsg+0x10/0x10 [ 723.993792][T15269] ? __pfx_____sys_sendmsg+0x10/0x10 [ 723.993815][T15269] ___sys_sendmsg+0x190/0x1e0 [ 723.993831][T15269] ? __pfx____sys_sendmsg+0x10/0x10 [ 723.993869][T15269] __sys_sendmsg+0x170/0x220 [ 723.993909][T15269] ? __pfx___sys_sendmsg+0x10/0x10 [ 723.993927][T15269] ? count_memcg_events_mm.constprop.0+0x109/0x2a0 [ 723.993956][T15269] ? do_user_addr_fault+0x8d6/0x12f0 [ 723.993980][T15269] do_syscall_64+0x106/0xf80 [ 723.993998][T15269] ? clear_bhb_loop+0x40/0x90 [ 723.994015][T15269] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 723.994029][T15269] RIP: 0033:0x7f033c59c799 [ 723.994043][T15269] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 723.994056][T15269] RSP: 002b:00007f033d42e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 723.994070][T15269] RAX: ffffffffffffffda RBX: 00007f033c816540 RCX: 00007f033c59c799 [ 723.994079][T15269] RDX: 0000000000040800 RSI: 00002000000000c0 RDI: 0000000000000003 [ 723.994087][T15269] RBP: 00007f033c632c99 R08: 0000000000000000 R09: 0000000000000000 [ 723.994095][T15269] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 723.994103][T15269] R13: 00007f033c8165d8 R14: 00007f033c816540 R15: 00007fff3c1ffea8 [ 723.994121][T15269] [ 724.873437][T15285] netlink: 569 bytes leftover after parsing attributes in process `syz.2.1973'. [ 725.057565][ C0] sd 0:0:1:0: [sda] tag#4460 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 725.068021][ C0] sd 0:0:1:0: [sda] tag#4460 CDB: Read(6) 08 00 00 00 10 00 00 00 00 00 00 00 [ 726.534168][T15321] ecryptfs_miscdev_response: (sizeof(*msg) + msg->data_len) = [1067213646]; data_size = [146]. Invalid packet. [ 726.625895][T15321] ecryptfs_miscdev_write: Failed to deliver miscdev response to requesting operation; rc = [-22] [ 727.513669][T15352] netlink: 569 bytes leftover after parsing attributes in process `syz.4.1986'. [ 727.690744][ C0] sd 0:0:1:0: [sda] tag#4476 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 727.701220][ C0] sd 0:0:1:0: [sda] tag#4476 CDB: Read(6) 08 00 00 00 10 00 00 00 00 00 00 00 [ 729.596631][ T9690] Bluetooth: hci1: unexpected event 0x1c length: 725 > 5 [ 729.650922][T15394] netlink: 573 bytes leftover after parsing attributes in process `syz.2.1997'. [ 729.809215][ T9690] Bluetooth: hci1: unexpected event 0x3e length: 726 > 260 [ 729.809249][ T9690] Bluetooth: hci1: unexpected subevent 0x0d length: 725 > 260 [ 729.824672][ T9690] Bluetooth: hci1: Unknown advertising packet type: 0x7f [ 729.824691][ T9690] Bluetooth: hci1: adv larger than maximum supported [ 729.832042][ T9690] Bluetooth: hci1: Unknown advertising packet type: 0x5d [ 729.840006][ T9690] Bluetooth: hci1: adv larger than maximum supported [ 729.849804][ T9690] Bluetooth: hci1: Malformed LE Event: 0x0d [ 729.863788][T15398] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1999'. [ 729.878657][ C0] sd 0:0:1:0: [sda] tag#4430 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 729.889080][ C0] sd 0:0:1:0: [sda] tag#4430 CDB: Read(6) 08 00 00 00 10 00 00 00 00 00 00 00 [ 732.077214][T15455] netlink: 573 bytes leftover after parsing attributes in process `syz.4.2010'. [ 732.171535][ C0] sd 0:0:1:0: [sda] tag#4447 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 732.182187][ C0] sd 0:0:1:0: [sda] tag#4447 CDB: Read(6) 08 00 00 00 10 00 00 00 00 00 00 00 [ 734.703827][ T9999] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 734.716917][ T9999] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 734.726289][ T9999] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 734.734434][ T9999] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 734.753864][ T9999] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 735.617090][T15504] chnl_net:caif_netlink_parms(): no params data found [ 736.175941][T15504] bridge0: port 1(bridge_slave_0) entered blocking state [ 736.211770][T15504] bridge0: port 1(bridge_slave_0) entered disabled state [ 736.236508][T15504] bridge_slave_0: entered allmulticast mode [ 736.256617][T15504] bridge_slave_0: entered promiscuous mode [ 736.281298][T15504] bridge0: port 2(bridge_slave_1) entered blocking state [ 736.297461][T15504] bridge0: port 2(bridge_slave_1) entered disabled state [ 736.331823][T15504] bridge_slave_1: entered allmulticast mode [ 736.354558][T15504] bridge_slave_1: entered promiscuous mode [ 736.450593][T15504] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 736.502595][T15504] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 736.758009][T15504] team0: Port device team_slave_0 added [ 736.785383][ T9999] Bluetooth: hci5: command tx timeout [ 736.889031][T15504] team0: Port device team_slave_1 added [ 736.990215][T15504] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 737.011434][T15504] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 737.108544][T15504] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 737.184588][T15504] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 737.207246][T15504] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 737.302292][T15504] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 737.519946][T15504] hsr_slave_0: entered promiscuous mode [ 737.545986][T15504] hsr_slave_1: entered promiscuous mode [ 737.582739][T15504] debugfs: 'hsr0' already exists in 'hsr' [ 737.615327][T15504] Cannot create hsr debugfs directory [ 737.829972][ T29] audit: type=1800 audit(65597.670:25): pid=15580 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2040" name="dbroot" dev="configfs" ino=62153 res=0 errno=0 [ 738.865213][ T9999] Bluetooth: hci5: command tx timeout [ 739.154606][T15504] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 739.198064][T15504] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 739.239822][T15504] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 739.271279][T15504] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 739.990799][T15504] 8021q: adding VLAN 0 to HW filter on device bond0 [ 740.112457][T15504] 8021q: adding VLAN 0 to HW filter on device team0 [ 740.174097][T12747] bridge0: port 1(bridge_slave_0) entered blocking state [ 740.181432][T12747] bridge0: port 1(bridge_slave_0) entered forwarding state [ 740.272207][T12748] bridge0: port 2(bridge_slave_1) entered blocking state [ 740.279361][T12748] bridge0: port 2(bridge_slave_1) entered forwarding state [ 740.393570][T15504] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 740.476948][T15504] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 740.945340][ T9999] Bluetooth: hci5: command tx timeout [ 741.201263][T15504] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 741.779681][T15671] FAULT_INJECTION: forcing a failure. [ 741.779681][T15671] name failslab, interval 1, probability 0, space 0, times 0 [ 741.865078][T15671] CPU: 0 UID: 0 PID: 15671 Comm: syz.4.2059 Tainted: G L syzkaller #0 PREEMPT(full) [ 741.865105][T15671] Tainted: [L]=SOFTLOCKUP [ 741.865110][T15671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 741.865119][T15671] Call Trace: [ 741.865125][T15671] [ 741.865133][T15671] dump_stack_lvl+0x100/0x190 [ 741.865161][T15671] should_fail_ex.cold+0x5/0xa [ 741.865179][T15671] should_failslab+0xc2/0x120 [ 741.865195][T15671] __kmalloc_cache_noprof+0x7a/0x6f0 [ 741.865216][T15671] ? vkms_plane_duplicate_state+0x45/0x130 [ 741.865320][T15671] vkms_plane_duplicate_state+0x45/0x130 [ 741.865336][T15671] drm_atomic_get_plane_state+0x279/0x760 [ 741.865397][T15671] drm_client_modeset_commit_atomic+0x237/0x7e0 [ 741.865445][T15671] ? trace_contention_end+0x140/0x180 [ 741.865468][T15671] ? __mutex_lock+0x26a/0x1b90 [ 741.865489][T15671] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 741.865509][T15671] ? drm_master_internal_acquire+0x21/0x80 [ 741.865545][T15671] drm_client_modeset_commit_locked+0x14d/0x580 [ 741.865569][T15671] drm_client_modeset_commit+0x4f/0x80 [ 741.865589][T15671] __drm_fb_helper_restore_fbdev_mode_unlocked.part.0+0x137/0x160 [ 741.865660][T15671] drm_fb_helper_restore_fbdev_mode_unlocked+0x93/0xc0 [ 741.865682][T15671] drm_fbdev_client_restore+0x1b/0x30 [ 741.865719][T15671] ? __pfx_drm_fbdev_client_restore+0x10/0x10 [ 741.865735][T15671] drm_client_dev_restore+0x205/0x2a0 [ 741.865758][T15671] drm_release+0x2c6/0x360 [ 741.865799][T15671] ? __pfx_drm_release+0x10/0x10 [ 741.865817][T15671] __fput+0x3ff/0xb40 [ 741.865846][T15671] task_work_run+0x150/0x240 [ 741.865869][T15671] ? __pfx_task_work_run+0x10/0x10 [ 741.865895][T15671] exit_to_user_mode_loop+0x100/0x4a0 [ 741.865918][T15671] do_syscall_64+0x668/0xf80 [ 741.865937][T15671] ? clear_bhb_loop+0x40/0x90 [ 741.865955][T15671] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 741.865969][T15671] RIP: 0033:0x7f577659c799 [ 741.865983][T15671] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 741.865997][T15671] RSP: 002b:00007f57774fb028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 741.866012][T15671] RAX: 0000000000000000 RBX: 00007f5776816180 RCX: 00007f577659c799 [ 741.866021][T15671] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 741.866030][T15671] RBP: 00007f5776632c99 R08: 0000000000000000 R09: 0000000000000000 [ 741.866040][T15671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 741.866052][T15671] R13: 00007f5776816218 R14: 00007f5776816180 R15: 00007ffeae6bfda8 [ 741.866072][T15671] [ 742.697914][T15675] FAULT_INJECTION: forcing a failure. [ 742.697914][T15675] name fail_futex, interval 1, probability 0, space 0, times 0 [ 742.736410][T15675] CPU: 0 UID: 0 PID: 15675 Comm: syz.2.2060 Tainted: G L syzkaller #0 PREEMPT(full) [ 742.736434][T15675] Tainted: [L]=SOFTLOCKUP [ 742.736439][T15675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 742.736448][T15675] Call Trace: [ 742.736453][T15675] [ 742.736458][T15675] dump_stack_lvl+0x100/0x190 [ 742.736483][T15675] should_fail_ex.cold+0x5/0xa [ 742.736500][T15675] get_futex_key+0x1d2/0x1620 [ 742.736518][T15675] ? __pfx_get_futex_key+0x10/0x10 [ 742.736533][T15675] ? lock_acquire+0x1cf/0x380 [ 742.736555][T15675] futex_wake+0xea/0x530 [ 742.736576][T15675] ? __pfx_futex_wake+0x10/0x10 [ 742.736594][T15675] ? exit_mm_release+0x19/0x30 [ 742.736616][T15675] do_futex+0x32b/0x350 [ 742.736633][T15675] ? __pfx_do_futex+0x10/0x10 [ 742.736648][T15675] ? __might_fault+0xc5/0x140 [ 742.736671][T15675] mm_release+0x24a/0x2f0 [ 742.736685][T15675] do_exit+0x704/0x2b60 [ 742.736704][T15675] ? __pfx_do_exit+0x10/0x10 [ 742.736720][T15675] ? do_raw_spin_lock+0x128/0x260 [ 742.736738][T15675] ? find_held_lock+0x2b/0x80 [ 742.736750][T15675] ? get_signal+0x7e0/0x21e0 [ 742.736766][T15675] do_group_exit+0xd5/0x2a0 [ 742.736784][T15675] get_signal+0x1ec7/0x21e0 [ 742.736805][T15675] ? __pfx_get_signal+0x10/0x10 [ 742.736819][T15675] ? do_futex+0x192/0x350 [ 742.736844][T15675] arch_do_signal_or_restart+0x91/0x770 [ 742.736896][T15675] ? blkcg_maybe_throttle_current+0x5df/0xeb0 [ 742.736977][T15675] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 742.736998][T15675] ? __pfx___x64_sys_futex+0x10/0x10 [ 742.737019][T15675] exit_to_user_mode_loop+0x86/0x4a0 [ 742.737038][T15675] do_syscall_64+0x668/0xf80 [ 742.737056][T15675] ? clear_bhb_loop+0x40/0x90 [ 742.737073][T15675] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 742.737087][T15675] RIP: 0033:0x7f0cf199c799 [ 742.737099][T15675] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 742.737112][T15675] RSP: 002b:00007f0cf287c0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 742.737126][T15675] RAX: fffffffffffffe00 RBX: 00007f0cf1c15fa8 RCX: 00007f0cf199c799 [ 742.737135][T15675] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f0cf1c15fa8 [ 742.737143][T15675] RBP: 00007f0cf1c15fa0 R08: 0000000000000000 R09: 0000000000000000 [ 742.737151][T15675] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 742.737159][T15675] R13: 00007f0cf1c16038 R14: 00007fff9197f2b0 R15: 00007fff9197f398 [ 742.737176][T15675] [ 743.129700][T15504] veth0_vlan: entered promiscuous mode [ 743.139667][T15504] veth1_vlan: entered promiscuous mode [ 743.158858][T15504] veth0_macvtap: entered promiscuous mode [ 743.167877][T15504] veth1_macvtap: entered promiscuous mode [ 743.184358][T15504] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 743.194674][T15504] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 743.262613][ T9999] Bluetooth: hci5: command tx timeout [ 743.342058][ T9709] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 743.354786][ T9709] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 743.365986][ T9709] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 743.374668][ T9709] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 743.760488][T12751] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 743.772538][T12751] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 743.945384][ T9696] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 743.962494][ T9696] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 744.171055][T15700] FAULT_INJECTION: forcing a failure. [ 744.171055][T15700] name failslab, interval 1, probability 0, space 0, times 0 [ 744.223165][T15702] netlink: 573 bytes leftover after parsing attributes in process `syz.6.2021'. [ 744.358292][T15700] CPU: 0 UID: 0 PID: 15700 Comm: syz.3.2063 Tainted: G L syzkaller #0 PREEMPT(full) [ 744.358319][T15700] Tainted: [L]=SOFTLOCKUP [ 744.358325][T15700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 744.358334][T15700] Call Trace: [ 744.358339][T15700] [ 744.358345][T15700] dump_stack_lvl+0x100/0x190 [ 744.358372][T15700] should_fail_ex.cold+0x5/0xa [ 744.358390][T15700] should_failslab+0xc2/0x120 [ 744.358406][T15700] __kmalloc_cache_noprof+0x7a/0x6f0 [ 744.358424][T15700] ? __vb2_init_fileio+0x18f/0x1000 [ 744.358545][T15700] __vb2_init_fileio+0x18f/0x1000 [ 744.358561][T15700] ? lockdep_hardirqs_on+0x78/0x100 [ 744.358582][T15700] ? __pollwait+0x276/0x470 [ 744.358605][T15700] vb2_core_poll+0x611/0x740 [ 744.358622][T15700] vb2_poll+0x4b/0xe0 [ 744.358668][T15700] vb2_fop_poll+0x10e/0x350 [ 744.358684][T15700] ? __pfx_vb2_fop_poll+0x10/0x10 [ 744.358709][T15700] v4l2_poll+0x15f/0x220 [ 744.358778][T15700] ? __pfx_v4l2_poll+0x10/0x10 [ 744.358799][T15700] do_sys_poll+0x6e5/0xeb0 [ 744.358828][T15700] ? __pfx_do_sys_poll+0x10/0x10 [ 744.358866][T15700] ? __futex_wait+0x256/0x300 [ 744.358888][T15700] ? __pfx___pollwait+0x10/0x10 [ 744.358911][T15700] ? __pfx_pollwake+0x10/0x10 [ 744.358959][T15700] ? ktime_get_ts64+0x2d2/0x3f0 [ 744.358974][T15700] ? read_tsc+0x9/0x20 [ 744.358989][T15700] ? ktime_get_ts64+0x256/0x3f0 [ 744.359006][T15700] ? poll_select_set_timeout+0xcc/0x160 [ 744.359026][T15700] ? __x64_sys_futex+0x358/0x4d0 [ 744.359045][T15700] __x64_sys_poll+0x1b3/0x420 [ 744.359059][T15700] ? __pfx___x64_sys_poll+0x10/0x10 [ 744.359078][T15700] do_syscall_64+0x106/0xf80 [ 744.359097][T15700] ? clear_bhb_loop+0x40/0x90 [ 744.359114][T15700] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 744.359128][T15700] RIP: 0033:0x7f033c59c799 [ 744.359141][T15700] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 744.359155][T15700] RSP: 002b:00007f033d4b2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000007 [ 744.359170][T15700] RAX: ffffffffffffffda RBX: 00007f033c816180 RCX: 00007f033c59c799 [ 744.359179][T15700] RDX: 0000000000000007 RSI: 0000000000000003 RDI: 0000200000000480 [ 744.359188][T15700] RBP: 00007f033c632c99 R08: 0000000000000000 R09: 0000000000000000 [ 744.359209][T15700] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 744.359218][T15700] R13: 00007f033c816218 R14: 00007f033c816180 R15: 00007fff3c1ffea8 [ 744.359237][T15700] [ 744.731533][ C0] sd 0:0:1:0: [sda] tag#4439 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 744.741986][ C0] sd 0:0:1:0: [sda] tag#4439 CDB: Read(6) 08 00 00 00 10 00 00 00 00 00 00 00 [ 746.694215][T15753] netlink: 573 bytes leftover after parsing attributes in process `syz.3.2077'. [ 746.832533][ C0] sd 0:0:1:0: [sda] tag#4464 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 746.842993][ C0] sd 0:0:1:0: [sda] tag#4464 CDB: Read(6) 08 00 00 00 10 00 00 00 00 00 00 00 [ 747.269213][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.275666][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.148803][T15779] program syz.6.2082 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 748.679319][T15787] vhci_hcd vhci_hcd.3: default hub control req: 2306 v001c i0002 l8 [ 748.706041][T15790] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 0 out of range (51000000..2150000000) [ 749.642204][T15812] netlink: 573 bytes leftover after parsing attributes in process `syz.6.2090'. [ 749.859363][ C0] sd 0:0:1:0: [sda] tag#4435 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 749.869826][ C0] sd 0:0:1:0: [sda] tag#4435 CDB: Read(6) 08 00 00 00 10 00 00 00 00 00 00 00 [ 751.864755][T15855] FAULT_INJECTION: forcing a failure. [ 751.864755][T15855] name failslab, interval 1, probability 0, space 0, times 0 [ 751.921832][T15855] CPU: 0 UID: 0 PID: 15855 Comm: syz.6.2100 Tainted: G L syzkaller #0 PREEMPT(full) [ 751.921857][T15855] Tainted: [L]=SOFTLOCKUP [ 751.921862][T15855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 751.921871][T15855] Call Trace: [ 751.921876][T15855] [ 751.921882][T15855] dump_stack_lvl+0x100/0x190 [ 751.921909][T15855] should_fail_ex.cold+0x5/0xa [ 751.921926][T15855] ? memcg_list_lru_alloc+0x4ec/0x740 [ 751.921947][T15855] should_failslab+0xc2/0x120 [ 751.921962][T15855] __kmalloc_noprof+0xe0/0x850 [ 751.921983][T15855] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 751.922001][T15855] memcg_list_lru_alloc+0x4ec/0x740 [ 751.922026][T15855] ? __pfx_memcg_list_lru_alloc+0x10/0x10 [ 751.922046][T15855] ? rcu_read_unlock+0x17/0x60 [ 751.922065][T15855] ? get_mem_cgroup_from_objcg+0xd3/0x330 [ 751.922087][T15855] __memcg_slab_post_alloc_hook+0x130/0x990 [ 751.922107][T15855] ? kasan_save_track+0x14/0x30 [ 751.922129][T15855] kmem_cache_alloc_lru_noprof+0x592/0x6e0 [ 751.922149][T15855] ? __d_alloc+0x34/0xa80 [ 751.922165][T15855] ? security_inode_alloc+0xcf/0x2c0 [ 751.922191][T15855] __d_alloc+0x34/0xa80 [ 751.922209][T15855] path_from_stashed+0x427/0x750 [ 751.922229][T15855] pidfs_alloc_file+0xf8/0x290 [ 751.922251][T15855] ? __pfx_pidfs_alloc_file+0x10/0x10 [ 751.922277][T15855] pidfd_prepare+0x123/0x200 [ 751.922295][T15855] __x64_sys_pidfd_open+0x105/0x1a0 [ 751.922315][T15855] ? __pfx___x64_sys_pidfd_open+0x10/0x10 [ 751.922339][T15855] do_syscall_64+0x106/0xf80 [ 751.922358][T15855] ? clear_bhb_loop+0x40/0x90 [ 751.922375][T15855] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 751.922390][T15855] RIP: 0033:0x7fd5c3f9c799 [ 751.922403][T15855] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 751.922417][T15855] RSP: 002b:00007fd5c4e0c028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b2 [ 751.922431][T15855] RAX: ffffffffffffffda RBX: 00007fd5c4215fa0 RCX: 00007fd5c3f9c799 [ 751.922441][T15855] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 751.922450][T15855] RBP: 00007fd5c4032c99 R08: 0000000000000000 R09: 0000000000000000 [ 751.922459][T15855] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 751.922468][T15855] R13: 00007fd5c4216038 R14: 00007fd5c4215fa0 R15: 00007fffac064b98 [ 751.922487][T15855] [ 752.527207][T15876] netlink: 573 bytes leftover after parsing attributes in process `syz.4.2104'. [ 752.575327][ C0] sd 0:0:1:0: [sda] tag#4452 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 752.585893][ C0] sd 0:0:1:0: [sda] tag#4452 CDB: Read(6) 08 00 00 00 10 00 00 00 00 00 00 00 [ 752.650307][T15878] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2105'. [ 752.905987][T15878] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 752.999494][T15878] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 753.031026][T15878] bond0 (unregistering): Released all slaves [ 753.697815][T15907] ALSA: mixer_oss: invalid OSS volume '' [ 753.703562][T15907] ALSA: mixer_oss: invalid OSS volume '' [ 753.926138][T15914] netlink: 669 bytes leftover after parsing attributes in process `syz.2.2113'. [ 754.043059][ C0] sd 0:0:1:0: [sda] tag#4457 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 754.053786][ C0] sd 0:0:1:0: [sda] tag#4457 CDB: Read(6) 08 00 00 00 10 00 00 00 00 00 00 00 [ 754.436058][T15922] random: crng reseeded on system resumption [ 754.535749][T15922] FAULT_INJECTION: forcing a failure. [ 754.535749][T15922] name failslab, interval 1, probability 0, space 0, times 0 [ 754.629711][T15922] CPU: 0 UID: 0 PID: 15922 Comm: syz.3.2114 Tainted: G L syzkaller #0 PREEMPT(full) [ 754.629738][T15922] Tainted: [L]=SOFTLOCKUP [ 754.629744][T15922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 754.629753][T15922] Call Trace: [ 754.629758][T15922] [ 754.629764][T15922] dump_stack_lvl+0x100/0x190 [ 754.629792][T15922] should_fail_ex.cold+0x5/0xa [ 754.629809][T15922] should_failslab+0xc2/0x120 [ 754.629825][T15922] __kmalloc_cache_noprof+0x7a/0x6f0 [ 754.629844][T15922] ? sctp_auth_shkey_create+0x9e/0x210 [ 754.629965][T15922] sctp_auth_shkey_create+0x9e/0x210 [ 754.629987][T15922] sctp_endpoint_new+0x589/0xb20 [ 754.630056][T15922] ? __pfx_sctp_endpoint_new+0x10/0x10 [ 754.630075][T15922] ? lockdep_init_map_type+0x5c/0x250 [ 754.630104][T15922] ? lockdep_init_map_type+0x5c/0x250 [ 754.630122][T15922] ? lockdep_init_map_type+0x5c/0x250 [ 754.630143][T15922] sctp_init_sock+0xe2b/0x1300 [ 754.630185][T15922] ? __pfx_sctp_init_sock+0x10/0x10 [ 754.630205][T15922] inet_create+0x94c/0x1060 [ 754.630278][T15922] ? inet_create+0x94/0x1060 [ 754.630296][T15922] __sock_create+0x339/0x860 [ 754.630316][T15922] __sys_socket+0x14d/0x260 [ 754.630333][T15922] ? __pfx___sys_socket+0x10/0x10 [ 754.630355][T15922] __x64_sys_socket+0x72/0xb0 [ 754.630370][T15922] ? lockdep_hardirqs_on+0x78/0x100 [ 754.630390][T15922] do_syscall_64+0x106/0xf80 [ 754.630408][T15922] ? clear_bhb_loop+0x40/0x90 [ 754.630426][T15922] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 754.630442][T15922] RIP: 0033:0x7f033c59c799 [ 754.630455][T15922] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 754.630469][T15922] RSP: 002b:00007f033d4f4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 754.630484][T15922] RAX: ffffffffffffffda RBX: 00007f033c815fa0 RCX: 00007f033c59c799 [ 754.630494][T15922] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000002 [ 754.630503][T15922] RBP: 00007f033c632c99 R08: 0000000000000000 R09: 0000000000000000 [ 754.630512][T15922] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 754.630521][T15922] R13: 00007f033c816038 R14: 00007f033c815fa0 R15: 00007fff3c1ffea8 [ 754.630540][T15922] [ 754.988034][T15927] hub 1-0:1.0: USB hub found [ 755.027788][T15927] hub 1-0:1.0: 1 port detected [ 756.092353][T15966] netlink: 669 bytes leftover after parsing attributes in process `syz.3.2124'. [ 756.180346][ C0] sd 0:0:1:0: [sda] tag#4472 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 756.190865][ C0] sd 0:0:1:0: [sda] tag#4472 CDB: Read(6) 08 00 00 00 10 00 00 00 00 00 00 00 [ 757.825528][T16014] netlink: 342 bytes leftover after parsing attributes in process `syz.3.2133'. [ 758.086189][T16022] netlink: 669 bytes leftover after parsing attributes in process `syz.2.2134'. [ 758.324102][ C0] sd 0:0:1:0: [sda] tag#4437 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 758.334557][ C0] sd 0:0:1:0: [sda] tag#4437 CDB: Read(6) 08 00 00 00 10 00 00 00 00 00 00 00 [ 758.906919][T16050] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 759.526222][T16039] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 759.540872][T16039] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 759.568271][T16039] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 759.589591][T16039] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 759.611300][T16039] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 759.631971][T16039] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 759.662116][T16039] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 759.694161][T16039] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 759.715374][T16039] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 759.754714][T16039] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 760.052361][T16058] program syz.2.2144 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 760.516827][T16082] netlink: 713 bytes leftover after parsing attributes in process `syz.2.2148'. [ 760.682318][ C0] sd 0:0:1:0: [sda] tag#4470 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 760.693005][ C0] sd 0:0:1:0: [sda] tag#4470 CDB: Read(6) 08 00 00 00 10 00 00 00 00 00 00 00 [ 760.865730][ T9690] Bluetooth: hci0: command 0x0c1a tx timeout [ 761.585445][ T9690] Bluetooth: hci3: command 0x0c1a tx timeout [ 761.591485][ T9690] Bluetooth: hci1: command 0x0c1a tx timeout [ 761.665701][ T9690] Bluetooth: hci2: command 0x0c1a tx timeout [ 761.672123][ T9690] Bluetooth: hci4: command 0x0c1a tx timeout [ 761.747796][ T9690] Bluetooth: hci5: command 0x0c1a tx timeout [ 762.043808][T16117] netlink: 713 bytes leftover after parsing attributes in process `syz.2.2158'. [ 762.224568][ C0] sd 0:0:1:0: [sda] tag#4475 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 762.235148][ C0] sd 0:0:1:0: [sda] tag#4475 CDB: Read(6) 08 00 00 00 10 00 00 00 00 00 00 00 [ 763.087491][T16127] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2160'. [ 763.114851][T16131] FAULT_INJECTION: forcing a failure. [ 763.114851][T16131] name failslab, interval 1, probability 0, space 0, times 0 [ 763.178700][T16131] CPU: 0 UID: 0 PID: 16131 Comm: syz.6.2161 Tainted: G L syzkaller #0 PREEMPT(full) [ 763.178729][T16131] Tainted: [L]=SOFTLOCKUP [ 763.178734][T16131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 763.178744][T16131] Call Trace: [ 763.178749][T16131] [ 763.178756][T16131] dump_stack_lvl+0x100/0x190 [ 763.178783][T16131] should_fail_ex.cold+0x5/0xa [ 763.178801][T16131] should_failslab+0xc2/0x120 [ 763.178817][T16131] __kvmalloc_node_noprof+0xfa/0xa00 [ 763.178840][T16131] ? io_uring_setup.cold+0x171/0x1d79 [ 763.178862][T16131] ? lockdep_init_map_type+0x5c/0x250 [ 763.178884][T16131] io_uring_setup.cold+0x171/0x1d79 [ 763.178906][T16131] ? ksys_write+0x190/0x250 [ 763.178920][T16131] ? __pfx_io_uring_setup+0x10/0x10 [ 763.179018][T16131] ? do_futex+0x192/0x350 [ 763.179038][T16131] ? __pfx_do_futex+0x10/0x10 [ 763.179065][T16131] ? xfd_validate_state+0x129/0x190 [ 763.179091][T16131] __x64_sys_io_uring_setup+0xc2/0x170 [ 763.179111][T16131] do_syscall_64+0x106/0xf80 [ 763.179130][T16131] ? clear_bhb_loop+0x40/0x90 [ 763.179148][T16131] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 763.179163][T16131] RIP: 0033:0x7fd5c3f9c799 [ 763.179197][T16131] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 763.179213][T16131] RSP: 002b:00007fd5c4deb028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 763.179228][T16131] RAX: ffffffffffffffda RBX: 00007fd5c4216090 RCX: 00007fd5c3f9c799 [ 763.179239][T16131] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000059 [ 763.179248][T16131] RBP: 00007fd5c4032c99 R08: 0000000000000000 R09: 0000000000000000 [ 763.179261][T16131] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 763.179269][T16131] R13: 00007fd5c4216128 R14: 00007fd5c4216090 R15: 00007fffac064b98 [ 763.179290][T16131] [ 763.585274][T16127] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 763.640189][T16127] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 763.823994][ T9690] Bluetooth: hci2: command 0x0c1a tx timeout [ 763.830459][ T9690] Bluetooth: hci5: command 0x0c1a tx timeout [ 763.840091][T16135] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2162'. [ 764.624563][T16127] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 764.638947][T16127] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 765.905577][ T9999] Bluetooth: hci5: command 0x0c1a tx timeout [ 765.911599][ T9999] Bluetooth: hci2: command 0x0c1a tx timeout [ 766.045676][T16158] netlink: 713 bytes leftover after parsing attributes in process `syz.6.2168'. [ 766.204752][ C0] sd 0:0:1:0: [sda] tag#4422 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 766.215223][ C0] sd 0:0:1:0: [sda] tag#4422 CDB: Read(6) 08 00 00 00 10 00 00 00 00 00 00 00 [ 767.102165][T16197] FAULT_INJECTION: forcing a failure. [ 767.102165][T16197] name failslab, interval 1, probability 0, space 0, times 0 [ 767.202023][T16197] CPU: 0 UID: 0 PID: 16197 Comm: syz.2.2174 Tainted: G L syzkaller #0 PREEMPT(full) [ 767.202046][T16197] Tainted: [L]=SOFTLOCKUP [ 767.202051][T16197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 767.202059][T16197] Call Trace: [ 767.202064][T16197] [ 767.202069][T16197] dump_stack_lvl+0x100/0x190 [ 767.202094][T16197] should_fail_ex.cold+0x5/0xa [ 767.202111][T16197] should_failslab+0xc2/0x120 [ 767.202126][T16197] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 767.202145][T16197] ? security_file_alloc+0x34/0x2c0 [ 767.202161][T16197] ? trace_kmem_cache_alloc+0xf3/0x120 [ 767.202178][T16197] security_file_alloc+0x34/0x2c0 [ 767.202194][T16197] init_file+0x95/0x480 [ 767.202210][T16197] alloc_empty_file+0x73/0x1c0 [ 767.202226][T16197] alloc_file_pseudo+0x13a/0x230 [ 767.202243][T16197] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 767.202260][T16197] ? alloc_fd+0x476/0x790 [ 767.202276][T16197] sock_alloc_file+0x50/0x210 [ 767.202298][T16197] __sys_socket+0x1c0/0x260 [ 767.202312][T16197] ? __pfx___sys_socket+0x10/0x10 [ 767.202332][T16197] __x64_sys_socket+0x72/0xb0 [ 767.202345][T16197] ? lockdep_hardirqs_on+0x78/0x100 [ 767.202365][T16197] do_syscall_64+0x106/0xf80 [ 767.202385][T16197] ? clear_bhb_loop+0x40/0x90 [ 767.202401][T16197] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 767.202415][T16197] RIP: 0033:0x7f0cf199c799 [ 767.202427][T16197] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 767.202440][T16197] RSP: 002b:00007f0cf283a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 767.202453][T16197] RAX: ffffffffffffffda RBX: 00007f0cf1c16180 RCX: 00007f0cf199c799 [ 767.202462][T16197] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 767.202469][T16197] RBP: 00007f0cf1a32c99 R08: 0000000000000000 R09: 0000000000000000 [ 767.202477][T16197] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 767.202485][T16197] R13: 00007f0cf1c16218 R14: 00007f0cf1c16180 R15: 00007fff9197f398 [ 767.202503][T16197] [ 767.203052][T16200] sd 0:0:1:0: PR command failed: 1026 [ 767.766952][T16211] can: request_module (can-proto-5) failed. [ 768.202226][T16200] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 768.253803][T16200] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 768.762252][T16240] netlink: 737 bytes leftover after parsing attributes in process `syz.3.2181'. [ 768.965870][ C0] sd 0:0:1:0: [sda] tag#4446 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 768.976347][ C0] sd 0:0:1:0: [sda] tag#4446 CDB: Read(6) 08 00 00 00 10 00 00 00 00 00 00 00 [ 769.436658][T16257] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2186'. [ 769.547953][T16257] bridge0: port 2(bridge_slave_1) entered disabled state [ 769.606571][T16257] bridge_slave_1 (unregistering): left allmulticast mode [ 769.644491][T16257] bridge_slave_1 (unregistering): left promiscuous mode [ 769.680123][T16257] bridge0: port 2(bridge_slave_1) entered disabled state [ 770.624365][T16284] futex_wake_op: syz.6.2191 tries to shift op by -2048; fix this program [ 770.649405][T16284] futex_wake_op: syz.6.2191 tries to shift op by -2048; fix this program [ 770.689435][T16284] 0x000000000001-0x000000020000 : "" [ 770.762405][T16284] ftl_cs: FTL header corrupt! [ 771.202141][T16297] netlink: 737 bytes leftover after parsing attributes in process `syz.3.2194'. [ 771.327243][ C0] sd 0:0:1:0: [sda] tag#4458 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 771.337731][ C0] sd 0:0:1:0: [sda] tag#4458 CDB: Read(6) 08 00 00 00 10 00 00 00 00 00 00 00 [ 772.491600][T16323] FAULT_INJECTION: forcing a failure. [ 772.491600][T16323] name failslab, interval 1, probability 0, space 0, times 0 [ 772.513898][T16315] vhci_hcd vhci_hcd.0: default hub control req: 0000 v0000 i0000 l0 [ 772.553851][T16323] CPU: 0 UID: 0 PID: 16323 Comm: syz.2.2200 Tainted: G L syzkaller #0 PREEMPT(full) [ 772.553878][T16323] Tainted: [L]=SOFTLOCKUP [ 772.553883][T16323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 772.553892][T16323] Call Trace: [ 772.553898][T16323] [ 772.553904][T16323] dump_stack_lvl+0x100/0x190 [ 772.553931][T16323] should_fail_ex.cold+0x5/0xa [ 772.553953][T16323] should_failslab+0xc2/0x120 [ 772.553970][T16323] __kmalloc_cache_noprof+0x7a/0x6f0 [ 772.553990][T16323] ? sctp_add_bind_addr+0xae/0x3e0 [ 772.554007][T16323] ? __pfx_sctp_get_port_local+0x10/0x10 [ 772.554030][T16323] sctp_add_bind_addr+0xae/0x3e0 [ 772.554049][T16323] sctp_do_bind+0x36c/0x760 [ 772.554070][T16323] sctp_connect_new_asoc+0x5e7/0x770 [ 772.554094][T16323] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 772.554112][T16323] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 772.554141][T16323] __sctp_connect+0x3e7/0xc70 [ 772.554159][T16323] ? __pfx___sctp_connect+0x10/0x10 [ 772.554175][T16323] ? __pfx_sctp_inet_connect+0x10/0x10 [ 772.554190][T16323] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 772.554213][T16323] ? __pfx_sctp_inet_connect+0x10/0x10 [ 772.554227][T16323] sctp_inet_connect+0x15f/0x220 [ 772.554243][T16323] __sys_connect_file+0x141/0x1a0 [ 772.554263][T16323] __sys_connect+0x141/0x170 [ 772.554280][T16323] ? __pfx___sys_connect+0x10/0x10 [ 772.554309][T16323] __x64_sys_connect+0x72/0xb0 [ 772.554325][T16323] ? lockdep_hardirqs_on+0x78/0x100 [ 772.554345][T16323] do_syscall_64+0x106/0xf80 [ 772.554363][T16323] ? clear_bhb_loop+0x40/0x90 [ 772.554380][T16323] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 772.554395][T16323] RIP: 0033:0x7f0cf199c799 [ 772.554407][T16323] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 772.554421][T16323] RSP: 002b:00007f0cf287c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 772.554435][T16323] RAX: ffffffffffffffda RBX: 00007f0cf1c15fa0 RCX: 00007f0cf199c799 [ 772.554444][T16323] RDX: 0000000000000054 RSI: 0000200000000080 RDI: 0000000000000003 [ 772.554452][T16323] RBP: 00007f0cf1a32c99 R08: 0000000000000000 R09: 0000000000000000 [ 772.554461][T16323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 772.554469][T16323] R13: 00007f0cf1c16038 R14: 00007f0cf1c15fa0 R15: 00007fff9197f398 [ 772.554487][T16323] [ 773.147447][T16330] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2201'. [ 773.201068][ T29] audit: type=1400 audit(65632.960:26): apparmor="DENIED" operation="setprocattr" info="invalid" error=-22 profile="unconfined" pid=16328 comm="syz.6.2201" [ 773.373791][T16334] netlink: 737 bytes leftover after parsing attributes in process `syz.6.2204'. [ 773.552268][ C0] sd 0:0:1:0: [sda] tag#4467 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 773.562814][ C0] sd 0:0:1:0: [sda] tag#4467 CDB: Read(6) 08 00 00 00 10 00 00 00 00 00 00 00 [ 774.215029][T16358] futex_wake_op: syz.4.2207 tries to shift op by -2048; fix this program [ 774.347187][T16358] futex_wake_op: syz.4.2207 tries to shift op by -2048; fix this program [ 774.572336][T16364] vhci_hcd vhci_hcd.0: default hub control req: 0000 v0000 i0000 l0 [ 775.191809][T16380] netlink: 749 bytes leftover after parsing attributes in process `syz.3.2215'. [ 775.207813][ T29] audit: type=1400 audit(65635.050:27): apparmor="DENIED" operation="setprocattr" info="invalid" error=-22 profile="unconfined" pid=16379 comm="syz.4.2214" [ 775.307515][T16381] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2214'. [ 775.343425][ C0] sd 0:0:1:0: [sda] tag#4422 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 775.353907][ C0] sd 0:0:1:0: [sda] tag#4422 CDB: Read(6) 08 00 00 00 10 00 00 00 00 00 00 00 [ 776.348247][T16404] syz.6.2221 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 776.404073][T16404] FAULT_INJECTION: forcing a failure. [ 776.404073][T16404] name failslab, interval 1, probability 0, space 0, times 0 [ 776.471356][T16404] CPU: 0 UID: 0 PID: 16404 Comm: syz.6.2221 Tainted: G L syzkaller #0 PREEMPT(full) [ 776.471383][T16404] Tainted: [L]=SOFTLOCKUP [ 776.471388][T16404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 776.471397][T16404] Call Trace: [ 776.471402][T16404] [ 776.471409][T16404] dump_stack_lvl+0x100/0x190 [ 776.471436][T16404] should_fail_ex.cold+0x5/0xa [ 776.471454][T16404] should_failslab+0xc2/0x120 [ 776.471469][T16404] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 776.471489][T16404] ? vm_area_alloc+0x1f/0x160 [ 776.471508][T16404] ? vma_merge_new_range+0x38b/0xa30 [ 776.471531][T16404] vm_area_alloc+0x1f/0x160 [ 776.471549][T16404] __mmap_region+0x10cc/0x29e0 [ 776.471572][T16404] ? __pfx___mmap_region+0x10/0x10 [ 776.471589][T16404] ? _prb_read_valid+0x72a/0x880 [ 776.471627][T16404] ? sched_clock+0x38/0x60 [ 776.471653][T16404] ? lockdep_hardirqs_on+0x78/0x100 [ 776.471673][T16404] ? finish_task_switch.isra.0+0x205/0xb80 [ 776.471689][T16404] ? rcu_is_watching+0x12/0xc0 [ 776.471732][T16404] ? rcu_is_watching+0x12/0xc0 [ 776.471753][T16404] ? cap_capable+0x107/0x460 [ 776.471780][T16404] mmap_region+0x180/0x3e0 [ 776.471803][T16404] do_mmap+0xc63/0x12f0 [ 776.471822][T16404] ? __pfx_do_mmap+0x10/0x10 [ 776.471838][T16404] ? __pfx_down_write_killable+0x10/0x10 [ 776.471863][T16404] vm_mmap_pgoff+0x29e/0x470 [ 776.471883][T16404] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 776.471899][T16404] ? do_futex+0x192/0x350 [ 776.471917][T16404] ? __pfx_do_futex+0x10/0x10 [ 776.471934][T16404] ? __x64_sys_setitimer+0x266/0x350 [ 776.471954][T16404] ksys_mmap_pgoff+0xe1/0x650 [ 776.471968][T16404] ? __x64_sys_futex+0x34f/0x4d0 [ 776.471985][T16404] ? __x64_sys_futex+0x358/0x4d0 [ 776.472002][T16404] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 776.472017][T16404] ? xfd_validate_state+0x129/0x190 [ 776.472040][T16404] __x64_sys_mmap+0x125/0x190 [ 776.472062][T16404] do_syscall_64+0x106/0xf80 [ 776.472080][T16404] ? clear_bhb_loop+0x40/0x90 [ 776.472097][T16404] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 776.472112][T16404] RIP: 0033:0x7fd5c3f9c799 [ 776.472125][T16404] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 776.472139][T16404] RSP: 002b:00007fd5c4e0c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 776.472154][T16404] RAX: ffffffffffffffda RBX: 00007fd5c4215fa0 RCX: 00007fd5c3f9c799 [ 776.472163][T16404] RDX: 00000000000000df RSI: 0000000000000005 RDI: 0000000000000000 [ 776.472172][T16404] RBP: 00007fd5c4032c99 R08: 0000000000000002 R09: 0000000000008000 [ 776.472180][T16404] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 776.472190][T16404] R13: 00007fd5c4216038 R14: 00007fd5c4215fa0 R15: 00007fffac064b98 [ 776.472209][T16404] [ 777.220639][T16419] futex_wake_op: syz.3.2223 tries to shift op by -2048; fix this program [ 777.321909][T16419] futex_wake_op: syz.3.2223 tries to shift op by -2048; fix this program [ 778.178191][T16441] netlink: 749 bytes leftover after parsing attributes in process `syz.2.2229'. [ 778.305833][ C0] sd 0:0:1:0: [sda] tag#4457 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 778.316297][ C0] sd 0:0:1:0: [sda] tag#4457 CDB: Read(6) 08 00 00 00 10 00 00 00 00 00 00 00 [ 781.051692][T16501] netlink: 749 bytes leftover after parsing attributes in process `syz.3.2245'. [ 781.192558][T12752] netdevsim netdevsim1335 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 781.218568][ C0] sd 0:0:1:0: [sda] tag#4420 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 781.229205][ C0] sd 0:0:1:0: [sda] tag#4420 CDB: Read(6) 08 00 00 00 10 00 00 00 00 00 00 00 [ 782.093679][T16526] netlink: 326 bytes leftover after parsing attributes in process `syz.6.2251'. [ 783.743098][T16557] netlink: 753 bytes leftover after parsing attributes in process `syz.4.2258'. [ 783.976786][ C0] sd 0:0:1:0: [sda] tag#4457 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 783.987267][ C0] sd 0:0:1:0: [sda] tag#4457 CDB: Read(6) 08 00 00 00 10 00 00 00 00 00 00 00 [ 785.927075][T16600] netlink: 342 bytes leftover after parsing attributes in process `syz.3.2269'. [ 786.061991][ T29] audit: type=1326 audit(65645.900:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16598 comm="syz.3.2269" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f033c59c799 code=0x0 [ 786.088405][T16608] netlink: 753 bytes leftover after parsing attributes in process `syz.6.2271'. [ 786.436378][ C0] sd 0:0:1:0: [sda] tag#4472 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 786.446883][ C0] sd 0:0:1:0: [sda] tag#4472 CDB: Read(6) 08 00 00 00 10 00 00 00 00 00 00 00 [ 787.388617][T16625] FAULT_INJECTION: forcing a failure. [ 787.388617][T16625] name failslab, interval 1, probability 0, space 0, times 0 [ 787.484241][T16625] CPU: 0 UID: 0 PID: 16625 Comm: syz.6.2274 Tainted: G L syzkaller #0 PREEMPT(full) [ 787.484264][T16625] Tainted: [L]=SOFTLOCKUP [ 787.484269][T16625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 787.484277][T16625] Call Trace: [ 787.484282][T16625] [ 787.484287][T16625] dump_stack_lvl+0x100/0x190 [ 787.484314][T16625] should_fail_ex.cold+0x5/0xa [ 787.484330][T16625] should_failslab+0xc2/0x120 [ 787.484345][T16625] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 787.484364][T16625] ? do_getname+0x35/0x390 [ 787.484380][T16625] ? find_held_lock+0x2b/0x80 [ 787.484395][T16625] do_getname+0x35/0x390 [ 787.484413][T16625] do_sys_openat2+0xc5/0x1e0 [ 787.484430][T16625] ? __pfx_do_sys_openat2+0x10/0x10 [ 787.484446][T16625] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 787.484476][T16625] ? __fget_files+0x21f/0x3d0 [ 787.484492][T16625] __x64_sys_openat+0x12d/0x210 [ 787.484510][T16625] ? __pfx___x64_sys_openat+0x10/0x10 [ 787.484525][T16625] ? ksys_write+0x1ac/0x250 [ 787.484544][T16625] do_syscall_64+0x106/0xf80 [ 787.484561][T16625] ? clear_bhb_loop+0x40/0x90 [ 787.484577][T16625] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 787.484591][T16625] RIP: 0033:0x7fd5c3f9c799 [ 787.484603][T16625] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 787.484616][T16625] RSP: 002b:00007fd5c4deb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 787.484630][T16625] RAX: ffffffffffffffda RBX: 00007fd5c4216090 RCX: 00007fd5c3f9c799 [ 787.484639][T16625] RDX: 0000000000004020 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 787.484647][T16625] RBP: 00007fd5c4deb090 R08: 0000000000000000 R09: 0000000000000000 [ 787.484655][T16625] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 787.484663][T16625] R13: 00007fd5c4216128 R14: 00007fd5c4216090 R15: 00007fffac064b98 [ 787.484681][T16625] [ 788.377113][T16650] netlink: 753 bytes leftover after parsing attributes in process `syz.4.2283'. [ 788.548300][ C0] sd 0:0:1:0: [sda] tag#4426 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 788.558837][ C0] sd 0:0:1:0: [sda] tag#4426 CDB: Read(6) 08 00 00 00 10 00 00 00 00 00 00 00 [ 789.654653][T16690] FAULT_INJECTION: forcing a failure. [ 789.654653][T16690] name fail_futex, interval 1, probability 0, space 0, times 0 [ 789.708569][T16690] CPU: 0 UID: 0 PID: 16690 Comm: syz.3.2291 Tainted: G L syzkaller #0 PREEMPT(full) [ 789.708595][T16690] Tainted: [L]=SOFTLOCKUP [ 789.708600][T16690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 789.708609][T16690] Call Trace: [ 789.708614][T16690] [ 789.708620][T16690] dump_stack_lvl+0x100/0x190 [ 789.708647][T16690] should_fail_ex.cold+0x5/0xa [ 789.708665][T16690] get_futex_key+0x1d2/0x1620 [ 789.708684][T16690] ? __pfx_get_futex_key+0x10/0x10 [ 789.708700][T16690] ? lockdep_hardirqs_on+0x78/0x100 [ 789.708722][T16690] ? vmemdup_user+0xbf/0xe0 [ 789.708734][T16690] ? kfree+0x1f6/0x6b0 [ 789.708753][T16690] futex_wake+0xea/0x530 [ 789.708773][T16690] ? vmemdup_user+0xc4/0xe0 [ 789.708786][T16690] ? path_setxattrat+0x21c/0x3b0 [ 789.708808][T16690] ? __pfx_futex_wake+0x10/0x10 [ 789.708833][T16690] ? __pfx_poll_select_finish+0x10/0x10 [ 789.708858][T16690] do_futex+0x32b/0x350 [ 789.708877][T16690] ? __pfx_do_futex+0x10/0x10 [ 789.708900][T16690] __x64_sys_futex+0x34f/0x4d0 [ 789.708920][T16690] ? __pfx___x64_sys_futex+0x10/0x10 [ 789.708944][T16690] do_syscall_64+0x106/0xf80 [ 789.708963][T16690] ? clear_bhb_loop+0x40/0x90 [ 789.708980][T16690] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 789.708995][T16690] RIP: 0033:0x7f033c59c799 [ 789.709008][T16690] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 789.709021][T16690] RSP: 002b:00007f033d4f40e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 789.709036][T16690] RAX: ffffffffffffffda RBX: 00007f033c815fa8 RCX: 00007f033c59c799 [ 789.709045][T16690] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f033c815fac [ 789.709053][T16690] RBP: 00007f033c815fa0 R08: 0000000000000000 R09: 0000000000000000 [ 789.709062][T16690] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 789.709070][T16690] R13: 00007f033c816038 R14: 00007fff3c1ffdc0 R15: 00007fff3c1ffea8 [ 789.709088][T16690] [ 789.709457][T16690] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2291'. [ 790.505772][ T9690] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 790.525296][ T9690] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 790.536276][ T9690] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 790.579879][ T9690] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 790.595596][ T9690] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 791.894780][T16702] chnl_net:caif_netlink_parms(): no params data found [ 792.379588][T16702] bridge0: port 1(bridge_slave_0) entered blocking state [ 792.428259][T16702] bridge0: port 1(bridge_slave_0) entered disabled state [ 792.483936][T16702] bridge_slave_0: entered allmulticast mode [ 792.536114][T16702] bridge_slave_0: entered promiscuous mode [ 792.572665][T16702] bridge0: port 2(bridge_slave_1) entered blocking state [ 792.620851][T16702] bridge0: port 2(bridge_slave_1) entered disabled state [ 792.672988][T16702] bridge_slave_1: entered allmulticast mode [ 792.706183][ T9690] Bluetooth: hci6: command tx timeout [ 792.744262][T16702] bridge_slave_1: entered promiscuous mode [ 793.111315][T16702] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 793.321379][T12748] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 793.368175][T16702] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 793.533791][T12748] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 793.653071][T12748] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 793.742167][T16702] team0: Port device team_slave_0 added [ 793.844461][T12748] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 793.907894][T16702] team0: Port device team_slave_1 added [ 793.995012][T16781] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2310'. [ 794.237984][T16702] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 794.237998][T16702] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 794.238016][T16702] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 794.253728][T16702] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 794.253742][T16702] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 794.253759][T16702] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 794.378278][T16702] hsr_slave_0: entered promiscuous mode [ 794.378974][T16702] hsr_slave_1: entered promiscuous mode [ 794.379385][T16702] debugfs: 'hsr0' already exists in 'hsr' [ 794.379400][T16702] Cannot create hsr debugfs directory [ 794.723838][T12748] bridge_slave_0: left allmulticast mode [ 794.723858][T12748] bridge_slave_0: left promiscuous mode [ 794.724041][T12748] bridge0: port 1(bridge_slave_0) entered disabled state [ 794.785282][ T9690] Bluetooth: hci6: command tx timeout [ 795.357306][T12748] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 795.425595][T12748] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 795.484240][T12748] bond0 (unregistering): Released all slaves [ 796.865218][ T9690] Bluetooth: hci6: command tx timeout [ 797.603649][T16702] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 797.653893][T16855] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2322'. [ 797.749168][T16702] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 797.771783][T16702] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 797.880452][T16702] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 798.109813][T12748] hsr_slave_0: left promiscuous mode [ 798.144946][T12748] hsr_slave_1: left promiscuous mode [ 798.197106][T12748] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 798.204518][T12748] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 798.265871][T16867] netlink: 326 bytes leftover after parsing attributes in process `syz.3.2323'. [ 798.287677][T12748] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 798.309379][T12748] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 798.327418][T12748] veth1_macvtap: left promiscuous mode [ 798.341602][T12748] veth0_macvtap: left promiscuous mode [ 798.353404][T12748] veth1_vlan: left promiscuous mode [ 798.364887][T12748] veth0_vlan: left promiscuous mode [ 798.592886][T12748] team0 (unregistering): Port device team_slave_1 removed [ 798.614269][T12748] team0 (unregistering): Port device team_slave_0 removed [ 798.946532][ T9690] Bluetooth: hci6: command tx timeout [ 799.143118][T16702] 8021q: adding VLAN 0 to HW filter on device bond0 [ 799.261853][T16702] 8021q: adding VLAN 0 to HW filter on device team0 [ 799.318624][T12747] bridge0: port 1(bridge_slave_0) entered blocking state [ 799.325930][T12747] bridge0: port 1(bridge_slave_0) entered forwarding state [ 799.393893][T12751] bridge0: port 2(bridge_slave_1) entered blocking state [ 799.401065][T12751] bridge0: port 2(bridge_slave_1) entered forwarding state [ 800.098180][T16702] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 800.177215][T16702] veth0_vlan: entered promiscuous mode [ 800.200930][T16702] veth1_vlan: entered promiscuous mode [ 800.275789][T16702] veth0_macvtap: entered promiscuous mode [ 800.297625][T16702] veth1_macvtap: entered promiscuous mode [ 800.329759][T16702] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 800.370735][T16702] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 800.404337][ T9696] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 800.432067][ T9696] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 800.486807][ T9696] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 800.535772][ T9696] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 800.598525][ T9696] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 800.636260][ T9696] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 800.656230][T12747] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 800.671715][T12747] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 800.859521][T16925] netlink: 757 bytes leftover after parsing attributes in process `syz.2.2294'. [ 801.024970][ C0] sd 0:0:1:0: [sda] tag#4467 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 801.035451][ C0] sd 0:0:1:0: [sda] tag#4467 CDB: Read(6) 08 00 00 00 10 00 00 00 00 00 00 00 [ 802.556151][T16974] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2333'. [ 802.669338][T16978] netlink: 326 bytes leftover after parsing attributes in process `syz.2.2334'. [ 802.869047][T16982] netlink: 757 bytes leftover after parsing attributes in process `syz.3.2340'. [ 803.019869][ C0] sd 0:0:1:0: [sda] tag#4430 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 803.030522][ C0] sd 0:0:1:0: [sda] tag#4430 CDB: Read(6) 08 00 00 00 10 00 00 00 00 00 00 00 [ 803.544701][T16967] sp0: Synchronizing with TNC [ 803.730667][T16998] netlink: 757 bytes leftover after parsing attributes in process `syz.4.2350'. [ 803.848905][ C0] sd 0:0:1:0: [sda] tag#4443 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 803.859362][ C0] sd 0:0:1:0: [sda] tag#4443 CDB: Read(6) 08 00 00 00 10 00 00 00 00 00 00 00 [ 805.507057][T17031] netlink: 326 bytes leftover after parsing attributes in process `syz.4.2349'. [ 805.859330][T17043] netlink: 326 bytes leftover after parsing attributes in process `syz.4.2360'. [ 805.981103][T17048] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2353'. [ 806.387173][T17054] netlink: 757 bytes leftover after parsing attributes in process `syz.4.2355'. [ 806.479695][ T29] audit: type=1800 audit(65666.320:29): pid=17058 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2354" name="SYSV00000008" dev="tmpfs" ino=0 res=0 errno=0 [ 806.581167][ C0] sd 0:0:1:0: [sda] tag#4419 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 806.591645][ C0] sd 0:0:1:0: [sda] tag#4419 CDB: Read(6) 08 00 00 00 10 00 00 00 00 00 00 00 [ 807.028125][T17041] sp0: Synchronizing with TNC [ 808.329578][T17093] input: jJǸ-9%vJ86 as /devices/virtual/input/input18 [ 808.712850][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.730352][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.278373][T17107] netlink: 326 bytes leftover after parsing attributes in process `syz.2.2367'. [ 809.426560][T17109] netlink: 757 bytes leftover after parsing attributes in process `syz.3.2368'. [ 809.629879][ C0] sd 0:0:1:0: [sda] tag#4454 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 809.640384][ C0] sd 0:0:1:0: [sda] tag#4454 CDB: Read(6) 08 00 00 00 10 00 00 00 00 00 00 00 [ 810.719371][ T29] audit: type=1800 audit(65670.560:30): pid=17136 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2373" name="SYSV00000008" dev="tmpfs" ino=0 res=0 errno=0 [ 812.161924][T17159] netlink: 326 bytes leftover after parsing attributes in process `syz.3.2378'. [ 812.355662][T17162] netlink: 757 bytes leftover after parsing attributes in process `syz.6.2379'. [ 812.583996][ C0] sd 0:0:1:0: [sda] tag#4475 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 812.594476][ C0] sd 0:0:1:0: [sda] tag#4475 CDB: Read(6) 08 00 00 00 10 00 00 00 00 00 00 00 [ 813.847373][T17201] input: jJǸ-9%vJ86 as /devices/virtual/input/input19 [ 814.796077][T17213] netlink: 326 bytes leftover after parsing attributes in process `syz.2.2390'. [ 814.980991][T17219] netlink: 753 bytes leftover after parsing attributes in process `syz.2.2392'. [ 815.145632][ C0] sd 0:0:1:0: [sda] tag#4452 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 815.156087][ C0] sd 0:0:1:0: [sda] tag#4452 CDB: Read(6) 08 00 00 00 10 00 00 00 00 00 00 00 [ 817.502381][T17262] netlink: 326 bytes leftover after parsing attributes in process `syz.4.2403'. [ 817.566063][T17264] netlink: 753 bytes leftover after parsing attributes in process `syz.6.2404'. [ 817.690098][ C0] sd 0:0:1:0: [sda] tag#4418 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 817.700613][ C0] sd 0:0:1:0: [sda] tag#4418 CDB: Read(6) 08 00 00 00 10 00 00 00 00 00 00 00 [ 819.090436][T17299] input: jJǸ-9%vJ86 as /devices/virtual/input/input20 [ 819.765253][T17308] netlink: 326 bytes leftover after parsing attributes in process `syz.6.2414'. [ 820.039932][T17315] netlink: 753 bytes leftover after parsing attributes in process `syz.6.2417'. [ 820.254833][ C0] sd 0:0:1:0: [sda] tag#4455 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 820.254875][ C0] sd 0:0:1:0: [sda] tag#4455 CDB: Read(6) 08 00 00 00 10 00 00 00 00 00 00 00 [ 821.234275][T17331] netlink: 252 bytes leftover after parsing attributes in process `syz.4.2423'. [ 821.279597][T17331] unsupported nla_type 65535 [ 821.825575][T17348] netlink: 326 bytes leftover after parsing attributes in process `syz.6.2427'. [ 822.203241][T17354] netlink: 567 bytes leftover after parsing attributes in process `syz.6.2429'. [ 822.467172][ C0] sd 0:0:1:0: [sda] tag#4476 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 822.467228][ C0] sd 0:0:1:0: [sda] tag#4476 CDB: Read(6) 08 00 00 00 10 00 00 00 00 00 00 00 [ 822.633910][T17366] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 824.039292][T17391] netlink: 326 bytes leftover after parsing attributes in process `syz.6.2437'. [ 824.960748][T17415] netlink: 567 bytes leftover after parsing attributes in process `syz.4.2443'. [ 825.122144][ C0] sd 0:0:1:0: [sda] tag#4418 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 825.132694][ C0] sd 0:0:1:0: [sda] tag#4418 CDB: Read(6) 08 00 00 00 10 00 00 00 00 00 00 00 [ 825.505471][T17423] FAULT_INJECTION: forcing a failure. [ 825.505471][T17423] name failslab, interval 1, probability 0, space 0, times 0 [ 825.598621][T17423] CPU: 0 UID: 0 PID: 17423 Comm: syz.4.2446 Tainted: G L syzkaller #0 PREEMPT(full) [ 825.598645][T17423] Tainted: [L]=SOFTLOCKUP [ 825.598650][T17423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 825.598658][T17423] Call Trace: [ 825.598663][T17423] [ 825.598668][T17423] dump_stack_lvl+0x100/0x190 [ 825.598696][T17423] should_fail_ex.cold+0x5/0xa [ 825.598714][T17423] should_failslab+0xc2/0x120 [ 825.598730][T17423] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 825.598750][T17423] ? do_getname+0x35/0x390 [ 825.598766][T17423] ? fput+0x79/0x100 [ 825.598783][T17423] do_getname+0x35/0x390 [ 825.598801][T17423] __x64_sys_mknod+0x78/0xc0 [ 825.598816][T17423] do_syscall_64+0x106/0xf80 [ 825.598837][T17423] ? clear_bhb_loop+0x40/0x90 [ 825.598853][T17423] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 825.598867][T17423] RIP: 0033:0x7f577659c799 [ 825.598879][T17423] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 825.598893][T17423] RSP: 002b:00007f577753d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000085 [ 825.598906][T17423] RAX: ffffffffffffffda RBX: 00007f5776815fa0 RCX: 00007f577659c799 [ 825.598915][T17423] RDX: 0000000000000004 RSI: 0000000000001001 RDI: 0000200000000040 [ 825.598924][T17423] RBP: 00007f577753d090 R08: 0000000000000000 R09: 0000000000000000 [ 825.598932][T17423] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 825.598939][T17423] R13: 00007f5776816038 R14: 00007f5776815fa0 R15: 00007ffeae6bfda8 [ 825.598957][T17423] [ 826.000998][T17427] FAULT_INJECTION: forcing a failure. [ 826.000998][T17427] name failslab, interval 1, probability 0, space 0, times 0 [ 826.032683][T17427] CPU: 0 UID: 0 PID: 17427 Comm: syz.2.2448 Tainted: G L syzkaller #0 PREEMPT(full) [ 826.032710][T17427] Tainted: [L]=SOFTLOCKUP [ 826.032715][T17427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 826.032724][T17427] Call Trace: [ 826.032730][T17427] [ 826.032735][T17427] dump_stack_lvl+0x100/0x190 [ 826.032763][T17427] should_fail_ex.cold+0x5/0xa [ 826.032781][T17427] should_failslab+0xc2/0x120 [ 826.032797][T17427] __kmalloc_cache_noprof+0x7a/0x6f0 [ 826.032815][T17427] ? vkms_plane_duplicate_state+0x45/0x130 [ 826.032836][T17427] vkms_plane_duplicate_state+0x45/0x130 [ 826.032852][T17427] drm_atomic_get_plane_state+0x279/0x760 [ 826.032873][T17427] drm_client_modeset_commit_atomic+0x237/0x7e0 [ 826.032895][T17427] ? trace_contention_end+0x140/0x180 [ 826.032918][T17427] ? __mutex_lock+0x26a/0x1b90 [ 826.032939][T17427] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 826.032959][T17427] ? drm_master_internal_acquire+0x21/0x80 [ 826.032995][T17427] drm_client_modeset_commit_locked+0x14d/0x580 [ 826.033018][T17427] drm_client_modeset_commit+0x4f/0x80 [ 826.033037][T17427] __drm_fb_helper_restore_fbdev_mode_unlocked.part.0+0x137/0x160 [ 826.033060][T17427] drm_fb_helper_restore_fbdev_mode_unlocked+0x93/0xc0 [ 826.033082][T17427] drm_fbdev_client_restore+0x1b/0x30 [ 826.033097][T17427] ? __pfx_drm_fbdev_client_restore+0x10/0x10 [ 826.033112][T17427] drm_client_dev_restore+0x205/0x2a0 [ 826.033134][T17427] drm_release+0x2c6/0x360 [ 826.033152][T17427] ? __pfx_drm_release+0x10/0x10 [ 826.033169][T17427] __fput+0x3ff/0xb40 [ 826.033190][T17427] task_work_run+0x150/0x240 [ 826.033211][T17427] ? __pfx_task_work_run+0x10/0x10 [ 826.033236][T17427] exit_to_user_mode_loop+0x100/0x4a0 [ 826.033257][T17427] do_syscall_64+0x668/0xf80 [ 826.033276][T17427] ? clear_bhb_loop+0x40/0x90 [ 826.033293][T17427] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 826.033308][T17427] RIP: 0033:0x7f9d2459c799 [ 826.033321][T17427] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 826.033335][T17427] RSP: 002b:00007f9d25424028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 826.033350][T17427] RAX: 0000000000000000 RBX: 00007f9d24815fa0 RCX: 00007f9d2459c799 [ 826.033359][T17427] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 826.033367][T17427] RBP: 00007f9d24632c99 R08: 0000000000000000 R09: 0000000000000000 [ 826.033375][T17427] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 826.033383][T17427] R13: 00007f9d24816038 R14: 00007f9d24815fa0 R15: 00007fffed9a60e8 [ 826.033403][T17427] [ 826.735704][T17439] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 826.755297][T17439] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 826.799644][ T9999] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 826.861387][ T9999] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 826.878903][ T9999] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 827.595874][T17452] netlink: 567 bytes leftover after parsing attributes in process `syz.2.2455'. [ 827.706635][T17428] chnl_net:caif_netlink_parms(): no params data found [ 827.736480][ C0] sd 0:0:1:0: [sda] tag#4436 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 827.746939][ C0] sd 0:0:1:0: [sda] tag#4436 CDB: Read(6) 08 00 00 00 10 00 00 00 00 00 00 00 [ 828.317014][T17428] bridge0: port 1(bridge_slave_0) entered blocking state [ 828.389271][T17428] bridge0: port 1(bridge_slave_0) entered disabled state [ 828.440901][T17428] bridge_slave_0: entered allmulticast mode [ 828.509663][T17428] bridge_slave_0: entered promiscuous mode [ 828.670256][T17428] bridge0: port 2(bridge_slave_1) entered blocking state [ 828.718256][T17428] bridge0: port 2(bridge_slave_1) entered disabled state [ 828.758582][T17428] bridge_slave_1: entered allmulticast mode [ 828.824639][T17428] bridge_slave_1: entered promiscuous mode [ 828.945923][ T9999] Bluetooth: hci0: command tx timeout [ 829.045268][T17428] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 829.086131][T17428] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 829.188384][T13547] NFSD: Failed to start, no listeners configured. [ 829.253232][T17428] team0: Port device team_slave_0 added [ 829.399242][T17428] team0: Port device team_slave_1 added [ 829.531390][T17428] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 829.564259][T17428] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 829.604070][T17476] FAULT_INJECTION: forcing a failure. [ 829.604070][T17476] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 829.651410][T17428] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 829.698448][T17428] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 829.719216][T17428] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 829.812207][T17428] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 829.856380][T17476] CPU: 0 UID: 0 PID: 17476 Comm: syz.4.2458 Tainted: G L syzkaller #0 PREEMPT(full) [ 829.856405][T17476] Tainted: [L]=SOFTLOCKUP [ 829.856409][T17476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 829.856417][T17476] Call Trace: [ 829.856423][T17476] [ 829.856428][T17476] dump_stack_lvl+0x100/0x190 [ 829.856453][T17476] should_fail_ex.cold+0x5/0xa [ 829.856470][T17476] _copy_to_user+0x32/0xd0 [ 829.856489][T17476] simple_read_from_buffer+0xcb/0x170 [ 829.856511][T17476] proc_fail_nth_read+0x1af/0x230 [ 829.856530][T17476] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 829.856547][T17476] ? rw_verify_area+0xce/0x6d0 [ 829.856566][T17476] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 829.856582][T17476] vfs_read+0x1e4/0xb30 [ 829.856604][T17476] ? __pfx_vfs_read+0x10/0x10 [ 829.856623][T17476] ? __fget_files+0x215/0x3d0 [ 829.856640][T17476] ? __fget_files+0x21f/0x3d0 [ 829.856657][T17476] ksys_read+0x12a/0x250 [ 829.856669][T17476] ? __pfx_ksys_read+0x10/0x10 [ 829.856686][T17476] do_syscall_64+0x106/0xf80 [ 829.856705][T17476] ? clear_bhb_loop+0x40/0x90 [ 829.856721][T17476] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 829.856735][T17476] RIP: 0033:0x7f577655cfce [ 829.856747][T17476] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 829.856760][T17476] RSP: 002b:00007f57774d9fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 829.856773][T17476] RAX: ffffffffffffffda RBX: 00007f57774da6c0 RCX: 00007f577655cfce [ 829.856782][T17476] RDX: 000000000000000f RSI: 00007f57774da0a0 RDI: 000000000000000c [ 829.856791][T17476] RBP: 00007f57774da090 R08: 0000000000000000 R09: 0000000000000000 [ 829.856799][T17476] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 829.856806][T17476] R13: 00007f5776816308 R14: 00007f5776816270 R15: 00007ffeae6bfda8 [ 829.856824][T17476] [ 830.137439][T17428] hsr_slave_0: entered promiscuous mode [ 830.143916][T17428] hsr_slave_1: entered promiscuous mode [ 830.150237][T17428] debugfs: 'hsr0' already exists in 'hsr' [ 830.156004][T17428] Cannot create hsr debugfs directory [ 830.270455][T17428] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 830.357613][T17428] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 830.421751][T17428] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 830.579183][T17487] FAULT_INJECTION: forcing a failure. [ 830.579183][T17487] name failslab, interval 1, probability 0, space 0, times 0 [ 830.678082][T17487] CPU: 0 UID: 0 PID: 17487 Comm: syz.6.2461 Tainted: G L syzkaller #0 PREEMPT(full) [ 830.678109][T17487] Tainted: [L]=SOFTLOCKUP [ 830.678114][T17487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 830.678138][T17487] Call Trace: [ 830.678144][T17487] [ 830.678150][T17487] dump_stack_lvl+0x100/0x190 [ 830.678178][T17487] should_fail_ex.cold+0x5/0xa [ 830.678196][T17487] ? drm_atomic_state_init+0x190/0x490 [ 830.678214][T17487] should_failslab+0xc2/0x120 [ 830.678230][T17487] __kmalloc_noprof+0xe0/0x850 [ 830.678256][T17487] drm_atomic_state_init+0x190/0x490 [ 830.678273][T17487] ? kasan_save_track+0x14/0x30 [ 830.678295][T17487] drm_atomic_state_alloc+0xd3/0x120 [ 830.678313][T17487] drm_client_modeset_commit_atomic+0xcc/0x7e0 [ 830.678333][T17487] ? trace_contention_end+0x140/0x180 [ 830.678353][T17487] ? __mutex_lock+0x26a/0x1b90 [ 830.678374][T17487] ? __mutex_lock+0x26a/0x1b90 [ 830.678393][T17487] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 830.678413][T17487] ? drm_master_internal_acquire+0x21/0x80 [ 830.678449][T17487] drm_client_modeset_commit_locked+0x14d/0x580 [ 830.678472][T17487] drm_client_modeset_commit+0x4f/0x80 [ 830.678491][T17487] __drm_fb_helper_restore_fbdev_mode_unlocked.part.0+0x137/0x160 [ 830.678514][T17487] drm_fb_helper_restore_fbdev_mode_unlocked+0x93/0xc0 [ 830.678535][T17487] drm_fbdev_client_restore+0x1b/0x30 [ 830.678551][T17487] ? __pfx_drm_fbdev_client_restore+0x10/0x10 [ 830.678566][T17487] drm_client_dev_restore+0x205/0x2a0 [ 830.678589][T17487] drm_release+0x2c6/0x360 [ 830.678607][T17487] ? __pfx_drm_release+0x10/0x10 [ 830.678624][T17487] __fput+0x3ff/0xb40 [ 830.678645][T17487] task_work_run+0x150/0x240 [ 830.678666][T17487] ? __pfx_task_work_run+0x10/0x10 [ 830.678691][T17487] exit_to_user_mode_loop+0x100/0x4a0 [ 830.678712][T17487] do_syscall_64+0x668/0xf80 [ 830.678730][T17487] ? clear_bhb_loop+0x40/0x90 [ 830.678748][T17487] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 830.678762][T17487] RIP: 0033:0x7fd5c3f9c799 [ 830.678775][T17487] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 830.678789][T17487] RSP: 002b:00007fd5c4e0c028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 830.678805][T17487] RAX: 0000000000000000 RBX: 00007fd5c4215fa0 RCX: 00007fd5c3f9c799 [ 830.678815][T17487] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 830.678822][T17487] RBP: 00007fd5c4032c99 R08: 0000000000000000 R09: 0000000000000000 [ 830.678831][T17487] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 830.678839][T17487] R13: 00007fd5c4216038 R14: 00007fd5c4215fa0 R15: 00007fffac064b98 [ 830.678859][T17487] [ 831.023794][T17428] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 831.111244][T17428] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 831.128175][T17428] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 831.137728][T17428] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 831.154070][T17428] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 831.166285][ T9999] Bluetooth: hci0: command tx timeout [ 831.593723][T17514] netlink: 567 bytes leftover after parsing attributes in process `syz.4.2465'. [ 831.673959][T17428] 8021q: adding VLAN 0 to HW filter on device bond0 [ 831.762248][T17428] 8021q: adding VLAN 0 to HW filter on device team0 [ 831.783387][ C0] sd 0:0:1:0: [sda] tag#4479 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 831.793828][ C0] sd 0:0:1:0: [sda] tag#4479 CDB: Read(6) 08 00 00 00 10 00 00 00 00 00 00 00 [ 831.867166][ T9812] bridge0: port 1(bridge_slave_0) entered blocking state [ 831.874383][ T9812] bridge0: port 1(bridge_slave_0) entered forwarding state [ 831.939693][ T9812] bridge0: port 2(bridge_slave_1) entered blocking state [ 831.946879][ T9812] bridge0: port 2(bridge_slave_1) entered forwarding state [ 832.866586][T17428] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 832.987057][T17428] veth0_vlan: entered promiscuous mode [ 833.030424][T17428] veth1_vlan: entered promiscuous mode [ 833.112637][T17428] veth0_macvtap: entered promiscuous mode [ 833.147483][T17428] veth1_macvtap: entered promiscuous mode [ 833.186254][ T9690] Bluetooth: hci0: command tx timeout [ 833.220621][T17428] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 833.260523][T17428] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 833.313054][T12748] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 833.353877][T12748] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 833.384136][T12748] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 833.453846][T12748] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 833.612016][T12748] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 833.653697][T12748] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 833.717549][T12748] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 833.753972][T12748] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 834.981438][T17554] FAULT_INJECTION: forcing a failure. [ 834.981438][T17554] name failslab, interval 1, probability 0, space 0, times 0 [ 835.032362][T17554] CPU: 0 UID: 0 PID: 17554 Comm: syz.4.2471 Tainted: G L syzkaller #0 PREEMPT(full) [ 835.032389][T17554] Tainted: [L]=SOFTLOCKUP [ 835.032394][T17554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 835.032403][T17554] Call Trace: [ 835.032408][T17554] [ 835.032415][T17554] dump_stack_lvl+0x100/0x190 [ 835.032447][T17554] should_fail_ex.cold+0x5/0xa [ 835.032465][T17554] ? drm_atomic_state_init+0x190/0x490 [ 835.032484][T17554] should_failslab+0xc2/0x120 [ 835.032499][T17554] __kmalloc_noprof+0xe0/0x850 [ 835.032537][T17554] drm_atomic_state_init+0x190/0x490 [ 835.032554][T17554] ? kasan_save_track+0x14/0x30 [ 835.032579][T17554] drm_atomic_state_alloc+0xd3/0x120 [ 835.032597][T17554] drm_client_modeset_commit_atomic+0xcc/0x7e0 [ 835.032619][T17554] ? trace_contention_end+0x140/0x180 [ 835.032639][T17554] ? __mutex_lock+0x26a/0x1b90 [ 835.032660][T17554] ? __mutex_lock+0x26a/0x1b90 [ 835.032680][T17554] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 835.032700][T17554] ? drm_master_internal_acquire+0x21/0x80 [ 835.032736][T17554] drm_client_modeset_commit_locked+0x14d/0x580 [ 835.032758][T17554] drm_client_modeset_commit+0x4f/0x80 [ 835.032778][T17554] __drm_fb_helper_restore_fbdev_mode_unlocked.part.0+0x137/0x160 [ 835.032801][T17554] drm_fb_helper_restore_fbdev_mode_unlocked+0x93/0xc0 [ 835.032822][T17554] drm_fbdev_client_restore+0x1b/0x30 [ 835.032838][T17554] ? __pfx_drm_fbdev_client_restore+0x10/0x10 [ 835.032853][T17554] drm_client_dev_restore+0x205/0x2a0 [ 835.032876][T17554] drm_release+0x2c6/0x360 [ 835.032895][T17554] ? __pfx_drm_release+0x10/0x10 [ 835.032912][T17554] __fput+0x3ff/0xb40 [ 835.032933][T17554] task_work_run+0x150/0x240 [ 835.032954][T17554] ? __pfx_task_work_run+0x10/0x10 [ 835.032979][T17554] exit_to_user_mode_loop+0x100/0x4a0 [ 835.033000][T17554] do_syscall_64+0x668/0xf80 [ 835.033022][T17554] ? clear_bhb_loop+0x40/0x90 [ 835.033040][T17554] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 835.033054][T17554] RIP: 0033:0x7f577659c799 [ 835.033067][T17554] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 835.033081][T17554] RSP: 002b:00007f577753d028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 835.033096][T17554] RAX: 0000000000000000 RBX: 00007f5776815fa0 RCX: 00007f577659c799 [ 835.033105][T17554] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 835.033114][T17554] RBP: 00007f5776632c99 R08: 0000000000000000 R09: 0000000000000000 [ 835.033123][T17554] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 835.033132][T17554] R13: 00007f5776816038 R14: 00007f5776815fa0 R15: 00007ffeae6bfda8 [ 835.033152][T17554] [ 835.347328][ T9690] Bluetooth: hci0: command tx timeout [ 835.845691][T17565] netlink: 567 bytes leftover after parsing attributes in process `syz.4.2476'. [ 836.028924][ C0] sd 0:0:1:0: [sda] tag#4446 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 836.039420][ C0] sd 0:0:1:0: [sda] tag#4446 CDB: Read(6) 08 00 00 00 10 00 00 00 00 00 00 00 [ 837.270315][T17589] netlink: 567 bytes leftover after parsing attributes in process `syz.4.2490'. [ 837.298071][T17592] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 837.421268][ C0] sd 0:0:1:0: [sda] tag#4465 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 837.431763][ C0] sd 0:0:1:0: [sda] tag#4465 CDB: Read(6) 08 00 00 00 10 00 00 00 00 00 00 00 [ 839.202728][T17617] FAULT_INJECTION: forcing a failure. [ 839.202728][T17617] name failslab, interval 1, probability 0, space 0, times 0 [ 839.253818][T17617] CPU: 0 UID: 0 PID: 17617 Comm: syz.3.2486 Tainted: G L syzkaller #0 PREEMPT(full) [ 839.253845][T17617] Tainted: [L]=SOFTLOCKUP [ 839.253850][T17617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 839.253859][T17617] Call Trace: [ 839.253864][T17617] [ 839.253870][T17617] dump_stack_lvl+0x100/0x190 [ 839.253899][T17617] should_fail_ex.cold+0x5/0xa [ 839.253916][T17617] ? drm_atomic_state_init+0x190/0x490 [ 839.253933][T17617] should_failslab+0xc2/0x120 [ 839.253949][T17617] __kmalloc_noprof+0xe0/0x850 [ 839.253974][T17617] drm_atomic_state_init+0x190/0x490 [ 839.253991][T17617] ? kasan_save_track+0x14/0x30 [ 839.254013][T17617] drm_atomic_state_alloc+0xd3/0x120 [ 839.254031][T17617] drm_client_modeset_commit_atomic+0xcc/0x7e0 [ 839.254052][T17617] ? trace_contention_end+0x140/0x180 [ 839.254072][T17617] ? __mutex_lock+0x26a/0x1b90 [ 839.254093][T17617] ? __mutex_lock+0x26a/0x1b90 [ 839.254113][T17617] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 839.254133][T17617] ? drm_master_internal_acquire+0x21/0x80 [ 839.254169][T17617] drm_client_modeset_commit_locked+0x14d/0x580 [ 839.254193][T17617] drm_client_modeset_commit+0x4f/0x80 [ 839.254213][T17617] __drm_fb_helper_restore_fbdev_mode_unlocked.part.0+0x137/0x160 [ 839.254235][T17617] drm_fb_helper_restore_fbdev_mode_unlocked+0x93/0xc0 [ 839.254264][T17617] drm_fbdev_client_restore+0x1b/0x30 [ 839.254281][T17617] ? __pfx_drm_fbdev_client_restore+0x10/0x10 [ 839.254296][T17617] drm_client_dev_restore+0x205/0x2a0 [ 839.254320][T17617] drm_release+0x2c6/0x360 [ 839.254339][T17617] ? __pfx_drm_release+0x10/0x10 [ 839.254356][T17617] __fput+0x3ff/0xb40 [ 839.254376][T17617] task_work_run+0x150/0x240 [ 839.254396][T17617] ? __pfx_task_work_run+0x10/0x10 [ 839.254421][T17617] exit_to_user_mode_loop+0x100/0x4a0 [ 839.254441][T17617] do_syscall_64+0x668/0xf80 [ 839.254460][T17617] ? clear_bhb_loop+0x40/0x90 [ 839.254483][T17617] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 839.254498][T17617] RIP: 0033:0x7f0e27f9c799 [ 839.254512][T17617] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 839.254525][T17617] RSP: 002b:00007f0e28f26028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 839.254540][T17617] RAX: 0000000000000000 RBX: 00007f0e28215fa0 RCX: 00007f0e27f9c799 [ 839.254550][T17617] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 839.254559][T17617] RBP: 00007f0e28032c99 R08: 0000000000000000 R09: 0000000000000000 [ 839.254568][T17617] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 839.254576][T17617] R13: 00007f0e28216038 R14: 00007f0e28215fa0 R15: 00007ffcb9e85f58 [ 839.254597][T17617] [ 841.278722][T17653] netlink: 664 bytes leftover after parsing attributes in process `syz.6.2495'. [ 841.476645][ C0] sd 0:0:1:0: [sda] tag#4445 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 841.487407][ C0] sd 0:0:1:0: [sda] tag#4445 CDB: Read(6) 08 00 00 00 10 00 00 00 00 00 00 00 [ 841.869402][T17666] netlink: 664 bytes leftover after parsing attributes in process `syz.6.2510'. [ 841.980263][ C0] sd 0:0:1:0: [sda] tag#4464 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 841.990703][ C0] sd 0:0:1:0: [sda] tag#4464 CDB: Read(6) 08 00 00 00 10 00 00 00 00 00 00 00 [ 842.649436][T17679] FAULT_INJECTION: forcing a failure. [ 842.649436][T17679] name failslab, interval 1, probability 0, space 0, times 0 [ 842.727417][T17679] CPU: 0 UID: 0 PID: 17679 Comm: syz.4.2505 Tainted: G L syzkaller #0 PREEMPT(full) [ 842.727444][T17679] Tainted: [L]=SOFTLOCKUP [ 842.727449][T17679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 842.727458][T17679] Call Trace: [ 842.727464][T17679] [ 842.727470][T17679] dump_stack_lvl+0x100/0x190 [ 842.727498][T17679] should_fail_ex.cold+0x5/0xa [ 842.727516][T17679] ? drm_atomic_state_init+0x190/0x490 [ 842.727533][T17679] should_failslab+0xc2/0x120 [ 842.727549][T17679] __kmalloc_noprof+0xe0/0x850 [ 842.727574][T17679] drm_atomic_state_init+0x190/0x490 [ 842.727590][T17679] ? kasan_save_track+0x14/0x30 [ 842.727613][T17679] drm_atomic_state_alloc+0xd3/0x120 [ 842.727630][T17679] drm_client_modeset_commit_atomic+0xcc/0x7e0 [ 842.727651][T17679] ? trace_contention_end+0x140/0x180 [ 842.727671][T17679] ? __mutex_lock+0x26a/0x1b90 [ 842.727692][T17679] ? __mutex_lock+0x26a/0x1b90 [ 842.727710][T17679] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 842.727731][T17679] ? drm_master_internal_acquire+0x21/0x80 [ 842.727767][T17679] drm_client_modeset_commit_locked+0x14d/0x580 [ 842.727790][T17679] drm_client_modeset_commit+0x4f/0x80 [ 842.727810][T17679] __drm_fb_helper_restore_fbdev_mode_unlocked.part.0+0x137/0x160 [ 842.727834][T17679] drm_fb_helper_restore_fbdev_mode_unlocked+0x93/0xc0 [ 842.727855][T17679] drm_fbdev_client_restore+0x1b/0x30 [ 842.727871][T17679] ? __pfx_drm_fbdev_client_restore+0x10/0x10 [ 842.727886][T17679] drm_client_dev_restore+0x205/0x2a0 [ 842.727909][T17679] drm_release+0x2c6/0x360 [ 842.727926][T17679] ? __pfx_drm_release+0x10/0x10 [ 842.727944][T17679] __fput+0x3ff/0xb40 [ 842.727965][T17679] task_work_run+0x150/0x240 [ 842.727986][T17679] ? __pfx_task_work_run+0x10/0x10 [ 842.728019][T17679] exit_to_user_mode_loop+0x100/0x4a0 [ 842.728053][T17679] do_syscall_64+0x668/0xf80 [ 842.728077][T17679] ? clear_bhb_loop+0x40/0x90 [ 842.728096][T17679] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 842.728111][T17679] RIP: 0033:0x7f577659c799 [ 842.728124][T17679] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 842.728139][T17679] RSP: 002b:00007f577753d028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 842.728153][T17679] RAX: 0000000000000000 RBX: 00007f5776815fa0 RCX: 00007f577659c799 [ 842.728163][T17679] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 842.728171][T17679] RBP: 00007f5776632c99 R08: 0000000000000000 R09: 0000000000000000 [ 842.728180][T17679] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 842.728197][T17679] R13: 00007f5776816038 R14: 00007f5776815fa0 R15: 00007ffeae6bfda8 [ 842.728219][T17679] [ 844.352489][T17704] netlink: 664 bytes leftover after parsing attributes in process `syz.2.2514'. [ 844.489687][ C0] sd 0:0:1:0: [sda] tag#4423 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 844.500195][ C0] sd 0:0:1:0: [sda] tag#4423 CDB: Read(6) 08 00 00 00 10 00 00 00 00 00 00 00 [ 844.869114][T17718] FAULT_INJECTION: forcing a failure. [ 844.869114][T17718] name failslab, interval 1, probability 0, space 0, times 0 [ 844.942707][T17718] CPU: 0 UID: 0 PID: 17718 Comm: syz.2.2517 Tainted: G L syzkaller #0 PREEMPT(full) [ 844.942734][T17718] Tainted: [L]=SOFTLOCKUP [ 844.942741][T17718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 844.942749][T17718] Call Trace: [ 844.942755][T17718] [ 844.942761][T17718] dump_stack_lvl+0x100/0x190 [ 844.942790][T17718] should_fail_ex.cold+0x5/0xa [ 844.942807][T17718] ? drm_atomic_state_init+0x190/0x490 [ 844.942825][T17718] should_failslab+0xc2/0x120 [ 844.942841][T17718] __kmalloc_noprof+0xe0/0x850 [ 844.942867][T17718] drm_atomic_state_init+0x190/0x490 [ 844.942884][T17718] ? kasan_save_track+0x14/0x30 [ 844.942908][T17718] drm_atomic_state_alloc+0xd3/0x120 [ 844.942925][T17718] drm_client_modeset_commit_atomic+0xcc/0x7e0 [ 844.942946][T17718] ? trace_contention_end+0x140/0x180 [ 844.942966][T17718] ? __mutex_lock+0x26a/0x1b90 [ 844.942987][T17718] ? __mutex_lock+0x26a/0x1b90 [ 844.943007][T17718] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 844.943027][T17718] ? drm_master_internal_acquire+0x21/0x80 [ 844.943063][T17718] drm_client_modeset_commit_locked+0x14d/0x580 [ 844.943087][T17718] drm_client_modeset_commit+0x4f/0x80 [ 844.943249][T17718] __drm_fb_helper_restore_fbdev_mode_unlocked.part.0+0x137/0x160 [ 844.943275][T17718] drm_fb_helper_restore_fbdev_mode_unlocked+0x93/0xc0 [ 844.943307][T17718] drm_fbdev_client_restore+0x1b/0x30 [ 844.943325][T17718] ? __pfx_drm_fbdev_client_restore+0x10/0x10 [ 844.943341][T17718] drm_client_dev_restore+0x205/0x2a0 [ 844.943364][T17718] drm_release+0x2c6/0x360 [ 844.943383][T17718] ? __pfx_drm_release+0x10/0x10 [ 844.943400][T17718] __fput+0x3ff/0xb40 [ 844.943422][T17718] task_work_run+0x150/0x240 [ 844.943443][T17718] ? __pfx_task_work_run+0x10/0x10 [ 844.943470][T17718] exit_to_user_mode_loop+0x100/0x4a0 [ 844.943492][T17718] do_syscall_64+0x668/0xf80 [ 844.943512][T17718] ? clear_bhb_loop+0x40/0x90 [ 844.943531][T17718] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 844.943547][T17718] RIP: 0033:0x7f9d2459c799 [ 844.943561][T17718] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 844.943575][T17718] RSP: 002b:00007f9d25424028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 844.943590][T17718] RAX: 0000000000000000 RBX: 00007f9d24815fa0 RCX: 00007f9d2459c799 [ 844.943599][T17718] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 844.943608][T17718] RBP: 00007f9d24632c99 R08: 0000000000000000 R09: 0000000000000000 [ 844.943617][T17718] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 844.943626][T17718] R13: 00007f9d24816038 R14: 00007f9d24815fa0 R15: 00007fffed9a60e8 [ 844.943648][T17718] [ 847.455872][T17752] netlink: 713 bytes leftover after parsing attributes in process `syz.6.2527'. [ 847.655124][ C0] sd 0:0:1:0: [sda] tag#4449 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 847.665582][ C0] sd 0:0:1:0: [sda] tag#4449 CDB: Read(6) 08 00 00 00 10 00 00 00 00 00 00 00 [ 849.820446][T17797] netlink: 713 bytes leftover after parsing attributes in process `syz.6.2542'. [ 849.989254][ C0] sd 0:0:1:0: [sda] tag#4460 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 850.000116][ C0] sd 0:0:1:0: [sda] tag#4460 CDB: Read(6) 08 00 00 00 10 00 00 00 00 00 00 00 [ 851.418648][T17824] netlink: 326 bytes leftover after parsing attributes in process `syz.2.2552'. [ 851.946309][T17837] netlink: 713 bytes leftover after parsing attributes in process `syz.2.2555'. [ 852.093112][ C0] sd 0:0:1:0: [sda] tag#4469 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 852.093166][ C0] sd 0:0:1:0: [sda] tag#4469 CDB: Read(6) 08 00 00 00 10 00 00 00 00 00 00 00 [ 852.940758][T17858] netlink: 326 bytes leftover after parsing attributes in process `syz.4.2563'. [ 853.425329][T17866] netlink: 737 bytes leftover after parsing attributes in process `syz.6.2567'. [ 853.601833][T17871] ptp ptp0: new virtual clock ptp1 [ 853.614927][T17871] ptp ptp0: new virtual clock ptp2 [ 853.619952][T17871] ptp ptp0: new virtual clock ptp3 [ 853.619971][T17871] ptp ptp0: guarantee physical clock free running [ 853.643875][ C0] sd 0:0:1:0: [sda] tag#4474 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 853.643920][ C0] sd 0:0:1:0: [sda] tag#4474 CDB: Read(6) 08 00 00 00 10 00 00 00 00 00 00 00 [ 854.000257][T17886] netlink: 737 bytes leftover after parsing attributes in process `syz.6.2582'. [ 854.190125][T17893] netlink: 326 bytes leftover after parsing attributes in process `syz.4.2575'. [ 854.201656][ C0] sd 0:0:1:0: [sda] tag#4426 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 854.212215][ C0] sd 0:0:1:0: [sda] tag#4426 CDB: Read(6) 08 00 00 00 10 00 00 00 00 00 00 00 [ 854.758550][T17903] netlink: 737 bytes leftover after parsing attributes in process `syz.4.2586'. [ 855.038684][ C0] sd 0:0:1:0: [sda] tag#4431 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 855.049203][ C0] sd 0:0:1:0: [sda] tag#4431 CDB: Read(6) 08 00 00 00 10 00 00 00 00 00 00 00 [ 856.471337][T17934] netlink: 326 bytes leftover after parsing attributes in process `syz.6.2587'. [ 856.886295][T17943] netlink: 749 bytes leftover after parsing attributes in process `syz.6.2591'. [ 857.077161][ C0] sd 0:0:1:0: [sda] tag#4440 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 857.087667][ C0] sd 0:0:1:0: [sda] tag#4440 CDB: Read(6) 08 00 00 00 10 00 00 00 00 00 00 00 [ 858.627700][T17976] netlink: 326 bytes leftover after parsing attributes in process `syz.3.2600'. [ 858.691251][T17977] Malformed UNC in devname [ 858.691251][T17977] [ 858.727989][T17977] CIFS: VFS: Malformed UNC in devname [ 858.924407][T17981] netlink: 749 bytes leftover after parsing attributes in process `syz.6.2603'. [ 859.080124][ C0] sd 0:0:1:0: [sda] tag#4445 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 859.090671][ C0] sd 0:0:1:0: [sda] tag#4445 CDB: Read(6) 08 00 00 00 10 00 00 00 00 00 00 00 [ 859.141361][T17987] FAULT_INJECTION: forcing a failure. [ 859.141361][T17987] name failslab, interval 1, probability 0, space 0, times 0 [ 859.236307][T17987] CPU: 0 UID: 0 PID: 17987 Comm: syz.3.2605 Tainted: G L syzkaller #0 PREEMPT(full) [ 859.236334][T17987] Tainted: [L]=SOFTLOCKUP [ 859.236340][T17987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 859.236349][T17987] Call Trace: [ 859.236355][T17987] [ 859.236361][T17987] dump_stack_lvl+0x100/0x190 [ 859.236387][T17987] should_fail_ex.cold+0x5/0xa [ 859.236406][T17987] should_failslab+0xc2/0x120 [ 859.236421][T17987] __kmalloc_cache_noprof+0x7a/0x6f0 [ 859.236440][T17987] ? vkms_plane_duplicate_state+0x45/0x130 [ 859.236460][T17987] vkms_plane_duplicate_state+0x45/0x130 [ 859.236475][T17987] drm_atomic_get_plane_state+0x279/0x760 [ 859.236495][T17987] drm_client_modeset_commit_atomic+0x237/0x7e0 [ 859.236517][T17987] ? trace_contention_end+0x140/0x180 [ 859.236539][T17987] ? __mutex_lock+0x26a/0x1b90 [ 859.236560][T17987] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 859.236580][T17987] ? drm_master_internal_acquire+0x21/0x80 [ 859.236617][T17987] drm_client_modeset_commit_locked+0x14d/0x580 [ 859.236640][T17987] drm_client_modeset_commit+0x4f/0x80 [ 859.236659][T17987] __drm_fb_helper_restore_fbdev_mode_unlocked.part.0+0x137/0x160 [ 859.236682][T17987] drm_fb_helper_restore_fbdev_mode_unlocked+0x93/0xc0 [ 859.236703][T17987] drm_fbdev_client_restore+0x1b/0x30 [ 859.236719][T17987] ? __pfx_drm_fbdev_client_restore+0x10/0x10 [ 859.236734][T17987] drm_client_dev_restore+0x205/0x2a0 [ 859.236756][T17987] drm_release+0x2c6/0x360 [ 859.236775][T17987] ? __pfx_drm_release+0x10/0x10 [ 859.236792][T17987] __fput+0x3ff/0xb40 [ 859.236813][T17987] task_work_run+0x150/0x240 [ 859.236833][T17987] ? __pfx_task_work_run+0x10/0x10 [ 859.236858][T17987] exit_to_user_mode_loop+0x100/0x4a0 [ 859.236879][T17987] do_syscall_64+0x668/0xf80 [ 859.236897][T17987] ? clear_bhb_loop+0x40/0x90 [ 859.236914][T17987] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 859.236930][T17987] RIP: 0033:0x7f0e27f9c799 [ 859.236943][T17987] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 859.236956][T17987] RSP: 002b:00007f0e28f26028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 859.236971][T17987] RAX: 0000000000000000 RBX: 00007f0e28215fa0 RCX: 00007f0e27f9c799 [ 859.236980][T17987] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 859.236988][T17987] RBP: 00007f0e28032c99 R08: 0000000000000000 R09: 0000000000000000 [ 859.236996][T17987] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 859.237004][T17987] R13: 00007f0e28216038 R14: 00007f0e28215fa0 R15: 00007ffcb9e85f58 [ 859.237024][T17987] [ 859.986880][T18009] FAULT_INJECTION: forcing a failure. [ 859.986880][T18009] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 860.045349][T18009] CPU: 0 UID: 0 PID: 18009 Comm: syz.6.2612 Tainted: G L syzkaller #0 PREEMPT(full) [ 860.045374][T18009] Tainted: [L]=SOFTLOCKUP [ 860.045379][T18009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 860.045387][T18009] Call Trace: [ 860.045392][T18009] [ 860.045401][T18009] dump_stack_lvl+0x100/0x190 [ 860.045431][T18009] should_fail_ex.cold+0x5/0xa [ 860.045448][T18009] strncpy_from_user+0x3b/0x2d0 [ 860.045543][T18009] do_getname+0x78/0x390 [ 860.045563][T18009] __x64_sys_mknod+0x78/0xc0 [ 860.045578][T18009] do_syscall_64+0x106/0xf80 [ 860.045596][T18009] ? clear_bhb_loop+0x40/0x90 [ 860.045613][T18009] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 860.045627][T18009] RIP: 0033:0x7fd5c3f9c799 [ 860.045639][T18009] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 860.045652][T18009] RSP: 002b:00007fd5c4e0c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000085 [ 860.045665][T18009] RAX: ffffffffffffffda RBX: 00007fd5c4215fa0 RCX: 00007fd5c3f9c799 [ 860.045674][T18009] RDX: 0000000000000004 RSI: 0000000000001001 RDI: 0000200000000040 [ 860.045683][T18009] RBP: 00007fd5c4e0c090 R08: 0000000000000000 R09: 0000000000000000 [ 860.045690][T18009] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 860.045698][T18009] R13: 00007fd5c4216038 R14: 00007fd5c4215fa0 R15: 00007fffac064b98 [ 860.045716][T18009] [ 860.052137][T18010] netlink: 326 bytes leftover after parsing attributes in process `syz.4.2611'. [ 860.653406][T18020] netlink: 749 bytes leftover after parsing attributes in process `syz.3.2616'. [ 860.876698][T18026] FAULT_INJECTION: forcing a failure. [ 860.876698][T18026] name failslab, interval 1, probability 0, space 0, times 0 [ 860.929908][ C0] sd 0:0:1:0: [sda] tag#4450 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 860.929962][ C0] sd 0:0:1:0: [sda] tag#4450 CDB: Read(6) 08 00 00 00 10 00 00 00 00 00 00 00 [ 860.985297][T18026] CPU: 0 UID: 0 PID: 18026 Comm: syz.4.2619 Tainted: G L syzkaller #0 PREEMPT(full) [ 860.985324][T18026] Tainted: [L]=SOFTLOCKUP [ 860.985329][T18026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 860.985339][T18026] Call Trace: [ 860.985345][T18026] [ 860.985351][T18026] dump_stack_lvl+0x100/0x190 [ 860.985378][T18026] should_fail_ex.cold+0x5/0xa [ 860.985395][T18026] should_failslab+0xc2/0x120 [ 860.985411][T18026] __kmalloc_cache_noprof+0x7a/0x6f0 [ 860.985430][T18026] ? vkms_plane_duplicate_state+0x87/0x130 [ 860.985449][T18026] vkms_plane_duplicate_state+0x87/0x130 [ 860.985465][T18026] drm_atomic_get_plane_state+0x279/0x760 [ 860.985486][T18026] drm_client_modeset_commit_atomic+0x237/0x7e0 [ 860.985506][T18026] ? trace_contention_end+0x140/0x180 [ 860.985529][T18026] ? __mutex_lock+0x26a/0x1b90 [ 860.985549][T18026] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 860.985570][T18026] ? drm_master_internal_acquire+0x21/0x80 [ 860.985605][T18026] drm_client_modeset_commit_locked+0x14d/0x580 [ 860.985627][T18026] drm_client_modeset_commit+0x4f/0x80 [ 860.985648][T18026] __drm_fb_helper_restore_fbdev_mode_unlocked.part.0+0x137/0x160 [ 860.985671][T18026] drm_fb_helper_restore_fbdev_mode_unlocked+0x93/0xc0 [ 860.985692][T18026] drm_fbdev_client_restore+0x1b/0x30 [ 860.985708][T18026] ? __pfx_drm_fbdev_client_restore+0x10/0x10 [ 860.985723][T18026] drm_client_dev_restore+0x205/0x2a0 [ 860.985746][T18026] drm_release+0x2c6/0x360 [ 860.985764][T18026] ? __pfx_drm_release+0x10/0x10 [ 860.985781][T18026] __fput+0x3ff/0xb40 [ 860.985802][T18026] task_work_run+0x150/0x240 [ 860.985823][T18026] ? __pfx_task_work_run+0x10/0x10 [ 860.985848][T18026] exit_to_user_mode_loop+0x100/0x4a0 [ 860.985876][T18026] do_syscall_64+0x668/0xf80 [ 860.985896][T18026] ? clear_bhb_loop+0x40/0x90 [ 860.985915][T18026] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 860.985930][T18026] RIP: 0033:0x7f577659c799 [ 860.985943][T18026] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 860.985957][T18026] RSP: 002b:00007f577753d028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 860.985971][T18026] RAX: 0000000000000000 RBX: 00007f5776815fa0 RCX: 00007f577659c799 [ 860.985980][T18026] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 860.985989][T18026] RBP: 00007f5776632c99 R08: 0000000000000000 R09: 0000000000000000 [ 860.985997][T18026] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 860.986006][T18026] R13: 00007f5776816038 R14: 00007f5776815fa0 R15: 00007ffeae6bfda8 [ 860.986027][T18026] [ 862.754111][T18059] netlink: 326 bytes leftover after parsing attributes in process `syz.3.2628'. [ 862.943717][T18065] FAULT_INJECTION: forcing a failure. [ 862.943717][T18065] name failslab, interval 1, probability 0, space 0, times 0 [ 863.007578][T18065] CPU: 0 UID: 0 PID: 18065 Comm: syz.3.2630 Tainted: G L syzkaller #0 PREEMPT(full) [ 863.007606][T18065] Tainted: [L]=SOFTLOCKUP [ 863.007612][T18065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 863.007624][T18065] Call Trace: [ 863.007629][T18065] [ 863.007635][T18065] dump_stack_lvl+0x100/0x190 [ 863.007662][T18065] should_fail_ex.cold+0x5/0xa [ 863.007680][T18065] should_failslab+0xc2/0x120 [ 863.007696][T18065] __kmalloc_cache_noprof+0x7a/0x6f0 [ 863.007714][T18065] ? vkms_plane_duplicate_state+0x87/0x130 [ 863.007734][T18065] vkms_plane_duplicate_state+0x87/0x130 [ 863.007749][T18065] drm_atomic_get_plane_state+0x279/0x760 [ 863.007769][T18065] drm_client_modeset_commit_atomic+0x237/0x7e0 [ 863.007790][T18065] ? trace_contention_end+0x140/0x180 [ 863.007812][T18065] ? __mutex_lock+0x26a/0x1b90 [ 863.007832][T18065] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 863.007852][T18065] ? drm_master_internal_acquire+0x21/0x80 [ 863.007887][T18065] drm_client_modeset_commit_locked+0x14d/0x580 [ 863.007950][T18065] drm_client_modeset_commit+0x4f/0x80 [ 863.007970][T18065] __drm_fb_helper_restore_fbdev_mode_unlocked.part.0+0x137/0x160 [ 863.007994][T18065] drm_fb_helper_restore_fbdev_mode_unlocked+0x93/0xc0 [ 863.008017][T18065] drm_fbdev_client_restore+0x1b/0x30 [ 863.008034][T18065] ? __pfx_drm_fbdev_client_restore+0x10/0x10 [ 863.008049][T18065] drm_client_dev_restore+0x205/0x2a0 [ 863.008071][T18065] drm_release+0x2c6/0x360 [ 863.008089][T18065] ? __pfx_drm_release+0x10/0x10 [ 863.008107][T18065] __fput+0x3ff/0xb40 [ 863.008127][T18065] task_work_run+0x150/0x240 [ 863.008148][T18065] ? __pfx_task_work_run+0x10/0x10 [ 863.008173][T18065] exit_to_user_mode_loop+0x100/0x4a0 [ 863.008193][T18065] do_syscall_64+0x668/0xf80 [ 863.008211][T18065] ? clear_bhb_loop+0x40/0x90 [ 863.008229][T18065] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 863.008243][T18065] RIP: 0033:0x7f0e27f9c799 [ 863.008256][T18065] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 863.008270][T18065] RSP: 002b:00007f0e28f26028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 863.008284][T18065] RAX: 0000000000000000 RBX: 00007f0e28215fa0 RCX: 00007f0e27f9c799 [ 863.008294][T18065] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 863.008302][T18065] RBP: 00007f0e28032c99 R08: 0000000000000000 R09: 0000000000000000 [ 863.008311][T18065] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 863.008320][T18065] R13: 00007f0e28216038 R14: 00007f0e28215fa0 R15: 00007ffcb9e85f58 [ 863.008340][T18065] [ 863.419168][T18071] netlink: 755 bytes leftover after parsing attributes in process `syz.4.2631'. [ 863.458875][ C0] sd 0:0:1:0: [sda] tag#4429 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 863.469351][ C0] sd 0:0:1:0: [sda] tag#4429 CDB: Read(6) 08 00 00 00 10 00 00 00 00 00 00 00 [ 863.881926][T18082] netlink: 755 bytes leftover after parsing attributes in process `syz.2.2643'. [ 863.975880][ C0] sd 0:0:1:0: [sda] tag#4435 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 863.986316][ C0] sd 0:0:1:0: [sda] tag#4435 CDB: Read(6) 08 00 00 00 10 00 00 00 00 00 00 00 [ 864.307711][T18090] netlink: 755 bytes leftover after parsing attributes in process `syz.4.2645'. [ 864.521526][ C0] sd 0:0:1:0: [sda] tag#4436 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 864.531995][ C0] sd 0:0:1:0: [sda] tag#4436 CDB: Read(6) 08 00 00 00 10 00 00 00 00 00 00 00 [ 864.567798][T18098] netlink: 326 bytes leftover after parsing attributes in process `syz.6.2639'. [ 865.418642][T18110] FAULT_INJECTION: forcing a failure. [ 865.418642][T18110] name failslab, interval 1, probability 0, space 0, times 0 [ 865.612310][T18110] CPU: 0 UID: 0 PID: 18110 Comm: syz.6.2642 Tainted: G L syzkaller #0 PREEMPT(full) [ 865.612333][T18110] Tainted: [L]=SOFTLOCKUP [ 865.612338][T18110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 865.612346][T18110] Call Trace: [ 865.612351][T18110] [ 865.612357][T18110] dump_stack_lvl+0x100/0x190 [ 865.612382][T18110] should_fail_ex.cold+0x5/0xa [ 865.612398][T18110] ? tomoyo_realpath_from_path+0xb6/0x690 [ 865.612417][T18110] should_failslab+0xc2/0x120 [ 865.612431][T18110] __kmalloc_noprof+0xe0/0x850 [ 865.612455][T18110] tomoyo_realpath_from_path+0xb6/0x690 [ 865.612476][T18110] tomoyo_path_number_perm+0x23c/0x580 [ 865.612491][T18110] ? tomoyo_path_number_perm+0x22e/0x580 [ 865.612513][T18110] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 865.612545][T18110] ? find_held_lock+0x2b/0x80 [ 865.612558][T18110] ? __fget_files+0x215/0x3d0 [ 865.612570][T18110] ? hook_file_ioctl_common+0x146/0x410 [ 865.612667][T18110] ? __fget_files+0x21f/0x3d0 [ 865.612682][T18110] security_file_ioctl+0xd3/0x230 [ 865.612699][T18110] __x64_sys_ioctl+0xb7/0x210 [ 865.612719][T18110] do_syscall_64+0x106/0xf80 [ 865.612738][T18110] ? clear_bhb_loop+0x40/0x90 [ 865.612754][T18110] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 865.612768][T18110] RIP: 0033:0x7fd5c3f9c799 [ 865.612781][T18110] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 865.612794][T18110] RSP: 002b:00007fd5c4deb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 865.612808][T18110] RAX: ffffffffffffffda RBX: 00007fd5c4216090 RCX: 00007fd5c3f9c799 [ 865.612818][T18110] RDX: 000020000000c380 RSI: 00000000c0606610 RDI: 0000000000000008 [ 865.612829][T18110] RBP: 00007fd5c4deb090 R08: 0000000000000000 R09: 0000000000000000 [ 865.612837][T18110] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 865.612845][T18110] R13: 00007fd5c4216128 R14: 00007fd5c4216090 R15: 00007fffac064b98 [ 865.612863][T18110] [ 865.612870][T18110] ERROR: Out of memory at tomoyo_realpath_from_path. [ 866.657888][T18134] netlink: 758 bytes leftover after parsing attributes in process `syz.3.2651'. [ 866.672462][T18135] FAULT_INJECTION: forcing a failure. [ 866.672462][T18135] name failslab, interval 1, probability 0, space 0, times 0 [ 866.765364][T18135] CPU: 0 UID: 0 PID: 18135 Comm: syz.4.2650 Tainted: G L syzkaller #0 PREEMPT(full) [ 866.765390][T18135] Tainted: [L]=SOFTLOCKUP [ 866.765396][T18135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 866.765405][T18135] Call Trace: [ 866.765410][T18135] [ 866.765417][T18135] dump_stack_lvl+0x100/0x190 [ 866.765451][T18135] should_fail_ex.cold+0x5/0xa [ 866.765470][T18135] should_failslab+0xc2/0x120 [ 866.765487][T18135] __kmalloc_cache_noprof+0x7a/0x6f0 [ 866.765505][T18135] ? vkms_plane_duplicate_state+0x45/0x130 [ 866.765525][T18135] vkms_plane_duplicate_state+0x45/0x130 [ 866.765541][T18135] drm_atomic_get_plane_state+0x279/0x760 [ 866.765560][T18135] drm_client_modeset_commit_atomic+0x237/0x7e0 [ 866.765582][T18135] ? trace_contention_end+0x140/0x180 [ 866.765604][T18135] ? __mutex_lock+0x26a/0x1b90 [ 866.765625][T18135] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 866.765646][T18135] ? drm_master_internal_acquire+0x21/0x80 [ 866.765682][T18135] drm_client_modeset_commit_locked+0x14d/0x580 [ 866.765705][T18135] drm_client_modeset_commit+0x4f/0x80 [ 866.765725][T18135] __drm_fb_helper_restore_fbdev_mode_unlocked.part.0+0x137/0x160 [ 866.765748][T18135] drm_fb_helper_restore_fbdev_mode_unlocked+0x93/0xc0 [ 866.765769][T18135] drm_fbdev_client_restore+0x1b/0x30 [ 866.765784][T18135] ? __pfx_drm_fbdev_client_restore+0x10/0x10 [ 866.765799][T18135] drm_client_dev_restore+0x205/0x2a0 [ 866.765822][T18135] drm_release+0x2c6/0x360 [ 866.765840][T18135] ? __pfx_drm_release+0x10/0x10 [ 866.765857][T18135] __fput+0x3ff/0xb40 [ 866.765878][T18135] task_work_run+0x150/0x240 [ 866.765898][T18135] ? __pfx_task_work_run+0x10/0x10 [ 866.765923][T18135] exit_to_user_mode_loop+0x100/0x4a0 [ 866.765944][T18135] do_syscall_64+0x668/0xf80 [ 866.765963][T18135] ? clear_bhb_loop+0x40/0x90 [ 866.765980][T18135] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 866.765994][T18135] RIP: 0033:0x7f577659c799 [ 866.766007][T18135] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 866.766021][T18135] RSP: 002b:00007f577753d028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 866.766036][T18135] RAX: 0000000000000000 RBX: 00007f5776815fa0 RCX: 00007f577659c799 [ 866.766044][T18135] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 866.766052][T18135] RBP: 00007f5776632c99 R08: 0000000000000000 R09: 0000000000000000 [ 866.766061][T18135] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 866.766069][T18135] R13: 00007f5776816038 R14: 00007f5776815fa0 R15: 00007ffeae6bfda8 [ 866.766090][T18135] [ 867.071058][T18141] netlink: 326 bytes leftover after parsing attributes in process `syz.6.2652'. [ 867.158722][T18143] openvswitch: netlink: Missing valid actions attribute. [ 868.159499][ C0] sd 0:0:1:0: [sda] tag#4424 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 868.170181][ C0] sd 0:0:1:0: [sda] tag#4424 CDB: Read(6) 08 00 00 00 10 00 00 00 00 00 00 00 [ 868.226014][ T30] INFO: task syz.5.1951:15183 blocked for more than 143 seconds. [ 868.245799][ T30] Tainted: G L syzkaller #0 [ 868.252408][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 868.376875][ T30] task:syz.5.1951 state:D stack:27464 pid:15183 tgid:15180 ppid:13777 task_flags:0x400140 flags:0x00080002 [ 868.473935][ T30] Call Trace: [ 868.489243][ T30] [ 868.492257][ T30] __schedule+0xfee/0x6120 [ 868.536088][ T30] ? __lock_acquire+0x4a5/0x2630 [ 868.566618][ T30] ? __pfx___schedule+0x10/0x10 [ 868.571528][ T30] ? find_held_lock+0x2b/0x80 [ 868.626325][ T30] ? schedule+0x2bf/0x390 [ 868.630702][ T30] schedule+0xdd/0x390 [ 868.748246][ T30] schedule_preempt_disabled+0x13/0x30 [ 868.753754][ T30] __mutex_lock+0xc9a/0x1b90 [ 868.841054][ T30] ? nfsd_nl_threads_set_doit+0x6c1/0xc00 [ 868.873426][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 868.906068][ T30] ? net_generic+0xea/0x2a0 [ 868.910645][ T30] ? net_generic+0xea/0x2a0 [ 868.915172][ T30] ? nfsd_nl_threads_set_doit+0x6c1/0xc00 [ 868.996995][ T30] nfsd_nl_threads_set_doit+0x6c1/0xc00 [ 869.002700][ T30] genl_family_rcv_msg_doit+0x214/0x300 [ 869.049050][ T30] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 869.055213][ T30] ? genl_get_cmd+0x3ef/0x720 [ 869.110677][ T30] ? bpf_lsm_capable+0x9/0x10 [ 869.115418][ T30] ? security_capable+0x80/0x260 [ 869.166202][ T30] genl_rcv_msg+0x560/0x800 [ 869.170791][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 869.175810][ T30] ? __pfx_nfsd_nl_threads_set_doit+0x10/0x10 [ 869.228692][ T30] netlink_rcv_skb+0x159/0x420 [ 869.233590][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 869.283689][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 869.316276][ T30] ? netlink_deliver_tap+0x1ae/0xcc0 [ 869.321613][ T30] genl_rcv+0x28/0x40 [ 869.325581][ T30] netlink_unicast+0x5aa/0x870 [ 869.366537][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 869.371957][ T30] netlink_sendmsg+0x8b0/0xda0 [ 869.398363][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 869.403718][ T30] ? __import_iovec+0x1d2/0x640 [ 869.436533][ T30] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 869.466304][ T30] ____sys_sendmsg+0x9e1/0xb70 [ 869.471206][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 869.481581][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 869.488440][ T30] ? try_to_wake_up+0x644/0x1a80 [ 869.493448][ T30] ___sys_sendmsg+0x190/0x1e0 [ 869.498463][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 869.503658][ T30] ? futex_private_hash_put+0x107/0x1c0 [ 869.510284][ T30] __sys_sendmsg+0x170/0x220 [ 869.514884][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 869.520312][ T30] ? __x64_sys_futex+0x34f/0x4d0 [ 869.525276][ T30] do_syscall_64+0x106/0xf80 [ 869.533972][ T30] ? clear_bhb_loop+0x40/0x90 [ 869.538982][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 869.546574][ T30] RIP: 0033:0x7f44e6b9c799 [ 869.551030][ T30] RSP: 002b:00007f44e79f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 869.560124][ T30] RAX: ffffffffffffffda RBX: 00007f44e6e15fa0 RCX: 00007f44e6b9c799 [ 869.568343][ T30] RDX: 0000000000040010 RSI: 0000200000000000 RDI: 0000000000000003 [ 869.576563][ T30] RBP: 00007f44e6c32c99 R08: 0000000000000000 R09: 0000000000000000 [ 869.584554][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 869.594825][ T30] R13: 00007f44e6e16038 R14: 00007f44e6e15fa0 R15: 00007ffd80dd60c8 [ 869.603096][ T30] [ 869.679456][ T30] [ 869.679456][ T30] Showing all locks held in the system: [ 869.736501][ T30] 1 lock held by pool_workqueue_/3: [ 869.741727][ T30] #0: ffffffff8e7f30f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0 [ 869.780784][ T30] 1 lock held by khungtaskd/30: [ 869.785742][ T30] #0: ffffffff8e7e74e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 869.816549][ T30] 2 locks held by getty/5588: [ 869.821265][ T30] #0: ffff888037b1d0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 869.846531][ T30] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x1500 [ 869.876514][ T30] 3 locks held by kworker/0:4/5918: [ 869.881760][ T30] 4 locks held by kworker/u10:3/9696: [ 869.916707][ T30] #0: ffff88801c6ae948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x1310/0x19a0 [ 869.945173][ T30] #1: ffffc90002707d08 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x988/0x19a0 [ 869.957170][ T30] #2: ffffffff905fb950 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xb8/0x920 [ 869.968412][ T30] #3: ffffffff906141a8 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x7ec/0xab0 [ 869.980199][ T30] 2 locks held by syz-executor/10481: [ 869.985605][ T30] #0: ffff8880264de0e0 (&type->s_umount_key#55){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110 [ 869.996270][ T30] #1: ffffffff8ec580e8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 870.007957][ T30] 2 locks held by syz.1.1591/13547: [ 870.013362][ T30] #0: ffffffff906c0510 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 870.022094][ T30] #1: ffffffff8ec580e8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x6c1/0xc00 [ 870.032448][ T30] 2 locks held by syz.5.1951/15183: [ 870.038523][ T30] #0: ffffffff906c0510 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 870.047239][ T30] #1: ffffffff8ec580e8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x6c1/0xc00 [ 870.058964][ T30] 1 lock held by syz-executor/15504: [ 870.064276][ T30] #0: ffffffff906141a8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x220 [ 870.074491][ T30] 5 locks held by syz-executor/16702: [ 870.081647][ T30] #0: ffff888076decec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0xb0 [ 870.093996][ T30] #1: ffff888076dec0c0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x35c/0x1240 [ 870.105332][ T30] #2: ffffffff908ac548 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xbb/0x280 [ 870.115939][ T30] #3: ffff888058df52f8 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x80/0x770 [ 870.125905][ T30] #4: ffffffff8e7f30f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0 [ 870.136405][ T30] 3 locks held by syz-executor/17428: [ 870.142037][ T30] #0: ffff88803bfccec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0xb0 [ 870.159565][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.166362][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.175155][ T30] #1: ffff88803bfcc0c0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x35c/0x1240 [ 870.185245][ T30] #2: ffffffff8e7f30f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0 [ 870.245046][ T30] [ 870.248673][ T30] ============================================= [ 870.248673][ T30] [ 870.270136][ T30] NMI backtrace for cpu 0 [ 870.270152][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 870.270179][ T30] Tainted: [L]=SOFTLOCKUP [ 870.270183][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 870.270191][ T30] Call Trace: [ 870.270196][ T30] [ 870.270202][ T30] dump_stack_lvl+0x100/0x190 [ 870.270228][ T30] nmi_cpu_backtrace.cold+0x12d/0x151 [ 870.270249][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 870.270293][ T30] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 870.270312][ T30] sys_info+0x141/0x190 [ 870.270388][ T30] watchdog+0xd25/0x1050 [ 870.270407][ T30] ? __pfx_watchdog+0x10/0x10 [ 870.270420][ T30] ? __kthread_parkme+0x18c/0x230 [ 870.270437][ T30] ? kthread+0x13a/0x450 [ 870.270453][ T30] ? __pfx_watchdog+0x10/0x10 [ 870.270465][ T30] kthread+0x370/0x450 [ 870.270480][ T30] ? __pfx_kthread+0x10/0x10 [ 870.270498][ T30] ret_from_fork+0x754/0xd80 [ 870.270518][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 870.270538][ T30] ? __switch_to+0x7b4/0x1120 [ 870.270552][ T30] ? __pfx_kthread+0x10/0x10 [ 870.270570][ T30] ret_from_fork_asm+0x1a/0x30 [ 870.270592][ T30] [ 870.472730][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 870.479626][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 870.490405][ T30] Tainted: [L]=SOFTLOCKUP [ 870.494729][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 870.504782][ T30] Call Trace: [ 870.508097][ T30] [ 870.511019][ T30] dump_stack_lvl+0x100/0x190 [ 870.515690][ T30] vpanic+0x552/0x970 [ 870.519679][ T30] ? __pfx_vpanic+0x10/0x10 [ 870.524187][ T30] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 870.530332][ T30] panic+0xd1/0xe0 [ 870.534100][ T30] ? __pfx_panic+0x10/0x10 [ 870.538500][ T30] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 870.544634][ T30] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 870.550778][ T30] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 870.556924][ T30] ? watchdog.cold+0x198/0x1ca [ 870.561750][ T30] ? watchdog+0xd35/0x1050 [ 870.566163][ T30] watchdog.cold+0x1a9/0x1ca [ 870.570939][ T30] ? __pfx_watchdog+0x10/0x10 [ 870.575616][ T30] ? __kthread_parkme+0x18c/0x230 [ 870.580646][ T30] ? kthread+0x13a/0x450 [ 870.584873][ T30] ? __pfx_watchdog+0x10/0x10 [ 870.589532][ T30] kthread+0x370/0x450 [ 870.593611][ T30] ? __pfx_kthread+0x10/0x10 [ 870.598211][ T30] ret_from_fork+0x754/0xd80 [ 870.602839][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 870.607998][ T30] ? __switch_to+0x7b4/0x1120 [ 870.612697][ T30] ? __pfx_kthread+0x10/0x10 [ 870.617317][ T30] ret_from_fork_asm+0x1a/0x30 [ 870.622085][ T30] [ 870.625179][ T30] Kernel Offset: disabled [ 870.629508][ T30] Rebooting in 86400 seconds..