last executing test programs: 9.574080434s ago: executing program 1 (id=3564): pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x128009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socket(0x2, 0x1, 0x106) getsockopt$auto(r0, 0x29, 0x4b, 0x0, 0x0) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$auto(0xffffffffffffffff, 0xe, 0x12, 0x0, 0x52) unshare$auto(0x40000080) openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000040), 0x121102, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000480)='/proc/thread-self/net/vlan/config\x00', 0x40000, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/module/ueagle_atm/parameters/sync_wait\x00', 0x1e2142, 0x0) bpf$auto(0x0, &(0x7f0000000380)=@task_fd_query={0x12, 0x3, 0x4, 0x402f, 0x8, 0xfff, r1, 0x200000002e, 0x3}, 0x6f5) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/mm/mempolicy/weighted_interleave/node0\x00', 0xc2082, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) ustat$auto(0x801, 0x0) r2 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000080), 0x48040, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r2, 0x40146f2c, 0x0) 9.564554141s ago: executing program 2 (id=3565): r0 = openat$auto_media_devnode_fops_mc_devnode(0xffffffffffffff9c, &(0x7f0000000040)='/dev/media4\x00', 0x2840, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x770, 0xfffffffe, 0x8, 0x4, 0x4005, 0x0, 0x5, 0x400, 0x3, 0x7fffffffffffffff, 0x6, 0x6, 0x4, 0x811ffffffffffb, 0xc, 0x3, 0x6, 0x10, 0x83, 0x801, 0x8000, 0x1, 0x1, 0x202, 0xd, 0xbca7, 0xfffffffffffffff6, 0x400, 0x8, 0x0, 0x6b0, [0x100003, 0x6, 0x0, 0xc, 0xff, 0x0, 0x1fffffffffc, 0x3, 0x4, 0xb, 0x3169b200, 0x0, 0x3, 0xfffffffffffffc01, 0x5, 0xfffffbfffffffffb, 0x0, 0x9, 0x2000000, 0xfffffffffffffffc, 0x0, 0x8, 0x0, 0x200000000000000, 0x101, 0x8000000000000002, 0x0, 0x2, 0x0, 0x7fffffff, 0x105, 0x0, 0x20000000000000, 0x40000000000000, 0x1000000000000200, 0x0, 0x400, 0x96, 0x5, 0x4, 0xe17, 0xfffffffffffffffc, 0x6]}, 0x1fe, 0x1) r1 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) pwrite64$auto(0xffffffffffffffff, 0x0, 0x3, 0x8) unshare$auto(0x40000080) ioctl$auto_SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f0000000180)={0x2, 0x5, 0xb, 0x4, 0xfffffffd}) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/midiC2D1\x00', 0x1, 0x0) ioctl$auto_FICLONERANGE(r2, 0x4020940d, 0xffffffffffff8000) unshare$auto(0x40000080) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x420c61, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x770, 0xfffffffe, 0x8, 0x4, 0x4005, 0x0, 0x5, 0x400, 0x3, 0x9, 0x6, 0x6, 0x4, 0x11ffffffffffb, 0xc, 0xffffffffffffffff, 0x6, 0x10, 0x80, 0x801, 0x8000, 0x1, 0x1, 0x202, 0xd, 0xbca7, 0xfffffffffffffff6, 0x400, 0x0, 0x0, 0x6b4, [0x2, 0x6, 0x0, 0xc, 0x0, 0x0, 0x1fffffffffc, 0x3, 0x4, 0xb, 0x3169b201, 0x0, 0x3, 0xfffffffffffffc01, 0x5, 0xfffffbfffffffffb, 0x3, 0x9, 0x2000000, 0xfffffffffffffffe, 0x0, 0x8, 0xfffffffffffffffe, 0x200000000000000, 0x0, 0x8000000000000000, 0x0, 0x1, 0x0, 0x7fffffff, 0x101, 0x0, 0x20000000000000, 0x40000000000000, 0x1000000000000200, 0x0, 0x400, 0x96, 0x5, 0x4, 0xe17, 0xfffffffffffffffc, 0x6]}, 0x1fe, 0x1) r3 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000000)='/dev/usbmon16\x00', 0x0, 0x0) ioctl$auto_MON_IOCT_RING_SIZE(r3, 0x9204, 0x0) ioctl$auto_SNDRV_RAWMIDI_IOCTL_PVERSION(r2, 0x80045700, 0x0) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/net/udp6\x00', 0x600, 0x0) pread64$auto(r4, 0x0, 0x202, 0xfffff000) unshare$auto(0x100000001) r5 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000080), 0xffffffffffffffff) r6 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/mptcp/scheduler\x00', 0x40802, 0x0) sendfile$auto(r6, r6, 0x0, 0x1) sendmsg$auto_NFC_CMD_DEACTIVATE_TARGET(0xffffffffffffffff, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000001f40)=ANY=[@ANYRES16=r5, @ANYBLOB="010027bd7000"], 0x14e0}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x80000000) ioctl$auto__ctl_fops_dm_ioctl(r1, 0xfffffffffffffd02, &(0x7f00000001c0)) readv$auto(r0, &(0x7f00000000c0)={0x0, 0x400}, 0x2) 9.302914723s ago: executing program 0 (id=3566): ioctl$auto_SNDRV_RAWMIDI_IOCTL_DROP(0xffffffffffffffff, 0x40045730, 0x0) ioctl$auto_USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f00000004c0)={0xfd, 0x5, 0x0, 0x4, &(0x7f00000000c0)="d16b4e081fdef5ff30449d598a9410139aa50eddc327a2d54603365aff444f306c4df129a91bab8881767372479606ae0c9553687a9aefff79dc5385d6b85dc1942ab4", 0x6, 0x10, 0xffffffff, @number_of_packets=0xf7ffffff, 0x2084c, 0xc9bc, 0x0, [{0x7, 0x5, 0xc}, {0x5, 0x94, 0x5}]}) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, 0x0, 0x88000, 0x0) read$auto(r0, 0x0, 0x4) unshare$auto(0x40000080) unshare$auto(0x40000080) unshare$auto(0x40000080) write$auto(0xffffffffffffffff, 0x0, 0x3) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x10) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) socket(0x18, 0x3, 0x2) bind$auto(0x3, &(0x7f0000000180)=@l2={0x1f, 0xe, @none, 0x7fff, 0x2}, 0x6a) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) timer_create$auto(0x4, 0x0, &(0x7f0000000280)=0x5) r1 = setfsgid$auto(0x0) msgctl$auto_IPC_INFO(0xd, 0x3, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000200)={{@raw=0x1, 0xfffffffe, 0x1e02c17c, 0x480008, "3112d58500a8b47148e22af9ffb683dbedad2b835c10c0a1880015e48d00", @raw=0xfffffffe}, 0x480, 0x80, 0x4, @raw=0x1642, @reserved="f4d3cddf749819bb6bb0ffd3be267660e604c2e08a7952f2d54b8e596d11dcd5ee5098a75a3f318489930c1f503095e5c0a36a5f52d607811d54a6470a9b3de1d9892e3f71557240924156c8a69ffb0edd71ede748c1037a5fc6134e8487c4f7b174337ba05c011359ed80fbe9a4f0d3a30abaa989213665d665999ec82de25d", "0100000000000000ea00000000e025450ef10bb31977702b07552d000000000000000000eb7d1500000000001059a200"}) rt_sigqueueinfo$auto(0x0, 0xffff7b6f, 0x0) clock_nanosleep$auto(0x2, 0x6, &(0x7f0000000840)={0x0, 0xc025}, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x40bc2, 0x1c0) write$auto(r2, &(0x7f0000000100)='\xea\x85\x92\x06(#\xc4\xb6(\x9e\xfcKG\xc2\xd4\xc0\v\x02\x9f%C\x00\x01\x00@!\xa9\xce\x10Y\xd0\xeb\xed\x7f\xc8\xdc(\xd3\xe9\xf3\xddT\x18\x16#\xfdQ5\xaeA\xc3\xeay\x7f\xa2TR|js\xfd\n\xa3\x98\xc8\x91\xdd\x9e\x99}s\xe0x\a\x00\x00\x00\x00\x00\x00\x00.\xa8\xc5\xdbKx\x14l\xe6\x868\xb3\xd2\x00\xea\xf9\xd1z\x8f\xd9\x877J\"\xab\xf9\xdf\xbf\xa1\xa1ms\xaf\xd9&R\x03\x00\xc0u \xc3\xc2\xd61\x97V\xcah\r\x97M\xdb\xf9\x06\x95Z\xdfK\xbeY#/\xf5g\n\x10#\x10@Ft\x9c\xd9\xd3s\x94\x8aV\xeb\xee`e9(\xe0\x88\x06\xa6-;ZM\x9b\xe1-', 0x9) sendfile$auto(r2, r2, &(0x7f0000000000)=0x1, 0xb5d) socket(0x11, 0x3, 0x9) sendmmsg$auto(r2, &(0x7f00000001c0)={{&(0x7f0000000000), 0x5ac, &(0x7f0000000100)={0x0, 0x1f}, 0x3, &(0x7f00000003c0), 0x5, 0x5a}, 0x400005}, 0x2, 0x100) sendmsg$auto_NET_SHAPER_CMD_GROUP(0xffffffffffffffff, 0x0, 0x14) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card1/pcm0c/sub0/hw_params\x00', 0x2a000, 0x0) keyctl$auto(0x1f, 0x1, 0x6, r1, 0x3ff) 7.794772737s ago: executing program 1 (id=3568): r0 = openat$auto_media_devnode_fops_mc_devnode(0xffffffffffffff9c, &(0x7f0000000040)='/dev/media4\x00', 0x2840, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x770, 0xfffffffe, 0x8, 0x4, 0x4005, 0x0, 0x5, 0x400, 0x3, 0x7fffffffffffffff, 0x6, 0x6, 0x4, 0x811ffffffffffb, 0xc, 0x3, 0x6, 0x10, 0x83, 0x801, 0x8000, 0x1, 0x1, 0x202, 0xd, 0xbca7, 0xfffffffffffffff6, 0x400, 0x8, 0x0, 0x6b0, [0x100003, 0x6, 0x0, 0xc, 0xff, 0x0, 0x1fffffffffc, 0x3, 0x4, 0xb, 0x3169b200, 0x0, 0x3, 0xfffffffffffffc01, 0x5, 0xfffffbfffffffffb, 0x0, 0x9, 0x2000000, 0xfffffffffffffffc, 0x0, 0x8, 0x0, 0x200000000000000, 0x101, 0x8000000000000002, 0x0, 0x2, 0x0, 0x7fffffff, 0x105, 0x0, 0x20000000000000, 0x40000000000000, 0x1000000000000200, 0x0, 0x400, 0x96, 0x5, 0x4, 0xe17, 0xfffffffffffffffc, 0x6]}, 0x1fe, 0x1) r1 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, 0x0, 0x1541, 0x0) pwrite64$auto(0xffffffffffffffff, 0x0, 0x3, 0x8) unshare$auto(0x40000080) ioctl$auto_SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f0000000180)={0x2, 0x5, 0xb, 0x4, 0xfffffffd}) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/midiC2D1\x00', 0x1, 0x0) ioctl$auto_FICLONERANGE(r2, 0x4020940d, 0xffffffffffff8000) unshare$auto(0x40000080) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x420c61, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x770, 0xfffffffe, 0x8, 0x4, 0x4005, 0x0, 0x5, 0x400, 0x3, 0x9, 0x6, 0x6, 0x4, 0x11ffffffffffb, 0xc, 0xffffffffffffffff, 0x6, 0x10, 0x80, 0x801, 0x8000, 0x1, 0x1, 0x202, 0xd, 0xbca7, 0xfffffffffffffff6, 0x400, 0x0, 0x0, 0x6b4, [0x2, 0x6, 0x0, 0xc, 0x0, 0x0, 0x1fffffffffc, 0x3, 0x4, 0xb, 0x3169b201, 0x0, 0x3, 0xfffffffffffffc01, 0x5, 0xfffffbfffffffffb, 0x3, 0x9, 0x2000000, 0xfffffffffffffffe, 0x0, 0x8, 0xfffffffffffffffe, 0x200000000000000, 0x0, 0x8000000000000000, 0x0, 0x1, 0x0, 0x7fffffff, 0x101, 0x0, 0x20000000000000, 0x40000000000000, 0x1000000000000200, 0x0, 0x400, 0x96, 0x5, 0x4, 0xe17, 0xfffffffffffffffc, 0x6]}, 0x1fe, 0x1) r3 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$auto_MON_IOCT_RING_SIZE(r3, 0x9204, 0x0) ioctl$auto_SNDRV_RAWMIDI_IOCTL_PVERSION(r2, 0x80045700, 0x0) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/net/udp6\x00', 0x600, 0x0) pread64$auto(r4, 0x0, 0x202, 0xfffff000) unshare$auto(0x100000001) r5 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000080), 0xffffffffffffffff) r6 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/mptcp/scheduler\x00', 0x40802, 0x0) sendfile$auto(r6, r6, 0x0, 0x1) sendmsg$auto_NFC_CMD_DEACTIVATE_TARGET(0xffffffffffffffff, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000001f40)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="010027bd7000"], 0x14e0}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cpuset.memory_spread_page\x00', 0x1a1942, 0x0) select$auto(0x6, &(0x7f00000000c0)={[0x35cb81de, 0x0, 0x1ee, 0xffffffffffffffff, 0xfffffffffffffffe, 0x7ff, 0xe7, 0x41e, 0x0, 0x826, 0x2, 0x2, 0x6, 0x400, 0x2, 0x7]}, &(0x7f0000000140)={[0xffffffffffffffff, 0x1000, 0x5, 0x4, 0x24, 0x9, 0x10001, 0xffffffffffffff67, 0x2, 0x10001, 0x978, 0x0, 0x8000000000000001, 0x0, 0xa0, 0x3]}, &(0x7f0000000280)={[0x5, 0x4, 0x9, 0x6, 0x4, 0x3, 0x9, 0x7, 0x6, 0x3, 0x1, 0x61b, 0x3, 0x0, 0xf, 0x7]}, &(0x7f0000000300)={0x5}) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x80000000) ioctl$auto__ctl_fops_dm_ioctl(r1, 0xfffffffffffffd02, &(0x7f00000001c0)) readv$auto(r0, &(0x7f00000000c0)={0x0, 0x400}, 0x2) 7.744884118s ago: executing program 2 (id=3569): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/platform/vivid.0/cec8/power/autosuspend_delay_ms\x00', 0x20601, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/031/001\x00', 0xa801, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0xa, 0x0) socket(0xa, 0x2, 0x0) r0 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) r1 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f00000000c0), 0x302, 0x0) ioctl$auto_VHOST_SET_OWNER(r1, 0xaf01, 0x5) mmap$auto(0x0, 0x2020009, 0x203, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto(r1, 0x4008af24, r0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) socket(0x2, 0x1, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) setsockopt$auto(0x3, 0x0, 0x4, 0x0, 0x28) setsockopt$auto(0x3, 0x0, 0x4, 0x0, 0x0) r2 = socket(0x29, 0x2, 0x0) close_range$auto(r2, 0xa, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) newfstatat$auto(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x3, 0x4, 0x9cf, 0x6, 0xee00, 0xffffffffffffffff, 0x0, 0xfffffffffffffffb, 0xfffffffffffffffe, 0x100000001, 0x0, 0x2, 0x10, 0x3, 0x4, 0x10000, 0x2}, 0x2) msgctl$auto_IPC_RMID(0x7fff, 0x0, &(0x7f0000000580)={{0x7, 0x0, 0xee01, 0xe53, 0xc, 0x4, 0x3}, &(0x7f0000000500)=0x2, &(0x7f0000000540)=0xc, 0x4, 0x1, 0x1, 0x101, 0x2, 0x6, 0xea, 0x7, @raw=0x9, @raw=0x7}) lstat$auto(&(0x7f0000000140)='./file0\x00', &(0x7f0000000600)={0x5, 0x4, 0xc, 0x0, r3, r4, 0x0, 0x5, 0x1, 0x8, 0xe, 0x6fb8000000000, 0x101, 0x2, 0x6, 0x6, 0xfffffffffffffff4}) sendmmsg$auto(r2, &(0x7f00000004c0)={{&(0x7f00000000c0)="636bfa7319383d677dc63be170361f023bd5bd7cc497db126ea642161d6baeb25628926fe12bf0bd", 0xfffffffe, &(0x7f00000003c0)={&(0x7f00000002c0)="4d65b0a730149e8e48a3983e31c872ff84987af30f009a93d6bf2a5b243047493af98929ee568a4aa5b27fb5d2ce69f2d9b63f4061e2687f5d175aceef15e48b0ccb20f01b6d7c8ecb8ae772e8493c5a2d0047b7b6e59e3bc05a6c5078a912f88ea683af70bbf6ec28157f0fc30a6c9124b4970f797d093789fcd2480ab87d8fdf14c60741b6443e40b62304bc193483e315db797e7e92ba8c3eac336d691842229d4f3e7fa31d47b38f0cec10f2ca27331a4c27433a94", 0x7fffffff}, 0x4, &(0x7f0000000400)="282f1bb193507a78ba874fb5032ae56ab550a1b2092a71c95be1ac852493fde4f04377e81c738d341069b6d49d4609c543672ff97a81f3f0778b047bbaeeb241abf0f471fdc7a7d3e94096ca0eefe2100f795be57051ec425f51158e3084f94653713f72919ba4f1ee1fd25203611355f1cabeb3215eb6eec66c7d4bd933e089301b9d85eef7b3a4167ae4aa951947ca4a80ccb505271a49b66bb060406a0428a72eb22350a69260", 0x9, 0x7}, 0x80000001}, 0x676, 0x7fffffff) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/fail-nth\x00', 0x8c0a02, 0x0) write$auto(r5, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x5) unshare$auto(0x40000080) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/block/loop7/queue/stable_writes\x00', 0x80083, 0x0) 7.691105274s ago: executing program 0 (id=3570): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/platform/dummy_hcd.2/usb3/authorized\x00', 0x601, 0x0) ioctl$auto_USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)={0x2, 0x80, 0xffff, 0x5, &(0x7f0000000240)='#', 0xc694, 0x3, 0x80004, @stream_id=0x7, 0x2004b, 0xc, 0x0}) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) clock_nanosleep$auto(0x9, 0x6, 0x0, 0x0) unshare$auto(0x40000080) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0) 7.647663572s ago: executing program 3 (id=3571): pselect6$auto(0x1, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x1000000, 0x9, 0x5f, 0x9b74, 0x2, 0x8000) r0 = socket(0x1d, 0x3, 0x1) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event1\x00', 0x143080, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x101000, 0x0) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$auto(0x4000000000000c8, 0x900454cf, 0xffffffffffffffff) unshare$auto(0x40000080) unshare$auto(0x40000080) unshare$auto(0xfd) setsockopt$auto(0xffffffffffffffff, 0xf98, 0x16, 0x0, 0x2) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x121300, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r1 = socket(0x15, 0x5, 0x5) sendmsg$auto_THERMAL_GENL_CMD_CDEV_GET(r0, &(0x7f0000004a00)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001dc0)=ANY=[@ANYBLOB="e82b0000", @ANYRES8=0x0, @ANYRES16=r1, @ANYRES32=0x0, @ANYBLOB="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"], 0x2be8}, 0x1, 0x0, 0x0, 0x4000090}, 0x4000010) r2 = openat$auto_hsr_node_table_fops_(0xffffffffffffff9c, 0x0, 0x103400, 0x0) pread64$auto(r2, &(0x7f0000000080)='\x00}2\xed\x18\xcax\xaa\xa8\x00', 0x10003, 0x6) openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f00000000c0), 0x10000, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) r3 = fanotify_init$auto(0x5, 0x2000000000002) r4 = open(&(0x7f0000000040)='./file1\x00', 0xcc42, 0x409) fanotify_mark$auto(0x0, 0x401, 0x9, r4, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) mkdir$auto(&(0x7f0000000000)='./file1\x00', 0x9) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000180), r3) write$auto(0xffffffffffffffff, 0x0, 0x1) 6.057778716s ago: executing program 2 (id=3572): r0 = openat$auto_media_devnode_fops_mc_devnode(0xffffffffffffff9c, &(0x7f0000000040)='/dev/media4\x00', 0x2840, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x770, 0xfffffffe, 0x8, 0x4, 0x4005, 0x0, 0x5, 0x400, 0x3, 0x7fffffffffffffff, 0x6, 0x6, 0x4, 0x811ffffffffffb, 0xc, 0x3, 0x6, 0x10, 0x83, 0x801, 0x8000, 0x1, 0x1, 0x202, 0xd, 0xbca7, 0xfffffffffffffff6, 0x400, 0x8, 0x0, 0x6b0, [0x100003, 0x6, 0x0, 0xc, 0xff, 0x0, 0x1fffffffffc, 0x3, 0x4, 0xb, 0x3169b200, 0x0, 0x3, 0xfffffffffffffc01, 0x5, 0xfffffbfffffffffb, 0x0, 0x9, 0x2000000, 0xfffffffffffffffc, 0x0, 0x8, 0x0, 0x200000000000000, 0x101, 0x8000000000000002, 0x0, 0x2, 0x0, 0x7fffffff, 0x105, 0x0, 0x20000000000000, 0x40000000000000, 0x1000000000000200, 0x0, 0x400, 0x96, 0x5, 0x4, 0xe17, 0xfffffffffffffffc, 0x6]}, 0x1fe, 0x1) pwrite64$auto(0xffffffffffffffff, 0x0, 0x3, 0x8) unshare$auto(0x40000080) ioctl$auto_SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f0000000180)={0x2, 0x5, 0xb, 0x4, 0xfffffffd}) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/midiC2D1\x00', 0x1, 0x0) ioctl$auto_FICLONERANGE(r1, 0x4020940d, 0xffffffffffff8000) unshare$auto(0x40000080) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x420c61, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x770, 0xfffffffe, 0x8, 0x4, 0x4005, 0x0, 0x5, 0x400, 0x3, 0x9, 0x6, 0x6, 0x4, 0x11ffffffffffb, 0xc, 0xffffffffffffffff, 0x6, 0x10, 0x80, 0x801, 0x8000, 0x1, 0x1, 0x202, 0xd, 0xbca7, 0xfffffffffffffff6, 0x400, 0x0, 0x0, 0x6b4, [0x2, 0x6, 0x0, 0xc, 0x0, 0x0, 0x1fffffffffc, 0x3, 0x4, 0xb, 0x3169b201, 0x0, 0x3, 0xfffffffffffffc01, 0x5, 0xfffffbfffffffffb, 0x3, 0x9, 0x2000000, 0xfffffffffffffffe, 0x0, 0x8, 0xfffffffffffffffe, 0x200000000000000, 0x0, 0x8000000000000000, 0x0, 0x1, 0x0, 0x7fffffff, 0x101, 0x0, 0x20000000000000, 0x40000000000000, 0x1000000000000200, 0x0, 0x400, 0x96, 0x5, 0x4, 0xe17, 0xfffffffffffffffc, 0x6]}, 0x1fe, 0x1) r2 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$auto_MON_IOCT_RING_SIZE(r2, 0x9204, 0x0) ioctl$auto_SNDRV_RAWMIDI_IOCTL_PVERSION(r1, 0x80045700, 0x0) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/net/udp6\x00', 0x600, 0x0) pread64$auto(r3, 0x0, 0x202, 0xfffff000) unshare$auto(0x100000001) r4 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000080), 0xffffffffffffffff) r5 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/mptcp/scheduler\x00', 0x40802, 0x0) sendfile$auto(r5, r5, 0x0, 0x1) sendmsg$auto_NFC_CMD_DEACTIVATE_TARGET(0xffffffffffffffff, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000001f40)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="010027bd7000"], 0x14e0}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cpuset.memory_spread_page\x00', 0x1a1942, 0x0) select$auto(0x6, &(0x7f00000000c0)={[0x35cb81de, 0x0, 0x1ee, 0xffffffffffffffff, 0xfffffffffffffffe, 0x7ff, 0xe7, 0x41e, 0x0, 0x826, 0x2, 0x2, 0x6, 0x400, 0x2, 0x7]}, &(0x7f0000000140)={[0xffffffffffffffff, 0x1000, 0x5, 0x4, 0x24, 0x9, 0x10001, 0xffffffffffffff67, 0x2, 0x10001, 0x978, 0x0, 0x8000000000000001, 0x0, 0xa0, 0x3]}, &(0x7f0000000280)={[0x5, 0x4, 0x9, 0x6, 0x4, 0x3, 0x9, 0x7, 0x6, 0x3, 0x1, 0x61b, 0x3, 0x0, 0xf, 0x7]}, &(0x7f0000000300)={0x5}) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x80000000) ioctl$auto__ctl_fops_dm_ioctl(0xffffffffffffffff, 0xfffffffffffffd02, &(0x7f00000001c0)) readv$auto(r0, &(0x7f00000000c0)={0x0, 0x400}, 0x2) 6.013042517s ago: executing program 0 (id=3573): r0 = openat$auto_media_devnode_fops_mc_devnode(0xffffffffffffff9c, &(0x7f0000000040)='/dev/media4\x00', 0x2840, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x770, 0xfffffffe, 0x8, 0x4, 0x4005, 0x0, 0x5, 0x400, 0x3, 0x7fffffffffffffff, 0x6, 0x6, 0x4, 0x811ffffffffffb, 0xc, 0x3, 0x6, 0x10, 0x83, 0x801, 0x8000, 0x1, 0x1, 0x202, 0xd, 0xbca7, 0xfffffffffffffff6, 0x400, 0x8, 0x0, 0x6b0, [0x100003, 0x6, 0x0, 0xc, 0xff, 0x0, 0x1fffffffffc, 0x3, 0x4, 0xb, 0x3169b200, 0x0, 0x3, 0xfffffffffffffc01, 0x5, 0xfffffbfffffffffb, 0x0, 0x9, 0x2000000, 0xfffffffffffffffc, 0x0, 0x8, 0x0, 0x200000000000000, 0x101, 0x8000000000000002, 0x0, 0x2, 0x0, 0x7fffffff, 0x105, 0x0, 0x20000000000000, 0x40000000000000, 0x1000000000000200, 0x0, 0x400, 0x96, 0x5, 0x4, 0xe17, 0xfffffffffffffffc, 0x6]}, 0x1fe, 0x1) pwrite64$auto(0xffffffffffffffff, 0x0, 0x3, 0x8) unshare$auto(0x40000080) ioctl$auto_SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f0000000180)={0x2, 0x5, 0xb, 0x4, 0xfffffffd}) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/midiC2D1\x00', 0x1, 0x0) ioctl$auto_FICLONERANGE(r1, 0x4020940d, 0xffffffffffff8000) unshare$auto(0x40000080) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x420c61, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x770, 0xfffffffe, 0x8, 0x4, 0x4005, 0x0, 0x5, 0x400, 0x3, 0x9, 0x6, 0x6, 0x4, 0x11ffffffffffb, 0xc, 0xffffffffffffffff, 0x6, 0x10, 0x80, 0x801, 0x8000, 0x1, 0x1, 0x202, 0xd, 0xbca7, 0xfffffffffffffff6, 0x400, 0x0, 0x0, 0x6b4, [0x2, 0x6, 0x0, 0xc, 0x0, 0x0, 0x1fffffffffc, 0x3, 0x4, 0xb, 0x3169b201, 0x0, 0x3, 0xfffffffffffffc01, 0x5, 0xfffffbfffffffffb, 0x3, 0x9, 0x2000000, 0xfffffffffffffffe, 0x0, 0x8, 0xfffffffffffffffe, 0x200000000000000, 0x0, 0x8000000000000000, 0x0, 0x1, 0x0, 0x7fffffff, 0x101, 0x0, 0x20000000000000, 0x40000000000000, 0x1000000000000200, 0x0, 0x400, 0x96, 0x5, 0x4, 0xe17, 0xfffffffffffffffc, 0x6]}, 0x1fe, 0x1) r2 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$auto_MON_IOCT_RING_SIZE(r2, 0x9204, 0x0) ioctl$auto_SNDRV_RAWMIDI_IOCTL_PVERSION(r1, 0x80045700, 0x0) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/net/udp6\x00', 0x600, 0x0) pread64$auto(r3, 0x0, 0x202, 0xfffff000) unshare$auto(0x100000001) r4 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000080), 0xffffffffffffffff) r5 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/mptcp/scheduler\x00', 0x40802, 0x0) sendfile$auto(r5, r5, 0x0, 0x1) sendmsg$auto_NFC_CMD_DEACTIVATE_TARGET(0xffffffffffffffff, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000001f40)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="010027bd7000"], 0x14e0}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cpuset.memory_spread_page\x00', 0x1a1942, 0x0) select$auto(0x6, &(0x7f00000000c0)={[0x35cb81de, 0x0, 0x1ee, 0xffffffffffffffff, 0xfffffffffffffffe, 0x7ff, 0xe7, 0x41e, 0x0, 0x826, 0x2, 0x2, 0x6, 0x400, 0x2, 0x7]}, &(0x7f0000000140)={[0xffffffffffffffff, 0x1000, 0x5, 0x4, 0x24, 0x9, 0x10001, 0xffffffffffffff67, 0x2, 0x10001, 0x978, 0x0, 0x8000000000000001, 0x0, 0xa0, 0x3]}, &(0x7f0000000280)={[0x5, 0x4, 0x9, 0x6, 0x4, 0x3, 0x9, 0x7, 0x6, 0x3, 0x1, 0x61b, 0x3, 0x0, 0xf, 0x7]}, &(0x7f0000000300)={0x5}) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x80000000) ioctl$auto__ctl_fops_dm_ioctl(0xffffffffffffffff, 0xfffffffffffffd02, &(0x7f00000001c0)) readv$auto(r0, &(0x7f00000000c0)={0x0, 0x400}, 0x2) 5.81880343s ago: executing program 1 (id=3574): socket(0x2, 0x3, 0x1) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = io_uring_setup$auto(0x4bf15e08, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/system/machinecheck/machinecheck0/check_interval\x00', 0x102, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) r1 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r1, 0x107, 0xa4c2, 0x0, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'dummy0\x00'}) ioctl$auto_USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000180)={0x2, 0x80, 0xffff, 0x5, &(0x7f0000000240)="2303", 0xc694, 0x3, 0x80005, @stream_id=0xffffffff, 0x2004b, 0xf, 0x0}) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_ADD_LINK_STA(r1, &(0x7f0000000540)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="dbb902111f47e93bb9a479e9e5ebb4f1c2e75625399655d52e2ce26e3b5a411712bceeb083abe9540d22e349454bc27781f78788aea3a562816e807fb81428d27bc87854f24534efe412de841cdf3143cea9e9269f8d8351fba4cbe4f483ace82fc20867cc6452fafadff522e5ec6b573b39193fc0cf3c90fc03fb3ed68dd6b4ade98831e1a44aee5cf7c32bfde0f3293e58b7faccf1a42f88907a6b163f117b0deaad5b00d342c52661ada5534b35aa5d1dce498c16be2c8778f9", @ANYBLOB="b7178ec81f22cbb38067422fa294fc21069b4e53a48e214efcc9a2c2480d822a2a49a8efb0be264f6304ed60dc2419feca47a8a262281b41ba", @ANYBLOB="040029bd7000fedbdf2596000000"], 0x14}, 0x1, 0x0, 0x0, 0x814}, 0x801) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) unshare$auto(0x40000080) sendmsg$auto_IPVS_CMD_NEW_DEST(r0, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000680)={&(0x7f0000000040)=ANY=[@ANYBLOB="5bef5a4e", @ANYRES16=0x0, @ANYBLOB="010828bd7000ffdbdf250500000008000400c100000008000a0501000000"], 0x24}, 0x1, 0x0, 0x0, 0x8024}, 0x2400c090) socket(0xa, 0x2, 0x3a) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0x2, 0x0, 0x0, 0x0, 0x0) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000580), 0x301, 0x0) shmctl$auto_SHM_LOCK(0x2, 0xb, &(0x7f0000000440)={{0x2, 0x0, 0x0, 0x2, 0x4, 0x58a, 0x1}, 0x1, 0x10001, 0x5, 0x1, @raw=0x201, @raw=0x8, 0x1, 0x0, &(0x7f0000000280)="df517d8f0ab3a9a9958f903fd9e6c43d1a486883c3b6ff629775c3be7f103db92b19894c09f0a1610b32be6774886d1ae5a48ad4711aaffb1f6b9add3a28fe5655060d0246d518e9ca76ffa534ef4b5226304ce3c37b2342f93ecb0ff45661bfd9ee7e580315d80fbeddce141749b24e19820c64ce06d7b55b2640969a86c3ff38ea47ceaee5ae2220f70876840446a04fd6580db75fd613c2fc169f3ac50578d2055adc39cc1d00c29eb79b35a9866da082afe3a664ec991bcc283b5486", &(0x7f0000000340)="0090600ada734c09e7f3592ab83b5837a02b6e16f55c1a6b3af8985b99ccd4a3d3090f5f0769c51d5b462f5b14b12aac713660cfba0741cd8fb64201dd8b6bfa0dee626e22c0ed0318510d5223bd057b8c5e398e72abaa6aecabe88e60ecafcae03bbc1f70554128bad808bfa7287be93686d3b1795043eea46c793239dbb133fe38a455eb46305a283eca21cafb5da5fdc36573dfa4e29e99b0040a36df27866465218de76c36a2b5a2c668e2057b6a35d49fa61a2650664686494a8eeacc84bd31539f2a70614dbf775cacb29806cc850dcfd2496e516d1488582c7af39ccc2ddb3a601e96ebe8b25f196fb8"}) read$auto_proc_tid_children_operations_internal(0xffffffffffffffff, &(0x7f00000005c0)=""/34, 0x22) r2 = socket(0x1, 0x1, 0x1) setsockopt$auto(r2, 0x2a, 0x20, 0x0, 0x8002) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) semtimedop$auto(0xb, &(0x7f0000000080)={0x851b, 0x4, 0x5}, 0xff, &(0x7f00000001c0)={0x101, 0x80000000}) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) prctl$auto_PR_SYS_DISPATCH_ON(0x1, 0x1, 0xffffffffffffffff, 0x4f99, 0x1) io_cancel$auto(0x8001, &(0x7f0000000180)={0x7, 0x1ff, 0x5, 0x7, 0x5, 0xffffffffffffffff, 0x2, 0x7f00, 0x9, 0x0, 0x2}, &(0x7f00000001c0)={0xfffffffffffffffc, 0x7, 0x5, 0x3}) 5.818235083s ago: executing program 3 (id=3575): prctl$auto(0x3e, 0x1000001, 0x0, 0x1, 0x0) ioctl$auto_USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000180)={0xa, 0x80, 0xffff, 0x5, &(0x7f0000000240)='#', 0x4b47, 0x3, 0x80005, @stream_id=0x7, 0x2004b, 0xc, 0x0, [{0xbb, 0x0, 0x800}, {0x0, 0x9, 0x6}, {0xb, 0x8, 0x3}, {0x3ff, 0x5, 0x1}, {0x3, 0x8001, 0x4}, {0xb1, 0x3, 0xe}, {0x3, 0x40000006, 0xffff3da3}, {0x2, 0xfffff86e, 0x1e}]}) openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, 0x0, 0x115200, 0x0) openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy0/reset\x00', 0x82, 0x0) lseek$auto(0x3, 0x2, 0x4) pselect6$auto(0x1, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) r0 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) ioctl$auto_I2C_TENBIT(r0, 0x704, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) move_pages$auto(0x0, 0x8000, 0x0, 0x0, 0x0, 0x4) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) socket(0x2, 0x1, 0x106) msgctl$auto_IPC_STAT(0x5f, 0x2, 0x0) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/sctp/eps\x00', 0x0, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/ati_remote2/parameters/mode_mask\x00', 0x40201, 0x0) write$auto(r2, &(0x7f0000000200)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x102000a3dd) pread64$auto(r2, &(0x7f00000000c0)='/proc/self/net/sctp/eps\x00', 0xfff, 0x8000000000000000) pread64$auto(r1, 0x0, 0x2, 0x5) pselect6$auto(0x9, &(0x7f0000000000)={[0x40000000000000c, 0x94a4, 0x3d, 0x37b75d6, 0xffffffffffff5bf6, 0x3, 0x100000001, 0x10, 0x3, 0xfffffffc, 0x3, 0xfffffffffffffffb, 0xcbde, 0x4, 0xb, 0xffffffffffffffff]}, 0x0, 0x0, 0x0, 0x0) futex_requeue$auto(&(0x7f0000000040)={0xb, 0x6, 0x2}, 0x0, 0xf, 0x9) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) keyctl$auto(0xe, 0x2, 0x16efae4c, 0x8000005092, 0x61f93bdb) setns(0xffffffffffffffff, 0x38020000) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 3.946364133s ago: executing program 0 (id=3576): pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x128009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socket(0x2, 0x1, 0x106) getsockopt$auto(r0, 0x29, 0x4b, 0x0, 0x0) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$auto(0xffffffffffffffff, 0xe, 0x12, 0x0, 0x52) unshare$auto(0x40000080) openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000040), 0x121102, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000480)='/proc/thread-self/net/vlan/config\x00', 0x40000, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/module/ueagle_atm/parameters/sync_wait\x00', 0x1e2142, 0x0) bpf$auto(0x0, &(0x7f0000000380)=@task_fd_query={0x12, 0x3, 0x4, 0x402f, 0x8, 0xfff, r1, 0x200000002e, 0x3}, 0x6f5) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/mm/mempolicy/weighted_interleave/node0\x00', 0xc2082, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) ustat$auto(0x801, 0x0) r2 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000080), 0x48040, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r2, 0x40146f2c, 0x0) 3.875065335s ago: executing program 2 (id=3577): r0 = openat$auto_media_devnode_fops_mc_devnode(0xffffffffffffff9c, &(0x7f0000000040)='/dev/media4\x00', 0x2840, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x770, 0xfffffffe, 0x8, 0x4, 0x4005, 0x0, 0x5, 0x400, 0x3, 0x7fffffffffffffff, 0x6, 0x6, 0x4, 0x811ffffffffffb, 0xc, 0x3, 0x6, 0x10, 0x83, 0x801, 0x8000, 0x1, 0x1, 0x202, 0xd, 0xbca7, 0xfffffffffffffff6, 0x400, 0x8, 0x0, 0x6b0, [0x100003, 0x6, 0x0, 0xc, 0xff, 0x0, 0x1fffffffffc, 0x3, 0x4, 0xb, 0x3169b200, 0x0, 0x3, 0xfffffffffffffc01, 0x5, 0xfffffbfffffffffb, 0x0, 0x9, 0x2000000, 0xfffffffffffffffc, 0x0, 0x8, 0x0, 0x200000000000000, 0x101, 0x8000000000000002, 0x0, 0x2, 0x0, 0x7fffffff, 0x105, 0x0, 0x20000000000000, 0x40000000000000, 0x1000000000000200, 0x0, 0x400, 0x96, 0x5, 0x4, 0xe17, 0xfffffffffffffffc, 0x6]}, 0x1fe, 0x1) r1 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) pwrite64$auto(0xffffffffffffffff, 0x0, 0x3, 0x8) unshare$auto(0x40000080) ioctl$auto_SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f0000000180)={0x2, 0x5, 0xb, 0x4, 0xfffffffd}) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/midiC2D1\x00', 0x1, 0x0) ioctl$auto_FICLONERANGE(r2, 0x4020940d, 0xffffffffffff8000) unshare$auto(0x40000080) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x420c61, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x770, 0xfffffffe, 0x8, 0x4, 0x4005, 0x0, 0x5, 0x400, 0x3, 0x9, 0x6, 0x6, 0x4, 0x11ffffffffffb, 0xc, 0xffffffffffffffff, 0x6, 0x10, 0x80, 0x801, 0x8000, 0x1, 0x1, 0x202, 0xd, 0xbca7, 0xfffffffffffffff6, 0x400, 0x0, 0x0, 0x6b4, [0x2, 0x6, 0x0, 0xc, 0x0, 0x0, 0x1fffffffffc, 0x3, 0x4, 0xb, 0x3169b201, 0x0, 0x3, 0xfffffffffffffc01, 0x5, 0xfffffbfffffffffb, 0x3, 0x9, 0x2000000, 0xfffffffffffffffe, 0x0, 0x8, 0xfffffffffffffffe, 0x200000000000000, 0x0, 0x8000000000000000, 0x0, 0x1, 0x0, 0x7fffffff, 0x101, 0x0, 0x20000000000000, 0x40000000000000, 0x1000000000000200, 0x0, 0x400, 0x96, 0x5, 0x4, 0xe17, 0xfffffffffffffffc, 0x6]}, 0x1fe, 0x1) r3 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000000)='/dev/usbmon16\x00', 0x0, 0x0) ioctl$auto_MON_IOCT_RING_SIZE(r3, 0x9204, 0x0) ioctl$auto_SNDRV_RAWMIDI_IOCTL_PVERSION(r2, 0x80045700, 0x0) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/net/udp6\x00', 0x600, 0x0) pread64$auto(r4, 0x0, 0x202, 0xfffff000) unshare$auto(0x100000001) r5 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000080), 0xffffffffffffffff) r6 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/mptcp/scheduler\x00', 0x40802, 0x0) sendfile$auto(r6, r6, 0x0, 0x1) sendmsg$auto_NFC_CMD_DEACTIVATE_TARGET(0xffffffffffffffff, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000001f40)=ANY=[@ANYRES16=r5, @ANYBLOB="010027bd7000"], 0x14e0}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x80000000) ioctl$auto__ctl_fops_dm_ioctl(r1, 0xfffffffffffffd02, &(0x7f00000001c0)) readv$auto(r0, &(0x7f00000000c0)={0x0, 0x400}, 0x2) 3.834344905s ago: executing program 1 (id=3578): pselect6$auto(0x1, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) r0 = socket(0xa, 0x2, 0x73) getsockopt$auto_SO_TIMESTAMPNS_NEW(r0, 0x0, 0x40, 0x0, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) shmctl$auto_IPC_RMID(0x4, 0x0, &(0x7f0000000300)={{0x6, 0xffffffffffffffff, 0x0, 0x1, 0x80, 0x3, 0x8}, 0x9, 0x1ff, 0x9, 0x5, @raw=0x2, @inferred=0xffffffffffffffff, 0xfffe, 0x0, 0x0, 0x0}) rseq$auto(0x0, 0x20, 0x0, 0x8000006) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x16bd22, 0x0) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001480)=ANY=[@ANYRES16=r1, @ANYRESOCT, @ANYBLOB="80575f484083146675a9e7181707b12f3c570996124d00b723c0aca2a91a8bacd76bfda687193051d7f52e4e2f45a2ef038f7f5b144561b8155fd6c332f73ac587246d4603fabe85f6d32916fab80f36065c6444c8e0f4d5bad1c8ecfa6b51c68e9c181b69b5005addb9184c56a49aab0cbe520bbede5301767a0f046d94d34ee6ebf4888fc04a0d4393b679838e9c5b5f9753c1ba406e69d9831271fa5814901626f8b9a976ae7e11def1ffd5c023e5667c2a32ebc0652b51dce7c237c30c27ef090b6b68467c1b692d0fa4f539a36d2d419e330cfac9459da6b6ddc22d73bfd657f4e9b14fa3bcc973b67d47ebb61c152d7ef431f4d14a9e543b3814b3efeba06a2d23e7ebda47d096473adca23c2f83fdf2098a37b063e2693333742b3081c8b5e9669948924654722c8892be852e3289eafce312edd5734b5fb2e781871b6f85d9370889076b60d94981a6bb3626fbd0292ab564152921c1d137f0678487302c71beaa663e9755ae99fcb148c850baa7c95640a36cee93834f146b271758390e10a7334d8f43405f48efe869965dafe7c352b3af3b243b4d194d9fdac2e08d505b62bdda6c425316bc9c64cfb248ef51fd05f366e91daaff15dfb6421d7f3f0ee5be1560bd168d70d691f0c724f81e4a6723f54bf619048c04445ca678358b4cb29aca3ab1ff619bd604e6552e0e586899da91961a0b5e7016ba28578ddefde2328842bafa29521f8761db156d12508226f8e963132ce018427a1e4ee7833e47ce7a81e714fcf2f940f35da64e7ccb5fe03caa03c48def03ec5ca18c8e71d0061c47a64127072a1cf9eb51f24bfcd9bab6c813f1c99d1bb66f85eb8a63b67e5b186aaec9ca8ad209d9e93fa297c1de3ac3840baa1d6157025143173cf59fbcb74e507071f444e4c2d17f590d171be7b96925ed9406a4a217227be6222f1d821c2ec64c723532f765641406af10c83cf1942442b1b026141c02b607b69641e4076c67baf4c1c7d7c34b6c8350ed293e9219a39d686233909c744325c3160ae312d2f6e4405939acba0587d3f902d7ccdf0e6dda38a38b83740dd15dfbe544345021435040142bea4f6fec7b4c3df45a27151e48a8e54b063ae2be25e83c5d1c5cee8e3f667e7c59f0bd37b4c1bb14c4dc7adb754a2cb1a3a9d60221d16525d3bf48918b4ec08d01a680334857a8a39e4efb4e3c778cc55c65540e9f41deeb6607de9db4ee38993363f04b2727b9e7b47165a2a15e2cadf3053d4e146f245f76c7a15ccc9ef072d3838be3019c6b2728a6b431635d46688f4375b900e12986a0c0f072aff4ff677eec98c9361d492beeab46e32a629b56f3c99d547c8b3641f5aeb03f8a814805d5ad19b3ffd00750e9ae5dac0a27e2544a27d7b7939ba927374f394df12caca293d98c5dadbc21c5f2a66486a61f659487c508a56295da8f282841cb47477bf7a13f1072a11043d595325614a93a5ebe2bff2f262e98cb7c0340e62a7e05be73bbddccd38649e05aa7837fe4da357f82085e351ade2cf6476177764416274a8e4d79aebc584fdfbe8d6d9ad927a5591efe1760a98bd635a686d1d73d0937a1dee5e3c730230c542e6e8cffc800c71b19b275de0f9a0eaaf72e83ece68ab65b1fa633f99bf463ebefbe56034b60902ce075bfe02c6f8f0d3c2e45ee5a728a657084892fc7ac4cdd02415789046379911b1ded7184539ad4c8870715f5acf5ec6d60cdb2dcf7134c157cb832bbe9a8e2a00826f130f0f46fc40837fece1eff6bc6171ca631c5abb690e0a17426e2f8d14fbab6557280dddaa4e2206db1f8db515dfaebda0e54725e1780bd4c847df76d8f14a3f61829375128dc029911096a013581776cb3761bc20a0e1de38393e1394f0f3020f2979d53c36d7a7a6324336f2b3d0de60913e004c3266fe4517dbab3cd025a4b0bb73e94140eafb0eb193bd1436e6e03dcf5c8ca8fce9bef20e6ef82a819c8a2ec186069708b5c1b3e2e7f4475096fad92d155236fd3a95e6131b767fec97d361a6c5a89bfaf07e88f9a201e2d87f5f328831833ac8b29942ad1ff50c1d6d997ce088a3743091ff53ef29c12c47f0e3999ac0c818839eca9b753d9a2e0739d1bc74b1b73c2dc1d14ff5ada1ab6239309f2cc5c1c976abc68612b6467fb0a8cd5a612ee315651d013241be25f4f3b537f8b90c909c8502903971394324526974056998bb353c531fcd705c5fd433d2e57f6e831883ad63aaea338ebbf4b5c592e004e2042fa59486bd5af3f84cd289b8dcdaeb962456ad20020838ac8f6f145b2489eee702cec683b2b98f9b2540d12cded1bfb132a4665c3592577fafc439e943175c145cdcfb4c66e26a4623e85e59b2936f8bb11f40a40f574ae024cd33f898cbec89d84e74aed75897b45b47877398f6a4c18162c49e01034f33f1d45e89e7efeb9bfba7e62679d6172dd35a49d09bbda5db9a6d008e8f5060eb5c43a5d1dd3a75704b00b25d2346daff848146c380f2b370b3219e069748f86bb907603c07982da984add5816dbec91d5ec85395481f2f0f072aedbd4779dacfe7d3dacd7d226649290cf651eb08cff019212d973376ae5a02f0cf7ede57fe86505692e5e48ea58f59072d408cca3a4b2d767028bf3ab04b0239bce6f4dcd808f3e837e0e0eab885d4566d783f9fcd4e7c2e2cc5407bafd05f1e939ecb8230688c6f8042bf6256d23f02cdf76ccc426ad7b73b0510b4d38cb53ebb3385a4f5ff4716fa5d732c68abc288b6f6e6529e3da3f5ab9489d6dc38bc3f4cb9c6b2f3c49470ec482f1cdff6027c6dc34fa4c0537ad8b48c49446c9498e556d834d8ce41bf6fd478a221b44cd4402ec4716744a83bf33e7f0ef29cbc6d8596a8703ebd5adc1c54a87a56ab4f6ba39016f0395aeb44285692c4492b68623737183e8da3c52abc51d085c0c2a33fa92a319c714b0717d8b774583dfa7eccb7c791d72892fe074302da1bf53dda77d4c20f647c09a9f899873212ba407f05f4cdb3634310aa0bc633ca99ee2dc5b02f3aff38a302dd0ca91020a9fd8b451ad6e696f968e2e190e592222ed926e51cb22e610f27e204ac6f450fb1427ada7f92bdb83aeb8837109d5a2b0a02b9032259c5689e799d32d1d0dfd7386ec29d027fb8c8ff1f0f1dacc850d01e78bddef782c2ff73564e291575adcb19eede129a68c8a36597246017b4b1f7a3a558b9719431cdca9f2ee23a0dc9970c01bd755c24f43e2bbc5769756ffbd73afb7c650ad2347df107f30892638ffdaf1f183cb22041a11a4f6d4ccf92a24e82bfd51700486db0ee55bb871f749ced8e2bac5d004037a981fd5ca75acdba94aeddae357f8f04ead8b218278f4e1693dcdf75e10c05eb59586ce7b2a168d59eca4053d51cdb863b723c507f625f6b7be9c8ed34f09ddc82790372eaa0e7769d430036a4420138c1afc968fc02ce8cd5a8dd3339e5dc30fcb90dae425b3f55398e66c1c3d1ace34a826536a5ad90c60955ba4dbb3cef40ca357682812b09b1c0b1e0f496e36ff7e868cc5d7b4bc98da14bce491ced9b119e71a3ceda8895c86d2d60b10d156850257fa7f1fc2752b9d2ac87221df82cd7b762c09e6609246b4cc364ad700e031bda90b9f9fb6f110475ae072438a4479bfb20f4dc87898eabbf1a7f051ab91ff38145ea92e815741efb82ef446dfc67209289bca76af6f3ed3f0f427870ad3f04a910d6a598aa993cc9874b9a1bcb06277529960cf443e3f680ea881ed1849c2cdb92a3582beb07fb99d7e5a8c61c53f3c4b925f18b3bb42fe14cac7c2cde1acf7903b40a9ac3585bdedb3d7f035c19a31ffa32b7704f15a8a8dad6b7ab0eb7eba578c2a796dbe27167e3ded5c7c8af50569da30f327be15b6fe783800dea77de797d48439f3a3b2a5bbe3d360f6dca06e1514badfe60ddebbc7a72a365df1bfc10b663b86b39dd9579af984b30afd3209b10f7ef1299817db3d5658a4467cd8566310ff36036e90b93ab85f1bfffb6dc1ae99fd796b3cff122ee5be62bbb67470f517f1df20d3749c59df881af7381b359287a4abaacd77bc290eba8c6022e24fb31a89ee168b09af940bcb7c4a5917d206568401af8966077b4f3b094fdff74188d1caeaf67d3d195aff2b4d101d64d472affe017be9d568e49ad0cb91e7a04d22a74ad110fc8a1be1cf8f98c6d15c45166606b65588dfd0abc7972ee8251048bc2126a36ce55a9757840b7b3b0ea014402508558ffa1713bb847a3e2a34edac282fe127191d76d4538d4b870abb6fa577ce032e476a0c87d5bf4d18810a69ba6aaca47b0bcedb39489bdbc89320008b51e64a613aa9f1723d0716c1cdd831da2f057ad8ca35f8ad37e1320b723a887cadcb3911e69f8b9bd84902ce51fe7af34d7471b135031613ce13778d3c6cd05c8b31049a687c59467265f05a717d3b723012a66721d56aa2849b2f990f2d9e587bbc01ea815d40d6e5dfe3cb5d7b16c0dda5f53bf3c0d0c0e8ed92c54ec89faa51d69a4282e0382fc14b50d6de105578321cde8059bdd88e96d9e1af9104f1c8e9ec1dfa404ed07b0f0857996bb61bed5381bf905fe9547744646954df4b9d62e11df06ae1ab4e683fd97224c5fedc5a3e76a7c6060fb4b5921511db046970393e874795e35b1c8b9e1b4f1969b7b200e1b878af63cd27f93badaf83d91b3b685e9623a96c655968e6b3168bb312da57187c5fb71f61bf70af2a64924cc2de9ab560f9a197e0ecf7256fe210b2f0211f5031052cb59944467facaaf8abf16d9008075357bf14bedebbf949d47efc2edbc2c6b7b83842d4f440f718fa57a386ed82ae04cfff38b1a7f8dc407615e78301687af2045811167a8e45fae3c6ca3cc45ada1e6078f2d2fea6a6504d7cc33894c142b5bb15f77c920e4a65480ffa45e8ffd7c7884dd07a029c506541d27353a4e372da34864afe6487da84a1f383882143d8826f19c6f1d0c67f6eb833d78d2534ab08e6e71fc5a8686b26824129d24e093d7823afdc77984f63e0a2c3a4b792e0895857916d77fd5a2db315eac5fdc966e76ece38439ed2c1d3dc98a9e963f88a84398f8fc6fdb0ecf12f519a54261b7d20d2efb237757bf429698ec7396f06c9978812bf0eb4408470f7eccb229599ee54604d96c2211a06cdc42b0214acd83cad835f269a4d077996c2ddf47f8880c10c27f16129b511fb57b8e5d3897eb5f2fc87ce05f8e5e9892ae8b2b19d6431cda18cd8a3e3adefc490144be241be8939cc8b54648e06a1111d348cba4c1fc4c5c5dd1e376e3eeff7fea4d6c54a6c75fba63fe95eb872ff9dccea746e70cbce60e45d5b91c620e3436aa6e21c094466c73814752fe986d9bd5945bd80d281defbceee8bc7204f86f3b842049297a2046ae8bed1e1886a0e72311272a6b46da07ffe8499a662e88605b1c71fcc05b2514a2677ceb78cbae3372b27bce3464c45157aef1b3bdd2f3d895e16f45077ae659225e7d9ff66ec079006056df73773ae8e112c6b6edb99525bd38a60a37e2277516603c41bbebc5cc8b6519e473e7d0a6e6056efc57f0333ba902276efcfd6a0fc21c447522199643c5fe904a8b1233316eb9d1eaff2ef0b596b3a9ba3d3bdb563d2ce4272e82a2d9b6e89bf3d4fd1c6918c244a68236dc19b5bf1b288e828e28b7d7d15600b627fe70ff9fc7a4c37ee24ff753e22105f6bdcdd43ff5cf272344952e9b56da841ae293d4e6dac59ce9e40e5998c6801e82c800ea7c280b9664321b189038244b25ed0590151ffd87fa1dc32710ba25b8a075fd873e5e5fa", @ANYRESHEX=r0], 0x1ac}, 0x1, 0x0, 0x0, 0x24068051}, 0x2004c0c4) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x1008, &(0x7f0000000400)={&(0x7f0000000080), 0x40}, 0x2, &(0x7f0000000180)="a5b12a4f46a5efd4eca1ec81867d6f42f004718cf512a5e031b151ddf4f189fbf2203f720fd4acf222ad3c9d47895ec0343b07b9907e30a44efa87ab36078fa8f0e5b6c330f025e9", 0x9007, 0xa509}, 0x800}, 0x4, 0x101) sendmsg$auto_NET_SHAPER_CMD_GROUP(0xffffffffffffffff, 0x0, 0x14) msgget$auto(0x3, 0x1000) r3 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, 0x0, 0x48000, 0x0) r4 = socket(0x2, 0x3, 0x100) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000280)={'veth1_virt_wifi\x00'}) ioctl$auto(0xffffffffffffffff, 0x6, 0xffffffffffffffff) r5 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/pcmC0D0c\x00', 0x100, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_XRUN2(r5, 0x4148, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_READN_FRAMES2(r3, 0x80184153, 0x0) socket(0x1, 0x1, 0x1) socket(0x23, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'ip6tnl0\x00'}) bpf$auto_BPF_PROG_TEST_RUN(0xa, 0x0, 0x8) keyctl$auto(0x1f, 0x0, 0x6, 0x0, 0x37f) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) (fail_nth: 1) 3.784298675s ago: executing program 3 (id=3579): ioctl$auto_SNDRV_RAWMIDI_IOCTL_DROP(0xffffffffffffffff, 0x40045730, &(0x7f0000000080)=0x9) ioctl$auto_USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, 0x0, 0x88000, 0x0) read$auto(r0, 0x0, 0x4) unshare$auto(0x40000080) unshare$auto(0x40000080) unshare$auto(0x40000080) write$auto(0xffffffffffffffff, 0x0, 0x3) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x10) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) socket(0x18, 0x3, 0x2) bind$auto(0x3, &(0x7f0000000180)=@l2={0x1f, 0xe, @none, 0x7fff, 0x2}, 0x6a) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) timer_create$auto(0x4, 0x0, &(0x7f0000000280)=0x5) r1 = setfsgid$auto(0x0) msgctl$auto_IPC_INFO(0xd, 0x3, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000200)={{@raw=0x1, 0xfffffffe, 0x1e02c17c, 0x480008, "3112d58500a8b47148e22af9ffb683dbedad2b835c10c0a1880015e48d00", @raw=0xfffffffe}, 0x480, 0x80, 0x4, @raw=0x1642, @reserved="f4d3cddf749819bb6bb0ffd3be267660e604c2e08a7952f2d54b8e596d11dcd5ee5098a75a3f318489930c1f503095e5c0a36a5f52d607811d54a6470a9b3de1d9892e3f71557240924156c8a69ffb0edd71ede748c1037a5fc6134e8487c4f7b174337ba05c011359ed80fbe9a4f0d3a30abaa989213665d665999ec82de25d", "0100000000000000ea00000000e025450ef10bb31977702b07552d000000000000000000eb7d1500000000001059a200"}) rt_sigqueueinfo$auto(0x0, 0xffff7b6f, 0x0) clock_nanosleep$auto(0x2, 0x6, &(0x7f0000000840)={0x0, 0xc025}, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x40bc2, 0x1c0) write$auto(r2, &(0x7f0000000100)='\xea\x85\x92\x06(#\xc4\xb6(\x9e\xfcKG\xc2\xd4\xc0\v\x02\x9f%C\x00\x01\x00@!\xa9\xce\x10Y\xd0\xeb\xed\x7f\xc8\xdc(\xd3\xe9\xf3\xddT\x18\x16#\xfdQ5\xaeA\xc3\xeay\x7f\xa2TR|js\xfd\n\xa3\x98\xc8\x91\xdd\x9e\x99}s\xe0x\a\x00\x00\x00\x00\x00\x00\x00.\xa8\xc5\xdbKx\x14l\xe6\x868\xb3\xd2\x00\xea\xf9\xd1z\x8f\xd9\x877J\"\xab\xf9\xdf\xbf\xa1\xa1ms\xaf\xd9&R\x03\x00\xc0u \xc3\xc2\xd61\x97V\xcah\r\x97M\xdb\xf9\x06\x95Z\xdfK\xbeY#/\xf5g\n\x10#\x10@Ft\x9c\xd9\xd3s\x94\x8aV\xeb\xee`e9(\xe0\x88\x06\xa6-;ZM\x9b\xe1-', 0x9) sendfile$auto(r2, r2, &(0x7f0000000000)=0x1, 0xb5d) socket(0x11, 0x3, 0x9) sendmmsg$auto(r2, &(0x7f00000001c0)={{&(0x7f0000000000), 0x5ac, &(0x7f0000000100)={0x0, 0x1f}, 0x3, &(0x7f00000003c0), 0x5, 0x5a}, 0x400005}, 0x2, 0x100) sendmsg$auto_NET_SHAPER_CMD_GROUP(0xffffffffffffffff, 0x0, 0x14) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card1/pcm0c/sub0/hw_params\x00', 0x2a000, 0x0) keyctl$auto(0x1f, 0x1, 0x6, r1, 0x3ff) 2.164828169s ago: executing program 1 (id=3580): r0 = openat$auto_media_devnode_fops_mc_devnode(0xffffffffffffff9c, &(0x7f0000000040)='/dev/media4\x00', 0x2840, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x770, 0xfffffffe, 0x8, 0x4, 0x4005, 0x0, 0x5, 0x400, 0x3, 0x7fffffffffffffff, 0x6, 0x6, 0x4, 0x811ffffffffffb, 0xc, 0x3, 0x6, 0x10, 0x83, 0x801, 0x8000, 0x1, 0x1, 0x202, 0xd, 0xbca7, 0xfffffffffffffff6, 0x400, 0x8, 0x0, 0x6b0, [0x100003, 0x6, 0x0, 0xc, 0xff, 0x0, 0x1fffffffffc, 0x3, 0x4, 0xb, 0x3169b200, 0x0, 0x3, 0xfffffffffffffc01, 0x5, 0xfffffbfffffffffb, 0x0, 0x9, 0x2000000, 0xfffffffffffffffc, 0x0, 0x8, 0x0, 0x200000000000000, 0x101, 0x8000000000000002, 0x0, 0x2, 0x0, 0x7fffffff, 0x105, 0x0, 0x20000000000000, 0x40000000000000, 0x1000000000000200, 0x0, 0x400, 0x96, 0x5, 0x4, 0xe17, 0xfffffffffffffffc, 0x6]}, 0x1fe, 0x1) pwrite64$auto(0xffffffffffffffff, 0x0, 0x3, 0x8) unshare$auto(0x40000080) ioctl$auto_SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f0000000180)={0x2, 0x5, 0xb, 0x4, 0xfffffffd}) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/midiC2D1\x00', 0x1, 0x0) ioctl$auto_FICLONERANGE(r1, 0x4020940d, 0xffffffffffff8000) unshare$auto(0x40000080) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x420c61, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) statmount$auto(0x0, 0x0, 0x1fe, 0x1) r2 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000000)='/dev/usbmon16\x00', 0x0, 0x0) ioctl$auto_MON_IOCT_RING_SIZE(r2, 0x9204, 0x0) ioctl$auto_SNDRV_RAWMIDI_IOCTL_PVERSION(r1, 0x80045700, 0x0) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/net/udp6\x00', 0x600, 0x0) pread64$auto(r3, 0x0, 0x202, 0xfffff000) unshare$auto(0x100000001) r4 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000080), 0xffffffffffffffff) r5 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/mptcp/scheduler\x00', 0x40802, 0x0) sendfile$auto(r5, r5, 0x0, 0x1) sendmsg$auto_NFC_CMD_DEACTIVATE_TARGET(0xffffffffffffffff, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000001f40)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="010027bd7000"], 0x14e0}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cpuset.memory_spread_page\x00', 0x1a1942, 0x0) select$auto(0x6, &(0x7f00000000c0)={[0x35cb81de, 0x0, 0x1ee, 0xffffffffffffffff, 0xfffffffffffffffe, 0x7ff, 0xe7, 0x41e, 0x0, 0x826, 0x2, 0x2, 0x6, 0x400, 0x2, 0x7]}, &(0x7f0000000140)={[0xffffffffffffffff, 0x1000, 0x5, 0x4, 0x24, 0x9, 0x10001, 0xffffffffffffff67, 0x2, 0x10001, 0x978, 0x0, 0x8000000000000001, 0x0, 0xa0, 0x3]}, &(0x7f0000000280)={[0x5, 0x4, 0x9, 0x6, 0x4, 0x3, 0x9, 0x7, 0x6, 0x3, 0x1, 0x61b, 0x3, 0x0, 0xf, 0x7]}, &(0x7f0000000300)={0x5}) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x80000000) ioctl$auto__ctl_fops_dm_ioctl(0xffffffffffffffff, 0xfffffffffffffd02, &(0x7f00000001c0)) readv$auto(r0, &(0x7f00000000c0)={0x0, 0x400}, 0x2) 2.094686402s ago: executing program 0 (id=3581): r0 = fspick$auto(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x7) ioctl$auto_SNDRV_RAWMIDI_IOCTL_DROP(r0, 0x40045730, &(0x7f0000000080)=0x9) ioctl$auto_USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)={0xfd, 0x5, 0x10001, 0x4, &(0x7f0000000140)="d16b4e081fdef5ff3044", 0x6, 0x10, 0xffffffff, @number_of_packets=0xf7ffffff, 0x2084c, 0x800c, 0x0}) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) bind$auto(r0, &(0x7f00000000c0)=@l2={0x1f, 0x8, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x1}, 0x5) unshare$auto(0x40000080) unshare$auto(0x40000080) unshare$auto(0x40000080) write$auto(0xffffffffffffffff, 0x0, 0x7fffffffffffffff) mmap$auto(0x0, 0x3fffff, 0x7fffffff, 0x11, 0xdd, 0x0) r1 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/console\x00', 0x80200, 0x0) ioctl$auto_TIOCMGET(r1, 0x5415, &(0x7f0000000240)) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="44010000", @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="7931f0931e7aedf2290d54520441c69eee0519b2f86265db8b634576935d60ebc0e257998b0c78e384de3403598a255c3e8055723800226d2569d4fd268fbaba6af4fa937099e1fe073d9c36fbdd2ae1ef4160259781701ac1dff701b562747cc244091715fc", @ANYRES32=0x0, @ANYBLOB="040005000500020008000000050001000300000008001f0107000000"], 0x144}, 0x1, 0x0, 0x0, 0x20040000}, 0x10) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) timer_create$auto(0x4, 0x0, &(0x7f0000000280)=0x5) r2 = setfsgid$auto(0x0) msgctl$auto_IPC_INFO(0xd, 0x3, 0x0) sendmsg$auto_NET_SHAPER_CMD_GROUP(0xffffffffffffffff, 0x0, 0x14) keyctl$auto(0xb, 0xfffffffd, 0x7, 0xfffffffffff00003, 0x2) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101c40, 0x0) r4 = openat$auto_trace_fops_debugfs(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) r5 = open(&(0x7f0000000000)=':-.\x00', 0x1652c2, 0xe1d2b27bdc14aa98) fanotify_mark$auto(0x400000000000, 0x105, 0xf2b, r5, 0x0) splice$auto(r4, &(0x7f0000000200)=0xfff, r0, &(0x7f0000000240)=0x80000000, 0x8, 0x4) ioctl$auto(r3, 0x4b3a, 0xffffffffffffffff) write$auto_proc_reg_file_ops_compat_inode(0xffffffffffffffff, &(0x7f0000000140)="5a85", 0x2) close_range$auto(0x2, 0x8, 0x0) keyctl$auto(0x1f, 0x1, 0x6, r2, 0x3ff) (fail_nth: 1) 2.065609151s ago: executing program 2 (id=3582): pselect6$auto(0x1, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x1000000, 0x9, 0x5f, 0x9b74, 0x2, 0x8000) r0 = socket(0x1d, 0x3, 0x1) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event1\x00', 0x143080, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x101000, 0x0) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$auto(0x4000000000000c8, 0x900454cf, 0xffffffffffffffff) unshare$auto(0x40000080) unshare$auto(0x40000080) unshare$auto(0xfd) setsockopt$auto(0xffffffffffffffff, 0xf98, 0x16, 0x0, 0x2) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x121300, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r1 = socket(0x15, 0x5, 0x5) sendmsg$auto_THERMAL_GENL_CMD_CDEV_GET(r0, &(0x7f0000004a00)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001dc0)=ANY=[@ANYBLOB="e82b0000", @ANYRES8=0x0, @ANYRES16=r1, @ANYRES32=0x0, @ANYBLOB="04000c80040037800400d8009ac146c6c5c87278294920657cfb9259532364cd85ffcf03171962d88040b863a0e28054a99c965dad6af4bbbe55df86e7f1cce7ec95954b0d35d730ab30511daf38312ec863acba88bc72a1ea762c86a93813e9faa4547d05c2fdfec4ed23f22292067617be0421de05426d0a70c1975883660412d673c1f84c7095142f4fd953f7725eb0c61c1ae2c6d8e6312715c3c42795838108c4b6ae814c4fcf65106947030a2aa0bd2175a4585554cf47490eba5ccb5bebddb8f659afeaeebce516c9597a4399b7180affecaab478c7142ee574e042422a812e257d135a24ce4fcbd5c4619c23f2e28314546574f34d000000"], 0x2be8}, 0x1, 0x0, 0x0, 0x4000090}, 0x4000010) r2 = openat$auto_hsr_node_table_fops_(0xffffffffffffff9c, 0x0, 0x103400, 0x0) pread64$auto(r2, &(0x7f0000000080)='\x00}2\xed\x18\xcax\xaa\xa8\x00', 0x10003, 0x6) openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f00000000c0), 0x10000, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) r3 = fanotify_init$auto(0x5, 0x2000000000002) r4 = open(&(0x7f0000000040)='./file1\x00', 0xcc42, 0x409) fanotify_mark$auto(0x0, 0x401, 0x9, r4, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) mkdir$auto(&(0x7f0000000000)='./file1\x00', 0x9) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000180), r3) write$auto(0xffffffffffffffff, 0x0, 0x1) 2.01609158s ago: executing program 3 (id=3583): r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0) 1.966266019s ago: executing program 3 (id=3584): r0 = openat$auto_media_devnode_fops_mc_devnode(0xffffffffffffff9c, &(0x7f0000000040)='/dev/media4\x00', 0x2840, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x770, 0xfffffffe, 0x8, 0x4, 0x4005, 0x0, 0x5, 0x400, 0x3, 0x7fffffffffffffff, 0x6, 0x6, 0x4, 0x811ffffffffffb, 0xc, 0x3, 0x6, 0x10, 0x83, 0x801, 0x8000, 0x1, 0x1, 0x202, 0xd, 0xbca7, 0xfffffffffffffff6, 0x400, 0x8, 0x0, 0x6b0, [0x100003, 0x6, 0x0, 0xc, 0xff, 0x0, 0x1fffffffffc, 0x3, 0x4, 0xb, 0x3169b200, 0x0, 0x3, 0xfffffffffffffc01, 0x5, 0xfffffbfffffffffb, 0x0, 0x9, 0x2000000, 0xfffffffffffffffc, 0x0, 0x8, 0x0, 0x200000000000000, 0x101, 0x8000000000000002, 0x0, 0x2, 0x0, 0x7fffffff, 0x105, 0x0, 0x20000000000000, 0x40000000000000, 0x1000000000000200, 0x0, 0x400, 0x96, 0x5, 0x4, 0xe17, 0xfffffffffffffffc, 0x6]}, 0x1fe, 0x1) r1 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, 0x0, 0x1541, 0x0) pwrite64$auto(0xffffffffffffffff, 0x0, 0x3, 0x8) unshare$auto(0x40000080) ioctl$auto_SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f0000000180)={0x2, 0x5, 0xb, 0x4, 0xfffffffd}) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/midiC2D1\x00', 0x1, 0x0) ioctl$auto_FICLONERANGE(r2, 0x4020940d, 0xffffffffffff8000) unshare$auto(0x40000080) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x420c61, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x770, 0xfffffffe, 0x8, 0x4, 0x4005, 0x0, 0x5, 0x400, 0x3, 0x9, 0x6, 0x6, 0x4, 0x11ffffffffffb, 0xc, 0xffffffffffffffff, 0x6, 0x10, 0x80, 0x801, 0x8000, 0x1, 0x1, 0x202, 0xd, 0xbca7, 0xfffffffffffffff6, 0x400, 0x0, 0x0, 0x6b4, [0x2, 0x6, 0x0, 0xc, 0x0, 0x0, 0x1fffffffffc, 0x3, 0x4, 0xb, 0x3169b201, 0x0, 0x3, 0xfffffffffffffc01, 0x5, 0xfffffbfffffffffb, 0x3, 0x9, 0x2000000, 0xfffffffffffffffe, 0x0, 0x8, 0xfffffffffffffffe, 0x200000000000000, 0x0, 0x8000000000000000, 0x0, 0x1, 0x0, 0x7fffffff, 0x101, 0x0, 0x20000000000000, 0x40000000000000, 0x1000000000000200, 0x0, 0x400, 0x96, 0x5, 0x4, 0xe17, 0xfffffffffffffffc, 0x6]}, 0x1fe, 0x1) r3 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$auto_MON_IOCT_RING_SIZE(r3, 0x9204, 0x0) ioctl$auto_SNDRV_RAWMIDI_IOCTL_PVERSION(r2, 0x80045700, 0x0) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/net/udp6\x00', 0x600, 0x0) pread64$auto(r4, 0x0, 0x202, 0xfffff000) unshare$auto(0x100000001) r5 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000080), 0xffffffffffffffff) r6 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/mptcp/scheduler\x00', 0x40802, 0x0) sendfile$auto(r6, r6, 0x0, 0x1) sendmsg$auto_NFC_CMD_DEACTIVATE_TARGET(0xffffffffffffffff, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000001f40)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="010027bd7000"], 0x14e0}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cpuset.memory_spread_page\x00', 0x1a1942, 0x0) select$auto(0x6, &(0x7f00000000c0)={[0x35cb81de, 0x0, 0x1ee, 0xffffffffffffffff, 0xfffffffffffffffe, 0x7ff, 0xe7, 0x41e, 0x0, 0x826, 0x2, 0x2, 0x6, 0x400, 0x2, 0x7]}, &(0x7f0000000140)={[0xffffffffffffffff, 0x1000, 0x5, 0x4, 0x24, 0x9, 0x10001, 0xffffffffffffff67, 0x2, 0x10001, 0x978, 0x0, 0x8000000000000001, 0x0, 0xa0, 0x3]}, &(0x7f0000000280)={[0x5, 0x4, 0x9, 0x6, 0x4, 0x3, 0x9, 0x7, 0x6, 0x3, 0x1, 0x61b, 0x3, 0x0, 0xf, 0x7]}, &(0x7f0000000300)={0x5}) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x80000000) ioctl$auto__ctl_fops_dm_ioctl(r1, 0xfffffffffffffd02, &(0x7f00000001c0)) readv$auto(r0, &(0x7f00000000c0)={0x0, 0x400}, 0x2) 155.439185ms ago: executing program 0 (id=3585): r0 = openat$auto_media_devnode_fops_mc_devnode(0xffffffffffffff9c, &(0x7f0000000040)='/dev/media4\x00', 0x2840, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x770, 0xfffffffe, 0x8, 0x4, 0x4005, 0x0, 0x5, 0x400, 0x3, 0x7fffffffffffffff, 0x6, 0x6, 0x4, 0x811ffffffffffb, 0xc, 0x3, 0x6, 0x10, 0x83, 0x801, 0x8000, 0x1, 0x1, 0x202, 0xd, 0xbca7, 0xfffffffffffffff6, 0x400, 0x8, 0x0, 0x6b0, [0x100003, 0x6, 0x0, 0xc, 0xff, 0x0, 0x1fffffffffc, 0x3, 0x4, 0xb, 0x3169b200, 0x0, 0x3, 0xfffffffffffffc01, 0x5, 0xfffffbfffffffffb, 0x0, 0x9, 0x2000000, 0xfffffffffffffffc, 0x0, 0x8, 0x0, 0x200000000000000, 0x101, 0x8000000000000002, 0x0, 0x2, 0x0, 0x7fffffff, 0x105, 0x0, 0x20000000000000, 0x40000000000000, 0x1000000000000200, 0x0, 0x400, 0x96, 0x5, 0x4, 0xe17, 0xfffffffffffffffc, 0x6]}, 0x1fe, 0x1) pwrite64$auto(0xffffffffffffffff, 0x0, 0x3, 0x8) unshare$auto(0x40000080) ioctl$auto_SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f0000000180)={0x2, 0x5, 0xb, 0x4, 0xfffffffd}) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/midiC2D1\x00', 0x1, 0x0) ioctl$auto_FICLONERANGE(r1, 0x4020940d, 0xffffffffffff8000) unshare$auto(0x40000080) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x420c61, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x770, 0xfffffffe, 0x8, 0x4, 0x4005, 0x0, 0x5, 0x400, 0x3, 0x9, 0x6, 0x6, 0x4, 0x11ffffffffffb, 0xc, 0xffffffffffffffff, 0x6, 0x10, 0x80, 0x801, 0x8000, 0x1, 0x1, 0x202, 0xd, 0xbca7, 0xfffffffffffffff6, 0x400, 0x0, 0x0, 0x6b4, [0x2, 0x6, 0x0, 0xc, 0x0, 0x0, 0x1fffffffffc, 0x3, 0x4, 0xb, 0x3169b201, 0x0, 0x3, 0xfffffffffffffc01, 0x5, 0xfffffbfffffffffb, 0x3, 0x9, 0x2000000, 0xfffffffffffffffe, 0x0, 0x8, 0xfffffffffffffffe, 0x200000000000000, 0x0, 0x8000000000000000, 0x0, 0x1, 0x0, 0x7fffffff, 0x101, 0x0, 0x20000000000000, 0x40000000000000, 0x1000000000000200, 0x0, 0x400, 0x96, 0x5, 0x4, 0xe17, 0xfffffffffffffffc, 0x6]}, 0x1fe, 0x1) r2 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000000)='/dev/usbmon16\x00', 0x0, 0x0) ioctl$auto_MON_IOCT_RING_SIZE(r2, 0x9204, 0x0) ioctl$auto_SNDRV_RAWMIDI_IOCTL_PVERSION(r1, 0x80045700, 0x0) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x600, 0x0) pread64$auto(r3, 0x0, 0x202, 0xfffff000) unshare$auto(0x100000001) r4 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000080), 0xffffffffffffffff) r5 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/mptcp/scheduler\x00', 0x40802, 0x0) sendfile$auto(r5, r5, 0x0, 0x1) sendmsg$auto_NFC_CMD_DEACTIVATE_TARGET(0xffffffffffffffff, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000001f40)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="010027bd7000"], 0x14e0}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cpuset.memory_spread_page\x00', 0x1a1942, 0x0) select$auto(0x6, &(0x7f00000000c0)={[0x35cb81de, 0x0, 0x1ee, 0xffffffffffffffff, 0xfffffffffffffffe, 0x7ff, 0xe7, 0x41e, 0x0, 0x826, 0x2, 0x2, 0x6, 0x400, 0x2, 0x7]}, &(0x7f0000000140)={[0xffffffffffffffff, 0x1000, 0x5, 0x4, 0x24, 0x9, 0x10001, 0xffffffffffffff67, 0x2, 0x10001, 0x978, 0x0, 0x8000000000000001, 0x0, 0xa0, 0x3]}, &(0x7f0000000280)={[0x5, 0x4, 0x9, 0x6, 0x4, 0x3, 0x9, 0x7, 0x6, 0x3, 0x1, 0x61b, 0x3, 0x0, 0xf, 0x7]}, &(0x7f0000000300)={0x5}) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x80000000) ioctl$auto__ctl_fops_dm_ioctl(0xffffffffffffffff, 0xfffffffffffffd02, &(0x7f00000001c0)) readv$auto(r0, &(0x7f00000000c0)={0x0, 0x400}, 0x2) 39.332883ms ago: executing program 1 (id=3586): pselect6$auto(0x1, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) r0 = socket(0xa, 0x2, 0x73) getsockopt$auto_SO_TIMESTAMPNS_NEW(r0, 0x0, 0x40, 0x0, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) shmctl$auto_IPC_RMID(0x4, 0x0, &(0x7f0000000300)={{0x6, 0xffffffffffffffff, 0x0, 0x1, 0x80, 0x3, 0x8}, 0x9, 0x1ff, 0x9, 0x5, @raw=0x2, @inferred=0xffffffffffffffff, 0xfffe, 0x0, 0x0, 0x0}) rseq$auto(0x0, 0x20, 0x0, 0x8000006) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x16bd22, 0x0) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001480)=ANY=[@ANYRES16=r1, @ANYRESOCT, @ANYBLOB="80575f484083146675a9e7181707b12f3c570996124d00b723c0aca2a91a8bacd76bfda687193051d7f52e4e2f45a2ef038f7f5b144561b8155fd6c332f73ac587246d4603fabe85f6d32916fab80f36065c6444c8e0f4d5bad1c8ecfa6b51c68e9c181b69b5005addb9184c56a49aab0cbe520bbede5301767a0f046d94d34ee6ebf4888fc04a0d4393b679838e9c5b5f9753c1ba406e69d9831271fa5814901626f8b9a976ae7e11def1ffd5c023e5667c2a32ebc0652b51dce7c237c30c27ef090b6b68467c1b692d0fa4f539a36d2d419e330cfac9459da6b6ddc22d73bfd657f4e9b14fa3bcc973b67d47ebb61c152d7ef431f4d14a9e543b3814b3efeba06a2d23e7ebda47d096473adca23c2f83fdf2098a37b063e2693333742b3081c8b5e9669948924654722c8892be852e3289eafce312edd5734b5fb2e781871b6f85d9370889076b60d94981a6bb3626fbd0292ab564152921c1d137f0678487302c71beaa663e9755ae99fcb148c850baa7c95640a36cee93834f146b271758390e10a7334d8f43405f48efe869965dafe7c352b3af3b243b4d194d9fdac2e08d505b62bdda6c425316bc9c64cfb248ef51fd05f366e91daaff15dfb6421d7f3f0ee5be1560bd168d70d691f0c724f81e4a6723f54bf619048c04445ca678358b4cb29aca3ab1ff619bd604e6552e0e586899da91961a0b5e7016ba28578ddefde2328842bafa29521f8761db156d12508226f8e963132ce018427a1e4ee7833e47ce7a81e714fcf2f940f35da64e7ccb5fe03caa03c48def03ec5ca18c8e71d0061c47a64127072a1cf9eb51f24bfcd9bab6c813f1c99d1bb66f85eb8a63b67e5b186aaec9ca8ad209d9e93fa297c1de3ac3840baa1d6157025143173cf59fbcb74e507071f444e4c2d17f590d171be7b96925ed9406a4a217227be6222f1d821c2ec64c723532f765641406af10c83cf1942442b1b026141c02b607b69641e4076c67baf4c1c7d7c34b6c8350ed293e9219a39d686233909c744325c3160ae312d2f6e4405939acba0587d3f902d7ccdf0e6dda38a38b83740dd15dfbe544345021435040142bea4f6fec7b4c3df45a27151e48a8e54b063ae2be25e83c5d1c5cee8e3f667e7c59f0bd37b4c1bb14c4dc7adb754a2cb1a3a9d60221d16525d3bf48918b4ec08d01a680334857a8a39e4efb4e3c778cc55c65540e9f41deeb6607de9db4ee38993363f04b2727b9e7b47165a2a15e2cadf3053d4e146f245f76c7a15ccc9ef072d3838be3019c6b2728a6b431635d46688f4375b900e12986a0c0f072aff4ff677eec98c9361d492beeab46e32a629b56f3c99d547c8b3641f5aeb03f8a814805d5ad19b3ffd00750e9ae5dac0a27e2544a27d7b7939ba927374f394df12caca293d98c5dadbc21c5f2a66486a61f659487c508a56295da8f282841cb47477bf7a13f1072a11043d595325614a93a5ebe2bff2f262e98cb7c0340e62a7e05be73bbddccd38649e05aa7837fe4da357f82085e351ade2cf6476177764416274a8e4d79aebc584fdfbe8d6d9ad927a5591efe1760a98bd635a686d1d73d0937a1dee5e3c730230c542e6e8cffc800c71b19b275de0f9a0eaaf72e83ece68ab65b1fa633f99bf463ebefbe56034b60902ce075bfe02c6f8f0d3c2e45ee5a728a657084892fc7ac4cdd02415789046379911b1ded7184539ad4c8870715f5acf5ec6d60cdb2dcf7134c157cb832bbe9a8e2a00826f130f0f46fc40837fece1eff6bc6171ca631c5abb690e0a17426e2f8d14fbab6557280dddaa4e2206db1f8db515dfaebda0e54725e1780bd4c847df76d8f14a3f61829375128dc029911096a013581776cb3761bc20a0e1de38393e1394f0f3020f2979d53c36d7a7a6324336f2b3d0de60913e004c3266fe4517dbab3cd025a4b0bb73e94140eafb0eb193bd1436e6e03dcf5c8ca8fce9bef20e6ef82a819c8a2ec186069708b5c1b3e2e7f4475096fad92d155236fd3a95e6131b767fec97d361a6c5a89bfaf07e88f9a201e2d87f5f328831833ac8b29942ad1ff50c1d6d997ce088a3743091ff53ef29c12c47f0e3999ac0c818839eca9b753d9a2e0739d1bc74b1b73c2dc1d14ff5ada1ab6239309f2cc5c1c976abc68612b6467fb0a8cd5a612ee315651d013241be25f4f3b537f8b90c909c8502903971394324526974056998bb353c531fcd705c5fd433d2e57f6e831883ad63aaea338ebbf4b5c592e004e2042fa59486bd5af3f84cd289b8dcdaeb962456ad20020838ac8f6f145b2489eee702cec683b2b98f9b2540d12cded1bfb132a4665c3592577fafc439e943175c145cdcfb4c66e26a4623e85e59b2936f8bb11f40a40f574ae024cd33f898cbec89d84e74aed75897b45b47877398f6a4c18162c49e01034f33f1d45e89e7efeb9bfba7e62679d6172dd35a49d09bbda5db9a6d008e8f5060eb5c43a5d1dd3a75704b00b25d2346daff848146c380f2b370b3219e069748f86bb907603c07982da984add5816dbec91d5ec85395481f2f0f072aedbd4779dacfe7d3dacd7d226649290cf651eb08cff019212d973376ae5a02f0cf7ede57fe86505692e5e48ea58f59072d408cca3a4b2d767028bf3ab04b0239bce6f4dcd808f3e837e0e0eab885d4566d783f9fcd4e7c2e2cc5407bafd05f1e939ecb8230688c6f8042bf6256d23f02cdf76ccc426ad7b73b0510b4d38cb53ebb3385a4f5ff4716fa5d732c68abc288b6f6e6529e3da3f5ab9489d6dc38bc3f4cb9c6b2f3c49470ec482f1cdff6027c6dc34fa4c0537ad8b48c49446c9498e556d834d8ce41bf6fd478a221b44cd4402ec4716744a83bf33e7f0ef29cbc6d8596a8703ebd5adc1c54a87a56ab4f6ba39016f0395aeb44285692c4492b68623737183e8da3c52abc51d085c0c2a33fa92a319c714b0717d8b774583dfa7eccb7c791d72892fe074302da1bf53dda77d4c20f647c09a9f899873212ba407f05f4cdb3634310aa0bc633ca99ee2dc5b02f3aff38a302dd0ca91020a9fd8b451ad6e696f968e2e190e592222ed926e51cb22e610f27e204ac6f450fb1427ada7f92bdb83aeb8837109d5a2b0a02b9032259c5689e799d32d1d0dfd7386ec29d027fb8c8ff1f0f1dacc850d01e78bddef782c2ff73564e291575adcb19eede129a68c8a36597246017b4b1f7a3a558b9719431cdca9f2ee23a0dc9970c01bd755c24f43e2bbc5769756ffbd73afb7c650ad2347df107f30892638ffdaf1f183cb22041a11a4f6d4ccf92a24e82bfd51700486db0ee55bb871f749ced8e2bac5d004037a981fd5ca75acdba94aeddae357f8f04ead8b218278f4e1693dcdf75e10c05eb59586ce7b2a168d59eca4053d51cdb863b723c507f625f6b7be9c8ed34f09ddc82790372eaa0e7769d430036a4420138c1afc968fc02ce8cd5a8dd3339e5dc30fcb90dae425b3f55398e66c1c3d1ace34a826536a5ad90c60955ba4dbb3cef40ca357682812b09b1c0b1e0f496e36ff7e868cc5d7b4bc98da14bce491ced9b119e71a3ceda8895c86d2d60b10d156850257fa7f1fc2752b9d2ac87221df82cd7b762c09e6609246b4cc364ad700e031bda90b9f9fb6f110475ae072438a4479bfb20f4dc87898eabbf1a7f051ab91ff38145ea92e815741efb82ef446dfc67209289bca76af6f3ed3f0f427870ad3f04a910d6a598aa993cc9874b9a1bcb06277529960cf443e3f680ea881ed1849c2cdb92a3582beb07fb99d7e5a8c61c53f3c4b925f18b3bb42fe14cac7c2cde1acf7903b40a9ac3585bdedb3d7f035c19a31ffa32b7704f15a8a8dad6b7ab0eb7eba578c2a796dbe27167e3ded5c7c8af50569da30f327be15b6fe783800dea77de797d48439f3a3b2a5bbe3d360f6dca06e1514badfe60ddebbc7a72a365df1bfc10b663b86b39dd9579af984b30afd3209b10f7ef1299817db3d5658a4467cd8566310ff36036e90b93ab85f1bfffb6dc1ae99fd796b3cff122ee5be62bbb67470f517f1df20d3749c59df881af7381b359287a4abaacd77bc290eba8c6022e24fb31a89ee168b09af940bcb7c4a5917d206568401af8966077b4f3b094fdff74188d1caeaf67d3d195aff2b4d101d64d472affe017be9d568e49ad0cb91e7a04d22a74ad110fc8a1be1cf8f98c6d15c45166606b65588dfd0abc7972ee8251048bc2126a36ce55a9757840b7b3b0ea014402508558ffa1713bb847a3e2a34edac282fe127191d76d4538d4b870abb6fa577ce032e476a0c87d5bf4d18810a69ba6aaca47b0bcedb39489bdbc89320008b51e64a613aa9f1723d0716c1cdd831da2f057ad8ca35f8ad37e1320b723a887cadcb3911e69f8b9bd84902ce51fe7af34d7471b135031613ce13778d3c6cd05c8b31049a687c59467265f05a717d3b723012a66721d56aa2849b2f990f2d9e587bbc01ea815d40d6e5dfe3cb5d7b16c0dda5f53bf3c0d0c0e8ed92c54ec89faa51d69a4282e0382fc14b50d6de105578321cde8059bdd88e96d9e1af9104f1c8e9ec1dfa404ed07b0f0857996bb61bed5381bf905fe9547744646954df4b9d62e11df06ae1ab4e683fd97224c5fedc5a3e76a7c6060fb4b5921511db046970393e874795e35b1c8b9e1b4f1969b7b200e1b878af63cd27f93badaf83d91b3b685e9623a96c655968e6b3168bb312da57187c5fb71f61bf70af2a64924cc2de9ab560f9a197e0ecf7256fe210b2f0211f5031052cb59944467facaaf8abf16d9008075357bf14bedebbf949d47efc2edbc2c6b7b83842d4f440f718fa57a386ed82ae04cfff38b1a7f8dc407615e78301687af2045811167a8e45fae3c6ca3cc45ada1e6078f2d2fea6a6504d7cc33894c142b5bb15f77c920e4a65480ffa45e8ffd7c7884dd07a029c506541d27353a4e372da34864afe6487da84a1f383882143d8826f19c6f1d0c67f6eb833d78d2534ab08e6e71fc5a8686b26824129d24e093d7823afdc77984f63e0a2c3a4b792e0895857916d77fd5a2db315eac5fdc966e76ece38439ed2c1d3dc98a9e963f88a84398f8fc6fdb0ecf12f519a54261b7d20d2efb237757bf429698ec7396f06c9978812bf0eb4408470f7eccb229599ee54604d96c2211a06cdc42b0214acd83cad835f269a4d077996c2ddf47f8880c10c27f16129b511fb57b8e5d3897eb5f2fc87ce05f8e5e9892ae8b2b19d6431cda18cd8a3e3adefc490144be241be8939cc8b54648e06a1111d348cba4c1fc4c5c5dd1e376e3eeff7fea4d6c54a6c75fba63fe95eb872ff9dccea746e70cbce60e45d5b91c620e3436aa6e21c094466c73814752fe986d9bd5945bd80d281defbceee8bc7204f86f3b842049297a2046ae8bed1e1886a0e72311272a6b46da07ffe8499a662e88605b1c71fcc05b2514a2677ceb78cbae3372b27bce3464c45157aef1b3bdd2f3d895e16f45077ae659225e7d9ff66ec079006056df73773ae8e112c6b6edb99525bd38a60a37e2277516603c41bbebc5cc8b6519e473e7d0a6e6056efc57f0333ba902276efcfd6a0fc21c447522199643c5fe904a8b1233316eb9d1eaff2ef0b596b3a9ba3d3bdb563d2ce4272e82a2d9b6e89bf3d4fd1c6918c244a68236dc19b5bf1b288e828e28b7d7d15600b627fe70ff9fc7a4c37ee24ff753e22105f6bdcdd43ff5cf272344952e9b56da841ae293d4e6dac59ce9e40e5998c6801e82c800ea7c280b9664321b189038244b25ed0590151ffd87fa1dc32710ba25b8a075fd873e5e5fa", @ANYRESHEX=r0], 0x1ac}, 0x1, 0x0, 0x0, 0x24068051}, 0x2004c0c4) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x1008, &(0x7f0000000400)={&(0x7f0000000080), 0x40}, 0x2, &(0x7f0000000180)="a5b12a4f46a5efd4eca1ec81867d6f42f004718cf512a5e031b151ddf4f189fbf2203f720fd4acf222ad3c9d47895ec0343b07b9907e30a44efa87ab36078fa8f0e5b6c330f025e9", 0x9007, 0xa509}, 0x800}, 0x4, 0x101) sendmsg$auto_NET_SHAPER_CMD_GROUP(0xffffffffffffffff, 0x0, 0x14) msgget$auto(0x3, 0x1000) r3 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, 0x0, 0x48000, 0x0) r4 = socket(0x2, 0x3, 0x100) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000280)={'veth1_virt_wifi\x00'}) ioctl$auto(0xffffffffffffffff, 0x6, 0xffffffffffffffff) r5 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/pcmC0D0c\x00', 0x100, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_XRUN2(r5, 0x4148, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_READN_FRAMES2(r3, 0x80184153, 0x0) socket(0x1, 0x1, 0x1) socket(0x23, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'ip6tnl0\x00'}) bpf$auto_BPF_PROG_TEST_RUN(0xa, 0x0, 0x8) keyctl$auto(0x1f, 0x0, 0x6, 0x0, 0x37f) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 16.874201ms ago: executing program 3 (id=3587): prctl$auto(0x3e, 0x1000001, 0x0, 0x1, 0x0) ioctl$auto_USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000180)={0xa, 0x80, 0xffff, 0x5, &(0x7f0000000240)='#', 0x4b47, 0x3, 0x80005, @stream_id=0x7, 0x2004b, 0xc, 0x0, [{0xbb, 0x0, 0x800}, {0x0, 0x9, 0x6}, {0xb, 0x8, 0x3}, {0x3ff, 0x5, 0x1}, {0x3, 0x8001, 0x4}, {0xb1, 0x3, 0xe}, {0x3, 0x40000006, 0xffff3da3}, {0x2, 0xfffff86e, 0x1e}]}) openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, 0x0, 0x115200, 0x0) openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy0/reset\x00', 0x82, 0x0) lseek$auto(0x3, 0x2, 0x4) pselect6$auto(0x1, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) r0 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) ioctl$auto_I2C_TENBIT(r0, 0x704, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) move_pages$auto(0x0, 0x8000, 0x0, 0x0, 0x0, 0x4) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) socket(0x2, 0x1, 0x106) msgctl$auto_IPC_STAT(0x5f, 0x2, 0x0) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/sctp/eps\x00', 0x0, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/ati_remote2/parameters/mode_mask\x00', 0x40201, 0x0) write$auto(r2, &(0x7f0000000200)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x102000a3dd) pread64$auto(r2, &(0x7f00000000c0)='/proc/self/net/sctp/eps\x00', 0xfff, 0x8000000000000000) pread64$auto(r1, 0x0, 0x2, 0x5) pselect6$auto(0x9, &(0x7f0000000000)={[0x40000000000000c, 0x94a4, 0x3d, 0x37b75d6, 0xffffffffffff5bf6, 0x3, 0x100000001, 0x10, 0x3, 0xfffffffc, 0x3, 0xfffffffffffffffb, 0xcbde, 0x4, 0xb, 0xffffffffffffffff]}, 0x0, 0x0, 0x0, 0x0) futex_requeue$auto(&(0x7f0000000040)={0xb, 0x6, 0x2}, 0x0, 0xf, 0x9) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) keyctl$auto(0xe, 0x2, 0x16efae4c, 0x8000005092, 0x61f93bdb) setns(0xffffffffffffffff, 0x38020000) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 0s ago: executing program 2 (id=3588): r0 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000000), 0x902, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_SMC_PNETID_FLUSH(r1, 0x0, 0x20) ioctl$auto_RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000040)={0x3, 0x3, {0x5, 0x8, 0x9, 0x7, 0x3, 0x6b, 0xfffffffd, 0x10002, 0xfd}}) unshare$auto(0x40000080) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r2, &(0x7f0000000800)='/Eev/audio1\x00VI\xa3\xaa\xb1\xce\xf4d\xab\x83\xcfJ;\x9dJ\xc6\xc0\'\xdb\xbd\xe9/\x93\n\xcd$ab\xb3k7V\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89\xcc\xd9\x92\xee\x069m\x05b\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\xdbE\x93}\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaYd\xb0\xf1\xcb\xd3\xdd\xe2\xae,\x95k\xfer\xa8[\x84\x0f>:\xc2\xfe\x0e=7\xe5\xdc\xe9\xab\x0e\xfd\xd7`\xbe\x7f*\x10\x04A\xd2\xc9\xbc\xea\xb0\xa1\x930|09\xc2\x97M\xfc\x1a\xa7\xa4\xd0\x96\x03\xb9 \xe5\x9a\x0e\v6o\xc3I\v\x8d\xf2\x1e\xc9w\xac]\xe6\xe9\'2\x01\xe0\xf3\xf7\t\xf72\x1b\xe6\x16\x01\xc4}\x18\xbe\xbd\xa8\xd2\x00\xaf\xd6\x05k\xa6\xf8\x80\xe6\x7f\xc1\x95$\t\x1f\xa1\x83\xce\x11\x88\x99y\x9b\xe5\xfe(\xa6\xd5Z`\x9b\xdc\xa2 \xc7\xcd.C\xd0\xe0\x88\xf3\xba\x8b\xd2V\xdbw\x8dc', 0x100000a3dd) unshare$auto(0x40000080) unshare$auto(0x40000080) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x2) preadv$auto(0xffffffffffffffff, 0x0, 0x7, 0x6, 0x402) madvise$auto(0x110c230000, 0x8031ca, 0x9) read$auto_ptdump_fops_(0xffffffffffffffff, 0x0, 0x0) unshare$auto(0x40000080) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = openat$auto_btrfs_dir_file_operations_inode(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/bluetooth/hci1/hci1:201\x00', 0x6fa841, 0x0) ioctl$auto_BTRFS_IOC_ENCODED_WRITE_32(r3, 0x40789440, &(0x7f0000000180)={0x8, 0x3ff, 0x1, 0xffffffffffffffff, 0x4767, 0x10000, 0xfff, 0x8, 0x3, "0145f6f7e9488eea1da49193285e70c7d7f848385570f97999f076c305fdef074dd2de31d523678272c08bab41f902e43203a86e8944c57d558f8b36184ec7d5"}) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/ifb0/flags\x00', 0xb02, 0x0) r5 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, 0x0, 0x400, 0x0) read$auto_proc_single_file_operations_base(r5, &(0x7f0000000080)=""/119, 0x77) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) futex$auto(0x0, 0x85, 0x10005, 0x0, 0x0, 0x10000007) socket$nl_generic(0x10, 0x3, 0x10) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7885) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x183a41, 0x0) writev$auto(r4, &(0x7f00000002c0)={0x0, 0x5}, 0x1) sendfile$auto(r4, r4, 0x0, 0x3) kernel console output (not intermixed with test programs): fff R11: 0000000000000246 R12: 0000000000000000 [ 1358.666018][T27840] R13: 00007f44f2026038 R14: 00007fff67f446c0 R15: 00007fff67f447a8 [ 1358.666039][T27840] [ 1359.095561][T27864] netlink: zone id is out of range [ 1359.095773][T27864] netlink: zone id is out of range [ 1359.095782][T27864] netlink: zone id is out of range [ 1359.095790][T27864] netlink: zone id is out of range [ 1359.095796][T27864] netlink: zone id is out of range [ 1359.095802][T27864] netlink: zone id is out of range [ 1359.095831][T27864] netlink: zone id is out of range [ 1359.095837][T27864] netlink: zone id is out of range [ 1359.095843][T27864] netlink: get zone limit has 4 unknown bytes [ 1359.340875][T27875] FAULT_INJECTION: forcing a failure. [ 1359.340875][T27875] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1359.340901][T27875] CPU: 0 UID: 0 PID: 27875 Comm: syz.3.2669 Not tainted syzkaller #0 PREEMPT(full) [ 1359.340919][T27875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1359.340929][T27875] Call Trace: [ 1359.340935][T27875] [ 1359.340941][T27875] dump_stack_lvl+0x100/0x190 [ 1359.340965][T27875] should_fail_ex.cold+0x5/0xa [ 1359.340986][T27875] _copy_to_user+0x32/0xd0 [ 1359.341009][T27875] simple_read_from_buffer+0xcb/0x170 [ 1359.341031][T27875] proc_fail_nth_read+0x1af/0x230 [ 1359.341059][T27875] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1359.341078][T27875] ? rw_verify_area+0xce/0x6d0 [ 1359.341094][T27875] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1359.341111][T27875] vfs_read+0x1e4/0xb40 [ 1359.341128][T27875] ? lock_acquire+0x1d1/0x380 [ 1359.341149][T27875] ? __fget_files+0x34/0x3d0 [ 1359.341168][T27875] ? __pfx_vfs_read+0x10/0x10 [ 1359.341183][T27875] ? find_held_lock+0x2b/0x80 [ 1359.341200][T27875] ? __fget_files+0x215/0x3d0 [ 1359.341221][T27875] ? __fget_files+0x21f/0x3d0 [ 1359.341244][T27875] ksys_read+0x12a/0x250 [ 1359.341261][T27875] ? __pfx_ksys_read+0x10/0x10 [ 1359.341283][T27875] do_syscall_64+0x121/0x770 [ 1359.341304][T27875] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1359.341319][T27875] RIP: 0033:0x7f968435e98e [ 1359.341332][T27875] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1359.341347][T27875] RSP: 002b:00007f9685244fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1359.341365][T27875] RAX: ffffffffffffffda RBX: 00007f96852456c0 RCX: 00007f968435e98e [ 1359.341375][T27875] RDX: 000000000000000f RSI: 00007f96852450a0 RDI: 0000000000000005 [ 1359.341384][T27875] RBP: 00007f9685245090 R08: 0000000000000000 R09: 0000000000000000 [ 1359.341394][T27875] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1359.341403][T27875] R13: 00007f96846264e8 R14: 00007f9684626450 R15: 00007ffcda066d78 [ 1359.341423][T27875] [ 1360.975574][T27901] FAULT_INJECTION: forcing a failure. [ 1360.975574][T27901] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1360.975600][T27901] CPU: 0 UID: 0 PID: 27901 Comm: syz.1.2673 Not tainted syzkaller #0 PREEMPT(full) [ 1360.975617][T27901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1360.975626][T27901] Call Trace: [ 1360.975632][T27901] [ 1360.975638][T27901] dump_stack_lvl+0x100/0x190 [ 1360.975663][T27901] should_fail_ex.cold+0x5/0xa [ 1360.975684][T27901] _copy_to_user+0x32/0xd0 [ 1360.975706][T27901] simple_read_from_buffer+0xcb/0x170 [ 1360.975727][T27901] proc_fail_nth_read+0x1af/0x230 [ 1360.975746][T27901] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1360.975765][T27901] ? rw_verify_area+0xce/0x6d0 [ 1360.975781][T27901] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1360.975799][T27901] vfs_read+0x1e4/0xb40 [ 1360.975816][T27901] ? lock_acquire+0x1d1/0x380 [ 1360.975840][T27901] ? __fget_files+0x34/0x3d0 [ 1360.975859][T27901] ? __pfx_vfs_read+0x10/0x10 [ 1360.975874][T27901] ? find_held_lock+0x2b/0x80 [ 1360.975891][T27901] ? __fget_files+0x215/0x3d0 [ 1360.975912][T27901] ? __fget_files+0x21f/0x3d0 [ 1360.975935][T27901] ksys_read+0x12a/0x250 [ 1360.975952][T27901] ? __pfx_ksys_read+0x10/0x10 [ 1360.975982][T27901] do_syscall_64+0x121/0x770 [ 1360.976003][T27901] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1360.976018][T27901] RIP: 0033:0x7f44f1d5e98e [ 1360.976031][T27901] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1360.976046][T27901] RSP: 002b:00007f44f2c41fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1360.976060][T27901] RAX: ffffffffffffffda RBX: 00007f44f2c426c0 RCX: 00007f44f1d5e98e [ 1360.976071][T27901] RDX: 000000000000000f RSI: 00007f44f2c420a0 RDI: 0000000000000002 [ 1360.976080][T27901] RBP: 00007f44f2c42090 R08: 0000000000000000 R09: 0000000000000000 [ 1360.976089][T27901] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1360.976098][T27901] R13: 00007f44f20264e8 R14: 00007f44f2026450 R15: 00007fff67f447a8 [ 1360.976118][T27901] [ 1361.750457][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.750497][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 1362.235938][T27895] Process accounting resumed [ 1362.631545][T27909] cifs: Unknown parameter '‰ƒ´ÕéŒ)¬ Up†µÌ¢{´¼V ]7ž62']ßΨÉú!²gÉÊ®Ë7ú9½ófM¸<*y¢sEéhîé”' [ 1363.090602][T27935] FAULT_INJECTION: forcing a failure. [ 1363.090602][T27935] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1363.090630][T27935] CPU: 0 UID: 0 PID: 27935 Comm: syz.0.2676 Not tainted syzkaller #0 PREEMPT(full) [ 1363.090650][T27935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1363.090660][T27935] Call Trace: [ 1363.090666][T27935] [ 1363.090673][T27935] dump_stack_lvl+0x100/0x190 [ 1363.090699][T27935] should_fail_ex.cold+0x5/0xa [ 1363.090721][T27935] get_futex_key+0x1d0/0x14f0 [ 1363.090739][T27935] ? __pfx_get_futex_key+0x10/0x10 [ 1363.090754][T27935] ? vfs_writev+0x1d5/0xdd0 [ 1363.090770][T27935] ? rcu_is_watching+0x13/0xc0 [ 1363.090789][T27935] ? vfs_writev+0x1d5/0xdd0 [ 1363.090804][T27935] ? kfree+0x1e5/0x6d0 [ 1363.090819][T27935] ? rw_verify_area+0xce/0x6d0 [ 1363.090844][T27935] futex_wake+0xf4/0x5e0 [ 1363.090867][T27935] ? __pfx_futex_wake+0x10/0x10 [ 1363.090887][T27935] ? __pfx_vfs_writev+0x10/0x10 [ 1363.090913][T27935] do_futex+0x2b2/0x440 [ 1363.090932][T27935] ? __pfx_do_futex+0x10/0x10 [ 1363.090950][T27935] ? __fget_files+0x21f/0x3d0 [ 1363.090972][T27935] __x64_sys_futex+0x34f/0x4d0 [ 1363.090991][T27935] ? __pfx___x64_sys_futex+0x10/0x10 [ 1363.091008][T27935] ? __pfx_do_writev+0x10/0x10 [ 1363.091030][T27935] do_syscall_64+0x121/0x770 [ 1363.091051][T27935] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1363.091067][T27935] RIP: 0033:0x7f271899e159 [ 1363.091081][T27935] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1363.091096][T27935] RSP: 002b:00007f2715bcd0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1363.091112][T27935] RAX: ffffffffffffffda RBX: 00007f2718c26548 RCX: 00007f271899e159 [ 1363.091123][T27935] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f2718c2654c [ 1363.091133][T27935] RBP: 00007f2718c26540 R08: 0000000000000001 R09: 0000000000000000 [ 1363.091143][T27935] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 1363.091153][T27935] R13: 00007f2718c265d8 R14: 00007ffc38a17b20 R15: 00007ffc38a17c08 [ 1363.091173][T27935] [ 1364.373963][T27930] Process accounting paused [ 1364.721471][T27959] FAULT_INJECTION: forcing a failure. [ 1364.721471][T27959] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1364.721497][T27959] CPU: 0 UID: 0 PID: 27959 Comm: syz.3.2681 Not tainted syzkaller #0 PREEMPT(full) [ 1364.721515][T27959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1364.721525][T27959] Call Trace: [ 1364.721531][T27959] [ 1364.721537][T27959] dump_stack_lvl+0x100/0x190 [ 1364.721561][T27959] should_fail_ex.cold+0x5/0xa [ 1364.721582][T27959] _copy_to_user+0x32/0xd0 [ 1364.721604][T27959] simple_read_from_buffer+0xcb/0x170 [ 1364.721626][T27959] proc_fail_nth_read+0x1af/0x230 [ 1364.721652][T27959] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1364.721671][T27959] ? rw_verify_area+0xce/0x6d0 [ 1364.721687][T27959] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1364.721704][T27959] vfs_read+0x1e4/0xb40 [ 1364.721722][T27959] ? lock_acquire+0x1d1/0x380 [ 1364.721742][T27959] ? __fget_files+0x34/0x3d0 [ 1364.721760][T27959] ? __pfx_vfs_read+0x10/0x10 [ 1364.721775][T27959] ? find_held_lock+0x2b/0x80 [ 1364.721792][T27959] ? __fget_files+0x215/0x3d0 [ 1364.721814][T27959] ? __fget_files+0x21f/0x3d0 [ 1364.721837][T27959] ksys_read+0x12a/0x250 [ 1364.721853][T27959] ? __pfx_ksys_read+0x10/0x10 [ 1364.721876][T27959] do_syscall_64+0x121/0x770 [ 1364.721897][T27959] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1364.721912][T27959] RIP: 0033:0x7f968435e98e [ 1364.721925][T27959] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1364.721940][T27959] RSP: 002b:00007f9685244fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1364.721956][T27959] RAX: ffffffffffffffda RBX: 00007f96852456c0 RCX: 00007f968435e98e [ 1364.721966][T27959] RDX: 000000000000000f RSI: 00007f96852450a0 RDI: 0000000000000005 [ 1364.721975][T27959] RBP: 00007f9685245090 R08: 0000000000000000 R09: 0000000000000000 [ 1364.721984][T27959] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1364.721993][T27959] R13: 00007f96846264e8 R14: 00007f9684626450 R15: 00007ffcda066d78 [ 1364.722013][T27959] [ 1366.609692][T27991] FAULT_INJECTION: forcing a failure. [ 1366.609692][T27991] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1366.609717][T27991] CPU: 0 UID: 0 PID: 27991 Comm: syz.0.2684 Not tainted syzkaller #0 PREEMPT(full) [ 1366.609735][T27991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1366.609745][T27991] Call Trace: [ 1366.609751][T27991] [ 1366.609757][T27991] dump_stack_lvl+0x100/0x190 [ 1366.609782][T27991] should_fail_ex.cold+0x5/0xa [ 1366.609802][T27991] _copy_to_user+0x32/0xd0 [ 1366.609825][T27991] simple_read_from_buffer+0xcb/0x170 [ 1366.609846][T27991] proc_fail_nth_read+0x1af/0x230 [ 1366.609866][T27991] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1366.609885][T27991] ? rw_verify_area+0xce/0x6d0 [ 1366.609901][T27991] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1366.609918][T27991] vfs_read+0x1e4/0xb40 [ 1366.609936][T27991] ? lock_acquire+0x1d1/0x380 [ 1366.609956][T27991] ? __fget_files+0x34/0x3d0 [ 1366.609975][T27991] ? __pfx_vfs_read+0x10/0x10 [ 1366.609990][T27991] ? find_held_lock+0x2b/0x80 [ 1366.610007][T27991] ? __fget_files+0x215/0x3d0 [ 1366.610028][T27991] ? __fget_files+0x21f/0x3d0 [ 1366.610052][T27991] ksys_read+0x12a/0x250 [ 1366.610068][T27991] ? __pfx_ksys_read+0x10/0x10 [ 1366.610090][T27991] do_syscall_64+0x121/0x770 [ 1366.610110][T27991] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1366.610126][T27991] RIP: 0033:0x7f271895e98e [ 1366.610139][T27991] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1366.610153][T27991] RSP: 002b:00007f2719793fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1366.610168][T27991] RAX: ffffffffffffffda RBX: 00007f27197946c0 RCX: 00007f271895e98e [ 1366.610179][T27991] RDX: 000000000000000f RSI: 00007f27197940a0 RDI: 0000000000000005 [ 1366.610188][T27991] RBP: 00007f2719794090 R08: 0000000000000000 R09: 0000000000000000 [ 1366.610197][T27991] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1366.610206][T27991] R13: 00007f2718c263f8 R14: 00007f2718c26360 R15: 00007ffc38a17c08 [ 1366.610226][T27991] [ 1368.319051][T28005] cifs: Unknown parameter '‰ƒ´ÕéŒ)¬ Up†µÌ¢{´¼V ]7ž62']ßΨÉú!²gÉÊ®Ë7ú9½ófM¸<*y¢sEéhîé”' [ 1370.137058][T28055] FAULT_INJECTION: forcing a failure. [ 1370.137058][T28055] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1370.137084][T28055] CPU: 0 UID: 0 PID: 28055 Comm: syz.1.2693 Not tainted syzkaller #0 PREEMPT(full) [ 1370.137101][T28055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1370.137111][T28055] Call Trace: [ 1370.137117][T28055] [ 1370.137123][T28055] dump_stack_lvl+0x100/0x190 [ 1370.137153][T28055] should_fail_ex.cold+0x5/0xa [ 1370.137174][T28055] _copy_to_user+0x32/0xd0 [ 1370.137206][T28055] simple_read_from_buffer+0xcb/0x170 [ 1370.137231][T28055] proc_fail_nth_read+0x1af/0x230 [ 1370.137255][T28055] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1370.137274][T28055] ? rw_verify_area+0xce/0x6d0 [ 1370.137290][T28055] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1370.137308][T28055] vfs_read+0x1e4/0xb40 [ 1370.137325][T28055] ? lock_acquire+0x1d1/0x380 [ 1370.137346][T28055] ? __fget_files+0x34/0x3d0 [ 1370.137364][T28055] ? __pfx_vfs_read+0x10/0x10 [ 1370.137380][T28055] ? find_held_lock+0x2b/0x80 [ 1370.137397][T28055] ? __fget_files+0x215/0x3d0 [ 1370.137418][T28055] ? __fget_files+0x21f/0x3d0 [ 1370.137441][T28055] ksys_read+0x12a/0x250 [ 1370.137458][T28055] ? __pfx_ksys_read+0x10/0x10 [ 1370.137483][T28055] do_syscall_64+0x121/0x770 [ 1370.137504][T28055] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1370.137519][T28055] RIP: 0033:0x7f44f1d5e98e [ 1370.137532][T28055] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1370.137546][T28055] RSP: 002b:00007f44f2c41fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1370.137562][T28055] RAX: ffffffffffffffda RBX: 00007f44f2c426c0 RCX: 00007f44f1d5e98e [ 1370.137572][T28055] RDX: 000000000000000f RSI: 00007f44f2c420a0 RDI: 0000000000000005 [ 1370.137581][T28055] RBP: 00007f44f2c42090 R08: 0000000000000000 R09: 0000000000000000 [ 1370.137590][T28055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1370.137599][T28055] R13: 00007f44f20264e8 R14: 00007f44f2026450 R15: 00007fff67f447a8 [ 1370.137619][T28055] [ 1375.025808][T28140] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2704'. [ 1375.066048][T28137] HfR: entered promiscuous mode [ 1375.164236][T28140] HfR: left promiscuous mode [ 1375.821315][T28165] FAULT_INJECTION: forcing a failure. [ 1375.821315][T28165] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1375.821341][T28165] CPU: 0 UID: 0 PID: 28165 Comm: syz.2.2705 Not tainted syzkaller #0 PREEMPT(full) [ 1375.821359][T28165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1375.821368][T28165] Call Trace: [ 1375.821374][T28165] [ 1375.821380][T28165] dump_stack_lvl+0x100/0x190 [ 1375.821404][T28165] should_fail_ex.cold+0x5/0xa [ 1375.821428][T28165] _copy_to_user+0x32/0xd0 [ 1375.821451][T28165] simple_read_from_buffer+0xcb/0x170 [ 1375.821472][T28165] proc_fail_nth_read+0x1af/0x230 [ 1375.821491][T28165] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1375.821510][T28165] ? rw_verify_area+0xce/0x6d0 [ 1375.821525][T28165] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1375.821543][T28165] vfs_read+0x1e4/0xb40 [ 1375.821560][T28165] ? lock_acquire+0x1d1/0x380 [ 1375.821581][T28165] ? __fget_files+0x34/0x3d0 [ 1375.821599][T28165] ? __pfx_vfs_read+0x10/0x10 [ 1375.821614][T28165] ? find_held_lock+0x2b/0x80 [ 1375.821632][T28165] ? __fget_files+0x215/0x3d0 [ 1375.821653][T28165] ? __fget_files+0x21f/0x3d0 [ 1375.821676][T28165] ksys_read+0x12a/0x250 [ 1375.821693][T28165] ? __pfx_ksys_read+0x10/0x10 [ 1375.821715][T28165] do_syscall_64+0x121/0x770 [ 1375.821736][T28165] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1375.821752][T28165] RIP: 0033:0x7fe66b35e98e [ 1375.821773][T28165] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1375.821787][T28165] RSP: 002b:00007fe6695f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1375.821807][T28165] RAX: ffffffffffffffda RBX: 00007fe6695f66c0 RCX: 00007fe66b35e98e [ 1375.821818][T28165] RDX: 000000000000000f RSI: 00007fe6695f60a0 RDI: 0000000000000002 [ 1375.821827][T28165] RBP: 00007fe6695f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1375.821836][T28165] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1375.821845][T28165] R13: 00007fe66b6264e8 R14: 00007fe66b626450 R15: 00007fff62a71f18 [ 1375.821865][T28165] [ 1376.944639][T28178] FAULT_INJECTION: forcing a failure. [ 1376.944639][T28178] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1376.944665][T28178] CPU: 0 UID: 0 PID: 28178 Comm: syz.1.2709 Not tainted syzkaller #0 PREEMPT(full) [ 1376.944692][T28178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1376.944701][T28178] Call Trace: [ 1376.944707][T28178] [ 1376.944713][T28178] dump_stack_lvl+0x100/0x190 [ 1376.944738][T28178] should_fail_ex.cold+0x5/0xa [ 1376.944758][T28178] _copy_from_user+0x2e/0xd0 [ 1376.944779][T28178] __sys_bpf+0x2f5/0x4a30 [ 1376.944868][T28178] ? __pfx___sys_bpf+0x10/0x10 [ 1376.944884][T28178] ? find_held_lock+0x2b/0x80 [ 1376.944901][T28178] ? get_pid_task+0xfc/0x250 [ 1376.944917][T28178] ? get_pid_task+0xfc/0x250 [ 1376.944939][T28178] ? find_held_lock+0x2b/0x80 [ 1376.944960][T28178] ? rcu_read_lock_any_held+0x6a/0x90 [ 1376.944981][T28178] ? find_held_lock+0x2b/0x80 [ 1376.944997][T28178] ? ksys_write+0x190/0x250 [ 1376.945014][T28178] ? ksys_write+0x190/0x250 [ 1376.945030][T28178] ? lock_acquire+0x1d1/0x380 [ 1376.945063][T28178] ? fput+0x7c/0x100 [ 1376.945082][T28178] ? ksys_write+0x1ac/0x250 [ 1376.945101][T28178] ? __x64_sys_bpf+0xce/0x140 [ 1376.945117][T28178] __x64_sys_bpf+0xce/0x140 [ 1376.945134][T28178] ? do_syscall_64+0xae/0x770 [ 1376.945153][T28178] do_syscall_64+0x121/0x770 [ 1376.945172][T28178] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1376.945187][T28178] RIP: 0033:0x7f44f1d9e159 [ 1376.945201][T28178] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1376.945215][T28178] RSP: 002b:00007f44f2ce7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1376.945230][T28178] RAX: ffffffffffffffda RBX: 00007f44f2025fa0 RCX: 00007f44f1d9e159 [ 1376.945240][T28178] RDX: 0000000000000012 RSI: 0000200000000040 RDI: 0000000000010000 [ 1376.945250][T28178] RBP: 00007f44f2ce7090 R08: 0000000000000000 R09: 0000000000000000 [ 1376.945259][T28178] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1376.945267][T28178] R13: 00007f44f2026038 R14: 00007f44f2025fa0 R15: 00007fff67f447a8 [ 1376.945287][T28178] [ 1378.079348][T28202] FAULT_INJECTION: forcing a failure. [ 1378.079348][T28202] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1378.079377][T28202] CPU: 0 UID: 0 PID: 28202 Comm: syz.2.2708 Not tainted syzkaller #0 PREEMPT(full) [ 1378.079396][T28202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1378.079407][T28202] Call Trace: [ 1378.079413][T28202] [ 1378.079420][T28202] dump_stack_lvl+0x100/0x190 [ 1378.079446][T28202] should_fail_ex.cold+0x5/0xa [ 1378.079466][T28202] get_futex_key+0x1d0/0x14f0 [ 1378.079485][T28202] ? __pfx_get_futex_key+0x10/0x10 [ 1378.079500][T28202] ? vfs_writev+0x1d5/0xdd0 [ 1378.079517][T28202] ? rcu_is_watching+0x13/0xc0 [ 1378.079535][T28202] ? vfs_writev+0x1d5/0xdd0 [ 1378.079551][T28202] ? kfree+0x1e5/0x6d0 [ 1378.079566][T28202] ? rw_verify_area+0xce/0x6d0 [ 1378.079584][T28202] futex_wake+0xf4/0x5e0 [ 1378.079605][T28202] ? __pfx_futex_wake+0x10/0x10 [ 1378.079624][T28202] ? __pfx_vfs_writev+0x10/0x10 [ 1378.079655][T28202] do_futex+0x2b2/0x440 [ 1378.079674][T28202] ? __pfx_do_futex+0x10/0x10 [ 1378.079692][T28202] ? __fget_files+0x21f/0x3d0 [ 1378.079716][T28202] __x64_sys_futex+0x34f/0x4d0 [ 1378.079736][T28202] ? __pfx___x64_sys_futex+0x10/0x10 [ 1378.079755][T28202] ? __pfx_do_writev+0x10/0x10 [ 1378.079778][T28202] do_syscall_64+0x121/0x770 [ 1378.079799][T28202] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1378.079816][T28202] RIP: 0033:0x7fe66b39e159 [ 1378.079830][T28202] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1378.079845][T28202] RSP: 002b:00007fe6685cd0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1378.079861][T28202] RAX: ffffffffffffffda RBX: 00007fe66b626548 RCX: 00007fe66b39e159 [ 1378.079872][T28202] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fe66b62654c [ 1378.079882][T28202] RBP: 00007fe66b626540 R08: 0000000000000001 R09: 0000000000000000 [ 1378.079892][T28202] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 1378.079901][T28202] R13: 00007fe66b6265d8 R14: 00007fff62a71e30 R15: 00007fff62a71f18 [ 1378.079921][T28202] [ 1378.733784][T28205] FAULT_INJECTION: forcing a failure. [ 1378.733784][T28205] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1378.733811][T28205] CPU: 0 UID: 0 PID: 28205 Comm: syz.3.2712 Not tainted syzkaller #0 PREEMPT(full) [ 1378.733830][T28205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1378.733841][T28205] Call Trace: [ 1378.733847][T28205] [ 1378.733854][T28205] dump_stack_lvl+0x100/0x190 [ 1378.733880][T28205] should_fail_ex.cold+0x5/0xa [ 1378.733902][T28205] get_futex_key+0x1d0/0x14f0 [ 1378.733921][T28205] ? __pfx_get_futex_key+0x10/0x10 [ 1378.733937][T28205] ? vfs_writev+0x1d5/0xdd0 [ 1378.733953][T28205] ? rcu_is_watching+0x13/0xc0 [ 1378.733969][T28205] ? vfs_writev+0x1d5/0xdd0 [ 1378.733984][T28205] ? kfree+0x1e5/0x6d0 [ 1378.734000][T28205] ? rw_verify_area+0xce/0x6d0 [ 1378.734018][T28205] futex_wake+0xf4/0x5e0 [ 1378.734039][T28205] ? __pfx_futex_wake+0x10/0x10 [ 1378.734058][T28205] ? __pfx_vfs_writev+0x10/0x10 [ 1378.734082][T28205] do_futex+0x2b2/0x440 [ 1378.734100][T28205] ? __pfx_do_futex+0x10/0x10 [ 1378.734118][T28205] ? __fget_files+0x21f/0x3d0 [ 1378.734138][T28205] __x64_sys_futex+0x34f/0x4d0 [ 1378.734158][T28205] ? __pfx___x64_sys_futex+0x10/0x10 [ 1378.734175][T28205] ? __pfx_do_writev+0x10/0x10 [ 1378.734199][T28205] do_syscall_64+0x121/0x770 [ 1378.734221][T28205] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1378.734238][T28205] RIP: 0033:0x7f968439e159 [ 1378.734252][T28205] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1378.734267][T28205] RSP: 002b:00007f96852240e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1378.734283][T28205] RAX: ffffffffffffffda RBX: 00007f9684626548 RCX: 00007f968439e159 [ 1378.734294][T28205] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f968462654c [ 1378.734303][T28205] RBP: 00007f9684626540 R08: 0000000000000001 R09: 0000000000000000 [ 1378.734313][T28205] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 1378.734322][T28205] R13: 00007f96846265d8 R14: 00007ffcda066c90 R15: 00007ffcda066d78 [ 1378.734341][T28205] [ 1382.667368][T28282] hub 1-0:1.0: USB hub found [ 1382.692074][T28282] hub 1-0:1.0: 1 port detected [ 1387.043446][T28370] FAULT_INJECTION: forcing a failure. [ 1387.043446][T28370] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1387.043474][T28370] CPU: 0 UID: 0 PID: 28370 Comm: syz.0.2729 Not tainted syzkaller #0 PREEMPT(full) [ 1387.043495][T28370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1387.043505][T28370] Call Trace: [ 1387.043512][T28370] [ 1387.043518][T28370] dump_stack_lvl+0x100/0x190 [ 1387.043545][T28370] should_fail_ex.cold+0x5/0xa [ 1387.043566][T28370] get_futex_key+0x1d0/0x14f0 [ 1387.043592][T28370] ? __pfx_get_futex_key+0x10/0x10 [ 1387.043611][T28370] ? vfs_writev+0x1d5/0xdd0 [ 1387.043627][T28370] ? rcu_is_watching+0x13/0xc0 [ 1387.043645][T28370] ? vfs_writev+0x1d5/0xdd0 [ 1387.043661][T28370] ? kfree+0x1e5/0x6d0 [ 1387.043676][T28370] ? rw_verify_area+0xce/0x6d0 [ 1387.043694][T28370] futex_wake+0xf4/0x5e0 [ 1387.043716][T28370] ? __pfx_futex_wake+0x10/0x10 [ 1387.043735][T28370] ? __pfx_vfs_writev+0x10/0x10 [ 1387.043758][T28370] do_futex+0x2b2/0x440 [ 1387.043775][T28370] ? __pfx_do_futex+0x10/0x10 [ 1387.043793][T28370] ? __fget_files+0x21f/0x3d0 [ 1387.043814][T28370] __x64_sys_futex+0x34f/0x4d0 [ 1387.043833][T28370] ? __pfx___x64_sys_futex+0x10/0x10 [ 1387.043850][T28370] ? __pfx_do_writev+0x10/0x10 [ 1387.043872][T28370] do_syscall_64+0x121/0x770 [ 1387.043892][T28370] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1387.043909][T28370] RIP: 0033:0x7f271899e159 [ 1387.043922][T28370] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1387.043937][T28370] RSP: 002b:00007f2715bcd0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1387.043953][T28370] RAX: ffffffffffffffda RBX: 00007f2718c26548 RCX: 00007f271899e159 [ 1387.043963][T28370] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f2718c2654c [ 1387.043973][T28370] RBP: 00007f2718c26540 R08: 0000000000000001 R09: 0000000000000000 [ 1387.043983][T28370] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 1387.043992][T28370] R13: 00007f2718c265d8 R14: 00007ffc38a17b20 R15: 00007ffc38a17c08 [ 1387.044013][T28370] [ 1388.775613][T28397] cifs: Unknown parameter '‰ƒ´ÕéŒ)¬ Up†µÌ¢{´¼V ]7ž62']ßΨÉú!²gÉÊ®Ë7ú9½ófM¸<*y¢sEéhîé”' [ 1392.421777][T28425] Process accounting paused [ 1394.379580][T28501] openvswitch: HfR: Dropping previously announced user features [ 1394.751778][T28509] openvswitch: HfR: Dropping previously announced user features [ 1394.777090][ T52] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1394.791172][ T52] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1394.793579][ T52] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1394.794189][ T52] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1394.794581][ T52] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1394.821279][T28509] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2746'. [ 1394.947707][ C0] Virtual device HfR asks to queue packet! [ 1395.003717][T28509] HfR: left promiscuous mode [ 1395.004004][T28509] Virtual device HfR asks to queue packet! [ 1395.021945][T28516] cifs: Unknown parameter '‰ƒ´ÕéŒ)¬ Up†µÌ¢{´¼V ]7ž62']ßΨÉú!²gÉÊ®Ë7ú9½ófM¸<*y¢sEéhîé”' [ 1395.921260][T22045] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1396.275996][T22045] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1396.482457][T22045] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1396.793634][T28511] Process accounting resumed [ 1396.870716][ T52] Bluetooth: hci4: command tx timeout [ 1396.899987][T22045] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1398.043995][T28595] netlink: 5324 bytes leftover after parsing attributes in process `syz.1.2750'. [ 1398.568927][T22045] bridge_slave_1: left allmulticast mode [ 1398.568950][T22045] bridge_slave_1: left promiscuous mode [ 1398.584233][T22045] bridge0: port 2(bridge_slave_1) entered disabled state [ 1398.599691][T22045] bridge_slave_0: left allmulticast mode [ 1398.599712][T22045] bridge_slave_0: left promiscuous mode [ 1398.599840][T22045] bridge0: port 1(bridge_slave_0) entered disabled state [ 1398.873703][T22045] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1398.877027][T22045] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1398.900007][T22045] bond0 (unregistering): Released all slaves [ 1398.948520][ T52] Bluetooth: hci4: command tx timeout [ 1399.679395][T22045] hsr_slave_0: left promiscuous mode [ 1399.679958][T22045] hsr_slave_1: left promiscuous mode [ 1399.688674][T22045] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1399.713678][T22045] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1399.725633][T22045] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1399.725650][T22045] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1399.762067][T22045] veth0_macvtap: left promiscuous mode [ 1399.762173][T22045] veth1_vlan: left promiscuous mode [ 1399.762218][T22045] veth0_vlan: left promiscuous mode [ 1400.062435][T28639] FAULT_INJECTION: forcing a failure. [ 1400.062435][T28639] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1400.062464][T28639] CPU: 0 UID: 0 PID: 28639 Comm: syz.3.2751 Not tainted syzkaller #0 PREEMPT(full) [ 1400.062485][T28639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1400.062495][T28639] Call Trace: [ 1400.062501][T28639] [ 1400.062508][T28639] dump_stack_lvl+0x100/0x190 [ 1400.062533][T28639] should_fail_ex.cold+0x5/0xa [ 1400.062554][T28639] get_futex_key+0x1d0/0x14f0 [ 1400.062573][T28639] ? __pfx_get_futex_key+0x10/0x10 [ 1400.062588][T28639] ? vfs_writev+0x1d5/0xdd0 [ 1400.062605][T28639] ? rcu_is_watching+0x13/0xc0 [ 1400.062622][T28639] ? vfs_writev+0x1d5/0xdd0 [ 1400.062638][T28639] ? kfree+0x1e5/0x6d0 [ 1400.062653][T28639] ? rw_verify_area+0xce/0x6d0 [ 1400.062671][T28639] futex_wake+0xf4/0x5e0 [ 1400.062692][T28639] ? __pfx_futex_wake+0x10/0x10 [ 1400.062711][T28639] ? __pfx_vfs_writev+0x10/0x10 [ 1400.062734][T28639] do_futex+0x2b2/0x440 [ 1400.062752][T28639] ? __pfx_do_futex+0x10/0x10 [ 1400.062770][T28639] ? __fget_files+0x21f/0x3d0 [ 1400.062792][T28639] __x64_sys_futex+0x34f/0x4d0 [ 1400.062811][T28639] ? __pfx___x64_sys_futex+0x10/0x10 [ 1400.062829][T28639] ? __pfx_do_writev+0x10/0x10 [ 1400.062850][T28639] do_syscall_64+0x121/0x770 [ 1400.062871][T28639] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1400.062888][T28639] RIP: 0033:0x7f968439e159 [ 1400.062902][T28639] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1400.062917][T28639] RSP: 002b:00007f96852240e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1400.062933][T28639] RAX: ffffffffffffffda RBX: 00007f9684626548 RCX: 00007f968439e159 [ 1400.062944][T28639] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f968462654c [ 1400.062962][T28639] RBP: 00007f9684626540 R08: 0000000000000001 R09: 0000000000000000 [ 1400.062971][T28639] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 1400.062981][T28639] R13: 00007f96846265d8 R14: 00007ffcda066c90 R15: 00007ffcda066d78 [ 1400.063002][T28639] [ 1400.586220][T22045] team0 (unregistering): Port device team_slave_1 removed [ 1400.611238][T22045] team0 (unregistering): Port device team_slave_0 removed [ 1401.028439][ T52] Bluetooth: hci4: command tx timeout [ 1401.428427][T28513] bridge0: port 1(bridge_slave_0) entered blocking state [ 1401.428496][T28513] bridge0: port 1(bridge_slave_0) entered disabled state [ 1401.428574][T28513] bridge_slave_0: entered allmulticast mode [ 1401.429632][T28513] bridge_slave_0: entered promiscuous mode [ 1401.473263][T28513] bridge0: port 2(bridge_slave_1) entered blocking state [ 1401.473331][T28513] bridge0: port 2(bridge_slave_1) entered disabled state [ 1401.473411][T28513] bridge_slave_1: entered allmulticast mode [ 1401.500327][T28513] bridge_slave_1: entered promiscuous mode [ 1401.934111][T28513] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1401.955343][T28513] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1402.572480][T28513] team0: Port device team_slave_0 added [ 1402.753641][T28513] team0: Port device team_slave_1 added [ 1403.107828][ T52] Bluetooth: hci4: command tx timeout [ 1403.203977][T28513] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1403.203991][T28513] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1403.204010][T28513] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1403.206922][T28513] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1403.206934][T28513] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1403.206953][T28513] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1403.727605][T28513] hsr_slave_0: entered promiscuous mode [ 1403.728886][T28513] hsr_slave_1: entered promiscuous mode [ 1404.723834][ T5277] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1407.766248][T28513] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1407.786839][T28513] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1407.989077][T28513] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1408.005339][T28513] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1408.005923][T28513] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1408.030374][T28513] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1408.050740][T28513] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1408.074830][T28513] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1408.397250][T28807] FAULT_INJECTION: forcing a failure. [ 1408.397250][T28807] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1408.397278][T28807] CPU: 0 UID: 0 PID: 28807 Comm: syz.1.2763 Not tainted syzkaller #0 PREEMPT(full) [ 1408.397297][T28807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1408.397308][T28807] Call Trace: [ 1408.397314][T28807] [ 1408.397321][T28807] dump_stack_lvl+0x100/0x190 [ 1408.397347][T28807] should_fail_ex.cold+0x5/0xa [ 1408.397375][T28807] get_futex_key+0x1d0/0x14f0 [ 1408.397394][T28807] ? __pfx_get_futex_key+0x10/0x10 [ 1408.397409][T28807] ? vfs_writev+0x1d5/0xdd0 [ 1408.397426][T28807] ? rcu_is_watching+0x13/0xc0 [ 1408.397443][T28807] ? vfs_writev+0x1d5/0xdd0 [ 1408.397462][T28807] ? kfree+0x1e5/0x6d0 [ 1408.397477][T28807] ? rw_verify_area+0xce/0x6d0 [ 1408.397495][T28807] futex_wake+0xf4/0x5e0 [ 1408.397516][T28807] ? __pfx_futex_wake+0x10/0x10 [ 1408.397535][T28807] ? __pfx_vfs_writev+0x10/0x10 [ 1408.397559][T28807] do_futex+0x2b2/0x440 [ 1408.397576][T28807] ? __pfx_do_futex+0x10/0x10 [ 1408.397595][T28807] ? __fget_files+0x21f/0x3d0 [ 1408.397616][T28807] __x64_sys_futex+0x34f/0x4d0 [ 1408.397636][T28807] ? __pfx___x64_sys_futex+0x10/0x10 [ 1408.397653][T28807] ? __pfx_do_writev+0x10/0x10 [ 1408.397675][T28807] do_syscall_64+0x121/0x770 [ 1408.397696][T28807] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1408.397712][T28807] RIP: 0033:0x7f44f1d9e159 [ 1408.397726][T28807] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1408.397741][T28807] RSP: 002b:00007f44f2c420e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1408.397756][T28807] RAX: ffffffffffffffda RBX: 00007f44f2026458 RCX: 00007f44f1d9e159 [ 1408.397767][T28807] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f44f202645c [ 1408.397777][T28807] RBP: 00007f44f2026450 R08: 0000000000000001 R09: 0000000000000000 [ 1408.397786][T28807] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 1408.397796][T28807] R13: 00007f44f20264e8 R14: 00007fff67f446c0 R15: 00007fff67f447a8 [ 1408.397815][T28807] [ 1410.543173][T28513] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1411.208236][T28513] 8021q: adding VLAN 0 to HW filter on device team0 [ 1411.496958][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 1411.497034][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1411.592701][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 1411.592771][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1414.262219][T28513] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1414.360641][T28921] netlink: 5324 bytes leftover after parsing attributes in process `syz.1.2774'. [ 1415.654918][T28513] veth0_vlan: entered promiscuous mode [ 1415.677074][T28513] veth1_vlan: entered promiscuous mode [ 1416.268352][T28513] veth0_macvtap: entered promiscuous mode [ 1416.480934][T28513] veth1_macvtap: entered promiscuous mode [ 1416.967123][T28513] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1417.177836][T28513] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1417.248084][T22045] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1417.248118][T22045] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1417.248142][T22045] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1417.248166][T22045] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1418.037443][T22045] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1418.037544][T22045] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1418.597627][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1418.597644][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1419.273007][T22045] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1419.530421][T22045] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1419.856595][T22045] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1419.946022][T27836] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1419.959938][T27836] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1419.961990][T27836] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1419.964214][T27836] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1419.964584][T27836] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1420.138612][T29010] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1420.185128][T22045] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1421.506817][T22045] bridge_slave_1: left allmulticast mode [ 1421.506839][T22045] bridge_slave_1: left promiscuous mode [ 1421.506978][T22045] bridge0: port 2(bridge_slave_1) entered disabled state [ 1421.533561][T22045] bridge_slave_0: left allmulticast mode [ 1421.533583][T22045] bridge_slave_0: left promiscuous mode [ 1421.533717][T22045] bridge0: port 1(bridge_slave_0) entered disabled state [ 1421.884889][T22045] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1421.899145][T22045] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1421.901708][T22045] bond0 (unregistering): Released all slaves [ 1422.068982][ T52] Bluetooth: hci0: command tx timeout [ 1422.510740][ T5277] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1422.828842][T22045] hsr_slave_0: left promiscuous mode [ 1422.829268][T22045] hsr_slave_1: left promiscuous mode [ 1422.830034][T22045] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1422.830050][T22045] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1422.830622][T22045] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1422.830639][T22045] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1422.833767][T22045] veth1_macvtap: left promiscuous mode [ 1422.833793][T22045] veth0_macvtap: left promiscuous mode [ 1422.833907][T22045] veth1_vlan: left promiscuous mode [ 1422.833962][T22045] veth0_vlan: left promiscuous mode [ 1423.094060][T22045] team0 (unregistering): Port device team_slave_1 removed [ 1423.117159][T22045] team0 (unregistering): Port device team_slave_0 removed [ 1423.193465][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.193506][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 1424.149609][ T52] Bluetooth: hci0: command tx timeout [ 1424.743470][ T5277] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1425.049827][T29099] cifs: Unknown parameter '‰ƒ´ÕéŒ)¬ Up†µÌ¢{´¼V ]7ž62']ßΨÉú!²gÉÊ®Ë7ú9½ófM¸<*y¢sEéhîé”' [ 1425.404898][T29004] bridge0: port 1(bridge_slave_0) entered blocking state [ 1425.405011][T29004] bridge0: port 1(bridge_slave_0) entered disabled state [ 1425.405386][T29004] bridge_slave_0: entered allmulticast mode [ 1425.429786][T29004] bridge_slave_0: entered promiscuous mode [ 1425.601022][T29004] bridge0: port 2(bridge_slave_1) entered blocking state [ 1425.601385][T29004] bridge0: port 2(bridge_slave_1) entered disabled state [ 1425.601471][T29004] bridge_slave_1: entered allmulticast mode [ 1425.602500][T29004] bridge_slave_1: entered promiscuous mode [ 1425.914297][T29004] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1425.936704][T29004] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1426.164455][T29004] team0: Port device team_slave_0 added [ 1426.183629][T29004] team0: Port device team_slave_1 added [ 1426.227589][ T52] Bluetooth: hci0: command tx timeout [ 1426.301528][T29004] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1426.301543][T29004] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1426.301562][T29004] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1426.345943][T29004] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1426.345959][T29004] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1426.345978][T29004] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1426.639960][T29004] hsr_slave_0: entered promiscuous mode [ 1426.642201][T29004] hsr_slave_1: entered promiscuous mode [ 1426.642666][T29004] debugfs: 'hsr0' already exists in 'hsr' [ 1426.642680][T29004] Cannot create hsr debugfs directory [ 1426.647107][ T5277] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1428.309484][ T52] Bluetooth: hci0: command tx timeout [ 1428.343428][ T5277] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1431.332388][T29004] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1431.349758][T29004] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1431.353020][T29004] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1431.356619][T29004] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1431.357341][T29004] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1431.402616][T29004] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1431.403451][T29004] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1431.426056][T29004] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1432.438123][T29257] FAULT_INJECTION: forcing a failure. [ 1432.438123][T29257] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1432.438152][T29257] CPU: 0 UID: 0 PID: 29257 Comm: syz.0.2804 Not tainted syzkaller #0 PREEMPT(full) [ 1432.438172][T29257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1432.438182][T29257] Call Trace: [ 1432.438189][T29257] [ 1432.438195][T29257] dump_stack_lvl+0x100/0x190 [ 1432.438222][T29257] should_fail_ex.cold+0x5/0xa [ 1432.438244][T29257] get_futex_key+0x1d0/0x14f0 [ 1432.438262][T29257] ? __pfx_get_futex_key+0x10/0x10 [ 1432.438277][T29257] ? vfs_writev+0x1d5/0xdd0 [ 1432.438294][T29257] ? rcu_is_watching+0x13/0xc0 [ 1432.438312][T29257] ? vfs_writev+0x1d5/0xdd0 [ 1432.438326][T29257] ? kfree+0x1e5/0x6d0 [ 1432.438342][T29257] ? rw_verify_area+0xce/0x6d0 [ 1432.438359][T29257] futex_wake+0xf4/0x5e0 [ 1432.438381][T29257] ? __pfx_futex_wake+0x10/0x10 [ 1432.438411][T29257] ? __pfx_vfs_writev+0x10/0x10 [ 1432.438436][T29257] do_futex+0x2b2/0x440 [ 1432.438453][T29257] ? __pfx_do_futex+0x10/0x10 [ 1432.438472][T29257] ? __fget_files+0x21f/0x3d0 [ 1432.438494][T29257] __x64_sys_futex+0x34f/0x4d0 [ 1432.438514][T29257] ? __pfx___x64_sys_futex+0x10/0x10 [ 1432.438531][T29257] ? __pfx_do_writev+0x10/0x10 [ 1432.438553][T29257] do_syscall_64+0x121/0x770 [ 1432.438573][T29257] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1432.438589][T29257] RIP: 0033:0x7fd24bf9e159 [ 1432.438603][T29257] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1432.438617][T29257] RSP: 002b:00007fd24918b0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1432.438633][T29257] RAX: ffffffffffffffda RBX: 00007fd24c226548 RCX: 00007fd24bf9e159 [ 1432.438643][T29257] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fd24c22654c [ 1432.438653][T29257] RBP: 00007fd24c226540 R08: 0000000000000001 R09: 0000000000000000 [ 1432.438662][T29257] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 1432.438672][T29257] R13: 00007fd24c2265d8 R14: 00007fffc6f1f930 R15: 00007fffc6f1fa18 [ 1432.438692][T29257] [ 1433.904010][T29004] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1433.994736][T29004] 8021q: adding VLAN 0 to HW filter on device team0 [ 1434.044083][ T1012] bridge0: port 1(bridge_slave_0) entered blocking state [ 1434.044152][ T1012] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1434.075448][ T1012] bridge0: port 2(bridge_slave_1) entered blocking state [ 1434.075514][ T1012] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1436.724874][T29004] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1437.179701][T29360] FAULT_INJECTION: forcing a failure. [ 1437.179701][T29360] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1437.179731][T29360] CPU: 0 UID: 0 PID: 29360 Comm: syz.0.2810 Not tainted syzkaller #0 PREEMPT(full) [ 1437.179755][T29360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1437.179768][T29360] Call Trace: [ 1437.179775][T29360] [ 1437.179782][T29360] dump_stack_lvl+0x100/0x190 [ 1437.179814][T29360] should_fail_ex.cold+0x5/0xa [ 1437.179835][T29360] get_futex_key+0x1d0/0x14f0 [ 1437.179854][T29360] ? __pfx_get_futex_key+0x10/0x10 [ 1437.179868][T29360] ? find_held_lock+0x2b/0x80 [ 1437.179886][T29360] ? futex_wake+0x4ea/0x5e0 [ 1437.179909][T29360] futex_wake+0xf4/0x5e0 [ 1437.179926][T29360] ? futex_wait+0x11e/0x370 [ 1437.179948][T29360] ? __pfx_futex_wake+0x10/0x10 [ 1437.179969][T29360] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1437.179992][T29360] ? ksys_shmctl.constprop.0+0x19b/0x390 [ 1437.180015][T29360] do_futex+0x2b2/0x440 [ 1437.180032][T29360] ? __pfx_do_futex+0x10/0x10 [ 1437.180050][T29360] ? __fget_files+0x21f/0x3d0 [ 1437.180080][T29360] __x64_sys_futex+0x34f/0x4d0 [ 1437.180100][T29360] ? __pfx___x64_sys_futex+0x10/0x10 [ 1437.180124][T29360] do_syscall_64+0x121/0x770 [ 1437.180148][T29360] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1437.180164][T29360] RIP: 0033:0x7fd24bf9e159 [ 1437.180182][T29360] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1437.180198][T29360] RSP: 002b:00007fd24918b0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1437.180214][T29360] RAX: ffffffffffffffda RBX: 00007fd24c226548 RCX: 00007fd24bf9e159 [ 1437.180225][T29360] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fd24c22654c [ 1437.180236][T29360] RBP: 00007fd24c226540 R08: 0000000000000001 R09: 0000000000000000 [ 1437.180246][T29360] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 1437.180256][T29360] R13: 00007fd24c2265d8 R14: 00007fffc6f1f930 R15: 00007fffc6f1fa18 [ 1437.180276][T29360] [ 1438.102190][T29004] veth0_vlan: entered promiscuous mode [ 1438.131487][T29004] veth1_vlan: entered promiscuous mode [ 1438.213666][T29004] veth0_macvtap: entered promiscuous mode [ 1438.244104][T29004] veth1_macvtap: entered promiscuous mode [ 1438.285256][T29004] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1438.313400][T29004] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1438.398341][ T81] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1438.398374][ T81] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1438.398399][ T81] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1438.478186][ T81] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1438.576496][ T81] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1438.576515][ T81] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1438.989936][ T81] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1438.989953][ T81] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1439.623894][T29395] netlink: 5324 bytes leftover after parsing attributes in process `syz.2.2785'. [ 1443.386897][T29458] FAULT_INJECTION: forcing a failure. [ 1443.386897][T29458] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1443.386922][T29458] CPU: 0 UID: 0 PID: 29458 Comm: syz.2.2823 Not tainted syzkaller #0 PREEMPT(full) [ 1443.386939][T29458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1443.386949][T29458] Call Trace: [ 1443.386955][T29458] [ 1443.386961][T29458] dump_stack_lvl+0x100/0x190 [ 1443.386987][T29458] should_fail_ex.cold+0x5/0xa [ 1443.387007][T29458] _copy_to_user+0x32/0xd0 [ 1443.387030][T29458] simple_read_from_buffer+0xcb/0x170 [ 1443.387051][T29458] proc_fail_nth_read+0x1af/0x230 [ 1443.387071][T29458] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1443.387090][T29458] ? rw_verify_area+0xce/0x6d0 [ 1443.387106][T29458] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1443.387123][T29458] vfs_read+0x1e4/0xb40 [ 1443.387140][T29458] ? lock_acquire+0x1d1/0x380 [ 1443.387161][T29458] ? __fget_files+0x34/0x3d0 [ 1443.387180][T29458] ? __pfx_vfs_read+0x10/0x10 [ 1443.387195][T29458] ? find_held_lock+0x2b/0x80 [ 1443.387212][T29458] ? __fget_files+0x215/0x3d0 [ 1443.387234][T29458] ? __fget_files+0x21f/0x3d0 [ 1443.387257][T29458] ksys_read+0x12a/0x250 [ 1443.387273][T29458] ? __pfx_ksys_read+0x10/0x10 [ 1443.387295][T29458] do_syscall_64+0x121/0x770 [ 1443.387316][T29458] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1443.387332][T29458] RIP: 0033:0x7f749015e98e [ 1443.387344][T29458] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1443.387359][T29458] RSP: 002b:00007f7490ff9fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1443.387375][T29458] RAX: ffffffffffffffda RBX: 00007f7490ffa6c0 RCX: 00007f749015e98e [ 1443.387385][T29458] RDX: 000000000000000f RSI: 00007f7490ffa0a0 RDI: 0000000000000004 [ 1443.387394][T29458] RBP: 00007f7490ffa090 R08: 0000000000000000 R09: 0000000000000000 [ 1443.387403][T29458] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1443.387413][T29458] R13: 00007f7490426038 R14: 00007f7490425fa0 R15: 00007fffabde81d8 [ 1443.387433][T29458] [ 1445.083878][T29489] netlink: 5324 bytes leftover after parsing attributes in process `syz.0.2827'. [ 1447.327566][T29520] blkio.reset_stats is deprecated [ 1447.929223][T29527] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1449.065168][T29561] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(3) [ 1449.846636][T29572] netlink: 5324 bytes leftover after parsing attributes in process `syz.2.2840'. [ 1452.407087][T29613] cifs: Unknown parameter '‰ƒ´ÕéŒ)¬ Up†µÌ¢{´¼V ]7ž62']ßΨÉú!²gÉÊ®Ë7ú9½ófM¸<*y¢sEéhîé”' [ 1452.753965][T29630] FAULT_INJECTION: forcing a failure. [ 1452.753965][T29630] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1452.753994][T29630] CPU: 0 UID: 0 PID: 29630 Comm: syz.0.2847 Not tainted syzkaller #0 PREEMPT(full) [ 1452.754013][T29630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1452.754024][T29630] Call Trace: [ 1452.754030][T29630] [ 1452.754036][T29630] dump_stack_lvl+0x100/0x190 [ 1452.754063][T29630] should_fail_ex.cold+0x5/0xa [ 1452.754084][T29630] get_futex_key+0x1d0/0x14f0 [ 1452.754102][T29630] ? __pfx_get_futex_key+0x10/0x10 [ 1452.754117][T29630] ? vfs_writev+0x1d5/0xdd0 [ 1452.754134][T29630] ? rcu_is_watching+0x13/0xc0 [ 1452.754151][T29630] ? vfs_writev+0x1d5/0xdd0 [ 1452.754166][T29630] ? kfree+0x1e5/0x6d0 [ 1452.754181][T29630] ? rw_verify_area+0xce/0x6d0 [ 1452.754199][T29630] futex_wake+0xf4/0x5e0 [ 1452.754221][T29630] ? __pfx_futex_wake+0x10/0x10 [ 1452.754240][T29630] ? __pfx_vfs_writev+0x10/0x10 [ 1452.754266][T29630] do_futex+0x2b2/0x440 [ 1452.754283][T29630] ? __pfx_do_futex+0x10/0x10 [ 1452.754301][T29630] ? __fget_files+0x21f/0x3d0 [ 1452.754323][T29630] __x64_sys_futex+0x34f/0x4d0 [ 1452.754352][T29630] ? __pfx___x64_sys_futex+0x10/0x10 [ 1452.754371][T29630] ? __pfx_do_writev+0x10/0x10 [ 1452.754397][T29630] do_syscall_64+0x121/0x770 [ 1452.754419][T29630] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1452.754439][T29630] RIP: 0033:0x7fd24bf9e159 [ 1452.754454][T29630] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1452.754469][T29630] RSP: 002b:00007fd24918b0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1452.754491][T29630] RAX: ffffffffffffffda RBX: 00007fd24c226548 RCX: 00007fd24bf9e159 [ 1452.754503][T29630] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fd24c22654c [ 1452.754513][T29630] RBP: 00007fd24c226540 R08: 0000000000000001 R09: 0000000000000000 [ 1452.754523][T29630] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 1452.754534][T29630] R13: 00007fd24c2265d8 R14: 00007fffc6f1f930 R15: 00007fffc6f1fa18 [ 1452.754554][T29630] [ 1454.201333][T29656] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[23057] was attempted by "ci-qemu-gce-upstream-auto/syz-executor exec"[29656] [ 1457.871310][T29713] cifs: Unknown parameter '‰ƒ´ÕéŒ)¬ Up†µÌ¢{´¼V ]7ž62']ßΨÉú!²gÉÊ®Ë7ú9½ófM¸<*y¢sEéhîé”' [ 1458.316687][T29729] FAULT_INJECTION: forcing a failure. [ 1458.316687][T29729] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1458.316714][T29729] CPU: 0 UID: 0 PID: 29729 Comm: syz.2.2862 Not tainted syzkaller #0 PREEMPT(full) [ 1458.316734][T29729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1458.316744][T29729] Call Trace: [ 1458.316751][T29729] [ 1458.316757][T29729] dump_stack_lvl+0x100/0x190 [ 1458.316783][T29729] should_fail_ex.cold+0x5/0xa [ 1458.316804][T29729] get_futex_key+0x1d0/0x14f0 [ 1458.316822][T29729] ? __pfx_get_futex_key+0x10/0x10 [ 1458.316838][T29729] ? wakeup_preempt_fair+0x5c3/0xdc0 [ 1458.316859][T29729] futex_wait_setup+0x91/0x540 [ 1458.316885][T29729] __futex_wait+0x19f/0x300 [ 1458.316907][T29729] ? __pfx___futex_wait+0x10/0x10 [ 1458.316925][T29729] ? __pfx_try_to_wake_up+0x10/0x10 [ 1458.316947][T29729] ? futex_hash+0x311/0x400 [ 1458.316963][T29729] ? __pfx_futex_wake_mark+0x10/0x10 [ 1458.316985][T29729] ? find_held_lock+0x2b/0x80 [ 1458.317003][T29729] ? futex_wake+0x4ea/0x5e0 [ 1458.317027][T29729] futex_wait+0xe6/0x370 [ 1458.317046][T29729] ? __pfx_futex_wait+0x10/0x10 [ 1458.317076][T29729] do_futex+0x265/0x440 [ 1458.317093][T29729] ? __pfx_do_futex+0x10/0x10 [ 1458.317111][T29729] ? __fget_files+0x21f/0x3d0 [ 1458.317132][T29729] __x64_sys_futex+0x34f/0x4d0 [ 1458.317152][T29729] ? __pfx___x64_sys_futex+0x10/0x10 [ 1458.317168][T29729] ? do_getpgid+0x101/0x2e0 [ 1458.317189][T29729] ? do_getpgid+0x101/0x2e0 [ 1458.317214][T29729] do_syscall_64+0x121/0x770 [ 1458.317235][T29729] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1458.317251][T29729] RIP: 0033:0x7f749019e159 [ 1458.317265][T29729] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1458.317283][T29729] RSP: 002b:00007f748d3ac0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1458.317298][T29729] RAX: ffffffffffffffda RBX: 00007f7490426548 RCX: 00007f749019e159 [ 1458.317309][T29729] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f7490426548 [ 1458.317320][T29729] RBP: 00007f7490426540 R08: 0000000000000000 R09: 0000000000000000 [ 1458.317329][T29729] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1458.317339][T29729] R13: 00007f74904265d8 R14: 00007fffabde80f0 R15: 00007fffabde81d8 [ 1458.317360][T29729] [ 1460.153345][T29764] netlink: 5324 bytes leftover after parsing attributes in process `syz.0.2868'. [ 1461.266873][T29774] netlink: 5324 bytes leftover after parsing attributes in process `syz.3.2869'. [ 1463.880212][T29823] FAULT_INJECTION: forcing a failure. [ 1463.880212][T29823] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1463.880238][T29823] CPU: 0 UID: 0 PID: 29823 Comm: syz.2.2874 Not tainted syzkaller #0 PREEMPT(full) [ 1463.880257][T29823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1463.880268][T29823] Call Trace: [ 1463.880273][T29823] [ 1463.880280][T29823] dump_stack_lvl+0x100/0x190 [ 1463.880306][T29823] should_fail_ex.cold+0x5/0xa [ 1463.880326][T29823] get_futex_key+0x1d0/0x14f0 [ 1463.880344][T29823] ? __pfx_get_futex_key+0x10/0x10 [ 1463.880359][T29823] ? vfs_writev+0x1d5/0xdd0 [ 1463.880376][T29823] ? rcu_is_watching+0x13/0xc0 [ 1463.880394][T29823] ? vfs_writev+0x1d5/0xdd0 [ 1463.880409][T29823] ? kfree+0x1e5/0x6d0 [ 1463.880424][T29823] ? rw_verify_area+0xce/0x6d0 [ 1463.880442][T29823] futex_wake+0xf4/0x5e0 [ 1463.880466][T29823] ? __pfx_futex_wake+0x10/0x10 [ 1463.880485][T29823] ? __pfx_vfs_writev+0x10/0x10 [ 1463.880509][T29823] do_futex+0x2b2/0x440 [ 1463.880526][T29823] ? __pfx_do_futex+0x10/0x10 [ 1463.880545][T29823] ? __fget_files+0x21f/0x3d0 [ 1463.880566][T29823] __x64_sys_futex+0x34f/0x4d0 [ 1463.880586][T29823] ? __pfx___x64_sys_futex+0x10/0x10 [ 1463.880603][T29823] ? __pfx_do_writev+0x10/0x10 [ 1463.880625][T29823] do_syscall_64+0x121/0x770 [ 1463.880646][T29823] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1463.880663][T29823] RIP: 0033:0x7f749019e159 [ 1463.880676][T29823] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1463.880692][T29823] RSP: 002b:00007f748d7cf0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1463.880708][T29823] RAX: ffffffffffffffda RBX: 00007f7490426458 RCX: 00007f749019e159 [ 1463.880719][T29823] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f749042645c [ 1463.880728][T29823] RBP: 00007f7490426450 R08: 0000000000000001 R09: 0000000000000000 [ 1463.880738][T29823] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 1463.880748][T29823] R13: 00007f74904264e8 R14: 00007fffabde80f0 R15: 00007fffabde81d8 [ 1463.880767][T29823] [ 1468.555491][T29914] FAULT_INJECTION: forcing a failure. [ 1468.555491][T29914] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1468.555518][T29914] CPU: 0 UID: 0 PID: 29914 Comm: syz.3.2889 Not tainted syzkaller #0 PREEMPT(full) [ 1468.555537][T29914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1468.555547][T29914] Call Trace: [ 1468.555553][T29914] [ 1468.555560][T29914] dump_stack_lvl+0x100/0x190 [ 1468.555586][T29914] should_fail_ex.cold+0x5/0xa [ 1468.555616][T29914] get_futex_key+0x1d0/0x14f0 [ 1468.555635][T29914] ? __pfx_get_futex_key+0x10/0x10 [ 1468.555651][T29914] ? wakeup_preempt_fair+0x5c3/0xdc0 [ 1468.555673][T29914] futex_wait_setup+0x91/0x540 [ 1468.555700][T29914] __futex_wait+0x19f/0x300 [ 1468.555721][T29914] ? __pfx___futex_wait+0x10/0x10 [ 1468.555740][T29914] ? __pfx_try_to_wake_up+0x10/0x10 [ 1468.555764][T29914] ? futex_hash+0x311/0x400 [ 1468.555781][T29914] ? __pfx_futex_wake_mark+0x10/0x10 [ 1468.555803][T29914] ? find_held_lock+0x2b/0x80 [ 1468.555821][T29914] ? futex_wake+0x4ea/0x5e0 [ 1468.555845][T29914] futex_wait+0xe6/0x370 [ 1468.555864][T29914] ? __pfx_futex_wait+0x10/0x10 [ 1468.555894][T29914] do_futex+0x265/0x440 [ 1468.555911][T29914] ? __pfx_do_futex+0x10/0x10 [ 1468.555930][T29914] ? __fget_files+0x21f/0x3d0 [ 1468.555951][T29914] __x64_sys_futex+0x34f/0x4d0 [ 1468.555970][T29914] ? __pfx___x64_sys_futex+0x10/0x10 [ 1468.555988][T29914] ? __pfx_do_writev+0x10/0x10 [ 1468.556010][T29914] do_syscall_64+0x121/0x770 [ 1468.556031][T29914] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1468.556047][T29914] RIP: 0033:0x7f968439e159 [ 1468.556061][T29914] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1468.556077][T29914] RSP: 002b:00007f96852240e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1468.556092][T29914] RAX: ffffffffffffffda RBX: 00007f9684626548 RCX: 00007f968439e159 [ 1468.556102][T29914] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f9684626548 [ 1468.556112][T29914] RBP: 00007f9684626540 R08: 0000000000000000 R09: 0000000000000000 [ 1468.556122][T29914] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1468.556131][T29914] R13: 00007f96846265d8 R14: 00007ffcda066c90 R15: 00007ffcda066d78 [ 1468.556152][T29914] [ 1473.452408][T30001] FAULT_INJECTION: forcing a failure. [ 1473.452408][T30001] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1473.452437][T30001] CPU: 0 UID: 0 PID: 30001 Comm: syz.2.2901 Not tainted syzkaller #0 PREEMPT(full) [ 1473.452463][T30001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1473.452477][T30001] Call Trace: [ 1473.452483][T30001] [ 1473.452491][T30001] dump_stack_lvl+0x100/0x190 [ 1473.452519][T30001] should_fail_ex.cold+0x5/0xa [ 1473.452542][T30001] get_futex_key+0x1d0/0x14f0 [ 1473.452562][T30001] ? __pfx_get_futex_key+0x10/0x10 [ 1473.452577][T30001] ? vfs_writev+0x1d5/0xdd0 [ 1473.452594][T30001] ? rcu_is_watching+0x13/0xc0 [ 1473.452611][T30001] ? vfs_writev+0x1d5/0xdd0 [ 1473.452626][T30001] ? kfree+0x1e5/0x6d0 [ 1473.452641][T30001] ? rw_verify_area+0xce/0x6d0 [ 1473.452659][T30001] futex_wake+0xf4/0x5e0 [ 1473.452680][T30001] ? __pfx_futex_wake+0x10/0x10 [ 1473.452699][T30001] ? __pfx_vfs_writev+0x10/0x10 [ 1473.452723][T30001] do_futex+0x2b2/0x440 [ 1473.452740][T30001] ? __pfx_do_futex+0x10/0x10 [ 1473.452761][T30001] ? __fget_files+0x21f/0x3d0 [ 1473.452783][T30001] __x64_sys_futex+0x34f/0x4d0 [ 1473.452802][T30001] ? __pfx___x64_sys_futex+0x10/0x10 [ 1473.452820][T30001] ? __pfx_do_writev+0x10/0x10 [ 1473.452842][T30001] do_syscall_64+0x121/0x770 [ 1473.452863][T30001] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1473.452886][T30001] RIP: 0033:0x7f749019e159 [ 1473.452900][T30001] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1473.452915][T30001] RSP: 002b:00007f748d3ac0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1473.452933][T30001] RAX: ffffffffffffffda RBX: 00007f7490426548 RCX: 00007f749019e159 [ 1473.452944][T30001] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f749042654c [ 1473.452954][T30001] RBP: 00007f7490426540 R08: 0000000000000001 R09: 0000000000000000 [ 1473.452964][T30001] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 1473.452975][T30001] R13: 00007f74904265d8 R14: 00007fffabde80f0 R15: 00007fffabde81d8 [ 1473.452995][T30001] [ 1479.242451][T30101] kafs: addr_prefs: Invalid Command [ 1483.551402][T30161] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2923'. [ 1484.631052][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.631094][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 1489.977170][T30277] FAULT_INJECTION: forcing a failure. [ 1489.977170][T30277] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1489.977196][T30277] CPU: 0 UID: 0 PID: 30277 Comm: syz.1.2941 Not tainted syzkaller #0 PREEMPT(full) [ 1489.977213][T30277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1489.977223][T30277] Call Trace: [ 1489.977228][T30277] [ 1489.977234][T30277] dump_stack_lvl+0x100/0x190 [ 1489.977259][T30277] should_fail_ex.cold+0x5/0xa [ 1489.977278][T30277] _copy_to_user+0x32/0xd0 [ 1489.977302][T30277] simple_read_from_buffer+0xcb/0x170 [ 1489.977323][T30277] proc_fail_nth_read+0x1af/0x230 [ 1489.977344][T30277] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1489.977363][T30277] ? rw_verify_area+0xce/0x6d0 [ 1489.977378][T30277] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1489.977395][T30277] vfs_read+0x1e4/0xb40 [ 1489.977413][T30277] ? lock_acquire+0x1d1/0x380 [ 1489.977437][T30277] ? __fget_files+0x34/0x3d0 [ 1489.977455][T30277] ? __pfx_vfs_read+0x10/0x10 [ 1489.977470][T30277] ? find_held_lock+0x2b/0x80 [ 1489.977487][T30277] ? __fget_files+0x215/0x3d0 [ 1489.977509][T30277] ? __fget_files+0x21f/0x3d0 [ 1489.977532][T30277] ksys_read+0x12a/0x250 [ 1489.977548][T30277] ? __pfx_ksys_read+0x10/0x10 [ 1489.977571][T30277] do_syscall_64+0x121/0x770 [ 1489.977592][T30277] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1489.977607][T30277] RIP: 0033:0x7f44f1d5e98e [ 1489.977621][T30277] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1489.977635][T30277] RSP: 002b:00007f44f2c41fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1489.977650][T30277] RAX: ffffffffffffffda RBX: 00007f44f2c426c0 RCX: 00007f44f1d5e98e [ 1489.977661][T30277] RDX: 000000000000000f RSI: 00007f44f2c420a0 RDI: 0000000000000002 [ 1489.977670][T30277] RBP: 00007f44f2c42090 R08: 0000000000000000 R09: 0000000000000000 [ 1489.977679][T30277] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1489.977688][T30277] R13: 00007f44f20264e8 R14: 00007f44f2026450 R15: 00007fff67f447a8 [ 1489.977708][T30277] [ 1492.188824][T30314] netlink: 5324 bytes leftover after parsing attributes in process `syz.3.2948'. [ 1504.462729][T30513] FAULT_INJECTION: forcing a failure. [ 1504.462729][T30513] name failslab, interval 1, probability 0, space 0, times 0 [ 1504.462756][T30513] CPU: 0 UID: 0 PID: 30513 Comm: syz.2.2979 Not tainted syzkaller #0 PREEMPT(full) [ 1504.462774][T30513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1504.462784][T30513] Call Trace: [ 1504.462789][T30513] [ 1504.462796][T30513] dump_stack_lvl+0x100/0x190 [ 1504.462820][T30513] should_fail_ex.cold+0x5/0xa [ 1504.462840][T30513] should_failslab+0xc2/0x120 [ 1504.462862][T30513] __kmalloc_noprof+0xfc/0x840 [ 1504.462889][T30513] ? tomoyo_encode2+0xfb/0x3c0 [ 1504.463007][T30513] tomoyo_encode2+0xfb/0x3c0 [ 1504.463027][T30513] tomoyo_encode+0x29/0x50 [ 1504.463043][T30513] tomoyo_realpath_from_path+0x18c/0x690 [ 1504.463066][T30513] tomoyo_path_number_perm+0x23c/0x580 [ 1504.463081][T30513] ? tomoyo_path_number_perm+0x22e/0x580 [ 1504.463098][T30513] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1504.463120][T30513] ? __lock_acquire+0x5c0/0x1f40 [ 1504.463151][T30513] ? __fget_files+0x34/0x3d0 [ 1504.463170][T30513] ? find_held_lock+0x2b/0x80 [ 1504.463186][T30513] ? hook_file_ioctl_common+0x140/0x440 [ 1504.463240][T30513] ? __fget_files+0x21f/0x3d0 [ 1504.463261][T30513] security_file_ioctl+0xd3/0x230 [ 1504.463301][T30513] __x64_sys_ioctl+0xb7/0x210 [ 1504.463320][T30513] do_syscall_64+0x121/0x770 [ 1504.463340][T30513] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1504.463357][T30513] RIP: 0033:0x7f749019e159 [ 1504.463370][T30513] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1504.463384][T30513] RSP: 002b:00007f7490ffa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1504.463400][T30513] RAX: ffffffffffffffda RBX: 00007f7490425fa0 RCX: 00007f749019e159 [ 1504.463410][T30513] RDX: 0000000000000003 RSI: 00000000400454d9 RDI: 04000000000000c8 [ 1504.463419][T30513] RBP: 00007f7490ffa090 R08: 0000000000000000 R09: 0000000000000000 [ 1504.463428][T30513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1504.463437][T30513] R13: 00007f7490426038 R14: 00007f7490425fa0 R15: 00007fffabde81d8 [ 1504.463457][T30513] [ 1504.463472][T30513] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1505.113981][T30533] cifs: Unknown parameter '‰ƒ´ÕéŒ)¬ Up†µÌ¢{´¼V ]7ž62']ßΨÉú!²gÉÊ®Ë7ú9½ófM¸<*y¢sEéhîé”' [ 1514.265270][T30682] FAULT_INJECTION: forcing a failure. [ 1514.265270][T30682] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1514.265316][T30682] CPU: 0 UID: 0 PID: 30682 Comm: syz.0.3000 Not tainted syzkaller #0 PREEMPT(full) [ 1514.265338][T30682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1514.265349][T30682] Call Trace: [ 1514.265355][T30682] [ 1514.265361][T30682] dump_stack_lvl+0x100/0x190 [ 1514.265388][T30682] should_fail_ex.cold+0x5/0xa [ 1514.265409][T30682] get_futex_key+0x1d0/0x14f0 [ 1514.265428][T30682] ? __pfx_get_futex_key+0x10/0x10 [ 1514.265443][T30682] ? vfs_writev+0x1d5/0xdd0 [ 1514.265459][T30682] ? rcu_is_watching+0x13/0xc0 [ 1514.265476][T30682] ? vfs_writev+0x1d5/0xdd0 [ 1514.265491][T30682] ? kfree+0x1e5/0x6d0 [ 1514.265506][T30682] ? rw_verify_area+0xce/0x6d0 [ 1514.265524][T30682] futex_wake+0xf4/0x5e0 [ 1514.265545][T30682] ? __pfx_futex_wake+0x10/0x10 [ 1514.265564][T30682] ? __pfx_vfs_writev+0x10/0x10 [ 1514.265587][T30682] do_futex+0x2b2/0x440 [ 1514.265605][T30682] ? __pfx_do_futex+0x10/0x10 [ 1514.265623][T30682] ? __fget_files+0x21f/0x3d0 [ 1514.265644][T30682] __x64_sys_futex+0x34f/0x4d0 [ 1514.265663][T30682] ? __pfx___x64_sys_futex+0x10/0x10 [ 1514.265681][T30682] ? __pfx_do_writev+0x10/0x10 [ 1514.265702][T30682] do_syscall_64+0x121/0x770 [ 1514.265723][T30682] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1514.265740][T30682] RIP: 0033:0x7fd24bf9e159 [ 1514.265754][T30682] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1514.265768][T30682] RSP: 002b:00007fd24918b0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1514.265784][T30682] RAX: ffffffffffffffda RBX: 00007fd24c226548 RCX: 00007fd24bf9e159 [ 1514.265795][T30682] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fd24c22654c [ 1514.265805][T30682] RBP: 00007fd24c226540 R08: 0000000000000001 R09: 0000000000000000 [ 1514.265814][T30682] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 1514.265824][T30682] R13: 00007fd24c2265d8 R14: 00007fffc6f1f930 R15: 00007fffc6f1fa18 [ 1514.265857][T30682] [ 1514.776724][T30687] netlink: 5324 bytes leftover after parsing attributes in process `syz.2.3001'. [ 1516.014245][T30703] netlink: 5324 bytes leftover after parsing attributes in process `syz.1.3002'. [ 1517.427580][ T52] Bluetooth: hci4: command 0x0406 tx timeout [ 1519.857220][T30757] sd 0:0:1:0: PR command failed: 1026 [ 1519.857259][T30757] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1519.857331][T30757] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1520.260090][T30776] netlink: 5324 bytes leftover after parsing attributes in process `syz.1.3011'. [ 1520.538412][T30775] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1520.538522][T30775] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1520.538613][T30775] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1520.538653][T30775] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1520.580760][T30775] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1520.581078][T30775] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1520.594413][T30775] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1522.547641][ T52] Bluetooth: hci4: command 0x0406 tx timeout [ 1522.547670][ T52] Bluetooth: hci3: command 0x0406 tx timeout [ 1522.547689][ T52] Bluetooth: hci2: command 0x0406 tx timeout [ 1522.627509][T27836] Bluetooth: hci0: command 0x0c1a tx timeout [ 1524.627735][T27836] Bluetooth: hci4: command 0x0406 tx timeout [ 1524.707692][T27836] Bluetooth: hci0: command 0x0c1a tx timeout [ 1525.386636][T30855] raw_sendmsg: syz.1.3024 forgot to set AF_INET. Fix it! [ 1525.452314][T30855] xs_local_setup_socket: unhandled error (13) connecting to /var/run/rpcbind.sock [ 1525.512492][T30855] NFSD: Failed to start, no listeners configured. [ 1526.292200][T30887] FAULT_INJECTION: forcing a failure. [ 1526.292200][T30887] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1526.292276][T30887] CPU: 0 UID: 0 PID: 30887 Comm: syz.0.3026 Not tainted syzkaller #0 PREEMPT(full) [ 1526.292296][T30887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1526.292307][T30887] Call Trace: [ 1526.292313][T30887] [ 1526.292319][T30887] dump_stack_lvl+0x100/0x190 [ 1526.292346][T30887] should_fail_ex.cold+0x5/0xa [ 1526.292368][T30887] get_futex_key+0x1d0/0x14f0 [ 1526.292386][T30887] ? __pfx_get_futex_key+0x10/0x10 [ 1526.292401][T30887] ? vfs_writev+0x1d5/0xdd0 [ 1526.292418][T30887] ? rcu_is_watching+0x13/0xc0 [ 1526.292435][T30887] ? vfs_writev+0x1d5/0xdd0 [ 1526.292450][T30887] ? kfree+0x1e5/0x6d0 [ 1526.292465][T30887] ? rw_verify_area+0xce/0x6d0 [ 1526.292483][T30887] futex_wake+0xf4/0x5e0 [ 1526.292505][T30887] ? __pfx_futex_wake+0x10/0x10 [ 1526.292524][T30887] ? __pfx_vfs_writev+0x10/0x10 [ 1526.292547][T30887] do_futex+0x2b2/0x440 [ 1526.292567][T30887] ? __pfx_do_futex+0x10/0x10 [ 1526.292585][T30887] ? __fget_files+0x21f/0x3d0 [ 1526.292606][T30887] __x64_sys_futex+0x34f/0x4d0 [ 1526.292625][T30887] ? __pfx___x64_sys_futex+0x10/0x10 [ 1526.292642][T30887] ? __pfx_do_writev+0x10/0x10 [ 1526.292664][T30887] do_syscall_64+0x121/0x770 [ 1526.292686][T30887] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1526.292702][T30887] RIP: 0033:0x7fd24bf9e159 [ 1526.292716][T30887] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1526.292737][T30887] RSP: 002b:00007fd24918b0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1526.292753][T30887] RAX: ffffffffffffffda RBX: 00007fd24c226548 RCX: 00007fd24bf9e159 [ 1526.292765][T30887] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fd24c22654c [ 1526.292775][T30887] RBP: 00007fd24c226540 R08: 0000000000000001 R09: 0000000000000000 [ 1526.292786][T30887] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 1526.292796][T30887] R13: 00007fd24c2265d8 R14: 00007fffc6f1f930 R15: 00007fffc6f1fa18 [ 1526.292817][T30887] [ 1526.789699][T27836] Bluetooth: hci0: command 0x0c1a tx timeout [ 1529.181332][T30930] FAULT_INJECTION: forcing a failure. [ 1529.181332][T30930] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1529.181376][T30930] CPU: 0 UID: 0 PID: 30930 Comm: syz.2.3032 Not tainted syzkaller #0 PREEMPT(full) [ 1529.181394][T30930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1529.181404][T30930] Call Trace: [ 1529.181410][T30930] [ 1529.181416][T30930] dump_stack_lvl+0x100/0x190 [ 1529.181441][T30930] should_fail_ex.cold+0x5/0xa [ 1529.181461][T30930] _copy_to_user+0x32/0xd0 [ 1529.181484][T30930] simple_read_from_buffer+0xcb/0x170 [ 1529.181505][T30930] proc_fail_nth_read+0x1af/0x230 [ 1529.181525][T30930] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1529.181557][T30930] ? rw_verify_area+0xce/0x6d0 [ 1529.181580][T30930] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1529.181597][T30930] vfs_read+0x1e4/0xb40 [ 1529.181614][T30930] ? lock_acquire+0x1d1/0x380 [ 1529.181635][T30930] ? __fget_files+0x34/0x3d0 [ 1529.181653][T30930] ? __pfx_vfs_read+0x10/0x10 [ 1529.181669][T30930] ? find_held_lock+0x2b/0x80 [ 1529.181686][T30930] ? __fget_files+0x215/0x3d0 [ 1529.181707][T30930] ? __fget_files+0x21f/0x3d0 [ 1529.181730][T30930] ksys_read+0x12a/0x250 [ 1529.181747][T30930] ? __pfx_ksys_read+0x10/0x10 [ 1529.181769][T30930] do_syscall_64+0x121/0x770 [ 1529.181790][T30930] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1529.181806][T30930] RIP: 0033:0x7f749015e98e [ 1529.181819][T30930] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1529.181833][T30930] RSP: 002b:00007f7490ff9fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1529.181848][T30930] RAX: ffffffffffffffda RBX: 00007f7490ffa6c0 RCX: 00007f749015e98e [ 1529.181859][T30930] RDX: 000000000000000f RSI: 00007f7490ffa0a0 RDI: 0000000000000005 [ 1529.181868][T30930] RBP: 00007f7490ffa090 R08: 0000000000000000 R09: 0000000000000000 [ 1529.181877][T30930] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1529.181886][T30930] R13: 00007f7490426038 R14: 00007f7490425fa0 R15: 00007fffabde81d8 [ 1529.181906][T30930] [ 1529.969355][T30956] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(1986356271.1684960047.1684630831), cmd(2) [ 1531.872871][T30988] netlink: 5324 bytes leftover after parsing attributes in process `syz.2.3040'. [ 1532.013265][T30992] FAULT_INJECTION: forcing a failure. [ 1532.013265][T30992] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1532.013293][T30992] CPU: 0 UID: 0 PID: 30992 Comm: syz.1.3039 Not tainted syzkaller #0 PREEMPT(full) [ 1532.013312][T30992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1532.013322][T30992] Call Trace: [ 1532.013328][T30992] [ 1532.013335][T30992] dump_stack_lvl+0x100/0x190 [ 1532.013361][T30992] should_fail_ex.cold+0x5/0xa [ 1532.013383][T30992] get_futex_key+0x1d0/0x14f0 [ 1532.013401][T30992] ? __pfx_get_futex_key+0x10/0x10 [ 1532.013416][T30992] ? vfs_writev+0x1d5/0xdd0 [ 1532.013433][T30992] ? rcu_is_watching+0x13/0xc0 [ 1532.013450][T30992] ? vfs_writev+0x1d5/0xdd0 [ 1532.013466][T30992] ? kfree+0x1e5/0x6d0 [ 1532.013481][T30992] ? rw_verify_area+0xce/0x6d0 [ 1532.013499][T30992] futex_wake+0xf4/0x5e0 [ 1532.013520][T30992] ? __pfx_futex_wake+0x10/0x10 [ 1532.013540][T30992] ? __pfx_vfs_writev+0x10/0x10 [ 1532.013563][T30992] do_futex+0x2b2/0x440 [ 1532.013583][T30992] ? __pfx_do_futex+0x10/0x10 [ 1532.013602][T30992] ? __fget_files+0x21f/0x3d0 [ 1532.013624][T30992] __x64_sys_futex+0x34f/0x4d0 [ 1532.013644][T30992] ? __pfx___x64_sys_futex+0x10/0x10 [ 1532.013663][T30992] ? __pfx_do_writev+0x10/0x10 [ 1532.013685][T30992] do_syscall_64+0x121/0x770 [ 1532.013707][T30992] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1532.013724][T30992] RIP: 0033:0x7f44f1d9e159 [ 1532.013738][T30992] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1532.013754][T30992] RSP: 002b:00007f44f2c210e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1532.013777][T30992] RAX: ffffffffffffffda RBX: 00007f44f2026548 RCX: 00007f44f1d9e159 [ 1532.013788][T30992] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f44f202654c [ 1532.013798][T30992] RBP: 00007f44f2026540 R08: 0000000000000001 R09: 0000000000000000 [ 1532.013808][T30992] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 1532.013818][T30992] R13: 00007f44f20265d8 R14: 00007fff67f446c0 R15: 00007fff67f447a8 [ 1532.013839][T30992] [ 1534.357173][T31025] FAULT_INJECTION: forcing a failure. [ 1534.357173][T31025] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1534.357202][T31025] CPU: 0 UID: 0 PID: 31025 Comm: syz.1.3043 Not tainted syzkaller #0 PREEMPT(full) [ 1534.357221][T31025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1534.357232][T31025] Call Trace: [ 1534.357238][T31025] [ 1534.357245][T31025] dump_stack_lvl+0x100/0x190 [ 1534.357271][T31025] should_fail_ex.cold+0x5/0xa [ 1534.357293][T31025] get_futex_key+0x1d0/0x14f0 [ 1534.357311][T31025] ? __pfx_get_futex_key+0x10/0x10 [ 1534.357327][T31025] ? vfs_writev+0x1d5/0xdd0 [ 1534.357343][T31025] ? rcu_is_watching+0x13/0xc0 [ 1534.357360][T31025] ? vfs_writev+0x1d5/0xdd0 [ 1534.357375][T31025] ? kfree+0x1e5/0x6d0 [ 1534.357390][T31025] ? rw_verify_area+0xce/0x6d0 [ 1534.357411][T31025] futex_wake+0xf4/0x5e0 [ 1534.357432][T31025] ? __pfx_futex_wake+0x10/0x10 [ 1534.357451][T31025] ? __pfx_vfs_writev+0x10/0x10 [ 1534.357474][T31025] do_futex+0x2b2/0x440 [ 1534.357492][T31025] ? __pfx_do_futex+0x10/0x10 [ 1534.357510][T31025] ? __fget_files+0x21f/0x3d0 [ 1534.357531][T31025] __x64_sys_futex+0x34f/0x4d0 [ 1534.357550][T31025] ? __pfx___x64_sys_futex+0x10/0x10 [ 1534.357568][T31025] ? __pfx_do_writev+0x10/0x10 [ 1534.357590][T31025] do_syscall_64+0x121/0x770 [ 1534.357611][T31025] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1534.357634][T31025] RIP: 0033:0x7f44f1d9e159 [ 1534.357648][T31025] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1534.357665][T31025] RSP: 002b:00007f44f2c210e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1534.357681][T31025] RAX: ffffffffffffffda RBX: 00007f44f2026548 RCX: 00007f44f1d9e159 [ 1534.357693][T31025] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f44f202654c [ 1534.357702][T31025] RBP: 00007f44f2026540 R08: 0000000000000001 R09: 0000000000000000 [ 1534.357712][T31025] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 1534.357723][T31025] R13: 00007f44f20265d8 R14: 00007fff67f446c0 R15: 00007fff67f447a8 [ 1534.357743][T31025] [ 1536.287664][T31059] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(1986356271.1684960047.1684630831), cmd(2) [ 1538.424488][T31091] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(1986356271.1684960047.1684630831), cmd(2) [ 1538.639705][T31099] FAULT_INJECTION: forcing a failure. [ 1538.639705][T31099] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1538.639733][T31099] CPU: 0 UID: 0 PID: 31099 Comm: syz.2.3052 Not tainted syzkaller #0 PREEMPT(full) [ 1538.639752][T31099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1538.639762][T31099] Call Trace: [ 1538.639768][T31099] [ 1538.639775][T31099] dump_stack_lvl+0x100/0x190 [ 1538.639801][T31099] should_fail_ex.cold+0x5/0xa [ 1538.639822][T31099] get_futex_key+0x1d0/0x14f0 [ 1538.639841][T31099] ? __pfx_get_futex_key+0x10/0x10 [ 1538.639856][T31099] ? vfs_writev+0x1d5/0xdd0 [ 1538.639880][T31099] ? rcu_is_watching+0x13/0xc0 [ 1538.639898][T31099] ? vfs_writev+0x1d5/0xdd0 [ 1538.639913][T31099] ? kfree+0x1e5/0x6d0 [ 1538.639930][T31099] ? rw_verify_area+0xce/0x6d0 [ 1538.639948][T31099] futex_wake+0xf4/0x5e0 [ 1538.639970][T31099] ? __pfx_futex_wake+0x10/0x10 [ 1538.639997][T31099] ? __pfx_vfs_writev+0x10/0x10 [ 1538.640022][T31099] do_futex+0x2b2/0x440 [ 1538.640040][T31099] ? __pfx_do_futex+0x10/0x10 [ 1538.640058][T31099] ? __fget_files+0x21f/0x3d0 [ 1538.640082][T31099] __x64_sys_futex+0x34f/0x4d0 [ 1538.640102][T31099] ? __pfx___x64_sys_futex+0x10/0x10 [ 1538.640121][T31099] ? __pfx_do_writev+0x10/0x10 [ 1538.640143][T31099] do_syscall_64+0x121/0x770 [ 1538.640164][T31099] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1538.640181][T31099] RIP: 0033:0x7f749019e159 [ 1538.640195][T31099] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1538.640210][T31099] RSP: 002b:00007f748d3ac0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1538.640226][T31099] RAX: ffffffffffffffda RBX: 00007f7490426548 RCX: 00007f749019e159 [ 1538.640243][T31099] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f749042654c [ 1538.640253][T31099] RBP: 00007f7490426540 R08: 0000000000000001 R09: 0000000000000000 [ 1538.640262][T31099] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 1538.640272][T31099] R13: 00007f74904265d8 R14: 00007fffabde80f0 R15: 00007fffabde81d8 [ 1538.640291][T31099] [ 1546.073161][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.073203][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 1551.852646][T31302] usb usb37: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1551.852768][T31302] vhci_hcd vhci_hcd.2: invalid port number 0 [ 1558.002477][T31402] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(1901.0.2191068454), cmd(2) [ 1561.125078][T31454] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(1986356271.1684960047.1684630831), cmd(2) [ 1562.544743][T31485] FAULT_INJECTION: forcing a failure. [ 1562.544743][T31485] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1562.544774][T31485] CPU: 0 UID: 0 PID: 31485 Comm: syz.1.3102 Not tainted syzkaller #0 PREEMPT(full) [ 1562.544793][T31485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1562.544803][T31485] Call Trace: [ 1562.544809][T31485] [ 1562.544816][T31485] dump_stack_lvl+0x100/0x190 [ 1562.544841][T31485] should_fail_ex.cold+0x5/0xa [ 1562.544863][T31485] get_futex_key+0x1d0/0x14f0 [ 1562.544881][T31485] ? __pfx_get_futex_key+0x10/0x10 [ 1562.544897][T31485] ? vfs_writev+0x1d5/0xdd0 [ 1562.544913][T31485] ? rcu_is_watching+0x13/0xc0 [ 1562.544930][T31485] ? vfs_writev+0x1d5/0xdd0 [ 1562.544946][T31485] ? kfree+0x1e5/0x6d0 [ 1562.544962][T31485] ? rw_verify_area+0xce/0x6d0 [ 1562.544980][T31485] futex_wake+0xf4/0x5e0 [ 1562.545001][T31485] ? __pfx_futex_wake+0x10/0x10 [ 1562.545021][T31485] ? __pfx_vfs_writev+0x10/0x10 [ 1562.545044][T31485] do_futex+0x2b2/0x440 [ 1562.545061][T31485] ? __pfx_do_futex+0x10/0x10 [ 1562.545079][T31485] ? __fget_files+0x21f/0x3d0 [ 1562.545100][T31485] __x64_sys_futex+0x34f/0x4d0 [ 1562.545119][T31485] ? __pfx___x64_sys_futex+0x10/0x10 [ 1562.545137][T31485] ? __pfx_do_writev+0x10/0x10 [ 1562.545158][T31485] do_syscall_64+0x121/0x770 [ 1562.545181][T31485] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1562.545197][T31485] RIP: 0033:0x7f44f1d9e159 [ 1562.545211][T31485] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1562.545227][T31485] RSP: 002b:00007f44f2c210e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1562.545243][T31485] RAX: ffffffffffffffda RBX: 00007f44f2026548 RCX: 00007f44f1d9e159 [ 1562.545254][T31485] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f44f202654c [ 1562.545264][T31485] RBP: 00007f44f2026540 R08: 0000000000000001 R09: 0000000000000000 [ 1562.545274][T31485] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 1562.545283][T31485] R13: 00007f44f20265d8 R14: 00007fff67f446c0 R15: 00007fff67f447a8 [ 1562.545303][T31485] [ 1563.030290][T31488] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(524065.0.2176475862), cmd(2) [ 1566.451039][T31547] FAULT_INJECTION: forcing a failure. [ 1566.451039][T31547] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1566.451064][T31547] CPU: 0 UID: 0 PID: 31547 Comm: syz.3.3110 Not tainted syzkaller #0 PREEMPT(full) [ 1566.451081][T31547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1566.451091][T31547] Call Trace: [ 1566.451096][T31547] [ 1566.451102][T31547] dump_stack_lvl+0x100/0x190 [ 1566.451137][T31547] should_fail_ex.cold+0x5/0xa [ 1566.451157][T31547] _copy_to_user+0x32/0xd0 [ 1566.451180][T31547] simple_read_from_buffer+0xcb/0x170 [ 1566.451201][T31547] proc_fail_nth_read+0x1af/0x230 [ 1566.451221][T31547] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1566.451240][T31547] ? rw_verify_area+0xce/0x6d0 [ 1566.451256][T31547] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1566.451273][T31547] vfs_read+0x1e4/0xb40 [ 1566.451290][T31547] ? lock_acquire+0x1d1/0x380 [ 1566.451311][T31547] ? __fget_files+0x34/0x3d0 [ 1566.451329][T31547] ? __pfx_vfs_read+0x10/0x10 [ 1566.451344][T31547] ? find_held_lock+0x2b/0x80 [ 1566.451361][T31547] ? __fget_files+0x215/0x3d0 [ 1566.451383][T31547] ? __fget_files+0x21f/0x3d0 [ 1566.451406][T31547] ksys_read+0x12a/0x250 [ 1566.451422][T31547] ? __pfx_ksys_read+0x10/0x10 [ 1566.451445][T31547] do_syscall_64+0x121/0x770 [ 1566.451465][T31547] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1566.451481][T31547] RIP: 0033:0x7f968435e98e [ 1566.451494][T31547] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1566.451509][T31547] RSP: 002b:00007f9685244fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1566.451524][T31547] RAX: ffffffffffffffda RBX: 00007f96852456c0 RCX: 00007f968435e98e [ 1566.451535][T31547] RDX: 000000000000000f RSI: 00007f96852450a0 RDI: 000000000000000a [ 1566.451544][T31547] RBP: 00007f9685245090 R08: 0000000000000000 R09: 0000000000000000 [ 1566.451553][T31547] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1566.451562][T31547] R13: 00007f96846264e8 R14: 00007f9684626450 R15: 00007ffcda066d78 [ 1566.451582][T31547] [ 1568.502487][T31583] cifs: Unknown parameter '‰ƒ´ÕéŒ)¬ Up†µÌ¢{´¼V ]7ž62']ßΨÉú!²gÉÊ®Ë7ú9½ófM¸<*y¢sEéhîé”' [ 1571.920023][T31624] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3124'. [ 1574.198636][T31678] cifs: Unknown parameter '‰ƒ´ÕéŒ)¬ Up†µÌ¢{´¼V ]7ž62']ßΨÉú!²gÉÊ®Ë7ú9½ófM¸<*y¢sEéhîé”' [ 1578.016242][T22045] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1578.179856][T22045] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1578.385578][T22045] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1578.553455][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1578.565882][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1578.574562][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1578.583256][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1578.583985][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1578.972793][T22045] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1580.064492][T22045] bridge_slave_1: left allmulticast mode [ 1580.064514][T22045] bridge_slave_1: left promiscuous mode [ 1580.064660][T22045] bridge0: port 2(bridge_slave_1) entered disabled state [ 1580.096595][T22045] bridge_slave_0: left allmulticast mode [ 1580.096615][T22045] bridge_slave_0: left promiscuous mode [ 1580.096752][T22045] bridge0: port 1(bridge_slave_0) entered disabled state [ 1580.404559][T22045] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1580.422603][T22045] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1580.425207][T22045] bond0 (unregistering): Released all slaves [ 1580.629060][ T52] Bluetooth: hci0: command tx timeout [ 1581.082030][T22045] hsr_slave_0: left promiscuous mode [ 1581.082453][T22045] hsr_slave_1: left promiscuous mode [ 1581.082948][T22045] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1581.082963][T22045] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1581.085163][T22045] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1581.085178][T22045] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1581.156520][T22045] veth1_macvtap: left promiscuous mode [ 1581.156550][T22045] veth0_macvtap: left promiscuous mode [ 1581.156613][T22045] veth1_vlan: left promiscuous mode [ 1581.156655][T22045] veth0_vlan: left promiscuous mode [ 1581.282638][T31788] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3141'. [ 1581.802059][T22045] team0 (unregistering): Port device team_slave_1 removed [ 1581.828227][T22045] team0 (unregistering): Port device team_slave_0 removed [ 1582.031020][ T5277] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1582.707678][T27836] Bluetooth: hci0: command tx timeout [ 1583.089708][T31740] bridge0: port 1(bridge_slave_0) entered blocking state [ 1583.094282][T31740] bridge0: port 1(bridge_slave_0) entered disabled state [ 1583.094378][T31740] bridge_slave_0: entered allmulticast mode [ 1583.123827][T31740] bridge_slave_0: entered promiscuous mode [ 1583.148411][T31740] bridge0: port 2(bridge_slave_1) entered blocking state [ 1583.148478][T31740] bridge0: port 2(bridge_slave_1) entered disabled state [ 1583.148559][T31740] bridge_slave_1: entered allmulticast mode [ 1583.154557][T31740] bridge_slave_1: entered promiscuous mode [ 1583.306388][T31740] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1583.431338][T31740] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1583.756282][T31740] team0: Port device team_slave_0 added [ 1583.776647][T31740] team0: Port device team_slave_1 added [ 1584.114874][ T5277] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1584.388003][T31740] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1584.388018][T31740] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1584.388036][T31740] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1584.391232][T31740] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1584.391245][T31740] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1584.391264][T31740] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1584.788232][T27836] Bluetooth: hci0: command tx timeout [ 1585.014232][T31740] hsr_slave_0: entered promiscuous mode [ 1585.015916][T31740] hsr_slave_1: entered promiscuous mode [ 1585.016420][T31740] debugfs: 'hsr0' already exists in 'hsr' [ 1585.016436][T31740] Cannot create hsr debugfs directory [ 1586.867838][T27836] Bluetooth: hci0: command tx timeout [ 1587.414149][T31740] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1587.427155][T31740] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1587.544767][T31740] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1587.560555][T31740] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1587.880603][T31740] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1587.896438][T31740] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1588.022200][T31901] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(1901.0.2191068454), cmd(2) [ 1588.236309][T31740] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1588.251027][T31740] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1589.559026][T31740] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1589.630838][T31740] 8021q: adding VLAN 0 to HW filter on device team0 [ 1589.655424][ T1012] bridge0: port 1(bridge_slave_0) entered blocking state [ 1589.655493][ T1012] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1589.710581][ T81] bridge0: port 2(bridge_slave_1) entered blocking state [ 1589.710662][ T81] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1592.243185][T31740] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1592.500619][T31740] veth0_vlan: entered promiscuous mode [ 1593.555602][T31740] veth1_vlan: entered promiscuous mode [ 1594.165753][T31740] veth0_macvtap: entered promiscuous mode [ 1594.266944][T31740] veth1_macvtap: entered promiscuous mode [ 1594.438976][T31740] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1594.540770][T31740] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1594.639239][T32026] cifs: Unknown parameter '‰ƒ´ÕéŒ)¬ Up†µÌ¢{´¼V ]7ž62']ßΨÉú!²gÉÊ®Ë7ú9½ófM¸<*y¢sEéhîé”' [ 1594.817580][T11991] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1594.818627][T11991] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1594.818658][T11991] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1594.818683][T11991] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1595.302702][T32038] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(1901.0.2191068454), cmd(2) [ 1595.885753][T22045] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1595.885770][T22045] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1596.143465][T11991] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1596.143483][T11991] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1597.201841][T32065] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1597.206886][T32065] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1597.207083][T32065] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1597.207219][T32065] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1597.207281][T32065] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1597.246229][T32065] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1598.101902][T32075] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3165'. [ 1598.947586][T27836] Bluetooth: hci2: command 0x0406 tx timeout [ 1599.267917][T27836] Bluetooth: hci0: command 0x0c1a tx timeout [ 1599.267958][T27836] Bluetooth: hci4: command 0x0406 tx timeout [ 1599.267977][T27836] Bluetooth: hci3: command 0x0406 tx timeout [ 1601.227151][T32133] cifs: Unknown parameter '‰ƒ´ÕéŒ)¬ Up†µÌ¢{´¼V ]7ž62']ßΨÉú!²gÉÊ®Ë7ú9½ófM¸<*y¢sEéhîé”' [ 1601.347534][ T52] Bluetooth: hci0: command 0x0c1a tx timeout [ 1601.704051][T32136] FAULT_INJECTION: forcing a failure. [ 1601.704051][T32136] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1601.704083][T32136] CPU: 0 UID: 0 PID: 32136 Comm: syz.2.3169 Not tainted syzkaller #0 PREEMPT(full) [ 1601.704103][T32136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1601.704114][T32136] Call Trace: [ 1601.704120][T32136] [ 1601.704127][T32136] dump_stack_lvl+0x100/0x190 [ 1601.704157][T32136] should_fail_ex.cold+0x5/0xa [ 1601.704179][T32136] get_futex_key+0x1d0/0x14f0 [ 1601.704199][T32136] ? __pfx_get_futex_key+0x10/0x10 [ 1601.704214][T32136] ? vfs_writev+0x1d5/0xdd0 [ 1601.704231][T32136] ? rcu_is_watching+0x13/0xc0 [ 1601.704248][T32136] ? vfs_writev+0x1d5/0xdd0 [ 1601.704263][T32136] ? kfree+0x1e5/0x6d0 [ 1601.704279][T32136] ? rw_verify_area+0xce/0x6d0 [ 1601.704297][T32136] futex_wake+0xf4/0x5e0 [ 1601.704318][T32136] ? __pfx_futex_wake+0x10/0x10 [ 1601.704337][T32136] ? __pfx_vfs_writev+0x10/0x10 [ 1601.704361][T32136] do_futex+0x2b2/0x440 [ 1601.704384][T32136] ? __pfx_do_futex+0x10/0x10 [ 1601.704410][T32136] ? __fget_files+0x21f/0x3d0 [ 1601.704433][T32136] __x64_sys_futex+0x34f/0x4d0 [ 1601.704453][T32136] ? __pfx___x64_sys_futex+0x10/0x10 [ 1601.704471][T32136] ? __pfx_do_writev+0x10/0x10 [ 1601.704493][T32136] do_syscall_64+0x121/0x770 [ 1601.704515][T32136] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1601.704531][T32136] RIP: 0033:0x7f4c6959e159 [ 1601.704546][T32136] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1601.704561][T32136] RSP: 002b:00007f4c6a3ff0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1601.704578][T32136] RAX: ffffffffffffffda RBX: 00007f4c69826458 RCX: 00007f4c6959e159 [ 1601.704588][T32136] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f4c6982645c [ 1601.704598][T32136] RBP: 00007f4c69826450 R08: 0000000000000001 R09: 0000000000000000 [ 1601.704608][T32136] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 1601.704618][T32136] R13: 00007f4c698264e8 R14: 00007ffdceaf4250 R15: 00007ffdceaf4338 [ 1601.704638][T32136] [ 1603.428135][ T52] Bluetooth: hci0: command 0x0c1a tx timeout [ 1605.616539][T32200] cifs: Unknown parameter '‰ƒ´ÕéŒ)¬ Up†µÌ¢{´¼V ]7ž62']ßΨÉú!²gÉÊ®Ë7ú9½ófM¸<*y¢sEéhîé”' [ 1605.732324][T32201] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(1901.0.2191068454), cmd(2) [ 1607.509801][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.509841][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 1608.193233][T32232] FAULT_INJECTION: forcing a failure. [ 1608.193233][T32232] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1608.193261][T32232] CPU: 0 UID: 0 PID: 32232 Comm: syz.3.3183 Not tainted syzkaller #0 PREEMPT(full) [ 1608.193280][T32232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1608.193290][T32232] Call Trace: [ 1608.193296][T32232] [ 1608.193303][T32232] dump_stack_lvl+0x100/0x190 [ 1608.193330][T32232] should_fail_ex.cold+0x5/0xa [ 1608.193351][T32232] get_futex_key+0x1d0/0x14f0 [ 1608.193369][T32232] ? __pfx_get_futex_key+0x10/0x10 [ 1608.193384][T32232] ? vfs_writev+0x1d5/0xdd0 [ 1608.193401][T32232] ? rcu_is_watching+0x13/0xc0 [ 1608.193418][T32232] ? vfs_writev+0x1d5/0xdd0 [ 1608.193436][T32232] ? kfree+0x1e5/0x6d0 [ 1608.193451][T32232] ? rw_verify_area+0xce/0x6d0 [ 1608.193469][T32232] futex_wake+0xf4/0x5e0 [ 1608.193490][T32232] ? __pfx_futex_wake+0x10/0x10 [ 1608.193510][T32232] ? __pfx_vfs_writev+0x10/0x10 [ 1608.193534][T32232] do_futex+0x2b2/0x440 [ 1608.193552][T32232] ? __pfx_do_futex+0x10/0x10 [ 1608.193571][T32232] ? __fget_files+0x21f/0x3d0 [ 1608.193592][T32232] __x64_sys_futex+0x34f/0x4d0 [ 1608.193612][T32232] ? __pfx___x64_sys_futex+0x10/0x10 [ 1608.193629][T32232] ? __pfx_do_writev+0x10/0x10 [ 1608.193651][T32232] do_syscall_64+0x121/0x770 [ 1608.193672][T32232] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1608.193688][T32232] RIP: 0033:0x7f968439e159 [ 1608.193701][T32232] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1608.193717][T32232] RSP: 002b:00007f96852450e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1608.193732][T32232] RAX: ffffffffffffffda RBX: 00007f9684626458 RCX: 00007f968439e159 [ 1608.193743][T32232] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f968462645c [ 1608.193752][T32232] RBP: 00007f9684626450 R08: 0000000000000001 R09: 0000000000000000 [ 1608.193762][T32232] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 1608.193772][T32232] R13: 00007f96846264e8 R14: 00007ffcda066c90 R15: 00007ffcda066d78 [ 1608.193792][T32232] [ 1609.447581][T32241] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1618.098708][T32397] FAULT_INJECTION: forcing a failure. [ 1618.098708][T32397] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1618.098737][T32397] CPU: 0 UID: 0 PID: 32397 Comm: syz.2.3204 Not tainted syzkaller #0 PREEMPT(full) [ 1618.098757][T32397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1618.098768][T32397] Call Trace: [ 1618.098774][T32397] [ 1618.098781][T32397] dump_stack_lvl+0x100/0x190 [ 1618.098807][T32397] should_fail_ex.cold+0x5/0xa [ 1618.098828][T32397] get_futex_key+0x1d0/0x14f0 [ 1618.098847][T32397] ? __pfx_get_futex_key+0x10/0x10 [ 1618.098864][T32397] ? vfs_writev+0x1d5/0xdd0 [ 1618.098882][T32397] ? rcu_is_watching+0x13/0xc0 [ 1618.098900][T32397] ? vfs_writev+0x1d5/0xdd0 [ 1618.098915][T32397] ? kfree+0x1e5/0x6d0 [ 1618.098931][T32397] ? rw_verify_area+0xce/0x6d0 [ 1618.098950][T32397] futex_wake+0xf4/0x5e0 [ 1618.098972][T32397] ? __pfx_futex_wake+0x10/0x10 [ 1618.098991][T32397] ? __pfx_vfs_writev+0x10/0x10 [ 1618.099015][T32397] do_futex+0x2b2/0x440 [ 1618.099032][T32397] ? __pfx_do_futex+0x10/0x10 [ 1618.099050][T32397] ? __fget_files+0x21f/0x3d0 [ 1618.099072][T32397] __x64_sys_futex+0x34f/0x4d0 [ 1618.099091][T32397] ? __pfx___x64_sys_futex+0x10/0x10 [ 1618.099111][T32397] ? __pfx_do_writev+0x10/0x10 [ 1618.099135][T32397] do_syscall_64+0x121/0x770 [ 1618.099210][T32397] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1618.099227][T32397] RIP: 0033:0x7f4c6959e159 [ 1618.099241][T32397] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1618.099256][T32397] RSP: 002b:00007f4c6a3de0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1618.099274][T32397] RAX: ffffffffffffffda RBX: 00007f4c69826548 RCX: 00007f4c6959e159 [ 1618.099286][T32397] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f4c6982654c [ 1618.099297][T32397] RBP: 00007f4c69826540 R08: 0000000000000001 R09: 0000000000000000 [ 1618.099308][T32397] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 1618.099319][T32397] R13: 00007f4c698265d8 R14: 00007ffdceaf4250 R15: 00007ffdceaf4338 [ 1618.099340][T32397] [ 1621.762814][T32453] cifs: Unknown parameter '‰ƒ´ÕéŒ)¬ Up†µÌ¢{´¼V ]7ž62']ßΨÉú!²gÉÊ®Ë7ú9½ófM¸<*y¢sEéhîé”' [ 1625.426113][T32498] usb usb37: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1632.036873][T32624] cifs: Unknown parameter '‰ƒ´ÕéŒ)¬ Up†µÌ¢{´¼V ]7ž62']ßΨÉú!²gÉÊ®Ë7ú9½ófM¸<*y¢sEéhîé”' [ 1635.682919][T32682] netlink: 5324 bytes leftover after parsing attributes in process `syz.3.3245'. [ 1636.961175][T32695] syz.2.3247 uses obsolete (PF_INET,SOCK_PACKET) [ 1641.058305][ T309] netlink: 5324 bytes leftover after parsing attributes in process `syz.1.3257'. [ 1641.218466][ T316] FAULT_INJECTION: forcing a failure. [ 1641.218466][ T316] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1641.218492][ T316] CPU: 0 UID: 0 PID: 316 Comm: syz.0.3259 Not tainted syzkaller #0 PREEMPT(full) [ 1641.218510][ T316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1641.218520][ T316] Call Trace: [ 1641.218526][ T316] [ 1641.218532][ T316] dump_stack_lvl+0x100/0x190 [ 1641.218557][ T316] should_fail_ex.cold+0x5/0xa [ 1641.218576][ T316] _copy_to_user+0x32/0xd0 [ 1641.218601][ T316] simple_read_from_buffer+0xcb/0x170 [ 1641.218622][ T316] proc_fail_nth_read+0x1af/0x230 [ 1641.218642][ T316] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1641.218661][ T316] ? rw_verify_area+0xce/0x6d0 [ 1641.218677][ T316] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1641.218694][ T316] vfs_read+0x1e4/0xb40 [ 1641.218711][ T316] ? lock_acquire+0x1d1/0x380 [ 1641.218733][ T316] ? __fget_files+0x34/0x3d0 [ 1641.218751][ T316] ? __pfx_vfs_read+0x10/0x10 [ 1641.218766][ T316] ? find_held_lock+0x2b/0x80 [ 1641.218783][ T316] ? __fget_files+0x215/0x3d0 [ 1641.218804][ T316] ? __fget_files+0x21f/0x3d0 [ 1641.218827][ T316] ksys_read+0x12a/0x250 [ 1641.218844][ T316] ? __pfx_ksys_read+0x10/0x10 [ 1641.218866][ T316] do_syscall_64+0x121/0x770 [ 1641.218893][ T316] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1641.218914][ T316] RIP: 0033:0x7fd24bf5e98e [ 1641.218927][ T316] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1641.218941][ T316] RSP: 002b:00007fd24a1b3fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1641.218957][ T316] RAX: ffffffffffffffda RBX: 00007fd24a1b46c0 RCX: 00007fd24bf5e98e [ 1641.218966][ T316] RDX: 000000000000000f RSI: 00007fd24a1b40a0 RDI: 0000000000000009 [ 1641.218976][ T316] RBP: 00007fd24a1b4090 R08: 0000000000000000 R09: 0000000000000000 [ 1641.218985][ T316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1641.218994][ T316] R13: 00007fd24c2264e8 R14: 00007fd24c226450 R15: 00007fffc6f1fa18 [ 1641.219014][ T316] [ 1647.797085][ T398] netlink: 5324 bytes leftover after parsing attributes in process `syz.3.3270'. [ 1648.409906][ T411] cifs: Unknown parameter '‰ƒ´ÕéŒ)¬ Up†µÌ¢{´¼V ]7ž62']ßΨÉú!²gÉÊ®Ë7ú9½ófM¸<*y¢sEéhîé”' [ 1662.914530][ T653] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1662.916016][ T653] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1662.916358][ T653] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1662.916509][ T653] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1664.867702][ T52] Bluetooth: hci2: command 0x0406 tx timeout [ 1664.947589][ T52] Bluetooth: hci0: command 0x0c1a tx timeout [ 1664.947626][ T52] Bluetooth: hci4: command 0x0406 tx timeout [ 1664.947646][ T52] Bluetooth: hci3: command 0x0406 tx timeout [ 1668.674323][ T728] FAULT_INJECTION: forcing a failure. [ 1668.674323][ T728] name failslab, interval 1, probability 0, space 0, times 0 [ 1668.674356][ T728] CPU: 0 UID: 0 PID: 728 Comm: syz.2.3317 Not tainted syzkaller #0 PREEMPT(full) [ 1668.674374][ T728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1668.674386][ T728] Call Trace: [ 1668.674393][ T728] [ 1668.674400][ T728] dump_stack_lvl+0x100/0x190 [ 1668.674432][ T728] should_fail_ex.cold+0x5/0xa [ 1668.674456][ T728] should_failslab+0xc2/0x120 [ 1668.674480][ T728] __kmalloc_cache_noprof+0x91/0x6d0 [ 1668.674499][ T728] ? input_allocate_device+0x44/0x350 [ 1668.674609][ T728] input_allocate_device+0x44/0x350 [ 1668.674629][ T728] uinput_ioctl_handler.isra.0+0x3c8/0x1d20 [ 1668.674704][ T728] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1668.674725][ T728] ? __pfx_uinput_ioctl_handler.isra.0+0x10/0x10 [ 1668.674752][ T728] ? __fget_files+0x34/0x3d0 [ 1668.674773][ T728] ? find_held_lock+0x2b/0x80 [ 1668.674793][ T728] ? hook_file_ioctl_common+0x140/0x440 [ 1668.674822][ T728] ? __pfx_uinput_ioctl+0x10/0x10 [ 1668.674844][ T728] __x64_sys_ioctl+0x18e/0x210 [ 1668.674863][ T728] do_syscall_64+0x121/0x770 [ 1668.674885][ T728] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1668.674904][ T728] RIP: 0033:0x7f4c6959e159 [ 1668.674920][ T728] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1668.674937][ T728] RSP: 002b:00007f4c6a4a4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1668.674954][ T728] RAX: ffffffffffffffda RBX: 00007f4c69825fa0 RCX: 00007f4c6959e159 [ 1668.674966][ T728] RDX: 0000200000000180 RSI: 00000000406855c9 RDI: 0000000000000003 [ 1668.674976][ T728] RBP: 00007f4c6963506b R08: 0000000000000000 R09: 0000000000000000 [ 1668.674986][ T728] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1668.674997][ T728] R13: 00007f4c69826038 R14: 00007f4c69825fa0 R15: 00007ffdceaf4338 [ 1668.675019][ T728] [ 1668.952904][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.952951][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 1669.954048][ T753] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1669.954210][ T753] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1669.954308][ T753] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1669.954403][ T753] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1671.667557][T27836] Bluetooth: hci2: command 0x0406 tx timeout [ 1671.987947][T27836] Bluetooth: hci0: command 0x0c1a tx timeout [ 1671.987981][T27836] Bluetooth: hci4: command 0x0406 tx timeout [ 1671.988009][T27836] Bluetooth: hci3: command 0x0406 tx timeout [ 1681.167302][ T940] cifs: Unknown parameter '‰ƒ´ÕéŒ)¬ Up†µÌ¢{´¼V ]7ž62']ßΨÉú!²gÉÊ®Ë7ú9½ófM¸<*y¢sEéhîé”' [ 1684.275185][ T993] netlink: 5324 bytes leftover after parsing attributes in process `syz.3.3352'. [ 1686.334036][ T1025] netlink: 5324 bytes leftover after parsing attributes in process `syz.3.3356'. [ 1689.917144][ T1090] ieee802154 phy0 wpan0: encryption failed: -22 [ 1691.978155][ T1116] cifs: Unknown parameter '‰ƒ´ÕéŒ)¬ Up†µÌ¢{´¼V ]7ž62']ßΨÉú!²gÉÊ®Ë7ú9½ófM¸<*y¢sEéhîé”' [ 1692.973678][ T1138] cifs: Unknown parameter '‰ƒ´ÕéŒ)¬ Up†µÌ¢{´¼V ]7ž62']ßΨÉú!²gÉÊ®Ë7ú9½ófM¸<*y¢sEéhîé”' [ 1700.262539][ T1256] hub 1-0:1.0: USB hub found [ 1700.262799][ T1256] hub 1-0:1.0: 1 port detected [ 1700.496006][ T1269] netlink: 5324 bytes leftover after parsing attributes in process `syz.3.3391'. [ 1700.680185][ T1273] netlink: 5324 bytes leftover after parsing attributes in process `syz.2.3393'. [ 1702.644366][ T1310] cifs: Unknown parameter '‰ƒ´ÕéŒ)¬ Up†µÌ¢{´¼V ]7ž62']ßΨÉú!²gÉÊ®Ë7ú9½ófM¸<*y¢sEéhîé”' [ 1706.303360][ T1372] netlink: 5324 bytes leftover after parsing attributes in process `syz.3.3404'. [ 1708.321631][ T1408] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(1901.0.2191068454), cmd(2) [ 1710.213605][ T1438] cifs: Unknown parameter '‰ƒ´ÕéŒ)¬ Up†µÌ¢{´¼V ]7ž62']ßΨÉú!²gÉÊ®Ë7ú9½ófM¸<*y¢sEéhîé”' [ 1712.153718][ T1468] FAULT_INJECTION: forcing a failure. [ 1712.153718][ T1468] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1712.153753][ T1468] CPU: 0 UID: 0 PID: 1468 Comm: syz.3.3416 Not tainted syzkaller #0 PREEMPT(full) [ 1712.153773][ T1468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1712.153784][ T1468] Call Trace: [ 1712.153791][ T1468] [ 1712.153798][ T1468] dump_stack_lvl+0x100/0x190 [ 1712.153832][ T1468] should_fail_ex.cold+0x5/0xa [ 1712.153857][ T1468] get_futex_key+0x1d0/0x14f0 [ 1712.153879][ T1468] ? __pfx_get_futex_key+0x10/0x10 [ 1712.153904][ T1468] ? __pfx_futex_hash+0x10/0x10 [ 1712.153926][ T1468] futex_wake+0xf4/0x5e0 [ 1712.153951][ T1468] ? __pfx_futex_wake+0x10/0x10 [ 1712.153975][ T1468] ? rcu_read_lock_any_held+0x6a/0x90 [ 1712.154002][ T1468] do_futex+0x2b2/0x440 [ 1712.154021][ T1468] ? __pfx_do_futex+0x10/0x10 [ 1712.154043][ T1468] __x64_sys_futex+0x34f/0x4d0 [ 1712.154061][ T1468] ? fdget_pos+0x2c0/0x380 [ 1712.154085][ T1468] ? __pfx___x64_sys_futex+0x10/0x10 [ 1712.154102][ T1468] ? ksys_read+0x1ac/0x250 [ 1712.154125][ T1468] ? __pfx_ksys_read+0x10/0x10 [ 1712.154149][ T1468] do_syscall_64+0x121/0x770 [ 1712.154176][ T1468] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1712.154193][ T1468] RIP: 0033:0x7f968439e159 [ 1712.154209][ T1468] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1712.154224][ T1468] RSP: 002b:00007f96852450e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1712.154242][ T1468] RAX: ffffffffffffffda RBX: 00007f9684626458 RCX: 00007f968439e159 [ 1712.154253][ T1468] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f968462645c [ 1712.154262][ T1468] RBP: 00007f9684626450 R08: 0000000000000001 R09: 0000000000000000 [ 1712.154272][ T1468] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 1712.154282][ T1468] R13: 00007f96846264e8 R14: 00007ffcda066c90 R15: 00007ffcda066d78 [ 1712.154302][ T1468] [ 1714.144524][ T1495] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(1901.0.2191068454), cmd(2) [ 1722.375501][ T1607] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3439'. [ 1722.553778][ T1617] i2c i2c-0: delete_device: Can't find device in list [ 1730.395259][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.395312][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 1732.355141][ T1794] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(1901.0.2191068454), cmd(2) [ 1734.322551][ T687] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 1734.322631][ T687] Bluetooth: hci0: Invalid handle: 0x3a4a > 0x0eff [ 1736.663439][ T1817] Process accounting resumed [ 1741.023422][ T1914] cifs: Unknown parameter '‰ƒ´ÕéŒ)¬ Up†µÌ¢{´¼V ]7ž62']ßΨÉú!²gÉÊ®Ë7ú9½ófM¸<*y¢sEéhîé”' [ 1743.271074][ T1952] cifs: Unknown parameter '‰ƒ´ÕéŒ)¬ Up†µÌ¢{´¼V ]7ž62']ßΨÉú!²gÉÊ®Ë7ú9½ófM¸<*y¢sEéhîé”' [ 1744.828611][ T1977] netlink: 5324 bytes leftover after parsing attributes in process `syz.3.3490'. [ 1747.042394][ T2011] bond0: option packets_per_slave: invalid value ( Xµn‘pæ) [ 1747.042423][ T2011] bond0: option packets_per_slave: allowed values 0 - 65535 [ 1751.224144][ T2089] FAULT_INJECTION: forcing a failure. [ 1751.224144][ T2089] name failslab, interval 1, probability 0, space 0, times 0 [ 1751.224173][ T2089] CPU: 0 UID: 0 PID: 2089 Comm: syz.1.3506 Not tainted syzkaller #0 PREEMPT(full) [ 1751.224193][ T2089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1751.224205][ T2089] Call Trace: [ 1751.224211][ T2089] [ 1751.224218][ T2089] dump_stack_lvl+0x100/0x190 [ 1751.224249][ T2089] should_fail_ex.cold+0x5/0xa [ 1751.224272][ T2089] should_failslab+0xc2/0x120 [ 1751.224296][ T2089] __kmalloc_cache_noprof+0x91/0x6d0 [ 1751.224316][ T2089] ? input_allocate_device+0xc5/0x350 [ 1751.224341][ T2089] input_allocate_device+0xc5/0x350 [ 1751.224359][ T2089] uinput_ioctl_handler.isra.0+0x3c8/0x1d20 [ 1751.224383][ T2089] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1751.224401][ T2089] ? __pfx_uinput_ioctl_handler.isra.0+0x10/0x10 [ 1751.224431][ T2089] ? __fget_files+0x34/0x3d0 [ 1751.224451][ T2089] ? find_held_lock+0x2b/0x80 [ 1751.224470][ T2089] ? hook_file_ioctl_common+0x140/0x440 [ 1751.224500][ T2089] ? __pfx_uinput_ioctl+0x10/0x10 [ 1751.224522][ T2089] __x64_sys_ioctl+0x18e/0x210 [ 1751.224541][ T2089] do_syscall_64+0x121/0x770 [ 1751.224564][ T2089] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1751.224580][ T2089] RIP: 0033:0x7f44f1d9e159 [ 1751.224595][ T2089] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1751.224610][ T2089] RSP: 002b:00007f44f2c42028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1751.224627][ T2089] RAX: ffffffffffffffda RBX: 00007f44f2026450 RCX: 00007f44f1d9e159 [ 1751.224638][ T2089] RDX: 0000200000000180 RSI: 00000000406855c9 RDI: 0000000000000006 [ 1751.224648][ T2089] RBP: 00007f44f1e3506b R08: 0000000000000000 R09: 0000000000000000 [ 1751.224657][ T2089] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1751.224666][ T2089] R13: 00007f44f20264e8 R14: 00007f44f2026450 R15: 00007fff67f447a8 [ 1751.224686][ T2089] [ 1753.311976][ T2124] nfs4: Unknown parameter 'aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa' [ 1759.594120][ T2237] netlink: 5324 bytes leftover after parsing attributes in process `syz.2.3531'. [ 1768.082119][ T2360] Process accounting paused [ 1770.303287][ T2433] FAULT_INJECTION: forcing a failure. [ 1770.303287][ T2433] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1770.303318][ T2433] CPU: 0 UID: 0 PID: 2433 Comm: syz.0.3557 Not tainted syzkaller #0 PREEMPT(full) [ 1770.303337][ T2433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1770.303347][ T2433] Call Trace: [ 1770.303354][ T2433] [ 1770.303360][ T2433] dump_stack_lvl+0x100/0x190 [ 1770.303388][ T2433] should_fail_ex.cold+0x5/0xa [ 1770.303409][ T2433] _copy_to_user+0x32/0xd0 [ 1770.303435][ T2433] keyctl_capabilities+0x5a/0x160 [ 1770.303460][ T2433] __do_sys_keyctl+0x427/0x5a0 [ 1770.303482][ T2433] do_syscall_64+0x121/0x770 [ 1770.303503][ T2433] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1770.303520][ T2433] RIP: 0033:0x7fd24bf9e159 [ 1770.303534][ T2433] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1770.303549][ T2433] RSP: 002b:00007fd24a1b4028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 1770.303566][ T2433] RAX: ffffffffffffffda RBX: 00007fd24c226450 RCX: 00007fd24bf9e159 [ 1770.303576][ T2433] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 000000000000001f [ 1770.303585][ T2433] RBP: 00007fd24a1b4090 R08: 00000000000003ff R09: 0000000000000000 [ 1770.303594][ T2433] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 1770.303603][ T2433] R13: 00007fd24c2264e8 R14: 00007fd24c226450 R15: 00007fffc6f1fa18 [ 1770.303623][ T2433] [ 1770.824684][ T2440] CIFS mount error: No usable UNC path provided in device string! [ 1770.824684][ T2440] [ 1770.824708][ T2440] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1775.560110][ T2520] FAULT_INJECTION: forcing a failure. [ 1775.560110][ T2520] name failslab, interval 1, probability 0, space 0, times 0 [ 1775.560141][ T2520] CPU: 0 UID: 0 PID: 2520 Comm: syz.2.3569 Not tainted syzkaller #0 PREEMPT(full) [ 1775.560161][ T2520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1775.560171][ T2520] Call Trace: [ 1775.560177][ T2520] [ 1775.560184][ T2520] dump_stack_lvl+0x100/0x190 [ 1775.560213][ T2520] should_fail_ex.cold+0x5/0xa [ 1775.560237][ T2520] should_failslab+0xc2/0x120 [ 1775.560262][ T2520] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 1775.560287][ T2520] ? __d_alloc+0x35/0xa50 [ 1775.560314][ T2520] __d_alloc+0x35/0xa50 [ 1775.560337][ T2520] d_alloc+0x4a/0x1e0 [ 1775.560359][ T2520] lookup_one_qstr_excl+0x171/0x250 [ 1775.560448][ T2520] start_dirop+0x59/0xb0 [ 1775.560469][ T2520] simple_start_creating+0xf9/0x110 [ 1775.560493][ T2520] ? __pfx_simple_start_creating+0x10/0x10 [ 1775.560514][ T2520] ? mntput+0x70/0xa0 [ 1775.560532][ T2520] ? simple_pin_fs+0xa3/0x190 [ 1775.560551][ T2520] debugfs_start_creating.part.0+0x7b/0x150 [ 1775.560643][ T2520] __debugfs_create_file+0xa9/0x500 [ 1775.560670][ T2520] debugfs_create_file_full+0x41/0x60 [ 1775.560697][ T2520] ref_tracker_dir_debugfs+0x19e/0x2e0 [ 1775.560765][ T2520] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 1775.560797][ T2520] ? kasan_save_track+0x14/0x30 [ 1775.560820][ T2520] ? __kasan_kmalloc+0xaa/0xb0 [ 1775.560842][ T2520] ? lockdep_init_map_type+0x5c/0x250 [ 1775.560870][ T2520] preinit_net+0x252/0x920 [ 1775.560890][ T2520] copy_net_ns+0x1dd/0x7a0 [ 1775.560909][ T2520] create_new_namespaces+0x3ea/0xac0 [ 1775.560938][ T2520] unshare_nsproxy_namespaces+0xf2/0x220 [ 1775.560963][ T2520] ksys_unshare+0x4a2/0xa70 [ 1775.560988][ T2520] ? __pfx_ksys_unshare+0x10/0x10 [ 1775.561014][ T2520] __x64_sys_unshare+0x31/0x40 [ 1775.561031][ T2520] do_syscall_64+0x121/0x770 [ 1775.561054][ T2520] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1775.561072][ T2520] RIP: 0033:0x7f4c6959e159 [ 1775.561088][ T2520] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1775.561103][ T2520] RSP: 002b:00007f4c6a4a4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1775.561120][ T2520] RAX: ffffffffffffffda RBX: 00007f4c69825fa0 RCX: 00007f4c6959e159 [ 1775.561132][ T2520] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1775.561142][ T2520] RBP: 00007f4c6963506b R08: 0000000000000000 R09: 0000000000000000 [ 1775.561152][ T2520] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1775.561163][ T2520] R13: 00007f4c69826038 R14: 00007f4c69825fa0 R15: 00007ffdceaf4338 [ 1775.561185][ T2520] [ 1779.499291][ T2625] FAULT_INJECTION: forcing a failure. [ 1779.499291][ T2625] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1779.499321][ T2625] CPU: 0 UID: 0 PID: 2625 Comm: syz.1.3578 Not tainted syzkaller #0 PREEMPT(full) [ 1779.499338][ T2625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1779.499349][ T2625] Call Trace: [ 1779.499355][ T2625] [ 1779.499361][ T2625] dump_stack_lvl+0x100/0x190 [ 1779.499389][ T2625] should_fail_ex.cold+0x5/0xa [ 1779.499410][ T2625] _copy_to_user+0x32/0xd0 [ 1779.499437][ T2625] keyctl_capabilities+0x5a/0x160 [ 1779.499462][ T2625] __do_sys_keyctl+0x427/0x5a0 [ 1779.499485][ T2625] do_syscall_64+0x121/0x770 [ 1779.499513][ T2625] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1779.499530][ T2625] RIP: 0033:0x7f44f1d9e159 [ 1779.499543][ T2625] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1779.499559][ T2625] RSP: 002b:00007f44f2c42028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 1779.499575][ T2625] RAX: ffffffffffffffda RBX: 00007f44f2026450 RCX: 00007f44f1d9e159 [ 1779.499586][ T2625] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 000000000000001f [ 1779.499595][ T2625] RBP: 00007f44f2c42090 R08: 00000000000003ff R09: 0000000000000000 [ 1779.499604][ T2625] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 1779.499613][ T2625] R13: 00007f44f20264e8 R14: 00007f44f2026450 R15: 00007fff67f447a8 [ 1779.499632][ T2625] [ 1781.329567][ T2660] FAULT_INJECTION: forcing a failure. [ 1781.329567][ T2660] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1781.329597][ T2660] CPU: 0 UID: 0 PID: 2660 Comm: syz.0.3581 Not tainted syzkaller #0 PREEMPT(full) [ 1781.329615][ T2660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1781.329625][ T2660] Call Trace: [ 1781.329631][ T2660] [ 1781.329638][ T2660] dump_stack_lvl+0x100/0x190 [ 1781.329664][ T2660] should_fail_ex.cold+0x5/0xa [ 1781.329686][ T2660] _copy_to_user+0x32/0xd0 [ 1781.329709][ T2660] keyctl_capabilities+0x5a/0x160 [ 1781.329734][ T2660] __do_sys_keyctl+0x427/0x5a0 [ 1781.329757][ T2660] do_syscall_64+0x121/0x770 [ 1781.329778][ T2660] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1781.329794][ T2660] RIP: 0033:0x7fd24bf9e159 [ 1781.329808][ T2660] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1781.329823][ T2660] RSP: 002b:00007fd24a1b4028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 1781.329839][ T2660] RAX: ffffffffffffffda RBX: 00007fd24c226450 RCX: 00007fd24bf9e159 [ 1781.329849][ T2660] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 000000000000001f [ 1781.329859][ T2660] RBP: 00007fd24a1b4090 R08: 00000000000003ff R09: 0000000000000000 [ 1781.329869][ T2660] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1781.329878][ T2660] R13: 00007fd24c2264e8 R14: 00007fd24c226450 R15: 00007fffc6f1fa18 [ 1781.329900][ T2660] [ 1783.412809][ T2704] BUG: unable to handle page fault for address: ffffc90013bcdfe8 [ 1783.420588][ T2704] #PF: supervisor write access in kernel mode [ 1783.426649][ T2704] #PF: error_code(0x0002) - not-present page [ 1783.432636][ T2704] PGD 13fe12067 P4D 13fe12067 PUD 1d2ca067 PMD 61852067 PTE 0 [ 1783.440132][ T2704] Oops: Oops: 0002 [#1] SMP KASAN PTI [ 1783.445503][ T2704] CPU: 0 UID: 0 PID: 2704 Comm: syz.1.3586 Not tainted syzkaller #0 PREEMPT(full) [ 1783.454784][ T2704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1783.464839][ T2704] RIP: 0010:write_comp_data+0x7c/0xa0 [ 1783.470237][ T2704] Code: 00 8b bf 1c 17 00 00 48 8b 30 48 c1 e7 03 4c 8d 1c b5 00 00 00 00 4a 8d 14 dd 28 00 00 00 48 39 d7 72 1b 48 83 c6 01 48 89 30 <4c> 89 44 10 e0 4c 89 4c 10 e8 4c 89 54 10 f0 4a 89 4c d8 20 c3 cc [ 1783.489875][ T2704] RSP: 0018:ffffc900061c7e80 EFLAGS: 00050257 [ 1783.495958][ T2704] RAX: ffffc90013bce000 RBX: 0000000000000000 RCX: ffffffff82499045 [ 1783.503955][ T2704] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 0000000000400000 [ 1783.511958][ T2704] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000002 [ 1783.520559][ T2704] R10: 0000000000000001 R11: fffffffffffffffc R12: 0000000000000020 [ 1783.528812][ T2704] R13: 0000000000000000 R14: 00007ffffffff000 R15: 0000000000000001 [ 1783.537054][ T2704] FS: 00007f44f2c426c0(0000) GS:ffff888123b55000(0000) knlGS:0000000000000000 [ 1783.545987][ T2704] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1783.552566][ T2704] CR2: ffffc90013bcdfe8 CR3: 000000002c0fa000 CR4: 00000000003526f0 [ 1783.560542][ T2704] Call Trace: [ 1783.563826][ T2704] [ 1783.566753][ T2704] rseq_register+0x115/0x350 [ 1783.571355][ T2704] __x64_sys_rseq+0x1b8/0x2e0 [ 1783.576032][ T2704] do_syscall_64+0x121/0x770 [ 1783.580637][ T2704] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1783.586532][ T2704] RIP: 0033:0x7f44f1d9e159 [ 1783.590943][ T2704] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1783.610560][ T2704] RSP: 002b:00007f44f2c42028 EFLAGS: 00000246 ORIG_RAX: 000000000000014e [ 1783.618995][ T2704] RAX: ffffffffffffffda RBX: 00007f44f2026450 RCX: 00007f44f1d9e159 [ 1783.626972][ T2704] RDX: 0000000000000000 RSI: 0000000000000020 RDI: 0000000000000000 [ 1783.634962][ T2704] RBP: 00007f44f1e3506b R08: 0000000000000000 R09: 0000000000000000 [ 1783.642942][ T2704] R10: 0000000008000006 R11: 0000000000000246 R12: 0000000000000000 [ 1783.650933][ T2704] R13: 00007f44f20264e8 R14: 00007f44f2026450 R15: 00007fff67f447a8 [ 1783.659023][ T2704] [ 1783.662063][ T2704] Modules linked in: [ 1783.665971][ T2704] CR2: ffffc90013bcdfe8 [ 1783.670140][ T2704] ---[ end trace 0000000000000000 ]--- [ 1783.675598][ T2704] RIP: 0010:write_comp_data+0x7c/0xa0 [ 1783.675638][ T2704] Code: 00 8b bf 1c 17 00 00 48 8b 30 48 c1 e7 03 4c 8d 1c b5 00 00 00 00 4a 8d 14 dd 28 00 00 00 48 39 d7 72 1b 48 83 c6 01 48 89 30 <4c> 89 44 10 e0 4c 89 4c 10 e8 4c 89 54 10 f0 4a 89 4c d8 20 c3 cc [ 1783.675653][ T2704] RSP: 0018:ffffc900061c7e80 EFLAGS: 00050257 [ 1783.675668][ T2704] RAX: ffffc90013bce000 RBX: 0000000000000000 RCX: ffffffff82499045 [ 1783.675679][ T2704] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 0000000000400000 [ 1783.675689][ T2704] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000002 [ 1783.675698][ T2704] R10: 0000000000000001 R11: fffffffffffffffc R12: 0000000000000020 [ 1783.675708][ T2704] R13: 0000000000000000 R14: 00007ffffffff000 R15: 0000000000000001 [ 1783.675718][ T2704] FS: 00007f44f2c426c0(0000) GS:ffff888123b55000(0000) knlGS:0000000000000000 [ 1783.675733][ T2704] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1783.675743][ T2704] CR2: ffffc90013bcdfe8 CR3: 000000002c0fa000 CR4: 00000000003526f0 [ 1783.675756][ T2704] Kernel panic - not syncing: Fatal exception [ 1783.776208][ T2704] Kernel Offset: disabled [ 1783.780528][ T2704] Rebooting in 86400 seconds..