last executing test programs:

1m35.957445008s ago: executing program 0 (id=2261):
syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r0)
mq_notify$auto(0xffffffffffffffff, &(0x7f00000000c0)={@sival_ptr=0x0, @inferred, 0x2, @_tid})
openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000000), 0xa00, 0x0)
r1 = pipe2$auto(0x0, 0x0)
open_tree_attr$auto(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x4)
unshare$auto(0x40000080)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000001140)='/dev/psaux\x00', 0x42000, 0x0)
io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7ffffffc, 0x8, 0x3000, 0x6, 0x7, 0x400b, r2, [], {0x6, 0x6, 0x8c48, 0x29a, 0x9, 0x80, 0x104, 0x6, 0x4}, {0x100, 0x1, 0x101, 0x85, 0x2, 0x24, 0xfe000000, 0x8, 0x3}})
r3 = openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$auto_XFS_IOC_FREESP(r1, 0x4030580b, &(0x7f0000000100)={0x6a6e, 0x2, 0x0, 0x5f6, 0x1, <r4=>0x0})
ptrace$auto_PTRACE_SECCOMP_GET_METADATA(0x420d, r4, 0x7, 0x4)
read$auto_vhci_fops_hci_vhci(r3, &(0x7f0000000d40)=""/16, 0x10)
select$auto(0xe, 0x0, 0x0, &(0x7f0000000580)={[0x1ff, 0x8000, 0xd, 0x1, 0x200948d, 0x3, 0x10015f4da0a, 0xd, 0x7, 0x6, 0x8000001f, 0x8, 0x6d3e, 0xc, 0x2, 0x2]}, 0x0)
mmap$auto(0x0, 0x2020009, 0x8000000000000003, 0x40000000000eb1, 0xffffffffffffffff, 0x8000)
madvise$auto(0x0, 0xffffffffffff0005, 0x17)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
ioctl$auto(0x3, 0x8905, 0x38)
madvise$auto(0x0, 0x2003f2, 0x15)

1m32.24101323s ago: executing program 0 (id=2271):
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0)
mmap$auto(0x0, 0xf72, 0x3, 0x65d8, 0xfffffffffffffffa, 0x8)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/platform/dummy_hcd.0/usb1/1-0:1.0/usb1-port1/quirks\x00', 0x103a42, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket(0x1d, 0x2, 0x7)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', <r2=>0x0})
bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r2}, 0x6a)
sendto$auto(r1, 0x0, 0x6fffff9, 0xfffffff8, &(0x7f0000000440)=@can, 0x36)
write$auto(r0, &(0x7f0000000040)='//\xf2\x00', 0x80000000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x0, 0xfffff004, 0x2)
socket(0xa, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket(0xa, 0x2, 0x88)
bpf$auto_BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)=@task_fd_query={0x0, 0xffffffffffffffff, 0x5, 0x4, 0x6, 0x3373, 0xffffffffffffffff, 0x4}, 0x8)
close_range$auto(0x2, 0x8000, 0x0)
r4 = socket(0x2b, 0x1, 0x1)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
io_uring_register$auto(r4, 0x2, &(0x7f00000000c0), 0x1)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bond0\x00', <r7=>0x0})
bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r7, r6, 0x8, 0xfc, r3, @relative_fd, 0xe600}, 0xf)
bpf$auto(0x3, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffff, 0x0, 0x3}, 0xc)

1m31.831832743s ago: executing program 0 (id=2272):
mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000)
r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
fcntl$auto(0x3, 0x4, 0xa553)
swapon$auto(0x0, 0x4)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0)
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
adjtimex$auto(&(0x7f0000000000)={0xffff92b5, 0x0, 0x9, 0x3, 0x0, 0x80000000000000, 0x80000000, 0x0, 0x4513, 0x9, 0xffffffffffffffff, {0x7, 0x6}, 0xfffffffc, 0xbfa, 0x9, 0x10, 0x0, 0x2, 0x8, 0xff, 0x10000, 0x100000001, 0x4})
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
sendmmsg$auto(0x4, 0x0, 0x9a6, 0x24)
close_range$auto(0x2, 0x8, 0x0)
close_range$auto(r0, 0x8, 0xfffffe02)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x20002, 0x0)
ioctl$auto_SNDCTL_DSP_SPEED(r1, 0xc0045002, 0x0)
ioctl$auto_SNDCTL_DSP_SPEED(r1, 0xc0045002, 0x0)
ioctl$auto_SNDCTL_DSP_SETFMT(r1, 0xc0045005, 0x0)
socketcall$auto(0x8000, 0x0)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x60980, 0x0)
ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$auto(0x3, 0xae60, 0x10000000000402)
r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0)
ioctl$auto(0x3, 0xae41, r3)

1m30.550810065s ago: executing program 0 (id=2276):
write$auto(0xffffffffffffffff, 0x0, 0xa)
unshare$auto(0x40000080)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
listen$auto(0x3, 0x81)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x1, 0x202000a, 0xfffffffc, 0xdc, 0xfffffffffffffffa, 0x8000)
r1 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
madvise$auto(0x0, 0x2003f2, 0x15)
syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x24048084)
madvise$auto(0x0, 0x200007, 0x19)
openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, 0x0, 0x103003, 0x0)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0)
ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0)
r3 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0)
r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000380)='/proc/thread-self/net/snmp\x00', 0x40, 0x0)
pread64$auto(r4, 0x0, 0x80000000, 0x9fffffffd)
pread64$auto(r3, &(0x7f0000000240)='\x03W\x96l\x15\x0f\xff\x00'/21, 0x100000002, 0x100000001)
mq_notify$auto(0xffffffffffffffff, &(0x7f0000000180)={@sival_ptr=0x0, @inferred, 0x0, @_sigev_thread={0x0, 0x0}})
mq_timedsend$auto(r1, 0x0, 0x2, 0x9, 0x0)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
close_range$auto(0x2, 0x8, 0x0)

1m29.350939643s ago: executing program 0 (id=2280):
r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)
write$auto(0x3, 0x0, 0xfdef)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r2 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0)
sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002dbd7000f9dbdf2501000000060002000100000005000700570000000800090108000000050004000300000014001f00fe88000000000000000000000000000114002000ff010000000000000000000000000001"], 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), r1)
sendmsg$auto_NL80211_CMD_DEL_PMKSA(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r3, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x0)
r4 = getpid()
process_vm_readv$auto(r4, &(0x7f0000000000)={0x0, 0xfff}, 0x800000001, &(0x7f0000000280)={&(0x7f0000000080), 0x1ffffffff}, 0x6, 0x0)
write$auto(r2, &(0x7f0000000040)='S\x00\x00\x00\xfe\xff\xff\xff', 0x8587)
ioctl$auto_SG_SET_RESERVED_SIZE2(r2, 0x2275, 0x0)
syz_genetlink_get_family_id$auto_batadv(&(0x7f0000001d40), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'pim6reg\x00', <r5=>0x0})
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000002c0), r1)
sendmsg$auto_NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)={0x4c, r3, 0x2, 0x70bd28, 0x25dfdbff, {}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x6}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, "ca223cbdbfe85a41eada2d258b7a68c5657d05757d372657335b"}, @NL80211_ATTR_CENTER_FREQ1_OFFSET={0x8, 0x123, 0xfffffff9}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x7fff}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000010)
sendmsg$auto_NL802154_CMD_DEL_SEC_KEY(r6, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f0000000840)={0x10ac, r7, 0x800, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_SUPPORTED_COMMANDS={0x1096, 0x19, 0x0, 0x1, [@nested={0x34, 0x8c, 0x0, 0x1, [@generic="019b0704e81d899aad8e336648229f40262baec9d954d36eabd5a69677ba808c6379dc6a37207d51", @generic, @typed={0x8, 0x112, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}]}, @generic="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", @typed={0xc, 0xdc, 0x0, 0x0, @u64=0x2}, @generic="ee201edfb6ab7d6632691e536f37bfb70a41464a9a229ae0e4a12346c234150059d0b6dd1cb12e48bf593c229ba248a3797e0bd042888d15a8fcbad3e6be813397426ab8bc48ab5f1ec15a85aeef5195c60e"]}]}, 0x10ac}, 0x1, 0x0, 0x0, 0x800}, 0x20000800)
r8 = socket(0x2, 0x1, 0x0)
r9 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/bus/usb/drivers/cdc_mbim/remove_id\x00', 0x1c0b02, 0x0)
read$auto_proc_mountstats_operations_mnt_namespace(r9, &(0x7f0000001c40)=""/112, 0x70)
getsockopt$auto(r8, 0x6, 0xc, 0x0, 0x0)
sendmsg$auto_BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000000040)=ANY=[@ANYRES64=r0, @ANYRESHEX, @ANYBLOB="c79f25bd7000ffdbdf250ee4000008000300", @ANYRES32=r5], 0x1c}, 0x1, 0x0, 0x0, 0xc031}, 0x44)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
ioctl$auto(0x3, 0x541b, 0x38)

1m28.722497361s ago: executing program 0 (id=2283):
write$auto(0xffffffffffffffff, &(0x7f0000000080)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94&\x81\xe2\x13\x8f\xea#\xf8F\xbbOO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\b\xc1\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(', 0xa)
unshare$auto(0x40000080)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
listen$auto(0x3, 0x81)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x1, 0x202000a, 0xfffffffc, 0xdc, 0xfffffffffffffffa, 0x8000)
r1 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
madvise$auto(0x0, 0x2003f2, 0x15)
syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x24048084)
madvise$auto(0x0, 0x200007, 0x19)
openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, 0x0, 0x103003, 0x0)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x101000, 0x0)
ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0)
r3 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0)
r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000380)='/proc/thread-self/net/snmp\x00', 0x40, 0x0)
pread64$auto(r4, 0x0, 0x80000000, 0x9fffffffd)
pread64$auto(r3, &(0x7f0000000240)='\x03W\x96l\x15\x0f\xff\x00'/21, 0x100000002, 0x100000001)
mq_notify$auto(0xffffffffffffffff, &(0x7f0000000180)={@sival_ptr=0x0, @inferred, 0x0, @_sigev_thread={0x0, 0x0}})
mq_timedsend$auto(r1, 0x0, 0x2, 0x9, 0x0)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
close_range$auto(0x2, 0x8, 0x0)

1m13.672865731s ago: executing program 32 (id=2283):
write$auto(0xffffffffffffffff, &(0x7f0000000080)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94&\x81\xe2\x13\x8f\xea#\xf8F\xbbOO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\b\xc1\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(', 0xa)
unshare$auto(0x40000080)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
listen$auto(0x3, 0x81)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x1, 0x202000a, 0xfffffffc, 0xdc, 0xfffffffffffffffa, 0x8000)
r1 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
madvise$auto(0x0, 0x2003f2, 0x15)
syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x24048084)
madvise$auto(0x0, 0x200007, 0x19)
openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, 0x0, 0x103003, 0x0)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x101000, 0x0)
ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0)
r3 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0)
r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000380)='/proc/thread-self/net/snmp\x00', 0x40, 0x0)
pread64$auto(r4, 0x0, 0x80000000, 0x9fffffffd)
pread64$auto(r3, &(0x7f0000000240)='\x03W\x96l\x15\x0f\xff\x00'/21, 0x100000002, 0x100000001)
mq_notify$auto(0xffffffffffffffff, &(0x7f0000000180)={@sival_ptr=0x0, @inferred, 0x0, @_sigev_thread={0x0, 0x0}})
mq_timedsend$auto(r1, 0x0, 0x2, 0x9, 0x0)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
close_range$auto(0x2, 0x8, 0x0)

11.844727572s ago: executing program 1 (id=2521):
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0)
mmap$auto(0x0, 0xf72, 0x3, 0x65d8, 0xfffffffffffffffa, 0x8)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/platform/dummy_hcd.0/usb1/1-0:1.0/usb1-port1/quirks\x00', 0x103a42, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket(0x1d, 0x2, 0x7)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', <r2=>0x0})
bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r2}, 0x6a)
sendto$auto(r1, 0x0, 0x6fffff9, 0xfffffff8, &(0x7f0000000440)=@can, 0x36)
write$auto(r0, &(0x7f0000000040)='//\xf2\x00', 0x80000000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x0, 0xfffff004, 0x2)
socket(0xa, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket(0xa, 0x2, 0x88)
bpf$auto_BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)=@task_fd_query={0x0, 0xffffffffffffffff, 0x5, 0x4, 0x6, 0x3373, 0xffffffffffffffff, 0x4}, 0x8)
close_range$auto(0x2, 0x8000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
io_uring_register$auto(0xffffffffffffffff, 0x2, &(0x7f00000000c0), 0x1)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bond0\x00', <r6=>0x0})
bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r6, r5, 0x8, 0xfc, r3, @relative_fd, 0xe600}, 0xf)
bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x40000000000005, 0xffffffffffffffff, 0x0, 0x1}, 0x4)
bpf$auto(0x3, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffff, 0x0, 0x3}, 0xc)

11.685312786s ago: executing program 1 (id=2522):
write$auto(0xffffffffffffffff, &(0x7f0000000080)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94&\x81\xe2\x13\x8f\xea#\xf8F\xbbOO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\b\xc1\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(', 0xa)
unshare$auto(0x40000080)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
listen$auto(0x3, 0x81)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x1, 0x202000a, 0xfffffffc, 0xdc, 0xfffffffffffffffa, 0x8000)
r1 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
madvise$auto(0x0, 0x2003f2, 0x15)
syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x24048084)
madvise$auto(0x0, 0x200007, 0x19)
openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, 0x0, 0x103003, 0x0)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0)
ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0)
r3 = openat$auto_zero_fops_mem(0xffffffffffffff9c, 0x0, 0x80200, 0x0)
r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000380)='/proc/thread-self/net/snmp\x00', 0x40, 0x0)
pread64$auto(r4, 0x0, 0x80000000, 0x9fffffffd)
pread64$auto(r3, &(0x7f0000000240)='\x03W\x96l\x15\x0f\xff\x00'/21, 0x100000002, 0x100000001)
mq_notify$auto(0xffffffffffffffff, &(0x7f0000000180)={@sival_ptr=0x0, @inferred, 0x0, @_sigev_thread={0x0, 0x0}})
mq_timedsend$auto(r1, 0x0, 0x2, 0x9, 0x0)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
close_range$auto(0x2, 0x8, 0x0)

10.069916331s ago: executing program 1 (id=2526):
mmap$auto(0x0, 0x20009, 0xffffffffffffffff, 0xeb1, 0x401, 0x8000)
madvise$auto(0x0, 0x7fffffffffffffff, 0xa)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab83, 0x0)
openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/input/event0\x00', 0x40502, 0x0)
r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000001180), 0x101000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x101042, 0x0)
ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$auto(0x3, 0xae41, r1)
ioctl$auto_KVM_GET_MSRS(r0, 0x4138ae84, &(0x7f0000000040)={0x2, 0x179})
mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xffffffffffffffff, 0x8000)
sendmsg$auto_NL802154_CMD_SET_CCA_ED_LEVEL(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x1c, 0x0, 0x8, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x40}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8001}, 0x40000)
r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/pagetypeinfo\x00', 0x43102, 0x0)
read$auto_proc_iter_file_ops_compat_inode(r2, &(0x7f0000000180)=""/178, 0xb2)
sendmsg$auto_ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, 0x0, 0x2000c840)
madvise$auto(0x110c230000, 0x1, 0x9)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000000000008000)
r3 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, r3, 0x8000)
select$auto(0x81, 0x0, 0x0, 0x0, 0x0)
io_setup$auto(0x7ffe, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
memfd_create$auto(0x0, 0x8)
socket(0x1d, 0x2, 0x7)

9.09156286s ago: executing program 4 (id=2527):
process_vm_readv$auto(0x0, 0x0, 0x1, 0x0, 0x6, 0x0)
syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e</\xfd\x9b\xe4\x99G\xeaS\x9a\xadu(:\x94:\xaf\x06c=3>1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\x84q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa24X@\xadD\xf8\x9d\xf3 \xd2]\xc4\x13G\x1d\x04!\xc1\xeb.e$\xfb\xa3KU\xcf\xc1\x7fFD\x99\xf5v\v\x9dS\xc11P\xa3\xe9\xb0SqL\x85\xea\xb2\x9cY\x83.I\xca\x92\x1c\xc4\x13CV=\x92\x17c\x87iOt\x14On\x15=\v\xf0 \xc5\x8b~\xd6\xd4\xc7\xa3a\x1c\x06\x17\xb3\x88\x8c\xf1L\xba\x89a\xfd\xa5\xc6\x7fU\x00\xe5\x9b', 0x5)
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080))
fchdir$auto(r0)
mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x403, 0x8000)
statx$auto(0xffffff9c, 0x0, 0x1000, 0x1, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r1 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/kcore\x00', 0x28000, 0x0)
pread64$auto(r1, 0x0, 0x800003, 0x270)
mlockall$auto(0x7)
msgctl$auto_IPC_RMID(0x1, 0x0, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r2 = socket(0x2, 0x1, 0x106)
sendmmsg$auto(0x4, 0x0, 0x9a6, 0x230)
r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
write$auto(r3, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81)
sched_setaffinity$auto(0x0, 0xcf4d, &(0x7f00000000c0)=0xffffffffffffffff)
shmget$auto(0x100000000, 0x3, 0x79e56dc9)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000)
r4 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x3, 0x7)
accept4$auto(r4, 0x0, 0x0, 0x3)
r5 = epoll_create$auto(0x3e)
epoll_ctl$auto(r5, 0x1, r2, 0x0)
connect$auto(0x3, 0x0, 0x54)
r6 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/irq/6/smp_affinity\x00', 0xe282, 0x0)
write$auto(r6, &(0x7f0000000580)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3C', 0x4)

8.287923508s ago: executing program 1 (id=2530):
unshare$auto(0x40000080)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/bdi/43:192/max_ratio\x00', 0x2001, 0x0)
write$auto_ocfs2_control_fops_stack_user(r0, &(0x7f0000003900)='\t', 0x1)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x0)
socket(0xa, 0x1, 0x0)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000)
mremap$auto(0x0, 0x7, 0x3fd6, 0x3, 0x20000000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x0, 0xffffffffffff0005, 0x17)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
rt_sigprocmask$auto(0xffffffff, 0x0, 0x0, 0x8)
openat$auto_proc_pid_numa_maps_operations_internal(0xffffffffffffff9c, 0x0, 0x40080, 0x0)
mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2)
r1 = socket(0xa, 0x5, 0x0)
mmap$auto(0x4000000004, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000)
rt_sigprocmask$auto(0x6, &(0x7f00000000c0)={0x89}, &(0x7f0000000100)={0x400}, 0x8)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x40001, 0x0)
r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0)
socketpair$auto(0x1f, 0x5, 0x8000000000000000, 0x0)
ioctl$auto_TCFLSH2(r3, 0x80045439, 0x0)
ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0)
ioctl$auto(r2, 0x89f0, r2)
sysfs$auto(0x2, 0x100000000000037, 0x0)
fsconfig$auto(0xffffffffffffffff, 0x8, 0x0, 0x0, 0x0)
getsockopt$auto(r1, 0x84, 0x7a, 0x0, 0x0)

7.591693913s ago: executing program 2 (id=2533):
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00211459a600fbdbdf250200000008000300000000001b0004"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0)
futex_requeue$auto(&(0x7f0000000040)={0xb, 0x6, 0x2, 0x2000000}, 0x0, 0xf, 0x9)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000)
r0 = socket(0x2, 0x2, 0x0)
bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50)
r1 = io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xe, 0x2, 0x6, 0x5, 0x8, 0xffffffffffffffff, [], {0xd74c, 0x6, 0x2, 0x29f, 0x100, 0x7f, 0x101, 0x6, 0x2}, {0xff, 0x1, 0x10001, 0x7, 0x1, 0x40, 0x76c5, 0x400005, 0x100000005}})
io_uring_enter$auto(r1, 0x9, 0x820e, 0x6, 0x0, 0x18)
ioctl$auto_EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r0, 0x2, 0x2, 0xc2, 0x2000000000000002})
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0xe8, 0x9, 0x2, 0x1, 0x5, 0x4, 0x15f4da0e, 0x8, 0x9, 0x100000000000000c, 0x8, 0x1, 0xfca, 0x9, 0x2, 0x4000000000000d]}, 0x0)
sendmsg$auto_NL80211_CMD_SET_STATION(r0, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x110000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="100026bd"], 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x40080c0)
pwrite64$auto(0xc8, &(0x7f0000000140)='\vX\xb5n\x91p\xe6\x1eRNM\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00,\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbe\x01\x00\x00\x00\'\x03\x00\x00\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^B\xb8\xe4j\t,\xe4\x90\xcc\x9d\xc5\x0fo\x84\xf4\x89\v\xea\x1b\x95\xafQ;CL\"\x01@\x00\x00\x00\x00\f\x00\xc0\x13\xc8\xe2\xae\xf5\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8d\x81\x81O*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,8\x93\xba\x88\x93\x9d\xb6\x1a\x7f\xc0%\xb0\x83ROJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd6eWj\xdc\xac\x88\xf0\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00\x00\xff\xff\x00'/242, 0xfdf0, 0x39)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
statx$auto(0xffffffffffffffff, 0x0, 0xfffffffb, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000)
r2 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x44814}, 0x2004c0c4)
sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa507}, 0x800}, 0x7, 0x8)
io_uring_setup$auto(0x9, 0x0)
mmap$auto(0x0, 0x7, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0xffffffffffffffff, 0x8, 0x3)

6.580224621s ago: executing program 4 (id=2535):
mmap$auto(0x0, 0x40009, 0xfffffffffffffffa, 0x9b72, 0x7, 0x28000)
r0 = ioctl$auto_TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000180)=0x7)
mkdir$auto(&(0x7f0000000040)='./cgroup.net/\f\x00\x00\x00\x00', 0xa3)
openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/\f\x00', &(0x7f0000000080)={0x2e8503, 0x154, 0x3b}, 0x18)
syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$auto_NFSD_CMD_VERSION_GET(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0xa000}, 0x4000001)
r1 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0)
ioctl$auto_SNAPSHOT_FREE(r1, 0x3305, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0x1, 0x0)
socketpair$auto(0x1e, 0x5, 0x9, 0x0)
r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptys5\x00', 0x2000, 0x0)
openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000900)='/sys/kernel/debug/block/nbd3/hctx0/flags\x00', 0x48a00, 0x0)
r3 = openat$auto_bridges_fops_(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/kernel/debug/dri/vkms/encoder-1/bridges\x00', 0x2, 0x0)
read$auto(r3, &(0x7f0000000440)='\x00yd\aU\xad3r\xef\xe6\ts\xf1\xb7\xb8C\x96\xddKz#\x1b\xccS\xbb\xecL\r\xbf\xdcw\x02ia<\xee\x8c\x80\x1bP\x8c\xb2\xb6]\xa32G>~~I\xba\xb2\xee\x0e\xc9\x12X\x7f\x9d\xa7\v\xe4\xb6\xe9\\\xad\xdf\xa3,_\x89#\xec&_bG=\xac\xff:\xd7\x9fX\xe0\xa2z\xac\xee\xf5\x14(\xbf\xa5%\x92\'*\x10\xbd$?\xb0e\x8fx3KT\x19\x96Z8\xd6\xe9K<\x1f\xfev\xb3\xe2D\n\xa4\xc7\x1e%\x00\xa6>\xa6\xe8&\x86BV-\x02O\x84D\xee\xc2\x7f\xe4J-\xad\x85\x98\xa8\xb2\x03\xa6\x96\xafF\x8eN7\xa4\x16\x95\xf5\x05!d\xfdAl\xd7\x90\xf7\\_\xae\xb8\xa7xH\xe3\xfb,\xbb\xdb\x1e\xb4\xe2\xacBN\xe7X\x14Um\xe7\xb6\xc3!A\x8e\x98L\x9f\x9e\xb2\xe7\xd79[:\xc0\xad\"X|j\x89`r\x89b]\xda5\x9d\xeb\xcb\xb8v\xadg\f\xdc\x9aJ\xdd\x92\x1b\xb6\xd4\x80^]Y\xc2^\xb6\xeb\xf3\x80\x1a=', 0x4)
ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0)
socket(0xa, 0x3, 0x3b)
mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r4 = socket(0x2, 0x1, 0x0)
openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
syz_clone(0x300ca691, 0x0, 0x0, 0x0, 0x0, 0x0)
wait4$auto(0x0, &(0x7f0000000000)=0x9, 0x2, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4ea2, @remote}, 0x6a)
getsockopt$auto_SO_RCVTIMEO_OLD(r4, 0xffffffff, 0x14, &(0x7f00000003c0)='\x00\x00+\xa2\xc7\x92\x00\x00\x00\x00\x00\x00\x03\x90\xf9\xe8\x11\x80\a :w\xac[\xbb\xac\xe3\xe0\xff8g:\x04\x00\x00\x00\x00\x00\x00\x00=r\x03\x95\x87\xbaM\xd80=\x81\x8ez\xab\xc3^\xb0\x03Ijj\xc4\xf9\xe6\x84P\x15q\xaa\xc8\x03\xba\x8c\xe3\xc3r\xb8\x1b\x98\xe8\xbc\x11.\xd9A\xb3P\xfa\x04\x95\xfc*\v\xb8\xc5\x16Z\xb7\x82\xbc\x96o\xd2G\xf8\x0f`\xa1\x1f\xc6\xd6\xc5\xdcM\x17\x11\xd2\x12\x988\xa3`\xad[UI\xf7\xc7\xcc\x13XH\xc1\x02\x84$\x97;\xebM`\x7f\xe4\x8dbe\xd8\x901\x8e\'\x10\xf6`^\xd28Xk\x03\x8d\b\xbd\xe2d\\\x11w(\xc7D!,6\x01\x00\x9f\x8bxg\xe2\xfc~\x006\x17\x9b9?,\xd8\n\x82r\x12\xa9\xfd@\x90&\xd3l\xa7[\x9bx\xf7\xb9[m\x9a\xee\"\x9e\x81|\xa4\x8f5\xea\t\x02Axu\xe9io`\x81\xb5\x89\x01\xa0\xa8~]\xd8]\x14}\x8c\xacRc\r\xb7.\x7f\xb3\x85\xff\xf5\xb0\x11/\x80{\xab)\x05\xb3HHU\xcb\x00', 0x0)
write$auto(0x3, 0x0, 0x7fffffff)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)

6.278628461s ago: executing program 4 (id=2536):
write$auto(0xffffffffffffffff, &(0x7f0000000080)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94&\x81\xe2\x13\x8f\xea#\xf8F\xbbOO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\b\xc1\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(', 0xa)
unshare$auto(0x40000080)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
listen$auto(0x3, 0x81)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x1, 0x202000a, 0xfffffffc, 0xdc, 0xfffffffffffffffa, 0x8000)
r1 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
madvise$auto(0x0, 0x2003f2, 0x15)
syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x24048084)
madvise$auto(0x0, 0x200007, 0x19)
openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, 0x0, 0x103003, 0x0)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0)
ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0)
r3 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0)
r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000380)='/proc/thread-self/net/snmp\x00', 0x40, 0x0)
pread64$auto(r4, 0x0, 0x80000000, 0x9fffffffd)
pread64$auto(r3, 0x0, 0x100000002, 0x100000001)
mq_notify$auto(0xffffffffffffffff, &(0x7f0000000180)={@sival_ptr=0x0, @inferred, 0x0, @_sigev_thread={0x0, 0x0}})
mq_timedsend$auto(r1, 0x0, 0x2, 0x9, 0x0)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
close_range$auto(0x2, 0x8, 0x0)

6.198948095s ago: executing program 3 (id=2537):
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00211459a600fbdbdf250200000008000300000000001b0004"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0)
futex_requeue$auto(&(0x7f0000000040)={0xb, 0x6, 0x2, 0x2000000}, 0x0, 0xf, 0x9)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000)
r0 = socket(0x2, 0x2, 0x0)
bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50)
r1 = io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xe, 0x2, 0x6, 0x5, 0x8, 0xffffffffffffffff, [], {0xd74c, 0x6, 0x2, 0x29f, 0x100, 0x7f, 0x101, 0x6, 0x2}, {0xff, 0x1, 0x10001, 0x7, 0x1, 0x40, 0x76c5, 0x400005, 0x100000005}})
io_uring_enter$auto(r1, 0x9, 0x820e, 0x6, 0x0, 0x18)
ioctl$auto_EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r0, 0x2, 0x2, 0xc2, 0x2000000000000002})
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0xe8, 0x9, 0x2, 0x1, 0x5, 0x4, 0x15f4da0e, 0x8, 0x9, 0x100000000000000c, 0x8, 0x1, 0xfca, 0x9, 0x2, 0x4000000000000d]}, 0x0)
sendmsg$auto_NL80211_CMD_SET_STATION(r0, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x110000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="100026bd"], 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x40080c0)
pwrite64$auto(0xc8, &(0x7f0000000140)='\vX\xb5n\x91p\xe6\x1eRNM\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00,\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbe\x01\x00\x00\x00\'\x03\x00\x00\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^B\xb8\xe4j\t,\xe4\x90\xcc\x9d\xc5\x0fo\x84\xf4\x89\v\xea\x1b\x95\xafQ;CL\"\x01@\x00\x00\x00\x00\f\x00\xc0\x13\xc8\xe2\xae\xf5\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8d\x81\x81O*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,8\x93\xba\x88\x93\x9d\xb6\x1a\x7f\xc0%\xb0\x83ROJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd6eWj\xdc\xac\x88\xf0\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00\x00\xff\xff\x00'/242, 0xfdf0, 0x39)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
statx$auto(0xffffffffffffffff, 0x0, 0xfffffffb, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000)
r2 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x44814}, 0x2004c0c4)
sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa507}, 0x800}, 0x7, 0x8)
io_uring_setup$auto(0x9, 0x0)
mmap$auto(0x0, 0x7, 0xdf, 0xeb1, 0x401, 0x8000)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)

5.373614008s ago: executing program 2 (id=2538):
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x20009, 0x4000000000db, 0x12, 0x400, 0x18002)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write$auto(0xffffffffffffffff, 0x0, 0xfff)
write$auto(r0, 0x0, 0x100000a3d9)
r1 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(r1, 0x0, 0x40000)
read$auto(r1, &(0x7f0000002300)='MAC802154_HWSIM\x00', 0xfdef)
mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
getcpu$auto(0x0, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0)
r2 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000100)='/dev/binderfs/binder1\x00', 0x0, 0x0)
ioctl$auto_BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
select$auto(0xe, 0x0, 0x0, 0x0, 0x0)
r3 = openat$auto_state_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x1e9482, 0x0)
read$auto_state_fops_(r3, &(0x7f0000000180)=""/61, 0xfffffeeb)
socket$nl_generic(0x10, 0x3, 0x10)
prctl$auto_SECCOMP_MODE_STRICT(0xf, 0x1, 0x0, 0x9, 0x2)
r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
write$auto(r4, &(0x7f0000000100)='7\x00\\\xa0\x04\xdb\xc3\x8cnI\x9c\t\xbck\x17\xfe_9\xdf\v\x9d\xf7\xa9+n\xf19\x8ba\xe38\xf7u~\r\x91p\x90x\xd9y\xef\x06\xafs\x90\xf0\xf9\xc3\'r\xac\x8d\\\xccM\xe3\x05\x87\x8c\x1beu\xa6\xab\xb2}\xb6\xb8\xa1\xb4\x98\x0f\x9b(8\xb9\xcb\x88\x0e\x99\x81f&\xe4\xe1\xf1\xe0iS\x93\xea\xa1\xb8\xa6T\xf4G\xb0m\xe5!\xa3\xda\x83\xc1\b\xb3\xce\x1bq\x03\xf7\t\x8f', 0x81)
getsockopt$auto_SO_COOKIE(r4, 0x8001, 0x39, 0x0, 0x0)
mmap$auto(0x9, 0x7, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000)
syslog$auto(0x2, &(0x7f0000000340)='7\x00\\\xa0\x04\xdb\xc3\x8cnI\x9c\t\xbck\x17\xfe_9\xdf\v\x9d\xf7\xa9+n\xf19\x8ba\xe38\xf7u~\r\x91p\x90x\xd9y\xef\x06\xafs\x90\xf0\xf9\xc3\'r\xac\x8d\\\xccM\xe3\x05\x87\x8c\x1beu\xa6\xab\xb2}\xb6\xb8\xa1\xb4\x98\x0f\x9b(8\xb9\xcb\x88\x0e\x99\x81f&\xe4\xe1\xf1\xe0iS\x93\xea\xa1\xb8\xa6T\xf4G\xb0m\xe5!\xa3\xda\x83\xc1\b\xb3\xce\x1bq\x03\xf7\t\x8f\xe3\xdfz\xd9\xb8-\xc0`\xf9\xfe\xc4r\xac', 0x8f7)
openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/config/target/core/alua/lu_gps/default_lu_gp/lu_gp_id\x00', 0x189002, 0x0)

4.880435759s ago: executing program 3 (id=2539):
write$auto(0xffffffffffffffff, &(0x7f0000000080)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94&\x81\xe2\x13\x8f\xea#\xf8F\xbbOO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\b\xc1\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(', 0xa)
unshare$auto(0x40000080)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
listen$auto(0x3, 0x81)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x1, 0x202000a, 0xfffffffc, 0xdc, 0xfffffffffffffffa, 0x8000)
r1 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
madvise$auto(0x0, 0x2003f2, 0x15)
syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x24048084)
madvise$auto(0x0, 0x200007, 0x19)
openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, 0x0, 0x103003, 0x0)
r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0)
ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0)
r3 = openat$auto_zero_fops_mem(0xffffffffffffff9c, 0x0, 0x80200, 0x0)
r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000380)='/proc/thread-self/net/snmp\x00', 0x40, 0x0)
pread64$auto(r4, 0x0, 0x80000000, 0x9fffffffd)
pread64$auto(r3, &(0x7f0000000240)='\x03W\x96l\x15\x0f\xff\x00'/21, 0x100000002, 0x100000001)
mq_notify$auto(0xffffffffffffffff, &(0x7f0000000180)={@sival_ptr=0x0, @inferred, 0x0, @_sigev_thread={0x0, 0x0}})
mq_timedsend$auto(r1, 0x0, 0x2, 0x9, 0x0)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
close_range$auto(0x2, 0x8, 0x0)

3.754503882s ago: executing program 2 (id=2540):
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
mmap$auto(0xffffffffffffffaf, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000)
connect$auto(0x3, &(0x7f0000000080)=@nl=@proc={0x10, 0x0, 0x25dfdbfe, 0x4}, 0x81)
mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
r2 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000002340)='/dev/binderfs/binder1\x00', 0x0, 0x0)
r3 = dup$auto(r2)
r4 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0x2000, 0x0)
ioctl$auto(r4, 0x81004523, r3)
close_range$auto(0x2, 0x8, 0x0)
r5 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/interrupts\x00', 0x18b202, 0x0)
pread64$auto(r5, 0x0, 0x400100000001, 0x1ff)
unshare$auto(0x40000080)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'veth0_macvtap\x00'})
socket(0x10, 0x3, 0x6)
mmap$auto(0x0, 0x7f, 0x1, 0xeb1, 0x401, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
fsconfig$auto_SHMEM_HUGE_FORCE(0xffffffffffffffff, 0x7, 0x0, &(0x7f00000001c0)="5b0fdf8e7220ade733b697e361a312e8797cf9bc410c090dd180de688ae19ee0f7d3ce7f185fa1b9c9867d234fdb5c62c6e305f1df4ca134c6413371cb668566fc407fc2b99e953d74e9fe557dc0d6dd24b7fd497737dfcd44938915c5131197660e57624aba5b26b726415e50", 0xfffffffffffffffe)
lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x9, 0x6, 0x63, 0x0, 0x0, 0x0, 0xac, 0x200, 0x2, 0x40000402, 0x9, 0x9, 0xffffffffffffffff, 0x6, 0x6, 0x200000100103})
sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}, 0x1, 0x0, 0x0, 0x2000c000}, 0x4004)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x130)
fallocate$auto(0x8000000000000003, 0x0, 0x2, 0x4cbd5d)
ptrace$auto(0x5, 0x0, 0xfffffffffffffffa, 0x8)

3.267689968s ago: executing program 3 (id=2541):
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0)
read$auto(0x3, 0x0, 0x8080)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000)
r0 = gettid()
socket(0xa, 0x1, 0x100)
write$auto(0x3, 0x0, 0xffd8)
swapoff$auto(&(0x7f0000000080)='-!+^\x00')
unshare$auto(0x40000080)
shmctl$auto_IPC_SET(0x4, 0x1, 0x0)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
msgctl$auto_IPC_SET(0x878, 0x1, 0x0)
shmctl$auto_SHM_INFO(0xd6d, 0xe, &(0x7f0000000600)={{0x8, 0x0, 0x0, 0x9, 0x8, 0x8, 0x4}, 0xa0000000, 0x48d, 0x9, 0x6, @inferred=r0, @inferred=r0, 0x3, 0x0, &(0x7f0000000400)="bb8022bf4469c46f1d0363e69a01b1bf8b9d188c195a4668aa6a7f1cb69b9d31f4cc5b60", &(0x7f0000000500)="c456ea14bcc0078b99b050557020ed93e6ad3a88159914d2845500c950a55be164272b7de524ca747d67ba95b5a47a434d9571c9b7a5d94be757fe27e39f193c6eb4c0b5ffc8a331321beb852dc6d9079b2b71aee750907da26b01f6790dfad24719a38b9da9c0ad0a8d6029d69b4adb4ff278d76e6233d4767917b1bff63cdf3387e68989bda78257447a1dc76198bb5d0f"})
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r1, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8', 0x100000a3d6)
openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x60042, 0x0)
add_key$auto_KEY_SPEC_USER_KEYRING(&(0x7f0000001c80)='\\\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc)
mkdir$auto(&(0x7f0000000100)='./file0\x00', 0xff)
openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x4a42, 0x0)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0x802, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/admmidi2\x00', 0x40080, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x10000000000001ff, 0x7, 0xd3e, 0x20, 0x9687, 0x100000000000003, 0x3c2a19d5, 0x6, 0x3, 0x62, 0x8, 0x7, 0x6d3f, 0x6, 0xa, 0xfffffffffffffffe]}, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xfffffffffffffffb, 0x1, 0x4, 0x3, 0x3, 0x3, 0xffffffffffffffff, 0x3, 0x8000000000400000, 0x3, 0x6d3c, 0x3, 0x2, 0x8000000000000006]}, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r2 = socket(0x10, 0x2, 0x0)
sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf251c"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a0027"], 0x1ac}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000)
sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x2000800)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc2}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)

3.168172758s ago: executing program 4 (id=2542):
mmap$auto(0x0, 0x20009, 0x3, 0xeb1, 0x401, 0x8000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
openat$auto_proc_pid_smaps_operations_internal(0xffffffffffffff9c, 0x0, 0x42000, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d)
mmap$auto(0xfffffffffffffff9, 0x2000a, 0x100000000009f, 0xeb2, 0x401, 0x8000)
openat$auto_evdev_fops_evdev(0xffffffffffffff9c, 0x0, 0x668601, 0x0)
mmap$auto(0x100000000, 0xf4, 0x7, 0xeb1, 0x69a5, 0xa800000000000000)
sysfs$auto(0x2, 0x41, 0x0)
fsopen$auto(0x0, 0x1)
sendmsg$auto_NFC_CMD_LLC_SET_PARAMS(0xffffffffffffffff, 0x0, 0xc015)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x1, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket(0x1e, 0x805, 0x0)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x802, 0x0)
ioctl$auto(0x3, 0x40045532, 0x38)
openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/pcmC1D0c\x00', 0x80, 0x0)
syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e</\xfd\x9b\xe4\x99G\xeaS\x9a\xadu(:\x94:\xaf\x06c=3>1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\x84q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa24X@\xadD\xf8\x9d\xf3 \xd2]\xc4\x13G\x1d\x04!\xc1\xeb.e$\xfb\xa3KU\xcf\xc1\x7fFD\x99\xf5v\v\x9dS\xc11P\xa3\xe9\xb0SqL\x85\xea\xb2\x9cY\x83.I\xca\x92\x1c\xc4\x13CV=\x92\x17c\x87iOt\x14On\x15=\v\xf0 \xc5\x8b~\xd6\xd4\xc7\xa3a\x1c\x06\x17\xb3\x88\x8c\xf1L\xba\x89a\xfd\xa5\xc6\x7fU\x00\xe5\x9b', 0x5)
fcntl$auto(0xffffffffffffffff, 0x402, 0x8000007fffffdf)
r0 = socket(0x11, 0x80003, 0x300)
setsockopt$auto(r0, 0x107, 0x1, 0x0, 0x8004)
close_range$auto(0x2, 0x8, 0x0)
select$auto(0x9, 0x0, 0x0, &(0x7f0000000040)={[0xc, 0x5, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x9, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0x1]}, 0x0)

2.494843332s ago: executing program 2 (id=2543):
openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cec27\x00', 0xc0600, 0x0)
openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, 0x0, 0x412080, 0x0)
mlockall$auto(0x3)
r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
r1 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
ioctl$auto_AUTOFS_IOC_EXPIRE(r1, 0x810c9365, &(0x7f0000000380)={{0x14, 0xffff}, 0x7, "13080202701b872609d89450bd4aa569777e919d33bc79a584f7418f0510c585b4c68cd8c287bc9fb3fc9dcf04d2097f0b4c1506221c1ba6d6746ac0d6a914f69afb18b3dbd4fbb6e4568f83cc7906c8ff68f047d7a6d4aa112dac177c6d58747c8811d86f2a4b0ce7bcfdfdd53af5611fea8aa6dbdacfba6f123b21635241d3091314063cdb5cfeaf31a458466af98ca486a09714982310d64887eba851e4fa682d13fe190deb2252963c546072b715970469b69186a0212c9aca5d57fd935e3e857e61196485196a810d7a48b331448586565a9aaafbb5b79f6b05e3fc867cd9182b581208933faf45040dca23a2e6c3995f79afdb697e6691ce8191ce56e5"})
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
sendmmsg$auto(0x3, 0x0, 0x787b, 0x7000000)
r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x20002, 0x0)
ioctl$auto_SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000000)="7f07")
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/scsi/scsi\x00', 0x80002, 0x0)
write$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f00000024c0)="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", 0xfff)
sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6)
statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x929, 0x4001, 0x7, 0x5, 0x100717e, 0x3, 0x7, 0x6, 0x7ff, 0xfffffffe, 0x80000001, 0x4, 0x200000000001, 0x1, 0xfffffffffffffffb, 0x8, 0x0, 0x2, 0x2, 0x864, 0xe, 0x22000, 0x200, 0x4, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, [0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x4000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffff4f3, 0x0, 0x0, 0x2f, 0x0, 0x0, 0xfffffffffffffffc]}, 0xa, 0xd)
bind$auto(r0, &(0x7f0000000080)=@vsock={0x28, 0x0, 0x2710, @local}, 0x800)
r3 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0)
write$auto_proc_clear_refs_operations_internal(r0, &(0x7f0000000000)="73d6cc4fdf406742386dd72ff1428a506f5cd946a3", 0x15)
ioctl$auto__ctl_fops_dm_ioctl(r3, 0xfffffff7effffd01, &(0x7f00000001c0))
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x100, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0)
r4 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000000), 0xc0040, 0x0)
ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, 0x0)
ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x37, 0xa, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x7, 0x3, 0x800, 0x80000023, 0x200000000000007, 0x6d42, 0xc, 0x2495dae0, 0x6]}, 0x0)
close_range$auto(0x2, 0x8, 0x0)
mlockall$auto(0x7)

2.19039581s ago: executing program 1 (id=2544):
process_vm_readv$auto(0x0, 0x0, 0x1, 0x0, 0x6, 0x0)
syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e</\xfd\x9b\xe4\x99G\xeaS\x9a\xadu(:\x94:\xaf\x06c=3>1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\x84q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa24X@\xadD\xf8\x9d\xf3 \xd2]\xc4\x13G\x1d\x04!\xc1\xeb.e$\xfb\xa3KU\xcf\xc1\x7fFD\x99\xf5v\v\x9dS\xc11P\xa3\xe9\xb0SqL\x85\xea\xb2\x9cY\x83.I\xca\x92\x1c\xc4\x13CV=\x92\x17c\x87iOt\x14On\x15=\v\xf0 \xc5\x8b~\xd6\xd4\xc7\xa3a\x1c\x06\x17\xb3\x88\x8c\xf1L\xba\x89a\xfd\xa5\xc6\x7fU\x00\xe5\x9b', 0x5)
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080))
fchdir$auto(r0)
mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x403, 0x8000)
statx$auto(0xffffff9c, 0x0, 0x1000, 0x1, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r1 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/kcore\x00', 0x28000, 0x0)
pread64$auto(r1, 0x0, 0x800003, 0x270)
mlockall$auto(0x7)
msgctl$auto_IPC_RMID(0x1, 0x0, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r2 = socket(0x2, 0x1, 0x106)
sendmmsg$auto(0x4, 0x0, 0x9a6, 0x230)
r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
write$auto(r3, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81)
sched_setaffinity$auto(0x0, 0xcf4d, &(0x7f00000000c0)=0xffffffffffffffff)
shmget$auto(0x100000000, 0x3, 0x79e56dc9)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000)
r4 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x3, 0x7)
accept4$auto(r4, 0x0, 0x0, 0x3)
r5 = epoll_create$auto(0x3e)
epoll_ctl$auto(r5, 0x1, r2, 0x0)
connect$auto(0x3, 0x0, 0x54)
r6 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/irq/6/smp_affinity\x00', 0xe282, 0x0)
write$auto(r6, &(0x7f0000000580)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3C', 0x4)

2.110053587s ago: executing program 4 (id=2545):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x0, 0xffffffffffff0005, 0x17)
madvise$auto(0x0, 0xffffffffffff0001, 0x15)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
mmap$auto(0x0, 0x400008, 0xdf, 0x8009b72, 0x2, 0x9000)
r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/acpi/wakeup\x00', 0x48041, 0x0)
io_uring_register$auto_IORING_UNREGISTER_RING_FDS(r0, 0x15, &(0x7f0000000000)="0b2b09dd6f6b129be2875e5793360cbc2a02e477886125ce7a37eae9425e8b45f887921e5be23186236c4a367cbdbb74e774885a2582cd11c5040fb8a74b01ebaff0df7f665126d6ba8f", 0x8)
mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0xf, 0x0, 0x94e)
socket(0xa, 0x1, 0x84)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/class/firmware/timeout\x00', 0x1a1942, 0x0)
mmap$auto(0x0, 0xfffffffffffffff1, 0x2, 0x17, 0xffffffffffffffff, 0x8000)
r1 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000080), 0x48180, 0x0)
ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000280)={{0x3, 0x1000, 0x1, 0x1, 0x8}, "654c6dbc7a4d30983899a7e1325b6a29ba1e184410ba9f74e82a3fa6c3ccf1bf"})
ioctl$auto_SNDRV_TIMER_IOCTL_STATUS32(r1, 0x80585414, &(0x7f0000000000)={0x675d529c, 0x9f7d, 0xfffffff1, 0x101, 0x6, 0x4, "1ec4c2336d0d5d8a5db102d8cd84eca696782c75e0cb2d4b8c400f6fdc12a84264800d00000035a29c7c1ebbdcd2fe5c88e17422928a5110f6e9fef8cac28588"})
move_pages$auto(0x0, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x2000, 0x0)
socket(0x9, 0x3, 0x39)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000200)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
write$auto(r2, &(0x7f0000000040)='7\x00\\\xa0\xa5$\x03\xcb\x12\xfa\b\x1c\tk', 0x81)
fstatfs$auto(0xffffffffffffffff, &(0x7f00000000c0)={0x391, 0x1, 0x6, 0x1, 0x4, 0x4, 0x4, {[0x9, 0x3]}, 0x8, 0xfffffffffffffffe, 0x0, [0x1000, 0x6b24002f, 0x7, 0xfffffffffffffffb]})
unshare$auto(0x400)
socket$nl_generic(0x10, 0x3, 0x10)

915.744631ms ago: executing program 2 (id=2546):
bind$auto(0x3, 0x0, 0x6a)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video43\x00', 0x129900, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket(0x1d, 0x2, 0x7)
r0 = socket(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0)
connect$auto(0x3, &(0x7f00000018c0)=@can, 0x18)
ppoll$auto(&(0x7f0000000200)={0xffffffffffffffff, 0x6, 0x6}, 0x8, 0x0, 0x0, 0x8)
openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video43\x00', 0x129900, 0x0)
select$auto(0x5, &(0x7f0000000080)={[0x400020000008, 0xfffffffffffffffc, 0x7, 0x6, 0xc, 0x3, 0x3, 0x1ffe000, 0x7, 0x2, 0x9, 0xf, 0xa657, 0x203, 0xd3, 0x1]}, 0x0, 0x0, 0x0)
select$auto(0x6, &(0x7f0000000100)={[0x1, 0x10, 0x2, 0x3, 0x1, 0x5, 0x6, 0xa0000000, 0x7f, 0x3, 0x7, 0x6, 0x4, 0x1, 0x3, 0x9]}, &(0x7f0000000180)={[0x7, 0x14e8, 0x3, 0x6, 0x4, 0x4, 0x4, 0x2, 0x2e, 0x3, 0x8, 0xffffffffffffff7f, 0x4, 0x80000000, 0x7, 0xf]}, &(0x7f0000000240)={[0x4, 0x101, 0x9a, 0x6, 0x7fffffff, 0x8, 0x8, 0x1, 0x0, 0x3, 0x81, 0x1, 0x5, 0x0, 0x1, 0x1]}, &(0x7f00000002c0)={0x6bb, 0x80000000})
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x8, 0x80000000000000df, 0x10004000eb1, 0x8, 0x8000008000)
socketpair$auto(0x1e, 0x5, 0x3, 0x0)
close_range$auto(0x2, 0x8, 0x0)
open(0x0, 0x22240, 0x155)
socket(0xa, 0x1, 0x84)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a)
getsockopt$auto(0xffffffffffffffff, 0x84, 0x2, 0x0, 0x0)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x14fa02, 0x0)
r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/net/sit0/statistics/tx_compressed\x00', 0x100, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000001c00)=""/4111, 0x100f)
sendfile$auto(0x3, r1, 0x0, 0x400000000006)
shutdown$auto(0x200000003, 0x2)
close_range$auto(0x2, 0x8, 0x0)

915.595835ms ago: executing program 3 (id=2547):
sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x80e1}, 0x24044805)
lstat$auto(0x0, &(0x7f0000000180)={0x10, 0x1fc5fc11, 0x3, 0x7, 0x0, 0x0, 0x0, 0x1000000006, 0x7, 0x8000000000000003, 0x100000000, 0x7fefffff, 0x1000000046, 0x0, 0x1, 0x3, 0x40000102})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x89fc, &(0x7f0000000040)={'bridge0\x00'})
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14f602, 0x0)
mmap$auto(0x0, 0x20012, 0xdd, 0x20eb1, 0xffffffffffffffff, 0x8000)
r1 = gettid()
rt_sigprocmask$auto(0x0, &(0x7f0000000000)={0xfffffffffffffe01}, 0x0, 0x8)
mq_open$auto(&(0x7f00000001c0)='\x12\xe6D\b\x9e\x00\x80\x8d\f\xb9w-\xbd!\x9eb\xed\xfb\x0f\xe5\x9dZ\xc2\xd1\x01wBV\x91\x8f_\xc0.\x84\xfe\x84\xd1se\x01\x06\x00\xb3\x13_Y&\xa9\x88\xe4\xa2\xb0V\x85\x92<\xb6\xdcT \\\xf2\v\xb1\xe2\xd8\xfa\xd8V\xe5\x00\xfa\xe9!\xc5<\xce\x18=\x06\xdagq\xb5\r\t\xb2\xde\x99\xd50\x89h\xc5\xba\xff\xc8u5<y\xa5\x97\x13\xef\xc4g\xc3\xa4&\x81I6\v\xcc\x00'/133, 0x62, 0x7, 0x0)
kill$auto(r1, 0x11)
r2 = gettid()
rt_sigtimedwait$auto(&(0x7f0000000100)={0xfffffffffffffbff}, 0x0, 0x0, 0x8)
r3 = mq_open$auto(&(0x7f00000001c0)='\x12\xe6D\b\x9e\x00\x80\x8d\f\xb9w-\xbd!\x9eb\xed\xfb\x0f\xe5\x9dZ\xc2\xd1\x01wBV\x91\x8f_\xc0.\x84\xfe\x84\xd1se\x01\x06\x00\xb3\x13_Y&\xa9\x88\xe4\xa2\xb0V\x85\x92<\xb6\xdcT \\\xf2\v\xb1\xe2\xd8\xfa\xd8V\xe5\x00\xfa\xe9!\xc5<\xce\x18=\x06\xdagq\xb5\r\t\xb2\xde\x99\xd50\x89h\xc5\xba\xff\xc8u5<y\xa5\x97\x13\xef\xc4g\xc3\xa4&\x81I6\v\xcc\x00'/133, 0x62, 0x7, 0x0)
mq_timedreceive$auto(r3, 0x0, 0x4dcd, 0x0, 0x0)
kill$auto(r2, 0x11)
mq_timedsend$auto(0xffffffffffffffff, &(0x7f0000000040)='/sys/kernel/debug/netdevsim/netdevsim1/psample/enable\x00', 0xe5d, 0x9, &(0x7f0000000280)={0x7, 0x7})
r4 = mq_open$auto(&(0x7f00000000c0)='\x12\xe6D\b\x9e\x00\x80\x8d\f\xb9w-\xbd!\x9eb\xed\xfb\x0f\xe5\x9dZ\xc2\xd1\x01wBV\x91\x8f_\xc0.\x84\xfe\x84\xd1se\x01\x06\x00\xb3\x13_Y&\xa9\x88\xe4\xa2\xb0V\x85\x92<\xb6\xdcT \\\xf2\v\xb1\xe2\xd8\xfa\xd8V\xe5\x00\xfa\xe9!\xc5<\xce\x18=\x06\xdagq\xb5\r\t\xb2\xde\x99\xd50\xbb\x192\x1c4\x86\xc0\xc1-\xd5\x10\xc3\xfc*[8\x89h\xc5\xba\xff\xc8u5<y\xa5\x97\x13\xef\xc4g\xc3\xa4&\x81I6\v\xcc\x00\x00', 0x62, 0xfffc, 0x0)
mq_timedsend$auto(r4, 0x0, 0x80, 0x9, 0x0)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x18ac1, 0x0)
mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000)
sysfs$auto(0x2, 0xd, 0x0)
r5 = fsopen$auto(0x0, 0x1)
fsconfig$auto(r5, 0x8, 0x0, 0x0, 0x0)
read$auto_usbfs_devices_fops_usb(r5, 0x0, 0x2d)
r6 = openat$auto_nsim_psample_enable_fops_psample(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/netdevsim/netdevsim1/psample/enable\x00', 0x169a02, 0x0)
write$auto_nsim_psample_enable_fops_psample(r6, &(0x7f00000005c0)='Y', 0x1)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)

610.594027ms ago: executing program 4 (id=2548):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
madvise$auto(0x0, 0xffffffffffff0005, 0x17)
unshare$auto(0x40000080)
mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0xffffffffffffffff, 0x300000000000)
setrlimit$auto(0xb, 0x0)
r0 = openat$auto_proc_pid_numa_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/numa_maps\x00', 0x22000, 0x0)
read$auto_proc_sessionid_operations_base(r0, &(0x7f00000000c0)=""/4096, 0x1000)
r1 = socket(0xa, 0x2, 0x73)
sendto$auto(r1, 0x0, 0x402, 0xfffffffe, &(0x7f0000000000)=@generic={0xa, "e2c483400200ff803636166b00"}, 0x1c)
socket(0xa, 0x801, 0x84)
mmap$auto(0x0, 0x20006, 0x4000000000df, 0xeb1, 0x4, 0x8000)
r2 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x28641, 0x0)
write$auto(r2, 0x0, 0x101)
ioctl$auto_SG_GET_NUM_WAITING(r2, 0x227d, 0x0)
setsockopt$auto(0x3, 0x10000000084, 0xd, 0x0, 0x8)
syz_genetlink_get_family_id$auto_l2tp(0x0, r1)
mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2)
r3 = openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f0000000440), 0x20100, 0x0)
ioctl$auto_LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
r4 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video48\x00', 0x18a041, 0x0)
syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000040), 0xffffffffffffffff)
move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000)
getsockopt$auto(0xffffffffffffffff, 0x119, 0x1, 0x0, 0x0)
epoll_ctl$auto(0xffffffffffffffff, 0x1, r4, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/bus/hid/drivers/hid-retrode/bind\x00', 0x32000, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0xc7f16bff2a10ba01, 0x0)
r5 = socket(0x1e, 0x2, 0x0)
getsockopt$auto(r5, 0x10f, 0x83, 0x0, 0x0)

409.245233ms ago: executing program 3 (id=2549):
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0)
mmap$auto(0x0, 0xf72, 0x3, 0x65d8, 0xfffffffffffffffa, 0x8)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/platform/dummy_hcd.0/usb1/1-0:1.0/usb1-port1/quirks\x00', 0x103a42, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket(0x1d, 0x2, 0x7)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', <r2=>0x0})
bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r2}, 0x6a)
sendto$auto(r1, 0x0, 0x6fffff9, 0xfffffff8, &(0x7f0000000440)=@can, 0x36)
write$auto(r0, &(0x7f0000000040)='//\xf2\x00', 0x80000000)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x0, 0xfffff004, 0x2)
socket(0xa, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket(0xa, 0x2, 0x88)
bpf$auto_BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)=@task_fd_query={0x0, 0xffffffffffffffff, 0x5, 0x4, 0x6, 0x3373, 0xffffffffffffffff, 0x4}, 0x8)
r4 = socket(0x2b, 0x1, 0x1)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
io_uring_register$auto(r4, 0x2, &(0x7f00000000c0), 0x1)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bond0\x00', <r7=>0x0})
bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r7, r6, 0x8, 0xfc, r3, @relative_fd, 0xe600}, 0xf)
bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x40000000000005, 0xffffffffffffffff, 0x0, 0x1}, 0x4)
bpf$auto(0x3, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffff, 0x0, 0x3}, 0xc)

104.001316ms ago: executing program 3 (id=2550):
close$auto(0xffffffffffffffff)
madvise$auto(0x0, 0x7fffffffffffffff, 0xa)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macsec0\x00', <r2=>0x0})
ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0)
r3 = socket(0xa, 0x1, 0x84)
r4 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000300), r3)
r5 = openat$auto_ptdump_fops_(0xffffffffffffff9c, &(0x7f0000000340), 0x140081, 0x0)
sendmsg$auto_NETDEV_CMD_BIND_RX(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB="90000000", @ANYRES16=r4, @ANYBLOB="00042dbd7000fcdbdf250d0000000400028008000300", @ANYRES32=r3, @ANYBLOB="3400028008000300060000000800010009000000080001000300000008000300070000000800010000000000080001aded00000008000300", @ANYRES32=r5, @ANYBLOB="04000280040002802400028008000300ff7f000008000100400000000800010006000000080003000000000008000100", @ANYRES32=r2, @ANYBLOB], 0x90}, 0x1, 0x0, 0x0, 0x4805}, 0x8000)
getsockopt$auto(r3, 0x84, 0x80, 0x0, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x3, 0x100)
lstat$auto(0x0, 0x0)
sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4008810}, 0x800)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1d"], 0x1ac}, 0x1, 0x0, 0x0, 0x8000}, 0x804)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x89}, 0x7}, 0x3, 0x0)
syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000000080), r3)
capset$auto(0x0, &(0x7f00000001c0)={0xfffffffb, 0x2002, 0x9})
r6 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/ip_forward\x00', 0x2002, 0x0)
r7 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/kernel/threads-max\x00', 0x20202, 0x0)
sendfile$auto(r6, r7, 0x0, 0x4)

103.278958ms ago: executing program 1 (id=2558):
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00211459a600fbdbdf250200000008000300000000001b0004"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0)
futex_requeue$auto(&(0x7f0000000040)={0xb, 0x6, 0x2, 0x2000000}, 0x0, 0xf, 0x9)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000)
r0 = socket(0x2, 0x2, 0x0)
bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50)
r1 = io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xe, 0x2, 0x6, 0x5, 0x8, 0xffffffffffffffff, [], {0xd74c, 0x6, 0x2, 0x29f, 0x100, 0x7f, 0x101, 0x6, 0x2}, {0xff, 0x1, 0x10001, 0x7, 0x1, 0x40, 0x76c5, 0x400005, 0x100000005}})
io_uring_enter$auto(r1, 0x9, 0x820e, 0x6, 0x0, 0x18)
ioctl$auto_EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r0, 0x2, 0x2, 0xc2, 0x2000000000000002})
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0xe8, 0x9, 0x2, 0x1, 0x5, 0x4, 0x15f4da0e, 0x8, 0x9, 0x100000000000000c, 0x8, 0x1, 0xfca, 0x9, 0x2, 0x4000000000000d]}, 0x0)
sendmsg$auto_NL80211_CMD_SET_STATION(r0, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x110000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="100026bd"], 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x40080c0)
pwrite64$auto(0xc8, &(0x7f0000000140)='\vX\xb5n\x91p\xe6\x1eRNM\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00,\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbe\x01\x00\x00\x00\'\x03\x00\x00\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^B\xb8\xe4j\t,\xe4\x90\xcc\x9d\xc5\x0fo\x84\xf4\x89\v\xea\x1b\x95\xafQ;CL\"\x01@\x00\x00\x00\x00\f\x00\xc0\x13\xc8\xe2\xae\xf5\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8d\x81\x81O*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,8\x93\xba\x88\x93\x9d\xb6\x1a\x7f\xc0%\xb0\x83ROJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd6eWj\xdc\xac\x88\xf0\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00\x00\xff\xff\x00'/242, 0xfdf0, 0x39)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
statx$auto(0xffffffffffffffff, 0x0, 0xfffffffb, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000)
r2 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x44814}, 0x2004c0c4)
sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa507}, 0x800}, 0x7, 0x8)
io_uring_setup$auto(0x9, 0x0)
mmap$auto(0x0, 0x7, 0xdf, 0xeb1, 0x401, 0x8000)
close_range$auto(0xffffffffffffffff, 0x8, 0x3)

0s ago: executing program 2 (id=2551):
openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sg0\x00', 0x8001, 0x0)
r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0)
ioctl$auto_SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000040))
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/oom_adj\x00', 0x48402, 0x0)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_nl80211(0x0, r2)
syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff)
mmap$auto(0x2000, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2)
r3 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0)
ioctl$auto_PAGEMAP_SCAN(r3, 0xc0606610, &(0x7f000000c380)={0x60, 0x0, 0x100000, 0x7fffffffefff, 0xfffffffffffffffe, 0x1, 0x8, 0xbff, 0x2c, 0x2c, 0x3, 0x2})
syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff)
ioctl$auto_SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000080))
r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D0\x00', 0x8001, 0x0)
write$auto(r4, &(0x7f0000000100)='d>*\xd2x\xc7\xbf\xff\x9a\xc01(\x00iM\x9c\bAa\x9e\xe98\xee\x15\xd3\xc5v\x99\f|\xe3\xbf\xd9\xf4C\x14A\xe6k\x105\xee\xc5\xaa$\x16\t?g\xb8b\x12\v*\xf9@B\xd0\xd2\x99{\x8b^\xff@\x83\x02Tvt\xc1_\x98\x9f\x16\xd5Is', 0x100000a3da)
keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff)
mlockall$auto(0x800000000000005)
msync$auto(0x1ffff000, 0x1800000ff000000, 0x400000004)
r5 = openat$auto_proc_pid_smaps_operations_internal(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/smaps\x00', 0x42000, 0x0)
read$auto_proc_pid_smaps_operations_internal(r5, &(0x7f00000002c0)=""/190, 0xfffffe39)

kernel console output (not intermixed with test programs):

serial'
[  829.009912][T14277] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1525'.
[  829.139503][T14277] netlink: 354 bytes leftover after parsing attributes in process `syz.1.1525'.
[  829.801235][T14234] Process accounting resumed
[  834.400506][ T5835] Bluetooth: hci1: unexpected event 0x16 length: 440 > 6
[  837.980560][T14371] netlink: 334 bytes leftover after parsing attributes in process `syz.3.1542'.
[  843.251651][ T5835] Bluetooth: hci0: unexpected event 0x16 length: 440 > 6
[  843.380453][T14415] debugfs: 'ttyS2' already exists in 'caif_serial'
[  847.487070][T14464] Invalid ELF header magic: != ELF
[  849.223273][T14465] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  849.299861][T14465] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  849.370523][T14465] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  849.437560][T14465] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  849.458446][ T5835] Bluetooth: hci0: command 0x0c1a tx timeout
[  851.378529][ T5835] Bluetooth: hci1: command 0x0c1a tx timeout
[  851.384549][ T5835] Bluetooth: hci2: command 0x0c1a tx timeout
[  851.463110][T14518] Bluetooth: hci3: command 0x0c1a tx timeout
[  853.993440][T14542] FAULT_INJECTION: forcing a failure.
[  853.993440][T14542] name failslab, interval 1, probability 0, space 0, times 0
[  854.124270][T14542] CPU: 0 UID: 0 PID: 14542 Comm: syz.3.1572 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  854.124298][T14542] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  854.124304][T14542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  854.124313][T14542] Call Trace:
[  854.124319][T14542]  <TASK>
[  854.124325][T14542]  dump_stack_lvl+0x100/0x190
[  854.124355][T14542]  should_fail_ex.cold+0x5/0xa
[  854.124373][T14542]  should_failslab+0xc2/0x120
[  854.124390][T14542]  kmem_cache_alloc_noprof+0x7b/0x6e0
[  854.124412][T14542]  ? alloc_empty_file+0x55/0x1c0
[  854.124432][T14542]  alloc_empty_file+0x55/0x1c0
[  854.124449][T14542]  alloc_file_pseudo+0x13a/0x230
[  854.124467][T14542]  ? __pfx_alloc_file_pseudo+0x10/0x10
[  854.124500][T14542]  __anon_inode_getfile+0xe8/0x280
[  854.124519][T14542]  ? kasan_save_track+0x14/0x30
[  854.124544][T14542]  sync_file_alloc+0x65/0x160
[  854.124637][T14542]  sync_file_create+0x17/0xf0
[  854.124651][T14542]  sw_sync_ioctl+0x849/0xf80
[  854.124670][T14542]  ? find_held_lock+0x2b/0x80
[  854.124685][T14542]  ? __pfx_sw_sync_ioctl+0x10/0x10
[  854.124707][T14542]  ? __pfx_sw_sync_ioctl+0x10/0x10
[  854.124723][T14542]  __x64_sys_ioctl+0x18e/0x210
[  854.124744][T14542]  do_syscall_64+0x106/0xf80
[  854.124765][T14542]  ? clear_bhb_loop+0x40/0x90
[  854.124783][T14542]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  854.124797][T14542] RIP: 0033:0x7f650ed9c799
[  854.124811][T14542] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  854.124824][T14542] RSP: 002b:00007f650fca8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  854.124838][T14542] RAX: ffffffffffffffda RBX: 00007f650f015fa0 RCX: 00007f650ed9c799
[  854.124848][T14542] RDX: 0000200000000080 RSI: 00000000c0285700 RDI: 0000000000000009
[  854.124857][T14542] RBP: 00007f650ee32c99 R08: 0000000000000000 R09: 0000000000000000
[  854.124866][T14542] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  854.124875][T14542] R13: 00007f650f016038 R14: 00007f650f015fa0 R15: 00007ffdfe7d1ba8
[  854.124894][T14542]  </TASK>
[  859.521407][ T5828] Bluetooth: hci0: unexpected event 0x16 length: 440 > 6
[  859.538743][T14518] Bluetooth: hci4: Opcode 0x0c03 failed: -110
[  860.471646][T14573] Process accounting paused
[  861.869818][T14619] netlink: 'syz.2.1585': attribute type 1 has an invalid length.
[  864.546076][T14650] Console: switching to colour frame buffer device 128x48
[  870.506077][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[  870.523123][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[  880.539523][T14813] kvm: kvm [14812]: vcpu2, guest rIP: 0xfff0 Unhandled RDMSR(0x40000085)
[  883.311601][T14849] Invalid ELF header magic: != ELF
[  890.618275][T14923] Process accounting resumed
[  891.624708][T14934] FAULT_INJECTION: forcing a failure.
[  891.624708][T14934] name failslab, interval 1, probability 0, space 0, times 0
[  891.732713][T14934] CPU: 0 UID: 0 PID: 14934 Comm: syz.1.1624 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  891.732741][T14934] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  891.732747][T14934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  891.732757][T14934] Call Trace:
[  891.732762][T14934]  <TASK>
[  891.732769][T14934]  dump_stack_lvl+0x100/0x190
[  891.732797][T14934]  should_fail_ex.cold+0x5/0xa
[  891.732814][T14934]  should_failslab+0xc2/0x120
[  891.732830][T14934]  kmem_cache_alloc_noprof+0x7b/0x6e0
[  891.732850][T14934]  ? alloc_empty_file+0x55/0x1c0
[  891.732879][T14934]  alloc_empty_file+0x55/0x1c0
[  891.732897][T14934]  alloc_file_pseudo+0x13a/0x230
[  891.732916][T14934]  ? __pfx_alloc_file_pseudo+0x10/0x10
[  891.732939][T14934]  __anon_inode_getfile+0xe8/0x280
[  891.732956][T14934]  ? kasan_save_track+0x14/0x30
[  891.732978][T14934]  sync_file_alloc+0x65/0x160
[  891.732993][T14934]  sync_file_create+0x17/0xf0
[  891.733007][T14934]  sw_sync_ioctl+0x849/0xf80
[  891.733024][T14934]  ? find_held_lock+0x2b/0x80
[  891.733038][T14934]  ? __pfx_sw_sync_ioctl+0x10/0x10
[  891.733061][T14934]  ? __pfx_sw_sync_ioctl+0x10/0x10
[  891.733078][T14934]  __x64_sys_ioctl+0x18e/0x210
[  891.733099][T14934]  do_syscall_64+0x106/0xf80
[  891.733119][T14934]  ? clear_bhb_loop+0x40/0x90
[  891.733136][T14934]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  891.733151][T14934] RIP: 0033:0x7fbd2db9c799
[  891.733164][T14934] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  891.733177][T14934] RSP: 002b:00007fbd2eb10028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  891.733192][T14934] RAX: ffffffffffffffda RBX: 00007fbd2de15fa0 RCX: 00007fbd2db9c799
[  891.733201][T14934] RDX: 0000200000000080 RSI: 00000000c0285700 RDI: 0000000000000009
[  891.733210][T14934] RBP: 00007fbd2dc32c99 R08: 0000000000000000 R09: 0000000000000000
[  891.733218][T14934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  891.733227][T14934] R13: 00007fbd2de16038 R14: 00007fbd2de15fa0 R15: 00007ffec3cf9e58
[  891.733246][T14934]  </TASK>
[  899.036082][T15013] FAULT_INJECTION: forcing a failure.
[  899.036082][T15013] name failslab, interval 1, probability 0, space 0, times 0
[  899.539175][T15013] CPU: 0 UID: 0 PID: 15013 Comm: syz.1.1634 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  899.539203][T15013] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  899.539209][T15013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  899.539218][T15013] Call Trace:
[  899.539223][T15013]  <TASK>
[  899.539229][T15013]  dump_stack_lvl+0x100/0x190
[  899.539256][T15013]  should_fail_ex.cold+0x5/0xa
[  899.539274][T15013]  should_failslab+0xc2/0x120
[  899.539289][T15013]  __kmalloc_cache_noprof+0x7a/0x6f0
[  899.539308][T15013]  ? sctp_auth_shkey_create+0x9e/0x210
[  899.539425][T15013]  sctp_auth_shkey_create+0x9e/0x210
[  899.539446][T15013]  sctp_endpoint_new+0x589/0xb20
[  899.539469][T15013]  ? __pfx_sctp_endpoint_new+0x10/0x10
[  899.539492][T15013]  ? lockdep_init_map_type+0x5c/0x250
[  899.539514][T15013]  sctp_init_sock+0xe2b/0x1300
[  899.539533][T15013]  ? __pfx_sctp_v6_init_sock+0x10/0x10
[  899.539552][T15013]  sctp_v6_init_sock+0x16/0x70
[  899.539570][T15013]  ? __pfx_sctp_v6_init_sock+0x10/0x10
[  899.539589][T15013]  inet6_create+0xb21/0x12b0
[  899.539619][T15013]  ? inet6_create+0x7f/0x12b0
[  899.539641][T15013]  __sock_create+0x339/0x860
[  899.539661][T15013]  inet_ctl_sock_create+0x94/0x230
[  899.539677][T15013]  ? __pfx_inet_ctl_sock_create+0x10/0x10
[  899.539692][T15013]  ? timer_init_key+0x150/0x340
[  899.539711][T15013]  ? __pfx_sctp_ctrlsock_init+0x10/0x10
[  899.539729][T15013]  sctp_ctrlsock_init+0x40/0xd0
[  899.539747][T15013]  ops_init+0x1e2/0x5f0
[  899.539800][T15013]  setup_net+0x118/0x3a0
[  899.539821][T15013]  ? __pfx_setup_net+0x10/0x10
[  899.539840][T15013]  ? lockdep_init_map_type+0x5c/0x250
[  899.539859][T15013]  ? mutex_init_lockep+0x110/0x150
[  899.539880][T15013]  copy_net_ns+0x46f/0x7c0
[  899.539904][T15013]  create_new_namespaces+0x3ea/0xac0
[  899.539924][T15013]  unshare_nsproxy_namespaces+0xc3/0x1f0
[  899.539940][T15013]  ksys_unshare+0x473/0xad0
[  899.539959][T15013]  ? __pfx_ksys_unshare+0x10/0x10
[  899.539983][T15013]  __x64_sys_unshare+0x31/0x40
[  899.539999][T15013]  do_syscall_64+0x106/0xf80
[  899.540018][T15013]  ? clear_bhb_loop+0x40/0x90
[  899.540036][T15013]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  899.540050][T15013] RIP: 0033:0x7fbd2db9c799
[  899.540063][T15013] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  899.540077][T15013] RSP: 002b:00007fbd2eaef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  899.540092][T15013] RAX: ffffffffffffffda RBX: 00007fbd2de16090 RCX: 00007fbd2db9c799
[  899.540101][T15013] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080
[  899.540110][T15013] RBP: 00007fbd2dc32c99 R08: 0000000000000000 R09: 0000000000000000
[  899.540119][T15013] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  899.540127][T15013] R13: 00007fbd2de16128 R14: 00007fbd2de16090 R15: 00007ffec3cf9e58
[  899.540146][T15013]  </TASK>
[  901.248227][T13866] usb usb40-port2: attempt power cycle
[  902.010467][T13866] usb usb40-port2: unable to enumerate USB device
[  907.807128][   T30] audit: type=1800 audit(4294967351.617:21): pid=15131 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1649" name="dbroot" dev="configfs" ino=622601 res=0 errno=0
[  908.497482][T15131] zswap: compressor  not available
[  909.756919][   T30] audit: type=1807 audit(4294967353.566:22): UNKNOWN=0"û]$|Ë1jë0B|d™¹ýÓ‰OŸ¬+ö×/ÉéxÔóÈõWÓ¦–Ó^¸´gq%ḦrêOŽ res=0
[  909.903648][   T30] audit: type=1802 audit(4294967353.676:23): pid=15148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.2.1651" res=0 errno=0
[  909.962698][T15149] ima: policy update failed
[  910.133451][   T30] audit: type=1802 audit(4294967353.936:24): pid=15149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.1651" res=0 errno=0
[  912.433244][T15163] netlink: 206 bytes leftover after parsing attributes in process `syz.1.1654'.
[  913.538196][   T10] usb usb40-port2: attempt power cycle
[  914.186801][   T10] usb usb40-port2: unable to enumerate USB device
[  916.118445][T14518] Bluetooth: hci4: Opcode 0x0c03 failed: -110
[  921.967871][T15229] Process accounting paused
[  925.881712][T14518] Bluetooth: hci4: Opcode 0x0c03 failed: -110
[  931.967679][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[  931.977255][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[  934.556953][T15368] [U]  
[  934.559942][T15368] [U] 
[  934.562628][T15368] [U] 
[  934.565298][T15368] [U] 
[  934.678405][T15368] [U] 
[  934.681108][T15368] [U] 
[  934.683876][T15368] [U] 
[  934.686548][T15368] [U] 
[  934.949366][T15368] [U] 
[  934.952073][T15368] [U] 
[  934.954924][T15368] [U] 
[  934.957588][T15368] [U] 
[  935.137331][T15368] [U] 
[  937.980623][T15411] FAULT_INJECTION: forcing a failure.
[  937.980623][T15411] name failslab, interval 1, probability 0, space 0, times 0
[  938.177719][T15411] CPU: 0 UID: 0 PID: 15411 Comm: syz.1.1695 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  938.177746][T15411] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  938.177752][T15411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  938.177761][T15411] Call Trace:
[  938.177767][T15411]  <TASK>
[  938.177773][T15411]  dump_stack_lvl+0x100/0x190
[  938.177800][T15411]  should_fail_ex.cold+0x5/0xa
[  938.177817][T15411]  should_failslab+0xc2/0x120
[  938.177833][T15411]  kmem_cache_alloc_lru_noprof+0x80/0x6e0
[  938.177854][T15411]  ? alloc_inode+0x183/0x250
[  938.177871][T15411]  ? stashed_dentry_get+0x10a/0x2c0
[  938.177885][T15411]  ? stashed_dentry_get+0x10a/0x2c0
[  938.177902][T15411]  alloc_inode+0x183/0x250
[  938.177920][T15411]  path_from_stashed+0x25b/0x750
[  938.177938][T15411]  pidfs_alloc_file+0xf8/0x290
[  938.177960][T15411]  ? __pfx_pidfs_alloc_file+0x10/0x10
[  938.177985][T15411]  pidfd_prepare+0x123/0x200
[  938.178002][T15411]  __x64_sys_pidfd_open+0x105/0x1a0
[  938.178022][T15411]  ? __pfx___x64_sys_pidfd_open+0x10/0x10
[  938.178045][T15411]  do_syscall_64+0x106/0xf80
[  938.178064][T15411]  ? clear_bhb_loop+0x40/0x90
[  938.178081][T15411]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  938.178096][T15411] RIP: 0033:0x7fbd2db9c799
[  938.178109][T15411] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  938.178123][T15411] RSP: 002b:00007fbd2eb10028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b2
[  938.178136][T15411] RAX: ffffffffffffffda RBX: 00007fbd2de15fa0 RCX: 00007fbd2db9c799
[  938.178146][T15411] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001
[  938.178154][T15411] RBP: 00007fbd2dc32c99 R08: 0000000000000000 R09: 0000000000000000
[  938.178162][T15411] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  938.178170][T15411] R13: 00007fbd2de16038 R14: 00007fbd2de15fa0 R15: 00007ffec3cf9e58
[  938.178188][T15411]  </TASK>
[  938.609017][T15422] =======================================================
[  938.609017][T15422] WARNING: The mand mount option has been deprecated and
[  938.609017][T15422]          and is ignored by this kernel. Remove the mand
[  938.609017][T15422]          option from the mount to silence this warning.
[  938.609017][T15422] =======================================================
[  941.145693][T15422] kexec: Could not allocate control_code_buffer
[  943.154483][   T30] audit: type=1800 audit(4294968409.941:25): pid=15474 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1705" name="dbroot" dev="configfs" ino=659155 res=0 errno=0
[  948.494595][T15528] sg_write: process 2020 (syz.3.1714) changed security contexts after opening file descriptor, this is not allowed.
[  949.371107][T15539] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1716'.
[  949.568012][T15539] ipvlan0: entered promiscuous mode
[  949.621337][T15539] ipvlan0: entered allmulticast mode
[  953.762185][T15573] Process accounting resumed
[  957.275881][T15633] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1733'.
[  964.792896][T15730] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1745'.
[  964.891575][T15730] netlink: 'syz.0.1745': attribute type 1 has an invalid length.
[  965.022474][T15730] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1745'.
[  974.529014][T15839] vivid-007: =================  START STATUS  =================
[  974.577516][T15839] vivid-007: Generate PTS: true
[  974.627685][T15839] vivid-007: Generate SCR: true
[  974.632751][T15839] tpg source WxH: 320x240 (Y'CbCr)
[  974.738451][T15839] tpg field: 1
[  974.741858][T15839] tpg crop: (0,0)/320x240
[  974.810259][T15839] tpg compose: (0,0)/320x240
[  974.814912][T15839] tpg colorspace: 8
[  975.017150][T15839] tpg transfer function: 0/0
[  975.022044][T15839] tpg Y'CbCr encoding: 0/0
[  975.340414][T15839] tpg quantization: 0/0
[  975.344639][T15839] tpg RGB range: 0/2
[  975.497121][T15839] vivid-007: ==================  END STATUS  ==================
[  978.193570][T15880] Invalid ELF header magic: != ELF
[  978.948367][T14518] Bluetooth: hci4: Opcode 0x0c03 failed: -110
[  981.662162][T15916] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1773'.
[  981.916551][T15922] netlink: 'syz.0.1773': attribute type 1 has an invalid length.
[  982.156148][T15922] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1773'.
[  982.747090][T15935] random: crng reseeded on system resumption
[  983.072436][T15947] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.1.1778: iget: checksum invalid
[  983.151029][T15946] netlink: 'syz.0.1777': attribute type 1 has an invalid length.
[  983.512315][T15947] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74
[  983.951390][T15947] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.1.1778: iget: checksum invalid
[  984.199330][T15650] Process accounting paused
[  984.226276][T15947] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74
[  984.674088][T15947] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.1.1778: iget: checksum invalid
[  984.894603][T15947] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74
[  985.172195][T15947] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.1.1778: iget: checksum invalid
[  985.336925][T15947] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74
[  985.501332][T15947] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74
[  985.621326][T15947] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  990.803055][T16013] netlink: 342 bytes leftover after parsing attributes in process `syz.0.1786'.
[  991.054325][T16014] FAULT_INJECTION: forcing a failure.
[  991.054325][T16014] name failslab, interval 1, probability 0, space 0, times 0
[  991.459772][T16014] CPU: 0 UID: 0 PID: 16014 Comm: syz.0.1786 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[  991.459800][T16014] Tainted: [U]=USER, [L]=SOFTLOCKUP
[  991.459806][T16014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  991.459815][T16014] Call Trace:
[  991.459821][T16014]  <TASK>
[  991.459829][T16014]  dump_stack_lvl+0x100/0x190
[  991.459859][T16014]  should_fail_ex.cold+0x5/0xa
[  991.459877][T16014]  should_failslab+0xc2/0x120
[  991.459894][T16014]  kmem_cache_alloc_noprof+0x7b/0x6e0
[  991.459916][T16014]  ? security_inode_alloc+0x3b/0x2c0
[  991.459932][T16014]  ? lockdep_init_map_type+0x5c/0x250
[  991.459953][T16014]  security_inode_alloc+0x3b/0x2c0
[  991.459976][T16014]  inode_init_always_gfp+0xced/0x1040
[  991.459995][T16014]  alloc_inode+0x8e/0x250
[  991.460014][T16014]  path_from_stashed+0x25b/0x750
[  991.460028][T16014]  ? do_raw_spin_unlock+0x145/0x1e0
[  991.460052][T16014]  ns_get_path+0x60/0x80
[  991.460067][T16014]  proc_ns_get_link+0x121/0x230
[  991.460087][T16014]  ? __pfx_proc_ns_get_link+0x10/0x10
[  991.460108][T16014]  ? atime_needs_update+0x8b/0x6b0
[  991.460128][T16014]  pick_link+0xd17/0x13c0
[  991.460148][T16014]  ? __pfx_proc_ns_get_link+0x10/0x10
[  991.460169][T16014]  step_into_slowpath+0x9ba/0xf90
[  991.460193][T16014]  ? __pfx_step_into_slowpath+0x10/0x10
[  991.460213][T16014]  ? find_held_lock+0x2b/0x80
[  991.460231][T16014]  path_openat+0xf95/0x31a0
[  991.460251][T16014]  ? __pfx_path_openat+0x10/0x10
[  991.460272][T16014]  do_file_open+0x20e/0x430
[  991.460287][T16014]  ? __pfx_do_file_open+0x10/0x10
[  991.460314][T16014]  ? alloc_fd+0x476/0x790
[  991.460328][T16014]  ? do_getname+0x191/0x390
[  991.460347][T16014]  do_sys_openat2+0x10d/0x1e0
[  991.460365][T16014]  ? __pfx_do_sys_openat2+0x10/0x10
[  991.460389][T16014]  __x64_sys_openat+0x12d/0x210
[  991.460407][T16014]  ? __pfx___x64_sys_openat+0x10/0x10
[  991.460431][T16014]  do_syscall_64+0x106/0xf80
[  991.460452][T16014]  ? clear_bhb_loop+0x40/0x90
[  991.460470][T16014]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  991.460486][T16014] RIP: 0033:0x7f435bb5cfce
[  991.460498][T16014] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  991.460512][T16014] RSP: 002b:00007f435ca7aec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  991.460527][T16014] RAX: ffffffffffffffda RBX: 00007f435ca7b6c0 RCX: 00007f435bb5cfce
[  991.460536][T16014] RDX: 0000000000000002 RSI: 00007f435ca7af90 RDI: ffffffffffffff9c
[  991.460545][T16014] RBP: 00007f435bc32c99 R08: 0000000000000000 R09: 0000000000000000
[  991.460553][T16014] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  991.460562][T16014] R13: 00007f435be16128 R14: 00007f435be16090 R15: 00007ffd99d0ea98
[  991.460581][T16014]  </TASK>
[  992.361319][T16028] netlink: 'syz.3.1787': attribute type 4 has an invalid length.
[  992.651530][T16028] netlink: 'syz.3.1787': attribute type 1 has an invalid length.
[  993.535541][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[  993.541976][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[  994.106157][T16041] Invalid ELF header magic: != ELF
[  999.922484][T16066] zswap: compressor  not available
[ 1007.008515][   T30] audit: type=1800 audit(4294968473.759:26): pid=16151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1806" name="lu_gp_id" dev="configfs" ino=722303 res=0 errno=0
[ 1007.030355][T16151] kstrtoul() returned -22 for lu_gp_id
[ 1007.333159][T16147] zswap: compressor  not available
[ 1008.023443][T16161] netlink: 504 bytes leftover after parsing attributes in process `syz.0.1808'.
[ 1008.095966][T16166] scsi_dev_info_list_add_str: bad dev info string 'ñ' '' ''
[ 1008.431033][T16170] netlink: 350 bytes leftover after parsing attributes in process `syz.0.1808'.
[ 1009.152241][T16187] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1810'.
[ 1009.606885][T16197] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1812'.
[ 1009.721986][T16197] netlink: 354 bytes leftover after parsing attributes in process `syz.2.1812'.
[ 1010.210154][   T30] audit: type=1800 audit(4294968476.967:27): pid=16204 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1814" name="dbroot" dev="configfs" ino=725139 res=0 errno=0
[ 1013.408697][T16235] __vm_enough_memory: pid: 16235, comm: syz.3.1819, bytes: 4398046511104 not enough memory for the allocation
[ 1014.371038][T16231] Process accounting resumed
[ 1016.398138][T16281] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input29
[ 1017.367981][T16286] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input30
[ 1018.930649][T16319] FAULT_INJECTION: forcing a failure.
[ 1018.930649][T16319] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1019.088029][T16319] CPU: 0 UID: 0 PID: 16319 Comm: syz.3.1829 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[ 1019.088056][T16319] Tainted: [U]=USER, [L]=SOFTLOCKUP
[ 1019.088062][T16319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1019.088071][T16319] Call Trace:
[ 1019.088076][T16319]  <TASK>
[ 1019.088082][T16319]  dump_stack_lvl+0x100/0x190
[ 1019.088109][T16319]  should_fail_ex.cold+0x5/0xa
[ 1019.088127][T16319]  _copy_from_user+0x2e/0xd0
[ 1019.088146][T16319]  copy_mount_options+0x76/0x190
[ 1019.088167][T16319]  __x64_sys_mount+0x1ab/0x310
[ 1019.088185][T16319]  ? __pfx___x64_sys_mount+0x10/0x10
[ 1019.088206][T16319]  do_syscall_64+0x106/0xf80
[ 1019.088225][T16319]  ? clear_bhb_loop+0x40/0x90
[ 1019.088243][T16319]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1019.088257][T16319] RIP: 0033:0x7f650ed9c799
[ 1019.088269][T16319] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1019.088283][T16319] RSP: 002b:00007f650fc87028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 1019.088297][T16319] RAX: ffffffffffffffda RBX: 00007f650f016090 RCX: 00007f650ed9c799
[ 1019.088307][T16319] RDX: 0000200000000240 RSI: 0000000000000000 RDI: 0000200000000180
[ 1019.088315][T16319] RBP: 00007f650ee32c99 R08: 0000200000000280 R09: 0000000000000000
[ 1019.088324][T16319] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000
[ 1019.088332][T16319] R13: 00007f650f016128 R14: 00007f650f016090 R15: 00007ffdfe7d1ba8
[ 1019.088350][T16319]  </TASK>
[ 1019.259813][T16317] binder: 16313:16317 ioctl c018620c 0 returned -1
[ 1024.671139][T16383] netlink: 'syz.1.1841': attribute type 1 has an invalid length.
[ 1024.901054][T16383] netlink: 33 bytes leftover after parsing attributes in process `syz.1.1841'.
[ 1027.176683][T16407] FAULT_INJECTION: forcing a failure.
[ 1027.176683][T16407] name failslab, interval 1, probability 0, space 0, times 0
[ 1027.312614][T16407] CPU: 0 UID: 0 PID: 16407 Comm: syz.0.1845 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[ 1027.312642][T16407] Tainted: [U]=USER, [L]=SOFTLOCKUP
[ 1027.312647][T16407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1027.312656][T16407] Call Trace:
[ 1027.312662][T16407]  <TASK>
[ 1027.312668][T16407]  dump_stack_lvl+0x100/0x190
[ 1027.312695][T16407]  should_fail_ex.cold+0x5/0xa
[ 1027.312714][T16407]  ? tomoyo_encode2+0xfb/0x3c0
[ 1027.312817][T16407]  should_failslab+0xc2/0x120
[ 1027.312834][T16407]  __kmalloc_noprof+0xe0/0x850
[ 1027.312853][T16407]  ? d_absolute_path+0x136/0x1b0
[ 1027.312876][T16407]  tomoyo_encode2+0xfb/0x3c0
[ 1027.312896][T16407]  tomoyo_encode+0x29/0x50
[ 1027.312913][T16407]  tomoyo_realpath_from_path+0x18c/0x690
[ 1027.312935][T16407]  tomoyo_path_number_perm+0x23c/0x580
[ 1027.312950][T16407]  ? tomoyo_path_number_perm+0x22e/0x580
[ 1027.312966][T16407]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 1027.312987][T16407]  ? do_raw_spin_lock+0x128/0x260
[ 1027.313007][T16407]  ? find_held_lock+0x2b/0x80
[ 1027.313029][T16407]  ? __pfx_d_add+0x10/0x10
[ 1027.313044][T16407]  ? d_alloc+0x176/0x1e0
[ 1027.313067][T16407]  ? current_check_access_path+0x281/0x460
[ 1027.313089][T16407]  ? __pfx_current_check_access_path+0x10/0x10
[ 1027.313108][T16407]  ? simple_lookup+0x105/0x1d0
[ 1027.313130][T16407]  ? lookup_one_qstr_excl+0xb3/0x250
[ 1027.313151][T16407]  tomoyo_path_mkdir+0x9b/0xe0
[ 1027.313170][T16407]  ? __pfx_tomoyo_path_mkdir+0x10/0x10
[ 1027.313195][T16407]  security_path_mkdir+0x154/0x2e0
[ 1027.313215][T16407]  filename_mkdirat+0x168/0x5e0
[ 1027.313232][T16407]  ? __pfx_filename_mkdirat+0x10/0x10
[ 1027.313248][T16407]  ? strncpy_from_user+0x19d/0x2d0
[ 1027.313266][T16407]  ? do_getname+0x191/0x390
[ 1027.313284][T16407]  __x64_sys_mkdir+0x6b/0x90
[ 1027.313300][T16407]  do_syscall_64+0x106/0xf80
[ 1027.313319][T16407]  ? clear_bhb_loop+0x40/0x90
[ 1027.313337][T16407]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1027.313353][T16407] RIP: 0033:0x7f435bb9c799
[ 1027.313367][T16407] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1027.313380][T16407] RSP: 002b:00007f435ca7b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000053
[ 1027.313396][T16407] RAX: ffffffffffffffda RBX: 00007f435be16090 RCX: 00007f435bb9c799
[ 1027.313406][T16407] RDX: 0000000000000000 RSI: 0000000000008001 RDI: 0000200000000100
[ 1027.313415][T16407] RBP: 00007f435bc32c99 R08: 0000000000000000 R09: 0000000000000000
[ 1027.313424][T16407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1027.313432][T16407] R13: 00007f435be16128 R14: 00007f435be16090 R15: 00007ffd99d0ea98
[ 1027.313452][T16407]  </TASK>
[ 1027.314223][T16407] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1027.842303][T16397] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1027.862808][T16397] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1027.886876][T16397] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1027.919858][T16397] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1028.340104][ T5828] Bluetooth: hci0: command 0x0c1a tx timeout
[ 1029.933574][ T5828] Bluetooth: hci1: command 0x0c1a tx timeout
[ 1029.939879][T14518] Bluetooth: hci2: command 0x0c1a tx timeout
[ 1030.103170][ T5828] Bluetooth: hci3: command 0x0c1a tx timeout
[ 1031.378097][   T30] audit: type=1800 audit(4294967336.375:28): pid=16447 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1852" name="lu_gp_id" dev="configfs" ino=745092 res=0 errno=0
[ 1031.399122][T16447] kstrtoul() returned -22 for lu_gp_id
[ 1031.693809][T16443] zswap: compressor  not available
[ 1033.419270][T16470] kvm: kvm [16468]: vcpu2, guest rIP: 0xfff0 Unhandled RDMSR(0x40000085)
[ 1034.931744][T16481] netlink: 504 bytes leftover after parsing attributes in process `syz.3.1857'.
[ 1035.064903][T16481] netlink: 350 bytes leftover after parsing attributes in process `syz.3.1857'.
[ 1035.402379][   T30] audit: type=1800 audit(4294967340.403:29): pid=16492 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1859" name="dbroot" dev="configfs" ino=749325 res=0 errno=0
[ 1035.776399][T16484] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1035.853554][T16484] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1035.973487][T16484] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1036.041461][T16484] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1037.615168][T16506] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1037.717829][T16506] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1037.779221][T16506] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1037.785276][T16506] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1039.308151][T14518] Bluetooth: hci0: command 0x0c1a tx timeout
[ 1039.778338][T14518] Bluetooth: hci2: command 0x0c1a tx timeout
[ 1039.870541][T14518] Bluetooth: hci3: command 0x0c1a tx timeout
[ 1039.876685][T14518] Bluetooth: hci1: command 0x0c1a tx timeout
[ 1041.420746][   T30] audit: type=1800 audit(4294967346.440:30): pid=16571 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1863" name="lu_gp_id" dev="configfs" ino=754806 res=0 errno=0
[ 1041.449376][T16571] kstrtoul() returned -22 for lu_gp_id
[ 1041.853330][T16566] zswap: compressor  not available
[ 1044.529304][T16579] Process accounting paused
[ 1046.063539][T16631] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1874'.
[ 1047.160611][T16644] __vm_enough_memory: pid: 16644, comm: syz.0.1877, bytes: 4398046511104 not enough memory for the allocation
[ 1049.045899][ T5834] usb usb40-port2: attempt power cycle
[ 1049.665968][ T5834] usb usb40-port2: unable to enumerate USB device
[ 1051.704545][T14518] Bluetooth: hci4: Opcode 0x0c03 failed: -110
[ 1054.915430][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[ 1054.921873][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[ 1061.384898][T16811] program syz.1.1908 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1061.502351][   T30] audit: type=1807 audit(4294967329.288:31): UNKNOWN=0"û]$|Ë1jë0B|d™¹ýÓ‰OŸ¬+ö×/ÉéxÔóÈõWÓ¦–Ó^¸´gq%ḦrêOŽ res=0
[ 1061.647856][T16804] ima: policy update failed
[ 1061.660005][   T30] audit: type=1802 audit(4294967329.308:32): pid=16805 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.1.1908" res=0 errno=0
[ 1061.884796][   T30] audit: type=1802 audit(4294967329.508:33): pid=16804 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.1908" res=0 errno=0
[ 1066.742846][T16896] FAULT_INJECTION: forcing a failure.
[ 1066.742846][T16896] name fail_futex, interval 1, probability 0, space 0, times 0
[ 1067.176663][T16896] CPU: 0 UID: 0 PID: 16896 Comm: syz.0.1920 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[ 1067.176691][T16896] Tainted: [U]=USER, [L]=SOFTLOCKUP
[ 1067.176697][T16896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1067.176706][T16896] Call Trace:
[ 1067.176711][T16896]  <TASK>
[ 1067.176717][T16896]  dump_stack_lvl+0x100/0x190
[ 1067.176744][T16896]  should_fail_ex.cold+0x5/0xa
[ 1067.176759][T16896]  ? stack_depot_save_flags+0x27/0x9d0
[ 1067.176779][T16896]  get_futex_key+0x1d2/0x1620
[ 1067.176799][T16896]  ? __pfx_get_futex_key+0x10/0x10
[ 1067.176815][T16896]  ? __x64_sys_mount+0x239/0x310
[ 1067.176830][T16896]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1067.176851][T16896]  futex_wake+0xea/0x530
[ 1067.176873][T16896]  ? __pfx_futex_wake+0x10/0x10
[ 1067.176912][T16896]  do_futex+0x32b/0x350
[ 1067.176931][T16896]  ? __pfx_do_futex+0x10/0x10
[ 1067.176948][T16896]  ? lockdep_hardirqs_on+0x78/0x100
[ 1067.176971][T16896]  __x64_sys_futex+0x34f/0x4d0
[ 1067.176991][T16896]  ? __pfx___x64_sys_futex+0x10/0x10
[ 1067.177010][T16896]  ? __pfx___x64_sys_mount+0x10/0x10
[ 1067.177031][T16896]  do_syscall_64+0x106/0xf80
[ 1067.177050][T16896]  ? clear_bhb_loop+0x40/0x90
[ 1067.177068][T16896]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1067.177083][T16896] RIP: 0033:0x7f435bb9c799
[ 1067.177095][T16896] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1067.177109][T16896] RSP: 002b:00007f435ca7b0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 1067.177123][T16896] RAX: ffffffffffffffda RBX: 00007f435be16098 RCX: 00007f435bb9c799
[ 1067.177132][T16896] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f435be1609c
[ 1067.177141][T16896] RBP: 00007f435be16090 R08: 0000000000000000 R09: 0000000000000000
[ 1067.177149][T16896] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[ 1067.177158][T16896] R13: 00007f435be16128 R14: 00007ffd99d0e9b0 R15: 00007ffd99d0ea98
[ 1067.177176][T16896]  </TASK>
[ 1071.809935][T16923] kexec: Could not allocate control_code_buffer
[ 1076.159869][T16969] Process accounting resumed
[ 1077.239940][T17030] [U]  
[ 1077.242746][T17030] [U] 
[ 1077.245421][T17030] [U] 
[ 1077.248095][T17030] [U] 
[ 1077.370339][T17030] [U] 
[ 1077.373053][T17030] [U] 
[ 1077.375734][T17030] [U] 
[ 1077.378409][T17030] [U] 
[ 1077.584152][T17030] [U] 
[ 1077.586880][T17030] [U] 
[ 1077.589564][T17030] [U] 
[ 1077.592270][T17030] [U] 
[ 1077.697142][T17030] [U] 
[ 1077.700119][T17030] [U] 
[ 1077.702793][T17030] [U] 
[ 1077.705458][T17030] [U] 
[ 1077.793870][T17030] [U] 
[ 1083.611886][   T30] audit: type=1800 audit(4294967351.387:34): pid=17119 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1950" name="dbroot" dev="configfs" ino=796789 res=0 errno=0
[ 1084.152090][T17131] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1951'.
[ 1085.626477][T17143] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1085.661269][T17143] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1085.734508][T17143] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1085.805148][T17143] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1087.642251][T14518] Bluetooth: hci0: command 0x0c1a tx timeout
[ 1087.722131][T14518] Bluetooth: hci2: command 0x0c1a tx timeout
[ 1087.802226][T14518] Bluetooth: hci1: command 0x0c1a tx timeout
[ 1087.886842][T14518] Bluetooth: hci3: command 0x0c1a tx timeout
[ 1093.695797][ T5834] usb usb40-port2: attempt power cycle
[ 1094.336835][ T5834] usb usb40-port2: unable to enumerate USB device
[ 1096.623414][T17256] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.3.1974: iget: checksum invalid
[ 1096.856414][T17256] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74
[ 1097.095385][T17256] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.3.1974: iget: checksum invalid
[ 1097.510553][T17256] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74
[ 1097.777531][T17256] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.3.1974: iget: checksum invalid
[ 1097.979060][T17256] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74
[ 1098.268556][T17256] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.3.1974: iget: checksum invalid
[ 1098.518247][T17256] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74
[ 1098.698114][T17256] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74
[ 1098.786652][T17256] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[ 1098.821149][T17296] Invalid ELF header magic: != ELF
[ 1100.396648][T17312] netlink: 'syz.3.1982': attribute type 1 has an invalid length.
[ 1100.931194][T17318] netlink: 'syz.2.1983': attribute type 1 has an invalid length.
[ 1101.038307][T17318] netlink: 33 bytes leftover after parsing attributes in process `syz.2.1983'.
[ 1101.402836][T17323] Invalid ELF header magic: != ELF
[ 1106.329625][T17349] Process accounting paused
[ 1109.640057][T17382] FAULT_INJECTION: forcing a failure.
[ 1109.640057][T17382] name failslab, interval 1, probability 0, space 0, times 0
[ 1109.854951][T17382] CPU: 0 UID: 0 PID: 17382 Comm: syz.0.1993 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[ 1109.854979][T17382] Tainted: [U]=USER, [L]=SOFTLOCKUP
[ 1109.854985][T17382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1109.854995][T17382] Call Trace:
[ 1109.855000][T17382]  <TASK>
[ 1109.855007][T17382]  dump_stack_lvl+0x100/0x190
[ 1109.855035][T17382]  should_fail_ex.cold+0x5/0xa
[ 1109.855054][T17382]  should_failslab+0xc2/0x120
[ 1109.855070][T17382]  __kmalloc_cache_noprof+0x7a/0x6f0
[ 1109.855090][T17382]  ? sctp_auth_shkey_create+0x9e/0x210
[ 1109.855116][T17382]  sctp_auth_shkey_create+0x9e/0x210
[ 1109.855137][T17382]  sctp_endpoint_new+0x589/0xb20
[ 1109.855161][T17382]  ? __pfx_sctp_endpoint_new+0x10/0x10
[ 1109.855183][T17382]  ? lockdep_init_map_type+0x5c/0x250
[ 1109.855206][T17382]  sctp_init_sock+0xe2b/0x1300
[ 1109.855225][T17382]  ? __pfx_sctp_v6_init_sock+0x10/0x10
[ 1109.855244][T17382]  sctp_v6_init_sock+0x16/0x70
[ 1109.855262][T17382]  ? __pfx_sctp_v6_init_sock+0x10/0x10
[ 1109.855292][T17382]  inet6_create+0xb21/0x12b0
[ 1109.855315][T17382]  ? inet6_create+0x7f/0x12b0
[ 1109.855336][T17382]  __sock_create+0x339/0x860
[ 1109.855357][T17382]  inet_ctl_sock_create+0x94/0x230
[ 1109.855373][T17382]  ? __pfx_inet_ctl_sock_create+0x10/0x10
[ 1109.855388][T17382]  ? timer_init_key+0x150/0x340
[ 1109.855407][T17382]  ? __pfx_sctp_ctrlsock_init+0x10/0x10
[ 1109.855425][T17382]  sctp_ctrlsock_init+0x40/0xd0
[ 1109.855443][T17382]  ops_init+0x1e2/0x5f0
[ 1109.855469][T17382]  setup_net+0x118/0x3a0
[ 1109.855489][T17382]  ? __pfx_setup_net+0x10/0x10
[ 1109.855507][T17382]  ? lockdep_init_map_type+0x5c/0x250
[ 1109.855525][T17382]  ? mutex_init_lockep+0x110/0x150
[ 1109.855546][T17382]  copy_net_ns+0x46f/0x7c0
[ 1109.855570][T17382]  create_new_namespaces+0x3ea/0xac0
[ 1109.855589][T17382]  unshare_nsproxy_namespaces+0xc3/0x1f0
[ 1109.855606][T17382]  ksys_unshare+0x473/0xad0
[ 1109.855624][T17382]  ? __pfx_ksys_unshare+0x10/0x10
[ 1109.855649][T17382]  __x64_sys_unshare+0x31/0x40
[ 1109.855665][T17382]  do_syscall_64+0x106/0xf80
[ 1109.855685][T17382]  ? clear_bhb_loop+0x40/0x90
[ 1109.855703][T17382]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1109.855717][T17382] RIP: 0033:0x7f435bb9c799
[ 1109.855730][T17382] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1109.855744][T17382] RSP: 002b:00007f435ca7b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[ 1109.855759][T17382] RAX: ffffffffffffffda RBX: 00007f435be16090 RCX: 00007f435bb9c799
[ 1109.855768][T17382] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080
[ 1109.855778][T17382] RBP: 00007f435bc32c99 R08: 0000000000000000 R09: 0000000000000000
[ 1109.855787][T17382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1109.855795][T17382] R13: 00007f435be16128 R14: 00007f435be16090 R15: 00007ffd99d0ea98
[ 1109.855815][T17382]  </TASK>
[ 1110.573708][T17391] program syz.2.1995 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1116.229864][T17409] zswap: compressor  not available
[ 1116.388365][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[ 1116.394718][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[ 1117.994734][T14518] Bluetooth: hci4: Opcode 0x0c03 failed: -110
[ 1119.375242][T17439] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.2.2003: iget: checksum invalid
[ 1119.806950][T17439] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74
[ 1120.317706][T17439] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.2.2003: iget: checksum invalid
[ 1120.922547][T17439] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74
[ 1121.576267][T17439] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.2.2003: iget: checksum invalid
[ 1121.998862][T17439] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74
[ 1122.329741][T17439] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.2.2003: iget: checksum invalid
[ 1122.591010][T17439] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74
[ 1122.959769][T17439] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74
[ 1123.224227][T17439] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[ 1123.786013][T17465] ima: Unable to open file: /sys/kernel/security/integrity/ima/policy (-26)
[ 1124.121556][T17464] ima: policy update failed
[ 1124.230370][   T30] audit: type=1802 audit(4294967391.977:35): pid=17464 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.2008" res=0 errno=0
[ 1127.090940][T17494] vivid-007: =================  START STATUS  =================
[ 1127.242080][T17494] vivid-007: Generate PTS: true
[ 1127.292069][T17494] vivid-007: Generate SCR: true
[ 1127.352619][T17494] tpg source WxH: 320x240 (Y'CbCr)
[ 1127.414939][T17494] tpg field: 1
[ 1127.612824][T17494] tpg crop: (0,0)/320x240
[ 1127.617501][T17494] tpg compose: (0,0)/320x240
[ 1127.762782][T17494] tpg colorspace: 8
[ 1127.766813][T17494] tpg transfer function: 0/0
[ 1127.771662][T17494] tpg Y'CbCr encoding: 0/0
[ 1128.196297][T17494] tpg quantization: 0/0
[ 1128.200603][T17494] tpg RGB range: 0/2
[ 1128.687197][T17494] vivid-007: ==================  END STATUS  ==================
[ 1133.755851][   T30] audit: type=1800 audit(4294967401.502:36): pid=17567 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="" name="lu_gp_id" dev="configfs" ino=843492 res=0 errno=0
[ 1134.300158][T17567] could not allocate digest TFM handle 
[ 1136.766331][T17588] Process accounting resumed
[ 1141.429235][T14518] Bluetooth: hci0: command 0x0c1a tx timeout
[ 1141.443778][T17620] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[ 1141.878860][T17620] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1141.923185][T17620] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1141.974028][T17620] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1143.593084][T14518] Bluetooth: hci2: command 0x0c1a tx timeout
[ 1143.990315][T14518] Bluetooth: hci3: command 0x0c1a tx timeout
[ 1143.996391][ T5828] Bluetooth: hci1: command 0x0c1a tx timeout
[ 1144.594024][T17666] zswap: compressor  not available
[ 1144.989761][T17685] Invalid ELF header magic: != ELF
[ 1147.248513][T17681] program syz.3.2048 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1149.216109][T17667] kexec: Could not allocate control_code_buffer
[ 1151.261378][T17739] vivid-007: =================  START STATUS  =================
[ 1151.290013][T17739] vivid-007: Generate PTS: true
[ 1151.318030][T17739] vivid-007: Generate SCR: true
[ 1151.348152][T17739] tpg source WxH: 320x240 (Y'CbCr)
[ 1151.370635][T17739] tpg field: 1
[ 1151.385940][T17739] tpg crop: (0,0)/320x240
[ 1151.409448][T17739] tpg compose: (0,0)/320x240
[ 1151.431844][T17739] tpg colorspace: 8
[ 1151.482508][T17739] tpg transfer function: 0/0
[ 1151.510247][T17739] tpg Y'CbCr encoding: 0/0
[ 1151.564934][T17739] tpg quantization: 0/0
[ 1151.616972][T17739] tpg RGB range: 0/2
[ 1151.720252][T17739] vivid-007: ==================  END STATUS  ==================
[ 1151.977800][T17740] FAULT_INJECTION: forcing a failure.
[ 1151.977800][T17740] name failslab, interval 1, probability 0, space 0, times 0
[ 1152.130923][T17740] CPU: 0 UID: 0 PID: 17740 Comm: syz.0.2059 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[ 1152.130952][T17740] Tainted: [U]=USER, [L]=SOFTLOCKUP
[ 1152.130957][T17740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1152.130967][T17740] Call Trace:
[ 1152.130972][T17740]  <TASK>
[ 1152.130978][T17740]  dump_stack_lvl+0x100/0x190
[ 1152.131004][T17740]  should_fail_ex.cold+0x5/0xa
[ 1152.131021][T17740]  should_failslab+0xc2/0x120
[ 1152.131037][T17740]  kmem_cache_alloc_noprof+0x7b/0x6e0
[ 1152.131057][T17740]  ? __anon_vma_prepare+0x344/0x5e0
[ 1152.131081][T17740]  ? __pfx_filemap_map_pages+0x10/0x10
[ 1152.131102][T17740]  __anon_vma_prepare+0x344/0x5e0
[ 1152.131123][T17740]  ? __pfx_filemap_map_pages+0x10/0x10
[ 1152.131141][T17740]  __vmf_anon_prepare+0x11f/0x250
[ 1152.131159][T17740]  do_fault+0x152/0x1990
[ 1152.131177][T17740]  __handle_mm_fault+0x180f/0x2b60
[ 1152.131200][T17740]  ? __pfx___handle_mm_fault+0x10/0x10
[ 1152.131220][T17740]  ? pte_offset_map_lock+0x174/0x320
[ 1152.131234][T17740]  ? find_held_lock+0x2b/0x80
[ 1152.131254][T17740]  ? follow_page_pte+0x5b3/0x1400
[ 1152.131273][T17740]  handle_mm_fault+0x36d/0xa20
[ 1152.131295][T17740]  __get_user_pages+0xf9c/0x34d0
[ 1152.131317][T17740]  ? __pfx___get_user_pages+0x10/0x10
[ 1152.131338][T17740]  populate_vma_page_range+0x267/0x3f0
[ 1152.131355][T17740]  ? __pfx_populate_vma_page_range+0x10/0x10
[ 1152.131371][T17740]  ? __pfx_find_vma_intersection+0x10/0x10
[ 1152.131387][T17740]  ? do_mmap+0x93f/0x12f0
[ 1152.131404][T17740]  __mm_populate+0x107/0x3a0
[ 1152.131420][T17740]  ? __pfx___mm_populate+0x10/0x10
[ 1152.131438][T17740]  ? up_write+0x290/0x4f0
[ 1152.131459][T17740]  vm_mmap_pgoff+0x37f/0x470
[ 1152.131476][T17740]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[ 1152.131491][T17740]  ? __fget_files+0x215/0x3d0
[ 1152.131508][T17740]  ? __fget_files+0x21f/0x3d0
[ 1152.131523][T17740]  ksys_mmap_pgoff+0x3c8/0x650
[ 1152.131538][T17740]  ? __x64_sys_futex+0x34f/0x4d0
[ 1152.131573][T17740]  ? __x64_sys_futex+0x358/0x4d0
[ 1152.131592][T17740]  ? __pfx_ksys_mmap_pgoff+0x10/0x10
[ 1152.131608][T17740]  ? xfd_validate_state+0x129/0x190
[ 1152.131634][T17740]  __x64_sys_mmap+0x125/0x190
[ 1152.131658][T17740]  do_syscall_64+0x106/0xf80
[ 1152.131677][T17740]  ? clear_bhb_loop+0x40/0x90
[ 1152.131695][T17740]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1152.131710][T17740] RIP: 0033:0x7f435bb9c799
[ 1152.131723][T17740] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1152.131737][T17740] RSP: 002b:00007f435ca9c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[ 1152.131752][T17740] RAX: ffffffffffffffda RBX: 00007f435be15fa0 RCX: 00007f435bb9c799
[ 1152.131761][T17740] RDX: 0000000000000003 RSI: 0000000000000009 RDI: 0000000000000000
[ 1152.131770][T17740] RBP: 00007f435bc32c99 R08: 0000000000000003 R09: 0000000000008000
[ 1152.131779][T17740] R10: 0000000000008012 R11: 0000000000000246 R12: 0000000000000000
[ 1152.131788][T17740] R13: 00007f435be16038 R14: 00007f435be15fa0 R15: 00007ffd99d0ea98
[ 1152.131814][T17740]  </TASK>
[ 1154.210742][T17784] syz.2.2066 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[ 1155.504064][T17798] FAULT_INJECTION: forcing a failure.
[ 1155.504064][T17798] name failslab, interval 1, probability 0, space 0, times 0
[ 1155.539442][T17801] zswap: compressor  not available
[ 1155.547339][T17807] FAULT_INJECTION: forcing a failure.
[ 1155.547339][T17807] name failslab, interval 1, probability 0, space 0, times 0
[ 1155.605224][T17798] CPU: 0 UID: 0 PID: 17798 Comm: syz.3.2068 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[ 1155.605253][T17798] Tainted: [U]=USER, [L]=SOFTLOCKUP
[ 1155.605259][T17798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1155.605268][T17798] Call Trace:
[ 1155.605273][T17798]  <TASK>
[ 1155.605279][T17798]  dump_stack_lvl+0x100/0x190
[ 1155.605305][T17798]  should_fail_ex.cold+0x5/0xa
[ 1155.605324][T17798]  ? tomoyo_encode2+0xfb/0x3c0
[ 1155.605343][T17798]  should_failslab+0xc2/0x120
[ 1155.605358][T17798]  __kmalloc_noprof+0xe0/0x850
[ 1155.605378][T17798]  ? d_absolute_path+0x136/0x1b0
[ 1155.605400][T17798]  tomoyo_encode2+0xfb/0x3c0
[ 1155.605420][T17798]  tomoyo_encode+0x29/0x50
[ 1155.605436][T17798]  tomoyo_realpath_from_path+0x18c/0x690
[ 1155.605458][T17798]  tomoyo_path_number_perm+0x23c/0x580
[ 1155.605483][T17798]  ? tomoyo_path_number_perm+0x22e/0x580
[ 1155.605507][T17798]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 1155.605522][T17798]  ? futex_wait+0x125/0x380
[ 1155.605562][T17798]  ? find_held_lock+0x2b/0x80
[ 1155.605576][T17798]  ? __fget_files+0x215/0x3d0
[ 1155.605588][T17798]  ? hook_file_ioctl_common+0x146/0x410
[ 1155.605607][T17798]  ? __fget_files+0x21f/0x3d0
[ 1155.605623][T17798]  security_file_ioctl+0xd3/0x230
[ 1155.605642][T17798]  __x64_sys_ioctl+0xb7/0x210
[ 1155.605663][T17798]  do_syscall_64+0x106/0xf80
[ 1155.605682][T17798]  ? clear_bhb_loop+0x40/0x90
[ 1155.605698][T17798]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1155.605713][T17798] RIP: 0033:0x7f650ed9c799
[ 1155.605726][T17798] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1155.605740][T17798] RSP: 002b:00007f650fca8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1155.605753][T17798] RAX: ffffffffffffffda RBX: 00007f650f015fa0 RCX: 00007f650ed9c799
[ 1155.605763][T17798] RDX: 0000200000000400 RSI: 00000000405c5503 RDI: 0000000000000003
[ 1155.605771][T17798] RBP: 00007f650ee32c99 R08: 0000000000000000 R09: 0000000000000000
[ 1155.605780][T17798] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1155.605788][T17798] R13: 00007f650f016038 R14: 00007f650f015fa0 R15: 00007ffdfe7d1ba8
[ 1155.605808][T17798]  </TASK>
[ 1155.605825][T17798] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1155.845897][T17811] netlink: 122 bytes leftover after parsing attributes in process `syz.0.2070'.
[ 1155.866170][T17807] CPU: 0 UID: 0 PID: 17807 Comm: syz.0.2070 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[ 1155.866198][T17807] Tainted: [U]=USER, [L]=SOFTLOCKUP
[ 1155.866204][T17807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1155.866213][T17807] Call Trace:
[ 1155.866218][T17807]  <TASK>
[ 1155.866225][T17807]  dump_stack_lvl+0x100/0x190
[ 1155.866251][T17807]  should_fail_ex.cold+0x5/0xa
[ 1155.866275][T17807]  should_failslab+0xc2/0x120
[ 1155.866292][T17807]  kmem_cache_alloc_noprof+0x7b/0x6e0
[ 1155.866313][T17807]  ? seq_open+0x55/0x170
[ 1155.866334][T17807]  seq_open+0x55/0x170
[ 1155.866352][T17807]  blk_mq_debugfs_open+0x106/0x1b0
[ 1155.866452][T17807]  ? __pfx_blk_mq_debugfs_open+0x10/0x10
[ 1155.866471][T17807]  full_proxy_open_regular+0x1b6/0x370
[ 1155.866548][T17807]  do_dentry_open+0x6d8/0x1660
[ 1155.866563][T17807]  ? __pfx_full_proxy_open_regular+0x10/0x10
[ 1155.866589][T17807]  vfs_open+0x82/0x3f0
[ 1155.866608][T17807]  path_openat+0x208c/0x31a0
[ 1155.866637][T17807]  ? __pfx_path_openat+0x10/0x10
[ 1155.866658][T17807]  do_file_open+0x20e/0x430
[ 1155.866674][T17807]  ? __pfx_do_file_open+0x10/0x10
[ 1155.866702][T17807]  ? alloc_fd+0x476/0x790
[ 1155.866717][T17807]  ? do_getname+0x191/0x390
[ 1155.866737][T17807]  do_sys_openat2+0x10d/0x1e0
[ 1155.866755][T17807]  ? __pfx_do_sys_openat2+0x10/0x10
[ 1155.866774][T17807]  ? __fget_files+0x21f/0x3d0
[ 1155.866790][T17807]  __x64_sys_openat+0x12d/0x210
[ 1155.866809][T17807]  ? __pfx___x64_sys_openat+0x10/0x10
[ 1155.866833][T17807]  do_syscall_64+0x106/0xf80
[ 1155.866853][T17807]  ? clear_bhb_loop+0x40/0x90
[ 1155.866871][T17807]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1155.866885][T17807] RIP: 0033:0x7f435bb9c799
[ 1155.866899][T17807] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1155.866916][T17807] RSP: 002b:00007f435ca9c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 1155.866931][T17807] RAX: ffffffffffffffda RBX: 00007f435be15fa0 RCX: 00007f435bb9c799
[ 1155.866941][T17807] RDX: 0000000000000000 RSI: 0000200000000300 RDI: ffffffffffffff9c
[ 1155.866950][T17807] RBP: 00007f435bc32c99 R08: 0000000000000000 R09: 0000000000000000
[ 1155.866959][T17807] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1155.866968][T17807] R13: 00007f435be16038 R14: 00007f435be15fa0 R15: 00007ffd99d0ea98
[ 1155.866987][T17807]  </TASK>
[ 1156.807311][T17824] vivid-007: =================  START STATUS  =================
[ 1156.857381][T17824] vivid-007: Generate PTS: true
[ 1156.886217][T17824] vivid-007: Generate SCR: true
[ 1156.929070][T17824] tpg source WxH: 320x240 (Y'CbCr)
[ 1156.934216][T17824] tpg field: 1
[ 1156.963845][T17824] tpg crop: (0,0)/320x240
[ 1156.988703][T17824] tpg compose: (0,0)/320x240
[ 1157.028658][T17824] tpg colorspace: 8
[ 1157.032478][T17824] tpg transfer function: 0/0
[ 1157.064151][T17834] netlink: 342 bytes leftover after parsing attributes in process `syz.1.2074'.
[ 1157.120710][T17824] tpg Y'CbCr encoding: 0/0
[ 1157.125446][T17824] tpg quantization: 0/0
[ 1157.300355][T17824] tpg RGB range: 0/2
[ 1157.395074][T17824] vivid-007: ==================  END STATUS  ==================
[ 1159.806800][T17883] futex_wake_op: syz.0.2083 tries to shift op by -2048; fix this program
[ 1159.910874][T17885] misc userio: No port type given on /dev/userio
[ 1159.933639][T17879] zswap: compressor  not available
[ 1159.976430][T17883] futex_wake_op: syz.0.2083 tries to shift op by -2048; fix this program
[ 1160.180277][T17883] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint
[ 1161.133053][T17901] netlink: 342 bytes leftover after parsing attributes in process `syz.3.2086'.
[ 1161.184668][T17901] netlink: 342 bytes leftover after parsing attributes in process `syz.3.2086'.
[ 1161.227082][T17901] netlink: 342 bytes leftover after parsing attributes in process `syz.3.2086'.
[ 1162.595008][T17915] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2089'.
[ 1162.658232][T17915] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[ 1167.252183][T17722] Bluetooth: hci1: unexpected event 0x34 length: 11 > 6
[ 1167.258030][T18028] Process accounting paused
[ 1169.555404][T18079] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1169.599908][T18079] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1169.780279][T18079] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1169.915498][T18079] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1171.604339][T17722] Bluetooth: hci2: command 0x0c1a tx timeout
[ 1171.610669][T17722] Bluetooth: hci0: command 0x0c1a tx timeout
[ 1171.846342][T18137] Bluetooth: hci1: command 0x0c1a tx timeout
[ 1171.924230][T18137] Bluetooth: hci3: command 0x0c1a tx timeout
[ 1172.118871][T18137] Bluetooth: hci2: unexpected event 0x32 length: 727 > 9
[ 1173.399051][T18140] program syz.0.2124 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1174.357769][T18170] Invalid ELF header magic: != ELF
[ 1177.886058][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[ 1177.892504][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[ 1178.222895][T18247] FAULT_INJECTION: forcing a failure.
[ 1178.222895][T18247] name failslab, interval 1, probability 0, space 0, times 0
[ 1178.238495][T18267] netlink: 252 bytes leftover after parsing attributes in process `syz.0.2147'.
[ 1178.276760][T18267] netlink: 252 bytes leftover after parsing attributes in process `syz.0.2147'.
[ 1178.311114][T18247] CPU: 0 UID: 0 PID: 18247 Comm: syz.2.2142 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[ 1178.311141][T18247] Tainted: [U]=USER, [L]=SOFTLOCKUP
[ 1178.311147][T18247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1178.311156][T18247] Call Trace:
[ 1178.311161][T18247]  <TASK>
[ 1178.311167][T18247]  dump_stack_lvl+0x100/0x190
[ 1178.311194][T18247]  should_fail_ex.cold+0x5/0xa
[ 1178.311212][T18247]  should_failslab+0xc2/0x120
[ 1178.311226][T18247]  __kmalloc_cache_noprof+0x7a/0x6f0
[ 1178.311245][T18247]  ? newseg+0x269/0xed0
[ 1178.311265][T18247]  newseg+0x269/0xed0
[ 1178.311282][T18247]  ? __pfx_futex_wait+0x10/0x10
[ 1178.311305][T18247]  ? __pfx_newseg+0x10/0x10
[ 1178.311322][T18247]  ? down_write+0x146/0x1f0
[ 1178.311346][T18247]  ? __sched_setaffinity+0x17c/0x280
[ 1178.311361][T18247]  ? __pfx___sched_setaffinity+0x10/0x10
[ 1178.311378][T18247]  ipcget+0xee/0xf50
[ 1178.311395][T18247]  ? do_futex+0x192/0x350
[ 1178.311412][T18247]  ? __pfx_do_futex+0x10/0x10
[ 1178.311430][T18247]  ? sched_setaffinity+0xe0/0x400
[ 1178.311443][T18247]  ? __might_fault+0xc5/0x140
[ 1178.311462][T18247]  ? __pfx_ipcget+0x10/0x10
[ 1178.311479][T18247]  ? __x64_sys_futex+0x34f/0x4d0
[ 1178.311496][T18247]  ? __x64_sys_futex+0x358/0x4d0
[ 1178.311516][T18247]  __x64_sys_shmget+0x13b/0x1b0
[ 1178.311533][T18247]  ? __pfx___x64_sys_shmget+0x10/0x10
[ 1178.311556][T18247]  do_syscall_64+0x106/0xf80
[ 1178.311574][T18247]  ? clear_bhb_loop+0x40/0x90
[ 1178.311591][T18247]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1178.311605][T18247] RIP: 0033:0x7fd277d9c799
[ 1178.311617][T18247] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1178.311631][T18247] RSP: 002b:00007fd278be3028 EFLAGS: 00000246 ORIG_RAX: 000000000000001d
[ 1178.311645][T18247] RAX: ffffffffffffffda RBX: 00007fd278015fa0 RCX: 00007fd277d9c799
[ 1178.311654][T18247] RDX: 0000000079e56dc9 RSI: 0000000000000003 RDI: 0000000100000000
[ 1178.311663][T18247] RBP: 00007fd277e32c99 R08: 0000000000000000 R09: 0000000000000000
[ 1178.311671][T18247] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1178.311679][T18247] R13: 00007fd278016038 R14: 00007fd278015fa0 R15: 00007fffdc4ad0d8
[ 1178.311701][T18247]  </TASK>
[ 1179.977337][T18306] vivid-007: =================  START STATUS  =================
[ 1180.105147][T18306] vivid-007: Generate PTS: true
[ 1180.249183][T18306] vivid-007: Generate SCR: true
[ 1180.254103][T18306] tpg source WxH: 320x240 (Y'CbCr)
[ 1180.424068][T18306] tpg field: 1
[ 1180.427460][T18306] tpg crop: (0,0)/320x240
[ 1180.505337][T18306] tpg compose: (0,0)/320x240
[ 1180.567229][T18306] tpg colorspace: 8
[ 1180.617225][T18306] tpg transfer function: 0/0
[ 1180.702842][T18306] tpg Y'CbCr encoding: 0/0
[ 1180.747593][T18306] tpg quantization: 0/0
[ 1180.822884][T18306] tpg RGB range: 0/2
[ 1180.826803][T18306] vivid-007: ==================  END STATUS  ==================
[ 1181.435880][T18341] QAT: Stopping all acceleration devices.
[ 1182.871697][T18384] Invalid ELF header magic: != ELF
[ 1183.936406][T18409] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2170'.
[ 1183.997203][T18409] netlink: 354 bytes leftover after parsing attributes in process `syz.0.2170'.
[ 1184.368799][   T30] audit: type=1800 audit(4294967452.087:37): pid=18420 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2171" name="trace_pipe" dev="tracefs" ino=561 res=0 errno=0
[ 1188.341393][T18509] program syz.0.2184 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1189.702713][T18539] hub 1-0:1.0: USB hub found
[ 1189.731404][T18539] hub 1-0:1.0: 1 port detected
[ 1189.858989][T18536] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1189.903872][T18536] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1189.920023][T18536] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1189.943339][T18536] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1191.614114][T18137] Bluetooth: hci0: command 0x0c1a tx timeout
[ 1191.934237][T17710] Bluetooth: hci1: command 0x0c1a tx timeout
[ 1191.940689][T17710] Bluetooth: hci2: command 0x0c1a tx timeout
[ 1192.014248][T18598] Bluetooth: hci3: command 0x0c1a tx timeout
[ 1193.793921][T18633] FAULT_INJECTION: forcing a failure.
[ 1193.793921][T18633] name failslab, interval 1, probability 0, space 0, times 0
[ 1193.855898][T18633] CPU: 0 UID: 0 PID: 18633 Comm: syz.3.2212 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[ 1193.855927][T18633] Tainted: [U]=USER, [L]=SOFTLOCKUP
[ 1193.855933][T18633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1193.855942][T18633] Call Trace:
[ 1193.855947][T18633]  <TASK>
[ 1193.855954][T18633]  dump_stack_lvl+0x100/0x190
[ 1193.855980][T18633]  should_fail_ex.cold+0x5/0xa
[ 1193.855997][T18633]  should_failslab+0xc2/0x120
[ 1193.856012][T18633]  kmem_cache_alloc_noprof+0x7b/0x6e0
[ 1193.856033][T18633]  ? sk_prot_alloc+0x60/0x2a0
[ 1193.856051][T18633]  sk_prot_alloc+0x60/0x2a0
[ 1193.856066][T18633]  sk_alloc+0x36/0xe80
[ 1193.856083][T18633]  tipc_sk_create+0xf9/0x2420
[ 1193.856107][T18633]  ? find_held_lock+0x2b/0x80
[ 1193.856120][T18633]  ? __sock_create+0x2f3/0x860
[ 1193.856134][T18633]  ? __sock_create+0x2f3/0x860
[ 1193.856151][T18633]  __sock_create+0x339/0x860
[ 1193.856169][T18633]  __sys_socket+0x14d/0x260
[ 1193.856185][T18633]  ? __pfx___sys_socket+0x10/0x10
[ 1193.856205][T18633]  __x64_sys_socket+0x72/0xb0
[ 1193.856219][T18633]  ? lockdep_hardirqs_on+0x78/0x100
[ 1193.856238][T18633]  do_syscall_64+0x106/0xf80
[ 1193.856257][T18633]  ? clear_bhb_loop+0x40/0x90
[ 1193.856274][T18633]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1193.856288][T18633] RIP: 0033:0x7f650ed9c799
[ 1193.856300][T18633] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1193.856314][T18633] RSP: 002b:00007f650fca8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[ 1193.856328][T18633] RAX: ffffffffffffffda RBX: 00007f650f015fa0 RCX: 00007f650ed9c799
[ 1193.856337][T18633] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 000000000000001e
[ 1193.856345][T18633] RBP: 00007f650ee32c99 R08: 0000000000000000 R09: 0000000000000000
[ 1193.856354][T18633] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1193.856362][T18633] R13: 00007f650f016038 R14: 00007f650f015fa0 R15: 00007ffdfe7d1ba8
[ 1193.856380][T18633]  </TASK>
[ 1197.816615][T18721] Process accounting resumed
[ 1197.894207][T18753] blktrace: Concurrent blktraces are not allowed on mtdblock0
[ 1198.001992][T18758] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2230'.
[ 1198.071163][T18760] netlink: 'syz.0.2230': attribute type 1 has an invalid length.
[ 1198.153038][T18760] netlink: 5 bytes leftover after parsing attributes in process `syz.0.2230'.
[ 1198.977293][T18777] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2236'.
[ 1201.371268][T18801] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1201.400796][T18801] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1201.430492][T18801] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1201.459028][T18801] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1202.100118][T18598] Bluetooth: hci0: command 0x0c1a tx timeout
[ 1203.379856][T18598] Bluetooth: hci2: command 0x0c1a tx timeout
[ 1203.503752][T18598] Bluetooth: hci3: command 0x0c1a tx timeout
[ 1203.509973][T18598] Bluetooth: hci1: command 0x0c1a tx timeout
[ 1203.580518][T18860] debugfs: 'ttyS2' already exists in 'caif_serial'
[ 1209.945107][T17722] Bluetooth: hci4: Opcode 0x0c03 failed: -110
[ 1210.372926][T19008] hub 1-0:1.0: USB hub found
[ 1210.416310][T19008] hub 1-0:1.0: 1 port detected
[ 1210.523001][T19004] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1210.551772][T19004] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1210.585774][T19004] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1210.616659][T19004] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1211.421602][T19046] FAULT_INJECTION: forcing a failure.
[ 1211.421602][T19046] name failslab, interval 1, probability 0, space 0, times 0
[ 1211.510658][T19046] CPU: 0 UID: 0 PID: 19046 Comm: syz.2.2275 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[ 1211.510687][T19046] Tainted: [U]=USER, [L]=SOFTLOCKUP
[ 1211.510693][T19046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1211.510702][T19046] Call Trace:
[ 1211.510707][T19046]  <TASK>
[ 1211.510713][T19046]  dump_stack_lvl+0x100/0x190
[ 1211.510742][T19046]  should_fail_ex.cold+0x5/0xa
[ 1211.510761][T19046]  ? cache_create_net+0xa2/0x1f0
[ 1211.510872][T19046]  should_failslab+0xc2/0x120
[ 1211.510889][T19046]  __kmalloc_noprof+0xe0/0x850
[ 1211.510915][T19046]  cache_create_net+0xa2/0x1f0
[ 1211.510934][T19046]  ? __pfx_rpcsec_gss_init_net+0x10/0x10
[ 1211.510993][T19046]  gss_svc_init_net+0x69/0x640
[ 1211.511010][T19046]  ? __pfx_canbcm_pernet_init+0x10/0x10
[ 1211.511033][T19046]  ? __pfx_rpcsec_gss_init_net+0x10/0x10
[ 1211.511051][T19046]  ops_init+0x1e2/0x5f0
[ 1211.511077][T19046]  setup_net+0x118/0x3a0
[ 1211.511096][T19046]  ? __pfx_setup_net+0x10/0x10
[ 1211.511115][T19046]  ? lockdep_init_map_type+0x5c/0x250
[ 1211.511136][T19046]  ? mutex_init_lockep+0x110/0x150
[ 1211.511164][T19046]  copy_net_ns+0x46f/0x7c0
[ 1211.511188][T19046]  create_new_namespaces+0x3ea/0xac0
[ 1211.511210][T19046]  unshare_nsproxy_namespaces+0xc3/0x1f0
[ 1211.511228][T19046]  ksys_unshare+0x473/0xad0
[ 1211.511247][T19046]  ? __pfx_ksys_unshare+0x10/0x10
[ 1211.511270][T19046]  __x64_sys_unshare+0x31/0x40
[ 1211.511287][T19046]  do_syscall_64+0x106/0xf80
[ 1211.511307][T19046]  ? clear_bhb_loop+0x40/0x90
[ 1211.511325][T19046]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1211.511339][T19046] RIP: 0033:0x7fd277d9c799
[ 1211.511353][T19046] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1211.511369][T19046] RSP: 002b:00007fd278bc2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[ 1211.511383][T19046] RAX: ffffffffffffffda RBX: 00007fd278016090 RCX: 00007fd277d9c799
[ 1211.511393][T19046] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080
[ 1211.511401][T19046] RBP: 00007fd277e32c99 R08: 0000000000000000 R09: 0000000000000000
[ 1211.511410][T19046] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1211.511418][T19046] R13: 00007fd278016128 R14: 00007fd278016090 R15: 00007fffdc4ad0d8
[ 1211.511438][T19046]  </TASK>
[ 1212.109286][T19058] FAULT_INJECTION: forcing a failure.
[ 1212.109286][T19058] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1212.248110][T19058] CPU: 0 UID: 0 PID: 19058 Comm: syz.3.2277 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[ 1212.248138][T19058] Tainted: [U]=USER, [L]=SOFTLOCKUP
[ 1212.248144][T19058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1212.248153][T19058] Call Trace:
[ 1212.248159][T19058]  <TASK>
[ 1212.248165][T19058]  dump_stack_lvl+0x100/0x190
[ 1212.248191][T19058]  should_fail_ex.cold+0x5/0xa
[ 1212.248209][T19058]  strncpy_from_user+0x3b/0x2d0
[ 1212.248230][T19058]  do_getname+0x78/0x390
[ 1212.248249][T19058]  user_path_at+0x26/0x60
[ 1212.248276][T19058]  __x64_sys_mount+0x1fb/0x310
[ 1212.248295][T19058]  ? __pfx___x64_sys_mount+0x10/0x10
[ 1212.248317][T19058]  do_syscall_64+0x106/0xf80
[ 1212.248347][T19058]  ? clear_bhb_loop+0x40/0x90
[ 1212.248366][T19058]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1212.248381][T19058] RIP: 0033:0x7f650ed9c799
[ 1212.248394][T19058] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1212.248408][T19058] RSP: 002b:00007f650fca8028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 1212.248422][T19058] RAX: ffffffffffffffda RBX: 00007f650f015fa0 RCX: 00007f650ed9c799
[ 1212.248432][T19058] RDX: 00002000000001c0 RSI: 0000200000000180 RDI: 0000000000000000
[ 1212.248441][T19058] RBP: 00007f650ee32c99 R08: 0000000000000000 R09: 0000000000000000
[ 1212.248449][T19058] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000
[ 1212.248458][T19058] R13: 00007f650f016038 R14: 00007f650f015fa0 R15: 00007ffdfe7d1ba8
[ 1212.248477][T19058]  </TASK>
[ 1212.478472][T17722] Bluetooth: hci0: command 0x0c1a tx timeout
[ 1212.588415][T18598] Bluetooth: hci2: command 0x0c1a tx timeout
[ 1212.664745][T18598] Bluetooth: hci3: command 0x0c1a tx timeout
[ 1212.671134][T17722] Bluetooth: hci1: command 0x0c1a tx timeout
[ 1214.767840][T19093] hub 1-0:1.0: USB hub found
[ 1214.793933][T19093] hub 1-0:1.0: 1 port detected
[ 1214.940601][T19089] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1214.968226][T19089] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1215.006809][T19089] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1215.045727][T19089] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1215.959781][T19145] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1215.986640][T19145] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1216.023635][T19145] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1216.053260][T19145] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1218.027028][T18598] Bluetooth: hci2: command 0x0c1a tx timeout
[ 1218.033152][T17710] Bluetooth: hci0: command 0x0c1a tx timeout
[ 1218.039446][T17722] Bluetooth: hci1: command 0x0c1a tx timeout
[ 1218.107580][T17722] Bluetooth: hci3: command 0x0c1a tx timeout
[ 1218.498665][T19203] input: jJǸ-�¶š9ã%vø“ûJ86Ö‘ as /devices/virtual/input/input34
[ 1219.492983][T19226] zswap: compressor û not available
[ 1220.058367][T19251] FAULT_INJECTION: forcing a failure.
[ 1220.058367][T19251] name failslab, interval 1, probability 0, space 0, times 0
[ 1220.073081][T17722] Bluetooth: hci1: ACL packet for unknown connection handle 0
[ 1220.097292][T19251] CPU: 0 UID: 0 PID: 19251 Comm: syz.3.2305 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[ 1220.097320][T19251] Tainted: [U]=USER, [L]=SOFTLOCKUP
[ 1220.097325][T19251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1220.097334][T19251] Call Trace:
[ 1220.097340][T19251]  <TASK>
[ 1220.097346][T19251]  dump_stack_lvl+0x100/0x190
[ 1220.097372][T19251]  should_fail_ex.cold+0x5/0xa
[ 1220.097391][T19251]  should_failslab+0xc2/0x120
[ 1220.097406][T19251]  kmem_cache_alloc_noprof+0x7b/0x6e0
[ 1220.097426][T19251]  ? anon_vma_clone+0x2bd/0xc70
[ 1220.097448][T19251]  anon_vma_clone+0x2bd/0xc70
[ 1220.097471][T19251]  __split_vma+0x51f/0xd90
[ 1220.097492][T19251]  ? __pfx___split_vma+0x10/0x10
[ 1220.097515][T19251]  ? find_vma+0xbf/0x140
[ 1220.097532][T19251]  vma_modify+0x1121/0x2250
[ 1220.097556][T19251]  ? __pfx_vma_modify+0x10/0x10
[ 1220.097579][T19251]  vma_modify_policy+0x238/0x300
[ 1220.097599][T19251]  ? __pfx_vma_modify_policy+0x10/0x10
[ 1220.097631][T19251]  ? mas_walk+0x6ef/0x9b0
[ 1220.097744][T19251]  mbind_range+0x175/0x550
[ 1220.097765][T19251]  do_mbind+0x7de/0xfd0
[ 1220.097787][T19251]  ? __pfx_do_mbind+0x10/0x10
[ 1220.097803][T19251]  ? __lock_acquire+0x4a5/0x2630
[ 1220.097830][T19251]  ? __pfx_get_nodes+0x10/0x10
[ 1220.097849][T19251]  ? find_held_lock+0x2b/0x80
[ 1220.097867][T19251]  kernel_mbind+0x1b7/0x200
[ 1220.097885][T19251]  ? __pfx_kernel_mbind+0x10/0x10
[ 1220.097907][T19251]  do_syscall_64+0x106/0xf80
[ 1220.097929][T19251]  ? clear_bhb_loop+0x40/0x90
[ 1220.097947][T19251]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1220.097962][T19251] RIP: 0033:0x7f650ed9c799
[ 1220.097975][T19251] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1220.097989][T19251] RSP: 002b:00007f650fca8028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed
[ 1220.098003][T19251] RAX: ffffffffffffffda RBX: 00007f650f015fa0 RCX: 00007f650ed9c799
[ 1220.098013][T19251] RDX: 0000000000000004 RSI: 00000000002091d2 RDI: 0000000000000000
[ 1220.098021][T19251] RBP: 00007f650ee32c99 R08: 0000002000000006 R09: 0000000000000002
[ 1220.098030][T19251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1220.098039][T19251] R13: 00007f650f016038 R14: 00007f650f015fa0 R15: 00007ffdfe7d1ba8
[ 1220.098058][T19251]  </TASK>
[ 1223.738295][T19301] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1223.744838][T19301] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1223.752316][T19301] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1223.758711][T19301] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1223.840349][T19308] [U] ^@
[ 1224.799434][T19341] FAULT_INJECTION: forcing a failure.
[ 1224.799434][T19341] name failslab, interval 1, probability 0, space 0, times 0
[ 1224.860442][T19341] CPU: 0 UID: 0 PID: 19341 Comm: syz.2.2321 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[ 1224.860479][T19341] Tainted: [U]=USER, [L]=SOFTLOCKUP
[ 1224.860484][T19341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1224.860494][T19341] Call Trace:
[ 1224.860499][T19341]  <TASK>
[ 1224.860505][T19341]  dump_stack_lvl+0x100/0x190
[ 1224.860532][T19341]  should_fail_ex.cold+0x5/0xa
[ 1224.860550][T19341]  should_failslab+0xc2/0x120
[ 1224.860565][T19341]  kmem_cache_alloc_noprof+0x7b/0x6e0
[ 1224.860585][T19341]  ? anon_vma_clone+0x2bd/0xc70
[ 1224.860606][T19341]  anon_vma_clone+0x2bd/0xc70
[ 1224.860629][T19341]  __split_vma+0x51f/0xd90
[ 1224.860650][T19341]  ? __pfx___split_vma+0x10/0x10
[ 1224.860672][T19341]  ? find_vma+0xbf/0x140
[ 1224.860690][T19341]  vma_modify+0x1121/0x2250
[ 1224.860713][T19341]  ? __pfx_vma_modify+0x10/0x10
[ 1224.860736][T19341]  vma_modify_policy+0x238/0x300
[ 1224.860756][T19341]  ? __pfx_vma_modify_policy+0x10/0x10
[ 1224.860787][T19341]  ? mas_walk+0x6ef/0x9b0
[ 1224.860813][T19341]  mbind_range+0x175/0x550
[ 1224.860834][T19341]  do_mbind+0x7de/0xfd0
[ 1224.860858][T19341]  ? __pfx_do_mbind+0x10/0x10
[ 1224.860875][T19341]  ? __lock_acquire+0x4a5/0x2630
[ 1224.860901][T19341]  ? __pfx_get_nodes+0x10/0x10
[ 1224.860921][T19341]  ? find_held_lock+0x2b/0x80
[ 1224.860938][T19341]  kernel_mbind+0x1b7/0x200
[ 1224.860956][T19341]  ? __pfx_kernel_mbind+0x10/0x10
[ 1224.860979][T19341]  do_syscall_64+0x106/0xf80
[ 1224.860997][T19341]  ? clear_bhb_loop+0x40/0x90
[ 1224.861014][T19341]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1224.861028][T19341] RIP: 0033:0x7fd277d9c799
[ 1224.861041][T19341] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1224.861055][T19341] RSP: 002b:00007fd278be3028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed
[ 1224.861069][T19341] RAX: ffffffffffffffda RBX: 00007fd278015fa0 RCX: 00007fd277d9c799
[ 1224.861079][T19341] RDX: 0000000000000004 RSI: 00000000002091d2 RDI: 0000000000000000
[ 1224.861087][T19341] RBP: 00007fd277e32c99 R08: 0000002000000006 R09: 0000000000000002
[ 1224.861096][T19341] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1224.861104][T19341] R13: 00007fd278016038 R14: 00007fd278015fa0 R15: 00007fffdc4ad0d8
[ 1224.861124][T19341]  </TASK>
[ 1225.100546][T17722] Bluetooth: hci0: command 0x0c1a tx timeout
[ 1225.597285][   T30] audit: type=1800 audit(4294972608.298:38): pid=19346 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="" name="lu_gp_id" dev="configfs" ino=872350 res=0 errno=0
[ 1225.791632][T17722] Bluetooth: hci3: command 0x0c1a tx timeout
[ 1225.797871][T17710] Bluetooth: hci1: command 0x0c1a tx timeout
[ 1225.803970][T18598] Bluetooth: hci2: command 0x0c1a tx timeout
[ 1225.820709][T19346] could not allocate digest TFM handle 
[ 1229.175919][T19353] Process accounting paused
[ 1229.381081][T17710] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1229.391830][T17710] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1229.401844][T17710] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1229.409717][T17710] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1229.419790][T17710] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1230.520664][T19370] chnl_net:caif_netlink_parms(): no params data found
[ 1230.601338][T19391] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1230.763144][T19391] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1230.822916][T19391] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1230.944799][T19391] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1230.975408][T19391] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 1231.004766][T19391] Bluetooth: hci4: Opcode 0x0406 failed: -4
[ 1231.049272][T19391] Bluetooth: hci4: Opcode 0x0406 failed: -4
[ 1231.069801][T19370] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1231.107613][T19370] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1231.140254][T19370] bridge_slave_0: entered allmulticast mode
[ 1231.186901][T19370] bridge_slave_0: entered promiscuous mode
[ 1231.241405][T19370] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1231.274238][T19370] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1231.299218][T19370] bridge_slave_1: entered allmulticast mode
[ 1231.323172][T19370] bridge_slave_1: entered promiscuous mode
[ 1231.476884][T19370] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1231.519880][T19370] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1231.712802][T19370] team0: Port device team_slave_0 added
[ 1231.732934][T19416] NFSD: Failed to start, no listeners configured.
[ 1231.747164][T19370] team0: Port device team_slave_1 added
[ 1231.916886][T19370] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1231.934168][T19370] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1232.016363][T19370] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1232.069213][T19370] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1232.094035][T19370] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1232.224142][T19370] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1232.472703][T19370] hsr_slave_0: entered promiscuous mode
[ 1232.509293][T19370] hsr_slave_1: entered promiscuous mode
[ 1232.548860][T19370] debugfs: 'hsr0' already exists in 'hsr'
[ 1232.582525][T19370] Cannot create hsr debugfs directory
[ 1232.674489][T17710] Bluetooth: hci0: command 0x0c1a tx timeout
[ 1232.834731][T17722] Bluetooth: hci1: command 0x0c1a tx timeout
[ 1232.840759][T17722] Bluetooth: hci2: command 0x0c1a tx timeout
[ 1232.994733][T17722] Bluetooth: hci4: command 0x041b tx timeout
[ 1233.001675][T17722] Bluetooth: hci3: command 0x0c1a tx timeout
[ 1233.780138][T19370] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 1233.862996][T19370] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 1233.931724][T19370] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 1233.973475][T19370] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 1234.533272][T19370] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1234.909865][T19370] 8021q: adding VLAN 0 to HW filter on device team0
[ 1235.046820][T19480] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1235.055663][T19480] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1235.075846][T17722] Bluetooth: hci4: command 0x041b tx timeout
[ 1235.187039][T19480] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1235.209998][T17715] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1235.217184][T17715] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1235.523798][T19480] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1235.655982][T19480] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 1235.700893][T17847] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1235.708134][T17847] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1235.970537][T19370] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1236.455057][T19494] Invalid ELF header magic: != ELF
[ 1236.475091][T19370] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1237.077178][T17722] Bluetooth: hci2: command 0x0c1a tx timeout
[ 1237.083290][T17710] Bluetooth: hci0: command 0x0c1a tx timeout
[ 1237.237431][T17722] Bluetooth: hci3: command 0x0c1a tx timeout
[ 1237.243841][T17710] Bluetooth: hci1: command 0x0c1a tx timeout
[ 1237.362115][T19370] veth0_vlan: entered promiscuous mode
[ 1237.422060][T19370] veth1_vlan: entered promiscuous mode
[ 1237.508954][T19370] veth0_macvtap: entered promiscuous mode
[ 1237.565127][T19370] veth1_macvtap: entered promiscuous mode
[ 1237.634077][T19370] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1237.673680][T19370] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1237.715507][T18244] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1237.725162][T17722] Bluetooth: hci4: command 0x041b tx timeout
[ 1237.762887][T18244] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1237.796462][T18244] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1237.826643][T18244] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1238.089467][T19514] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1238.096400][T19514] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1238.103072][T19514] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1238.110955][T19514] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1238.119549][T19514] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 1238.243307][T17713] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1238.301904][T17713] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1238.388460][T18244] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1238.405476][T18244] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1238.787697][T19539] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1238.979062][T19539] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1239.001811][T19539] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1239.049424][T19539] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1239.074550][T19539] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 1239.322334][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[ 1239.329289][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[ 1239.683632][T19547] hub 1-0:1.0: USB hub found
[ 1239.712932][T19547] hub 1-0:1.0: 1 port detected
[ 1239.807496][T19565] netlink: 326 bytes leftover after parsing attributes in process `syz.2.2356'.
[ 1239.863093][T19542] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1239.870152][T19542] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1239.891182][T19542] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1239.912750][T19542] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1239.936078][T19542] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 1240.749119][T19583] FAULT_INJECTION: forcing a failure.
[ 1240.749119][T19583] name failslab, interval 1, probability 0, space 0, times 0
[ 1240.806556][T19583] CPU: 0 UID: 0 PID: 19583 Comm: syz.4.2360 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[ 1240.806585][T19583] Tainted: [U]=USER, [L]=SOFTLOCKUP
[ 1240.806591][T19583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1240.806600][T19583] Call Trace:
[ 1240.806605][T19583]  <TASK>
[ 1240.806611][T19583]  dump_stack_lvl+0x100/0x190
[ 1240.806646][T19583]  should_fail_ex.cold+0x5/0xa
[ 1240.806665][T19583]  should_failslab+0xc2/0x120
[ 1240.806681][T19583]  kmem_cache_alloc_noprof+0x7b/0x6e0
[ 1240.806703][T19583]  ? __proc_create+0x2cb/0x8c0
[ 1240.806729][T19583]  __proc_create+0x2cb/0x8c0
[ 1240.806751][T19583]  ? __pfx___proc_create+0x10/0x10
[ 1240.806779][T19583]  proc_mkdir+0x81/0x170
[ 1240.806792][T19583]  ? __pfx_proc_mkdir+0x10/0x10
[ 1240.806804][T19583]  ? cache_register_net+0x137/0x5e0
[ 1240.806825][T19583]  ? cache_register_net+0x137/0x5e0
[ 1240.806848][T19583]  cache_register_net+0x18f/0x5e0
[ 1240.806871][T19583]  gss_svc_init_net+0x98/0x640
[ 1240.806888][T19583]  ? __pfx_canbcm_pernet_init+0x10/0x10
[ 1240.806909][T19583]  ? __pfx_rpcsec_gss_init_net+0x10/0x10
[ 1240.806927][T19583]  ops_init+0x1e2/0x5f0
[ 1240.806950][T19583]  setup_net+0x118/0x3a0
[ 1240.806975][T19583]  ? __pfx_setup_net+0x10/0x10
[ 1240.806994][T19583]  ? lockdep_init_map_type+0x5c/0x250
[ 1240.807013][T19583]  ? mutex_init_lockep+0x110/0x150
[ 1240.807036][T19583]  copy_net_ns+0x46f/0x7c0
[ 1240.807060][T19583]  create_new_namespaces+0x3ea/0xac0
[ 1240.807081][T19583]  unshare_nsproxy_namespaces+0xc3/0x1f0
[ 1240.807099][T19583]  ksys_unshare+0x473/0xad0
[ 1240.807118][T19583]  ? __pfx_ksys_unshare+0x10/0x10
[ 1240.807145][T19583]  __x64_sys_unshare+0x31/0x40
[ 1240.807162][T19583]  do_syscall_64+0x106/0xf80
[ 1240.807181][T19583]  ? clear_bhb_loop+0x40/0x90
[ 1240.807199][T19583]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1240.807213][T19583] RIP: 0033:0x7f493b19c799
[ 1240.807226][T19583] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1240.807241][T19583] RSP: 002b:00007f493c03c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[ 1240.807256][T19583] RAX: ffffffffffffffda RBX: 00007f493b416090 RCX: 00007f493b19c799
[ 1240.807267][T19583] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080
[ 1240.807276][T19583] RBP: 00007f493b232c99 R08: 0000000000000000 R09: 0000000000000000
[ 1240.807285][T19583] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1240.807294][T19583] R13: 00007f493b416128 R14: 00007f493b416090 R15: 00007ffdac4c2ed8
[ 1240.807314][T19583]  </TASK>
[ 1241.582118][T17722] Bluetooth: hci0: command 0x0c1a tx timeout
[ 1241.879315][T17722] Bluetooth: hci2: command 0x0c1a tx timeout
[ 1241.959205][T17710] Bluetooth: hci3: command 0x0c1a tx timeout
[ 1241.965273][T18598] Bluetooth: hci1: command 0x0c1a tx timeout
[ 1241.971316][T17722] Bluetooth: hci4: command 0x041b tx timeout
[ 1242.740094][T19580] FAULT_INJECTION: forcing a failure.
[ 1242.740094][T19580] name failslab, interval 1, probability 0, space 0, times 0
[ 1242.869440][T19580] CPU: 0 UID: 0 PID: 19580 Comm: syz.1.2358 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[ 1242.869469][T19580] Tainted: [U]=USER, [L]=SOFTLOCKUP
[ 1242.869475][T19580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1242.869484][T19580] Call Trace:
[ 1242.869490][T19580]  <TASK>
[ 1242.869497][T19580]  dump_stack_lvl+0x100/0x190
[ 1242.869523][T19580]  should_fail_ex.cold+0x5/0xa
[ 1242.869541][T19580]  should_failslab+0xc2/0x120
[ 1242.869556][T19580]  __kvmalloc_node_noprof+0xfa/0xa00
[ 1242.869578][T19580]  ? alloc_fdtable+0x110/0x2d0
[ 1242.869604][T19580]  alloc_fdtable+0x110/0x2d0
[ 1242.869626][T19580]  dup_fd+0x995/0xd10
[ 1242.869640][T19580]  ? fd_statfs+0xdd/0x120
[ 1242.869663][T19580]  ksys_unshare+0x7ad/0xad0
[ 1242.869681][T19580]  ? __pfx_ksys_unshare+0x10/0x10
[ 1242.869700][T19580]  ? arch_syscall_is_vdso_sigreturn+0xb6/0x200
[ 1242.869718][T19580]  ? syscall_user_dispatch+0x76/0x130
[ 1242.869740][T19580]  __x64_sys_unshare+0x31/0x40
[ 1242.869757][T19580]  do_syscall_64+0x106/0xf80
[ 1242.869777][T19580]  ? clear_bhb_loop+0x40/0x90
[ 1242.869794][T19580]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1242.869808][T19580] RIP: 0033:0x7fbd2db9c799
[ 1242.869821][T19580] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1242.869835][T19580] RSP: 002b:00007fbd2eace028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[ 1242.869849][T19580] RAX: ffffffffffffffda RBX: 00007fbd2de16180 RCX: 00007fbd2db9c799
[ 1242.869859][T19580] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000400
[ 1242.869867][T19580] RBP: 00007fbd2dc32c99 R08: 0000000000000000 R09: 0000000000000000
[ 1242.869876][T19580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1242.869884][T19580] R13: 00007fbd2de16218 R14: 00007fbd2de16180 R15: 00007ffec3cf9e58
[ 1242.869903][T19580]  </TASK>
[ 1244.040117][T17722] Bluetooth: hci4: command 0x041b tx timeout
[ 1244.528961][T19636] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74
[ 1244.633055][T19636] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74
[ 1244.722678][T19636] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74
[ 1244.847785][T19636] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74
[ 1245.008493][T19636] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74
[ 1245.133246][T19636] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[ 1245.153169][T17722] Bluetooth: hci2: ACL packet for unknown connection handle 0
[ 1246.121838][T17722] Bluetooth: hci4: command 0x041b tx timeout
[ 1246.979708][T19661] FAULT_INJECTION: forcing a failure.
[ 1246.979708][T19661] name fail_futex, interval 1, probability 0, space 0, times 0
[ 1247.017695][T19661] CPU: 0 UID: 0 PID: 19661 Comm: syz.4.2376 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[ 1247.017722][T19661] Tainted: [U]=USER, [L]=SOFTLOCKUP
[ 1247.017727][T19661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1247.017736][T19661] Call Trace:
[ 1247.017740][T19661]  <TASK>
[ 1247.017746][T19661]  dump_stack_lvl+0x100/0x190
[ 1247.017771][T19661]  should_fail_ex.cold+0x5/0xa
[ 1247.017788][T19661]  get_futex_key+0x295/0x1620
[ 1247.017806][T19661]  ? __pfx_get_futex_key+0x10/0x10
[ 1247.017820][T19661]  ? lock_acquire+0x1cf/0x380
[ 1247.017843][T19661]  futex_wake+0xea/0x530
[ 1247.017863][T19661]  ? __pfx_futex_wake+0x10/0x10
[ 1247.017882][T19661]  ? exit_mm_release+0x19/0x30
[ 1247.017903][T19661]  do_futex+0x32b/0x350
[ 1247.017919][T19661]  ? __pfx_do_futex+0x10/0x10
[ 1247.017934][T19661]  ? __might_fault+0xc5/0x140
[ 1247.017957][T19661]  mm_release+0x24a/0x2f0
[ 1247.017979][T19661]  do_exit+0x704/0x2b60
[ 1247.017999][T19661]  ? __pfx_do_exit+0x10/0x10
[ 1247.018016][T19661]  ? do_raw_spin_lock+0x128/0x260
[ 1247.018034][T19661]  ? find_held_lock+0x2b/0x80
[ 1247.018046][T19661]  ? get_signal+0x7e0/0x21e0
[ 1247.018061][T19661]  do_group_exit+0xd5/0x2a0
[ 1247.018080][T19661]  get_signal+0x1ec7/0x21e0
[ 1247.018099][T19661]  ? __pfx_get_signal+0x10/0x10
[ 1247.018114][T19661]  ? do_futex+0x192/0x350
[ 1247.018132][T19661]  arch_do_signal_or_restart+0x91/0x770
[ 1247.018148][T19661]  ? fd_statfs+0xdd/0x120
[ 1247.018167][T19661]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[ 1247.018188][T19661]  ? __pfx___x64_sys_futex+0x10/0x10
[ 1247.018208][T19661]  exit_to_user_mode_loop+0x86/0x4a0
[ 1247.018227][T19661]  do_syscall_64+0x668/0xf80
[ 1247.018245][T19661]  ? clear_bhb_loop+0x40/0x90
[ 1247.018262][T19661]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1247.018276][T19661] RIP: 0033:0x7f493b19c799
[ 1247.018288][T19661] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1247.018301][T19661] RSP: 002b:00007f493c01b0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 1247.018314][T19661] RAX: fffffffffffffe00 RBX: 00007f493b416188 RCX: 00007f493b19c799
[ 1247.018323][T19661] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f493b416188
[ 1247.018331][T19661] RBP: 00007f493b416180 R08: 0000000000000000 R09: 0000000000000000
[ 1247.018339][T19661] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1247.018346][T19661] R13: 00007f493b416218 R14: 00007ffdac4c2df0 R15: 00007ffdac4c2ed8
[ 1247.018364][T19661]  </TASK>
[ 1247.403857][T19665] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1247.409909][T19665] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1247.416459][T19665] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1247.423914][T19665] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1247.430003][T19665] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 1247.661158][T19686] input: f¬
 as /devices/virtual/input/input35
[ 1247.865355][T19686] zram: Removed device: zram0
[ 1248.421083][T19706] netlink: 326 bytes leftover after parsing attributes in process `syz.1.2387'.
[ 1248.582509][T19707] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1248.707493][T19707] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1248.861540][T19707] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1248.955384][T19707] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1249.035659][T19707] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 1250.433630][T19719] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1250.440128][T19719] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1250.451997][T19719] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1250.458855][T19719] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1250.465371][T19719] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 1251.563875][T18598] Bluetooth: hci0: command 0x0c1a tx timeout
[ 1251.648751][T19760] FAULT_INJECTION: forcing a failure.
[ 1251.648751][T19760] name fail_futex, interval 1, probability 0, space 0, times 0
[ 1251.710567][T19760] CPU: 0 UID: 0 PID: 19760 Comm: syz.4.2394 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[ 1251.710593][T19760] Tainted: [U]=USER, [L]=SOFTLOCKUP
[ 1251.710598][T19760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1251.710607][T19760] Call Trace:
[ 1251.710613][T19760]  <TASK>
[ 1251.710619][T19760]  dump_stack_lvl+0x100/0x190
[ 1251.710646][T19760]  should_fail_ex.cold+0x5/0xa
[ 1251.710664][T19760]  get_futex_key+0x1d2/0x1620
[ 1251.710683][T19760]  ? __pfx_get_futex_key+0x10/0x10
[ 1251.710706][T19760]  futex_wake+0xea/0x530
[ 1251.710729][T19760]  ? __pfx_futex_wake+0x10/0x10
[ 1251.710753][T19760]  ? putname+0xb1/0x110
[ 1251.710766][T19760]  ? kmem_cache_free+0x124/0x6a0
[ 1251.710825][T19760]  do_futex+0x32b/0x350
[ 1251.710844][T19760]  ? __pfx_do_futex+0x10/0x10
[ 1251.710862][T19760]  ? __pfx_do_sys_openat2+0x10/0x10
[ 1251.710882][T19760]  ? __fget_files+0x21f/0x3d0
[ 1251.710898][T19760]  __x64_sys_futex+0x34f/0x4d0
[ 1251.710916][T19760]  ? __x64_sys_openat+0x12d/0x210
[ 1251.710934][T19760]  ? __pfx___x64_sys_futex+0x10/0x10
[ 1251.710958][T19760]  do_syscall_64+0x106/0xf80
[ 1251.710977][T19760]  ? clear_bhb_loop+0x40/0x90
[ 1251.710994][T19760]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1251.711009][T19760] RIP: 0033:0x7f493b19c799
[ 1251.711023][T19760] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1251.711037][T19760] RSP: 002b:00007f493c05d0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 1251.711050][T19760] RAX: ffffffffffffffda RBX: 00007f493b415fa8 RCX: 00007f493b19c799
[ 1251.711060][T19760] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f493b415fac
[ 1251.711069][T19760] RBP: 00007f493b415fa0 R08: 0000000000000000 R09: 0000000000000000
[ 1251.711077][T19760] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000000
[ 1251.711085][T19760] R13: 00007f493b416038 R14: 00007ffdac4c2df0 R15: 00007ffdac4c2ed8
[ 1251.711104][T19760]  </TASK>
[ 1251.922839][T19760] netlink: 122 bytes leftover after parsing attributes in process `syz.4.2394'.
[ 1251.968481][T19762] zero sized request
[ 1251.973073][T19762] zero sized request
[ 1252.274291][T19772] netlink: 326 bytes leftover after parsing attributes in process `syz.3.2399'.
[ 1252.309298][T19772] bridge0: port 3(team0) entered disabled state
[ 1252.454233][T18598] Bluetooth: hci2: command 0x0c1a tx timeout
[ 1252.543485][T18598] Bluetooth: hci4: command 0x041b tx timeout
[ 1252.549863][T18598] Bluetooth: hci3: command 0x0c1a tx timeout
[ 1252.556424][T18598] Bluetooth: hci1: command 0x0c1a tx timeout
[ 1254.440940][T19815] FAULT_INJECTION: forcing a failure.
[ 1254.440940][T19815] name failslab, interval 1, probability 0, space 0, times 0
[ 1254.510302][T19815] CPU: 0 UID: 0 PID: 19815 Comm: syz.4.2408 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[ 1254.510331][T19815] Tainted: [U]=USER, [L]=SOFTLOCKUP
[ 1254.510337][T19815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1254.510347][T19815] Call Trace:
[ 1254.510353][T19815]  <TASK>
[ 1254.510359][T19815]  dump_stack_lvl+0x100/0x190
[ 1254.510419][T19815]  should_fail_ex.cold+0x5/0xa
[ 1254.510450][T19815]  should_failslab+0xc2/0x120
[ 1254.510474][T19815]  __kmalloc_cache_noprof+0x7a/0x6f0
[ 1254.510497][T19815]  ? alloc_fs_context+0x57/0xf40
[ 1254.510517][T19815]  ? __get_fs_type+0x12c/0x170
[ 1254.510537][T19815]  alloc_fs_context+0x57/0xf40
[ 1254.510559][T19815]  ? __get_fs_type+0x12c/0x170
[ 1254.510577][T19815]  fs_context_for_submount+0x26/0xc0
[ 1254.510594][T19815]  trace_automount+0x47/0xa0
[ 1254.510625][T19815]  __traverse_mounts+0x1b9/0x8a0
[ 1254.510646][T19815]  step_into_slowpath+0xb7e/0xf90
[ 1254.510668][T19815]  ? __d_lookup+0x25c/0x4a0
[ 1254.510693][T19815]  ? __d_lookup+0x25c/0x4a0
[ 1254.510715][T19815]  ? __pfx_step_into_slowpath+0x10/0x10
[ 1254.510736][T19815]  ? __d_lookup+0x266/0x4a0
[ 1254.510758][T19815]  ? lookup_fast+0x2da/0x600
[ 1254.510776][T19815]  ? inode_permission+0x374/0x620
[ 1254.510797][T19815]  link_path_walk+0xf28/0x1cc0
[ 1254.510825][T19815]  path_openat+0x1be/0x31a0
[ 1254.510838][T19815]  ? kasan_save_stack+0x3f/0x50
[ 1254.510858][T19815]  ? kasan_save_stack+0x30/0x50
[ 1254.510877][T19815]  ? kasan_save_track+0x14/0x30
[ 1254.510904][T19815]  ? kmem_cache_alloc_noprof+0x241/0x6e0
[ 1254.510928][T19815]  ? __pfx_path_openat+0x10/0x10
[ 1254.510949][T19815]  do_file_open+0x20e/0x430
[ 1254.510964][T19815]  ? __pfx_do_file_open+0x10/0x10
[ 1254.510991][T19815]  ? alloc_fd+0x476/0x790
[ 1254.511006][T19815]  ? do_getname+0x191/0x390
[ 1254.511024][T19815]  do_sys_openat2+0x10d/0x1e0
[ 1254.511043][T19815]  ? __pfx_do_sys_openat2+0x10/0x10
[ 1254.511067][T19815]  __x64_sys_openat+0x12d/0x210
[ 1254.511086][T19815]  ? __pfx___x64_sys_openat+0x10/0x10
[ 1254.511111][T19815]  do_syscall_64+0x106/0xf80
[ 1254.511130][T19815]  ? clear_bhb_loop+0x40/0x90
[ 1254.511148][T19815]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1254.511163][T19815] RIP: 0033:0x7f493b19c799
[ 1254.511177][T19815] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1254.511191][T19815] RSP: 002b:00007f493c05d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 1254.511206][T19815] RAX: ffffffffffffffda RBX: 00007f493b415fa0 RCX: 00007f493b19c799
[ 1254.511216][T19815] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c
[ 1254.511226][T19815] RBP: 00007f493b232c99 R08: 0000000000000000 R09: 0000000000000000
[ 1254.511235][T19815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1254.511244][T19815] R13: 00007f493b416038 R14: 00007f493b415fa0 R15: 00007ffdac4c2ed8
[ 1254.511263][T19815]  </TASK>
[ 1257.455632][T19849] program syz.2.2409 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1257.891904][T19871] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74
[ 1258.047817][T19871] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74
[ 1258.203343][T19871] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74
[ 1258.338859][T19871] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74
[ 1258.533442][T19871] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74
[ 1258.726875][T19871] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[ 1259.586416][T19896] Process accounting resumed
[ 1260.515289][T19923] input: f¬
 as /devices/virtual/input/input37
[ 1262.262952][T19943] usb usb13: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[ 1262.383995][T19946] netlink: 342 bytes leftover after parsing attributes in process `syz.2.2430'.
[ 1267.860546][T20028] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[ 1268.925280][T20018] kexec: Could not allocate control_code_buffer
[ 1270.482476][T20087] FAULT_INJECTION: forcing a failure.
[ 1270.482476][T20087] name failslab, interval 1, probability 0, space 0, times 0
[ 1270.563268][T20087] CPU: 0 UID: 0 PID: 20087 Comm: syz.2.2459 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[ 1270.563304][T20087] Tainted: [U]=USER, [L]=SOFTLOCKUP
[ 1270.563309][T20087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1270.563318][T20087] Call Trace:
[ 1270.563324][T20087]  <TASK>
[ 1270.563331][T20087]  dump_stack_lvl+0x100/0x190
[ 1270.563357][T20087]  should_fail_ex.cold+0x5/0xa
[ 1270.563376][T20087]  should_failslab+0xc2/0x120
[ 1270.563392][T20087]  kmem_cache_alloc_noprof+0x7b/0x6e0
[ 1270.563414][T20087]  ? security_file_alloc+0x34/0x2c0
[ 1270.563433][T20087]  ? trace_kmem_cache_alloc+0xf3/0x120
[ 1270.563451][T20087]  security_file_alloc+0x34/0x2c0
[ 1270.563468][T20087]  init_file+0x95/0x480
[ 1270.563485][T20087]  alloc_empty_file+0x73/0x1c0
[ 1270.563503][T20087]  dentry_open+0x46/0xd0
[ 1270.563521][T20087]  acct_on+0x189/0x9e0
[ 1270.563542][T20087]  ? __pfx_acct_on+0x10/0x10
[ 1270.563561][T20087]  ? bpf_lsm_capable+0x9/0x10
[ 1270.563576][T20087]  ? security_capable+0x80/0x260
[ 1270.563599][T20087]  __x64_sys_acct+0x81/0x1e0
[ 1270.563617][T20087]  ? lockdep_hardirqs_on+0x78/0x100
[ 1270.563637][T20087]  do_syscall_64+0x106/0xf80
[ 1270.563655][T20087]  ? clear_bhb_loop+0x40/0x90
[ 1270.563672][T20087]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1270.563687][T20087] RIP: 0033:0x7fd277d9c799
[ 1270.563700][T20087] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1270.563714][T20087] RSP: 002b:00007fd278be3028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a3
[ 1270.563728][T20087] RAX: ffffffffffffffda RBX: 00007fd278015fa0 RCX: 00007fd277d9c799
[ 1270.563738][T20087] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000100
[ 1270.563746][T20087] RBP: 00007fd277e32c99 R08: 0000000000000000 R09: 0000000000000000
[ 1270.563755][T20087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1270.563763][T20087] R13: 00007fd278016038 R14: 00007fd278015fa0 R15: 00007fffdc4ad0d8
[ 1270.563781][T20087]  </TASK>
[ 1271.199928][T20096] NFSD: Failed to start, no listeners configured.
[ 1272.569859][T20119] netlink: 342 bytes leftover after parsing attributes in process `syz.3.2463'.
[ 1273.116227][T20125] netlink: 98 bytes leftover after parsing attributes in process `syz.1.2466'.
[ 1273.315664][T20131] netlink: 186 bytes leftover after parsing attributes in process `syz.4.2467'.
[ 1273.718353][T20143] lo: entered allmulticast mode
[ 1273.755734][T20143] lo: left allmulticast mode
[ 1274.239681][T20130] FAULT_INJECTION: forcing a failure.
[ 1274.239681][T20130] name fail_futex, interval 1, probability 0, space 0, times 0
[ 1274.421174][T20130] CPU: 0 UID: 0 PID: 20130 Comm: syz.3.2468 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[ 1274.421203][T20130] Tainted: [U]=USER, [L]=SOFTLOCKUP
[ 1274.421209][T20130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1274.421218][T20130] Call Trace:
[ 1274.421223][T20130]  <TASK>
[ 1274.421229][T20130]  dump_stack_lvl+0x100/0x190
[ 1274.421255][T20130]  should_fail_ex.cold+0x5/0xa
[ 1274.421273][T20130]  get_futex_key+0x1d2/0x1620
[ 1274.421294][T20130]  ? __pfx_get_futex_key+0x10/0x10
[ 1274.421317][T20130]  futex_wake+0xea/0x530
[ 1274.421340][T20130]  ? __pfx_futex_wake+0x10/0x10
[ 1274.421361][T20130]  ? perf_event_namespaces+0x1ad/0x200
[ 1274.421385][T20130]  ? do_raw_spin_lock+0x128/0x260
[ 1274.421410][T20130]  do_futex+0x32b/0x350
[ 1274.421428][T20130]  ? __pfx_do_futex+0x10/0x10
[ 1274.421445][T20130]  ? ksys_unshare+0x6c5/0xad0
[ 1274.421465][T20130]  __x64_sys_futex+0x34f/0x4d0
[ 1274.421485][T20130]  ? __pfx___x64_sys_futex+0x10/0x10
[ 1274.421510][T20130]  do_syscall_64+0x106/0xf80
[ 1274.421529][T20130]  ? clear_bhb_loop+0x40/0x90
[ 1274.421546][T20130]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1274.421561][T20130] RIP: 0033:0x7f650ed9c799
[ 1274.421573][T20130] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1274.421587][T20130] RSP: 002b:00007f650fc870e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 1274.421602][T20130] RAX: ffffffffffffffda RBX: 00007f650f016098 RCX: 00007f650ed9c799
[ 1274.421611][T20130] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f650f01609c
[ 1274.421620][T20130] RBP: 00007f650f016090 R08: 0000000000000000 R09: 0000000000000000
[ 1274.421628][T20130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1274.421636][T20130] R13: 00007f650f016128 R14: 00007ffdfe7d1ac0 R15: 00007ffdfe7d1ba8
[ 1274.421655][T20130]  </TASK>
[ 1274.861600][T20157] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[ 1275.512936][T17709] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 1357 with max blocks 3 with error 117
[ 1275.608977][T17709] EXT4-fs (sda1): This should not happen!! Data will be lost
[ 1275.608977][T17709] 
[ 1277.239933][T20203] Invalid ELF header magic: != ELF
[ 1277.313839][T20203] FAULT_INJECTION: forcing a failure.
[ 1277.313839][T20203] name fail_futex, interval 1, probability 0, space 0, times 0
[ 1277.382290][T20203] CPU: 0 UID: 0 PID: 20203 Comm: syz.3.2481 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[ 1277.382318][T20203] Tainted: [U]=USER, [L]=SOFTLOCKUP
[ 1277.382324][T20203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1277.382333][T20203] Call Trace:
[ 1277.382338][T20203]  <TASK>
[ 1277.382344][T20203]  dump_stack_lvl+0x100/0x190
[ 1277.382371][T20203]  should_fail_ex.cold+0x5/0xa
[ 1277.382389][T20203]  get_futex_key+0x1d2/0x1620
[ 1277.382409][T20203]  ? __pfx_get_futex_key+0x10/0x10
[ 1277.382427][T20203]  ? find_held_lock+0x2b/0x80
[ 1277.382441][T20203]  ? file_tty_write.isra.0+0x5ea/0x890
[ 1277.382462][T20203]  ? file_tty_write.isra.0+0x5ea/0x890
[ 1277.382483][T20203]  futex_wake+0xea/0x530
[ 1277.382503][T20203]  ? file_tty_write.isra.0+0x5ef/0x890
[ 1277.382523][T20203]  ? __pfx_futex_wake+0x10/0x10
[ 1277.382546][T20203]  ? vfs_write+0x15d/0x1070
[ 1277.382568][T20203]  ? __pfx_tty_write+0x10/0x10
[ 1277.382588][T20203]  do_futex+0x32b/0x350
[ 1277.382606][T20203]  ? __pfx_do_futex+0x10/0x10
[ 1277.382628][T20203]  __x64_sys_futex+0x34f/0x4d0
[ 1277.382646][T20203]  ? fput+0x79/0x100
[ 1277.382661][T20203]  ? __pfx___x64_sys_futex+0x10/0x10
[ 1277.382677][T20203]  ? ksys_write+0x1ac/0x250
[ 1277.382690][T20203]  ? __pfx_ksys_write+0x10/0x10
[ 1277.382707][T20203]  do_syscall_64+0x106/0xf80
[ 1277.382726][T20203]  ? clear_bhb_loop+0x40/0x90
[ 1277.382753][T20203]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1277.382769][T20203] RIP: 0033:0x7f650ed9c799
[ 1277.382788][T20203] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1277.382802][T20203] RSP: 002b:00007f650fca80e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 1277.382818][T20203] RAX: ffffffffffffffda RBX: 00007f650f015fa8 RCX: 00007f650ed9c799
[ 1277.382827][T20203] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f650f015fac
[ 1277.382836][T20203] RBP: 00007f650f015fa0 R08: 0000000000000000 R09: 0000000000000000
[ 1277.382845][T20203] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[ 1277.382854][T20203] R13: 00007f650f016038 R14: 00007ffdfe7d1ac0 R15: 00007ffdfe7d1ba8
[ 1277.382873][T20203]  </TASK>
[ 1279.514199][T20246] Invalid ELF header magic: != ELF
[ 1279.925460][T20247] FAULT_INJECTION: forcing a failure.
[ 1279.925460][T20247] name failslab, interval 1, probability 0, space 0, times 0
[ 1280.067575][T20247] CPU: 0 UID: 0 PID: 20247 Comm: syz.2.2488 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[ 1280.067606][T20247] Tainted: [U]=USER, [L]=SOFTLOCKUP
[ 1280.067611][T20247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1280.067620][T20247] Call Trace:
[ 1280.067625][T20247]  <TASK>
[ 1280.067631][T20247]  dump_stack_lvl+0x100/0x190
[ 1280.067657][T20247]  should_fail_ex.cold+0x5/0xa
[ 1280.067675][T20247]  should_failslab+0xc2/0x120
[ 1280.067691][T20247]  __kvmalloc_node_noprof+0xfa/0xa00
[ 1280.067713][T20247]  ? alloc_fdtable+0x110/0x2d0
[ 1280.067738][T20247]  alloc_fdtable+0x110/0x2d0
[ 1280.067760][T20247]  dup_fd+0x995/0xd10
[ 1280.067774][T20247]  ? fd_statfs+0xdd/0x120
[ 1280.067796][T20247]  ksys_unshare+0x7ad/0xad0
[ 1280.067816][T20247]  ? __pfx_ksys_unshare+0x10/0x10
[ 1280.067834][T20247]  ? arch_syscall_is_vdso_sigreturn+0xb6/0x200
[ 1280.067852][T20247]  ? syscall_user_dispatch+0x76/0x130
[ 1280.067876][T20247]  __x64_sys_unshare+0x31/0x40
[ 1280.067893][T20247]  do_syscall_64+0x106/0xf80
[ 1280.067912][T20247]  ? clear_bhb_loop+0x40/0x90
[ 1280.067929][T20247]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1280.067944][T20247] RIP: 0033:0x7fd277d9c799
[ 1280.067957][T20247] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1280.067971][T20247] RSP: 002b:00007fd278ba1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[ 1280.067985][T20247] RAX: ffffffffffffffda RBX: 00007fd278016180 RCX: 00007fd277d9c799
[ 1280.067994][T20247] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000400
[ 1280.068002][T20247] RBP: 00007fd277e32c99 R08: 0000000000000000 R09: 0000000000000000
[ 1280.068010][T20247] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1280.068018][T20247] R13: 00007fd278016218 R14: 00007fd278016180 R15: 00007fffdc4ad0d8
[ 1280.068037][T20247]  </TASK>
[ 1281.255080][T20260] vivid-007: =================  START STATUS  =================
[ 1281.308840][T20260] vivid-007: Generate PTS: true
[ 1281.313740][T20260] vivid-007: Generate SCR: true
[ 1281.348817][T20260] tpg source WxH: 320x240 (Y'CbCr)
[ 1281.353946][T20260] tpg field: 1
[ 1281.357295][T20260] tpg crop: (0,0)/320x240
[ 1281.427955][T20260] tpg compose: (0,0)/320x240
[ 1281.490830][T20260] tpg colorspace: 8
[ 1281.522323][T20257] FAULT_INJECTION: forcing a failure.
[ 1281.522323][T20257] name failslab, interval 1, probability 0, space 0, times 0
[ 1281.535968][T20260] tpg transfer function: 0/0
[ 1281.559452][T20260] tpg Y'CbCr encoding: 0/0
[ 1281.625448][T20257] CPU: 0 UID: 0 PID: 20257 Comm: syz.3.2493 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[ 1281.625475][T20257] Tainted: [U]=USER, [L]=SOFTLOCKUP
[ 1281.625481][T20257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1281.625490][T20257] Call Trace:
[ 1281.625496][T20257]  <TASK>
[ 1281.625502][T20257]  dump_stack_lvl+0x100/0x190
[ 1281.625529][T20257]  should_fail_ex.cold+0x5/0xa
[ 1281.625547][T20257]  should_failslab+0xc2/0x120
[ 1281.625562][T20257]  __kmalloc_cache_noprof+0x7a/0x6f0
[ 1281.625581][T20257]  ? newseg+0x269/0xed0
[ 1281.625603][T20257]  newseg+0x269/0xed0
[ 1281.625620][T20257]  ? __pfx_futex_wait+0x10/0x10
[ 1281.625643][T20257]  ? __pfx_newseg+0x10/0x10
[ 1281.625660][T20257]  ? down_write+0x146/0x1f0
[ 1281.625682][T20257]  ? __sched_setaffinity+0x17c/0x280
[ 1281.625697][T20257]  ? __pfx___sched_setaffinity+0x10/0x10
[ 1281.625713][T20257]  ipcget+0xee/0xf50
[ 1281.625737][T20257]  ? do_futex+0x192/0x350
[ 1281.625755][T20257]  ? __pfx_do_futex+0x10/0x10
[ 1281.625773][T20257]  ? sched_setaffinity+0xe0/0x400
[ 1281.625787][T20257]  ? __might_fault+0xc5/0x140
[ 1281.625807][T20257]  ? __pfx_ipcget+0x10/0x10
[ 1281.625826][T20257]  ? __x64_sys_futex+0x34f/0x4d0
[ 1281.625842][T20257]  ? __x64_sys_futex+0x358/0x4d0
[ 1281.625863][T20257]  __x64_sys_shmget+0x13b/0x1b0
[ 1281.625880][T20257]  ? __pfx___x64_sys_shmget+0x10/0x10
[ 1281.625903][T20257]  do_syscall_64+0x106/0xf80
[ 1281.625921][T20257]  ? clear_bhb_loop+0x40/0x90
[ 1281.625938][T20257]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1281.625953][T20257] RIP: 0033:0x7f650ed9c799
[ 1281.625965][T20257] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1281.625979][T20257] RSP: 002b:00007f650fca8028 EFLAGS: 00000246 ORIG_RAX: 000000000000001d
[ 1281.625993][T20257] RAX: ffffffffffffffda RBX: 00007f650f015fa0 RCX: 00007f650ed9c799
[ 1281.626002][T20257] RDX: 0000000079e56dc9 RSI: 0000000000000003 RDI: 0000000100000000
[ 1281.626011][T20257] RBP: 00007f650ee32c99 R08: 0000000000000000 R09: 0000000000000000
[ 1281.626019][T20257] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1281.626027][T20257] R13: 00007f650f016038 R14: 00007f650f015fa0 R15: 00007ffdfe7d1ba8
[ 1281.626047][T20257]  </TASK>
[ 1281.877474][T20260] tpg quantization: 0/0
[ 1281.881722][T20260] tpg RGB range: 0/2
[ 1281.885624][T20260] vivid-007: ==================  END STATUS  ==================
[ 1285.490836][T20333] netlink: 342 bytes leftover after parsing attributes in process `syz.3.2504'.
[ 1287.039867][T20361] netlink: 342 bytes leftover after parsing attributes in process `syz.2.2511'.
[ 1289.200263][T20387] FAULT_INJECTION: forcing a failure.
[ 1289.200263][T20387] name failslab, interval 1, probability 0, space 0, times 0
[ 1289.333600][T20382] program syz.3.2515 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1289.419227][T20387] CPU: 0 UID: 0 PID: 20387 Comm: syz.2.2513 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[ 1289.419256][T20387] Tainted: [U]=USER, [L]=SOFTLOCKUP
[ 1289.419262][T20387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1289.419271][T20387] Call Trace:
[ 1289.419276][T20387]  <TASK>
[ 1289.419282][T20387]  dump_stack_lvl+0x100/0x190
[ 1289.419308][T20387]  should_fail_ex.cold+0x5/0xa
[ 1289.419333][T20387]  should_failslab+0xc2/0x120
[ 1289.419349][T20387]  __kvmalloc_node_noprof+0xfa/0xa00
[ 1289.419371][T20387]  ? alloc_fdtable+0x110/0x2d0
[ 1289.419398][T20387]  alloc_fdtable+0x110/0x2d0
[ 1289.419420][T20387]  dup_fd+0x995/0xd10
[ 1289.419435][T20387]  ? fd_statfs+0xdd/0x120
[ 1289.419457][T20387]  ksys_unshare+0x7ad/0xad0
[ 1289.419476][T20387]  ? __pfx_ksys_unshare+0x10/0x10
[ 1289.419494][T20387]  ? arch_syscall_is_vdso_sigreturn+0xb6/0x200
[ 1289.419512][T20387]  ? syscall_user_dispatch+0x76/0x130
[ 1289.419533][T20387]  __x64_sys_unshare+0x31/0x40
[ 1289.419550][T20387]  do_syscall_64+0x106/0xf80
[ 1289.419569][T20387]  ? clear_bhb_loop+0x40/0x90
[ 1289.419586][T20387]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1289.419601][T20387] RIP: 0033:0x7fd277d9c799
[ 1289.419614][T20387] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1289.419627][T20387] RSP: 002b:00007fd278ba1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[ 1289.419642][T20387] RAX: ffffffffffffffda RBX: 00007fd278016180 RCX: 00007fd277d9c799
[ 1289.419651][T20387] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000400
[ 1289.419659][T20387] RBP: 00007fd277e32c99 R08: 0000000000000000 R09: 0000000000000000
[ 1289.419668][T20387] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1289.419676][T20387] R13: 00007fd278016218 R14: 00007fd278016180 R15: 00007fffdc4ad0d8
[ 1289.419694][T20387]  </TASK>
[ 1289.948703][T20376] Process accounting paused
[ 1290.523632][T20411] netlink: 342 bytes leftover after parsing attributes in process `syz.4.2517'.
[ 1290.671668][T20417] netlink: 342 bytes leftover after parsing attributes in process `syz.2.2520'.
[ 1292.612236][T17710] Bluetooth: hci4: unexpected subevent 0x01 length: 123 > 18
[ 1292.725302][T20445] vivid-007: =================  START STATUS  =================
[ 1292.787149][T20445] vivid-007: Generate PTS: true
[ 1292.792033][T20445] vivid-007: Generate SCR: true
[ 1292.835213][T20445] tpg source WxH: 320x240 (Y'CbCr)
[ 1292.840334][T20445] tpg field: 1
[ 1292.921544][T20445] tpg crop: (0,0)/320x240
[ 1292.964514][T20445] tpg compose: (0,0)/320x240
[ 1292.987997][T20445] tpg colorspace: 8
[ 1293.019007][T20445] tpg transfer function: 0/0
[ 1293.059563][T20445] tpg Y'CbCr encoding: 0/0
[ 1293.109645][T20445] tpg quantization: 0/0
[ 1293.166065][T20445] tpg RGB range: 0/2
[ 1293.210934][T20445] vivid-007: ==================  END STATUS  ==================
[ 1294.698465][T20478] netlink: 342 bytes leftover after parsing attributes in process `syz.3.2532'.
[ 1295.009097][T20460] FAULT_INJECTION: forcing a failure.
[ 1295.009097][T20460] name failslab, interval 1, probability 0, space 0, times 0
[ 1295.090947][T20460] CPU: 0 UID: 0 PID: 20460 Comm: syz.4.2527 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[ 1295.090976][T20460] Tainted: [U]=USER, [L]=SOFTLOCKUP
[ 1295.090982][T20460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1295.090990][T20460] Call Trace:
[ 1295.090995][T20460]  <TASK>
[ 1295.091001][T20460]  dump_stack_lvl+0x100/0x190
[ 1295.091028][T20460]  should_fail_ex.cold+0x5/0xa
[ 1295.091046][T20460]  should_failslab+0xc2/0x120
[ 1295.091062][T20460]  __kmalloc_cache_noprof+0x7a/0x6f0
[ 1295.091080][T20460]  ? newseg+0x269/0xed0
[ 1295.091100][T20460]  newseg+0x269/0xed0
[ 1295.091117][T20460]  ? __pfx_futex_wait+0x10/0x10
[ 1295.091140][T20460]  ? __pfx_newseg+0x10/0x10
[ 1295.091157][T20460]  ? down_write+0x146/0x1f0
[ 1295.091180][T20460]  ? __sched_setaffinity+0x17c/0x280
[ 1295.091196][T20460]  ? __pfx___sched_setaffinity+0x10/0x10
[ 1295.091213][T20460]  ipcget+0xee/0xf50
[ 1295.091230][T20460]  ? do_futex+0x192/0x350
[ 1295.091247][T20460]  ? __pfx_do_futex+0x10/0x10
[ 1295.091265][T20460]  ? sched_setaffinity+0xe0/0x400
[ 1295.091278][T20460]  ? __might_fault+0xc5/0x140
[ 1295.091297][T20460]  ? __pfx_ipcget+0x10/0x10
[ 1295.091315][T20460]  ? __x64_sys_futex+0x34f/0x4d0
[ 1295.091331][T20460]  ? __x64_sys_futex+0x358/0x4d0
[ 1295.091351][T20460]  __x64_sys_shmget+0x13b/0x1b0
[ 1295.091369][T20460]  ? __pfx___x64_sys_shmget+0x10/0x10
[ 1295.091391][T20460]  do_syscall_64+0x106/0xf80
[ 1295.091410][T20460]  ? clear_bhb_loop+0x40/0x90
[ 1295.091427][T20460]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1295.091441][T20460] RIP: 0033:0x7f493b19c799
[ 1295.091454][T20460] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1295.091468][T20460] RSP: 002b:00007f493c05d028 EFLAGS: 00000246 ORIG_RAX: 000000000000001d
[ 1295.091481][T20460] RAX: ffffffffffffffda RBX: 00007f493b415fa0 RCX: 00007f493b19c799
[ 1295.091490][T20460] RDX: 0000000079e56dc9 RSI: 0000000000000003 RDI: 0000000100000000
[ 1295.091499][T20460] RBP: 00007f493b232c99 R08: 0000000000000000 R09: 0000000000000000
[ 1295.091507][T20460] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1295.091515][T20460] R13: 00007f493b416038 R14: 00007f493b415fa0 R15: 00007ffdac4c2ed8
[ 1295.091534][T20460]  </TASK>
[ 1295.847617][T20491] random: crng reseeded on system resumption
[ 1295.881966][T20491] Restarting kernel threads ...
[ 1295.906693][T20491] Done restarting kernel threads.
[ 1295.947961][T20491] sp0: Synchronizing with TNC
[ 1296.423892][T20485] netlink: 342 bytes leftover after parsing attributes in process `syz.2.2533'.
[ 1296.703926][T20505] netlink: 342 bytes leftover after parsing attributes in process `syz.3.2537'.
[ 1297.855765][T20531] FAULT_INJECTION: forcing a failure.
[ 1297.855765][T20531] name failslab, interval 1, probability 0, space 0, times 0
[ 1297.957612][   T30] audit: type=1800 audit(4294973703.625:39): pid=20533 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2538" name="lu_gp_id" dev="configfs" ino=880925 res=0 errno=0
[ 1297.982190][T20531] CPU: 0 UID: 0 PID: 20531 Comm:  Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[ 1297.982219][T20531] Tainted: [U]=USER, [L]=SOFTLOCKUP
[ 1297.982224][T20531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1297.982234][T20531] Call Trace:
[ 1297.982239][T20531]  <TASK>
[ 1297.982245][T20531]  dump_stack_lvl+0x100/0x190
[ 1297.982273][T20531]  should_fail_ex.cold+0x5/0xa
[ 1297.982292][T20531]  should_failslab+0xc2/0x120
[ 1297.982307][T20531]  __kmalloc_cache_noprof+0x7a/0x6f0
[ 1297.982326][T20531]  ? syslog_print+0xf8/0x620
[ 1297.982346][T20531]  syslog_print+0xf8/0x620
[ 1297.982365][T20531]  ? __pfx_syslog_print+0x10/0x10
[ 1297.982385][T20531]  ? __pfx_futex_wait+0x10/0x10
[ 1297.982414][T20531]  ? bpf_lsm_capable+0x9/0x10
[ 1297.982428][T20531]  ? security_capable+0x80/0x260
[ 1297.982452][T20531]  do_syslog+0x5bd/0x6d0
[ 1297.982471][T20531]  ? __pfx_do_syslog+0x10/0x10
[ 1297.982503][T20531]  __x64_sys_syslog+0x74/0xb0
[ 1297.982523][T20531]  ? lockdep_hardirqs_on+0x78/0x100
[ 1297.982542][T20531]  do_syscall_64+0x106/0xf80
[ 1297.982560][T20531]  ? clear_bhb_loop+0x40/0x90
[ 1297.982585][T20531]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1297.982600][T20531] RIP: 0033:0x7fd277d9c799
[ 1297.982613][T20531] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1297.982627][T20531] RSP: 002b:00007fd278b80028 EFLAGS: 00000246 ORIG_RAX: 0000000000000067
[ 1297.982641][T20531] RAX: ffffffffffffffda RBX: 00007fd278016270 RCX: 00007fd277d9c799
[ 1297.982651][T20531] RDX: 00000000000008f7 RSI: 0000200000000340 RDI: 0000000000000002
[ 1297.982659][T20531] RBP: 00007fd277e32c99 R08: 0000000000000000 R09: 0000000000000000
[ 1297.982668][T20531] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1297.982676][T20531] R13: 00007fd278016308 R14: 00007fd278016270 R15: 00007fffdc4ad0d8
[ 1297.982694][T20531]  </TASK>
[ 1298.878090][T20546] netlink: 186 bytes leftover after parsing attributes in process `syz.2.2540'.
[ 1299.763459][T20557] lo: entered allmulticast mode
[ 1299.835086][T20557] lo: left allmulticast mode
[ 1299.849879][T20568] netlink: 342 bytes leftover after parsing attributes in process `syz.3.2541'.
[ 1300.792169][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[ 1300.805206][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[ 1300.939570][T20579] FAULT_INJECTION: forcing a failure.
[ 1300.939570][T20579] name failslab, interval 1, probability 0, space 0, times 0
[ 1300.978488][T20579] CPU: 0 UID: 0 PID: 20579 Comm: syz.1.2544 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[ 1300.978517][T20579] Tainted: [U]=USER, [L]=SOFTLOCKUP
[ 1300.978523][T20579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1300.978532][T20579] Call Trace:
[ 1300.978538][T20579]  <TASK>
[ 1300.978544][T20579]  dump_stack_lvl+0x100/0x190
[ 1300.978570][T20579]  should_fail_ex.cold+0x5/0xa
[ 1300.978588][T20579]  should_failslab+0xc2/0x120
[ 1300.978603][T20579]  __kmalloc_cache_noprof+0x7a/0x6f0
[ 1300.978622][T20579]  ? newseg+0x269/0xed0
[ 1300.978641][T20579]  newseg+0x269/0xed0
[ 1300.978658][T20579]  ? __pfx_futex_wait+0x10/0x10
[ 1300.978682][T20579]  ? __pfx_newseg+0x10/0x10
[ 1300.978698][T20579]  ? down_write+0x146/0x1f0
[ 1300.978728][T20579]  ? __sched_setaffinity+0x17c/0x280
[ 1300.978745][T20579]  ? __pfx___sched_setaffinity+0x10/0x10
[ 1300.978762][T20579]  ipcget+0xee/0xf50
[ 1300.978780][T20579]  ? do_futex+0x192/0x350
[ 1300.978797][T20579]  ? __pfx_do_futex+0x10/0x10
[ 1300.978815][T20579]  ? sched_setaffinity+0xe0/0x400
[ 1300.978828][T20579]  ? __might_fault+0xc5/0x140
[ 1300.978848][T20579]  ? __pfx_ipcget+0x10/0x10
[ 1300.978865][T20579]  ? __x64_sys_futex+0x34f/0x4d0
[ 1300.978881][T20579]  ? __x64_sys_futex+0x358/0x4d0
[ 1300.978901][T20579]  __x64_sys_shmget+0x13b/0x1b0
[ 1300.978919][T20579]  ? __pfx___x64_sys_shmget+0x10/0x10
[ 1300.978941][T20579]  do_syscall_64+0x106/0xf80
[ 1300.978960][T20579]  ? clear_bhb_loop+0x40/0x90
[ 1300.978977][T20579]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1300.978991][T20579] RIP: 0033:0x7fbd2db9c799
[ 1300.979004][T20579] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1300.979018][T20579] RSP: 002b:00007fbd2eb10028 EFLAGS: 00000246 ORIG_RAX: 000000000000001d
[ 1300.979033][T20579] RAX: ffffffffffffffda RBX: 00007fbd2de15fa0 RCX: 00007fbd2db9c799
[ 1300.979042][T20579] RDX: 0000000079e56dc9 RSI: 0000000000000003 RDI: 0000000100000000
[ 1300.979051][T20579] RBP: 00007fbd2dc32c99 R08: 0000000000000000 R09: 0000000000000000
[ 1300.979060][T20579] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1300.979068][T20579] R13: 00007fbd2de16038 R14: 00007fbd2de15fa0 R15: 00007ffec3cf9e58
[ 1300.979088][T20579]  </TASK>
[ 1301.347217][T20583] FAULT_INJECTION: forcing a failure.
[ 1301.347217][T20583] name failslab, interval 1, probability 0, space 0, times 0
[ 1301.360058][T20583] CPU: 0 UID: 0 PID: 20583 Comm: syz.4.2545 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[ 1301.360086][T20583] Tainted: [U]=USER, [L]=SOFTLOCKUP
[ 1301.360092][T20583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1301.360101][T20583] Call Trace:
[ 1301.360106][T20583]  <TASK>
[ 1301.360112][T20583]  dump_stack_lvl+0x100/0x190
[ 1301.360138][T20583]  should_fail_ex.cold+0x5/0xa
[ 1301.360156][T20583]  should_failslab+0xc2/0x120
[ 1301.360171][T20583]  __kvmalloc_node_noprof+0xfa/0xa00
[ 1301.360192][T20583]  ? alloc_fdtable+0x110/0x2d0
[ 1301.360216][T20583]  alloc_fdtable+0x110/0x2d0
[ 1301.360238][T20583]  dup_fd+0x995/0xd10
[ 1301.360253][T20583]  ? fd_statfs+0xdd/0x120
[ 1301.360276][T20583]  ksys_unshare+0x7ad/0xad0
[ 1301.360294][T20583]  ? __pfx_ksys_unshare+0x10/0x10
[ 1301.360318][T20583]  __x64_sys_unshare+0x31/0x40
[ 1301.360334][T20583]  do_syscall_64+0x106/0xf80
[ 1301.360353][T20583]  ? clear_bhb_loop+0x40/0x90
[ 1301.360370][T20583]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1301.360385][T20583] RIP: 0033:0x7f493b19c799
[ 1301.360397][T20583] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1301.360412][T20583] RSP: 002b:00007f493c05d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[ 1301.360426][T20583] RAX: ffffffffffffffda RBX: 00007f493b415fa0 RCX: 00007f493b19c799
[ 1301.360436][T20583] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000400
[ 1301.360444][T20583] RBP: 00007f493b232c99 R08: 0000000000000000 R09: 0000000000000000
[ 1301.360452][T20583] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1301.360461][T20583] R13: 00007f493b416038 R14: 00007f493b415fa0 R15: 00007ffdac4c2ed8
[ 1301.360479][T20583]  </TASK>
[ 1303.066920][T20626] netlink: 342 bytes leftover after parsing attributes in process `syz.1.2558'.
[ 1303.350945][   T31] INFO: task kworker/u8:3:37 blocked for more than 143 seconds.
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[ 1303.536562][   T31]       Tainted: G     U       L      syzkaller #0
[ 1303.779862][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1303.788611][   T31] task:kworker/u8:3    state:D stack:23440 pid:37    tgid:37    ppid:2      task_flags:0x4208060 flags:0x00080000
[ 1303.930321][   T31] Workqueue: netns cleanup_net
[ 1303.935394][   T31] Call Trace:
[ 1303.938664][   T31]  <TASK>
[ 1303.970218][   T31]  __schedule+0xfee/0x6120
[ 1303.999558][   T31]  ? __lock_acquire+0x4a5/0x2630
[ 1304.025653][   T31]  ? __pfx___schedule+0x10/0x10
[ 1304.047843][   T31]  ? find_held_lock+0x2b/0x80
[ 1304.077196][   T31]  ? schedule+0x2bf/0x390
[ 1304.095260][   T31]  schedule+0xdd/0x390
[ 1304.104570][   T31]  schedule_timeout+0x1b2/0x280
[ 1304.118915][   T31]  ? __pfx_schedule_timeout+0x10/0x10
[ 1304.183017][   T31]  ? mark_held_locks+0x40/0x70
[ 1304.187853][   T31]  __wait_for_common+0x2e7/0x4c0
[ 1304.270377][   T31]  ? __pfx_schedule_timeout+0x10/0x10
[ 1304.275816][   T31]  ? __pfx___wait_for_common+0x10/0x10
[ 1304.319383][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1304.350091][   T31]  ? flush_workqueue_prep_pwqs+0x2e9/0x510
[ 1304.370265][   T31]  __flush_workqueue+0x3f7/0x1200
[ 1304.375340][   T31]  ? __lock_acquire+0x4a5/0x2630
[ 1304.421120][   T31]  ? __lock_acquire+0x4a5/0x2630
[ 1304.426166][   T31]  ? __pfx___flush_workqueue+0x10/0x10
[ 1304.480203][   T31]  ? reacquire_held_locks+0xce/0x1e0
[ 1304.503935][   T31]  ? __pfx_sock_def_readable+0x10/0x10
[ 1304.524118][   T31]  ? __pfx_sock_def_readable+0x10/0x10
[ 1304.529626][   T31]  rds_tcp_listen_stop+0x104/0x160
[ 1304.550438][   T31]  rds_tcp_exit_net+0xe0/0x870
[ 1304.555240][   T31]  ? __pfx_rds_tcp_exit_net+0x10/0x10
[ 1304.580294][   T31]  ? __pfx___might_resched+0x10/0x10
[ 1304.585966][   T31]  ? __pfx_rds_tcp_exit_net+0x10/0x10
[ 1304.600450][   T31]  ops_undo_list+0x2ee/0xab0
[ 1304.605094][   T31]  ? __pfx_ops_undo_list+0x10/0x10
[ 1304.620238][   T31]  ? cleanup_net+0x332/0x920
[ 1304.624912][   T31]  ? idr_destroy+0x62/0x2e0
[ 1304.629520][   T31]  cleanup_net+0x499/0x920
[ 1304.643653][   T31]  ? __pfx_cleanup_net+0x10/0x10
[ 1304.648662][   T31]  ? rcu_is_watching+0x12/0xc0
[ 1304.654170][   T31]  process_one_work+0xa23/0x19a0
[ 1304.659261][   T31]  ? __pfx_process_one_work+0x10/0x10
[ 1304.665478][   T31]  ? __pfx_cleanup_net+0x10/0x10
[ 1304.670632][   T31]  worker_thread+0x5ef/0xe50
[ 1304.675261][   T31]  ? kthread+0x13a/0x450
[ 1304.679496][   T31]  ? __pfx_worker_thread+0x10/0x10
[ 1304.685052][   T31]  kthread+0x370/0x450
[ 1304.689455][   T31]  ? __pfx_kthread+0x10/0x10
[ 1304.694497][   T31]  ret_from_fork+0x754/0xd80
[ 1304.699115][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[ 1304.704797][   T31]  ? __switch_to+0x7b4/0x1120
[ 1304.709579][   T31]  ? __pfx_kthread+0x10/0x10
[ 1304.714824][   T31]  ret_from_fork_asm+0x1a/0x30
[ 1304.719611][   T31]  </TASK>
[ 1304.772713][   T31] 
[ 1304.772713][   T31] Showing all locks held in the system:
[ 1304.812798][   T31] 1 lock held by khungtaskd/31:
[ 1304.817753][   T31]  #0: ffffffff8e7e7420 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184
[ 1304.870634][   T31] 3 locks held by kworker/u8:3/37:
[ 1304.875810][   T31]  #0: ffff88801c6ae948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x1310/0x19a0
[ 1304.920374][   T31]  #1: ffffc90000ad7d08 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x988/0x19a0
[ 1304.940670][   T31]  #2: ffffffff905fb850 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xb8/0x920
[ 1304.950061][   T31] 1 lock held by syz.0.2283/19097:
[ 1304.982825][   T31]  #0: ffffffff905fb850 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0
[ 1305.000439][   T31] 2 locks held by syz-executor/19370:
[ 1305.005825][   T31]  #0: ffff888075890ec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0xb0
[ 1305.037791][   T31]  #1: ffff8880758900c0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x35c/0x1240
[ 1305.063647][   T31] 1 lock held by syz.1.2558/20626:
[ 1305.068809][   T31]  #0: ffffffff8e7f3038 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0
[ 1305.090727][   T31] 1 lock held by syz.3.2550/20617:
[ 1305.095939][   T31]  #0: ffffffff8e7f3038 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0
[ 1305.117484][   T31] 1 lock held by syz.2.2551/20632:
[ 1305.122921][   T31]  #0: ffffffff906140a8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x220
[ 1305.199489][   T31] 
[ 1305.211422][   T31] =============================================
[ 1305.211422][   T31] 
[ 1305.219877][   T31] NMI backtrace for cpu 0
[ 1305.219892][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[ 1305.219912][   T31] Tainted: [U]=USER, [L]=SOFTLOCKUP
[ 1305.219917][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1305.219926][   T31] Call Trace:
[ 1305.219931][   T31]  <TASK>
[ 1305.219938][   T31]  dump_stack_lvl+0x100/0x190
[ 1305.219964][   T31]  nmi_cpu_backtrace.cold+0x12d/0x151
[ 1305.219985][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[ 1305.220022][   T31]  nmi_trigger_cpumask_backtrace+0x1d7/0x230
[ 1305.220040][   T31]  sys_info+0x141/0x190
[ 1305.220101][   T31]  watchdog+0xd25/0x1050
[ 1305.220118][   T31]  ? __pfx_watchdog+0x10/0x10
[ 1305.220131][   T31]  ? __kthread_parkme+0x18c/0x230
[ 1305.220149][   T31]  ? kthread+0x13a/0x450
[ 1305.220165][   T31]  ? __pfx_watchdog+0x10/0x10
[ 1305.220176][   T31]  kthread+0x370/0x450
[ 1305.220191][   T31]  ? __pfx_kthread+0x10/0x10
[ 1305.220209][   T31]  ret_from_fork+0x754/0xd80
[ 1305.220229][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[ 1305.220249][   T31]  ? __switch_to+0x7b4/0x1120
[ 1305.220263][   T31]  ? __pfx_kthread+0x10/0x10
[ 1305.220280][   T31]  ret_from_fork_asm+0x1a/0x30
[ 1305.220302][   T31]  </TASK>
[ 1305.741240][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[ 1305.748217][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
[ 1305.758965][   T31] Tainted: [U]=USER, [L]=SOFTLOCKUP
[ 1305.764133][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1305.774279][   T31] Call Trace:
[ 1305.777560][   T31]  <TASK>
[ 1305.780662][   T31]  dump_stack_lvl+0x100/0x190
[ 1305.785342][   T31]  vpanic+0x552/0x970
[ 1305.789334][   T31]  ? __pfx_vpanic+0x10/0x10
[ 1305.793819][   T31]  ? nmi_trigger_cpumask_backtrace+0x182/0x230
[ 1305.800021][   T31]  panic+0xd1/0xe0
[ 1305.803722][   T31]  ? __pfx_panic+0x10/0x10
[ 1305.808120][   T31]  ? nmi_trigger_cpumask_backtrace+0x1b5/0x230
[ 1305.814279][   T31]  ? nmi_trigger_cpumask_backtrace+0x1f6/0x230
[ 1305.820416][   T31]  ? nmi_trigger_cpumask_backtrace+0x200/0x230
[ 1305.826548][   T31]  ? watchdog.cold+0x198/0x1ca
[ 1305.831323][   T31]  ? watchdog+0xd35/0x1050
[ 1305.835810][   T31]  watchdog.cold+0x1a9/0x1ca
[ 1305.840393][   T31]  ? __pfx_watchdog+0x10/0x10
[ 1305.845059][   T31]  ? __kthread_parkme+0x18c/0x230
[ 1305.850153][   T31]  ? kthread+0x13a/0x450
[ 1305.854376][   T31]  ? __pfx_watchdog+0x10/0x10
[ 1305.859043][   T31]  kthread+0x370/0x450
[ 1305.863182][   T31]  ? __pfx_kthread+0x10/0x10
[ 1305.867809][   T31]  ret_from_fork+0x754/0xd80
[ 1305.872389][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[ 1305.877485][   T31]  ? __switch_to+0x7b4/0x1120
[ 1305.882140][   T31]  ? __pfx_kthread+0x10/0x10
[ 1305.886717][   T31]  ret_from_fork_asm+0x1a/0x30
[ 1305.891471][   T31]  </TASK>
[ 1305.894541][   T31] Kernel Offset: disabled
[ 1305.898853][   T31] Rebooting in 86400 seconds..