last executing test programs: 22.517423529s ago: executing program 3 (id=1277): mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev5\x00', 0x280, 0x0) ioctl$auto(r0, 0xc0585604, r0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = bpf$auto_BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0)=@bpf_attr_3={0x2b, 0xffff, 0x6, 0x5, 0x9, 0x21, 0x4, 0x8, 0xd, "9cb752c613de1e128a360e822228879b", 0x0, 0xd0, 0xffffffffffffffff, 0x200, 0x0, 0x3, 0x8, 0x9, 0x6, 0x2, @attach_prog_fd, 0x0, 0x3, 0x5b, 0x6, 0x6}, 0x40) socket(0x11, 0x80000, 0x10001) setsockopt$auto(r1, 0x1, 0x5, 0x0, 0x8004) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x2042, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000002ec0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_smc_pnetid(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$auto_SMC_PNETID_ADD(r4, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)={0x38, r5, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@SMC_PNETID_ETHNAME={0x5, 0x2, '\x00'}, @SMC_PNETID_IBNAME={0xb, 0x3, '\'[\':]%\x00'}, @SMC_PNETID_NAME={0x7, 0x1, '\xf8/\x00'}, @SMC_PNETID_IBNAME={0x0, 0x3, '$\x008\xa6\x8a\xe72\xe7k\x06\xc1\xd7\xacV}\xb3B\xf6\x891R+\xef\xb2}>>:\xeb\xab\x18\x8b\xbae\x00\rO\xfcV\xbd\xd7\xb9{\xbe\xd6T4\xfe(\xd5\x12X\x01\x1d|\xb9\x89Md\xeb\x978\xde*\xd3\xcd\xf5W)\xab\x10\xd3\x89\x8c\x86\xaa\xbb\x18\x8c7\xf21-\xd0\x05eD\xfc\v\xff\xdb{\x97\xe0\x00b_\xfe1\xabF'}]}, 0x1b}, 0x1, 0x0, 0x0, 0x20004004}, 0x801) sendmsg$auto_SMC_PNETID_FLUSH(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x64, r5, 0x0, 0x70bd26, 0x25dfdbff, {}, [@SMC_PNETID_ETHNAME={0x5, 0x2, '\x00'}, @SMC_PNETID_IBNAME={0xc, 0x3, 'syz_tun\x00'}, @SMC_PNETID_ETHNAME={0xa, 0x2, ',{%}:\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x53}, @SMC_PNETID_IBNAME={0x5, 0x3, '\x00'}, @SMC_PNETID_IBNAME={0x8, 0x3, '-))\x00'}, @SMC_PNETID_NAME={0x16, 0x1, '/dev/input/event1\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0xc011}, 0x1) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002f80)={&(0x7f0000000040)={0x34, r3, 0x1, 0x70bd29, 0x25dfdbff, {}, [@ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x1}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x11}, 0x24000802) mmap$auto(0x0, 0x400008, 0xa, 0x17, 0x2, 0x8000) write$auto(0x3, 0x0, 0xfffffdef) r6 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) mmap$auto(0x200000000000, 0x2020009, 0x0, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto_tracing_buffers_fops_trace(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x8e051, r6, 0x0) syz_genetlink_get_family_id$auto_nfc(&(0x7f00000000c0), 0xffffffffffffffff) r7 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/event1\x00', 0x1, 0x0) ioctl$auto_EVIOCSREP(r7, 0x40084503, 0x0) socket(0x11, 0x80003, 0x300) pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x88\xa8s\x1c\b\x06\x8a>)\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x4e, 0x3) exit$auto(0x5eb) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x2, 0x8, 0x0) mremap$auto(0x200000000000, 0x40000000004, 0x3, 0x3, 0x100000000) io_uring_setup$auto(0x59, &(0x7f0000000000)={0x83, 0x1000, 0x6, 0x1, 0x2, 0xa, 0xffffffffffffffff, [0x3], {0x8, 0x1, 0x0, 0x8998d60, 0x8000100, 0x7fff, 0x8000105, 0x0, 0x8d3}, {0xbfc7, 0x1, 0x52, 0xffff, 0x47304, 0x3d, 0x8, 0x4, 0x8001}}) 21.361558825s ago: executing program 3 (id=1280): r0 = socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) writev$auto(0xffffffffffffffff, 0x0, 0x3) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x40802, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/mac802154_hwsim/ieee802154/phy0/index\x00', 0xaa340, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000040)=""/43, 0x2b) mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) r2 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000240), 0x2000, 0x0) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, 0x0) r3 = openat$auto_sync_info_debugfs_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0xc0042, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x3, 0xcb000, 0x9, 0x7352, 0x41, 0x10000, 0x1ffde, 0x7, 0x3, 0x2, 0xb, 0x9, 0x5, 0x101, 0xb4, 0x9, 0x6, 0x7ff, 0x84, 0x4, 0x0, 0x7, 0x2000, 0x203, 0x0, 0x1, 0x4, 0xfffffff8, 0x0, 0x0, 0xfffffff9, [0x7, 0x0, 0x68, 0x0, 0x100000000, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x200, 0x0, 0x0, 0x2000000000, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x400000000000, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x1000000000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x2, 0x0, 0x0, 0x0, 0x3, 0x800000000000000, 0x5]}, 0x1fe, 0xb) r4 = socket(0x10, 0x2, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/fs/btrfs/features/compress_lzo\x00', 0x40c00, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f0000000140)=""/181, 0xb5) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/virtual/fcloop/ctl/del_remote_port\x00', 0xa001, 0x0) write$auto(r6, &(0x7f0000000180)='7\x81=\"\xad\xff\x8d\xf9;\x18\xa4\xb0&L\xeb=j\a\xb3\"Yq\'R\"\n\x1d\xa1\xff\a\x17\x00'/42, 0x81) sendmsg$auto_OVS_VPORT_CMD_DEL(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x24008004) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) sendmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xdc5e}, 0x800}, 0x7, 0x4008) read$auto(r3, 0x0, 0x3) openat$auto_percpu_stats_fops_(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$auto(0x20, 0x3, 0x0, 0x15, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) getrandom$auto(0x0, 0x6000000, 0x3) io_uring_enter$auto(0x3, 0xa84, 0x80000001, 0xa, 0x0, 0x46) io_uring_enter$auto(0xffffffffffffffff, 0xf777, 0x7ffffffa, 0x3, 0x0, 0x3) move_pages$auto(0x0, 0xa, 0x0, 0x0, 0x0, 0x2) statmount$auto(0x0, &(0x7f0000000380)={0x40a, 0x1, 0x1, 0x9, 0x80000001, 0x28, 0x5, 0x807, 0x400000007, 0x7, 0x10001, 0x26, 0x4, 0x200000000001, 0x8006, 0x3, 0x500000000000000, 0x0, 0x30, 0xfffffffffffffffe, 0x864, 0xe, 0xfd, 0x9, 0x0, 0x9, 0x3, 0x0, 0xc6, 0x0, 0x0, [0x12d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x10001, 0x0, 0x10000, 0xf, 0x0, 0x1, 0x400, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x7fffffffffffffff, 0x10000000000, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffc]}, 0x9, 0xd) 20.406207203s ago: executing program 3 (id=1289): mmap$auto(0x0, 0x400008, 0x5f, 0x9b72, 0x2, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) fsconfig$auto_HIDEPID_NOT_PTRACEABLE(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x4) madvise$auto(0x0, 0x2003f2, 0x15) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) madvise$auto(0x81, 0xfffffffffffffffb, 0x5) 19.243254228s ago: executing program 3 (id=1296): mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x8000000000000003, 0x8000) mremap$auto(0x0, 0x2, 0x8, 0x3, 0x7effffffb000) mmap$auto(0x0, 0x202000a, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) futex$auto(&(0x7f0000000080)=0x1, 0xb, 0x1, 0x0, 0x0, 0xfffffffa) futex$auto(&(0x7f0000000080)=0xfffffffa, 0xc, 0x1, 0x0, 0x0, 0xfffffffa) r0 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r0, 0x107, 0xf, 0x0, 0x6) sendfile$auto(0x1, 0x3, 0x0, 0xbff) brk$auto(0x7fffffffefff) 18.566503834s ago: executing program 3 (id=1301): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x7, 0xfffffff7ffff0005, 0x17) r0 = prctl$auto(0x8, 0x1, 0x0, 0x5, 0x7) ioctl$auto_XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f00000001c0)={r0, &(0x7f00000002c0)="43850ce4f47ecd9f29fc6d9f8809d6128da4059ad4a6fa10894836bd2ce4f8e19c7d5fbb1a483c5877bcaa722766149366057168e02bc9", 0xf, &(0x7f00000000c0)="5fc574a71a342f0223f045c1d11a391d1d7fce9fc428e8ee8bbf0b51ecee1a26355f15c57d1e498e35b222578015bb1b3b74d6751cbb634486997da016c2b2d067d58e9118e3907fc48a0ecaae37dbae77eaab2001c041e30c1b3097fcb1c9cde4028d1146b9467b34e2f5b2127b6be163ffd0318ea9b6a3d4", 0xa, &(0x7f0000000140)="5704eafe75c62357866e897d8c50ff428b04bf81fb871c2ed71fc69b46ff8877d33cd578295bbf92fdff", &(0x7f0000000280)=0x8}) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x6069, 0x500008, 0xe1, 0x15, 0x2, 0x200000000e3cc) r1 = socket(0x2, 0x1, 0x106) socket(0x1e, 0x4, 0x0) (async) r2 = socket(0x1e, 0x4, 0x0) connect$auto(r2, &(0x7f0000000240)=@tipc=@nameseq={0x1e, 0x1, 0x1, {0x2, 0x4, 0x3}}, 0x10) read$auto(0xffffffffffffffff, 0x0, 0x10001) timer_create$auto(0x4, &(0x7f0000000140)={@sival_ptr=0x0, @raw=0x6, 0xe}, 0x0) (async) timer_create$auto(0x4, &(0x7f0000000140)={@sival_ptr=0x0, @raw=0x6, 0xe}, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) unshare$auto(0x20000) (async) unshare$auto(0x20000) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/hsr_slave_0/hop_limit\x00', 0x6c0200, 0x0) ptrace$auto_PTRACE_INTERRUPT(0x4207, 0x0, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$auto_net_shaper(&(0x7f00000001c0), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$auto_net_shaper(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'dvmrp0\x00'}) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'team0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'team0\x00'}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="c00900"], 0x9c0}, 0x1, 0x0, 0x0, 0x2400c884}, 0x20040894) (async) sendmsg$auto_NL80211_CMD_SET_WIPHY(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="c00900"], 0x9c0}, 0x1, 0x0, 0x0, 0x2400c884}, 0x20040894) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) sendmsg$auto_NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24004080}, 0x20040894) sendmsg$auto_NET_SHAPER_CMD_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x5090) (async) sendmsg$auto_NET_SHAPER_CMD_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x5090) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) bind$auto(r1, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) 18.089675822s ago: executing program 3 (id=1303): socket(0xa, 0x5, 0x84) (async, rerun: 64) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) (async, rerun: 64) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) (async, rerun: 32) setsockopt$auto(0x3, 0x10000000084, 0xb, 0x0, 0xc) (async, rerun: 32) mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0x401, 0x8000) (async, rerun: 64) close_range$auto(0x2, 0x8, 0x0) (rerun: 64) r0 = socket(0xa, 0x5, 0x0) r1 = socket(0x2, 0x3, 0x6) (async) add_key$auto_KEY_SPEC_SESSION_KEYRING(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)='&\x00', 0x0, 0x0, 0xfffffffffffffffd) (async, rerun: 32) close_range$auto(0x2, r0, 0x0) (async, rerun: 32) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x189401, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) r2 = socketcall$auto(0xa, 0x0) (async, rerun: 32) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) (rerun: 32) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) (async) ioctl$auto(0x3, 0xae60, 0x10000000000402) (async, rerun: 64) ioctl$auto(0x3, 0xae41, r2) (async, rerun: 64) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xffffffffffffffff, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async) mremap$auto(0x7, 0xffffffffffffffff, 0x3fda, 0x3, 0x7fffffffb000) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r4, &(0x7f0000001380)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xfc\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\r&\xec\xb8\xb1Z\\\xc9L\xb2\t\xddbH|\xffGP\x97)\xb9:nqn\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc$\xa0\xa5\xce\xca\xe1P\xf7\xe5_\xca\xd5\xd8\xa4g_\xb1\x88\x8cAJS\x11\x8b\xd1%a\xe5DPk\x8c\xf9\xfb\xe0+\xdb\x12\x10.F\x00\xc37\xc7\xbf\x80\xbeu\xe1V\xb2\xc5\xc9\x1a\xc7\xdc}!\x10\xb1\",1%\x0e\xeb\x15\x15me\xe1a\x03\x18{\xb03+\x93*vB\xc6\xf1\xc6\xff\xbbt\x04!\xb6\v\xde2\xc9\x89#\xbaR\xee\x13jF%\xf2\x15\x9a\x82&\x89o\xa9\xd9\xbfFY\x90\x8c\xa0\xe4\x9d\xa2\xcd\x9a\xb5TC\xc4\x9d\x9ePb]\xaa\xc7f\x06N\xc5\xfa{\x02Y\xae\xf4(\xaa\x06);{?\x1e\fu\x19b\xdf$,\x01\"\x94\x00\x00\x00\x00\x003\xcfZ\xaf~<\xba\xb7\xa03\x8c\n*krS\x19Q#\x8f\xfbW\xad\xe0\xb3o\xcb\xf7\xda\x87C\x99\x1a\xa8\xc1\xe3\xc6%\xac\x01@*\xa0\xc4\xedn-lT\xe6*?\'\x9dW=\xa7\x03\x06\x83 IT\xa3\x7ff\xb6\x95\xe5\xd2\n\xaf\x87`\xce%\xf6 &\xa7M5I\x9c\x17h\x8c\xa4\x98\x16\xe0\xd9?Y\x7f\xf6\x85_{\xfd9p$B9_\xd8\xf4\x0e\xd0\xfa\xe7\xb0\xb8\xa0\xd7\a\xff.\"\x81\b\xb0\xb4\x84\xac\xad\x1b\x93~_\xea\xfe7\x03\"\xd9\x1d.\xe5{bHX\x14\xa1\bO\x03[^\x85jP\x89\t\x06GI\xb7\x99\xb2zZf\xc8\xd4\x8d\x1c\x1e\x03\xb9\xa7Nt\xae\xfff\xf9\tx\xae\xa8\x05\xb14\xc6\x9b\x1f\xd3\x01#\xc6\nb\xd4\xb4\xc8?\xa7\xe2R\xc1\xcf\xd2\xbc\xae\xd1\xc2\x88\"\xf3\xf0\xc0uQy\xec\xfab\xd6\xcd\x16)\x19*E\vm\x8d\x1bG:\x80\'pJ', 0x4100000a3d7) pread64$auto(0xffffffffffffffff, 0x0, 0x100000002, 0x4) (async) close_range$auto(0x2, 0x8, 0x0) (async) lsm_list_modules$auto(0x0, 0x0, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x5, 0x0) (async) open(0x0, 0x22041, 0x154) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r1, 0x401c5820, 0x0) (async, rerun: 32) mmap$auto(0x0, 0x4, 0x10000000000, 0x11, 0x3, 0x100000000) 6.955573898s ago: executing program 0 (id=1342): r0 = socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x2000c, 0x4000000000df, 0xeb4, 0x401, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) clock_gettime$auto(0x6, &(0x7f0000000000)={0x5}) write$auto_fops_init_pkru_pkeys(0xffffffffffffffff, 0x0, 0x0) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x10000}, 0x7, 0x0, 0x5, 0xb}, 0xfff}, 0x8, 0x311) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) select$auto(0x7, &(0x7f0000000080)={[0x4, 0xfffffffffffffffd, 0x7, 0x3, 0xc, 0x6, 0x3, 0x1ffe000, 0xcad, 0x2, 0x9, 0xf, 0xa657, 0x203, 0xd3, 0x1]}, 0x0, 0x0, 0x0) r1 = socket(0x11, 0x3, 0x9) capset$auto(0x0, &(0x7f0000000000)={0x8, 0x7, 0x802}) sendmmsg$auto(r1, &(0x7f00000006c0)={{&(0x7f0000000000), 0x5ac, &(0x7f00000000c0)={&(0x7f0000000080)='L', 0x49}, 0x2, 0x0, 0x5, 0x1}, 0x5}, 0x2, 0x1ef) r2 = landlock_create_ruleset$auto(&(0x7f0000000140)={0xdaa0, 0x1, 0x9}, 0x9, 0x0) socket(0xa, 0x3, 0x0) landlock_restrict_self$auto(r2, 0xb) get_robust_list$auto(0x0, 0x0, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x18dd01, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x1) bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x4ff, 0x0) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) unshare$auto(0x40000080) unshare$auto(0x40000080) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = pidfd_open$auto(0x0, 0x0) setns(r5, 0x48000080) ioctl$auto_UI_SET_ABSBIT(r5, 0x40045567, &(0x7f0000000200)) socket(0x1e, 0x1, 0x0) mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0x1, 0x8000) sendmsg$auto_ETHTOOL_MSG_TUNNEL_INFO_GET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c0000dcd5142bbd6343dd44a6934bec3aa9aebc34a0237ec5879700e190f4", @ANYRES16=r3, @ANYBLOB="010028bd7000fedbdf251c00000018000180140002006e657464657673696d30000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) 6.677111731s ago: executing program 2 (id=1344): unshare$auto(0x81) (async) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/usb/usbmon/9t\x00', 0xa00, 0x0) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/usb/usbmon/36u\x00', 0x26040, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) unshare$auto(0x6) 6.357352039s ago: executing program 2 (id=1346): prctl$auto_PR_GET_UNALIGN(0x5, 0x29, 0x8000, 0x3, 0x7fff) r0 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) r1 = openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f0000000180), 0x101802, 0x0) write$auto(r1, 0x0, 0x7) fallocate$auto(r0, 0x0, 0x7, 0x4cbd61) sendfile$auto(r1, r0, &(0x7f00000001c0)=0x5, 0x7) socket(0x8, 0x802, 0xd) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r2 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000140), 0x180b03, 0x0) ioctl$auto_SNAPSHOT_ALLOC_SWAP_PAGE(r2, 0x80083314, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) lseek$auto(0x3, 0x2, 0x4) mmap$auto(0x0, 0x20009, 0xfff, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, 0x0, 0x40400, 0x0) socket(0x10, 0x2, 0xc) openat$auto_force_wakeup_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/bluetooth/hci2/force_wakeup\x00', 0x8742, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x60580, 0x0) r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) openat$auto_suspend_stats_fops_(0xffffffffffffff9c, &(0x7f0000000100), 0x200040, 0x0) r4 = openat$auto_random_fops_random(0xffffffffffffff9c, &(0x7f0000000000), 0x20502, 0x0) ioctl$auto_RNDADDENTROPY(r4, 0x40085203, &(0x7f0000000240)=[0xa]) clone$auto(0x20003b11, 0x8, 0x0, 0x0, 0x7) ioctl$auto_RNDGETENTCNT(r0, 0x80045200, &(0x7f0000000080)=0xfda) write$auto(r3, 0x0, 0xe) 6.105157962s ago: executing program 1 (id=1347): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ram1\x00', 0x6281, 0x0) ioctl$auto_BLKZEROOUT(r0, 0x127f, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x182b02, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0xe6e43, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x28, 0x5, 0x0) connect$auto(0x3, 0x0, 0x80000000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/kcm\x00', 0x480, 0x0) mmap$auto(0x100, 0x6, 0xdf, 0xeb1, 0x40000000000a5, 0x5) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x4, 0x7) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) mmap$auto(0x0, 0x420009, 0xe3, 0x200000000000eb1, 0x401, 0x8000) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) socket(0x28, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x248200, 0x0) socket(0x2, 0x1, 0x0) msgsnd$auto(0x8, 0x0, 0x5, 0x0) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x1, 0x4000, 0x1, 0x948b, 0x9, 0x15f4da07, 0x6, 0x10, 0x64, 0x80000020, 0x7, 0xb, 0x9, 0x2, 0xd8]}, 0x0) select$auto(0x1000, 0x0, 0x0, &(0x7f00000002c0)={[0x8000000000001fd, 0x3, 0x1, 0x1000000000000bc3, 0x800, 0x3, 0x0, 0x10001, 0x400000000003, 0x3, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x8, 0x9, 0xffffdfffffffff81, 0x4]}, 0x0) ioctl$auto_BLKFLSBUF(r1, 0x1261, 0x0) lseek$auto(0x3, 0xffffffffff800002, 0x10) ioctl$auto_BLKFLSBUF(r1, 0x1261, 0x0) 5.663120916s ago: executing program 1 (id=1348): setresuid$auto(0x0, 0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) r0 = getpid() r1 = gettid() r2 = socket(0x2, 0x1, 0x0) ioctl$auto_RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4ea2, @remote}, 0x6a) sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0x101}, 0x9}, 0x7, 0x20020000) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) close_range$auto(0x2, 0x8, 0x0) socket(0x1e, 0x4, 0x0) r3 = socket(0x1d, 0x2, 0x7) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x68b82, 0x0) ioctl$auto_KVM_GET_MSR_FEATURE_INDEX_LIST(r4, 0xc004ae0a, &(0x7f0000001480)={0x3, [0x5c20f0b6, 0x5, 0x1, 0x6, 0x69f7]}) r5 = ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto_proc_reg_file_ops_compat_inode(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x6, 0x10, r5, 0x1) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'ip6gre0\x00'}) r7 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000000c0), r5) sendmsg$auto_NL802154_CMD_NEW_INTERFACE(r6, &(0x7f0000001440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001400)={&(0x7f0000000100)={0x1218, r7, 0x4, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_COORDINATOR={0x11fa, 0x1e, 0x0, 0x1, [@nested={0x23, 0x5c, 0x0, 0x1, [@typed={0x6, 0x61, 0x0, 0x0, @str='(\x00'}, @generic="8983204549a9a45aa521cc2dab2b8a8b815a5283e51662"]}, @generic="a032d50f03a22f0b975f4798d80bce3fa84eb3e684b9ee7e160a325b6a5fdb9ccf38f37b53692df66de24ead37176789bcb3990ef491bd2a0a58cbd6b8573dfa8d8361e4e586e5f38fafa49fc6c54f463b01aac7cd9e52be9afb9c5738a6a39d87f3f874ed255617f5214bcf87a821c94c149cfdcc05784b7790a717aeb1960c2bbe36a15de59f1e4a7a09a679ab116011ed419a6c868a4819dd371fbb9f42ba6a1bef8e133294ed7a9ff5bae43900ea0e6470848c23f401eb45d54811df4af807ec0eb32644a701a607b32a2e828a55735ef57f0b22892caec2e060c9aaa9528dd0ba9f62a590ffec4bbe92e7a4c244", @generic="380ab6fa2ea2ede469f1b7749a39e5cc2287aa8ff561d7fdae44", @generic="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", @typed={0x8, 0x65, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @typed={0x8, 0x108, 0x0, 0x0, @ipv4=@empty}, @nested={0xb7, 0xa3, 0x0, 0x1, [@generic="4d8b65a074f188ffa9f95147ec3c27c8f22ea1b5af1c9646416fd61502a53107e4f7410beefa506ee2c10cd775fb4af9ef9996e6bc42826c80ba6b203d1e0e5186c1c2e476ecae4085831563d8a9c13c89f4e885045baa5f8c9c8e004be66dad8a28eeef51fc08311e56edb78c5e65fcc648dd", @nested={0x4, 0xe4}, @typed={0x25, 0x138, 0x0, 0x0, @str='/sys/kernel/debug/tracing/README\x00'}, @typed={0x8, 0x118, 0x0, 0x0, @uid=0xffffffffffffffff}, @nested={0x4, 0x1b}, @typed={0x8, 0x73, 0x0, 0x0, @u32=0x7f}]}, @generic]}, @NL802154_ATTR_BEACON_INTERVAL={0x5, 0x26, 0x2}]}, 0x1218}, 0x1, 0x0, 0x0, 0x4c811}, 0x20004000) sendmsg$auto_NL802154_CMD_SET_SEC_PARAMS(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x60, r7, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_IFNAME={0x14, 0x4, 'veth1_to_batadv\x00'}, @NL802154_ATTR_SCAN_DURATION={0x5, 0x24, 0x85}, @NL802154_ATTR_MAX_ASSOCIATIONS={0x8, 0x27, 0xff}, @NL802154_ATTR_SEC_DEVKEY={0x8, 0x2f, 0x0, 0x1, [@typed={0x4, 0x83}]}, @NL802154_ATTR_SCAN_CHANNELS={0x8, 0x21, 0xc}, @NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0xd}, @NL802154_ATTR_SCAN_DURATION={0x5, 0x24, 0x9}]}, 0x60}, 0x1, 0x0, 0x0, 0x48000}, 0x20000000) rt_tgsigqueueinfo$auto(r0, r1, 0x21, &(0x7f0000000400)={@siginfo_0_0={0x3, 0x1c51, 0xfffffffe, @_kill={r0}}}) 5.4810288s ago: executing program 0 (id=1349): socket(0xa, 0x1, 0x84) close_range$auto(0x2, 0x8, 0x0) socket(0x80000000000000a, 0x2, 0x0) r0 = socket(0xa, 0x801, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) getsockopt$auto(r0, 0x84, 0x6d, 0x0, &(0x7f0000000280)=0x1000c0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) setreuid$auto(0x0, 0x0) io_uring_setup$auto(0x6, 0x0) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/card1/timer_source\x00', 0x8002, 0x0) write$auto(r1, 0x0, 0x200c) r2 = getpgid(0x0) prctl$auto(0x0, 0x8, r2, 0x7, 0xffffffff88e033ef) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0xa, 0x0) futex_waitv$auto(&(0x7f0000000000)={0xb, 0x1c380, 0x82}, 0x1, 0x0, 0x0, 0x623d) write$auto(0x3, 0x0, 0xffd8) 5.006849808s ago: executing program 1 (id=1350): mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fa02, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/usbcore/parameters/quirks\x00', 0xc0202, 0x0) mq_open$auto(&(0x7f0000000000)='.\xf1e4\xdf\x16\x95kxE\xd9x\x15\xb0\xf6V\x93\xb4E\x06\xc5}l', 0x400056a, 0x9, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000040)="bdcda609d0dd307ad1695e8740fefb7f2c", 0x11) fsconfig$auto_HIDEPID_INVISIBLE(r0, 0x1, &(0x7f00000002c0)='Z\xd4\xe6\a\xa4\xe8\xad>?\x95B\x7fT\x90\x97\xb0p\xa2\xcc5]\xe2\x9f\x95\xe6\x9c\x96<|!e\x8c\xe4a\xf8\xcc~`\xbb\x86\xd6\xbd\xeeO\x83(\x9a\xd6G<\xe6\x82CpG\x10\xf8K\xc8\xaf\x13e\xe0\xb3\xf0<\f\xfdP\xa2\xe3l9\x9b\xebGOC\xd2\xd2\xb3\t\x96e\x96\x04\x90\xae\xec\x12$\xa1\a\xbb\xee)\xd2\x1dU-\x9b\x88B\xa4\xe6\x8d\x1cc\xa7\\\xc2\x7f.\x03\xba\xb6-\xf1&)\xf3\xa9\xfc\x82\x1c', &(0x7f00000000c0), 0x2) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/loop5/queue/discard_max_bytes\x00', 0x2, 0x0) pwrite64$auto(r2, &(0x7f00000001c0)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x88\xa8s\x1c\b\x06\x8a>)\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x4e, 0x2) mmap$auto(0x0, 0x810004, 0x400000000fff, 0x8000000008011, 0x3, 0x8000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$auto_OVS_VPORT_CMD_NEW(r3, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="6800000012f0f49494c0b126248e59d64148b6c99cd107efad39389cb66b0d8f35cd1cb463e4ac2148dcf5bbb501ea14c04185714d79ebb08689829a8b7d5a9c47b88a7c6e1a5b2ca5dbb2c8a48cccf70a563e605fb1b0309a87faf5bf40b8da3fd7c16547b72ab3c722c1bca441696c7702eb4b0bd30e582e6302109353de117ddce4cf410a8e154aed23cb45e0a7c7a53f9687619cab5ba63142170b9a59b43f70e1a6190922669096bef64844f6ee3a733c8fd3edd77c0ee8c7d93cbef2569cd38f05ef77b8b5c32473eee933d5d04520da6fd061d7dda4f16a9b1dd4c81dd95ce6ce98164066f6a61e0699cc12a9b875e45a3c5ffb486e85d69b42f78a9d9cc491cfc7ffee5b1e91ef4933ddfcb09678dc6d3b1ba8207fa9392452710c525d331242d7b947cfc992f083734fd56ef8e2cf545cb3433bc335a54c77da628869b87a3b67a4a2454afcc2e5db3f7935259e736f6743cb06b9d8", @ANYRES16=r4, @ANYBLOB="000128bd7000fbdbdf2501000000080001000500000044000600ffffff7f0000000006000000000000000600000000000000010000000000000009000000000000000700000000000000020000000000000006000000000000000500030000000000"], 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x50) fcntl$auto_F_GETFD(r0, 0x1, 0x6) r5 = socket(0xa, 0x3, 0x3a) close$auto(r5) r6 = openat$auto_sc_seq_fops_netdebug(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) sendmmsg$auto(r0, &(0x7f00000007c0)={{&(0x7f0000000580)="1693070428f5f12b48326292ebe776cbf0235c711539c5c54bd49abdb49b77d8f6b796b492d78fdd9e524a9907a108d0ca6546d5dd73ee673db7d29c5a3ef6c65001b4465c1150", 0x4, &(0x7f00000006c0)={&(0x7f0000000600)="aecace8bc59c102cd780bcc6669cae51696e16cd672030ca8ec32dd891f8dc3cf5ff18dcad6db86a6739e5d7318750bd71264f969b25c6ba90ef01a3c3465d8bdc1cc3ddbd10e88b923be389fb153a162ecff69d34bd3cd7d3a5788cb53dff32bf043fe652b84bfe25d4d78c61d6c2d56f7a4d3eba8b87772d09548037657f3232", 0x4}, 0x8, &(0x7f0000000700)="590bc1c0e90332407303e625a9d8bcc6bd38d3ab1ee1dd5812e60804dbe4bdb96cdc7f34a4e272101bdccc35a1f88901f5baa6e6572484cf23ac49749b646c84d39e3e45a9de33fa15b9e40257b5ce48ea9223945aa84a1449f7cd9ac583eaca24fb8f0ac14b06cdeb7722bdeb29229312168f639539c068f71263ca28c6658d908c84099d1c8eaa8ceeabf1f3e108a2452912c05dded9ccaf3b48cd31c49df3f4287c2cb78c", 0x8001, 0x9e2}, 0x3}, 0x6, 0x8) read$auto_sc_seq_fops_netdebug(r6, &(0x7f0000000100)=""/129, 0x81) io_uring_register$auto(r5, 0x8, 0x0, 0x0) epoll_pwait2$auto(0x3, 0x0, 0x4, &(0x7f0000000040)={0x400000001, 0x7ffffffffffffffe}, 0x0, 0x7ff6) write$auto(0x3, 0x0, 0xfffffdef) write$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffffff, 0x0, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) madvise$auto(0x3, 0x9, 0x6) 4.827131117s ago: executing program 0 (id=1351): socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x12, 0xeb1, 0x401, 0x8000) socket(0x2, 0x1, 0x0) syz_genetlink_get_family_id$auto_nl802154(0x0, 0xffffffffffffffff) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x1a1842, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r0, &(0x7f0000003900)='\t', 0x1) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/ip6_vti0/address\x00', 0x323c82, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_netdev(&(0x7f0000002f80), r3) mmap$auto(0x0, 0x2020008, 0x1000000000000005, 0xeb1, 0xffffffffffffffff, 0x1008000) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r4, 0x4b66, 0x1) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth1_vlan\x00'}) sendmsg$auto_NETDEV_CMD_QUEUE_GET(r3, 0x0, 0x20008810) sendmsg$auto_NL80211_CMD_REQ_SET_REG(r2, 0x0, 0x0) sendfile$auto(r2, r1, 0x0, 0x8) set_mempolicy$auto(0x6, &(0x7f0000000000)=0xcf, 0x4) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x59, 0x0) get_mempolicy$auto(0x0, 0x0, 0x400, 0x0, 0x1) close_range$auto(0x0, 0x5, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) mknod$auto(0x0, 0x63c1, 0x7ff) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x40001, 0x0) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000080), 0x48980, 0x0) 4.532087754s ago: executing program 2 (id=1352): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0x0, 0x0) r0 = fsopen$auto(0x0, 0x1) r1 = fanotify_init$auto(0x5, 0x0) creat$auto(&(0x7f0000000000)='./file0\x00', 0x3ff) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/dummy_hcd.3/usb4/power/runtime_status\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f00000008c0)=""/61, 0x3d) fanotify_mark$auto(r1, 0x205, 0xa, 0x4, 0x0) socket(0x11, 0xa, 0x300) mmap$auto(0x0, 0x3, 0xdf, 0xeb1, 0x403, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x2000, 0x0) fsconfig$auto(r0, 0x8, 0x0, 0x0, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x81, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto_KVM_GET_SUPPORTED_HV_CPUID(r4, 0xc008aec1, &(0x7f0000000100)={0x70, 0x0, [{0xd, 0x5, 0x1, 0x0, 0x4, 0x3, 0x7}, {0x74d, 0x7, 0x0, 0x401, 0x3, 0x2, 0x1}, {0x3, 0x3, 0x3d, 0x73, 0x7fff, 0x0, 0xe}, {0x5, 0x4, 0x800, 0x9, 0x31f, 0x4, 0x81}, {0x1000, 0x1, 0xe, 0xd, 0xb, 0x6, 0x1}]}) getsockopt$auto_SO_NETNS_COOKIE(r4, 0x8, 0x47, &(0x7f0000000000)='-)\x00', 0x0) write$auto(r3, &(0x7f0000000080)='0\x81=\"\xad\xff\x8d\xf9P\x18\xa4\xb0\xb4\xd9\x82=\xe1P\x05\x00\xfb&\xe8\xbf\x901\a2\xa2X`\a\xf1y\xb3\"=', 0x48da548d) r5 = openat$auto_clear_warn_once_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) r6 = socket(0x15, 0x5, 0xfffffffe) setsockopt$auto_SO_BUSY_POLL_BUDGET(r6, 0x1, 0x46, 0x0, 0x94) fchmodat2$auto(r0, &(0x7f0000000040)='./file0\x00', 0x7fff, 0x1) socket(0x21, 0x2, 0x2) setsockopt$auto(0x3, 0x1000000110, 0x2, 0xffffffffffffffff, 0x1) write$auto(r5, &(0x7f0000000080)='9\x00d1L\xff\x15\xba\xa17=(\xc1\xf8\xff\xff\v\xb5^\xa1/[`.\xf7~\xd2\xfd\xf3\x95\x1d\xf8\x06\x00\x00\x00\x00\x00\x00\x00\xf8-\x10\xa6\xa0\n\xd1\xff\a\xae=R\x89\x00!\xc6J\x1d\x86J\"\xdd\xf88Y\n\x87\xcc\xb1([\xd1n2\xcd2\x05\x00\x00\x00', 0x40400) close_range$auto(0x2, 0x8000, 0x0) 4.248020805s ago: executing program 0 (id=1353): mmap$auto(0x0, 0x2020009, 0x6, 0xf8, 0xfffffffffffffffa, 0x8000) r0 = socket(0x15, 0x5, 0x0) acct$auto(&(0x7f0000000100)='./cgroup/cgroup.subtree_control\x00') unshare$auto(0x40000080) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x88841, 0x0) timer_settime$auto(0x0, 0x8, 0x0, &(0x7f0000000280)={{0xa04, 0x200000000000004}, {0x2, 0x7ff}}) writev$auto(0x3, &(0x7f0000000100)={&(0x7f0000000340), 0x7111}, 0x8) write$auto(0xca, &(0x7f00000000c0)='\x04>\x01\x01\x00J:\xdd\xfc\xb6\xc6\x0f\xaf\xe3\x0f\xd1V\xb1yz\\\xa6\xed\ag+\xa3p(\xe2\x1b\xdc7\x1b\xc4TM}\xce\x90\xfa9\x957\xec\xd8\xe0TC\x86\xad\xe1G\xc7\xd4\x96\x12h\x84;Y\xe2\x03i\xa1)`\n\xc3\xfeR\x06\x03\xf5/@\xf0\'\xb9\xdf\xe1\xef\v\x19B\xc0\xe2\xac\xa5^\x01D\xef\xaf#\xbc\xa5\xf9J\xdc\xc3),=1\b\x05\x9d\x82\xd4\'\xe8\xfe\xfd\x9a\x9f\x00\x00\x00\x00\x00\x00\x00\x00', 0x7f) keyctl$auto(0x8, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x6) writev$auto(r0, &(0x7f0000000140)={&(0x7f0000000040)="2e4a68c27a01b1d2b299226dfa21fb52520c500021022a4393fa346001e72254a9a4f67fdb2e617d490f90a38fe4fc723eb7b727db8311a883ea86ce9dcd4989f6e9a39409", 0xc4}, 0x9) truncate$auto(0x0, 0xfffffffffffffffe) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0xe0301, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x2, 0x4, 0x3, 0x2, 0x8, 0x2, 0xffffffffffffffff, 0x400000000d, 0x3}, 0x6f4) mmap$auto(0x0, 0x5b7, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) r2 = openat$auto_udmabuf_fops_udmabuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x8080, 0x0) ioctl$auto_UDMABUF_CREATE_LIST(r2, 0x40087543, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) prctl$auto(0xff, 0x400, r1, 0x100000, 0x7fff) madvise$auto(0x0, 0xffffffffffff0005, 0x19) pkey_mprotect$auto(0x800000000000, 0xb, 0x6, 0x0) acct$auto(&(0x7f0000000180)='./cgroup/cgroup.subtree_control\x00') unshare$auto(0xc) getsockopt$auto(r0, 0x114, 0x2713, 0xfffffffffffffffc, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptywc\x00', 0x0, 0x0) 4.22935419s ago: executing program 1 (id=1354): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80802, 0x0) r0 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @loopback}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, 0x0, 0x9, 0x0, 0x1f, 0x9}, 0x800009}, 0x7, 0x20000000) r1 = socket(0xa, 0x2, 0x0) fstatfs$auto(r1, 0x0) r2 = socket(0x10, 0x2, 0xc) sendmsg$auto_CTRL_CMD_GETPOLICY(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[], 0x51}, 0x1, 0x0, 0x0, 0x24050803}, 0x10004010) r3 = syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$auto_IEEE802154_ASSOCIATE_REQ(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000440)={&(0x7f00000006c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="100029bd7000ffaddf2501ece75114000d00000000000c000500960000000000000005001300fa00000008ca095abbc4ac7a8408000000769df16105001a"], 0x40}, 0x1, 0x0, 0x0, 0x4000004}, 0x20000000) sendmsg$auto_IEEE802154_DISASSOCIATE_REQ(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB='d\x00\x00', @ANYRES16=r3, @ANYBLOB="01002dbd7000fddbdf250300000005001b00bd00000006000e0093070000140001006e657464657673696d30000000000000080028000101000005001500070000000c0009000e000000000000000500070000005f0c2280ca1045202e41b607dd6c392c0cc5cc6ab7341bd3f48d8837264233b0d9bcba1571b8302ecb117aa2b4e75f986cfd6f"], 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x20024001) sendmsg$auto_IEEE802154_DISASSOCIATE_REQ(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="ac000000", @ANYRES16=r3, @ANYBLOB="000125bd7000fcdbdf250300000084001e00ea2b065eb534981382027e2d159d80db23e57d88c6bbb619b401a1ef99bc4457350947dd148d6f7877ecac28ac4983acc8782decc5fa84f2981963654624416f542fbb9fde2cf2a079b9984bed765f7dcffe69dcf91d18c79376f99ff3f1e49577ddf537d566515d66c1cc245bb5afe0d9c3f2cd7abc8451e5ff270a64c0cb0d912903124c1554418c0e5f34f914000100626f6e"], 0xac}, 0x1, 0x0, 0x0, 0x4c805}, 0x0) sendmsg$auto_IEEE802154_ADD_IFACE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r3, 0x1, 0x70bd28, 0x25dfdbff, {}, [@IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0xc}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5}, @IEEE802154_ATTR_CSMA_MIN_BE={0x5, 0x26, 0xf7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8080}, 0x14000080) setsockopt$auto(0x3, 0x1, 0x2f, 0x0, 0x9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) write$auto(0x3, 0x0, 0xfffffdef) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) mmap$auto(0xffffffffffffffff, 0x420005, 0x1ff, 0xeb5, 0xffffffffffffffff, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) ioctl$auto_SNDRV_TIMER_IOCTL_STATUS64(0xffffffffffffffff, 0x80605414, &(0x7f00000004c0)={0x6, 0x1, 0x8, 0x0, 0x40, 0x8, "4001906c95df4e44de7495e96fb03f050eac044f79ee3763dc6934c60dd11110f36ad9f77854a6c2e66787fe89393349f7d997ee974106bbd10a767d0a935e82"}) unshare$auto(0x40000080) connect$auto(0x3, 0x0, 0x54) 3.886412359s ago: executing program 2 (id=1355): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000040), 0x16b7c2, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) unshare$auto(0x40000080) ioctl$auto(0xc8, 0x400454cb, 0xffffffffffffffff) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x602, 0x1) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) mremap$auto(0x200000, 0x7, 0x3fd6, 0x3, 0x20000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) poll$auto(0x0, 0x7f, 0x9) mmap$auto(0x0, 0x20009, 0x4000000000d9, 0xeb1, 0x401, 0xfffffffffffffff7) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r1, 0x0, 0x10001) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r2, &(0x7f0000000240)={0x0, 0x7}, 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) ioctl$auto(0xffffffffffffffff, 0x5522, 0xf15) ioctl$auto_USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f00000000c0)={0x0, 0x4, 0x0, 0xfffe, 0xb1, 0x8, 0x0}) close_range$auto(0x2, 0x8, 0x0) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0xc0101, 0x0) 2.824838819s ago: executing program 2 (id=1356): r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x8003, @multicast2}, 0x6a) mmap$auto(0x0, 0x400008, 0x204, 0x9b72, 0xffffffffffffffff, 0x800000000008000) r1 = getpid() process_vm_readv$auto(r1, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0) r2 = waitid$auto_P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000340)={@_si_pad}, 0x10001, &(0x7f00000003c0)={{0x8, 0xfffffffffffffffe}, {0x0, 0x200}, 0x370f, 0x4, 0x0, 0xffffffff, 0x8000000000000000, 0x3, 0x3, 0xab, 0x1, 0x4, 0xbafc, 0x66f, 0x7fffffff, 0x9}) sendmsg$auto_IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000001e00)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001dc0)={&(0x7f0000000480)={0x1940, 0x0, 0x800, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x1024, 0x1, 0x0, 0x1, [@nested={0x16, 0x132, 0x0, 0x1, [@generic="07495e29bccc", @typed={0xc, 0xcb, 0x0, 0x0, @u64=0x4}]}, @generic="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", @typed={0x5, 0xfc, 0x0, 0x0, @str='\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@nested={0x11, 0x142, 0x0, 0x1, [@generic="bc3458b8f100d7232ed169f1a7"]}, @nested={0x14, 0x0, 0x0, 0x1, [@nested={0x4, 0xbe}, @typed={0x8, 0x60, 0x0, 0x0, @u32=0xffffffff}, @nested={0x4, 0x12e}]}, @nested={0x8, 0x3d, 0x0, 0x1, [@nested={0x4, 0x142}]}, @typed={0x8, 0x10, 0x0, 0x0, @uid}]}, @IPVS_CMD_ATTR_DAEMON={0x179, 0x3, 0x0, 0x1, [@typed={0x8, 0xbc, 0x0, 0x0, @fd=r0}, @generic, @generic="4c18125f157e9b07d7eb752b9e57771c224e0fcb134cac32c9", @generic="85612645421c4dde2d8e5f5f2125cd65d364fb9e4d5e9983b7bc9ba38176a5907cee5fe84d0796cf0370052cd395811461a8ff1b6dbf796773765e63aec6172ae44801e434ab589fdb1362a6f485e7cc3a2a619c662ff367de98203062c8727e0aeb39ef73f84fb424764f5fedf36505efdc61883914cf2b31bfc69bf3e26bdd1cc98d90cf30317149dba68548606471893e180efdde9620", @nested={0xb1, 0xd6, 0x0, 0x1, [@nested={0x4, 0xdf}, @generic="8e1be8696e7bf3620449b81c33d3ba4376d951", @typed={0x8, 0xa5, 0x0, 0x0, @pid=r1}, @generic="9471d1873d51de56b5f49e8d438d1506281b8b42766c3b29d52435b1af30128585db3d604a70ae6ac768", @nested={0x4, 0x104}, @generic="4d70184967198f16b6bbbeb9c8215045f2b0b1616926862e15bf4ec18626a72b3cccfcd51da4d8609f2e4675c599f659f44cf06e73cdec0c7eab34d880088b3ff5592992fe57c4160e1e85dfceced565fd515dc279429bdb8f004dce9fc5faaf"]}, @typed={0x8, 0x13e, 0x0, 0x0, @u32=0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x134, 0x1, 0x0, 0x1, [@nested={0x34, 0x115, 0x0, 0x1, [@generic="91ce00ae5a4b7c58b0c7f34700e7adf8865460d399d4d27c3d6c4fef713aeee42f839ec6", @generic="86c4c6ba493d0c52", @nested={0x4, 0x109}]}, @nested={0xfb, 0x147, 0x0, 0x1, [@generic="7d35899706faa2c0b1bb353a9afc5e3f5b58ee226807b21dc90e71595609b4edf711b55fa0840b3777733698f1", @generic="8e8634542f9156c90152d46410217d3a1e3a9144eddc9bb33dfcb36973918a3c066af1cda82b8a5946ea0d66d4394fab84fb962133efe07d8dc8e32d594f6d583b4f51c80e0e66b99f401cb7f4f38a2d3f3d7ce2e7a902693813637e574e61843834fc5b0d7e4783913edec57e6f98475af0b00d7bbe219d6ce0f819998def5c67918b4cb82bf47d4d880c3a2716bbc78830fa07354620f06f7bc68bd8b848490ca0dd884baf1f22a263fe7533d736231a7f4f3d47cec1cdc6f63011deb9d86f2b353bd572c6efc3a91b"]}]}, @IPVS_CMD_ATTR_SERVICE={0x206, 0x1, 0x0, 0x1, [@typed={0x8, 0x9f, 0x0, 0x0, @ipv4=@multicast1}, @generic="35620d2bff817cb2269ea9b5191c146f2a9155bebea381362718be1630505358a4c613f5a9301694f6cb1a47765bef266195a6d166f1a836a4d599b69ee47fbb69eeececabd3597a689408025cc444bccf235e2029e68978236dfc55dbedfa68d14b0814162e3cf9f6b3df2aabb885c0ff32d67686d66fa53fcfa98589558f00dd3058c24bd151a37a35120c1a4c5a84", @generic="2fa9ecb7c50ddb3ebe59ce8097db4947baf6bb11b958b9c7d365220087e440051b62f11b7419b8d24a934891bb3afd8e70b3efc63fdd99f73e2718da7643869c0ce29ce4feda05332505c2e07aff74ce4e69e9b4fdd2a26505be61f705fdac9c7978c5469508dfd306d8fec2078f42c9463b5fa2352fe5914220511c4bd7354aba2486d5dc85bf737b315689645f9bcc44a3ee261ffcc8c9c69cf4160da2e2d36575eb8a44459d0563e598dec454ef1805e141c7fbdba600c633d46e17c2", @generic="9d6708931465f2475db5b36624d6d57be93757e2ce2c21ea4ceda359095657408b8a64d4ea6864aab831eddaef91899f78d8abd4b5604ce3a3c4e7d4eeb9cc0cff4885bb160cc04f13853d272d6dd8177593fa1e99462be9435564a2cbcb29c447bf9f3e13a726200eb474c896f3a6bfbba30dd3690c43008ad1c474a3e4fff8a8c65345962bfb7b765c153684c2cd1f9e207aaa7d4a9d7b7ff573edf5bd956cbb49e2ce965f91c26c4fec43"]}, @IPVS_CMD_ATTR_DAEMON={0x7c, 0x3, 0x0, 0x1, [@nested={0x64, 0x69, 0x0, 0x1, [@typed={0x8, 0x106, 0x0, 0x0, @u32=0x10}, @generic="6c5c87844b0f5df69695b1a6c6ab2d5d990b9a1e38feb6a138f2d130ec8068d1960f91bf9bd4e34c41827a51c4f50406e6d916c15341a16fa11c8b64a379cf8f912e1a192f32bd1a0b647224ddf77a95941f6b6e", @nested={0x4, 0x3a}, @generic]}, @typed={0x14, 0xca, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}}]}, @IPVS_CMD_ATTR_DAEMON={0x19c, 0x3, 0x0, 0x1, [@nested={0xc, 0xac, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32=0x8000}]}, @nested={0xfe, 0xc6, 0x0, 0x1, [@generic="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"]}, @generic="44146aca5759a3fe569c8a04c66f6405840be2054100feaceff635913cedc05c7008a5934eb481d93af84b9b06f80ec55d59670a06757fceb0a54c4caea258196101c04bc70a15e1ae7e41ab59356dc42981ffa619b6def87c8ff3ffa7946817c6c4eeddfcc28c2ec3809cb20960bc34f953325783eb03a9eebf02f0cc642164d0e73710658e2d506c2628ae"]}, @IPVS_CMD_ATTR_DAEMON={0x1f3, 0x3, 0x0, 0x1, [@typed={0x8, 0xf0, 0x0, 0x0, @pid=r2}, @generic="850ce9b1f9a8af31a2335c15dffa68749d021492aa4ec4dabf58118cb09a02e8e8fe553c03a0e8570ca2dc13439a535f57661623001669b77d890ae5902cf9a1f344045dfc", @generic="58d620cd2fd92f57172aef6559f18a49e40dd14a3964be118ee747ca3c3566d9486d9360e4fe26715f883d0b71bfb2e509037d1a9b5ddc5c0f03129f158b83620c958557b0579a3c438cbf19107251422599f26cd58bfd81227eed6d715dfebda35d89930ba157643927c2fba04a7fe195452aafedfd2e9ce08a6a9258eddd48", @nested={0x8, 0xa1, 0x0, 0x1, [@nested={0x4, 0xb1}]}, @generic="b5f1a5e4e5326ff63f6bac60b2779bf8fdb9559707c4cebaafb7b67b1c79a0b3386c6d121da1bb6b460e3622ecac669a3181f34da9a01045a5879f09546795aca6f51fff8956640e99f6935340042146c7d0ea2d9045065629d36042f864a1cb98ad48f16dae9752abf820d172d541636c4b9ea75c53a53e841e4585d3b4e5115c592aed1248", @nested={0x93, 0x3e, 0x0, 0x1, [@nested={0x4, 0x28}, @typed={0x8, 0x3a, 0x0, 0x0, @ipv4=@multicast2}, @typed={0x8, 0xe4, 0x0, 0x0, @fd=r0}, @nested={0x4, 0x58}, @typed={0x8, 0x124, 0x0, 0x0, @fd=r0}, @generic="acbd45c805f489bcbc13c6a48e0982d161aa4b13bde465ac451998e2c41406f61d5d1bfa0f82dc8f14be5d5c25a5a9975f3d515d1b99fe7d209bfebc4ce1a347604a1923e0a781349a095c94ed009db8b86a392df2d66b86daeaf634069f021cbd4c6474e736f8eddd17ae94ee87fb"]}]}]}, 0x1940}, 0x1, 0x0, 0x0, 0x8040}, 0x40) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x6, 0x0) r3 = socket(0xa, 0x1, 0x84) capget$auto(0x0, 0xfffffffffffffffe) getsockopt$auto(r3, 0x84, 0x85, 0x0, 0x0) getpid() syz_genetlink_get_family_id$auto_nlctrl(0x0, 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETFAMILY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x8080) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_tipcv2(0x0, 0xffffffffffffffff) sendmsg$auto_TIPC_NL_MON_GET(r4, &(0x7f00000083c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4801}, 0x8080) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f000000fc00), 0x3, 0x0) socket(0x25, 0x1, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x2000000008000) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r5, 0x0, 0x10001) r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/fail-nth\x00', 0x2d41, 0x0) writev$auto(r6, &(0x7f0000000240)={0x0, 0x7}, 0x2) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0x2, 0x1, 0x84) sendto$auto(0x3, 0x0, 0x2000f, 0x1c0, &(0x7f0000000000)=@in={0x2, 0x4e22, @rand_addr=0x64010100}, 0x1c) 2.746664482s ago: executing program 32 (id=1303): socket(0xa, 0x5, 0x84) (async, rerun: 64) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) (async, rerun: 64) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) (async, rerun: 32) setsockopt$auto(0x3, 0x10000000084, 0xb, 0x0, 0xc) (async, rerun: 32) mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0x401, 0x8000) (async, rerun: 64) close_range$auto(0x2, 0x8, 0x0) (rerun: 64) r0 = socket(0xa, 0x5, 0x0) r1 = socket(0x2, 0x3, 0x6) (async) add_key$auto_KEY_SPEC_SESSION_KEYRING(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)='&\x00', 0x0, 0x0, 0xfffffffffffffffd) (async, rerun: 32) close_range$auto(0x2, r0, 0x0) (async, rerun: 32) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x189401, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) r2 = socketcall$auto(0xa, 0x0) (async, rerun: 32) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) (rerun: 32) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) (async) ioctl$auto(0x3, 0xae60, 0x10000000000402) (async, rerun: 64) ioctl$auto(0x3, 0xae41, r2) (async, rerun: 64) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xffffffffffffffff, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async) mremap$auto(0x7, 0xffffffffffffffff, 0x3fda, 0x3, 0x7fffffffb000) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r4, &(0x7f0000001380)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xfc\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\r&\xec\xb8\xb1Z\\\xc9L\xb2\t\xddbH|\xffGP\x97)\xb9:nqn\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc$\xa0\xa5\xce\xca\xe1P\xf7\xe5_\xca\xd5\xd8\xa4g_\xb1\x88\x8cAJS\x11\x8b\xd1%a\xe5DPk\x8c\xf9\xfb\xe0+\xdb\x12\x10.F\x00\xc37\xc7\xbf\x80\xbeu\xe1V\xb2\xc5\xc9\x1a\xc7\xdc}!\x10\xb1\",1%\x0e\xeb\x15\x15me\xe1a\x03\x18{\xb03+\x93*vB\xc6\xf1\xc6\xff\xbbt\x04!\xb6\v\xde2\xc9\x89#\xbaR\xee\x13jF%\xf2\x15\x9a\x82&\x89o\xa9\xd9\xbfFY\x90\x8c\xa0\xe4\x9d\xa2\xcd\x9a\xb5TC\xc4\x9d\x9ePb]\xaa\xc7f\x06N\xc5\xfa{\x02Y\xae\xf4(\xaa\x06);{?\x1e\fu\x19b\xdf$,\x01\"\x94\x00\x00\x00\x00\x003\xcfZ\xaf~<\xba\xb7\xa03\x8c\n*krS\x19Q#\x8f\xfbW\xad\xe0\xb3o\xcb\xf7\xda\x87C\x99\x1a\xa8\xc1\xe3\xc6%\xac\x01@*\xa0\xc4\xedn-lT\xe6*?\'\x9dW=\xa7\x03\x06\x83 IT\xa3\x7ff\xb6\x95\xe5\xd2\n\xaf\x87`\xce%\xf6 &\xa7M5I\x9c\x17h\x8c\xa4\x98\x16\xe0\xd9?Y\x7f\xf6\x85_{\xfd9p$B9_\xd8\xf4\x0e\xd0\xfa\xe7\xb0\xb8\xa0\xd7\a\xff.\"\x81\b\xb0\xb4\x84\xac\xad\x1b\x93~_\xea\xfe7\x03\"\xd9\x1d.\xe5{bHX\x14\xa1\bO\x03[^\x85jP\x89\t\x06GI\xb7\x99\xb2zZf\xc8\xd4\x8d\x1c\x1e\x03\xb9\xa7Nt\xae\xfff\xf9\tx\xae\xa8\x05\xb14\xc6\x9b\x1f\xd3\x01#\xc6\nb\xd4\xb4\xc8?\xa7\xe2R\xc1\xcf\xd2\xbc\xae\xd1\xc2\x88\"\xf3\xf0\xc0uQy\xec\xfab\xd6\xcd\x16)\x19*E\vm\x8d\x1bG:\x80\'pJ', 0x4100000a3d7) pread64$auto(0xffffffffffffffff, 0x0, 0x100000002, 0x4) (async) close_range$auto(0x2, 0x8, 0x0) (async) lsm_list_modules$auto(0x0, 0x0, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x5, 0x0) (async) open(0x0, 0x22041, 0x154) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r1, 0x401c5820, 0x0) (async, rerun: 32) mmap$auto(0x0, 0x4, 0x10000000000, 0x11, 0x3, 0x100000000) 1.02478105s ago: executing program 1 (id=1358): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x4) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0x40000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, r0, 0x0) socket(0x10, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/fs/ocfs2/cluster_stack\x00', 0x88282, 0x0) openat$auto_suspend_stats_fops_(0xffffffffffffff9c, &(0x7f00000026c0), 0x4aa40, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/disk\x00', 0x100, 0x0) fanotify_init$auto(0x65, 0x2) clone$auto(0x7fff, 0xff, 0x0, 0x0, 0x7) mmap$auto(0x0, 0x20009, 0x5, 0xeb2, 0x8, 0x1008000) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) r2 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x48102, 0x0) open_by_handle_at$auto(r2, &(0x7f0000000180)={0x1, 0x0, 'K'}, 0x7) write$auto_console_fops_tty_io(r2, &(0x7f0000000000)="c80d1b5d399b3f", 0xfdef) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000229bd70001cdddf250200020008000308"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="0700000000000000df250a"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x5c1882, 0x0) write$auto(r3, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1800"], 0x1ac}, 0x1, 0x0, 0x0, 0x4000044}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc8}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x1f00) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 172.145444ms ago: executing program 0 (id=1359): r0 = openat$auto_proc_pid_attr_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x183681, 0x0) r1 = openat$auto_uprobe_events_ops_trace_uprobe(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/uprobe_events\x00', 0x2002, 0x0) write$auto_uprobe_events_ops_trace_uprobe(r1, &(0x7f0000000100)="2d8d", 0x2) writev$auto(r0, &(0x7f0000000140)={0x0, 0x2}, 0xa) 86.302437ms ago: executing program 1 (id=1360): prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) unshare$auto(0x40000080) ioctl$auto_RNDADDENTROPY2(0xffffffffffffffff, 0x40085203, &(0x7f0000000000)=[0xfff, 0x2688]) r0 = socket(0x2, 0x80002, 0x73) bind$auto(r0, &(0x7f0000000340)=@l2tp={0x2, 0x0, @multicast2, 0x4}, 0x6b) mmap$auto(0x2000, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mlockall$auto(0x800000000000005) close_range$auto(0x2, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x1c, 0x0, 0xd0d58b333228212f, 0x70bd2c, 0x25dfdbfc, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x4000000) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES8, @ANYBLOB="01"], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x80) write$auto(r1, &(0x7f0000000000)='-\x00', 0xfdef) 83.197993ms ago: executing program 2 (id=1361): unshare$auto(0x40000080) mmap$auto(0xffffffffffffffff, 0x2020004, 0x203, 0xeb1, 0xffffffffffffffff, 0x208000) (async) mmap$auto(0xffffffffffffffff, 0x2020004, 0x203, 0xeb1, 0xffffffffffffffff, 0x208000) bind$auto(0x3, 0x0, 0x6d) (async) bind$auto(0x3, 0x0, 0x6d) rseq$auto(0x0, 0x8000, 0x0, 0x6) (async) rseq$auto(0x0, 0x8000, 0x0, 0x6) openat$auto_tracing_free_buffer_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/free_buffer\x00', 0x20103, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x2000040080000004, 0xe) (async) madvise$auto(0x0, 0x2000040080000004, 0xe) openat$auto_nodes_fops_netdebug(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x25, 0x2, 0x10) madvise$auto(0x0, 0x4, 0x17) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="05082dbd7000ecdbdf257e000000"], 0x14}, 0x1, 0x0, 0x0, 0x4004044}, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) process_vm_readv$auto(0x0, 0x0, 0x1, 0x0, 0x6, 0x0) (async) process_vm_readv$auto(0x0, 0x0, 0x1, 0x0, 0x6, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/net/bond0/bonding/arp_validate\x00', 0x2002, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) fanotify_init$auto(0x5, 0x0) (async) fanotify_init$auto(0x5, 0x0) mmap$auto(0x0, 0x5, 0x7, 0x400ff, 0xffffffffffffffff, 0x10008003) (async) mmap$auto(0x0, 0x5, 0x7, 0x400ff, 0xffffffffffffffff, 0x10008003) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) io_uring_setup$auto(0x5, 0x0) mknod$auto(&(0x7f0000000240)='u[,&*}\x00\a\x00\x00\x00?\xa4\x1fN\xa1~5Z\xc7\r\f}M4\xa8m\xe6\x19[11\xab\xff-E\xac9(\xb4O\xa0t4h\x9f-gn\x1f\x01\x00\x00\x00\x00\x00\x00\x00\xaeR\x81\r_\x0e\x19\b\x85\bvv(e\xdax)\t\x15\xf6\xc8\xee\x04\x16\xc1\x9a!\x87I7\x8cD&zg\xb0a\xab|E\xde\x14\xee[\xc8\xc0\xa8Nh\x0f\xa3\xdbT\xb3\xb8\xd2F\xa0\xc4]\xaf\xc43&\xe4\x01\x05\xd2\x15\xf8\xf1!\x9d\x92\xbbH\xd3^aD\x87\xd8\xe7\xd2\xf3[r\xc5S&}D[\x97\xf1\xd9\xf8Y\x1c\x03\x84\xb4\xd7\x16\x19\xe5\x17\x10\xd8fcG:\xfbY8\x17w\x98?\x03@\xe5\x02\x05\x93h\xb9\xf7\xef\x84\x8aGlN\a\x1e\x00\x00\x00\x00\x00\x00\x00\xf1p\xeb\xe9(%\x89\xef\x85\xdfr\xce\x00\x00\x00\x00\xff\x00\xa2M\'d\x12\x1c\x12\xca\xa5_\x8d\xdf\xc5\x8d\x19?\xfc~\xb3X\x14\xa7\xa9M\x87\xfcTW\x1bR\xbci\x8d\x8aNEO\xb3~~\xa8\xa6\x894\x80;s\xb7\xa3V\x1b\x14|\x9e\xd4\x05\x85\x0f!\xab-E\'\x97Y\xb7\xe8fMv_\xf8\xa0S\xef\xb7\b\xe7!T.g\x92\x87\t$\x06\xa4\xfb\x83\x8c\x17^\x82\xe7\xd3\xf6q\x1a\xa0\xf82[W\x90\xdd\xe3\xde\xa9\xde\x94`-\x9a\x1e}\xebO*\xb85,v.\xfc5\xba?vlt\xda%\x06a\x15I\x1f\xe3\x05+\x810T2\xf9\x9b\xc7\xd1\t\x03\xf2\x8d\x8a\x90\xb54\bH<9\xf1\x91 D\x85g,\xaa\xca\xcd\xd5\xcb\x9a\xb1j\xf2F\xce\x14\x92\xf9\xd7\xec\xc5\x1e\x8aq2\xce\x881f\xd7\xd4\x9e\xf6\xb6P\x01\xe8T\xb5X\xb9d-I\xd6\x91\xc3\xe2\x88S\x82l=\x02t$p\t\x8cY\x06\r\x83\xb0\x86\xc6\x84\x1c\xce\xb6\xf0\xdfC\x9fj<\xfe\xa4\x1f\x82L\xe4\x13+H\x00\x00\x00\x00\x00\x00\x00\x01M\x16\xa0\xbeB6\xfb\xa2-\x17\x93Q\x9fKusl5\xa2$M\xb4\x18\x1db\xf3\xce\x8c\xe5Rna\xd5\xbbQ\xc7\xa7+\vH\xc1l\x1bIv\xe8_\x00', 0x1085, 0x9) acct$auto(&(0x7f0000000480)='u[,&*}\x00\a\x00\'\x00?\xa4\x1fN\xa1~5Z\xc7\r\f}M4\xa8m\xe6\x19[11\xab\xff-E\xac9(\xb4O\xa0t4h\x9f-gn\x1f\x0f\x18\xc5\x82-s\x83\xe6\xaeR\x81\r_\x0e\x19\x12\x85\bvf(e\xday)\t\x15\xf6\xc8\xee\x04\x16\xc1\x9a!\x87I7\x8cD&zg\xb0a\xab|E\xde\x14\xee[\xc8\xc0\xa8Nh\x0f\xa3\xdbT\xb3\xb8\xd2F\xa0\xc4]\xaf\xc43&\xe4\x01\x05\xd2\x15\xf8\xf1!\x9d\x92\xbbHL9aD\xb4\x80\xed\xba>\"\xb6\x7f\xa3f\x1d\a\xa1\x87\x84uA\xd8\xe7\xd2\xf3[r\xc5S&}D[\x97\xf1\xd9\xf8Y\x03\x84\xb4\xd7\x16\x19\xe5\x17\x10\xd8fcG:\xfbY8\x17w\x98?\x03@\xe5\x02\x05\x93h\xb9\xf7\xef\x84\x8aGlN\a\x1e') (async) acct$auto(&(0x7f0000000480)='u[,&*}\x00\a\x00\'\x00?\xa4\x1fN\xa1~5Z\xc7\r\f}M4\xa8m\xe6\x19[11\xab\xff-E\xac9(\xb4O\xa0t4h\x9f-gn\x1f\x0f\x18\xc5\x82-s\x83\xe6\xaeR\x81\r_\x0e\x19\x12\x85\bvf(e\xday)\t\x15\xf6\xc8\xee\x04\x16\xc1\x9a!\x87I7\x8cD&zg\xb0a\xab|E\xde\x14\xee[\xc8\xc0\xa8Nh\x0f\xa3\xdbT\xb3\xb8\xd2F\xa0\xc4]\xaf\xc43&\xe4\x01\x05\xd2\x15\xf8\xf1!\x9d\x92\xbbHL9aD\xb4\x80\xed\xba>\"\xb6\x7f\xa3f\x1d\a\xa1\x87\x84uA\xd8\xe7\xd2\xf3[r\xc5S&}D[\x97\xf1\xd9\xf8Y\x03\x84\xb4\xd7\x16\x19\xe5\x17\x10\xd8fcG:\xfbY8\x17w\x98?\x03@\xe5\x02\x05\x93h\xb9\xf7\xef\x84\x8aGlN\a\x1e') open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0xb3) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x80000, 0x0) (async) r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x80000, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, 0x0) mmap$auto(0xfffffffffffffffc, 0x2020009, 0x3, 0xeb4, r2, 0x2) 0s ago: executing program 0 (id=1362): r0 = socket(0x11, 0x2, 0xffffffff) setsockopt$auto(r0, 0x107, 0xf, 0x0, 0x6) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000840), 0xffffffffffffffff) mmap$auto(0x0, 0x7, 0xdf, 0x9b72, 0x7, 0x28000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r2 = socket(0xa, 0x1, 0x84) getsockopt$auto(r2, 0x84, 0x11, 0x0, &(0x7f0000000000)=0x28000000) mmap$auto(0x2, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_OVS_VPORT_CMD_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x44040}, 0xc0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000140), 0xffffffffffffffff) io_uring_setup$auto(0x401, 0x0) bpf$auto_BPF_PROG_LOAD(0x5, &(0x7f0000000080)=@enable_stats={0x7}, 0x6) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/config/target/core/alua/lu_gps/default_lu_gp/lu_gp_id\x00', 0x101000, 0x0) bpf$auto(0x12, 0x0, 0x26) sendmsg$auto_OVS_CT_LIMIT_CMD_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB=' .\x00\x00', @ANYRES16=r1, @ANYBLOB="01002ebd5100fbcbdf25010012ea03000180072e01"], 0x2e20}, 0x1, 0x0, 0x0, 0x2000c040}, 0x4) mmap$auto(0x0, 0x2000c, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) kernel console output (not intermixed with test programs): s not specified [ 232.032790][ T9307] netlink: 342 bytes leftover after parsing attributes in process `syz.1.706'. [ 232.163496][ T9307] nvme_fabrics: missing parameter 'transport=%s' [ 232.190945][ T9307] nvme_fabrics: missing parameter 'nqn=%s' [ 233.507034][ T9331] program syz.1.712 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 233.665239][ T9339] openvswitch: netlink: IP tunnel dst address not specified [ 233.732349][ T9343] netlink: 342 bytes leftover after parsing attributes in process `syz.1.716'. [ 233.859199][ T9339] nvme_fabrics: missing parameter 'transport=%s' [ 233.875937][ T9339] nvme_fabrics: missing parameter 'nqn=%s' [ 234.395595][ T9353] openvswitch: netlink: IP tunnel dst address not specified [ 234.430425][ T9353] netlink: 342 bytes leftover after parsing attributes in process `syz.1.718'. [ 234.514265][ T9353] nvme_fabrics: missing parameter 'transport=%s' [ 234.539810][ T9353] nvme_fabrics: missing parameter 'nqn=%s' [ 234.823068][ T9358] openvswitch: netlink: IP tunnel dst address not specified [ 234.862500][ T9358] netlink: 342 bytes leftover after parsing attributes in process `syz.3.727'. [ 235.060609][ T9358] nvme_fabrics: missing parameter 'transport=%s' [ 235.094445][ T9358] nvme_fabrics: missing parameter 'nqn=%s' [ 235.350011][ T9367] netlink: 208 bytes leftover after parsing attributes in process `syz.1.722'. [ 235.374146][ T9367] FAULT_INJECTION: forcing a failure. [ 235.374146][ T9367] name failslab, interval 1, probability 0, space 0, times 0 [ 235.410140][ T9367] CPU: 1 UID: 0 PID: 9367 Comm: syz.1.722 Tainted: G L syzkaller #0 PREEMPT(full) [ 235.410186][ T9367] Tainted: [L]=SOFTLOCKUP [ 235.410194][ T9367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 235.410212][ T9367] Call Trace: [ 235.410221][ T9367] [ 235.410232][ T9367] dump_stack_lvl+0x100/0x190 [ 235.410270][ T9367] should_fail_ex.cold+0x5/0xa [ 235.410309][ T9367] should_failslab+0xc2/0x120 [ 235.410343][ T9367] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 235.410387][ T9367] ? __kernfs_new_node+0xd2/0x9f0 [ 235.410427][ T9367] __kernfs_new_node+0xd2/0x9f0 [ 235.410461][ T9367] ? __pfx___kernfs_new_node+0x10/0x10 [ 235.410503][ T9367] ? find_held_lock+0x2b/0x80 [ 235.410539][ T9367] ? kernfs_root+0xee/0x2a0 [ 235.410568][ T9367] ? kernfs_root+0xee/0x2a0 [ 235.410608][ T9367] kernfs_new_node+0x11b/0x1a0 [ 235.410644][ T9367] __kernfs_create_file+0x53/0x350 [ 235.410685][ T9367] sysfs_add_file_mode_ns+0x207/0x3c0 [ 235.410717][ T9367] sysfs_merge_group+0x194/0x340 [ 235.410748][ T9367] ? __pfx_sysfs_merge_group+0x10/0x10 [ 235.410779][ T9367] ? bus_add_device+0x368/0x6b0 [ 235.410806][ T9367] ? __pfx_bus_add_device+0x10/0x10 [ 235.410856][ T9367] ? __pfx_dev_add_physical_location+0x10/0x10 [ 235.410902][ T9367] dpm_sysfs_add+0x237/0x280 [ 235.410941][ T9367] device_add+0x9ef/0x1950 [ 235.410988][ T9367] ? __pfx_device_add+0x10/0x10 [ 235.411022][ T9367] ? kfree_const+0x5a/0x70 [ 235.411049][ T9367] ? kfree+0x1dd/0x6c0 [ 235.411102][ T9367] device_create_groups_vargs+0x1f8/0x270 [ 235.411145][ T9367] device_create+0xed/0x130 [ 235.411188][ T9367] ? __pfx_device_create+0x10/0x10 [ 235.411222][ T9367] ? lockdep_init_map_type+0x5c/0x250 [ 235.411251][ T9367] ? timer_init_key+0x155/0x330 [ 235.411297][ T9367] ? ieee80211_roc_setup+0x136/0x270 [ 235.411333][ T9367] ? ieee80211_alloc_hw_nm+0x19f8/0x22e0 [ 235.411385][ T9367] mac80211_hwsim_new_radio+0x379/0x5aa0 [ 235.411418][ T9367] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 235.411467][ T9367] ? rcu_is_watching+0x12/0xc0 [ 235.411501][ T9367] ? do_trace_netlink_extack+0x74/0x1f0 [ 235.411535][ T9367] ? __nla_validate_parse+0x1e7/0x28b0 [ 235.411580][ T9367] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 235.411624][ T9367] hwsim_new_radio_nl+0xc5f/0x1370 [ 235.411654][ T9367] ? rcu_is_watching+0x12/0xc0 [ 235.411689][ T9367] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 235.411729][ T9367] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0 [ 235.411779][ T9367] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 235.411834][ T9367] genl_family_rcv_msg_doit+0x214/0x300 [ 235.411883][ T9367] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 235.411927][ T9367] ? genl_get_cmd+0x3e7/0x760 [ 235.411983][ T9367] ? bpf_lsm_capable+0x9/0x10 [ 235.412015][ T9367] ? security_capable+0x80/0x260 [ 235.412058][ T9367] ? ns_capable+0xd2/0xf0 [ 235.412095][ T9367] genl_rcv_msg+0x560/0x800 [ 235.412143][ T9367] ? __pfx_genl_rcv_msg+0x10/0x10 [ 235.412187][ T9367] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 235.412226][ T9367] netlink_rcv_skb+0x159/0x420 [ 235.412265][ T9367] ? __pfx_genl_rcv_msg+0x10/0x10 [ 235.412312][ T9367] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 235.412373][ T9367] ? netlink_deliver_tap+0x1ae/0xcc0 [ 235.412417][ T9367] genl_rcv+0x28/0x40 [ 235.412457][ T9367] netlink_unicast+0x585/0x850 [ 235.412503][ T9367] ? __pfx_netlink_unicast+0x10/0x10 [ 235.412554][ T9367] netlink_sendmsg+0x8b0/0xda0 [ 235.412601][ T9367] ? __pfx_netlink_sendmsg+0x10/0x10 [ 235.412636][ T9367] ? __import_iovec+0x1d2/0x640 [ 235.412664][ T9367] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 235.412708][ T9367] ____sys_sendmsg+0x9e1/0xb70 [ 235.412742][ T9367] ? __pfx_netlink_sendmsg+0x10/0x10 [ 235.412782][ T9367] ? __pfx_____sys_sendmsg+0x10/0x10 [ 235.412826][ T9367] ? __pfx_futex_wake_mark+0x10/0x10 [ 235.412864][ T9367] ___sys_sendmsg+0x190/0x1e0 [ 235.412902][ T9367] ? __pfx____sys_sendmsg+0x10/0x10 [ 235.412989][ T9367] __sys_sendmsg+0x170/0x220 [ 235.413024][ T9367] ? __pfx___sys_sendmsg+0x10/0x10 [ 235.413054][ T9367] ? __x64_sys_futex+0x34f/0x4d0 [ 235.413101][ T9367] ? rcu_is_watching+0x12/0xc0 [ 235.413140][ T9367] do_syscall_64+0x10b/0xf80 [ 235.413181][ T9367] ? clear_bhb_loop+0x40/0x90 [ 235.413217][ T9367] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.413246][ T9367] RIP: 0033:0x7efdc559ce59 [ 235.413271][ T9367] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 235.413298][ T9367] RSP: 002b:00007efdc647f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 235.413325][ T9367] RAX: ffffffffffffffda RBX: 00007efdc5815fa0 RCX: 00007efdc559ce59 [ 235.413345][ T9367] RDX: 0000000004048000 RSI: 0000200000004240 RDI: 0000000000000008 [ 235.413363][ T9367] RBP: 00007efdc5632d6f R08: 0000000000000000 R09: 0000000000000000 [ 235.413380][ T9367] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 235.413397][ T9367] R13: 00007efdc5816038 R14: 00007efdc5815fa0 R15: 00007ffe92d3a508 [ 235.413437][ T9367] [ 237.333189][ T9389] ubi: mtd0 is already attached to ubi0 [ 237.523818][ T9395] netlink: 178 bytes leftover after parsing attributes in process `syz.0.730'. [ 237.924516][ T9401] openvswitch: netlink: IP tunnel dst address not specified [ 237.958806][ T9401] netlink: 342 bytes leftover after parsing attributes in process `syz.3.731'. [ 238.074277][ T9401] nvme_fabrics: missing parameter 'transport=%s' [ 238.099883][ T9401] nvme_fabrics: missing parameter 'nqn=%s' [ 238.181903][ T9402] debugfs: '211!phy1!netdev:wlan1!rc_rateidx_mcs_mask' already exists in 'ieee80211' [ 239.125529][ T9419] openvswitch: netlink: IP tunnel dst address not specified [ 239.141521][ T9419] netlink: 342 bytes leftover after parsing attributes in process `syz.0.742'. [ 239.295492][ T9419] nvme_fabrics: missing parameter 'transport=%s' [ 239.314786][ T9419] nvme_fabrics: missing parameter 'nqn=%s' [ 239.540650][ T9440] netlink: 342 bytes leftover after parsing attributes in process `syz.0.737'. [ 240.314920][ T9436] Process accounting resumed [ 240.347339][ T9449] netlink: 186 bytes leftover after parsing attributes in process `syz.1.738'. [ 240.384154][ T9447] can: request_module (can-proto-5) failed. [ 240.423636][ T9449] netlink: 12 bytes leftover after parsing attributes in process `syz.1.738'. [ 240.490899][ T9449] i: entered promiscuous mode [ 240.857488][ T9463] ubi: mtd0 is already attached to ubi0 [ 240.980898][ T9464] smpboot: CPU 1 is now offline [ 241.069696][ T9456] netlink: 208 bytes leftover after parsing attributes in process `syz.0.749'. [ 241.112781][ T9456] FAULT_INJECTION: forcing a failure. [ 241.112781][ T9456] name failslab, interval 1, probability 0, space 0, times 0 [ 241.217186][ T9456] CPU: 0 UID: 0 PID: 9456 Comm: syz.0.749 Tainted: G L syzkaller #0 PREEMPT(full) [ 241.217217][ T9456] Tainted: [L]=SOFTLOCKUP [ 241.217223][ T9456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 241.217240][ T9456] Call Trace: [ 241.217246][ T9456] [ 241.217251][ T9456] dump_stack_lvl+0x100/0x190 [ 241.217273][ T9456] should_fail_ex.cold+0x5/0xa [ 241.217293][ T9456] should_failslab+0xc2/0x120 [ 241.217311][ T9456] __kmalloc_cache_noprof+0x7a/0x6f0 [ 241.217332][ T9456] ? kobject_uevent_env+0x263/0x18b0 [ 241.217348][ T9456] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 241.217374][ T9456] kobject_uevent_env+0x263/0x18b0 [ 241.217395][ T9456] ? bus_to_subsys+0x114/0x150 [ 241.217418][ T9456] device_add+0x116e/0x1950 [ 241.217439][ T9456] ? __pfx_device_add+0x10/0x10 [ 241.217456][ T9456] ? kfree_const+0x5a/0x70 [ 241.217471][ T9456] ? kfree+0x1dd/0x6c0 [ 241.217496][ T9456] device_create_groups_vargs+0x1f8/0x270 [ 241.217518][ T9456] device_create+0xed/0x130 [ 241.217538][ T9456] ? __pfx_device_create+0x10/0x10 [ 241.217555][ T9456] ? lockdep_init_map_type+0x5c/0x250 [ 241.217571][ T9456] ? timer_init_key+0x155/0x330 [ 241.217595][ T9456] ? ieee80211_roc_setup+0x136/0x270 [ 241.217620][ T9456] ? ieee80211_alloc_hw_nm+0x19f8/0x22e0 [ 241.217647][ T9456] mac80211_hwsim_new_radio+0x379/0x5aa0 [ 241.217665][ T9456] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 241.217691][ T9456] ? rcu_is_watching+0x12/0xc0 [ 241.217709][ T9456] ? do_trace_netlink_extack+0x74/0x1f0 [ 241.217732][ T9456] ? __nla_validate_parse+0x1e7/0x28b0 [ 241.217754][ T9456] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 241.217776][ T9456] hwsim_new_radio_nl+0xc5f/0x1370 [ 241.217791][ T9456] ? rcu_is_watching+0x12/0xc0 [ 241.217811][ T9456] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 241.217832][ T9456] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0 [ 241.217856][ T9456] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 241.217891][ T9456] genl_family_rcv_msg_doit+0x214/0x300 [ 241.217917][ T9456] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 241.217939][ T9456] ? genl_get_cmd+0x3e7/0x760 [ 241.217965][ T9456] ? bpf_lsm_capable+0x9/0x10 [ 241.217981][ T9456] ? security_capable+0x80/0x260 [ 241.218002][ T9456] ? ns_capable+0xd2/0xf0 [ 241.218023][ T9456] genl_rcv_msg+0x560/0x800 [ 241.218051][ T9456] ? __pfx_genl_rcv_msg+0x10/0x10 [ 241.218073][ T9456] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 241.218095][ T9456] netlink_rcv_skb+0x159/0x420 [ 241.218115][ T9456] ? __pfx_genl_rcv_msg+0x10/0x10 [ 241.218138][ T9456] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 241.218166][ T9456] ? netlink_deliver_tap+0x1ae/0xcc0 [ 241.218191][ T9456] genl_rcv+0x28/0x40 [ 241.218211][ T9456] netlink_unicast+0x585/0x850 [ 241.218233][ T9456] ? __pfx_netlink_unicast+0x10/0x10 [ 241.218259][ T9456] netlink_sendmsg+0x8b0/0xda0 [ 241.218282][ T9456] ? __pfx_netlink_sendmsg+0x10/0x10 [ 241.218301][ T9456] ? __import_iovec+0x1d2/0x640 [ 241.218318][ T9456] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 241.218343][ T9456] ____sys_sendmsg+0x9e1/0xb70 [ 241.218362][ T9456] ? __pfx_netlink_sendmsg+0x10/0x10 [ 241.218384][ T9456] ? __pfx_____sys_sendmsg+0x10/0x10 [ 241.218408][ T9456] ? __pfx_futex_wake_mark+0x10/0x10 [ 241.218430][ T9456] ___sys_sendmsg+0x190/0x1e0 [ 241.218452][ T9456] ? __pfx____sys_sendmsg+0x10/0x10 [ 241.218503][ T9456] __sys_sendmsg+0x170/0x220 [ 241.218521][ T9456] ? __pfx___sys_sendmsg+0x10/0x10 [ 241.218537][ T9456] ? __x64_sys_futex+0x34f/0x4d0 [ 241.218560][ T9456] ? rcu_is_watching+0x12/0xc0 [ 241.218579][ T9456] do_syscall_64+0x10b/0xf80 [ 241.218600][ T9456] ? clear_bhb_loop+0x40/0x90 [ 241.218624][ T9456] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.218640][ T9456] RIP: 0033:0x7fce5eb9ce59 [ 241.218654][ T9456] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 241.218668][ T9456] RSP: 002b:00007fce5fa72028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 241.218693][ T9456] RAX: ffffffffffffffda RBX: 00007fce5ee15fa0 RCX: 00007fce5eb9ce59 [ 241.218704][ T9456] RDX: 0000000004048000 RSI: 0000200000004240 RDI: 0000000000000008 [ 241.218713][ T9456] RBP: 00007fce5ec32d6f R08: 0000000000000000 R09: 0000000000000000 [ 241.218722][ T9456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 241.218731][ T9456] R13: 00007fce5ee16038 R14: 00007fce5ee15fa0 R15: 00007fff13235998 [ 241.218751][ T9456] [ 242.716800][ T9485] netlink: 178 bytes leftover after parsing attributes in process `syz.0.745'. [ 242.980819][ T9493] openvswitch: netlink: IP tunnel dst address not specified [ 243.014284][ T9493] netlink: 342 bytes leftover after parsing attributes in process `syz.0.748'. [ 243.135999][ T9493] nvme_fabrics: missing parameter 'transport=%s' [ 243.181675][ T9493] nvme_fabrics: missing parameter 'nqn=%s' [ 243.488541][ T9509] debugfs: '211!phy1!netdev:wlan1!rc_rateidx_mcs_mask' already exists in 'ieee80211' [ 244.591976][ T9524] FAULT_INJECTION: forcing a failure. [ 244.591976][ T9524] name failslab, interval 1, probability 0, space 0, times 0 [ 244.652470][ T9524] CPU: 0 UID: 0 PID: 9524 Comm: syz.1.755 Tainted: G L syzkaller #0 PREEMPT(full) [ 244.652496][ T9524] Tainted: [L]=SOFTLOCKUP [ 244.652501][ T9524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 244.652511][ T9524] Call Trace: [ 244.652517][ T9524] [ 244.652523][ T9524] dump_stack_lvl+0x100/0x190 [ 244.652544][ T9524] should_fail_ex.cold+0x5/0xa [ 244.652564][ T9524] should_failslab+0xc2/0x120 [ 244.652582][ T9524] __kmalloc_cache_noprof+0x7a/0x6f0 [ 244.652603][ T9524] ? assoc_array_delete+0x101/0xd10 [ 244.652628][ T9524] assoc_array_delete+0x101/0xd10 [ 244.652653][ T9524] ? __pfx_assoc_array_delete+0x10/0x10 [ 244.652673][ T9524] ? __pfx___might_resched+0x10/0x10 [ 244.652703][ T9524] key_move+0xe1/0x650 [ 244.652723][ T9524] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 244.652739][ T9524] ? __pfx_key_move+0x10/0x10 [ 244.652762][ T9524] ? xfd_validate_state+0x129/0x190 [ 244.652780][ T9524] keyctl_keyring_move+0xed/0x150 [ 244.652810][ T9524] __do_sys_keyctl+0x21d/0x5a0 [ 244.652825][ T9524] do_syscall_64+0x10b/0xf80 [ 244.652847][ T9524] ? clear_bhb_loop+0x40/0x90 [ 244.652864][ T9524] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.652879][ T9524] RIP: 0033:0x7efdc559ce59 [ 244.652892][ T9524] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 244.652906][ T9524] RSP: 002b:00007efdc647f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 244.652922][ T9524] RAX: ffffffffffffffda RBX: 00007efdc5815fa0 RCX: 00007efdc559ce59 [ 244.652931][ T9524] RDX: fffffffffffffffd RSI: fffffffffffffffc RDI: 000000000000001e [ 244.652940][ T9524] RBP: 00007efdc5632d6f R08: 0000000000000001 R09: 0000000000000000 [ 244.652949][ T9524] R10: fffffffffffffffd R11: 0000000000000246 R12: 0000000000000000 [ 244.652958][ T9524] R13: 00007efdc5816038 R14: 00007efdc5815fa0 R15: 00007ffe92d3a508 [ 244.652979][ T9524] [ 245.061698][ T9529] ubi: mtd0 is already attached to ubi0 [ 245.287162][ T9522] Process accounting resumed [ 245.561166][ T9543] netlink: 178 bytes leftover after parsing attributes in process `syz.0.759'. [ 245.775835][ T9548] openvswitch: netlink: IP tunnel dst address not specified [ 245.790739][ T9535] netlink: 208 bytes leftover after parsing attributes in process `syz.3.758'. [ 245.832485][ T9548] netlink: 342 bytes leftover after parsing attributes in process `syz.0.760'. [ 245.844490][ T9535] FAULT_INJECTION: forcing a failure. [ 245.844490][ T9535] name failslab, interval 1, probability 0, space 0, times 0 [ 245.887887][ T9535] CPU: 0 UID: 0 PID: 9535 Comm: syz.3.758 Tainted: G L syzkaller #0 PREEMPT(full) [ 245.887915][ T9535] Tainted: [L]=SOFTLOCKUP [ 245.887921][ T9535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 245.887929][ T9535] Call Trace: [ 245.887935][ T9535] [ 245.887941][ T9535] dump_stack_lvl+0x100/0x190 [ 245.887963][ T9535] should_fail_ex.cold+0x5/0xa [ 245.887983][ T9535] should_failslab+0xc2/0x120 [ 245.888002][ T9535] __kmalloc_cache_noprof+0x7a/0x6f0 [ 245.888023][ T9535] ? kobject_uevent_env+0x263/0x18b0 [ 245.888040][ T9535] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 245.888067][ T9535] kobject_uevent_env+0x263/0x18b0 [ 245.888088][ T9535] ? bus_to_subsys+0x114/0x150 [ 245.888111][ T9535] device_add+0x116e/0x1950 [ 245.888132][ T9535] ? __pfx_device_add+0x10/0x10 [ 245.888150][ T9535] ? kfree_const+0x5a/0x70 [ 245.888165][ T9535] ? kfree+0x1dd/0x6c0 [ 245.888190][ T9535] device_create_groups_vargs+0x1f8/0x270 [ 245.888212][ T9535] device_create+0xed/0x130 [ 245.888232][ T9535] ? __pfx_device_create+0x10/0x10 [ 245.888256][ T9535] ? lockdep_init_map_type+0x5c/0x250 [ 245.888273][ T9535] ? timer_init_key+0x155/0x330 [ 245.888299][ T9535] ? ieee80211_roc_setup+0x136/0x270 [ 245.888318][ T9535] ? ieee80211_alloc_hw_nm+0x19f8/0x22e0 [ 245.888344][ T9535] mac80211_hwsim_new_radio+0x379/0x5aa0 [ 245.888361][ T9535] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 245.888386][ T9535] ? rcu_is_watching+0x12/0xc0 [ 245.888403][ T9535] ? do_trace_netlink_extack+0x74/0x1f0 [ 245.888421][ T9535] ? __nla_validate_parse+0x1e7/0x28b0 [ 245.888443][ T9535] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 245.888464][ T9535] hwsim_new_radio_nl+0xc5f/0x1370 [ 245.888480][ T9535] ? rcu_is_watching+0x12/0xc0 [ 245.888499][ T9535] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 245.888520][ T9535] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0 [ 245.888544][ T9535] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 245.888571][ T9535] genl_family_rcv_msg_doit+0x214/0x300 [ 245.888596][ T9535] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 245.888618][ T9535] ? genl_get_cmd+0x3e7/0x760 [ 245.888643][ T9535] ? bpf_lsm_capable+0x9/0x10 [ 245.888659][ T9535] ? security_capable+0x80/0x260 [ 245.888680][ T9535] ? ns_capable+0xd2/0xf0 [ 245.888699][ T9535] genl_rcv_msg+0x560/0x800 [ 245.888723][ T9535] ? __pfx_genl_rcv_msg+0x10/0x10 [ 245.888746][ T9535] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 245.888768][ T9535] netlink_rcv_skb+0x159/0x420 [ 245.888789][ T9535] ? __pfx_genl_rcv_msg+0x10/0x10 [ 245.888812][ T9535] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 245.888840][ T9535] ? netlink_deliver_tap+0x1ae/0xcc0 [ 245.888862][ T9535] genl_rcv+0x28/0x40 [ 245.888882][ T9535] netlink_unicast+0x585/0x850 [ 245.888905][ T9535] ? __pfx_netlink_unicast+0x10/0x10 [ 245.888930][ T9535] netlink_sendmsg+0x8b0/0xda0 [ 245.888953][ T9535] ? __pfx_netlink_sendmsg+0x10/0x10 [ 245.888972][ T9535] ? __import_iovec+0x1d2/0x640 [ 245.888989][ T9535] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 245.889014][ T9535] ____sys_sendmsg+0x9e1/0xb70 [ 245.889033][ T9535] ? __pfx_netlink_sendmsg+0x10/0x10 [ 245.889055][ T9535] ? __pfx_____sys_sendmsg+0x10/0x10 [ 245.889079][ T9535] ? __pfx_futex_wake_mark+0x10/0x10 [ 245.889101][ T9535] ___sys_sendmsg+0x190/0x1e0 [ 245.889124][ T9535] ? __pfx____sys_sendmsg+0x10/0x10 [ 245.889183][ T9535] __sys_sendmsg+0x170/0x220 [ 245.889202][ T9535] ? __pfx___sys_sendmsg+0x10/0x10 [ 245.889219][ T9535] ? __x64_sys_futex+0x34f/0x4d0 [ 245.889247][ T9535] ? rcu_is_watching+0x12/0xc0 [ 245.889272][ T9535] do_syscall_64+0x10b/0xf80 [ 245.889294][ T9535] ? clear_bhb_loop+0x40/0x90 [ 245.889312][ T9535] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.889328][ T9535] RIP: 0033:0x7fa555b9ce59 [ 245.889342][ T9535] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 245.889356][ T9535] RSP: 002b:00007fa553df6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 245.889371][ T9535] RAX: ffffffffffffffda RBX: 00007fa555e15fa0 RCX: 00007fa555b9ce59 [ 245.889382][ T9535] RDX: 0000000004048000 RSI: 0000200000004240 RDI: 0000000000000008 [ 245.889391][ T9535] RBP: 00007fa555c32d6f R08: 0000000000000000 R09: 0000000000000000 [ 245.889401][ T9535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 245.889410][ T9535] R13: 00007fa555e16038 R14: 00007fa555e15fa0 R15: 00007ffe37580588 [ 245.889430][ T9535] [ 246.933610][ T9548] nvme_fabrics: missing parameter 'transport=%s' [ 246.955700][ T9548] nvme_fabrics: missing parameter 'nqn=%s' [ 247.839272][ T8371] Bluetooth: hci1: unexpected subevent 0x01 length: 125 > 18 [ 248.273028][ T9535] Process accounting resumed [ 248.426176][ T9564] random: crng reseeded on system resumption [ 249.553808][ T9592] netlink: 12 bytes leftover after parsing attributes in process `syz.2.769'. [ 249.880048][ T8371] Bluetooth: hci1: command 0x0c1a tx timeout [ 250.425777][ T9591] Process accounting resumed [ 250.433233][ T9607] openvswitch: netlink: IP tunnel dst address not specified [ 250.523301][ T9610] netlink: 342 bytes leftover after parsing attributes in process `syz.2.772'. [ 250.747828][ T9607] nvme_fabrics: missing parameter 'transport=%s' [ 250.809766][ T9607] nvme_fabrics: missing parameter 'nqn=%s' [ 251.188175][ T9580] Process accounting resumed [ 251.963933][ T8371] Bluetooth: hci1: command 0x0c1a tx timeout [ 252.514027][ T9566] Bluetooth: hci0: unexpected event for opcode 0x7c89 [ 252.983656][ T9659] random: crng reseeded on system resumption [ 253.037925][ T9663] openvswitch: netlink: IP tunnel dst address not specified [ 253.125329][ T9663] netlink: 342 bytes leftover after parsing attributes in process `syz.1.784'. [ 253.291338][ T9663] nvme_fabrics: missing parameter 'transport=%s' [ 253.351192][ T9663] nvme_fabrics: missing parameter 'nqn=%s' [ 254.660115][ T9566] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 254.667675][ T9566] Bluetooth: hci1: Invalid handle: 0x3a4a > 0x0eff [ 255.381370][ T9698] sg_write: data in/out 262364/16 bytes for SCSI command 0x61-- guessing data in; [ 255.381370][ T9698] program syz.3.790 not setting count and/or reply_len properly [ 255.535912][ T9709] netlink: 'syz.2.792': attribute type 2 has an invalid length. [ 255.721082][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.730182][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.877656][ T9688] Process accounting resumed [ 255.994502][ T9713] openvswitch: netlink: IP tunnel dst address not specified [ 256.044141][ T9713] netlink: 342 bytes leftover after parsing attributes in process `syz.3.795'. [ 256.213594][ T9713] nvme_fabrics: missing parameter 'transport=%s' [ 256.301494][ T9713] nvme_fabrics: missing parameter 'nqn=%s' [ 256.469112][ T9731] openvswitch: netlink: IP tunnel dst address not specified [ 256.515548][ T9731] netlink: 342 bytes leftover after parsing attributes in process `syz.2.807'. [ 256.709933][ T9731] nvme_fabrics: missing parameter 'transport=%s' [ 256.779520][ T9731] nvme_fabrics: missing parameter 'nqn=%s' [ 257.554347][ T9747] sg_write: data in/out 262364/16 bytes for SCSI command 0x61-- guessing data in; [ 257.554347][ T9747] program syz.2.802 not setting count and/or reply_len properly [ 258.123591][ T9768] openvswitch: netlink: IP tunnel dst address not specified [ 258.293901][ T9774] openvswitch: netlink: IP tunnel dst address not specified [ 258.312966][ T9774] netlink: 342 bytes leftover after parsing attributes in process `syz.0.810'. [ 258.399693][ T9774] nvme_fabrics: missing parameter 'transport=%s' [ 258.415856][ T9774] nvme_fabrics: missing parameter 'nqn=%s' [ 258.793734][ T9784] openvswitch: netlink: IP tunnel dst address not specified [ 258.824144][ T9784] netlink: 342 bytes leftover after parsing attributes in process `syz.1.820'. [ 258.977682][ T9784] nvme_fabrics: missing parameter 'transport=%s' [ 259.061276][ T9784] nvme_fabrics: missing parameter 'nqn=%s' [ 259.246489][ T9793] usb usb21: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 259.374949][ T9798] FAULT_INJECTION: forcing a failure. [ 259.374949][ T9798] name failslab, interval 1, probability 0, space 0, times 0 [ 259.433034][ T9801] FAULT_INJECTION: forcing a failure. [ 259.433034][ T9801] name failslab, interval 1, probability 0, space 0, times 0 [ 259.492802][ T9801] CPU: 0 UID: 0 PID: 9801 Comm: syz.1.815 Tainted: G L syzkaller #0 PREEMPT(full) [ 259.492829][ T9801] Tainted: [L]=SOFTLOCKUP [ 259.492835][ T9801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 259.492845][ T9801] Call Trace: [ 259.492850][ T9801] [ 259.492856][ T9801] dump_stack_lvl+0x100/0x190 [ 259.492878][ T9801] should_fail_ex.cold+0x5/0xa [ 259.492901][ T9801] should_failslab+0xc2/0x120 [ 259.492919][ T9801] __kmalloc_cache_noprof+0x7a/0x6f0 [ 259.492942][ T9801] ? pkcs7_note_signed_info+0x2d2/0x5c0 [ 259.492962][ T9801] ? asymmetric_key_generate_id+0x145/0x180 [ 259.492986][ T9801] pkcs7_note_signed_info+0x2d2/0x5c0 [ 259.493005][ T9801] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 259.493028][ T9801] asn1_ber_decoder+0x14cf/0x2170 [ 259.493056][ T9801] ? __pfx_asn1_ber_decoder+0x10/0x10 [ 259.493089][ T9801] pkcs7_parse_message+0x289/0x870 [ 259.493117][ T9801] verify_pkcs7_signature+0x30/0xa0 [ 259.493137][ T9801] valid_regdb+0x211/0x590 [ 259.493158][ T9801] ? __pfx_valid_regdb+0x10/0x10 [ 259.493180][ T9801] reg_reload_regdb+0x11a/0x460 [ 259.493201][ T9801] ? __pfx_reg_reload_regdb+0x10/0x10 [ 259.493222][ T9801] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 259.493236][ T9801] ? nl80211_pre_doit+0x19a/0xae0 [ 259.493253][ T9801] genl_family_rcv_msg_doit+0x214/0x300 [ 259.493278][ T9801] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 259.493300][ T9801] ? genl_get_cmd+0x3e7/0x760 [ 259.493326][ T9801] ? bpf_lsm_capable+0x9/0x10 [ 259.493341][ T9801] ? security_capable+0x80/0x260 [ 259.493367][ T9801] genl_rcv_msg+0x560/0x800 [ 259.493392][ T9801] ? __pfx_genl_rcv_msg+0x10/0x10 [ 259.493413][ T9801] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 259.493427][ T9801] ? __pfx_nl80211_reload_regdb+0x10/0x10 [ 259.493445][ T9801] ? __pfx_nl80211_post_doit+0x10/0x10 [ 259.493465][ T9801] netlink_rcv_skb+0x159/0x420 [ 259.493485][ T9801] ? __pfx_genl_rcv_msg+0x10/0x10 [ 259.493509][ T9801] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 259.493536][ T9801] ? netlink_deliver_tap+0x1ae/0xcc0 [ 259.493558][ T9801] genl_rcv+0x28/0x40 [ 259.493578][ T9801] netlink_unicast+0x585/0x850 [ 259.493600][ T9801] ? __pfx_netlink_unicast+0x10/0x10 [ 259.493626][ T9801] netlink_sendmsg+0x8b0/0xda0 [ 259.493649][ T9801] ? __pfx_netlink_sendmsg+0x10/0x10 [ 259.493668][ T9801] ? __import_iovec+0x1d2/0x640 [ 259.493685][ T9801] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 259.493710][ T9801] ____sys_sendmsg+0x9e1/0xb70 [ 259.493729][ T9801] ? __pfx_netlink_sendmsg+0x10/0x10 [ 259.493750][ T9801] ? __pfx_____sys_sendmsg+0x10/0x10 [ 259.493769][ T9801] ? preempt_schedule_thunk+0x16/0x30 [ 259.493795][ T9801] ? try_to_wake_up+0x5f6/0x1900 [ 259.493817][ T9801] ___sys_sendmsg+0x190/0x1e0 [ 259.493840][ T9801] ? __pfx____sys_sendmsg+0x10/0x10 [ 259.493860][ T9801] ? futex_private_hash_put+0x107/0x1c0 [ 259.493897][ T9801] __sys_sendmsg+0x170/0x220 [ 259.493913][ T9801] ? __pfx___sys_sendmsg+0x10/0x10 [ 259.493929][ T9801] ? __x64_sys_futex+0x34f/0x4d0 [ 259.493952][ T9801] ? rcu_is_watching+0x12/0xc0 [ 259.493972][ T9801] do_syscall_64+0x10b/0xf80 [ 259.493992][ T9801] ? clear_bhb_loop+0x40/0x90 [ 259.494010][ T9801] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.494026][ T9801] RIP: 0033:0x7efdc559ce59 [ 259.494040][ T9801] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 259.494054][ T9801] RSP: 002b:00007efdc647f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 259.494072][ T9801] RAX: ffffffffffffffda RBX: 00007efdc5815fa0 RCX: 00007efdc559ce59 [ 259.494082][ T9801] RDX: 0000000000008000 RSI: 0000200000000200 RDI: 0000000000000006 [ 259.494091][ T9801] RBP: 00007efdc5632d6f R08: 0000000000000000 R09: 0000000000000000 [ 259.494100][ T9801] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 259.494115][ T9801] R13: 00007efdc5816038 R14: 00007efdc5815fa0 R15: 00007ffe92d3a508 [ 259.494135][ T9801] [ 259.967643][ T9798] CPU: 0 UID: 0 PID: 9798 Comm: syz.3.814 Tainted: G L syzkaller #0 PREEMPT(full) [ 259.967670][ T9798] Tainted: [L]=SOFTLOCKUP [ 259.967675][ T9798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 259.967684][ T9798] Call Trace: [ 259.967690][ T9798] [ 259.967696][ T9798] dump_stack_lvl+0x100/0x190 [ 259.967718][ T9798] should_fail_ex.cold+0x5/0xa [ 259.967739][ T9798] ? __list_lru_init+0xd9/0x4b0 [ 259.967762][ T9798] should_failslab+0xc2/0x120 [ 259.967781][ T9798] __kmalloc_noprof+0xe0/0x850 [ 259.967794][ T9798] ? lockdep_init_map_type+0x5c/0x250 [ 259.967813][ T9798] __list_lru_init+0xd9/0x4b0 [ 259.967836][ T9798] alloc_super+0x926/0xd20 [ 259.967853][ T9798] ? __pfx_test_keyed_super+0x10/0x10 [ 259.967876][ T9798] sget_fc+0x117/0xc70 [ 259.967891][ T9798] ? __pfx_set_anon_super_fc+0x10/0x10 [ 259.967906][ T9798] ? __pfx_rpc_fill_super+0x10/0x10 [ 259.967927][ T9798] get_tree_keyed+0x59/0x1d0 [ 259.967943][ T9798] vfs_get_tree+0x92/0x320 [ 259.967958][ T9798] vfs_cmd_create+0xd7/0x2a0 [ 259.967981][ T9798] __do_sys_fsconfig+0x55a/0xcb0 [ 259.968005][ T9798] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 259.968028][ T9798] ? xfd_validate_state+0x129/0x190 [ 259.968067][ T9798] ? rcu_is_watching+0x12/0xc0 [ 259.968089][ T9798] do_syscall_64+0x10b/0xf80 [ 259.968117][ T9798] ? clear_bhb_loop+0x40/0x90 [ 259.968136][ T9798] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.968152][ T9798] RIP: 0033:0x7fa555b9ce59 [ 259.968166][ T9798] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 259.968181][ T9798] RSP: 002b:00007fa553db4028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 259.968196][ T9798] RAX: ffffffffffffffda RBX: 00007fa555e16180 RCX: 00007fa555b9ce59 [ 259.968205][ T9798] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000005 [ 259.968214][ T9798] RBP: 00007fa555c32d6f R08: 0000000000000000 R09: 0000000000000000 [ 259.968222][ T9798] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 259.968231][ T9798] R13: 00007fa555e16218 R14: 00007fa555e16180 R15: 00007ffe37580588 [ 259.968252][ T9798] [ 260.678837][ T9813] futex_atomic_op_inuser: 56 callbacks suppressed [ 260.678855][ T9813] futex_wake_op: syz.2.817 tries to shift op by -2048; fix this program [ 260.701161][ T9813] 0x000000000001-0x000000020000 : "" [ 260.731974][ T9813] ftl_cs: FTL header corrupt! [ 261.418365][ T9822] openvswitch: netlink: IP tunnel dst address not specified [ 261.493884][ T9822] netlink: 342 bytes leftover after parsing attributes in process `syz.3.821'. [ 261.660849][ T9822] nvme_fabrics: missing parameter 'transport=%s' [ 261.730054][ T9822] nvme_fabrics: missing parameter 'nqn=%s' [ 262.065449][ T9841] openvswitch: netlink: IP tunnel dst address not specified [ 262.147400][ T9843] netlink: 342 bytes leftover after parsing attributes in process `syz.3.824'. [ 262.364083][ T9841] nvme_fabrics: missing parameter 'transport=%s' [ 262.423402][ T9841] nvme_fabrics: missing parameter 'nqn=%s' [ 262.561954][ T9848] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 263.021128][ T9862] openvswitch: netlink: IP tunnel dst address not specified [ 263.105301][ T9862] netlink: 342 bytes leftover after parsing attributes in process `syz.1.829'. [ 263.261336][ T9862] nvme_fabrics: missing parameter 'transport=%s' [ 263.312108][ T9862] nvme_fabrics: missing parameter 'nqn=%s' [ 263.857156][ T9871] FAULT_INJECTION: forcing a failure. [ 263.857156][ T9871] name failslab, interval 1, probability 0, space 0, times 0 [ 263.976882][ T9871] CPU: 0 UID: 0 PID: 9871 Comm: syz.1.830 Tainted: G L syzkaller #0 PREEMPT(full) [ 263.976908][ T9871] Tainted: [L]=SOFTLOCKUP [ 263.976914][ T9871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 263.976923][ T9871] Call Trace: [ 263.976929][ T9871] [ 263.976934][ T9871] dump_stack_lvl+0x100/0x190 [ 263.976957][ T9871] should_fail_ex.cold+0x5/0xa [ 263.976977][ T9871] should_failslab+0xc2/0x120 [ 263.976995][ T9871] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 263.977011][ T9871] ? vidtv_psi_short_event_desc_init+0x312/0x5f0 [ 263.977036][ T9871] kstrdup+0x51/0xe0 [ 263.977053][ T9871] vidtv_psi_short_event_desc_init+0x312/0x5f0 [ 263.977078][ T9871] vidtv_psi_desc_clone+0x33f/0x5d0 [ 263.977099][ T9871] vidtv_channel_si_init+0x76c/0x18f0 [ 263.977128][ T9871] vidtv_mux_init+0x526/0xbf0 [ 263.977144][ T9871] vidtv_start_feed+0x34e/0x500 [ 263.977163][ T9871] ? __pfx_vidtv_start_feed+0x10/0x10 [ 263.977181][ T9871] ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10 [ 263.977203][ T9871] ? mark_held_locks+0x40/0x70 [ 263.977221][ T9871] ? __pfx_vidtv_start_feed+0x10/0x10 [ 263.977238][ T9871] dmx_ts_feed_start_filtering+0xf6/0x220 [ 263.977261][ T9871] dvb_dmxdev_start_feed+0x273/0x3f0 [ 263.977280][ T9871] dvb_dmxdev_filter_start+0x1b6/0xdd0 [ 263.977300][ T9871] ? dvb_dmxdev_add_pid+0x2a1/0x380 [ 263.977319][ T9871] dvb_demux_do_ioctl+0xe64/0x1200 [ 263.977343][ T9871] dvb_usercopy+0x167/0x340 [ 263.977357][ T9871] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 263.977375][ T9871] ? __pfx_dvb_usercopy+0x10/0x10 [ 263.977398][ T9871] ? __fget_files+0x21f/0x3d0 [ 263.977419][ T9871] dvb_demux_ioctl+0x29/0x40 [ 263.977433][ T9871] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 263.977449][ T9871] __x64_sys_ioctl+0x18e/0x210 [ 263.977466][ T9871] do_syscall_64+0x10b/0xf80 [ 263.977487][ T9871] ? clear_bhb_loop+0x40/0x90 [ 263.977506][ T9871] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.977521][ T9871] RIP: 0033:0x7efdc559ce59 [ 263.977535][ T9871] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 263.977549][ T9871] RSP: 002b:00007efdc647f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 263.977564][ T9871] RAX: ffffffffffffffda RBX: 00007efdc5815fa0 RCX: 00007efdc559ce59 [ 263.977574][ T9871] RDX: 0000000000000000 RSI: 0000000040146f2c RDI: 0000000000000007 [ 263.977582][ T9871] RBP: 00007efdc5632d6f R08: 0000000000000000 R09: 0000000000000000 [ 263.977591][ T9871] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 263.977599][ T9871] R13: 00007efdc5816038 R14: 00007efdc5815fa0 R15: 00007ffe92d3a508 [ 263.977619][ T9871] [ 264.621988][ T9883] Invalid input. Must be >= 2304 [ 264.678903][ T9885] netlink: 334 bytes leftover after parsing attributes in process `syz.1.840'. [ 265.506351][ T9893] device-mapper: ioctl: Unable to rename non-existent device, to uuid [ 265.856364][ T9889] input: f as /devices/virtual/input/input14 [ 266.066591][ T9898] openvswitch: netlink: IP tunnel dst address not specified [ 266.137907][ T9898] netlink: 342 bytes leftover after parsing attributes in process `syz.2.836'. [ 266.326276][ T9898] nvme_fabrics: missing parameter 'transport=%s' [ 266.393013][ T9891] netlink: 8 bytes leftover after parsing attributes in process `syz.3.834'. [ 266.405042][ T9898] nvme_fabrics: missing parameter 'nqn=%s' [ 266.967829][ T9908] usb usb21: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 268.310554][ T9926] Invalid input. Must be >= 2304 [ 268.487234][ T9944] openvswitch: netlink: IP tunnel dst address not specified [ 268.889261][ T9953] openvswitch: netlink: IP tunnel dst address not specified [ 268.943134][ T9953] netlink: 342 bytes leftover after parsing attributes in process `syz.1.847'. [ 269.115344][ T9953] nvme_fabrics: missing parameter 'transport=%s' [ 269.160571][ T9959] openvswitch: netlink: IP tunnel dst address not specified [ 269.183867][ T9953] nvme_fabrics: missing parameter 'nqn=%s' [ 269.198045][ T9959] netlink: 342 bytes leftover after parsing attributes in process `syz.0.848'. [ 269.328027][ T9959] nvme_fabrics: missing parameter 'transport=%s' [ 269.426961][ T9959] nvme_fabrics: missing parameter 'nqn=%s' [ 269.886320][ T9978] openvswitch: netlink: IP tunnel dst address not specified [ 269.969542][ T9978] netlink: 342 bytes leftover after parsing attributes in process `syz.0.861'. Ijn9_VQ8j@:U%Ux0 R@x@qrIB@[*t ;S;x=Gcqx)Z*16GSu bmIK7 [ 270.094843][ T9978] nvme_fabrics: missing parameter 'transport=%s' [ 270.177046][ T9978] nvme_fabrics: missing parameter 'nqn=%s' [ 270.232294][ T9990] openvswitch: netlink: IP tunnel dst address not specified [ 270.278478][ T9990] netlink: 342 bytes leftover after parsing attributes in process `syz.1.854'. [ 270.416681][ T9990] nvme_fabrics: missing parameter 'transport=%s' [ 270.491803][ T9990] nvme_fabrics: missing parameter 'nqn=%s' [ 271.368274][ T9566] Bluetooth: hci1: unexpected subevent 0x01 length: 125 > 18 [ 271.555631][T10013] debugfs: '!PjE r҄y*"l-y–L̓]' already exists in 'ieee80211' [ 271.912814][T10025] FAULT_INJECTION: forcing a failure. [ 271.912814][T10025] name failslab, interval 1, probability 0, space 0, times 0 [ 272.001093][T10025] CPU: 0 UID: 0 PID: 10025 Comm: syz.1.863 Tainted: G L syzkaller #0 PREEMPT(full) [ 272.001120][T10025] Tainted: [L]=SOFTLOCKUP [ 272.001126][T10025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 272.001135][T10025] Call Trace: [ 272.001140][T10025] [ 272.001146][T10025] dump_stack_lvl+0x100/0x190 [ 272.001167][T10025] should_fail_ex.cold+0x5/0xa [ 272.001187][T10025] should_failslab+0xc2/0x120 [ 272.001205][T10025] __kvmalloc_node_noprof+0xfa/0xa00 [ 272.001220][T10025] ? io_alloc_cache_init+0x38/0x170 [ 272.001242][T10025] ? lockdep_init_map_type+0x5c/0x250 [ 272.001260][T10025] io_alloc_cache_init+0x38/0x170 [ 272.001283][T10025] io_uring_setup.cold+0x3cd/0x1c6e [ 272.001308][T10025] ? __pfx_io_uring_setup+0x10/0x10 [ 272.001327][T10025] ? do_futex+0x192/0x350 [ 272.001343][T10025] ? __pfx_do_futex+0x10/0x10 [ 272.001367][T10025] ? xfd_validate_state+0x129/0x190 [ 272.001381][T10025] ? ksys_write+0x1ac/0x250 [ 272.001403][T10025] __x64_sys_io_uring_setup+0xc2/0x170 [ 272.001421][T10025] do_syscall_64+0x10b/0xf80 [ 272.001442][T10025] ? clear_bhb_loop+0x40/0x90 [ 272.001470][T10025] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.001485][T10025] RIP: 0033:0x7efdc559ce59 [ 272.001499][T10025] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 272.001513][T10025] RSP: 002b:00007efdc645e028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 272.001528][T10025] RAX: ffffffffffffffda RBX: 00007efdc5816090 RCX: 00007efdc559ce59 [ 272.001538][T10025] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000002008 [ 272.001547][T10025] RBP: 00007efdc5632d6f R08: 0000000000000000 R09: 0000000000000000 [ 272.001555][T10025] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 272.001564][T10025] R13: 00007efdc5816128 R14: 00007efdc5816090 R15: 00007ffe92d3a508 [ 272.001583][T10025] [ 272.299493][T10031] openvswitch: netlink: IP tunnel dst address not specified [ 272.308771][T10031] netlink: 342 bytes leftover after parsing attributes in process `syz.2.866'. [ 272.370283][T10031] nvme_fabrics: missing parameter 'transport=%s' [ 272.376706][T10031] nvme_fabrics: missing parameter 'nqn=%s' [ 273.399648][ T8371] Bluetooth: hci1: command 0x0c1a tx timeout [ 274.142584][T10068] vivid-008: ================= START STATUS ================= [ 274.220238][T10068] vivid-008: ================== END STATUS ================== [ 274.288585][T10076] FAULT_INJECTION: forcing a failure. [ 274.288585][T10076] name failslab, interval 1, probability 0, space 0, times 0 [ 274.345698][T10076] CPU: 0 UID: 0 PID: 10076 Comm: syz.2.875 Tainted: G L syzkaller #0 PREEMPT(full) [ 274.345726][T10076] Tainted: [L]=SOFTLOCKUP [ 274.345731][T10076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 274.345740][T10076] Call Trace: [ 274.345746][T10076] [ 274.345752][T10076] dump_stack_lvl+0x100/0x190 [ 274.345774][T10076] should_fail_ex.cold+0x5/0xa [ 274.345794][T10076] should_failslab+0xc2/0x120 [ 274.345813][T10076] __kvmalloc_node_noprof+0xfa/0xa00 [ 274.345828][T10076] ? io_alloc_cache_init+0x38/0x170 [ 274.345850][T10076] ? lockdep_init_map_type+0x5c/0x250 [ 274.345869][T10076] io_alloc_cache_init+0x38/0x170 [ 274.345892][T10076] io_uring_setup.cold+0x3cd/0x1c6e [ 274.345918][T10076] ? __pfx_io_uring_setup+0x10/0x10 [ 274.345944][T10076] ? do_futex+0x192/0x350 [ 274.345961][T10076] ? __pfx_do_futex+0x10/0x10 [ 274.345986][T10076] ? xfd_validate_state+0x129/0x190 [ 274.346002][T10076] ? ksys_write+0x1ac/0x250 [ 274.346027][T10076] __x64_sys_io_uring_setup+0xc2/0x170 [ 274.346045][T10076] do_syscall_64+0x10b/0xf80 [ 274.346066][T10076] ? clear_bhb_loop+0x40/0x90 [ 274.346083][T10076] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.346098][T10076] RIP: 0033:0x7f2b7059ce59 [ 274.346112][T10076] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 274.346126][T10076] RSP: 002b:00007f2b713f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 274.346141][T10076] RAX: ffffffffffffffda RBX: 00007f2b70816090 RCX: 00007f2b7059ce59 [ 274.346150][T10076] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000002008 [ 274.346159][T10076] RBP: 00007f2b70632d6f R08: 0000000000000000 R09: 0000000000000000 [ 274.346168][T10076] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 274.346177][T10076] R13: 00007f2b70816128 R14: 00007f2b70816090 R15: 00007ffe08ca5b58 [ 274.346196][T10076] [ 274.984850][T10087] openvswitch: netlink: IP tunnel dst address not specified [ 275.036886][T10087] netlink: 342 bytes leftover after parsing attributes in process `syz.1.877'. [ 275.175856][T10087] nvme_fabrics: missing parameter 'transport=%s' [ 275.223615][T10087] nvme_fabrics: missing parameter 'nqn=%s' [ 275.410307][T10096] netlink: 28 bytes leftover after parsing attributes in process `syz.1.880'. [ 275.424289][T10071] Process accounting paused [ 275.449205][T10096] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 275.480027][ T9566] Bluetooth: hci1: command 0x0c1a tx timeout [ 275.552514][T10096] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 275.564199][ T8371] Bluetooth: hci3: unexpected subevent 0x01 length: 125 > 18 [ 277.641799][ T9566] Bluetooth: hci3: command 0x0c1a tx timeout [ 278.339582][T10137] Invalid input. Must be >= 2304 [ 278.513752][T10146] openvswitch: netlink: IP tunnel dst address not specified [ 278.544751][T10146] netlink: 342 bytes leftover after parsing attributes in process `syz.3.891'. [ 278.720825][T10146] nvme_fabrics: missing parameter 'transport=%s' [ 278.784321][T10152] netlink: 28 bytes leftover after parsing attributes in process `syz.2.893'. [ 278.807460][T10146] nvme_fabrics: missing parameter 'nqn=%s' [ 278.881328][T10152] hsr_slave_0 (unregistering): left promiscuous mode [ 278.981964][T10162] random: crng reseeded on system resumption [ 279.611891][T10180] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0 [ 279.723256][ T8371] Bluetooth: hci3: command 0x0c1a tx timeout [ 280.602922][T10203] openvswitch: netlink: IP tunnel dst address not specified [ 280.642234][T10203] netlink: 342 bytes leftover after parsing attributes in process `syz.3.905'. [ 280.815416][T10203] nvme_fabrics: missing parameter 'transport=%s' [ 280.889100][T10203] nvme_fabrics: missing parameter 'nqn=%s' [ 281.122856][T10207] Invalid input. Must be >= 2304 [ 281.497869][T10219] openvswitch: netlink: IP tunnel dst address not specified [ 281.537402][T10216] Process accounting paused [ 281.552105][T10219] netlink: 342 bytes leftover after parsing attributes in process `syz.1.915'. [ 281.745915][T10221] nvme_fabrics: missing parameter 'transport=%s' [ 281.807135][T10221] nvme_fabrics: missing parameter 'nqn=%s' [ 283.378281][T10246] random: crng reseeded on system resumption [ 283.399061][T10247] FAULT_INJECTION: forcing a failure. [ 283.399061][T10247] name failslab, interval 1, probability 0, space 0, times 0 [ 283.472348][T10247] CPU: 0 UID: 0 PID: 10247 Comm: syz.2.913 Tainted: G L syzkaller #0 PREEMPT(full) [ 283.472374][T10247] Tainted: [L]=SOFTLOCKUP [ 283.472380][T10247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 283.472389][T10247] Call Trace: [ 283.472395][T10247] [ 283.472401][T10247] dump_stack_lvl+0x100/0x190 [ 283.472422][T10247] should_fail_ex.cold+0x5/0xa [ 283.472442][T10247] should_failslab+0xc2/0x120 [ 283.472463][T10247] __kvmalloc_node_noprof+0xfa/0xa00 [ 283.472479][T10247] ? io_alloc_cache_init+0x38/0x170 [ 283.472501][T10247] ? lockdep_init_map_type+0x5c/0x250 [ 283.472521][T10247] io_alloc_cache_init+0x38/0x170 [ 283.472543][T10247] io_uring_setup.cold+0x3cd/0x1c6e [ 283.472568][T10247] ? __pfx_io_uring_setup+0x10/0x10 [ 283.472587][T10247] ? do_futex+0x192/0x350 [ 283.472603][T10247] ? __pfx_do_futex+0x10/0x10 [ 283.472627][T10247] ? xfd_validate_state+0x129/0x190 [ 283.472642][T10247] ? ksys_write+0x1ac/0x250 [ 283.472663][T10247] __x64_sys_io_uring_setup+0xc2/0x170 [ 283.472681][T10247] do_syscall_64+0x10b/0xf80 [ 283.472702][T10247] ? clear_bhb_loop+0x40/0x90 [ 283.472720][T10247] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.472735][T10247] RIP: 0033:0x7f2b7059ce59 [ 283.472749][T10247] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 283.472764][T10247] RSP: 002b:00007f2b713f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 283.472778][T10247] RAX: ffffffffffffffda RBX: 00007f2b70816090 RCX: 00007f2b7059ce59 [ 283.472788][T10247] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000002008 [ 283.472797][T10247] RBP: 00007f2b70632d6f R08: 0000000000000000 R09: 0000000000000000 [ 283.472806][T10247] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 283.472814][T10247] R13: 00007f2b70816128 R14: 00007f2b70816090 R15: 00007ffe08ca5b58 [ 283.472832][T10247] [ 283.874897][T10249] Invalid input. Must be >= 2304 [ 284.245460][T10265] openvswitch: netlink: IP tunnel dst address not specified [ 284.275973][T10265] netlink: 342 bytes leftover after parsing attributes in process `syz.3.919'. [ 284.412570][T10265] nvme_fabrics: missing parameter 'transport=%s' [ 284.504173][T10265] nvme_fabrics: missing parameter 'nqn=%s' [ 287.181501][T10275] Process accounting paused [ 287.561923][T10313] openvswitch: netlink: IP tunnel dst address not specified [ 287.642612][T10313] netlink: 342 bytes leftover after parsing attributes in process `syz.3.930'. [ 287.777682][T10304] netlink: 8 bytes leftover after parsing attributes in process `syz.0.927'. [ 287.804857][T10313] nvme_fabrics: missing parameter 'transport=%s' [ 287.877822][T10313] nvme_fabrics: missing parameter 'nqn=%s' [ 288.278260][T10324] input: f as /devices/virtual/input/input15 [ 288.356954][T10329] netlink: 8 bytes leftover after parsing attributes in process `syz.1.940'. [ 288.879191][T10338] netlink: 4 bytes leftover after parsing attributes in process `syz.3.933'. [ 288.958738][T10338] [ 290.217419][T10372] openvswitch: netlink: IP tunnel dst address not specified [ 290.267900][T10372] netlink: 342 bytes leftover after parsing attributes in process `syz.1.941'. [ 290.482993][T10372] nvme_fabrics: missing parameter 'transport=%s' [ 290.568473][T10372] nvme_fabrics: missing parameter 'nqn=%s' [ 290.864134][T10385] QAT: failed to copy from user. [ 291.077793][T10388] netlink: 4 bytes leftover after parsing attributes in process `syz.1.946'. [ 291.163380][T10388] [ 293.006781][T10433] netlink: 8 bytes leftover after parsing attributes in process `syz.1.956'. [ 293.058576][T10433] futex_wake_op: syz.1.956 tries to shift op by -2048; fix this program [ 293.196805][ T9566] Bluetooth: hci0: unexpected event 0x02 length: 1021 > 260 [ 293.377644][ T30] audit: type=1800 audit(1778709203.684:15): pid=10448 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.958" name="file0" dev="tmpfs" ino=1295 res=0 errno=0 [ 293.538631][ T9566] block nbd0: Receive control failed (result -32) [ 294.217936][ T9566] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 294.244679][T10473] futex_wake_op: syz.2.966 tries to shift op by -2048; fix this program [ 294.301861][T10473] futex_wake_op: syz.2.966 tries to shift op by -2048; fix this program [ 294.429579][T10470] ACPI Error: Could not disable RealTimeClock events (20251212/evxfevnt-243) [ 294.705172][T10480] FAULT_INJECTION: forcing a failure. [ 294.705172][T10480] name failslab, interval 1, probability 0, space 0, times 0 [ 294.828594][T10480] CPU: 0 UID: 0 PID: 10480 Comm: syz.3.967 Tainted: G L syzkaller #0 PREEMPT(full) [ 294.828622][T10480] Tainted: [L]=SOFTLOCKUP [ 294.828627][T10480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 294.828636][T10480] Call Trace: [ 294.828642][T10480] [ 294.828648][T10480] dump_stack_lvl+0x100/0x190 [ 294.828670][T10480] should_fail_ex.cold+0x5/0xa [ 294.828690][T10480] should_failslab+0xc2/0x120 [ 294.828708][T10480] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 294.828731][T10480] ? alloc_inode+0x68/0x250 [ 294.828758][T10480] ? simple_start_creating+0xb0/0x110 [ 294.828776][T10480] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 294.828799][T10480] alloc_inode+0x68/0x250 [ 294.828820][T10480] new_inode+0x22/0x1c0 [ 294.828843][T10480] __debugfs_create_file+0x105/0x4f0 [ 294.828868][T10480] debugfs_create_file_full+0x41/0x60 [ 294.828892][T10480] ref_tracker_dir_debugfs+0x19e/0x2e0 [ 294.828911][T10480] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 294.828928][T10480] ? ida_alloc_range+0x70d/0x830 [ 294.828965][T10480] ? lockdep_init_map_type+0x5c/0x250 [ 294.828984][T10480] preinit_net.part.0+0x252/0x920 [ 294.829003][T10480] copy_net_ns+0x339/0x7c0 [ 294.829023][T10480] create_new_namespaces+0x3ea/0xac0 [ 294.829047][T10480] unshare_nsproxy_namespaces+0xf2/0x220 [ 294.829069][T10480] ksys_unshare+0x438/0xab0 [ 294.829091][T10480] ? __pfx_ksys_unshare+0x10/0x10 [ 294.829111][T10480] ? xfd_validate_state+0x129/0x190 [ 294.829125][T10480] ? ksys_write+0x1ac/0x250 [ 294.829147][T10480] __x64_sys_unshare+0x31/0x40 [ 294.829167][T10480] do_syscall_64+0x10b/0xf80 [ 294.829188][T10480] ? clear_bhb_loop+0x40/0x90 [ 294.829206][T10480] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.829220][T10480] RIP: 0033:0x7fa555b9ce59 [ 294.829234][T10480] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 294.829248][T10480] RSP: 002b:00007fa553dd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 294.829263][T10480] RAX: ffffffffffffffda RBX: 00007fa555e16090 RCX: 00007fa555b9ce59 [ 294.829273][T10480] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 294.829282][T10480] RBP: 00007fa555c32d6f R08: 0000000000000000 R09: 0000000000000000 [ 294.829291][T10480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 294.829300][T10480] R13: 00007fa555e16128 R14: 00007fa555e16090 R15: 00007ffe37580588 [ 294.829327][T10480] [ 294.829334][T10480] debugfs: out of free dentries, can not create file 'net_refcnt@ffff8880439f8280' [ 295.422375][T10486] netlink: 8 bytes leftover after parsing attributes in process `syz.0.968'. [ 297.063683][T10517] FAULT_INJECTION: forcing a failure. [ 297.063683][T10517] name failslab, interval 1, probability 0, space 0, times 0 [ 297.063739][T10517] CPU: 0 UID: 0 PID: 10517 Comm: syz.1.973 Tainted: G L syzkaller #0 PREEMPT(full) [ 297.063760][T10517] Tainted: [L]=SOFTLOCKUP [ 297.063766][T10517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 297.063775][T10517] Call Trace: [ 297.063780][T10517] [ 297.063786][T10517] dump_stack_lvl+0x100/0x190 [ 297.063807][T10517] should_fail_ex.cold+0x5/0xa [ 297.063827][T10517] should_failslab+0xc2/0x120 [ 297.063845][T10517] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 297.063867][T10517] ? mqueue_alloc_inode+0x25/0x50 [ 297.063887][T10517] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 297.063912][T10517] ? __pfx_mqueue_alloc_inode+0x10/0x10 [ 297.063933][T10517] mqueue_alloc_inode+0x25/0x50 [ 297.063952][T10517] alloc_inode+0x68/0x250 [ 297.063975][T10517] new_inode+0x22/0x1c0 [ 297.063998][T10517] mqueue_get_inode+0x2e/0xe00 [ 297.064018][T10517] ? sget_fc+0x801/0xc70 [ 297.064034][T10517] ? __pfx_mqueue_fill_super+0x10/0x10 [ 297.064054][T10517] mqueue_fill_super+0x14d/0x260 [ 297.064074][T10517] get_tree_nodev+0xdd/0x190 [ 297.064091][T10517] mqueue_get_tree+0xf1/0x130 [ 297.064111][T10517] vfs_get_tree+0x92/0x320 [ 297.064125][T10517] fc_mount_longterm+0x1a/0x270 [ 297.064140][T10517] mq_init_ns+0x482/0x820 [ 297.064155][T10517] copy_ipcs+0x3dd/0x7e0 [ 297.064170][T10517] create_new_namespaces+0x20a/0xac0 [ 297.064190][T10517] ? security_capable+0x80/0x260 [ 297.064222][T10517] unshare_nsproxy_namespaces+0xf2/0x220 [ 297.064243][T10517] ksys_unshare+0x438/0xab0 [ 297.064267][T10517] ? __pfx_ksys_unshare+0x10/0x10 [ 297.064287][T10517] ? xfd_validate_state+0x129/0x190 [ 297.064309][T10517] __x64_sys_unshare+0x31/0x40 [ 297.064330][T10517] do_syscall_64+0x10b/0xf80 [ 297.064350][T10517] ? clear_bhb_loop+0x40/0x90 [ 297.064368][T10517] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.064383][T10517] RIP: 0033:0x7efdc559ce59 [ 297.064396][T10517] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 297.064410][T10517] RSP: 002b:00007efdc63da028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 297.064425][T10517] RAX: ffffffffffffffda RBX: 00007efdc5816450 RCX: 00007efdc559ce59 [ 297.064435][T10517] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006c000000 [ 297.064444][T10517] RBP: 00007efdc5632d6f R08: 0000000000000000 R09: 0000000000000000 [ 297.064453][T10517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 297.064462][T10517] R13: 00007efdc58164e8 R14: 00007efdc5816450 R15: 00007ffe92d3a508 [ 297.064482][T10517] [ 298.474604][T10532] netdevsim netdevsim2 netdevsim1: entered allmulticast mode [ 300.185803][ T9566] block nbd1: Receive control failed (result -32) [ 300.498930][T10578] netlink: 12 bytes leftover after parsing attributes in process `syz.0.985'. [ 300.539990][T10578] nbd: must specify a size in bytes for the device [ 301.132747][T10591] openvswitch: netlink: IP tunnel dst address not specified [ 301.176605][T10591] netlink: 342 bytes leftover after parsing attributes in process `syz.0.990'. [ 301.364485][T10591] nvme_fabrics: missing parameter 'transport=%s' [ 301.424160][T10591] nvme_fabrics: missing parameter 'nqn=%s' [ 302.039547][ T8371] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 302.820109][T10633] FAULT_INJECTION: forcing a failure. [ 302.820109][T10633] name failslab, interval 1, probability 0, space 0, times 0 [ 302.820146][T10633] CPU: 0 UID: 0 PID: 10633 Comm: syz.2.998 Tainted: G L syzkaller #0 PREEMPT(full) [ 302.820168][T10633] Tainted: [L]=SOFTLOCKUP [ 302.820173][T10633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 302.820183][T10633] Call Trace: [ 302.820188][T10633] [ 302.820194][T10633] dump_stack_lvl+0x100/0x190 [ 302.820215][T10633] should_fail_ex.cold+0x5/0xa [ 302.820235][T10633] should_failslab+0xc2/0x120 [ 302.820252][T10633] __kvmalloc_node_noprof+0xfa/0xa00 [ 302.820267][T10633] ? io_alloc_cache_init+0x38/0x170 [ 302.820289][T10633] ? lockdep_init_map_type+0x5c/0x250 [ 302.820307][T10633] io_alloc_cache_init+0x38/0x170 [ 302.820329][T10633] io_uring_setup.cold+0x3cd/0x1c6e [ 302.820354][T10633] ? __pfx_io_uring_setup+0x10/0x10 [ 302.820372][T10633] ? do_futex+0x192/0x350 [ 302.820388][T10633] ? __pfx_do_futex+0x10/0x10 [ 302.820411][T10633] ? xfd_validate_state+0x129/0x190 [ 302.820426][T10633] ? ksys_write+0x1ac/0x250 [ 302.820447][T10633] __x64_sys_io_uring_setup+0xc2/0x170 [ 302.820465][T10633] do_syscall_64+0x10b/0xf80 [ 302.820485][T10633] ? clear_bhb_loop+0x40/0x90 [ 302.820502][T10633] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.820518][T10633] RIP: 0033:0x7f2b7059ce59 [ 302.820532][T10633] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 302.820546][T10633] RSP: 002b:00007f2b713f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 302.820561][T10633] RAX: ffffffffffffffda RBX: 00007f2b70816090 RCX: 00007f2b7059ce59 [ 302.820570][T10633] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000002008 [ 302.820579][T10633] RBP: 00007f2b70632d6f R08: 0000000000000000 R09: 0000000000000000 [ 302.820588][T10633] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 302.820596][T10633] R13: 00007f2b70816128 R14: 00007f2b70816090 R15: 00007ffe08ca5b58 [ 302.820615][T10633] [ 303.279038][T10640] random: crng reseeded on system resumption [ 304.324992][ T30] audit: type=1800 audit(1778709214.634:16): pid=10648 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1002" name="lu_gp_id" dev="configfs" ino=35974 res=0 errno=0 [ 304.346364][T10648] kstrtoul() returned -22 for lu_gp_id [ 305.843397][T10683] netlink: 330 bytes leftover after parsing attributes in process `syz.1.1010'. [ 305.947539][T10677] Process accounting resumed [ 306.118055][ T30] audit: type=1804 audit(1778709216.424:17): pid=10687 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.1011" name="/newroot/sys/kernel/tracing/set_event_notrace_pid" dev="tracefs" ino=1070 res=1 errno=0 [ 306.390903][T10693] FAULT_INJECTION: forcing a failure. [ 306.390903][T10693] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 306.464054][T10693] CPU: 0 UID: 0 PID: 10693 Comm: syz.0.1013 Tainted: G L syzkaller #0 PREEMPT(full) [ 306.464083][T10693] Tainted: [L]=SOFTLOCKUP [ 306.464088][T10693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 306.464097][T10693] Call Trace: [ 306.464103][T10693] [ 306.464109][T10693] dump_stack_lvl+0x100/0x190 [ 306.464131][T10693] should_fail_ex.cold+0x5/0xa [ 306.464147][T10693] ? prepare_alloc_pages+0x16d/0x5f0 [ 306.464167][T10693] should_fail_alloc_page+0xeb/0x140 [ 306.464186][T10693] prepare_alloc_pages+0x1f0/0x5f0 [ 306.464205][T10693] ? __lock_acquire+0x4a5/0x2630 [ 306.464221][T10693] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 306.464252][T10693] ? find_held_lock+0x2b/0x80 [ 306.464270][T10693] ? is_bpf_text_address+0x8a/0x1a0 [ 306.464290][T10693] ? is_bpf_text_address+0x8a/0x1a0 [ 306.464309][T10693] ? bpf_ksym_find+0x124/0x1c0 [ 306.464325][T10693] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 306.464347][T10693] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 306.464368][T10693] ? is_bpf_text_address+0x94/0x1a0 [ 306.464388][T10693] ? kernel_text_address+0x8d/0x100 [ 306.464423][T10693] ? __kernel_text_address+0xd/0x30 [ 306.464438][T10693] ? unwind_get_return_address+0x59/0xa0 [ 306.464466][T10693] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 306.464490][T10693] ? policy_nodemask+0xed/0x4f0 [ 306.464508][T10693] alloc_pages_mpol+0x1fb/0x540 [ 306.464526][T10693] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 306.464542][T10693] ? kasan_save_stack+0x30/0x50 [ 306.464556][T10693] ? __kasan_kmalloc+0xaa/0xb0 [ 306.464568][T10693] ? __get_vm_area_node+0x101/0x330 [ 306.464585][T10693] ? __vmalloc_node_range_noprof+0x228/0x1630 [ 306.464608][T10693] alloc_pages_noprof+0x1a/0x160 [ 306.464627][T10693] get_free_pages_noprof+0x10/0xb0 [ 306.464644][T10693] __kasan_populate_vmalloc+0xa0/0x210 [ 306.464671][T10693] alloc_vmap_area+0x95d/0x2b70 [ 306.464696][T10693] ? __pfx_alloc_vmap_area+0x10/0x10 [ 306.464718][T10693] __get_vm_area_node+0x1ca/0x330 [ 306.464739][T10693] __vmalloc_node_range_noprof+0x228/0x1630 [ 306.464759][T10693] ? n_tty_open+0x1a/0x170 [ 306.464775][T10693] ? do_raw_spin_lock+0x128/0x260 [ 306.464792][T10693] ? look_up_lock_class+0x55/0x120 [ 306.464816][T10693] ? n_tty_open+0x1a/0x170 [ 306.464838][T10693] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 306.464859][T10693] ? __ldsem_down_write_nested+0xfd/0x830 [ 306.464874][T10693] ? __ldsem_down_write_nested+0x10e/0x830 [ 306.464893][T10693] ? __pfx___ldsem_down_write_nested+0x10/0x10 [ 306.464912][T10693] ? n_tty_open+0x1a/0x170 [ 306.464926][T10693] __vmalloc_node_noprof+0xad/0xf0 [ 306.464945][T10693] ? n_tty_open+0x1a/0x170 [ 306.464961][T10693] ? __pfx_n_tty_open+0x10/0x10 [ 306.464975][T10693] n_tty_open+0x1a/0x170 [ 306.464991][T10693] tty_ldisc_open+0xa2/0x120 [ 306.465010][T10693] tty_ldisc_setup+0x40/0xf0 [ 306.465031][T10693] tty_init_dev.part.0+0x1b5/0x470 [ 306.465047][T10693] tty_open+0xa63/0xfa0 [ 306.465063][T10693] ? __pfx_tty_open+0x10/0x10 [ 306.465076][T10693] ? chrdev_open+0x10b/0x6a0 [ 306.465093][T10693] ? chrdev_open+0x10b/0x6a0 [ 306.465113][T10693] ? __pfx_tty_open+0x10/0x10 [ 306.465126][T10693] chrdev_open+0x234/0x6a0 [ 306.465144][T10693] ? __pfx_apparmor_file_open+0x10/0x10 [ 306.465166][T10693] ? __pfx_chrdev_open+0x10/0x10 [ 306.465185][T10693] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 306.465209][T10693] do_dentry_open+0x6d8/0x1660 [ 306.465227][T10693] ? __pfx_chrdev_open+0x10/0x10 [ 306.465250][T10693] vfs_open+0x82/0x3f0 [ 306.465273][T10693] path_openat+0x208c/0x31a0 [ 306.465298][T10693] ? __pfx_path_openat+0x10/0x10 [ 306.465323][T10693] do_file_open+0x20e/0x430 [ 306.465342][T10693] ? __pfx_do_file_open+0x10/0x10 [ 306.465384][T10693] ? alloc_fd+0x476/0x790 [ 306.465409][T10693] ? do_getname+0x191/0x390 [ 306.465433][T10693] do_sys_openat2+0x10d/0x1e0 [ 306.465458][T10693] ? __pfx_do_sys_openat2+0x10/0x10 [ 306.465482][T10693] ? ksys_semctl.constprop.0+0x14e/0x2e0 [ 306.465501][T10693] __x64_sys_openat+0x12d/0x210 [ 306.465523][T10693] ? __pfx___x64_sys_openat+0x10/0x10 [ 306.465548][T10693] ? rcu_is_watching+0x12/0xc0 [ 306.465568][T10693] do_syscall_64+0x10b/0xf80 [ 306.465589][T10693] ? clear_bhb_loop+0x40/0x90 [ 306.465608][T10693] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.465623][T10693] RIP: 0033:0x7fce5eb9ce59 [ 306.465637][T10693] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 306.465651][T10693] RSP: 002b:00007fce5fa72028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 306.465666][T10693] RAX: ffffffffffffffda RBX: 00007fce5ee15fa0 RCX: 00007fce5eb9ce59 [ 306.465676][T10693] RDX: 0000000000000001 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 306.465685][T10693] RBP: 00007fce5ec32d6f R08: 0000000000000000 R09: 0000000000000000 [ 306.465694][T10693] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 306.465703][T10693] R13: 00007fce5ee16038 R14: 00007fce5ee15fa0 R15: 00007fff13235998 [ 306.465723][T10693] [ 306.998811][T10693] syz.0.1013: vmalloc error: size 9112, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 307.019633][T10693] CPU: 0 UID: 0 PID: 10693 Comm: syz.0.1013 Tainted: G L syzkaller #0 PREEMPT(full) [ 307.019661][T10693] Tainted: [L]=SOFTLOCKUP [ 307.019667][T10693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 307.019676][T10693] Call Trace: [ 307.019683][T10693] [ 307.019689][T10693] dump_stack_lvl+0x100/0x190 [ 307.019712][T10693] warn_alloc.cold+0x95/0x1c1 [ 307.019729][T10693] ? __pfx_warn_alloc+0x10/0x10 [ 307.019752][T10693] ? lockdep_hardirqs_on+0x78/0x100 [ 307.019775][T10693] ? __get_vm_area_node+0x2c5/0x330 [ 307.019798][T10693] ? __get_vm_area_node+0x208/0x330 [ 307.019820][T10693] __vmalloc_node_range_noprof+0xccd/0x1630 [ 307.019841][T10693] ? do_raw_spin_lock+0x128/0x260 [ 307.019859][T10693] ? look_up_lock_class+0x55/0x120 [ 307.019882][T10693] ? n_tty_open+0x1a/0x170 [ 307.019903][T10693] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 307.019923][T10693] ? __ldsem_down_write_nested+0xfd/0x830 [ 307.019939][T10693] ? __ldsem_down_write_nested+0x10e/0x830 [ 307.019958][T10693] ? __pfx___ldsem_down_write_nested+0x10/0x10 [ 307.019976][T10693] ? n_tty_open+0x1a/0x170 [ 307.019990][T10693] __vmalloc_node_noprof+0xad/0xf0 [ 307.020009][T10693] ? n_tty_open+0x1a/0x170 [ 307.020025][T10693] ? __pfx_n_tty_open+0x10/0x10 [ 307.020039][T10693] n_tty_open+0x1a/0x170 [ 307.020055][T10693] tty_ldisc_open+0xa2/0x120 [ 307.020074][T10693] tty_ldisc_setup+0x40/0xf0 [ 307.020095][T10693] tty_init_dev.part.0+0x1b5/0x470 [ 307.020111][T10693] tty_open+0xa63/0xfa0 [ 307.020128][T10693] ? __pfx_tty_open+0x10/0x10 [ 307.020140][T10693] ? chrdev_open+0x10b/0x6a0 [ 307.020157][T10693] ? chrdev_open+0x10b/0x6a0 [ 307.020178][T10693] ? __pfx_tty_open+0x10/0x10 [ 307.020191][T10693] chrdev_open+0x234/0x6a0 [ 307.020208][T10693] ? __pfx_apparmor_file_open+0x10/0x10 [ 307.020231][T10693] ? __pfx_chrdev_open+0x10/0x10 [ 307.020250][T10693] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 307.020275][T10693] do_dentry_open+0x6d8/0x1660 [ 307.020292][T10693] ? __pfx_chrdev_open+0x10/0x10 [ 307.020314][T10693] vfs_open+0x82/0x3f0 [ 307.020338][T10693] path_openat+0x208c/0x31a0 [ 307.020362][T10693] ? __pfx_path_openat+0x10/0x10 [ 307.020394][T10693] do_file_open+0x20e/0x430 [ 307.020415][T10693] ? __pfx_do_file_open+0x10/0x10 [ 307.020449][T10693] ? alloc_fd+0x476/0x790 [ 307.020469][T10693] ? do_getname+0x191/0x390 [ 307.020492][T10693] do_sys_openat2+0x10d/0x1e0 [ 307.020515][T10693] ? __pfx_do_sys_openat2+0x10/0x10 [ 307.020538][T10693] ? ksys_semctl.constprop.0+0x14e/0x2e0 [ 307.020557][T10693] __x64_sys_openat+0x12d/0x210 [ 307.020580][T10693] ? __pfx___x64_sys_openat+0x10/0x10 [ 307.020605][T10693] ? rcu_is_watching+0x12/0xc0 [ 307.020626][T10693] do_syscall_64+0x10b/0xf80 [ 307.020646][T10693] ? clear_bhb_loop+0x40/0x90 [ 307.020667][T10693] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.020682][T10693] RIP: 0033:0x7fce5eb9ce59 [ 307.020696][T10693] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 307.020710][T10693] RSP: 002b:00007fce5fa72028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 307.020725][T10693] RAX: ffffffffffffffda RBX: 00007fce5ee15fa0 RCX: 00007fce5eb9ce59 [ 307.020735][T10693] RDX: 0000000000000001 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 307.020745][T10693] RBP: 00007fce5ec32d6f R08: 0000000000000000 R09: 0000000000000000 [ 307.020754][T10693] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 307.020763][T10693] R13: 00007fce5ee16038 R14: 00007fce5ee15fa0 R15: 00007fff13235998 [ 307.020783][T10693] [ 307.020858][T10693] Mem-Info: [ 307.381346][T10693] active_anon:3970 inactive_anon:37402 isolated_anon:0 [ 307.381346][T10693] active_file:17265 inactive_file:39840 isolated_file:0 [ 307.381346][T10693] unevictable:768 dirty:222 writeback:0 [ 307.381346][T10693] slab_reclaimable:11327 slab_unreclaimable:93275 [ 307.381346][T10693] mapped:35618 shmem:21023 pagetables:1175 [ 307.381346][T10693] sec_pagetables:0 bounce:0 [ 307.381346][T10693] kernel_misc_reclaimable:0 [ 307.381346][T10693] free:1291243 free_pcp:9206 free_cma:0 [ 307.427183][T10693] Node 0 active_anon:15880kB inactive_anon:149608kB active_file:69056kB inactive_file:159176kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:142472kB dirty:888kB writeback:0kB shmem:82556kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12064kB pagetables:4568kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 307.499367][T10693] Node 1 active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:184kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 307.563617][T10693] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 307.625391][T10693] lowmem_reserve[]: 0 2477 2478 2478 2478 [ 307.637241][T10693] Node 0 DMA32 free:1202048kB boost:0kB min:34056kB low:42568kB high:51080kB reserved_highatomic:0KB free_highatomic:0KB active_anon:15880kB inactive_anon:149712kB active_file:69056kB inactive_file:159176kB unevictable:1536kB writepending:888kB zspages:404kB present:3129332kB managed:2537332kB mlocked:0kB bounce:0kB free_pcp:36668kB local_pcp:36668kB free_cma:0kB [ 307.725051][T10693] lowmem_reserve[]: 0 0 1 1 1 [ 307.758397][T10693] Node 0 Normal free:0kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 307.864762][T10693] lowmem_reserve[]: 0 0 0 0 0 [ 307.884042][T10693] Node 1 Normal free:3947564kB boost:0kB min:55828kB low:69784kB high:83740kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:184kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 307.980233][T10693] lowmem_reserve[]: 0 0 0 0 0 [ 307.996258][T10693] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 308.029271][T10693] Node 0 DMA32: 1658*4kB (UE) 2570*8kB (UE) 1393*16kB (UME) 1387*32kB (UME) 1187*64kB (UME) 570*128kB (UME) 245*256kB (UME) 145*512kB (UME) 87*1024kB (UM) 4*2048kB (M) 173*4096kB (UM) = 1185640kB [ 308.090993][T10693] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 308.122662][T10693] Node 1 Normal: 11*4kB (UM) 8*8kB (UM) 10*16kB (UM) 9*32kB (UM) 6*64kB (UM) 1*128kB (M) 4*256kB (UM) 2*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 962*4096kB (UM) = 3947564kB [ 308.179537][T10693] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 308.195321][T10693] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 308.228515][T10693] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 308.259479][T10693] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 308.270087][T10706] Line length is too long: Should be less than 4094 [ 308.289592][T10693] 84875 total pagecache pages [ 308.304469][T10693] 45 pages in swap cache [ 308.316062][T10693] Free swap = 121364kB [ 308.329494][T10693] Total swap = 124996kB [ 308.343825][T10693] 2097051 pages RAM [ 308.361182][T10693] 0 pages HighMem/MovableOnly [ 308.371571][T10693] 430828 pages reserved [ 308.387055][T10693] 0 pages cma reserved [ 308.414866][T10693] pty pty83: ldisc open failed (-12), clearing slot 83 [ 308.788050][T10719] i2c i2c-0: new_device: Can't parse I2C address [ 309.711875][T10739] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5629] was attempted by "ci-qemu-gce-upstream-auto/syz-executor exec"[10739] [ 310.190417][T10747] uvcvideo: [Deprecated]: nodrop parameter will be eventually removed. [ 311.272566][T10771] FAULT_INJECTION: forcing a failure. [ 311.272566][T10771] name failslab, interval 1, probability 0, space 0, times 0 [ 311.337955][T10771] CPU: 0 UID: 0 PID: 10771 Comm: syz.0.1028 Tainted: G L syzkaller #0 PREEMPT(full) [ 311.337984][T10771] Tainted: [L]=SOFTLOCKUP [ 311.337989][T10771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 311.337999][T10771] Call Trace: [ 311.338004][T10771] [ 311.338010][T10771] dump_stack_lvl+0x100/0x190 [ 311.338039][T10771] should_fail_ex.cold+0x5/0xa [ 311.338059][T10771] should_failslab+0xc2/0x120 [ 311.338077][T10771] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 311.338100][T10771] ? __proc_create+0x2cb/0x8c0 [ 311.338122][T10771] __proc_create+0x2cb/0x8c0 [ 311.338141][T10771] ? __pfx___proc_create+0x10/0x10 [ 311.338162][T10771] ? _raw_write_unlock+0x28/0x50 [ 311.338182][T10771] ? proc_register+0x559/0x8a0 [ 311.338202][T10771] proc_create_reg+0x75/0x170 [ 311.338223][T10771] proc_create_net_data+0x8e/0x1c0 [ 311.338242][T10771] ? __pfx_proc_create_net_data+0x10/0x10 [ 311.338263][T10771] ? fib_default_rule_add+0x341/0x420 [ 311.338284][T10771] ? __pfx_ip6_flowlabel_proc_init+0x10/0x10 [ 311.338301][T10771] ip6_flowlabel_proc_init+0x53/0x80 [ 311.338317][T10771] ops_init+0x1e2/0x5f0 [ 311.338336][T10771] setup_net+0x118/0x3a0 [ 311.338353][T10771] ? __pfx_setup_net+0x10/0x10 [ 311.338373][T10771] ? mutex_init_lockdep+0xf1/0x120 [ 311.338392][T10771] copy_net_ns+0x46f/0x7c0 [ 311.338413][T10771] create_new_namespaces+0x3ea/0xac0 [ 311.338436][T10771] unshare_nsproxy_namespaces+0xf2/0x220 [ 311.338457][T10771] ksys_unshare+0x438/0xab0 [ 311.338480][T10771] ? __pfx_ksys_unshare+0x10/0x10 [ 311.338499][T10771] ? xfd_validate_state+0x129/0x190 [ 311.338514][T10771] ? exit_to_user_mode_loop+0xe2/0x4f0 [ 311.338535][T10771] __x64_sys_unshare+0x31/0x40 [ 311.338555][T10771] do_syscall_64+0x10b/0xf80 [ 311.338576][T10771] ? clear_bhb_loop+0x40/0x90 [ 311.338593][T10771] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.338608][T10771] RIP: 0033:0x7fce5eb9ce59 [ 311.338621][T10771] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 311.338635][T10771] RSP: 002b:00007fce5fa72028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 311.338650][T10771] RAX: ffffffffffffffda RBX: 00007fce5ee15fa0 RCX: 00007fce5eb9ce59 [ 311.338660][T10771] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 311.338669][T10771] RBP: 00007fce5ec32d6f R08: 0000000000000000 R09: 0000000000000000 [ 311.338677][T10771] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 311.338686][T10771] R13: 00007fce5ee16038 R14: 00007fce5ee15fa0 R15: 00007fff13235998 [ 311.338706][T10771] [ 311.626101][T10749] netlink: 208 bytes leftover after parsing attributes in process `syz.2.1023'. [ 311.870683][T10774] FAULT_INJECTION: forcing a failure. [ 311.870683][T10774] name failslab, interval 1, probability 0, space 0, times 0 [ 311.914492][T10774] CPU: 0 UID: 8 PID: 10774 Comm: syz.0.1028 Tainted: G L syzkaller #0 PREEMPT(full) [ 311.914521][T10774] Tainted: [L]=SOFTLOCKUP [ 311.914526][T10774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 311.914536][T10774] Call Trace: [ 311.914542][T10774] [ 311.914548][T10774] dump_stack_lvl+0x100/0x190 [ 311.914570][T10774] should_fail_ex.cold+0x5/0xa [ 311.914590][T10774] should_failslab+0xc2/0x120 [ 311.914608][T10774] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 311.914632][T10774] ? key_alloc+0x3c5/0x1310 [ 311.914647][T10774] ? mark_held_locks+0x40/0x70 [ 311.914665][T10774] key_alloc+0x3c5/0x1310 [ 311.914687][T10774] ? __pfx_key_alloc+0x10/0x10 [ 311.914703][T10774] ? __pfx_key_default_cmp+0x10/0x10 [ 311.914722][T10774] ? __pfx_keyring_search_iterator+0x10/0x10 [ 311.914743][T10774] keyring_alloc+0x44/0xc0 [ 311.914763][T10774] look_up_user_keyrings+0x508/0x790 [ 311.914781][T10774] ? __pfx_look_up_user_keyrings+0x10/0x10 [ 311.914797][T10774] ? bpf_lsm_key_permission+0x9/0x10 [ 311.914812][T10774] ? security_key_permission+0x7b/0x230 [ 311.914828][T10774] ? key_task_permission+0x2c7/0x3c0 [ 311.914845][T10774] lookup_user_key+0x456/0x1300 [ 311.914861][T10774] ? __pfx_lookup_user_key+0x10/0x10 [ 311.914877][T10774] ? __pfx_do_futex+0x10/0x10 [ 311.914897][T10774] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 311.914916][T10774] ? xfd_validate_state+0x129/0x190 [ 311.914931][T10774] ? ksys_write+0x1ac/0x250 [ 311.914950][T10774] keyctl_keyring_unlink+0x58/0x1b0 [ 311.914979][T10774] __do_sys_keyctl+0x3dd/0x5a0 [ 311.914994][T10774] do_syscall_64+0x10b/0xf80 [ 311.915016][T10774] ? clear_bhb_loop+0x40/0x90 [ 311.915034][T10774] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.915049][T10774] RIP: 0033:0x7fce5eb9ce59 [ 311.915063][T10774] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 311.915078][T10774] RSP: 002b:00007fce5fa51028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 311.915093][T10774] RAX: ffffffffffffffda RBX: 00007fce5ee16090 RCX: 00007fce5eb9ce59 [ 311.915103][T10774] RDX: fffffffffffffffd RSI: fffffffffffffffc RDI: 0000000000000009 [ 311.915113][T10774] RBP: 00007fce5ec32d6f R08: 0000000000000008 R09: 0000000000000000 [ 311.915122][T10774] R10: fffffffffffffffd R11: 0000000000000246 R12: 0000000000000000 [ 311.915131][T10774] R13: 00007fce5ee16128 R14: 00007fce5ee16090 R15: 00007fff13235998 [ 311.915151][T10774] [ 312.419827][T10786] openvswitch: netlink: IP tunnel dst address not specified [ 312.428939][T10786] netlink: 342 bytes leftover after parsing attributes in process `syz.2.1032'. [ 312.604979][T10776] Process accounting resumed [ 312.629051][T10786] nvme_fabrics: missing parameter 'transport=%s' [ 312.699971][T10786] nvme_fabrics: missing parameter 'nqn=%s' [ 312.872703][T10803] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1034'. [ 312.953655][T10803] openvswitch: netlink: IP tunnel attribute has 3 unknown bytes. [ 313.046065][T10813] FAULT_INJECTION: forcing a failure. [ 313.046065][T10813] name failslab, interval 1, probability 0, space 0, times 0 [ 313.122709][T10813] CPU: 0 UID: 0 PID: 10813 Comm: syz.0.1038 Tainted: G L syzkaller #0 PREEMPT(full) [ 313.122736][T10813] Tainted: [L]=SOFTLOCKUP [ 313.122741][T10813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 313.122750][T10813] Call Trace: [ 313.122756][T10813] [ 313.122762][T10813] dump_stack_lvl+0x100/0x190 [ 313.122784][T10813] should_fail_ex.cold+0x5/0xa [ 313.122804][T10813] should_failslab+0xc2/0x120 [ 313.122822][T10813] __kvmalloc_node_noprof+0xfa/0xa00 [ 313.122837][T10813] ? io_alloc_cache_init+0x38/0x170 [ 313.122858][T10813] ? lockdep_init_map_type+0x50/0x250 [ 313.122877][T10813] io_alloc_cache_init+0x38/0x170 [ 313.122899][T10813] io_uring_setup.cold+0x3eb/0x1c6e [ 313.122925][T10813] ? __pfx_io_uring_setup+0x10/0x10 [ 313.122943][T10813] ? do_futex+0x192/0x350 [ 313.122959][T10813] ? __pfx_do_futex+0x10/0x10 [ 313.122989][T10813] ? xfd_validate_state+0x129/0x190 [ 313.123005][T10813] ? ksys_write+0x1ac/0x250 [ 313.123028][T10813] __x64_sys_io_uring_setup+0xc2/0x170 [ 313.123048][T10813] do_syscall_64+0x10b/0xf80 [ 313.123069][T10813] ? clear_bhb_loop+0x40/0x90 [ 313.123086][T10813] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.123101][T10813] RIP: 0033:0x7fce5eb9ce59 [ 313.123115][T10813] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 313.123129][T10813] RSP: 002b:00007fce5fa51028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 313.123144][T10813] RAX: ffffffffffffffda RBX: 00007fce5ee16090 RCX: 00007fce5eb9ce59 [ 313.123153][T10813] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000002008 [ 313.123162][T10813] RBP: 00007fce5ec32d6f R08: 0000000000000000 R09: 0000000000000000 [ 313.123171][T10813] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 313.123179][T10813] R13: 00007fce5ee16128 R14: 00007fce5ee16090 R15: 00007fff13235998 [ 313.123199][T10813] [ 313.821985][T10832] netlink: 342 bytes leftover after parsing attributes in process `syz.1.1039'. [ 315.347224][T10855] random: crng reseeded on system resumption [ 315.414335][T10855] RDS: rds_bind could not find a transport for fe80::736d:2f73:7461:626c, load rds_tcp or rds_rdma? [ 315.464882][T10842] FAULT_INJECTION: forcing a failure. [ 315.464882][T10842] name failslab, interval 1, probability 0, space 0, times 0 [ 315.540989][T10842] CPU: 0 UID: 0 PID: 10842 Comm: syz.0.1043 Tainted: G L syzkaller #0 PREEMPT(full) [ 315.541016][T10842] Tainted: [L]=SOFTLOCKUP [ 315.541022][T10842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 315.541031][T10842] Call Trace: [ 315.541037][T10842] [ 315.541044][T10842] dump_stack_lvl+0x100/0x190 [ 315.541066][T10842] should_fail_ex.cold+0x5/0xa [ 315.541086][T10842] should_failslab+0xc2/0x120 [ 315.541104][T10842] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 315.541120][T10842] ? vidtv_psi_service_desc_init+0x27c/0x4c0 [ 315.541145][T10842] kstrdup+0x51/0xe0 [ 315.541162][T10842] vidtv_psi_service_desc_init+0x27c/0x4c0 [ 315.541185][T10842] vidtv_psi_desc_clone+0x496/0x5d0 [ 315.541206][T10842] vidtv_channel_si_init+0x4b7/0x18f0 [ 315.541235][T10842] vidtv_mux_init+0x526/0xbf0 [ 315.541251][T10842] vidtv_start_feed+0x34e/0x500 [ 315.541270][T10842] ? __pfx_vidtv_start_feed+0x10/0x10 [ 315.541288][T10842] ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10 [ 315.541316][T10842] dmx_section_feed_start_filtering+0x3a8/0x660 [ 315.541343][T10842] dvb_dmxdev_filter_start+0x767/0xdd0 [ 315.541366][T10842] dvb_demux_do_ioctl+0xe64/0x1200 [ 315.541389][T10842] dvb_usercopy+0x167/0x340 [ 315.541403][T10842] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 315.541422][T10842] ? __pfx_dvb_usercopy+0x10/0x10 [ 315.541444][T10842] ? __fget_files+0x21f/0x3d0 [ 315.541465][T10842] dvb_demux_ioctl+0x29/0x40 [ 315.541479][T10842] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 315.541495][T10842] __x64_sys_ioctl+0x18e/0x210 [ 315.541511][T10842] do_syscall_64+0x10b/0xf80 [ 315.541533][T10842] ? clear_bhb_loop+0x40/0x90 [ 315.541551][T10842] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.541566][T10842] RIP: 0033:0x7fce5eb9ce59 [ 315.541580][T10842] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 315.541594][T10842] RSP: 002b:00007fce5fa72028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 315.541610][T10842] RAX: ffffffffffffffda RBX: 00007fce5ee15fa0 RCX: 00007fce5eb9ce59 [ 315.541619][T10842] RDX: 0000000000000000 RSI: 00000000403c6f2b RDI: 0000000000000007 [ 315.541628][T10842] RBP: 00007fce5ec32d6f R08: 0000000000000000 R09: 0000000000000000 [ 315.541638][T10842] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 315.541647][T10842] R13: 00007fce5ee16038 R14: 00007fce5ee15fa0 R15: 00007fff13235998 [ 315.541668][T10842] [ 317.166960][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.175135][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.223293][T10841] Process accounting resumed [ 317.315304][T10867] FAULT_INJECTION: forcing a failure. [ 317.315304][T10867] name failslab, interval 1, probability 0, space 0, times 0 [ 317.383967][T10867] CPU: 0 UID: 0 PID: 10867 Comm: syz.1.1047 Tainted: G L syzkaller #0 PREEMPT(full) [ 317.383993][T10867] Tainted: [L]=SOFTLOCKUP [ 317.383998][T10867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 317.384007][T10867] Call Trace: [ 317.384012][T10867] [ 317.384018][T10867] dump_stack_lvl+0x100/0x190 [ 317.384039][T10867] should_fail_ex.cold+0x5/0xa [ 317.384058][T10867] should_failslab+0xc2/0x120 [ 317.384075][T10867] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 317.384098][T10867] ? __proc_create+0x2cb/0x8c0 [ 317.384120][T10867] __proc_create+0x2cb/0x8c0 [ 317.384139][T10867] ? __pfx___proc_create+0x10/0x10 [ 317.384164][T10867] proc_mkdir+0x81/0x170 [ 317.384182][T10867] ? __pfx_proc_mkdir+0x10/0x10 [ 317.384203][T10867] ? __pfx_hashlimit_net_init+0x10/0x10 [ 317.384231][T10867] ? __pfx_hashlimit_net_init+0x10/0x10 [ 317.384253][T10867] hashlimit_net_init+0x8a/0x1c0 [ 317.384277][T10867] ops_init+0x1e2/0x5f0 [ 317.384296][T10867] setup_net+0x118/0x3a0 [ 317.384313][T10867] ? __pfx_setup_net+0x10/0x10 [ 317.384330][T10867] ? mutex_init_lockdep+0xf1/0x120 [ 317.384349][T10867] copy_net_ns+0x46f/0x7c0 [ 317.384369][T10867] create_new_namespaces+0x3ea/0xac0 [ 317.384392][T10867] unshare_nsproxy_namespaces+0xf2/0x220 [ 317.384413][T10867] ksys_unshare+0x438/0xab0 [ 317.384435][T10867] ? __pfx_ksys_unshare+0x10/0x10 [ 317.384455][T10867] ? xfd_validate_state+0x129/0x190 [ 317.384477][T10867] __x64_sys_unshare+0x31/0x40 [ 317.384497][T10867] do_syscall_64+0x10b/0xf80 [ 317.384518][T10867] ? clear_bhb_loop+0x40/0x90 [ 317.384536][T10867] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.384551][T10867] RIP: 0033:0x7efdc559ce59 [ 317.384563][T10867] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 317.384577][T10867] RSP: 002b:00007efdc647f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 317.384592][T10867] RAX: ffffffffffffffda RBX: 00007efdc5815fa0 RCX: 00007efdc559ce59 [ 317.384602][T10867] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 317.384616][T10867] RBP: 00007efdc5632d6f R08: 0000000000000000 R09: 0000000000000000 [ 317.384625][T10867] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 317.384633][T10867] R13: 00007efdc5816038 R14: 00007efdc5815fa0 R15: 00007ffe92d3a508 [ 317.384652][T10867] [ 319.128813][T10888] FAULT_INJECTION: forcing a failure. [ 319.128813][T10888] name failslab, interval 1, probability 0, space 0, times 0 [ 319.198100][T10888] CPU: 0 UID: 0 PID: 10888 Comm: syz.3.1052 Tainted: G L syzkaller #0 PREEMPT(full) [ 319.198126][T10888] Tainted: [L]=SOFTLOCKUP [ 319.198132][T10888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 319.198141][T10888] Call Trace: [ 319.198146][T10888] [ 319.198153][T10888] dump_stack_lvl+0x100/0x190 [ 319.198175][T10888] should_fail_ex.cold+0x5/0xa [ 319.198194][T10888] should_failslab+0xc2/0x120 [ 319.198212][T10888] __kvmalloc_node_noprof+0xfa/0xa00 [ 319.198226][T10888] ? io_alloc_cache_init+0x38/0x170 [ 319.198248][T10888] ? lockdep_init_map_type+0x50/0x250 [ 319.198267][T10888] io_alloc_cache_init+0x38/0x170 [ 319.198289][T10888] io_uring_setup.cold+0x3eb/0x1c6e [ 319.198314][T10888] ? __pfx_io_uring_setup+0x10/0x10 [ 319.198332][T10888] ? do_futex+0x192/0x350 [ 319.198349][T10888] ? __pfx_do_futex+0x10/0x10 [ 319.198374][T10888] ? xfd_validate_state+0x129/0x190 [ 319.198388][T10888] ? ksys_write+0x1ac/0x250 [ 319.198418][T10888] __x64_sys_io_uring_setup+0xc2/0x170 [ 319.198436][T10888] do_syscall_64+0x10b/0xf80 [ 319.198458][T10888] ? clear_bhb_loop+0x40/0x90 [ 319.198475][T10888] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.198490][T10888] RIP: 0033:0x7fa555b9ce59 [ 319.198503][T10888] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 319.198517][T10888] RSP: 002b:00007fa553dd5028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 319.198532][T10888] RAX: ffffffffffffffda RBX: 00007fa555e16090 RCX: 00007fa555b9ce59 [ 319.198542][T10888] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000002008 [ 319.198551][T10888] RBP: 00007fa555c32d6f R08: 0000000000000000 R09: 0000000000000000 [ 319.198559][T10888] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 319.198568][T10888] R13: 00007fa555e16128 R14: 00007fa555e16090 R15: 00007ffe37580588 [ 319.198586][T10888] [ 320.093623][T10910] openvswitch: netlink: IP tunnel dst address not specified [ 320.163033][T10910] netlink: 342 bytes leftover after parsing attributes in process `syz.3.1058'. [ 320.388265][T10910] nvme_fabrics: missing parameter 'transport=%s' [ 320.463386][T10910] nvme_fabrics: missing parameter 'nqn=%s' [ 321.056133][T10934] FAULT_INJECTION: forcing a failure. [ 321.056133][T10934] name failslab, interval 1, probability 0, space 0, times 0 [ 321.176617][T10934] CPU: 0 UID: 0 PID: 10934 Comm: syz.1.1063 Tainted: G L syzkaller #0 PREEMPT(full) [ 321.176645][T10934] Tainted: [L]=SOFTLOCKUP [ 321.176651][T10934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 321.176663][T10934] Call Trace: [ 321.176668][T10934] [ 321.176675][T10934] dump_stack_lvl+0x100/0x190 [ 321.176696][T10934] should_fail_ex.cold+0x5/0xa [ 321.176716][T10934] should_failslab+0xc2/0x120 [ 321.176735][T10934] __kvmalloc_node_noprof+0xfa/0xa00 [ 321.176749][T10934] ? io_alloc_cache_init+0x38/0x170 [ 321.176771][T10934] ? lockdep_init_map_type+0x5c/0x250 [ 321.176789][T10934] io_alloc_cache_init+0x38/0x170 [ 321.176812][T10934] io_uring_setup.cold+0x3cd/0x1c6e [ 321.176838][T10934] ? __pfx_io_uring_setup+0x10/0x10 [ 321.176857][T10934] ? do_futex+0x192/0x350 [ 321.176873][T10934] ? __pfx_do_futex+0x10/0x10 [ 321.176897][T10934] ? xfd_validate_state+0x129/0x190 [ 321.176912][T10934] ? ksys_write+0x1ac/0x250 [ 321.176933][T10934] __x64_sys_io_uring_setup+0xc2/0x170 [ 321.176951][T10934] do_syscall_64+0x10b/0xf80 [ 321.176971][T10934] ? clear_bhb_loop+0x40/0x90 [ 321.176989][T10934] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.177004][T10934] RIP: 0033:0x7efdc559ce59 [ 321.177017][T10934] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 321.177031][T10934] RSP: 002b:00007efdc645e028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 321.177047][T10934] RAX: ffffffffffffffda RBX: 00007efdc5816090 RCX: 00007efdc559ce59 [ 321.177056][T10934] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000002008 [ 321.177065][T10934] RBP: 00007efdc5632d6f R08: 0000000000000000 R09: 0000000000000000 [ 321.177073][T10934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 321.177082][T10934] R13: 00007efdc5816128 R14: 00007efdc5816090 R15: 00007ffe92d3a508 [ 321.177101][T10934] [ 322.857632][T10960] netlink: 25 bytes leftover after parsing attributes in process `syz.0.1071'. [ 324.887931][T10997] openvswitch: netlink: IP tunnel dst address not specified [ 324.938559][T10997] netlink: 342 bytes leftover after parsing attributes in process `syz.0.1079'. [ 325.140994][T10999] nvme_fabrics: missing parameter 'transport=%s' [ 325.202281][T10999] nvme_fabrics: missing parameter 'nqn=%s' [ 326.166760][T11029] bond0: option lp_interval: invalid value () [ 326.245939][T11029] bond0: option lp_interval: allowed values 1 - 2147483647 [ 326.370579][T11042] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1085'. [ 326.545680][T11030] bond0: option lp_interval: invalid value () [ 326.567078][T11030] bond0: option lp_interval: allowed values 1 - 2147483647 [ 326.853042][T11047] bridge0: port 3(gretap0) entered blocking state [ 326.883293][T11047] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 326.919155][T11047] bridge0: port 3(gretap0) entered disabled state [ 326.992634][T11047] gretap0: entered allmulticast mode [ 327.025046][T11047] gretap0: entered promiscuous mode [ 327.049986][T11047] bridge0: port 3(gretap0) entered blocking state [ 327.057849][T11047] bridge0: port 3(gretap0) entered forwarding state [ 327.756341][T11070] Invalid ELF header magic: != ELF [ 328.428911][T11083] FAULT_INJECTION: forcing a failure. [ 328.428911][T11083] name failslab, interval 1, probability 0, space 0, times 0 [ 328.487823][T11083] CPU: 0 UID: 0 PID: 11083 Comm: syz.0.1094 Tainted: G L syzkaller #0 PREEMPT(full) [ 328.487850][T11083] Tainted: [L]=SOFTLOCKUP [ 328.487856][T11083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 328.487865][T11083] Call Trace: [ 328.487870][T11083] [ 328.487876][T11083] dump_stack_lvl+0x100/0x190 [ 328.487899][T11083] should_fail_ex.cold+0x5/0xa [ 328.487918][T11083] should_failslab+0xc2/0x120 [ 328.487936][T11083] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 328.487959][T11083] ? __d_alloc+0x34/0xa40 [ 328.487982][T11083] __d_alloc+0x34/0xa40 [ 328.488003][T11083] d_alloc_pseudo+0x1c/0xc0 [ 328.488017][T11083] alloc_file_pseudo_noaccount+0xcf/0x230 [ 328.488041][T11083] ? __pfx_alloc_file_pseudo_noaccount+0x10/0x10 [ 328.488065][T11083] ? iput+0x3a/0x40 [ 328.488087][T11083] bdev_file_open_by_dev+0x13a/0x210 [ 328.488106][T11083] blkdev_bszset+0x170/0x240 [ 328.488123][T11083] ? __pfx_blkdev_bszset+0x10/0x10 [ 328.488139][T11083] ? find_held_lock+0x2b/0x80 [ 328.488159][T11083] ? __fget_files+0x215/0x3d0 [ 328.488175][T11083] ? hook_file_ioctl_common+0x149/0x410 [ 328.488194][T11083] blkdev_ioctl+0x513/0x6f0 [ 328.488210][T11083] ? __pfx_blkdev_ioctl+0x10/0x10 [ 328.488229][T11083] ? __pfx_blkdev_ioctl+0x10/0x10 [ 328.488247][T11083] __x64_sys_ioctl+0x18e/0x210 [ 328.488263][T11083] do_syscall_64+0x10b/0xf80 [ 328.488284][T11083] ? clear_bhb_loop+0x40/0x90 [ 328.488302][T11083] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.488318][T11083] RIP: 0033:0x7fce5eb9ce59 [ 328.488331][T11083] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 328.488349][T11083] RSP: 002b:00007fce5fa72028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 328.488364][T11083] RAX: ffffffffffffffda RBX: 00007fce5ee15fa0 RCX: 00007fce5eb9ce59 [ 328.488373][T11083] RDX: 00002000000000c0 RSI: 0000000040081271 RDI: 0000000000000008 [ 328.488382][T11083] RBP: 00007fce5ec32d6f R08: 0000000000000000 R09: 0000000000000000 [ 328.488391][T11083] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 328.488400][T11083] R13: 00007fce5ee16038 R14: 00007fce5ee15fa0 R15: 00007fff13235998 [ 328.488419][T11083] [ 329.257925][T11103] openvswitch: netlink: IP tunnel dst address not specified [ 329.337062][T11103] netlink: 342 bytes leftover after parsing attributes in process `syz.1.1099'. [ 330.961044][T11153] openvswitch: netlink: IP tunnel dst address not specified [ 331.026162][T11153] netlink: 342 bytes leftover after parsing attributes in process `syz.3.1112'. [ 331.221941][T11153] nvme_fabrics: missing parameter 'transport=%s' [ 331.282879][T11153] nvme_fabrics: missing parameter 'nqn=%s' [ 333.572414][T11218] can: request_module (can-proto-3) failed. [ 334.330542][T11255] openvswitch: netlink: IP tunnel dst address not specified [ 334.373458][T11255] netlink: 342 bytes leftover after parsing attributes in process `syz.3.1132'. [ 334.534751][T11255] nvme_fabrics: missing parameter 'transport=%s' [ 334.612297][T11255] nvme_fabrics: missing parameter 'nqn=%s' Ijn9_VQ8j@:U%Ux0 R@x@qrIB@[*t ;S;x=Gcqx)Z*16GSu bmIK7 [ 336.552667][T11333] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1144'. [ 336.593162][T11333] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1144'. [ 336.635450][T11333] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1144'. [ 337.221493][T11322] Process accounting paused [ 339.338431][T11395] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 339.386607][T11395] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 339.409378][T11395] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 339.435337][T11395] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 339.478209][T11395] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 339.675454][T11403] sctp: [Deprecated]: syz.1.1163 (pid 11403) Use of struct sctp_assoc_value in delayed_ack socket option. [ 339.675454][T11403] Use struct sctp_sack_info instead [ 340.251246][T11411] openvswitch: netlink: IP tunnel dst address not specified [ 340.283521][T11411] netlink: 342 bytes leftover after parsing attributes in process `syz.3.1161'. [ 340.434594][T11411] nvme_fabrics: missing parameter 'transport=%s' [ 340.530304][T11411] nvme_fabrics: missing parameter 'nqn=%s' [ 340.682403][ T8371] Bluetooth: hci0: command 0x0c1a tx timeout [ 341.399713][ T8371] Bluetooth: hci2: command 0x2016 tx timeout [ 341.480165][ T9566] Bluetooth: hci3: command 0x0c1a tx timeout [ 341.486384][ T8371] Bluetooth: hci1: command 0x0c1a tx timeout [ 341.969356][T11460] openvswitch: netlink: IP tunnel dst address not specified [ 342.025099][T11460] netlink: 342 bytes leftover after parsing attributes in process `syz.2.1176'. [ 342.165565][T11460] nvme_fabrics: missing parameter 'transport=%s' [ 342.222889][T11460] nvme_fabrics: missing parameter 'nqn=%s' [ 342.341260][T11459] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1175'. [ 342.383794][T11459] netlink: 17 bytes leftover after parsing attributes in process `syz.3.1175'. [ 342.425849][T11459] FAULT_INJECTION: forcing a failure. [ 342.425849][T11459] name failslab, interval 1, probability 0, space 0, times 0 [ 342.471913][T11459] CPU: 0 UID: 0 PID: 11459 Comm: syz.3.1175 Tainted: G L syzkaller #0 PREEMPT(full) [ 342.471941][T11459] Tainted: [L]=SOFTLOCKUP [ 342.471947][T11459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 342.471956][T11459] Call Trace: [ 342.471961][T11459] [ 342.471968][T11459] dump_stack_lvl+0x100/0x190 [ 342.471989][T11459] should_fail_ex.cold+0x5/0xa [ 342.472008][T11459] should_failslab+0xc2/0x120 [ 342.472026][T11459] __kmalloc_cache_noprof+0x7a/0x6f0 [ 342.472048][T11459] ? snd_pcm_oss_change_params_locked+0x211/0x39f0 [ 342.472075][T11459] snd_pcm_oss_change_params_locked+0x211/0x39f0 [ 342.472100][T11459] ? trace_contention_end+0x65/0x170 [ 342.472119][T11459] ? snd_pcm_oss_get_active_substream+0x153/0x1d0 [ 342.472143][T11459] ? kasan_quarantine_put+0x104/0x240 [ 342.472158][T11459] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 342.472179][T11459] ? __pfx___mutex_lock+0x10/0x10 [ 342.472201][T11459] ? find_held_lock+0x2b/0x80 [ 342.472219][T11459] ? tomoyo_path_number_perm+0x28f/0x580 [ 342.472235][T11459] ? tomoyo_path_number_perm+0x28f/0x580 [ 342.472257][T11459] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 342.472271][T11459] ? futex_wake+0x1ad/0x530 [ 342.472293][T11459] snd_pcm_oss_get_active_substream+0x175/0x1d0 [ 342.472318][T11459] snd_pcm_oss_get_formats+0x7d/0x350 [ 342.472339][T11459] ? do_vfs_ioctl+0x226/0x13e0 [ 342.472354][T11459] ? __pfx_snd_pcm_oss_get_formats+0x10/0x10 [ 342.472381][T11459] snd_pcm_oss_ioctl+0x1795/0x37c0 [ 342.472403][T11459] ? find_held_lock+0x2b/0x80 [ 342.472420][T11459] ? __fget_files+0x215/0x3d0 [ 342.472436][T11459] ? hook_file_ioctl_common+0x149/0x410 [ 342.472453][T11459] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 342.472477][T11459] ? __fget_files+0x21f/0x3d0 [ 342.472496][T11459] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 342.472518][T11459] __x64_sys_ioctl+0x18e/0x210 [ 342.472535][T11459] do_syscall_64+0x10b/0xf80 [ 342.472555][T11459] ? clear_bhb_loop+0x40/0x90 [ 342.472580][T11459] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.472596][T11459] RIP: 0033:0x7fa555b9ce59 [ 342.472610][T11459] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 342.472625][T11459] RSP: 002b:00007fa553df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 342.472640][T11459] RAX: ffffffffffffffda RBX: 00007fa555e15fa0 RCX: 00007fa555b9ce59 [ 342.472650][T11459] RDX: 0000000000000000 RSI: 000000008004500b RDI: 0000000000000004 [ 342.472658][T11459] RBP: 00007fa555c32d6f R08: 0000000000000000 R09: 0000000000000000 [ 342.472667][T11459] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 342.472675][T11459] R13: 00007fa555e16038 R14: 00007fa555e15fa0 R15: 00007ffe37580588 [ 342.472695][T11459] [ 343.086131][T11459] Process accounting paused [ 343.250878][T11480] FAULT_INJECTION: forcing a failure. [ 343.250878][T11480] name failslab, interval 1, probability 0, space 0, times 0 [ 343.286923][T11482] netlink: 5152 bytes leftover after parsing attributes in process `syz.1.1181'. [ 343.309567][T11480] CPU: 0 UID: 0 PID: 11480 Comm: syz.3.1180 Tainted: G L syzkaller #0 PREEMPT(full) [ 343.309596][T11480] Tainted: [L]=SOFTLOCKUP [ 343.309601][T11480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 343.309610][T11480] Call Trace: [ 343.309615][T11480] [ 343.309622][T11480] dump_stack_lvl+0x100/0x190 [ 343.309643][T11480] should_fail_ex.cold+0x5/0xa [ 343.309663][T11480] should_failslab+0xc2/0x120 [ 343.309681][T11480] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 343.309704][T11480] ? __d_alloc+0x34/0xa40 [ 343.309729][T11480] __d_alloc+0x34/0xa40 [ 343.309752][T11480] d_alloc_pseudo+0x1c/0xc0 [ 343.309767][T11480] alloc_file_pseudo+0xcf/0x230 [ 343.309790][T11480] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 343.309811][T11480] ? alloc_fd+0x476/0x790 [ 343.309831][T11480] sock_alloc_file+0x50/0x210 [ 343.309850][T11480] __sys_socket+0x1c0/0x260 [ 343.309871][T11480] ? __pfx___sys_socket+0x10/0x10 [ 343.309891][T11480] ? ksys_write+0x1ac/0x250 [ 343.309912][T11480] __x64_sys_socket+0x72/0xb0 [ 343.309932][T11480] ? lockdep_hardirqs_on+0x78/0x100 [ 343.309953][T11480] do_syscall_64+0x10b/0xf80 [ 343.309974][T11480] ? clear_bhb_loop+0x40/0x90 [ 343.309992][T11480] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.310007][T11480] RIP: 0033:0x7fa555b9ce59 [ 343.310020][T11480] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 343.310034][T11480] RSP: 002b:00007fa553df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 343.310048][T11480] RAX: ffffffffffffffda RBX: 00007fa555e15fa0 RCX: 00007fa555b9ce59 [ 343.310058][T11480] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 000000000000002d [ 343.310067][T11480] RBP: 00007fa555c32d6f R08: 0000000000000000 R09: 0000000000000000 [ 343.310075][T11480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 343.310084][T11480] R13: 00007fa555e16038 R14: 00007fa555e15fa0 R15: 00007ffe37580588 [ 343.310103][T11480] [ 343.801268][ T8371] Bluetooth: hci3: command 0x0c1a tx timeout [ 344.630694][T11505] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 344.637084][T11505] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 344.674348][T11505] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 344.710929][T11505] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 345.808312][T11526] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1190'. [ 346.332174][T11535] openvswitch: netlink: IP tunnel dst address not specified [ 346.364560][T11535] netlink: 342 bytes leftover after parsing attributes in process `syz.1.1194'. [ 346.543993][T11539] openvswitch: netlink: IP tunnel dst address not specified [ 346.618403][T11539] netlink: 342 bytes leftover after parsing attributes in process `syz.1.1196'. [ 346.681038][ T8371] Bluetooth: hci2: command 0x2016 tx timeout [ 346.687096][T10574] Bluetooth: hci0: command 0x0c1a tx timeout [ 346.694352][ T9566] Bluetooth: hci3: command 0x0c1a tx timeout [ 346.759924][ T9566] Bluetooth: hci1: command 0x0c1a tx timeout [ 346.920175][T11549] FAULT_INJECTION: forcing a failure. [ 346.920175][T11549] name failslab, interval 1, probability 0, space 0, times 0 [ 347.003019][T11549] CPU: 0 UID: 0 PID: 11549 Comm: syz.2.1198 Tainted: G L syzkaller #0 PREEMPT(full) [ 347.003046][T11549] Tainted: [L]=SOFTLOCKUP [ 347.003051][T11549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 347.003061][T11549] Call Trace: [ 347.003066][T11549] [ 347.003071][T11549] dump_stack_lvl+0x100/0x190 [ 347.003093][T11549] should_fail_ex.cold+0x5/0xa [ 347.003113][T11549] should_failslab+0xc2/0x120 [ 347.003130][T11549] __kvmalloc_node_noprof+0xfa/0xa00 [ 347.003148][T11549] ? io_alloc_cache_init+0x38/0x170 [ 347.003171][T11549] ? lockdep_init_map_type+0x5c/0x250 [ 347.003191][T11549] io_alloc_cache_init+0x38/0x170 [ 347.003213][T11549] io_uring_setup.cold+0x3cd/0x1c6e [ 347.003247][T11549] ? __pfx_io_uring_setup+0x10/0x10 [ 347.003265][T11549] ? do_futex+0x192/0x350 [ 347.003283][T11549] ? __pfx_do_futex+0x10/0x10 [ 347.003308][T11549] ? xfd_validate_state+0x129/0x190 [ 347.003324][T11549] ? ksys_write+0x1ac/0x250 [ 347.003346][T11549] __x64_sys_io_uring_setup+0xc2/0x170 [ 347.003365][T11549] do_syscall_64+0x10b/0xf80 [ 347.003385][T11549] ? clear_bhb_loop+0x40/0x90 [ 347.003403][T11549] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.003418][T11549] RIP: 0033:0x7f2b7059ce59 [ 347.003431][T11549] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 347.003446][T11549] RSP: 002b:00007f2b713f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 347.003461][T11549] RAX: ffffffffffffffda RBX: 00007f2b70816090 RCX: 00007f2b7059ce59 [ 347.003471][T11549] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000002008 [ 347.003479][T11549] RBP: 00007f2b70632d6f R08: 0000000000000000 R09: 0000000000000000 [ 347.003488][T11549] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 347.003496][T11549] R13: 00007f2b70816128 R14: 00007f2b70816090 R15: 00007ffe08ca5b58 [ 347.003515][T11549] [ 347.655519][T11542] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1197'. [ 347.847749][T11541] Process accounting paused [ 348.271171][T11557] FAULT_INJECTION: forcing a failure. [ 348.271171][T11557] name fail_futex, interval 1, probability 0, space 0, times 0 [ 348.287537][T11567] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1203'. [ 348.315282][T11567] netlink: 13 bytes leftover after parsing attributes in process `syz.3.1203'. [ 348.338400][T11557] CPU: 0 UID: 0 PID: 11557 Comm: syz.2.1199 Tainted: G L syzkaller #0 PREEMPT(full) [ 348.338425][T11557] Tainted: [L]=SOFTLOCKUP [ 348.338431][T11557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 348.338440][T11557] Call Trace: [ 348.338445][T11557] [ 348.338451][T11557] dump_stack_lvl+0x100/0x190 [ 348.338472][T11557] should_fail_ex.cold+0x5/0xa [ 348.338491][T11557] get_futex_key+0x1d2/0x1510 [ 348.338509][T11557] ? __pfx_get_futex_key+0x10/0x10 [ 348.338525][T11557] ? __fput+0x68d/0xb50 [ 348.338544][T11557] ? stack_trace_save+0x8e/0xc0 [ 348.338567][T11557] futex_wait_setup+0x83/0x510 [ 348.338590][T11557] __futex_wait+0x19f/0x300 [ 348.338611][T11557] ? __pfx___futex_wait+0x10/0x10 [ 348.338632][T11557] ? __pfx_futex_wake_mark+0x10/0x10 [ 348.338653][T11557] ? futex_hash+0x2ad/0x370 [ 348.338668][T11557] ? futex_hash+0x141/0x370 [ 348.338685][T11557] futex_wait+0xe6/0x370 [ 348.338704][T11557] ? __pfx_futex_wait+0x10/0x10 [ 348.338732][T11557] do_futex+0x1ef/0x350 [ 348.338748][T11557] ? __pfx_do_futex+0x10/0x10 [ 348.338763][T11557] ? __pfx___might_resched+0x10/0x10 [ 348.338780][T11557] ? blkcg_maybe_throttle_current+0x5e7/0xeb0 [ 348.338798][T11557] ? _raw_spin_unlock_irq+0x23/0x50 [ 348.338821][T11557] __x64_sys_futex+0x34f/0x4d0 [ 348.338840][T11557] ? __pfx___x64_sys_futex+0x10/0x10 [ 348.338856][T11557] ? exit_to_user_mode_loop+0xe2/0x4f0 [ 348.338873][T11557] ? rcu_is_watching+0x12/0xc0 [ 348.338893][T11557] do_syscall_64+0x10b/0xf80 [ 348.338914][T11557] ? clear_bhb_loop+0x40/0x90 [ 348.338932][T11557] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.338946][T11557] RIP: 0033:0x7f2b7059ce59 [ 348.338959][T11557] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 348.338974][T11557] RSP: 002b:00007f2b713f60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 348.338988][T11557] RAX: ffffffffffffffda RBX: 00007f2b70816098 RCX: 00007f2b7059ce59 [ 348.338998][T11557] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f2b70816098 [ 348.339007][T11557] RBP: 00007f2b70816090 R08: 0000000000000000 R09: 0000000000000000 [ 348.339016][T11557] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 348.339024][T11557] R13: 00007f2b70816128 R14: 00007ffe08ca5a70 R15: 00007ffe08ca5b58 [ 348.339043][T11557] [ 348.801280][T11578] openvswitch: netlink: IP tunnel dst address not specified [ 348.841555][T11578] netlink: 342 bytes leftover after parsing attributes in process `syz.1.1205'. [ 350.139896][T11612] FAULT_INJECTION: forcing a failure. [ 350.139896][T11612] name failslab, interval 1, probability 0, space 0, times 0 [ 350.213805][T11612] CPU: 0 UID: 0 PID: 11612 Comm: syz.2.1214 Tainted: G L syzkaller #0 PREEMPT(full) [ 350.213834][T11612] Tainted: [L]=SOFTLOCKUP [ 350.213839][T11612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 350.213848][T11612] Call Trace: [ 350.213854][T11612] [ 350.213860][T11612] dump_stack_lvl+0x100/0x190 [ 350.213881][T11612] should_fail_ex.cold+0x5/0xa [ 350.213901][T11612] should_failslab+0xc2/0x120 [ 350.213919][T11612] __kvmalloc_node_noprof+0xfa/0xa00 [ 350.213934][T11612] ? io_alloc_cache_init+0x38/0x170 [ 350.213955][T11612] ? lockdep_init_map_type+0x5c/0x250 [ 350.213973][T11612] io_alloc_cache_init+0x38/0x170 [ 350.214002][T11612] io_uring_setup.cold+0x3cd/0x1c6e [ 350.214030][T11612] ? __pfx_io_uring_setup+0x10/0x10 [ 350.214049][T11612] ? do_futex+0x192/0x350 [ 350.214065][T11612] ? __pfx_do_futex+0x10/0x10 [ 350.214089][T11612] ? xfd_validate_state+0x129/0x190 [ 350.214103][T11612] ? ksys_write+0x1ac/0x250 [ 350.214125][T11612] __x64_sys_io_uring_setup+0xc2/0x170 [ 350.214143][T11612] do_syscall_64+0x10b/0xf80 [ 350.214164][T11612] ? clear_bhb_loop+0x40/0x90 [ 350.214182][T11612] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.214196][T11612] RIP: 0033:0x7f2b7059ce59 [ 350.214209][T11612] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 350.214224][T11612] RSP: 002b:00007f2b713f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 350.214239][T11612] RAX: ffffffffffffffda RBX: 00007f2b70816090 RCX: 00007f2b7059ce59 [ 350.214249][T11612] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000002008 [ 350.214257][T11612] RBP: 00007f2b70632d6f R08: 0000000000000000 R09: 0000000000000000 [ 350.214266][T11612] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 350.214275][T11612] R13: 00007f2b70816128 R14: 00007f2b70816090 R15: 00007ffe08ca5b58 [ 350.214295][T11612] [ 351.048712][T11633] openvswitch: netlink: IP tunnel dst address not specified [ 351.125637][T11633] netlink: 342 bytes leftover after parsing attributes in process `syz.0.1218'. [ 351.313717][T11635] nvme_fabrics: missing parameter 'transport=%s' [ 351.337301][T11638] can0: slcan on ptm0. [ 351.400708][T11635] nvme_fabrics: missing parameter 'nqn=%s' [ 351.702908][T11655] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 351.746204][T11655] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 351.785776][T11655] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 351.828641][T11655] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 352.266149][T11634] can0 (unregistered): slcan off ptm0. [ 353.236350][T11686] openvswitch: netlink: IP tunnel dst address not specified [ 353.305801][T11686] netlink: 342 bytes leftover after parsing attributes in process `syz.3.1228'. [ 353.543837][T11686] nvme_fabrics: missing parameter 'transport=%s' [ 353.619504][T11686] nvme_fabrics: missing parameter 'nqn=%s' [ 353.688203][T11700] openvswitch: netlink: IP tunnel dst address not specified [ 353.720294][ T9566] Bluetooth: hci0: command 0x0c1a tx timeout [ 353.755744][T11700] netlink: 342 bytes leftover after parsing attributes in process `syz.2.1231'. [ 353.803355][ T9566] Bluetooth: hci3: command 0x0c1a tx timeout [ 353.809518][T10574] Bluetooth: hci2: command 0x2016 tx timeout [ 353.880349][ T9566] Bluetooth: hci1: command 0x0c1a tx timeout [ 353.988853][T11700] nvme_fabrics: missing parameter 'transport=%s' [ 354.065406][T11700] nvme_fabrics: missing parameter 'nqn=%s' [ 358.631495][T11801] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1250'. [ 358.664096][T11801] netlink: 17 bytes leftover after parsing attributes in process `syz.1.1250'. [ 358.727626][T11811] netlink: 178 bytes leftover after parsing attributes in process `syz.3.1252'. [ 361.415363][T11846] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1261'. [ 361.475359][T11845] openvswitch: netlink: IP tunnel dst address not specified [ 361.648608][T11845] netlink: 342 bytes leftover after parsing attributes in process `syz.0.1260'. [ 361.914077][T11849] nvme_fabrics: missing parameter 'transport=%s' [ 361.994263][T11849] nvme_fabrics: missing parameter 'nqn=%s' [ 362.970000][T11870] openvswitch: netlink: IP tunnel dst address not specified [ 362.993572][ T9566] Bluetooth: hci2: unexpected event 0x1c length: 725 > 5 [ 363.035725][T11870] netlink: 342 bytes leftover after parsing attributes in process `syz.3.1267'. [ 363.077714][T11874] FAULT_INJECTION: forcing a failure. [ 363.077714][T11874] name fail_futex, interval 1, probability 0, space 0, times 0 [ 363.114572][T11874] CPU: 0 UID: 0 PID: 11874 Comm: syz.0.1268 Tainted: G L syzkaller #0 PREEMPT(full) [ 363.114597][T11874] Tainted: [L]=SOFTLOCKUP [ 363.114603][T11874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 363.114611][T11874] Call Trace: [ 363.114617][T11874] [ 363.114622][T11874] dump_stack_lvl+0x100/0x190 [ 363.114644][T11874] should_fail_ex.cold+0x5/0xa [ 363.114663][T11874] get_futex_key+0x1d2/0x1510 [ 363.114680][T11874] ? __pfx_get_futex_key+0x10/0x10 [ 363.114694][T11874] ? lock_acquire+0x1b1/0x370 [ 363.114713][T11874] futex_wake+0xea/0x530 [ 363.114733][T11874] ? __pfx_futex_wake+0x10/0x10 [ 363.114751][T11874] ? exit_mm_release+0x19/0x30 [ 363.114781][T11874] do_futex+0x32b/0x350 [ 363.114797][T11874] ? __pfx_do_futex+0x10/0x10 [ 363.114812][T11874] ? __might_fault+0xc5/0x140 [ 363.114839][T11874] mm_release+0x24a/0x2f0 [ 363.114857][T11874] do_exit+0x707/0x2a60 [ 363.114882][T11874] ? __pfx_do_exit+0x10/0x10 [ 363.114903][T11874] ? do_raw_spin_lock+0x128/0x260 [ 363.114919][T11874] ? find_held_lock+0x2b/0x80 [ 363.114937][T11874] ? get_signal+0x7e0/0x21e0 [ 363.114958][T11874] do_group_exit+0xd5/0x2a0 [ 363.114973][T11874] get_signal+0x1ec7/0x21e0 [ 363.115004][T11874] ? __pfx_get_signal+0x10/0x10 [ 363.115024][T11874] ? do_futex+0x192/0x350 [ 363.115041][T11874] arch_do_signal_or_restart+0x91/0x7a0 [ 363.115064][T11874] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 363.115092][T11874] ? rcu_is_watching+0x12/0xc0 [ 363.115112][T11874] exit_to_user_mode_loop+0x8b/0x4f0 [ 363.115126][T11874] ? rcu_is_watching+0x12/0xc0 [ 363.115145][T11874] do_syscall_64+0x6f2/0xf80 [ 363.115166][T11874] ? clear_bhb_loop+0x40/0x90 [ 363.115183][T11874] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.115198][T11874] RIP: 0033:0x7fce5eb9ce59 [ 363.115211][T11874] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 363.115225][T11874] RSP: 002b:00007fce5fa720e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 363.115240][T11874] RAX: fffffffffffffe00 RBX: 00007fce5ee15fa8 RCX: 00007fce5eb9ce59 [ 363.115249][T11874] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fce5ee15fa8 [ 363.115258][T11874] RBP: 00007fce5ee15fa0 R08: 0000000000000000 R09: 0000000000000000 [ 363.115267][T11874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 363.115275][T11874] R13: 00007fce5ee16038 R14: 00007fff132358b0 R15: 00007fff13235998 [ 363.115293][T11874] [ 363.480130][T11870] nvme_fabrics: missing parameter 'transport=%s' [ 363.486754][T11870] nvme_fabrics: missing parameter 'nqn=%s' [ 364.744778][T11888] netlink: 178 bytes leftover after parsing attributes in process `syz.1.1273'. [ 364.923107][T11896] netlink: 'syz.1.1276': attribute type 10 has an invalid length. [ 364.971622][T11896] netlink: 'syz.1.1276': attribute type 13 has an invalid length. [ 365.148231][T11901] netlink: 'syz.1.1278': attribute type 1 has an invalid length. [ 365.250257][T11903] netlink: 222 bytes leftover after parsing attributes in process `syz.1.1278'. [ 366.291857][T11912] openvswitch: netlink: IP tunnel dst address not specified [ 366.370299][T11912] netlink: 342 bytes leftover after parsing attributes in process `syz.1.1288'. [ 366.492194][T11916] nvme_fcloop: unknown parameter or missing value '7=";&L=j"Yq'R"' [ 366.585691][T11920] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1282'. [ 366.704581][T11920] veth1_macvtap: left promiscuous mode [ 366.753352][T11924] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1283'. [ 367.004430][T11928] random: crng reseeded on system resumption [ 367.119812][T11933] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1287'. [ 367.256436][T11933] mac80211_hwsim hwsim11 wlan2: entered promiscuous mode [ 367.315676][T11933] mac80211_hwsim hwsim11 wlan2: entered allmulticast mode [ 367.588499][T11934] Process accounting resumed [ 368.043142][T11957] openvswitch: netlink: IP tunnel dst address not specified [ 368.089234][T11957] netlink: 342 bytes leftover after parsing attributes in process `syz.0.1295'. [ 368.212163][T11954] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 368.232992][T11957] nvme_fabrics: missing parameter 'transport=%s' [ 368.247457][T11954] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 368.276184][T11954] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 368.301765][T11957] nvme_fabrics: missing parameter 'nqn=%s' [ 368.307678][T11954] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 368.649994][T11975] netlink: 'syz.0.1299': attribute type 5 has an invalid length. [ 368.694721][T11975] netlink: 4158 bytes leftover after parsing attributes in process `syz.0.1299'. [ 368.783965][ T994] Process accounting resumed [ 368.917814][ T994] Process accounting resumed [ 368.945203][ T994] Process accounting resumed [ 368.977126][ T994] Process accounting resumed [ 369.004289][ T994] Process accounting resumed [ 369.026082][ T994] Process accounting resumed [ 369.052632][ T994] Process accounting resumed [ 369.073861][ T994] Process accounting resumed [ 369.105923][ T9] Process accounting resumed [ 369.112933][ T5733] Process accounting resumed [ 369.118696][ T5733] Process accounting resumed [ 369.140957][ T5733] Process accounting resumed [ 369.164065][ T5733] Process accounting resumed [ 369.181382][ T5733] Process accounting resumed [ 369.205846][ T5733] Process accounting resumed [ 369.227378][ T5733] Process accounting resumed [ 369.251947][ T5733] Process accounting resumed [ 369.290564][ T5733] Process accounting resumed [ 369.360338][T11972] Process accounting resumed [ 370.279935][ T9566] Bluetooth: hci3: command 0x0c1a tx timeout [ 370.286014][T10574] Bluetooth: hci2: command 0x2016 tx timeout [ 370.292074][ T8371] Bluetooth: hci0: command 0x0c1a tx timeout [ 370.360605][T12030] Bluetooth: hci1: command 0x0c1a tx timeout [ 371.595089][T12022] kexec: Could not allocate control_code_buffer [ 371.733832][T12068] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1317'. [ 371.777857][T12069] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1317'. [ 375.838304][T12030] Bluetooth: hci3: unexpected event 0x2c length: 1022 > 17 [ 378.271028][T12161] Process accounting resumed [ 378.609054][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.617225][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.731445][T12163] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1337'. [ 380.016895][T12170] openvswitch: netlink: IP tunnel dst address not specified [ 380.069353][T12170] netlink: 342 bytes leftover after parsing attributes in process `syz.2.1339'. [ 380.240688][T12170] nvme_fabrics: missing parameter 'transport=%s' [ 380.305703][T12170] nvme_fabrics: missing parameter 'nqn=%s' [ 381.427386][T12204] random: crng reseeded on system resumption [ 382.828335][T12219] kernel read not supported for file /.e4kxExVE}l (pid: 12219 comm: syz.1.1350) [ 383.073229][ T30] audit: type=1800 audit(1778709293.384:18): pid=12219 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1350" name=2EF16534DF16956B7845D97815B0F65693B44506C57D6C dev="mqueue" ino=45756 res=0 errno=0 [ 383.146296][T12221] zswap: compressor not available [ 383.433156][T12030] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 383.440729][T12030] Bluetooth: hci1: Invalid handle: 0x3a4a > 0x0eff [ 384.761856][ T5629] Process accounting resumed [ 385.860303][T12030] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 385.873552][T12030] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 385.884025][T12030] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 385.896543][T12030] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 385.905973][T12030] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 386.124578][ T5733] Process accounting resumed [ 386.252171][T12246] Zero length message leads to an empty skb [ 386.480285][T12245] FAULT_INJECTION: forcing a failure. [ 386.480285][T12245] name failslab, interval 1, probability 0, space 0, times 0 [ 386.644740][T12245] CPU: 0 UID: 0 PID: 12245 Comm: syz.2.1356 Tainted: G L syzkaller #0 PREEMPT(full) [ 386.644767][T12245] Tainted: [L]=SOFTLOCKUP [ 386.644772][T12245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 386.644782][T12245] Call Trace: [ 386.644788][T12245] [ 386.644794][T12245] dump_stack_lvl+0x100/0x190 [ 386.644817][T12245] should_fail_ex.cold+0x5/0xa [ 386.644836][T12245] should_failslab+0xc2/0x120 [ 386.644854][T12245] __kmalloc_cache_noprof+0x7a/0x6f0 [ 386.644875][T12245] ? sctp_datamsg_from_user+0x8e/0x1360 [ 386.644903][T12245] sctp_datamsg_from_user+0x8e/0x1360 [ 386.644926][T12245] ? __sk_mem_raise_allocated+0x789/0x1580 [ 386.644948][T12245] ? sctp_primitive_ASSOCIATE+0x9c/0xd0 [ 386.644971][T12245] sctp_sendmsg_to_asoc+0xb1c/0x1c50 [ 386.644990][T12245] ? __pfx___asan_memcpy+0x10/0x10 [ 386.645012][T12245] ? sctp_assoc_set_primary+0x276/0x310 [ 386.645032][T12245] ? sctp_assoc_add_peer+0x252/0x14f0 [ 386.645054][T12245] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 386.645071][T12245] ? sctp_connect_new_asoc+0x41e/0x770 [ 386.645092][T12245] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 386.645115][T12245] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 386.645147][T12245] sctp_sendmsg+0x1185/0x22b0 [ 386.645172][T12245] ? __pfx_sctp_sendmsg+0x10/0x10 [ 386.645192][T12245] ? __pfx_futex_wake_mark+0x10/0x10 [ 386.645214][T12245] ? aa_sk_perm+0x309/0xaa0 [ 386.645233][T12245] ? __pfx_aa_sk_perm+0x10/0x10 [ 386.645247][T12245] ? __might_fault+0xc5/0x140 [ 386.645274][T12245] ? __pfx_sctp_sendmsg+0x10/0x10 [ 386.645295][T12245] inet_sendmsg+0x11c/0x140 [ 386.645311][T12245] __sys_sendto+0x446/0x4b0 [ 386.645325][T12245] ? __pfx_inet_sendmsg+0x10/0x10 [ 386.645339][T12245] ? __pfx___sys_sendto+0x10/0x10 [ 386.645360][T12245] ? fd_install+0x223/0x580 [ 386.645384][T12245] ? xfd_validate_state+0x129/0x190 [ 386.645398][T12245] ? exit_to_user_mode_loop+0xe2/0x4f0 [ 386.645417][T12245] __x64_sys_sendto+0xe0/0x1c0 [ 386.645431][T12245] ? do_syscall_64+0x90/0xf80 [ 386.645451][T12245] ? lockdep_hardirqs_on+0x78/0x100 [ 386.645471][T12245] do_syscall_64+0x10b/0xf80 [ 386.645491][T12245] ? clear_bhb_loop+0x40/0x90 [ 386.645509][T12245] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.645524][T12245] RIP: 0033:0x7f2b7059ce59 [ 386.645537][T12245] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 386.645551][T12245] RSP: 002b:00007f2b71417028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 386.645567][T12245] RAX: ffffffffffffffda RBX: 00007f2b70815fa0 RCX: 00007f2b7059ce59 [ 386.645577][T12245] RDX: 000000000002000f RSI: 0000000000000000 RDI: 0000000000000003 [ 386.645586][T12245] RBP: 00007f2b70632d6f R08: 0000200000000000 R09: 000000000000001c [ 386.645595][T12245] R10: 00000000000001c0 R11: 0000000000000246 R12: 0000000000000000 [ 386.645604][T12245] R13: 00007f2b70816038 R14: 00007f2b70815fa0 R15: 00007ffe08ca5b58 [ 386.645624][T12245] [ 386.945466][T12229] Process accounting resumed [ 387.744769][ T30] audit: type=1800 audit(1778709298.004:19): pid=12277 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1362" name="lu_gp_id" dev="configfs" ino=46105 res=0 errno=0 [ 387.963539][T12030] Bluetooth: hci4: command tx timeout [ 388.041109][T12007] ------------[ cut here ]------------ [ 388.046598][T12007] ODEBUG: free active (active state 0) object: ffff88807f225438 object type: timer_list hint: hci_devcd_timeout+0x0/0x2e0 [ 388.059737][T12007] WARNING: lib/debugobjects.c:629 at debug_print_object+0x18e/0x2a0, CPU#0: syz.3.1303/12007 [ 388.070046][T12007] Modules linked in: [ 388.073936][T12007] CPU: 0 UID: 0 PID: 12007 Comm: syz.3.1303 Tainted: G L syzkaller #0 PREEMPT(full) [ 388.084897][T12007] Tainted: [L]=SOFTLOCKUP [ 388.089204][T12007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 388.099297][T12007] RIP: 0010:debug_print_object+0x19b/0x2a0 [ 388.105274][T12007] Code: b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 4f 48 8d 3d 52 a9 e2 0b 41 56 48 8b 14 dd c0 39 1c 8c 4c 89 e6 <67> 48 0f b9 3a 58 83 05 ac 25 d8 0b 01 48 83 c4 18 5b 5d 41 5c 41 [ 388.124979][T12007] RSP: 0018:ffffc900052176f8 EFLAGS: 00010246 [ 388.131064][T12007] RAX: dffffc0000000000 RBX: 0000000000000003 RCX: 0000000000000000 [ 388.139047][T12007] RDX: ffffffff8c1c3900 RSI: ffffffff8c1c3520 RDI: ffffffff90e29360 [ 388.147067][T12007] RBP: 0000000000000001 R08: ffff88807f225438 R09: ffffffff8bb2b700 [ 388.155333][T12007] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff8c1c3520 [ 388.163656][T12007] R13: ffffffff8bb2b740 R14: ffffffff8a92bd10 R15: ffffc900052177f8 [ 388.171681][T12007] FS: 0000000000000000(0000) GS:ffff888124377000(0000) knlGS:0000000000000000 [ 388.180647][T12007] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 388.187249][T12007] CR2: 00007f2b707ed2e0 CR3: 0000000060e4e000 CR4: 00000000003526f0 [ 388.195251][T12007] Call Trace: [ 388.198523][T12007] [ 388.201575][T12007] ? __pfx_hci_devcd_timeout+0x10/0x10 [ 388.207051][T12007] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 388.212938][T12007] debug_check_no_obj_freed+0x4da/0x630 [ 388.218512][T12007] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 388.224612][T12007] ? __page_table_check_zero+0x333/0x410 [ 388.230263][T12007] ? __page_table_check_zero+0x333/0x410 [ 388.235911][T12007] ? __page_table_check_zero+0x338/0x410 [ 388.241618][T12007] __free_frozen_pages+0x3f5/0x1040 [ 388.246818][T12007] hci_release_dev+0x4ef/0x630 [ 388.251613][T12007] ? __pfx_hci_release_dev+0x10/0x10 [ 388.256890][T12007] ? device_release+0x97/0x270 [ 388.261680][T12007] ? rcu_is_watching+0x12/0xc0 [ 388.266787][T12007] ? device_release+0x97/0x270 [ 388.271611][T12007] bt_host_release+0x6a/0xb0 [ 388.276198][T12007] ? __pfx_bt_host_release+0x10/0x10 [ 388.281514][T12007] device_release+0xd2/0x270 [ 388.286115][T12007] kobject_put+0x1f7/0x640 [ 388.290533][T12007] put_device+0x1f/0x30 [ 388.294706][T12007] vhci_release+0x185/0x230 [ 388.299201][T12007] ? __pfx_vhci_release+0x10/0x10 [ 388.304264][T12007] __fput+0x3ff/0xb50 [ 388.308248][T12007] task_work_run+0x150/0x240 [ 388.312843][T12007] ? __pfx_task_work_run+0x10/0x10 [ 388.317954][T12007] ? free_uts_ns+0x16e/0x330 [ 388.322607][T12007] do_exit+0x8d2/0x2a60 [ 388.326767][T12007] ? __pfx___might_resched+0x10/0x10 [ 388.332074][T12007] ? __pfx_do_exit+0x10/0x10 [ 388.336671][T12007] ? do_raw_spin_lock+0x128/0x260 [ 388.341798][T12007] ? find_held_lock+0x2b/0x80 [ 388.346533][T12007] ? get_signal+0x7e0/0x21e0 [ 388.351168][T12007] do_group_exit+0xd5/0x2a0 [ 388.355657][T12007] get_signal+0x1ec7/0x21e0 [ 388.360217][T12007] ? __pfx_get_signal+0x10/0x10 [ 388.365391][T12007] ? kernel_move_pages+0xcfd/0x13f0 [ 388.370644][T12007] arch_do_signal_or_restart+0x91/0x7a0 [ 388.376187][T12007] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 388.382399][T12007] ? handle_softirqs+0x861/0xa00 [ 388.387345][T12007] ? rcu_is_watching+0x12/0xc0 [ 388.392148][T12007] exit_to_user_mode_loop+0x8b/0x4f0 [ 388.397420][T12007] ? rcu_is_watching+0x12/0xc0 [ 388.402202][T12007] do_syscall_64+0x6f2/0xf80 [ 388.406783][T12007] ? clear_bhb_loop+0x40/0x90 [ 388.411464][T12007] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.417357][T12007] RIP: 0033:0x7fa555b9ce59 [ 388.421895][T12007] Code: Unable to access opcode bytes at 0x7fa555b9ce2f. [ 388.428904][T12007] RSP: 002b:00007fa553db4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000117 [ 388.437370][T12007] RAX: fffffffffffffff2 RBX: 00007fa555e16180 RCX: 00007fa555b9ce59 [ 388.445662][T12007] RDX: 0000000000000000 RSI: 0002000000000003 RDI: 0000000000000001 [ 388.453696][T12007] RBP: 00007fa555c32d6f R08: 0000000000000000 R09: 8000400000000000 [ 388.461686][T12007] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 388.470036][T12007] R13: 00007fa555e16218 R14: 00007fa555e16180 R15: 00007ffe37580588 [ 388.478013][T12007] [ 388.481083][T12007] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 388.488349][T12007] CPU: 0 UID: 0 PID: 12007 Comm: syz.3.1303 Tainted: G L syzkaller #0 PREEMPT(full) [ 388.499267][T12007] Tainted: [L]=SOFTLOCKUP [ 388.503568][T12007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 388.513619][T12007] Call Trace: [ 388.516891][T12007] [ 388.519809][T12007] dump_stack_lvl+0x100/0x190 [ 388.524563][T12007] vpanic+0x552/0x970 [ 388.528530][T12007] ? __pfx_vpanic+0x10/0x10 [ 388.533022][T12007] panic+0xd1/0xe0 [ 388.536728][T12007] ? __pfx_panic+0x10/0x10 [ 388.541138][T12007] ? check_panic_on_warn+0x1f/0x90 [ 388.546238][T12007] check_panic_on_warn.cold+0x19/0x34 [ 388.551595][T12007] ? debug_print_object+0x18e/0x2a0 [ 388.556786][T12007] __warn.cold+0x191/0x328 [ 388.561190][T12007] __report_bug+0x296/0x3d0 [ 388.565683][T12007] ? debug_print_object+0x18e/0x2a0 [ 388.570871][T12007] ? __pfx___report_bug+0x10/0x10 [ 388.575909][T12007] ? __lock_acquire+0x4a5/0x2630 [ 388.580834][T12007] ? unwind_next_frame+0x3c8/0x2090 [ 388.586023][T12007] report_bug_entry+0xe1/0x290 [ 388.590778][T12007] ? debug_print_object+0x19b/0x2a0 [ 388.595979][T12007] handle_bug+0x1cd/0x2a0 [ 388.600294][T12007] exc_invalid_op+0x17/0x50 [ 388.604791][T12007] asm_exc_invalid_op+0x1a/0x20 [ 388.609625][T12007] RIP: 0010:debug_print_object+0x19b/0x2a0 [ 388.615440][T12007] Code: b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 4f 48 8d 3d 52 a9 e2 0b 41 56 48 8b 14 dd c0 39 1c 8c 4c 89 e6 <67> 48 0f b9 3a 58 83 05 ac 25 d8 0b 01 48 83 c4 18 5b 5d 41 5c 41 [ 388.635033][T12007] RSP: 0018:ffffc900052176f8 EFLAGS: 00010246 [ 388.641086][T12007] RAX: dffffc0000000000 RBX: 0000000000000003 RCX: 0000000000000000 [ 388.649043][T12007] RDX: ffffffff8c1c3900 RSI: ffffffff8c1c3520 RDI: ffffffff90e29360 [ 388.656995][T12007] RBP: 0000000000000001 R08: ffff88807f225438 R09: ffffffff8bb2b700 [ 388.664949][T12007] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff8c1c3520 [ 388.672908][T12007] R13: ffffffff8bb2b740 R14: ffffffff8a92bd10 R15: ffffc900052177f8 [ 388.680884][T12007] ? __pfx_hci_devcd_timeout+0x10/0x10 [ 388.686365][T12007] ? __pfx_hci_devcd_timeout+0x10/0x10 [ 388.691812][T12007] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 388.697608][T12007] debug_check_no_obj_freed+0x4da/0x630 [ 388.703154][T12007] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 388.709212][T12007] ? __page_table_check_zero+0x333/0x410 [ 388.714831][T12007] ? __page_table_check_zero+0x333/0x410 [ 388.720452][T12007] ? __page_table_check_zero+0x338/0x410 [ 388.726125][T12007] __free_frozen_pages+0x3f5/0x1040 [ 388.731316][T12007] hci_release_dev+0x4ef/0x630 [ 388.736067][T12007] ? __pfx_hci_release_dev+0x10/0x10 [ 388.741339][T12007] ? device_release+0x97/0x270 [ 388.746107][T12007] ? rcu_is_watching+0x12/0xc0 [ 388.750875][T12007] ? device_release+0x97/0x270 [ 388.755643][T12007] bt_host_release+0x6a/0xb0 [ 388.760224][T12007] ? __pfx_bt_host_release+0x10/0x10 [ 388.765499][T12007] device_release+0xd2/0x270 [ 388.770104][T12007] kobject_put+0x1f7/0x640 [ 388.774504][T12007] put_device+0x1f/0x30 [ 388.778649][T12007] vhci_release+0x185/0x230 [ 388.783140][T12007] ? __pfx_vhci_release+0x10/0x10 [ 388.788152][T12007] __fput+0x3ff/0xb50 [ 388.792128][T12007] task_work_run+0x150/0x240 [ 388.796709][T12007] ? __pfx_task_work_run+0x10/0x10 [ 388.801805][T12007] ? free_uts_ns+0x16e/0x330 [ 388.806386][T12007] do_exit+0x8d2/0x2a60 [ 388.810532][T12007] ? __pfx___might_resched+0x10/0x10 [ 388.815809][T12007] ? __pfx_do_exit+0x10/0x10 [ 388.820394][T12007] ? do_raw_spin_lock+0x128/0x260 [ 388.825406][T12007] ? find_held_lock+0x2b/0x80 [ 388.830071][T12007] ? get_signal+0x7e0/0x21e0 [ 388.834667][T12007] do_group_exit+0xd5/0x2a0 [ 388.839164][T12007] get_signal+0x1ec7/0x21e0 [ 388.843664][T12007] ? __pfx_get_signal+0x10/0x10 [ 388.848499][T12007] ? kernel_move_pages+0xcfd/0x13f0 [ 388.853693][T12007] arch_do_signal_or_restart+0x91/0x7a0 [ 388.859231][T12007] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 388.865384][T12007] ? handle_softirqs+0x861/0xa00 [ 388.870312][T12007] ? rcu_is_watching+0x12/0xc0 [ 388.875067][T12007] exit_to_user_mode_loop+0x8b/0x4f0 [ 388.880344][T12007] ? rcu_is_watching+0x12/0xc0 [ 388.885112][T12007] do_syscall_64+0x6f2/0xf80 [ 388.889692][T12007] ? clear_bhb_loop+0x40/0x90 [ 388.894356][T12007] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.900235][T12007] RIP: 0033:0x7fa555b9ce59 [ 388.904631][T12007] Code: Unable to access opcode bytes at 0x7fa555b9ce2f. [ 388.911625][T12007] RSP: 002b:00007fa553db4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000117 [ 388.920024][T12007] RAX: fffffffffffffff2 RBX: 00007fa555e16180 RCX: 00007fa555b9ce59 [ 388.927974][T12007] RDX: 0000000000000000 RSI: 0002000000000003 RDI: 0000000000000001 [ 388.935989][T12007] RBP: 00007fa555c32d6f R08: 0000000000000000 R09: 8000400000000000 [ 388.943966][T12007] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 388.951955][T12007] R13: 00007fa555e16218 R14: 00007fa555e16180 R15: 00007ffe37580588 [ 388.959941][T12007] [ 388.963021][T12007] Kernel Offset: disabled [ 388.967336][T12007] Rebooting in 86400 seconds..