last executing test programs: 10.675117454s ago: executing program 1 (id=611): mmap$auto(0x0, 0x2020009, 0xa, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = gettid() close_range$auto(0x2, 0x8, 0x0) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f00000001c0), 0x40, 0x0) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0xc0000, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) tkill$auto(r0, 0x7) r1 = socket(0x2b, 0x1, 0x0) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000380), r1) r3 = io_uring_setup$auto(0x4, 0x0) close_range$auto(0x2, r3, 0x0) sendmsg$auto_NL80211_CMD_REMOVE_LINK_STA(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000ac0)={0xbe0, r2, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_CONTROL_PORT_NO_PREAUTH={0x4}, @NL80211_ATTR_DISABLE_HE={0x4}, @NL80211_ATTR_MLO_LINKS={0xbc4, 0x138, 0x0, 0x1, [{0x870, 0x0, 0x0, 0x1, [@NL80211_ATTR_SUPPORT_MESH_AUTH={0x4}, @NL80211_ATTR_IE_PROBE_RESP={0x82d, 0x7f, "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"}, @NL80211_ATTR_HW_TIMESTAMP_ENABLED={0x4}, @NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0xe8}, @NL80211_ATTR_RECEIVE_MULTICAST={0x4}, @NL80211_ATTR_TIMEOUT_REASON={0x8, 0xf8, 0xfff}, @NL80211_ATTR_BSS_BASIC_RATES={0x1f, 0x24, "ce33647d14e2bd13b8717571445176fbbbfa93693ae3ef3f95ed80"}]}, {0x32c, 0x0, 0x0, 0x1, [@NL80211_ATTR_MESH_CONFIG={0x168, 0x23, 0x0, 0x1, [@typed={0x32, 0x66, 0x0, 0x0, @str='/proc/sys/net/ipv4/ip_unprivileged_port_start\x00'}, @generic="be6857d83bea8f3f0338859d1d76a8c0e37d59d350db5e841410a014fa59", @nested={0x6a, 0x30, 0x0, 0x1, [@generic="a120418e636445fa55eec4780be98cad3161e275c5abe1691b6d80aacbee5c39a2aefee17e52dae96800b46ddf2591f91045bca3f4b891e7887aba922a92db8d2c2381ed017c56fa15e72bd3a9cd988aa91a21fa5903", @typed={0x5, 0xf, 0x0, 0x0, @str='\x00'}, @typed={0x8, 0x5a, 0x0, 0x0, @u32=0x23}]}, @generic="e8ba6cce3c2bb55e186a8ec05b15811907a7279b7a524e842a22e38a4fff3583da439c8a2934a16933c82934ea9401b4865ffaafdeee4d9c8a1c61c165eae68e0ae57b09a216c00893fd0727800b995e5919f20c056bc3dce16d25d4f6591e5fd404bbfa14e9f0205e9a9724e49bfd05538be57f1ba9d75cf405920c54c6f47ba16fa249cd36e173176fca4632209188e41750e737a7fc9db8190a74660ec598238d75133e27"]}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x2}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_SAE_PASSWORD={0xb, 0x115, "bfcd7eaad08b0c"}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_NAN_FUNC={0x1a3, 0xf0, 0x0, 0x1, [@typed={0xd3, 0xca, 0x0, 0x0, @binary="fd3788c701db908a1a3e47b8e5c4861b3da945143492f7da6c47fa188584a390aa4a18257ba50d5f01b81dc2dc3ff51644c27906b833bf2095727e580eeddb0fecb9a926958d520f33d558e7bbf66396ed352890b9aedc01da93e265411fd26743c781979bdd6502cb8b1e0ae0a898196af592d721fde6d81c95213209c012b5835df9eb3b205c5aacba664aa46923269f49b23fb9dd6d47d6f163f9a2925965d49d5adb988eb144f8b3b37f27eb3fb2194b7dc93738cc186a5d44609f1c5607ae5f33b275262c22ba2191edb210e8"}, @typed={0x8, 0xeb, 0x0, 0x0, @fd=r3}, @generic="ffd66e83ea6adccdc255e1a23c2cf7c16751e12b74f01edfbcbc7ab2a40aaa2c7ae8f3d271633ebb267ff92025a4675b3393a3cc610920ce894fe333b2e7fcce4c85afb54af3b664299e32151388c5c62845329c317a97840b725c31eb23aac467cea40af3421e1995b58a104ee97bb2229fca90f799b1e81833bedee90300c146186b4b74ad62c3829479ce24a7b5d9b9e8d119d99df7e47a6cb72e8b215d96cd3cf904b1b7b3d9a13ecd9eae179d772822b6dfbf609426f249cd", @typed={0x8, 0xfe, 0x0, 0x0, @ipv4=@loopback}]}]}, {0x8, 0x0, 0x0, 0x1, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0x4}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x9}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x919}]}]}]}, 0xbe0}, 0x1, 0x0, 0x0, 0x40}, 0x20008000) semctl$auto_GETPID(0x4, 0x9e9, 0xb, 0x0) 10.109050686s ago: executing program 1 (id=615): msgctl$auto_IPC_SET(0xfffffffe, 0x1, &(0x7f00000000c0)={{0x9, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, 0x9}, 0x0, 0x0, 0x20000007, 0x45d3, 0x9, 0x1, 0x3, 0x7ff, 0xc, 0x6, @inferred, @raw=0x1}) mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000) (async) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) (async) clone$auto(0x7, 0x7f, 0xfffffffffffffffc, 0x0, 0x80003) (async) mmap$auto(0x800000, 0x9, 0x0, 0x40eb2, 0x401, 0x300000000000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) socket(0x11, 0x80003, 0x300) (async) r0 = openat$auto_suspend_stats_fops_(0xffffffffffffff9c, &(0x7f0000000080), 0x440, 0x0) pread64$auto(r0, &(0x7f00000000c0)='/dev/nvme-fabrics\x00', 0x10, 0x9) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/bond0/queues/tx-9/xps_rxqs\x00', 0x1a1842, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/bond0/bonding/xmit_hash_policy\x00', 0x10b062, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) open(&(0x7f0000000040)='./file0\x00', 0x44, 0x0) (async) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) (async) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio1\x00', 0x38342, 0x0) (async) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) (async) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) (async, rerun: 32) io_uring_setup$auto(0x6, 0x0) (rerun: 32) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) (async) r1 = syz_clone3(&(0x7f0000000400)={0x9840100, 0x0, 0x0, 0x0, {0x31}, 0x0, 0x0, 0x0, 0x0}, 0x58) mmap$auto(0x0, 0x10000, 0x8000, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x6a30, 0x2020009, 0x1, 0xeb1, 0xffffffffffffffff, 0x80001) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x400000000001, r1, 0xe4c, 0x0) (async, rerun: 32) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async, rerun: 32) writev$auto(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)="bf955582c6880b6636cb98e7fa8c9e6c893ff450af5f53573f343fc2f84a95fbff92436cc702c1c073b902b961ebdcc9bc4731f95068c8cbd8ce39552bfcc37fc2ff612de3c1c6799dbea4e9d5e1edbcdb9f9ead26d0d4199390b1a4bb38fd65dcb378ab0ba78379eccf48d5d689c362581791e138237b4cc44a6564665aaa0478e28362484d4e3438d5141f77b4ada9b7bcf9a40d74b2cd225982678da7fb1eaeeeedb9cf49f7b31ce7fde98839878e960a88bdda38e438f11044cd3b3b74889138eba5de9985f345fd51dca6ec7e4b9a19bed3834bfeab7854ba6e204b1f6d5c4afcfca3a02af554a6b2cd", 0x5bd}, 0xffffffffffffffc0) madvise$auto(0x0, 0x2003f0, 0x15) pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x88\xa8s\x1c\b\x06\x8a>)\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x4e, 0x3) 9.025556533s ago: executing program 1 (id=616): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/orangefs/perf_history_size\x00', 0x1182, 0x0) io_uring_setup$auto(0x86, 0x0) r1 = socket(0x10, 0x4, 0xffffffc0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x120e2, 0x0) write$auto(r3, 0x0, 0x81) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r4, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010325bd7040ffdbdf250a0000000c0002006e6c383032313100"], 0x28}, 0x1, 0x0, 0x0, 0x30000881}, 0xc040810) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_mac80211_hwsim(0x0, 0xffffffffffffffff) r8 = geteuid() msgctl$auto_MSG_STAT_ANY(0x10000, 0xd, &(0x7f0000000340)={{0xa0, 0xee01, 0xee01, 0x7, 0x0, 0x5, 0x9dc4}, &(0x7f00000000c0)=0x4, 0x0, 0x2, 0x5dd8, 0x7fff, 0xb12, 0x2, 0x8000, 0x4, 0xac0, @inferred, @inferred=0xffffffffffffffff}) r10 = setfsuid$auto(0xee00) setresuid$auto(0xffffffffffffffff, r10, 0x8000) msgctl$auto_MSG_STAT(0xbc7, 0xb, &(0x7f0000000480)={{0x8, 0xffffffffffffffff, 0x0, 0x8, 0x10001, 0xfd36, 0xfff9}, &(0x7f00000003c0)=0x3, &(0x7f0000000440)=0x7f, 0x7fffffff, 0x4, 0x1, 0x8000000000000000, 0x6, 0xc210, 0x3, 0x3, @inferred=0xffffffffffffffff, @raw=0x45}) setresuid$auto(r9, r10, r11) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r1, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="c0020000", @ANYRES16=0x0, @ANYBLOB="100028bd7000fbdbdf25030000007902028055966726eb2c50fc833990e033caf7d4a0810673c746c88b509902eb373a697ab827894d11296c2c26bc7394e459c97021b7ac53c98b43b5af99985920326fd45dca13a4b2cfe1c2082265e49d2f153052c021392c713b54b3e81d86c429af2dceae10decfba701bea8e0686ec3ff8e2e34ae16b83d5a155b07a3eaaa8cf6ce4ff1ec35c234e8cd8304effe01e6efce374c74e08efc7afae761953b46b59a15e5d027ca10e2789c2a200b1faf9892ad8b867ed7f2b3a01fa8008001600", @ANYRES32=r2, @ANYBLOB="08001700ed6800000400140023c147e609298e820550ed982c247549240ed8e1200262a8bb35945296c09b757c11e50f1651465773b3a7c37b2233ab7856a309709573b914dc62b790ed13609f383f65efa792134ccc0980486fbd94ea554093cf39f9b367d86738584dfcace94c1ce1adaf212fbefcb2b54f03689be2ec3d42da71fcd5111b7a530c3a9d464b3e4a11c5a69546ce7c3a8b5825db0266067102354ba51d6c0fe8ee5c292cb1fca3011e23bd7c2b98f28fb654e82aad077d5d7260c5388829199562a56abf5c64a62f2e050f05336efa32f1dc3179efdb560854687ce095a71abcdc379c6825e7d5714ffb3f78b0ed518793a039c2cd8ef75c7f34209bd9012200c2c65d56422fe28a629e63230c6ef4ef3cf9dc2f856a11366d7cb627b2df69751a16dc5065714400000800d500", @ANYRES32, @ANYBLOB="14003800fe8000000000000000000000000000aa30007d80040035800400a5801c0031002f70726f632f73656c662f736d6170735f726f6c6c75700008004a00", @ANYRES32=r8, @ANYBLOB="771c61cc08002c00", @ANYRES32=r10, @ANYBLOB="04007a802500f88004001a802a676f03444bff83d35b7c6f1417397075987f466d88f51d5ce34ad1f70000000000000400080004000800060009000300000006000900090000000c000b000100000001000000060009000400000004000800"], 0x2c0}, 0x1, 0x0, 0x0, 0x4040004}, 0x10000000) sendmsg$auto_HWSIM_CMD_GET_RADIO(r6, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000280)={0x14, r7, 0xf3e97f51700e57cf, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x884}, 0x8020) write$auto(r0, &(0x7f0000000540)='0\x00\xa6\x1fZ\xb2\'Q8-\x18\xdb\x80\b\xaf\x9f\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xabcOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xad*HqP\x0f\x00\x00\x00\x1c\x89OO}e\xab\xd5\xef\xc0\x04z\xd0I4\x00\x00\x00\xf6\xff\xff\xff\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3\xfbm\f\x84\x13\x04\x92\xeb\xf3\x04\xa3\xf4}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x16O\xacA\xa5[\x18\xb8;\x02tcf\x06r\x06\xeb\xf0\xc4\xcb\x10\xaeUV\x11\xcb\xdd\x81\xbe\xdeL\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdf\x13<\xf0\v\x1f\x14\xf3\xd0\t\xd2L!\x81\xea\x03\xa0\r|%\xbf\x02trg\x9a\xe7)\xc9\xd5\x13\x16\xea\xa1w\x80\v\xe5\b\'\xfe\a\xf4\xaaE\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x80O4\xca\x95\xe7\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4p\xf0\xe2\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xcb\a\x8dO\xe9\xfc\xb7R\t\f+\x7f\xd5\t\xfb\xb2\x9c\xb9UQC\xcdH\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb0\x00S\xda\r\xccm\xe0h\xb4@\x01\"\x06\x0f\\E0)}\xe1b\xfcc;=\xb5\xe0\xfe\x99C\xdb\t\xb2\xba\xfc\xa4\xb0g\xf3\x00\xd24\xc5\x19\fe\xc5\xd8\x06\x9b\xe3\x1cU(\x05\x8f\x8aDE\xb1|\xefe\xd2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc2g\xf5\xc3\xb0\xdc\x85h\xfdfS\x06\x1f@\x8f\x94\x9e\xa1\x12\xc3\xb8\x00G\x00\x00\xd1ksq\xc5hq\xb1\xb9\xbb\xb7\x00'/510, 0x98c7) (fail_nth: 2) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) madvise$auto(0x0, 0x200007, 0x19) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/smaps_rollup\x00', 0x40000, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) io_setup$auto(0x1, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000a00)=""/176, 0xb0) 7.69363343s ago: executing program 0 (id=621): openat$auto_tracing_mark_raw_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/trace_marker_raw\x00', 0x401, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x801, 0x0) socket(0xf, 0x3, 0x2) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x2abc) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) open(&(0x7f0000000100)='./bus\x00', 0x14d27e, 0x72) select$auto(0x6, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x3, 0xfff, 0x1, 0x948b, 0x3, 0x95f4da2d, 0xc, 0x6, 0x62, 0x7, 0x7, 0x6d3f, 0xa, 0x5, 0x5]}, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000140), 0x60a41, 0x0) syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) select$auto(0xe, 0x0, 0x0, &(0x7f0000000100)={[0x1ff, 0x6, 0x1, 0xfffffffffffffff7, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000021, 0x7, 0x6d3e, 0x7fff, 0x2, 0x6]}, 0x0) write$auto(0x3, 0x0, 0x5c8) 7.542693027s ago: executing program 1 (id=622): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cpu.max\x00', 0x20b02, 0x0) sendfile$auto(r0, r0, 0x0, 0x3) sendfile$auto(r0, r0, &(0x7f0000000000)=0x3, 0xad6) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1) pread64$auto(0xffffffffffffffff, 0x0, 0x7fc, 0x400) r1 = socket(0x22, 0x1, 0x2) r2 = openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/kernel/debug/tracing/per_cpu/cpu1/trace\x00', 0x600, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x74c) unshare$auto(0x40000080) sendmmsg$auto(r1, 0x0, 0x3b87, 0xa) mmap$auto(0x0, 0x400008, 0xe4, 0x9b72, 0x2, 0x400) madvise$auto(0x7, 0x4000000000002, 0x6) madvise$auto(0x0, 0xffffffffffff0001, 0x15) socket(0xa, 0x2, 0x88) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.events\x00', 0x60640, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0}, 0x8000) r3 = io_uring_setup$auto(0x6, 0x0) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000200), 0xffffffffffffffff) socket(0x5, 0x800, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_HWSIM_CMD_DEL_RADIO(r4, &(0x7f0000003bc0)={0x0, 0x0, &(0x7f0000003b80)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRESHEX=r3, @ANYRES64=r2], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x2000081) madvise$auto(0x0, 0xffffffffffff0005, 0x17) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x200000, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x5) shmctl$auto_SHM_STAT_ANY(0x7ff, 0xf, &(0x7f0000000180)={{0x16000000, 0xee01, 0xee01, 0x7, 0x12000, 0x9, 0x5}, 0xf, 0xfffffffffffffffd, 0x3f, 0xc, @inferred, @raw=0x7d9, 0x9, 0x0, &(0x7f0000000100)="0fd0a48af0ed02391cf6fcd4785d2921bcd7097eeefed8f8691400fb335d1f4599f9c609618aed2e60703b3f86a159d6b1002a9993a8442bd1ff57d5c208098f9f6ee5247b7ddd4f18971955a758", &(0x7f0000000400)="a34eb4a0705a20bda8e0ce259e84b73c4a5550243e5b618e87ce093cbedb7e656fa5f6b0b358a7536e48d3cd6127e84ecfe1bf644f6a3c26ddd9f016bb0c716fadfb019bcde882261fc0edbd19c3c73160ba56efb468b79fda19b84ca0610687272fdecf628cbf796a9de45009229cdede0ad43a05d8ac82e0f6cf46f505c89eafe9db398ff515a4a29dd11c0781182d719f2ac27aa9322ab71ee7955ad794ef8963094f475586e9aec22c3cc622f41117799ab97d"}) unshare$auto(0x40000080) madvise$auto(0x0, 0x200004, 0x15) 7.542499372s ago: executing program 3 (id=623): mmap$auto(0x0, 0x2020009, 0xa, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = gettid() close_range$auto(0x2, 0x8, 0x0) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f00000001c0), 0x40, 0x0) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0xc0000, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) tkill$auto(r0, 0x7) r1 = socket(0x2b, 0x1, 0x0) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000380), r1) r3 = io_uring_setup$auto(0x4, 0x0) close_range$auto(0x2, r3, 0x0) sendmsg$auto_NL80211_CMD_REMOVE_LINK_STA(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000ac0)={0xbe0, r2, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_CONTROL_PORT_NO_PREAUTH={0x4}, @NL80211_ATTR_DISABLE_HE={0x4}, @NL80211_ATTR_MLO_LINKS={0xbc4, 0x138, 0x0, 0x1, [{0x870, 0x0, 0x0, 0x1, [@NL80211_ATTR_SUPPORT_MESH_AUTH={0x4}, @NL80211_ATTR_IE_PROBE_RESP={0x82d, 0x7f, "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"}, @NL80211_ATTR_HW_TIMESTAMP_ENABLED={0x4}, @NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0xe8}, @NL80211_ATTR_RECEIVE_MULTICAST={0x4}, @NL80211_ATTR_TIMEOUT_REASON={0x8, 0xf8, 0xfff}, @NL80211_ATTR_BSS_BASIC_RATES={0x1f, 0x24, "ce33647d14e2bd13b8717571445176fbbbfa93693ae3ef3f95ed80"}]}, {0x32c, 0x0, 0x0, 0x1, [@NL80211_ATTR_MESH_CONFIG={0x168, 0x23, 0x0, 0x1, [@typed={0x32, 0x66, 0x0, 0x0, @str='/proc/sys/net/ipv4/ip_unprivileged_port_start\x00'}, @generic="be6857d83bea8f3f0338859d1d76a8c0e37d59d350db5e841410a014fa59", @nested={0x6a, 0x30, 0x0, 0x1, [@generic="a120418e636445fa55eec4780be98cad3161e275c5abe1691b6d80aacbee5c39a2aefee17e52dae96800b46ddf2591f91045bca3f4b891e7887aba922a92db8d2c2381ed017c56fa15e72bd3a9cd988aa91a21fa5903", @typed={0x5, 0xf, 0x0, 0x0, @str='\x00'}, @typed={0x8, 0x5a, 0x0, 0x0, @u32=0x23}]}, @generic="e8ba6cce3c2bb55e186a8ec05b15811907a7279b7a524e842a22e38a4fff3583da439c8a2934a16933c82934ea9401b4865ffaafdeee4d9c8a1c61c165eae68e0ae57b09a216c00893fd0727800b995e5919f20c056bc3dce16d25d4f6591e5fd404bbfa14e9f0205e9a9724e49bfd05538be57f1ba9d75cf405920c54c6f47ba16fa249cd36e173176fca4632209188e41750e737a7fc9db8190a74660ec598238d75133e27"]}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x2}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_SAE_PASSWORD={0xb, 0x115, "bfcd7eaad08b0c"}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_NAN_FUNC={0x1a3, 0xf0, 0x0, 0x1, [@typed={0xd3, 0xca, 0x0, 0x0, @binary="fd3788c701db908a1a3e47b8e5c4861b3da945143492f7da6c47fa188584a390aa4a18257ba50d5f01b81dc2dc3ff51644c27906b833bf2095727e580eeddb0fecb9a926958d520f33d558e7bbf66396ed352890b9aedc01da93e265411fd26743c781979bdd6502cb8b1e0ae0a898196af592d721fde6d81c95213209c012b5835df9eb3b205c5aacba664aa46923269f49b23fb9dd6d47d6f163f9a2925965d49d5adb988eb144f8b3b37f27eb3fb2194b7dc93738cc186a5d44609f1c5607ae5f33b275262c22ba2191edb210e8"}, @typed={0x8, 0xeb, 0x0, 0x0, @fd=r3}, @generic="ffd66e83ea6adccdc255e1a23c2cf7c16751e12b74f01edfbcbc7ab2a40aaa2c7ae8f3d271633ebb267ff92025a4675b3393a3cc610920ce894fe333b2e7fcce4c85afb54af3b664299e32151388c5c62845329c317a97840b725c31eb23aac467cea40af3421e1995b58a104ee97bb2229fca90f799b1e81833bedee90300c146186b4b74ad62c3829479ce24a7b5d9b9e8d119d99df7e47a6cb72e8b215d96cd3cf904b1b7b3d9a13ecd9eae179d772822b6dfbf609426f249cd", @typed={0x8, 0xfe, 0x0, 0x0, @ipv4=@loopback}]}]}, {0x8, 0x0, 0x0, 0x1, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0x4}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x9}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x919}]}]}]}, 0xbe0}, 0x1, 0x0, 0x0, 0x40}, 0x20008000) semctl$auto_GETPID(0x4, 0x9e9, 0xb, 0x0) 7.335211075s ago: executing program 3 (id=624): keyctl$auto(0xf, 0x400, 0x8001, 0x100, 0x3) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) read$auto_long_retry_limit_ops_(r0, &(0x7f0000000280)=""/140, 0x8c) r2 = syz_genetlink_get_family_id$auto_hsr(&(0x7f00000000c0), r0) sendmsg$auto_HSR_C_GET_NODE_STATUS(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='\b\x00\x00:', @ANYRES16=r2, @ANYBLOB="04002dbd7000fbdbdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000080) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = socket(0x2, 0x801, 0x106) getsockopt$auto(r3, 0x11c, 0x1, 0x0, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) r4 = openat$auto_hwflags_ops_debugfs(0xffffffffffffff9c, 0x0, 0x101000, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x1, 0xb5, 0x10, 0x7, 0x4, 0xffffffffffffffff, 0xa, "2af051a940806ec05be276cfc83ce63f", 0x0, r4, 0x5, 0x7, 0xe5, 0x3}, 0x10) bpf$auto(0x1a, &(0x7f0000000380)=@link_create={@map_fd, @target_ifindex=r5, 0x3, 0x81, @uprobe_multi={0x81, 0x1ff, 0x3d7e, 0x0, 0x1, 0x4}}, 0x92) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0xffffffffffffb8f1, 0x5, 0x3, 0x613, 0xfffffffffffffffa, 0x100000000000006) r6 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r6, &(0x7f0000000040)='//\xf2\x00', 0x80000000) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), r7) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000002b40)={0x28, r8, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@HWSIM_ATTR_PMSR_SUPPORT={0x14, 0x1a, 0x0, 0x1, [@NL80211_PMSR_ATTR_TYPE_CAPA={0x10, 0x4, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_CAPA_ATTR_MAX_BURSTS_EXPONENT={0x5, 0x7, 0x4}]}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008040}, 0x4000800) 6.627502728s ago: executing program 0 (id=625): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mremap$auto(0x4000, 0xb8, 0x13fd4, 0x3, 0xfffff000) mremap$auto(0x1fc000, 0xfee0, 0x3fd6, 0x3, 0xfffff000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) lstat$auto(0x0, &(0x7f0000000180)={0x3, 0x9, 0xf, 0x5, 0x0, 0xee01, 0x0, 0x10, 0x7, 0x7, 0x23, 0x5319, 0x71, 0x6, 0xfffffffffffffff8, 0x40, 0x9}) timerfd_create$auto(0x9, 0x0) r0 = socket(0xa, 0x1, 0x84) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x10, 0x0, 0x9) recvmmsg$auto(r0, &(0x7f0000000100)={{0x0, 0xbb, 0x0, 0x8, 0x0, 0x81, 0x9}, 0xfffffffb}, 0x4, 0x8, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000001700), r1) r3 = openat$auto_proc_oom_score_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/oom_score_adj\x00', 0x400200, 0x0) write$auto_proc_oom_score_adj_operations_base(r3, &(0x7f0000000040)="7c323d1f2a3c8b03dfe982a851b93ab0d9cb601c812033a7853a1aa22e25a285299a3ba85aedf4f3914f0bc31de2da212d2f2cf3837a38385a0696bd0dec8b26980b491936f64c94d21bff7faaf477267f177df0404eb48f6793d7c50ba38beb7760974b5f4bddcd9bcf3b165cafddf99af518928323ac5ce133559b57d9b870083ad6966f244adbed0f5dc8047292c74e718449fba325bd49e47318ce7f", 0x9e) sendmsg$auto_TIPC_NL_BEARER_DISABLE(r1, &(0x7f0000004080)={0x0, 0x0, &(0x7f0000004040)={&(0x7f0000001740)={0x14, r2, 0x1, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x80) 6.142111886s ago: executing program 0 (id=628): mmap$auto(0x0, 0x2020409, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/fail-nth\x00', 0x88c02, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$auto(r1, 0x0, 0x20) writev$auto(r0, &(0x7f0000000200)={0x0, 0x7}, 0x3) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x80) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/kernel/hung_task_check_interval_secs\x00', 0x88542, 0x0) write$auto(r2, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = socket(0x2b, 0x1, 0x1) setsockopt$auto(r3, 0x0, 0x1, 0x0, 0x1e) 5.93977934s ago: executing program 0 (id=629): close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) mmap$auto(0x0, 0x5, 0xdf, 0x9b72, 0x7, 0x28000) socketpair$auto(0x1e, 0x5, 0x200000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x55) r0 = socket(0x2, 0x3, 0xa) setsockopt$auto(r0, 0x1, 0x3e, 0x0, 0x8) connect$auto(0x3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @multicast1}, 0x55) recvmmsg$auto(0xffffffffffffffff, &(0x7f0000000100)={{0x0, 0xbb, 0x0, 0x8, &(0x7f0000000040), 0x81, 0x9}, 0xfffffffb}, 0x5, 0x6586, 0x0) sendmsg$auto_NL802154_CMD_DEL_INTERFACE(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100080}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20050001}, 0x80) mmap$auto(0x0, 0x2, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram11\x00', 0x20000, 0x0) mseal$auto(0x1ffff000, 0xfffffffffffffff3, 0x0) mmap$auto(0x0, 0x2020006, 0x1000000000000007, 0xeb1, 0x0, 0x1008000) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) madvise$auto(0x108000, 0x2, 0xa) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x400, 0x2) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)) r2 = fanotify_init$auto(0x6a1, 0x2000000000002) read$auto(0xffffffffffffffff, 0x0, 0x1) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) sendmsg$auto_NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) write$auto(r3, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x5, 0x1ff, 0x7fa, 0x4, 0x9, 0x7, r2, 0x20010180, 0xa}, 0x10) r4 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x1036c2, 0x0) ioctl$auto_SNDCTL_DSP_GETBLKSIZE(r4, 0xc0045004, 0x0) getsockopt$auto_SO_TXREHASH(r4, 0x2, 0x4a, 0x0, 0x0) fchdir$auto(r1) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x100842, 0x0) 5.249691937s ago: executing program 0 (id=630): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cpu.max\x00', 0x20b02, 0x0) sendfile$auto(r0, r0, 0x0, 0x3) sendfile$auto(r0, r0, &(0x7f0000000000)=0x3, 0xad6) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1) pread64$auto(0xffffffffffffffff, 0x0, 0x7fc, 0x400) r1 = socket(0x22, 0x1, 0x2) r2 = openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/kernel/debug/tracing/per_cpu/cpu1/trace\x00', 0x600, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x74c) unshare$auto(0x40000080) sendmmsg$auto(r1, 0x0, 0x3b87, 0xa) mmap$auto(0x0, 0x400008, 0xe4, 0x9b72, 0x2, 0x400) madvise$auto(0x7, 0x4000000000002, 0x6) madvise$auto(0x0, 0xffffffffffff0001, 0x15) socket(0xa, 0x2, 0x88) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.events\x00', 0x60640, 0x0) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0}, 0x8000) r3 = io_uring_setup$auto(0x6, 0x0) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000200), 0xffffffffffffffff) socket(0x5, 0x800, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_HWSIM_CMD_DEL_RADIO(r4, &(0x7f0000003bc0)={0x0, 0x0, &(0x7f0000003b80)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRESHEX=r3, @ANYRES64=r2], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x2000081) madvise$auto(0x0, 0xffffffffffff0005, 0x17) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x200000, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x5) shmctl$auto_SHM_STAT_ANY(0x7ff, 0xf, &(0x7f0000000180)={{0x16000000, 0xee01, 0xee01, 0x7, 0x12000, 0x9, 0x5}, 0xf, 0xfffffffffffffffd, 0x3f, 0xc, @inferred, @raw=0x7d9, 0x9, 0x0, &(0x7f0000000100)="0fd0a48af0ed02391cf6fcd4785d2921bcd7097eeefed8f8691400fb335d1f4599f9c609618aed2e60703b3f86a159d6b1002a9993a8442bd1ff57d5c208098f9f6ee5247b7ddd4f18971955a758", &(0x7f0000000400)="a34eb4a0705a20bda8e0ce259e84b73c4a5550243e5b618e87ce093cbedb7e656fa5f6b0b358a7536e48d3cd6127e84ecfe1bf644f6a3c26ddd9f016bb0c716fadfb019bcde882261fc0edbd19c3c73160ba56efb468b79fda19b84ca0610687272fdecf628cbf796a9de45009229cdede0ad43a05d8ac82e0f6cf46f505c89eafe9db398ff515a4a29dd11c0781182d719f2ac27aa9322ab71ee7955ad794ef8963094f475586e9aec22c3cc622f41117799ab97d"}) unshare$auto(0x40000080) madvise$auto(0x0, 0x200004, 0x15) 4.580145875s ago: executing program 2 (id=631): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop6\x00', 0x0, 0x0) ioctl$auto_BLKCLOSEZONE(r0, 0x40101287, &(0x7f0000000100)={0x3ff, 0x2}) socket(0x10, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r3) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="2f212cbd7000fcdbdf252100000008000300", @ANYRES32=r5, @ANYBLOB="1c002d800400"], 0x38}}, 0x4000000) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x68, 0x0, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@HSR_A_IFINDEX={0x8, 0x2, r5}, @HSR_A_IF1_SEQ={0x6, 0x6, 0xffbf}, @HSR_A_IFINDEX={0x8, 0x2, r2}, @HSR_A_NODE_ADDR_B={0xa, 0x5, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @HSR_A_NODE_ADDR={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}}, @HSR_A_NODE_ADDR={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}}, @HSR_A_IFINDEX={0x8, 0x2, r2}, @HSR_A_IF1_SEQ={0x6, 0x6, 0x5}, @HSR_A_IF2_AGE={0x8, 0x4, 0x4b3d}]}, 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) mmap$auto(0x0, 0x20009, 0x20004000010000df, 0xeb2, 0xffffffffffffffff, 0x8000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x401, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 3.900953107s ago: executing program 2 (id=632): syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) mmap$auto(0x2, 0xaa06, 0xdf, 0xeb1, 0xffffffffffffffff, 0x2) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, r0, 0x2) madvise$auto(0x0, 0xffffffffffff0001, 0x15) close_range$auto(0x2, 0x8, 0x0) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000180), 0xffffffffffffffff) msgctl$auto_MSG_INFO(0x9, 0xc, &(0x7f0000000240)={{0x80020000, 0xee00, 0xee01, 0x9, 0x0, 0x7, 0x8}, 0x0, &(0x7f0000000200)=0xd5, 0x6, 0xfffffffffffff90b, 0x1fa1ac89, 0x10, 0x1000, 0x598, 0xf, 0x3, @inferred, @raw=0xffffffff}) sendmsg$auto_TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x4000080) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) prctl$auto(0x1000000003b, 0x7, 0x0, 0x9, 0x7) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) write$auto(r1, 0x0, 0x4) setresuid$auto(0x2, 0x7, 0x8080) ioprio_get$auto(0x3, 0x2) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/pci0000:00/0000:00:03.0/resource0\x00', 0x103000, 0x0) readv$auto(0x3, &(0x7f0000003080)={&(0x7f0000003040), 0x4}, 0x9) 3.65710939s ago: executing program 3 (id=633): openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x21ae02, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) keyctl$auto(0x3, 0xfffffffffffffffd, 0x0, 0x0, 0xffffffffffffffff) unshare$auto(0x7ff) write$auto(0xca, &(0x7f0000000000)='\x04>\x01\x01\x00\x00\x00\x01\x00\xb6', 0x7f) socket(0xa, 0x5, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x24000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/dummy_hcd.1/usb2/removable\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/fs/cifs/SecurityFlags\x00', 0x48041, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_drm_connector_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/dri/vkms/Writeback-1/force\x00', 0x84200, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x100008000) close_range$auto(0x2, 0x8, 0x0) setfsgid$auto(0x9) mknod$auto(&(0x7f0000000040)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00', 0x1, 0x4) lstat$auto(&(0x7f0000000500)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00', 0x0) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) r0 = socket(0x11, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8953, 0x0) socket(0x10, 0x2, 0x4) io_uring_setup$auto(0x2, 0x0) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) r1 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000001cc0), 0x121c40, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000000c0)={{0x20000000, 0x2, 0x200800, 0x100009, 0x4}, "0dd7fd004929347eeeccdf0732f77b1f6de0ead51768a257a97ca5e9ca6310ea"}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer\x00', 0x40, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x163340, 0x2a) 3.350565617s ago: executing program 2 (id=634): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/orangefs/perf_history_size\x00', 0x1182, 0x0) io_uring_setup$auto(0x86, 0x0) r1 = socket(0x10, 0x4, 0xffffffc0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x120e2, 0x0) write$auto(r3, 0x0, 0x81) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r4, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010325bd7040ffdbdf250a0000000c0002006e6c383032313100"], 0x28}, 0x1, 0x0, 0x0, 0x30000881}, 0xc040810) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_mac80211_hwsim(0x0, 0xffffffffffffffff) r8 = geteuid() msgctl$auto_MSG_STAT_ANY(0x10000, 0xd, &(0x7f0000000340)={{0xa0, 0xee01, 0xee01, 0x7, 0x0, 0x5, 0x9dc4}, &(0x7f00000000c0)=0x4, 0x0, 0x2, 0x5dd8, 0x7fff, 0xb12, 0x2, 0x8000, 0x4, 0xac0, @inferred, @inferred=0xffffffffffffffff}) r10 = setfsuid$auto(0xee00) setresuid$auto(0xffffffffffffffff, r10, 0x8000) msgctl$auto_MSG_STAT(0xbc7, 0xb, &(0x7f0000000480)={{0x8, 0xffffffffffffffff, 0x0, 0x8, 0x10001, 0xfd36, 0xfff9}, &(0x7f00000003c0)=0x3, &(0x7f0000000440)=0x7f, 0x7fffffff, 0x4, 0x1, 0x8000000000000000, 0x6, 0xc210, 0x3, 0x3, @inferred=0xffffffffffffffff, @raw=0x45}) setresuid$auto(r9, r10, r11) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r1, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="c0020000", @ANYRES16=0x0, @ANYBLOB="100028bd7000fbdbdf25030000007902028055966726eb2c50fc833990e033caf7d4a0810673c746c88b509902eb373a697ab827894d11296c2c26bc7394e459c97021b7ac53c98b43b5af99985920326fd45dca13a4b2cfe1c2082265e49d2f153052c021392c713b54b3e81d86c429af2dceae10decfba701bea8e0686ec3ff8e2e34ae16b83d5a155b07a3eaaa8cf6ce4ff1ec35c234e8cd8304effe01e6efce374c74e08efc7afae761953b46b59a15e5d027ca10e2789c2a200b1faf9892ad8b867ed7f2b3a01fa8008001600", @ANYRES32=r2, @ANYBLOB="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", @ANYRES32, @ANYBLOB="14003800fe8000000000000000000000000000aa30007d80040035800400a5801c0031002f70726f632f73656c662f736d6170735f726f6c6c75700008004a00", @ANYRES32=r8, @ANYBLOB="771c61cc08002c00", @ANYRES32=r10, @ANYBLOB="04007a802500f88004001a802a676f03444bff83d35b7c6f1417397075987f466d88f51d5ce34ad1f70000000000000400080004000800060009000300000006000900090000000c000b000100000001000000060009000400000004000800"], 0x2c0}, 0x1, 0x0, 0x0, 0x4040004}, 0x10000000) sendmsg$auto_HWSIM_CMD_GET_RADIO(r6, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000280)={0x14, r7, 0xf3e97f51700e57cf, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x884}, 0x8020) write$auto(r0, &(0x7f0000000540)='0\x00\xa6\x1fZ\xb2\'Q8-\x18\xdb\x80\b\xaf\x9f\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xabcOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xad*HqP\x0f\x00\x00\x00\x1c\x89OO}e\xab\xd5\xef\xc0\x04z\xd0I4\x00\x00\x00\xf6\xff\xff\xff\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3\xfbm\f\x84\x13\x04\x92\xeb\xf3\x04\xa3\xf4}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x16O\xacA\xa5[\x18\xb8;\x02tcf\x06r\x06\xeb\xf0\xc4\xcb\x10\xaeUV\x11\xcb\xdd\x81\xbe\xdeL\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdf\x13<\xf0\v\x1f\x14\xf3\xd0\t\xd2L!\x81\xea\x03\xa0\r|%\xbf\x02trg\x9a\xe7)\xc9\xd5\x13\x16\xea\xa1w\x80\v\xe5\b\'\xfe\a\xf4\xaaE\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x80O4\xca\x95\xe7\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4p\xf0\xe2\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xcb\a\x8dO\xe9\xfc\xb7R\t\f+\x7f\xd5\t\xfb\xb2\x9c\xb9UQC\xcdH\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb0\x00S\xda\r\xccm\xe0h\xb4@\x01\"\x06\x0f\\E0)}\xe1b\xfcc;=\xb5\xe0\xfe\x99C\xdb\t\xb2\xba\xfc\xa4\xb0g\xf3\x00\xd24\xc5\x19\fe\xc5\xd8\x06\x9b\xe3\x1cU(\x05\x8f\x8aDE\xb1|\xefe\xd2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc2g\xf5\xc3\xb0\xdc\x85h\xfdfS\x06\x1f@\x8f\x94\x9e\xa1\x12\xc3\xb8\x00G\x00\x00\xd1ksq\xc5hq\xb1\xb9\xbb\xb7\x00'/510, 0x98c7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) madvise$auto(0x0, 0x200007, 0x19) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/smaps_rollup\x00', 0x40000, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) io_setup$auto(0x1, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000a00)=""/176, 0xb0) 2.893214316s ago: executing program 3 (id=635): openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dri/card0\x00', 0x440, 0x0) io_uring_setup$auto(0x6, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_timers_operations_base(0xffffffffffffff9c, &(0x7f0000000040), 0x1a3540, 0x0) 2.617942594s ago: executing program 1 (id=636): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x10, 0x2, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/dummy_hcd.7/usb8/bConfigurationValue\x00', 0x10b042, 0x0) sendfile$auto(r0, r0, 0x0, 0x2) (fail_nth: 2) socket(0xa, 0xa, 0x88) 2.143320938s ago: executing program 2 (id=637): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000e3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) preadv2$auto(r1, &(0x7f0000000040)={&(0x7f0000000380), 0x6}, 0x2, 0x1000, 0x3, 0x8) madvise$auto(0x0, 0x2000040080000004, 0xe) unshare$auto(0x40000080) r2 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) ioctl$auto_PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f000000c380)={0x60, 0x0, 0x100000, 0x7fffffffefff, 0x0, 0x1, 0x9, 0xfffffffffffffffb, 0x0, 0x8, 0x0, 0x9}) 1.843854293s ago: executing program 3 (id=638): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/orangefs/perf_history_size\x00', 0x1182, 0x0) io_uring_setup$auto(0x86, 0x0) r1 = socket(0x10, 0x4, 0xffffffc0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x120e2, 0x0) write$auto(r3, 0x0, 0x81) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r4, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010325bd7040ffdbdf250a0000000c0002006e6c383032313100"], 0x28}, 0x1, 0x0, 0x0, 0x30000881}, 0xc040810) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = geteuid() msgctl$auto_MSG_STAT_ANY(0x10000, 0xd, &(0x7f0000000340)={{0xa0, 0xee01, 0xee01, 0x7, 0x0, 0x5, 0x9dc4}, &(0x7f00000000c0)=0x4, 0x0, 0x2, 0x5dd8, 0x7fff, 0xb12, 0x2, 0x8000, 0x4, 0xac0, @inferred, @inferred=0xffffffffffffffff}) r9 = setfsuid$auto(0xee00) setresuid$auto(0xffffffffffffffff, r9, 0x8000) msgctl$auto_MSG_STAT(0xbc7, 0xb, &(0x7f0000000480)={{0x8, 0xffffffffffffffff, 0x0, 0x8, 0x10001, 0xfd36, 0xfff9}, &(0x7f00000003c0)=0x3, &(0x7f0000000440)=0x7f, 0x7fffffff, 0x4, 0x1, 0x8000000000000000, 0x6, 0xc210, 0x3, 0x3, @inferred=0xffffffffffffffff, @raw=0x45}) setresuid$auto(r8, r9, r10) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r1, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="c002", @ANYRES16=0x0, @ANYBLOB="100028bd7000fbdbdf25030000007902028055966726eb2c50fc833990e033caf7d4a0810673c746c88b509902eb373a697ab827894d11296c2c26bc7394e459c97021b7ac53c98b43b5af99985920326fd45dca13a4b2cfe1c2082265e49d2f153052c021392c713b54b3e81d86c429af2dceae10decfba701bea8e0686ec3ff8e2e34ae16b83d5a155b07a3eaaa8cf6ce4ff1ec35c234e8cd8304effe01e6efce374c74e08efc7afae761953b46b59a15e5d027ca10e2789c2a200b1faf9892ad8b867ed7f2b3a01fa8008001600", @ANYRES32=r2, @ANYBLOB="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", @ANYRES32, @ANYBLOB="14003800fe8000000000000000000000000000aa30007d80040035800400a5801c0031002f70726f632f73656c662f736d6170735f726f6c6c75700008004a00", @ANYRES32=r7, @ANYBLOB="771c61cc08002c00", @ANYRES32=r9, @ANYBLOB="04007a802500f88004001a802a676f03444bff83d35b7c6f1417397075987f466d88f51d5ce34ad1f70000000000000400080004000800060009000300000006000900090000000c000b000100000001000000060009000400000004000800"], 0x2c0}, 0x1, 0x0, 0x0, 0x4040004}, 0x10000000) sendmsg$auto_HWSIM_CMD_GET_RADIO(r6, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000280)={0x14, 0x0, 0xf3e97f51700e57cf, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x884}, 0x8020) write$auto(r0, &(0x7f0000000540)='0\x00\xa6\x1fZ\xb2\'Q8-\x18\xdb\x80\b\xaf\x9f\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xabcOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xad*HqP\x0f\x00\x00\x00\x1c\x89OO}e\xab\xd5\xef\xc0\x04z\xd0I4\x00\x00\x00\xf6\xff\xff\xff\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3\xfbm\f\x84\x13\x04\x92\xeb\xf3\x04\xa3\xf4}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x16O\xacA\xa5[\x18\xb8;\x02tcf\x06r\x06\xeb\xf0\xc4\xcb\x10\xaeUV\x11\xcb\xdd\x81\xbe\xdeL\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdf\x13<\xf0\v\x1f\x14\xf3\xd0\t\xd2L!\x81\xea\x03\xa0\r|%\xbf\x02trg\x9a\xe7)\xc9\xd5\x13\x16\xea\xa1w\x80\v\xe5\b\'\xfe\a\xf4\xaaE\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x80O4\xca\x95\xe7\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4p\xf0\xe2\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xcb\a\x8dO\xe9\xfc\xb7R\t\f+\x7f\xd5\t\xfb\xb2\x9c\xb9UQC\xcdH\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb0\x00S\xda\r\xccm\xe0h\xb4@\x01\"\x06\x0f\\E0)}\xe1b\xfcc;=\xb5\xe0\xfe\x99C\xdb\t\xb2\xba\xfc\xa4\xb0g\xf3\x00\xd24\xc5\x19\fe\xc5\xd8\x06\x9b\xe3\x1cU(\x05\x8f\x8aDE\xb1|\xefe\xd2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc2g\xf5\xc3\xb0\xdc\x85h\xfdfS\x06\x1f@\x8f\x94\x9e\xa1\x12\xc3\xb8\x00G\x00\x00\xd1ksq\xc5hq\xb1\xb9\xbb\xb7\x00'/510, 0x98c7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) madvise$auto(0x0, 0x200007, 0x19) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/smaps_rollup\x00', 0x40000, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) io_setup$auto(0x1, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000a00)=""/176, 0xb0) 1.686617743s ago: executing program 1 (id=639): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cpu.max\x00', 0x20b02, 0x0) sendfile$auto(r0, r0, 0x0, 0x3) sendfile$auto(r0, r0, &(0x7f0000000000)=0x3, 0xad6) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1) pread64$auto(0xffffffffffffffff, 0x0, 0x7fc, 0x400) r1 = socket(0x22, 0x1, 0x2) r2 = openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/kernel/debug/tracing/per_cpu/cpu1/trace\x00', 0x600, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x74c) unshare$auto(0x40000080) sendmmsg$auto(r1, 0x0, 0x3b87, 0xa) mmap$auto(0x0, 0x400008, 0xe4, 0x9b72, 0x2, 0x400) madvise$auto(0x7, 0x4000000000002, 0x6) madvise$auto(0x0, 0xffffffffffff0001, 0x15) socket(0xa, 0x2, 0x88) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.events\x00', 0x60640, 0x0) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0}, 0x8000) r3 = io_uring_setup$auto(0x6, 0x0) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000200), 0xffffffffffffffff) socket(0x5, 0x800, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_HWSIM_CMD_DEL_RADIO(r4, &(0x7f0000003bc0)={0x0, 0x0, &(0x7f0000003b80)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRESHEX=r3, @ANYRES64=r2], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x2000081) madvise$auto(0x0, 0xffffffffffff0005, 0x17) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x200000, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x5) shmctl$auto_SHM_STAT_ANY(0x7ff, 0xf, &(0x7f0000000180)={{0x16000000, 0xee01, 0xee01, 0x7, 0x12000, 0x9, 0x5}, 0xf, 0xfffffffffffffffd, 0x3f, 0xc, @inferred, @raw=0x7d9, 0x9, 0x0, &(0x7f0000000100)="0fd0a48af0ed02391cf6fcd4785d2921bcd7097eeefed8f8691400fb335d1f4599f9c609618aed2e60703b3f86a159d6b1002a9993a8442bd1ff57d5c208098f9f6ee5247b7ddd4f18971955a758", &(0x7f0000000400)="a34eb4a0705a20bda8e0ce259e84b73c4a5550243e5b618e87ce093cbedb7e656fa5f6b0b358a7536e48d3cd6127e84ecfe1bf644f6a3c26ddd9f016bb0c716fadfb019bcde882261fc0edbd19c3c73160ba56efb468b79fda19b84ca0610687272fdecf628cbf796a9de45009229cdede0ad43a05d8ac82e0f6cf46f505c89eafe9db398ff515a4a29dd11c0781182d719f2ac27aa9322ab71ee7955ad794ef8963094f475586e9aec22c3cc622f41117799ab97d"}) unshare$auto(0x40000080) madvise$auto(0x0, 0x200004, 0x15) 1.335945522s ago: executing program 0 (id=640): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/orangefs/perf_history_size\x00', 0x1182, 0x0) io_uring_setup$auto(0x86, 0x0) r1 = socket(0x10, 0x4, 0xffffffc0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x120e2, 0x0) write$auto(r3, 0x0, 0x81) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r4, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010325bd7040ffdbdf250a0000000c0002006e6c383032313100"], 0x28}, 0x1, 0x0, 0x0, 0x30000881}, 0xc040810) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_mac80211_hwsim(0x0, 0xffffffffffffffff) r8 = geteuid() msgctl$auto_MSG_STAT_ANY(0x10000, 0xd, &(0x7f0000000340)={{0xa0, 0xee01, 0xee01, 0x7, 0x0, 0x5, 0x9dc4}, &(0x7f00000000c0)=0x4, 0x0, 0x2, 0x5dd8, 0x7fff, 0xb12, 0x2, 0x8000, 0x4, 0xac0, @inferred, @inferred=0xffffffffffffffff}) r10 = setfsuid$auto(0xee00) setresuid$auto(r8, r10, r8) msgctl$auto_MSG_STAT(0xbc7, 0xb, &(0x7f0000000480)={{0x8, 0xffffffffffffffff, 0x0, 0x8, 0x10001, 0xfd36, 0xfff9}, &(0x7f00000003c0)=0x3, &(0x7f0000000440)=0x7f, 0x7fffffff, 0x4, 0x1, 0x8000000000000000, 0x6, 0xc210, 0x3, 0x3, @inferred=0xffffffffffffffff, @raw=0x45}) setresuid$auto(r9, r10, r11) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r1, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="c0020000", @ANYRES16=0x0, @ANYBLOB="100028bd7000fbdbdf25030000007902028055966726eb2c50fc833990e033caf7d4a0810673c746c88b509902eb373a697ab827894d11296c2c26bc7394e459c97021b7ac53c98b43b5af99985920326fd45dca13a4b2cfe1c2082265e49d2f153052c021392c713b54b3e81d86c429af2dceae10decfba701bea8e0686ec3ff8e2e34ae16b83d5a155b07a3eaaa8cf6ce4ff1ec35c234e8cd8304effe01e6efce374c74e08efc7afae761953b46b59a15e5d027ca10e2789c2a200b1faf9892ad8b867ed7f2b3a01fa8008001600", @ANYRES32=r2, @ANYBLOB="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", @ANYRES32, @ANYBLOB="14003800fe8000000000000000000000000000aa30007d80040035800400a5801c0031002f70726f632f73656c662f736d6170735f726f6c6c75700008004a00", @ANYRES32=r8, @ANYBLOB="771c61cc08002c00", @ANYRES32=r10, @ANYBLOB="04007a802500f88004001a802a676f03444bff83d35b7c6f1417397075987f466d88f51d5ce34ad1f70000000000000400080004000800060009000300000006000900090000000c000b000100000001000000060009000400000004000800"], 0x2c0}, 0x1, 0x0, 0x0, 0x4040004}, 0x10000000) sendmsg$auto_HWSIM_CMD_GET_RADIO(r6, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000280)={0x14, r7, 0xf3e97f51700e57cf, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x884}, 0x8020) write$auto(r0, &(0x7f0000000540)='0\x00\xa6\x1fZ\xb2\'Q8-\x18\xdb\x80\b\xaf\x9f\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xabcOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xad*HqP\x0f\x00\x00\x00\x1c\x89OO}e\xab\xd5\xef\xc0\x04z\xd0I4\x00\x00\x00\xf6\xff\xff\xff\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3\xfbm\f\x84\x13\x04\x92\xeb\xf3\x04\xa3\xf4}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x16O\xacA\xa5[\x18\xb8;\x02tcf\x06r\x06\xeb\xf0\xc4\xcb\x10\xaeUV\x11\xcb\xdd\x81\xbe\xdeL\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdf\x13<\xf0\v\x1f\x14\xf3\xd0\t\xd2L!\x81\xea\x03\xa0\r|%\xbf\x02trg\x9a\xe7)\xc9\xd5\x13\x16\xea\xa1w\x80\v\xe5\b\'\xfe\a\xf4\xaaE\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x80O4\xca\x95\xe7\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4p\xf0\xe2\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xcb\a\x8dO\xe9\xfc\xb7R\t\f+\x7f\xd5\t\xfb\xb2\x9c\xb9UQC\xcdH\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb0\x00S\xda\r\xccm\xe0h\xb4@\x01\"\x06\x0f\\E0)}\xe1b\xfcc;=\xb5\xe0\xfe\x99C\xdb\t\xb2\xba\xfc\xa4\xb0g\xf3\x00\xd24\xc5\x19\fe\xc5\xd8\x06\x9b\xe3\x1cU(\x05\x8f\x8aDE\xb1|\xefe\xd2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc2g\xf5\xc3\xb0\xdc\x85h\xfdfS\x06\x1f@\x8f\x94\x9e\xa1\x12\xc3\xb8\x00G\x00\x00\xd1ksq\xc5hq\xb1\xb9\xbb\xb7\x00'/510, 0x98c7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto(0x0, 0x1, r12, 0x0, 0xffffffffffff6d4a) madvise$auto(0x0, 0x200007, 0x19) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/smaps_rollup\x00', 0x40000, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) io_setup$auto(0x1, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000a00)=""/176, 0xb0) 1.138702358s ago: executing program 2 (id=641): prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2) r0 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x0, 0x0) ioctl$auto(r0, 0x64c4, 0xffffffffffffffff) socket(0x10, 0x4, 0xffffffc0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x406, 0x0, 0x8fd6, 0x948b, 0x3, 0x35f4da0a, 0x4000000000005, 0x6, 0x62, 0x8, 0x7, 0x1, 0x10b, 0x100, 0x18]}, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d7) write$auto(0xffffffffffffffff, &(0x7f0000000180)='1\x00\\\xa0N?F`\x12\xfa\b\x1c\xc7k\x9eC\xbf^\xce\x14\x10\x99\xfa<\xf5\xe2GPc\xc6\x80.\xa9\xf3\x92\xac\x96>Fi-\xd81R\xfc\xde\x0f\xf9\x02p\x9f\x80\x86S\x9b\xd6\x81\xbd-\xaaWy\x19\xe2\x96\xc3\xe1\xad)Aa\xd2\xe6.\xfdZ\f\xdeG\xcb\x81\xaeH\xf2p\f\xc9\xb2\xf6\x91\xfb\r\xe8\xe0(\x94F7\xf5L\xf0\x14\xc3\x9a\xac0\x8e\x91\x01\x1bc\x1d-^r\xcc\xc6\"*Y\x18|\xf2\x87', 0x281) write$auto(0xffffffffffffffff, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x4, 0x15) open(&(0x7f0000000000)='./cgroup\x00', 0x0, 0x64) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000000)={{0x0, 0x6, 0x0, 0x106, 0x0, 0x1, 0x3}, 0x57177fc5}, 0xd, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/can/rcvlist_eff\x00', 0xb00, 0x0) read$auto(0x3, 0x0, 0xf34) 138.320256ms ago: executing program 2 (id=642): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/orangefs/perf_history_size\x00', 0x1182, 0x0) io_uring_setup$auto(0x86, 0x0) r1 = socket(0x10, 0x4, 0xffffffc0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x120e2, 0x0) write$auto(r3, 0x0, 0x81) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r4, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010325bd7040ffdbdf250a0000000c0002006e6c383032313100"], 0x28}, 0x1, 0x0, 0x0, 0x30000881}, 0xc040810) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = geteuid() msgctl$auto_MSG_STAT_ANY(0x10000, 0xd, &(0x7f0000000340)={{0xa0, 0xee01, 0xee01, 0x7, 0x0, 0x5, 0x9dc4}, &(0x7f00000000c0)=0x4, 0x0, 0x2, 0x5dd8, 0x7fff, 0xb12, 0x2, 0x8000, 0x4, 0xac0, @inferred, @inferred=0xffffffffffffffff}) r9 = setfsuid$auto(0xee00) setresuid$auto(0xffffffffffffffff, r9, 0x8000) msgctl$auto_MSG_STAT(0xbc7, 0xb, &(0x7f0000000480)={{0x8, 0xffffffffffffffff, 0x0, 0x8, 0x10001, 0xfd36, 0xfff9}, &(0x7f00000003c0)=0x3, &(0x7f0000000440)=0x7f, 0x7fffffff, 0x4, 0x1, 0x8000000000000000, 0x6, 0xc210, 0x3, 0x3, @inferred=0xffffffffffffffff, @raw=0x45}) setresuid$auto(r8, r9, r10) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r1, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="c002", @ANYRES16=0x0, @ANYBLOB="100028bd7000fbdbdf25030000007902028055966726eb2c50fc833990e033caf7d4a0810673c746c88b509902eb373a697ab827894d11296c2c26bc7394e459c97021b7ac53c98b43b5af99985920326fd45dca13a4b2cfe1c2082265e49d2f153052c021392c713b54b3e81d86c429af2dceae10decfba701bea8e0686ec3ff8e2e34ae16b83d5a155b07a3eaaa8cf6ce4ff1ec35c234e8cd8304effe01e6efce374c74e08efc7afae761953b46b59a15e5d027ca10e2789c2a200b1faf9892ad8b867ed7f2b3a01fa8008001600", @ANYRES32=r2, @ANYBLOB="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", @ANYRES32, @ANYBLOB="14003800fe8000000000000000000000000000aa30007d80040035800400a5801c0031002f70726f632f73656c662f736d6170735f726f6c6c75700008004a00", @ANYRES32=r7, @ANYBLOB="771c61cc08002c00", @ANYRES32=r9, @ANYBLOB="04007a802500f88004001a802a676f03444bff83d35b7c6f1417397075987f466d88f51d5ce34ad1f70000000000000400080004000800060009000300000006000900090000000c000b000100000001000000060009000400000004000800"], 0x2c0}, 0x1, 0x0, 0x0, 0x4040004}, 0x10000000) sendmsg$auto_HWSIM_CMD_GET_RADIO(r6, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000280)={0x14, 0x0, 0xf3e97f51700e57cf, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x884}, 0x8020) write$auto(r0, &(0x7f0000000540)='0\x00\xa6\x1fZ\xb2\'Q8-\x18\xdb\x80\b\xaf\x9f\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xabcOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xad*HqP\x0f\x00\x00\x00\x1c\x89OO}e\xab\xd5\xef\xc0\x04z\xd0I4\x00\x00\x00\xf6\xff\xff\xff\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3\xfbm\f\x84\x13\x04\x92\xeb\xf3\x04\xa3\xf4}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x16O\xacA\xa5[\x18\xb8;\x02tcf\x06r\x06\xeb\xf0\xc4\xcb\x10\xaeUV\x11\xcb\xdd\x81\xbe\xdeL\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdf\x13<\xf0\v\x1f\x14\xf3\xd0\t\xd2L!\x81\xea\x03\xa0\r|%\xbf\x02trg\x9a\xe7)\xc9\xd5\x13\x16\xea\xa1w\x80\v\xe5\b\'\xfe\a\xf4\xaaE\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x80O4\xca\x95\xe7\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4p\xf0\xe2\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xcb\a\x8dO\xe9\xfc\xb7R\t\f+\x7f\xd5\t\xfb\xb2\x9c\xb9UQC\xcdH\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb0\x00S\xda\r\xccm\xe0h\xb4@\x01\"\x06\x0f\\E0)}\xe1b\xfcc;=\xb5\xe0\xfe\x99C\xdb\t\xb2\xba\xfc\xa4\xb0g\xf3\x00\xd24\xc5\x19\fe\xc5\xd8\x06\x9b\xe3\x1cU(\x05\x8f\x8aDE\xb1|\xefe\xd2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc2g\xf5\xc3\xb0\xdc\x85h\xfdfS\x06\x1f@\x8f\x94\x9e\xa1\x12\xc3\xb8\x00G\x00\x00\xd1ksq\xc5hq\xb1\xb9\xbb\xb7\x00'/510, 0x98c7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) madvise$auto(0x0, 0x200007, 0x19) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/smaps_rollup\x00', 0x40000, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) io_setup$auto(0x1, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000a00)=""/176, 0xb0) 0s ago: executing program 3 (id=643): r0 = ioctl$auto_SIOCSIFHWADDR2(0xffffffffffffffff, 0x8924, &(0x7f0000000040)="b499a074b70ed78aa1d3e3fcac9736ec83223354cd6da7b58d11f0e2a01ad368261ffba763690fd3b173f036005c78a969c9b552866745eaa03e5f8ab5d7eaa6a6c733b3250186dafc35b3921886ef40656ab673eec1abffeff28fde60661e0428b230c4bf06ae6e380c77ac5972942d0310f9a82759dfd87d51415a080dce051e08c2104ca8d81b68ce84c6fa58094f79676a946f7ac60cb64bbd07ef33e5") mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x8000000000000003, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) r1 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0x8402, 0x0) ioctl$auto_SG_SET_FORCE_PACK_ID(r1, 0x227b, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto(0x3, 0x0, 0x5c8) read$auto(r1, 0x0, 0xfff) mmap$auto(0x8, 0x400005, 0x1df, 0x40000009b70, r0, 0x8000) socket(0x10, 0x2, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/loop9/queue/nr_requests\x00', 0x10b042, 0x0) r3 = openat$auto_nvmf_dev_fops_fabrics(0xffffffffffffff9c, &(0x7f00000004c0), 0x101202, 0x0) write$auto_nvmf_dev_fops_fabrics(r3, 0x0, 0x0) sendfile$auto(r2, r2, 0x0, 0x2) bpf$auto(0x6, 0xffffffffffffffff, 0x0) r4 = socket(0x2, 0x3, 0x6) r5 = pipe$auto(&(0x7f0000000780)=0xffffffffffffffff) splice$auto(r6, 0x0, r4, &(0x7f0000002100)=0x1ff, 0x768, 0x6) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x2b, 0x1, 0x1) r7 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000300)='/dev/mtd0\x00', 0x28082, 0x0) r8 = socket(0x29, 0x2, 0x0) sendmsg$auto_NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r8, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x4) syz_genetlink_get_family_id$auto_netdev(&(0x7f00000002c0), r8) write$auto_proc_pid_set_comm_operations_base(r2, &(0x7f00000007c0)="9f0ec2490f934bac486410e3b7fbfd19198943bde88e7349c92cb5a0930d0ced8c77eee56622a92269ae857a71c86b40af595f993b4fdcf52f303049ddd73d772d7bc646900b1afbf50f19d07b8c0412029a1e7d8415834b76e3e7bd9381628e1871c728ca826085d9492c4ab8e139dd811f9eecdc6ecf7623aadd51ea47862ec872f74b72057de2992ce29956f16b89994717fed6447c3f685c4689e0e76fe1f094e130f538affb48db3496e27bc02c1e62a854beb1eedf7afe95e02966ba53f55f51c8cf7a7fc64e62ab6ab577586c99a682c85603c043321ebc9647a1c3dbe257520c7e635c9ffa97589a8243678c0bb8e92679c8a8d33b430976c73942436c900ea17f38c80845fc0016e1db7442f1969d11c678b68a7b19c710d43193cbf180e7ab8d45079b65dddc963bafa4954e6530ac9f79c41662e47dfb7d72a973446a033df1ac7b09eefda249b364a24e3a413fafe8fbec11dc540dbbc3ce091f14efbb72b959ce79b6176018fd40db50b142d6bbf44e93ef9a24f51b1c6885b8faec68276f2ced73d8176ee2f46e9648fa55baa376a5066e58d393de80700f6e0d770e7f56ebf81bf401fdbb40eebffa82c477dddc8c6e9b7f6a0f8864502376ba2f538af5d98556069af93c4492768e04695088c82bf228301718fdf11cbc420cd7050d7d2eee67e9f95270bb49279ed8170ae42405539c05644dcb8843ee667cfe47c786dfe6adfbee73ce36cee7b17c7908bafbf1cdf60c56f6a93d3aba4cbf43d8f819d447bca883dcd75c7d0aae33c004aea6e54e5614cd487006b575b14b9923389cd35ecaf00df66396e28a9242969c8db232953e076a2d159f4333425cfd8a4f4334a73475ec38c5b7c1e722a958aca4012ca398a66cb7f3260a2e67c79f273ddd9e71fd9d209f67e388a935125a86a3764c221ca409604bba31e6c4c3c09c4baf90a1fb7d71a30e6a848312082bf59295d9366efedbbf903ca27dd86b49ed425f3d1248e5abb4c86a9d2da496581c30f8c450a800e3ece484cbc03e00fcb4c28d460e8c5512b16eef5ca5568a24d5db52fa6d56c32f8332582b2a1832b948ff1dd4009b7839fb304749700cc92453067975bf61ab91ce9d34f021dd10ce42d7357ab81c59b7c0ab2195a754f2420c2efbda1779db651924782059ec0586cd8311028548ed6c67cab36d42816935c09c0144a69a0ef984be9cd925f72250381cc67a3bda3b07810ef1138525d9fa0e51c8fabe234e3dfc0df64a8cd9a291043ae908c809758202f3a2cba07ccdf84cc7b6a2b5d4e11a1b1cd98dfced9f1598784ff155101a465214af5d7f2005037085479ba17d508b2d66dd74a49801c49eaeeb6352ed855ef4bdd118f32e1a4204e290f32cad6cdac7d130f0562891fe7f8b5de53828c06fc6e1531b13bb94bb9f2a6893b4675fe8f132dffecab3ce98a32cc64a156158c0eac3211726addcaa96258c8c707f0588c25f816bbf2a3c1dae48dfffccc5fca4ce132fab7e264660560b0327a3e83371b5b1c8ddd8b42cf8508a5cea4100732dd5d56da0be31040f6bf288659e8aad3b38f00ea2d4be80b1fd477ce8f1a28882c7bb8d848aa2712b0b330e9370483031b1be49ab604569b1f228250fb667a62a14598a00f8c09aa73faa20385edcd6bdf309a9187ceb16f031e99a156da5e1d87eb2fe64203e833ca34babe42f5c7b485cf257e39fdc1e9052b3b9efd0176a8850e527c5964ef0ae68a0db8ffbf9593d521ac8ff7fbace4280e28001f0c9ce0b42aa59d925688318a1f6d78002dc3120ba811239dfd67c31064fbb0a8f32d902f65cb66311d3dec32a3805fdb8133d185127669eef91f6c9ecf6629fd4552bba502dfcae105583584da60d2fa8cda8e98852def0e97e23fb23e35112b4f8fbe5e0a40e6e3462d801d3a284ca41052ff6602d0198b8f1ea4d0f88c6890017c4a86c80397eaf9de2d3b776bd3c4a9c34571ffcabaf619b70b30341aec7afc9fff1ddd254f100538775dfee033d8991ccc04e8d79e4edfe46682a51aca6804c483d88a776eb9ae620d78d322d41b07b9e66971a8c245b438fbb5969c5e7bf6a64fc564d06dc0978d62de21bae78121f556795472fb49f39dff5e852a8a398717b5b31f5e5687c4db31a09368436d6d2e4e9271b3855c6c57e1b90f1e72d901d2384346ade925ae5d9edb64dea5d88dfbe0669d4d05bfb12977d71169b58ea3e7231d6223f5acd0ad4fbab7de98f4c4130f28c801d53d7a15403e4ab8c4657683c6fcadb6df2ac7e3ac3268c77067913e1ed17bfa3d92102fb7c2e9aed992c99c51aba82442745959c81729c143709069f8707edebf9a9ebbb901c967689014641026b4fa82ad5a8fcc7be066852b0e33ab4a3a5b02da52c4bd7003cd8443dfdbfa195bc2d3815f20eb15ab3b74b302e88812e96494baa1a971e1e0a1a1fe439fe6622249f16c6cd6e9bef67fc362fef9c15bba0f966217229c955082a64dfb84a69c02048287439e11f9f098a077f6e2f6f64da0e6154923ee403a34cf2dbb8ab629c267f58944a0221663bd617890c657f768b4e7d6e78752ca1703dba75f2670feb919967a9ecc1001d4da59752437bc44b9e21be149b4c54de2c7fda591b4d729de65a42bb5ab9f5f9bc2b8e238988f6f0dc154dc929af4012e19706385215d849ce23b4ac00c625b43497a5ad69b21741212134b93c5e8977d53be98d34c1efb4049bfb4f2c44093729c61e56aa30ca55493f92a9f9a420aa10181c4babc81a59b114e48f7e2e1f7a840719496df31fce9654e62a003f1d3a213cb762f5d7f4016814f8e98cee4f94db4664bc18901e63ced301b2378071dc9d2eacff2ee079e70f92f9b9a9e809b75945b4f6ab7899f73a043627bba20b714caf0b54c8acb716dbc6a8477569cc1631e5fc6e791e427d284adb9c24065b8a2c229582ed08bccc7c6857f645a558474fe84fd9ca5afc561b4538a189e1a952c6f03d08ce9facba30079d0cc8b6558b636255ad3d04758ed63b200839764ae6e0e9bcac460dbd61ce6e6f32a316668efd3f1fe6f7597fac1a291ec7447d373c508c82e31f9a883a807bee3e8d380a066065882abd274d70d158739da33028b4c3701e879219faa6c33cec10e3bdcaad221692302c98e0dafd8b35e68bfa5cba671d34b30f87aea213bd997bc681b2b94f5945be027ddfe1ec62bee4a41d0be50b6448abfd1afb6d0bf8a9a9affe3f7845efde8f3ae3841f973c38260581e846909d83b1b64d0e5524721928356dfcbe2897e03adc49da4d602670c3df9388d73150c9366ce041671c3f11a80abff5c3866252851e02c35cc5e38aca200efb6072b4c70824341a1c9f44ba7282a880b2ddcd6fac373d0487c8925b304aacbaf9d7553d0d58a0a09b0e2fd06b0a5add86bdf873c911c58448af4cdde7a7d0b7d6cbb7b4124d0645104581d30b88449b85e1e7dfc55fe4e6275b3f908a8be11636863bbea37830c534ca1414cd579929e5e05293a7108909d7bb100515c024cfac44294fe44604e2aefeb23835acb0af90510dcb9d6627c9d0c34876d6d94ff888f538e6797ff231e47de8b2ea28ad5435ac2abbf2dbc87045ad9ea2a34dd0a94f91623a8a58553d36337bccb65424fb6d4eaae7f0a4d51ca5a90b9d1a6752a71efbe0fad511d04b42625910fcb22e28631d950ce1c78a440f3b1df148297b9b93f23362816698ead3eebf9d33b32ac654a626ab7381bd2b5421d56b75148e1acc61e9223858ee54df4d71d9d19a16c3ebdfd4c3b72c9b1dc9e6e9cbf47266e509a8537a60d1cd9101b10743228d001707bf1b917e6c4a5d60557d225cec329761751fefad640c9e162ef94c5840e06d7a99dbe8fba8edbe9c6feb1d4d43a1800acf9cfed9b4cdead8462a42a92b26b3cceb640f473dc5b0fcd81d7a7cb3e4edff1dd4f0ea38ee614a4bb187040ee45659ed7d63a3a1cd63033cf085551a516117a5cab14d0bd56e338299ae8660187dcb662392662338303bc1696257b1b0de638a825df77853772f624386639b190cf777409efc53f0b238a5203db419bd1433c866400afcc2f85007e4c7a14668f4e083d1c39d65eab8820f26e5a2b49c7157f229d861c08f1250c73bfda0e2114d42644123fe82333cb506bd34b96422edf43ca80a30986d023a08f792d5b3682a6b6cfbd89963952a57e43bd1633188618abb8624b5b38667fca40fefa4046de5742fe5cb26ea689367a88a2a9605fada44cfd7e9419c4989cccb405728a820273d024265109e39169a242312ea79e3fc7f849f765c4d82d5f67dab2802c14e69cee6fc9950cf1e15bd8adc3c12e6251adc94ab21dbd367012d1850bddcef443642693871c1d715ac2a4387af6eaa30c4c2f4b608d86b05e72eeef99e0f0860413070551fc41e41233b78d91a60b394a1012f5dba1eef84d42f20570b66616df2c05d84581bd26c08a5eeaa881571efb78543be5c1cf3a320ebfedcdd3ac7b009bf01d91a7d37dc34bc5b645564f38a2f48235e1734cfcd769f0e16bae6e78d860b89498ad1badc7c3d57fa3fbc514ffb1c9fce7c3e314d681916816e858ef7dc07b166faa573dedb88d1108503321e39475d521d24153f48e0d8825bc4adc8e6b918938e15dcb91270b69634c98f8e2ad0907da237dd303ac7a168459fea91eabb9a161ee3a7aae32b73a007143558b0dfeed5a9fe5c6e3444b7d6347cf3539fb4b87da7c9c992037119359e017e6f4e06df6811268fc2edf2558531da945dfdaf2603fd459e1b01bf4b687652f4f55f5e04614058b27f8c6fedffde284409ed8e7f93015bec52881120a6ad26b7c385978a0fd264f1419f8a3f9d30e82defba1ea8d5257f5523dfe15460348eeba61393415fd092d0af0c9700e1c8f07eff81a788c15b6a2582061bc04ccbd3a4fbc14f72ca538694b22d84221f9b862445307fee626ce228e9d07840fc232321ff4ece3189c8ba35852fa2c3ceb067147f619d898051a05751f44f9d0c3bc0e69bbc226223c42783dff31a67496ce831b9fa96cb691606cc07871e0373cb76274b1ba642beccd16a0ea7883b63450c811acce0c4b9fc9467f0d5ddcfe16d3a77ce986f8ba1be4312535ecfb2715e4722a5ad51484578af5fa65c1216676faabe91dc814f9d604ac874117f6a746b37a15ec4465a9eb11076c83c164b2912c44e5fe6823aa06fd5c3ee80a061dd839c6aee05efcffcd1a97a9d6ce212ee0bdb19f2b1afd4b0ae90853c52cddbf3703cef2cd683e96123efd4f4ea84711a427b851f01b10542e04beffab12672ccb22c4197bc1ed3cae526f39d581c2fab340d75dccb733d4a7e5f8549d5ce541d36ead32abe50a84b06ff9769428b071933a3f144c884fca0b5206ecef1026657f3234d6ca7466cecf47e04001c4b14a705be372dd6996548a7485435209ea071f8596e0453cd0d3c643fb045977898c067782abb612a32e2de11d3afd0ad602aa51b025e88b0031ab79afd24c31465e63aedd54c753eceeb7c55e09a6efe7a5b065a3ba94d77986d8007f5ac9f85207188a090513db21b049c0e7eab0df3ed80a60617ee139e00e16a3967c7609ad6ffdf010cb9f4e457e123616c6790c16843c8a03816a1d7b3d1f64cac86fb9e35524565324e8adbe42ab9d66f6063d7844f43868573ae8044069ecc9d770bd2cd1ff26af0c72e462ea52fd668922897b95f9462fc30fa734862c9d383642b2a2f88ac2190e6be00af79ddd6aea301426ccf0ab1a272ec5046580bdba374e9b14f312b981e", 0x1000) ioctl$auto(r7, 0x4d13, r7) socket(0xa, 0xa, 0x88) msgctl$auto_MSG_STAT_ANY(0xd, 0xd, &(0x7f00000001c0)={{0xb69, 0xffffffffffffffff, 0xee00, 0x1, 0x1, 0x4, 0x2e}, &(0x7f0000000140)=0x24, &(0x7f0000000180)=0xa, 0x3, 0x1, 0x5, 0x2, 0x1, 0xfffa, 0x0, 0x331a, @raw=0xffff5a60, @raw=0x8}) sendmsg$auto_NL80211_CMD_JOIN_OCB(r5, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0xa4260910}, 0xc, &(0x7f0000000240)={&(0x7f0000000500)={0x240, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@NL80211_ATTR_TX_RATES={0x21f, 0x5a, 0x0, 0x1, [@typed={0x4, 0x9a}, @nested={0xf6, 0x6, 0x0, 0x1, [@generic="5c32026c189803fe5388dcd55aba1dd5af5d9e40bf257d8cc596120b354602a7ba0b3d29cf918307c87aa628d8ee87321598f074131cbfc0be066612a189e6c3f794e57a953b2f9fac77af01971491e56bf6e921b3db61ba1e186caf50bc5d59f5b6fe43004fa974d4753a85c53bad54aedfce24f7f24e10d631061e9fc59b4e6769a861d268b1ca9928735cae4a8fd1a423f19226a3fad5559b5c7d015e6d2fda2d8fe4f6e666268a4db4eb9fbda205cedbe90e7a30af1a07f2", @typed={0x8, 0x116, 0x0, 0x0, @ipv4=@loopback}, @nested={0x4, 0xed}, @nested={0x4, 0xa0}, @nested={0x4, 0x54}, @typed={0x14, 0xaf, 0x0, 0x0, @ipv6=@local}, @nested={0x4, 0x80}, @typed={0x9, 0x84, 0x0, 0x0, @str='\'-$+\x00'}]}, @generic="61b8f75a22a250dafcf945221b4e1df8da28a625711d75c7f4022f3229307f8c315ef51a116c604426d79b41193801a9b0e917a4b9daaca0642fa79e2c7ff80af6cb8bed43291bb8ef6c8f52c8174eda0ee06661bb110595de7e4e6573c4f686", @generic="439ed50b7467586304f8ead9434ed31ba9d7122e70adc39f35cf02", @nested={0xa3, 0x2f, 0x0, 0x1, [@nested={0x4, 0x6c}, @nested={0x4, 0x11e}, @nested={0x4, 0xa6}, @generic="2bf43f4e0217bdf4ad3383330449d8bf7f2c8f8cad1057ae963b4765ed051996f145de48b47716ad4a527877c0d6a703ff8d946e46416419b4205e6a2cdfa11d7784f9ff067d7b32c43369cf18095c17c5cdd5351e0631e867808d33b23dba85f2072c7cfc473528fa32d413e17b38cec7b2c9eb325ea0be1aef83d9d7e7393bd55ed7817f0fc2959ddf31", @typed={0x8, 0x23, 0x0, 0x0, @uid=r9}]}]}, @NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0x1ff}]}, 0x240}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) kernel console output (not intermixed with test programs): c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 110.021186][ T6186] RSP: 002b:00007fa6ea6ab038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 110.021199][ T6186] RAX: ffffffffffffffda RBX: 00007fa6e99b5fa0 RCX: 00007fa6e978e9a9 [ 110.021208][ T6186] RDX: 0000000000000006 RSI: 0000000000000002 RDI: 000000000000001d [ 110.021215][ T6186] RBP: 00007fa6e9810d69 R08: 0000000000000000 R09: 0000000000000000 [ 110.021223][ T6186] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 110.021239][ T6186] R13: 0000000000000000 R14: 00007fa6e99b5fa0 R15: 00007ffd7be9ab98 [ 110.021257][ T6186] [ 117.132346][ T6279] netlink: 8 bytes leftover after parsing attributes in process `syz.3.67'. [ 118.209483][ T6296] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 118.484417][ T6296] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000 [ 118.533234][ T6296] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 118.599672][ T6296] ksm flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 118.654985][ T6296] page_type: f5(slab) [ 118.659063][ T6296] raw: 00fff00000000040 ffff88814040a780 ffffea00009c9700 dead000000000003 [ 118.667862][ T6296] raw: 0000000000000000 0000000000150015 00000000f5000000 0000000000000000 [ 118.678839][ T6296] head: 00fff00000000040 ffff88814040a780 ffffea00009c9700 dead000000000003 [ 118.687702][ T6296] head: 0000000000000000 0000000000150015 00000000f5000000 0000000000000000 [ 118.699499][ T6296] head: 00fff00000000001 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 118.775581][ T6296] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 118.970277][ T6296] page dumped because: unmovable page [ 118.975730][ T6296] page_owner tracks the page as allocated [ 118.983523][ T6296] page last allocated via order 1, migratetype Reclaimable, gfp_mask 0xd20d0(__GFP_RECLAIMABLE|__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5230, tgid 5230 (udevd), ts 34360364027, free_ts 28134268735 [ 119.020834][ T6296] post_alloc_hook+0x1c0/0x230 [ 119.264077][ T6296] get_page_from_freelist+0x1321/0x3890 [ 119.269721][ T6296] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 119.378405][ T6296] alloc_pages_mpol+0x1fb/0x550 [ 119.469827][ T6296] new_slab+0x23b/0x330 [ 119.537706][ T6296] ___slab_alloc+0xd9c/0x1940 [ 119.573036][ T6296] __slab_alloc.constprop.0+0x56/0xb0 [ 119.668644][ T6296] kmem_cache_alloc_lru_noprof+0xf4/0x3b0 [ 119.749803][ T6296] __d_alloc+0x31/0xaa0 [ 119.767047][ T6296] d_alloc+0x4a/0x1e0 [ 119.819796][ T6296] d_alloc_parallel+0xe3/0x12e0 [ 119.824738][ T6296] __lookup_slow+0x193/0x460 [ 119.829382][ T6296] walk_component+0x353/0x5b0 [ 119.959848][ T6296] link_path_walk+0x627/0xe20 [ 120.047801][ T6296] path_openat+0x1b0/0x2cb0 [ 120.052722][ T6296] do_filp_open+0x20b/0x470 [ 120.057236][ T6296] page last free pid 1 tgid 1 stack trace: [ 120.064034][ T6296] __free_frozen_pages+0x7fe/0x1180 [ 120.070057][ T6296] free_contig_range+0x183/0x4b0 [ 120.093370][ T6296] destroy_args+0x7f6/0xa60 [ 120.099129][ T6296] debug_vm_pgtable+0x13b8/0x2d00 [ 120.119278][ T6296] do_one_initcall+0x120/0x6e0 [ 120.294313][ T6296] kernel_init_freeable+0x5c2/0x900 [ 120.332568][ T6296] kernel_init+0x1c/0x2b0 [ 120.529828][ T6296] ret_from_fork+0x5d7/0x6f0 [ 120.570864][ T6296] ret_from_fork_asm+0x1a/0x30 [ 123.445124][ T6351] netlink: 40 bytes leftover after parsing attributes in process `syz.2.79'. [ 123.565443][ T6353] netlink: 20 bytes leftover after parsing attributes in process `syz.2.79'. [ 124.229265][ T6353] hsr_slave_0 (unregistering): left promiscuous mode [ 125.592915][ T6384] Invalid ELF header magic: != ELF [ 127.186721][ T6401] sysfs_service_op_store: Client not running :-5: [ 127.502801][ T6401] sysfs_service_op_show: Client not running :-5: [ 127.862161][ T6410] sysfs_service_op_store: Client not running :-5: [ 128.377671][ T6417] sysfs_service_op_show: Client not running :-5: [ 128.398296][ T6414] sysfs_service_op_store: Client not running :-5: [ 129.519639][ T6429] Invalid ELF header magic: != ELF [ 129.809481][ T6433] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input9 [ 132.057244][ T6464] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input10 [ 132.202687][ T6461] could not allocate digest TFM handle [ 132.902697][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.910242][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.784774][ T6502] netlink: 8 bytes leftover after parsing attributes in process `syz.3.109'. [ 137.678555][ T6519] bdi 43:96: the stable_pages_required attribute has been removed. Use the stable_writes queue attribute instead. [ 137.998091][ T6522] FAULT_INJECTION: forcing a failure. [ 137.998091][ T6522] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 137.998137][ T6522] CPU: 0 UID: 0 PID: 6522 Comm: syz.2.113 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 137.998154][ T6522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 137.998162][ T6522] Call Trace: [ 137.998167][ T6522] [ 137.998172][ T6522] dump_stack_lvl+0x16c/0x1f0 [ 137.998191][ T6522] should_fail_ex+0x512/0x640 [ 137.998209][ T6522] should_fail_alloc_page+0xe7/0x130 [ 137.998227][ T6522] prepare_alloc_pages+0x3c2/0x610 [ 137.998250][ T6522] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 137.998269][ T6522] ? stack_trace_save+0x8e/0xc0 [ 137.998290][ T6522] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 137.998307][ T6522] ? fb_var_to_videomode+0x4c9/0x690 [ 137.998328][ T6522] ? __pfx_fb_match_mode+0x10/0x10 [ 137.998348][ T6522] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 137.998370][ T6522] ? vc_allocate+0x489/0x880 [ 137.998383][ T6522] __alloc_pages_noprof+0xb/0x1b0 [ 137.998397][ T6522] ___kmalloc_large_node+0x84/0x1e0 [ 137.998418][ T6522] ? vc_allocate+0x489/0x880 [ 137.998431][ T6522] __kmalloc_large_node_noprof+0x1c/0x70 [ 137.998450][ T6522] __kmalloc_noprof.cold+0xc/0x61 [ 137.998475][ T6522] vc_allocate+0x489/0x880 [ 137.998489][ T6522] ? __pfx_vc_allocate+0x10/0x10 [ 137.998509][ T6522] con_install+0xa1/0x600 [ 137.998525][ T6522] ? __pfx_con_install+0x10/0x10 [ 137.998542][ T6522] ? __pfx_con_install+0x10/0x10 [ 137.998557][ T6522] tty_init_dev.part.0+0x9c/0x500 [ 137.998575][ T6522] tty_open+0xa50/0xf90 [ 137.998595][ T6522] ? __pfx_tty_open+0x10/0x10 [ 137.998610][ T6522] ? chrdev_open+0x58c/0x6a0 [ 137.998627][ T6522] ? __pfx_tty_open+0x10/0x10 [ 137.998642][ T6522] chrdev_open+0x231/0x6a0 [ 137.998657][ T6522] ? __pfx_chrdev_open+0x10/0x10 [ 137.998673][ T6522] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 137.998696][ T6522] do_dentry_open+0x744/0x1c10 [ 137.998711][ T6522] ? __pfx_chrdev_open+0x10/0x10 [ 137.998729][ T6522] vfs_open+0x82/0x3f0 [ 137.998748][ T6522] path_openat+0x1de4/0x2cb0 [ 137.998768][ T6522] ? __pfx_path_openat+0x10/0x10 [ 137.998782][ T6522] ? __lock_acquire+0xb8a/0x1c90 [ 137.998803][ T6522] do_filp_open+0x20b/0x470 [ 137.998816][ T6522] ? __pfx_do_filp_open+0x10/0x10 [ 137.998844][ T6522] ? alloc_fd+0x471/0x7d0 [ 137.998870][ T6522] do_sys_openat2+0x11b/0x1d0 [ 137.998886][ T6522] ? __pfx_do_sys_openat2+0x10/0x10 [ 137.998911][ T6522] __x64_sys_openat+0x174/0x210 [ 137.998928][ T6522] ? __pfx___x64_sys_openat+0x10/0x10 [ 137.998954][ T6522] do_syscall_64+0xcd/0x490 [ 137.998970][ T6522] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.998992][ T6522] RIP: 0033:0x7f5facd8e9a9 [ 137.999008][ T6522] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 137.999022][ T6522] RSP: 002b:00007f5fadbbc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 137.999036][ T6522] RAX: ffffffffffffffda RBX: 00007f5facfb6080 RCX: 00007f5facd8e9a9 [ 137.999045][ T6522] RDX: 0000000000040002 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 137.999054][ T6522] RBP: 00007f5face10d69 R08: 0000000000000000 R09: 0000000000000000 [ 137.999063][ T6522] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000000 [ 137.999071][ T6522] R13: 0000000000000000 R14: 00007f5facfb6080 R15: 00007ffe96b2d198 [ 137.999090][ T6522] [ 139.963649][ T6501] syz.3.109 (6501) used greatest stack depth: 20808 bytes left [ 141.599941][ T6553] usb usb2: usbfs: process 6553 (syz.0.118) did not claim interface 1 before use [ 142.956000][ T6569] netlink: 8 bytes leftover after parsing attributes in process `syz.0.122'. [ 143.365754][ T6574] netlink: 8 bytes leftover after parsing attributes in process `syz.1.124'. [ 143.790819][ T6581] sg_write: data in/out 589824/1 bytes for SCSI command 0x7b-- guessing data in; [ 143.790819][ T6581] program syz.3.123 not setting count and/or reply_len properly [ 143.908879][ T5167] Bluetooth: hci1: unexpected event 0x14 length: 16 > 6 [ 146.442067][ T6620] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input11 [ 146.917557][ T6622] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input12 [ 147.642053][ T6638] FAULT_INJECTION: forcing a failure. [ 147.642053][ T6638] name failslab, interval 1, probability 0, space 0, times 0 [ 147.752959][ T6638] CPU: 1 UID: 0 PID: 6638 Comm: syz.2.134 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 147.753004][ T6638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 147.753020][ T6638] Call Trace: [ 147.753029][ T6638] [ 147.753040][ T6638] dump_stack_lvl+0x16c/0x1f0 [ 147.753073][ T6638] should_fail_ex+0x512/0x640 [ 147.753100][ T6638] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 147.753134][ T6638] should_failslab+0xc2/0x120 [ 147.753165][ T6638] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 147.753194][ T6638] ? __d_alloc+0x31/0xaa0 [ 147.753247][ T6638] __d_alloc+0x31/0xaa0 [ 147.753291][ T6638] d_alloc_pseudo+0x1c/0xc0 [ 147.753327][ T6638] alloc_file_pseudo+0xcf/0x230 [ 147.753372][ T6638] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 147.753409][ T6638] ? _raw_spin_unlock+0x28/0x50 [ 147.753445][ T6638] ? alloc_fd+0x471/0x7d0 [ 147.753487][ T6638] __anon_inode_getfile+0xe8/0x280 [ 147.753531][ T6638] anon_inode_getfd+0x52/0xb0 [ 147.753573][ T6638] map_create+0xb68/0x1db0 [ 147.753622][ T6638] ? __pfx_map_create+0x10/0x10 [ 147.753655][ T6638] ? __might_fault+0xe3/0x190 [ 147.753680][ T6638] ? __might_fault+0xe3/0x190 [ 147.753703][ T6638] ? __might_fault+0x13b/0x190 [ 147.753743][ T6638] __sys_bpf+0x4d8d/0x4ea0 [ 147.753764][ T6638] ? __pfx_futex_wake+0x10/0x10 [ 147.753804][ T6638] ? __pfx___sys_bpf+0x10/0x10 [ 147.753826][ T6638] ? vfs_write+0x15d/0x1150 [ 147.753859][ T6638] ? do_futex+0x122/0x350 [ 147.753891][ T6638] ? __pfx_do_futex+0x10/0x10 [ 147.753948][ T6638] ? xfd_validate_state+0x61/0x180 [ 147.753979][ T6638] ? __pfx_ksys_write+0x10/0x10 [ 147.754016][ T6638] __x64_sys_bpf+0x78/0xc0 [ 147.754048][ T6638] ? lockdep_hardirqs_on+0x7c/0x110 [ 147.754074][ T6638] do_syscall_64+0xcd/0x490 [ 147.754105][ T6638] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.754133][ T6638] RIP: 0033:0x7f5facd8e9a9 [ 147.754155][ T6638] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 147.754179][ T6638] RSP: 002b:00007f5fadbdd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 147.754204][ T6638] RAX: ffffffffffffffda RBX: 00007f5facfb5fa0 RCX: 00007f5facd8e9a9 [ 147.754228][ T6638] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 0000000000000000 [ 147.754244][ T6638] RBP: 00007f5face10d69 R08: 0000000000000000 R09: 0000000000000000 [ 147.754260][ T6638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 147.754276][ T6638] R13: 0000000000000000 R14: 00007f5facfb5fa0 R15: 00007ffe96b2d198 [ 147.754311][ T6638] [ 148.011418][ C1] vkms_vblank_simulate: vblank timer overrun [ 150.296038][ T6654] sg_write: data in/out 589824/1 bytes for SCSI command 0x7b-- guessing data in; [ 150.296038][ T6654] program syz.0.137 not setting count and/or reply_len properly [ 151.632476][ T6675] sysfs_service_op_store: Client not running :-5: [ 152.245599][ T6677] hub 8-0:1.0: USB hub found [ 152.251514][ T6677] hub 8-0:1.0: 1 port detected [ 152.275292][ T6675] sysfs_service_op_show: Client not running :-5: [ 152.762294][ T6694] netlink: 8 bytes leftover after parsing attributes in process `syz.2.149'. [ 153.340959][ T6707] sg_write: data in/out 589824/1 bytes for SCSI command 0x7b-- guessing data in; [ 153.340959][ T6707] program syz.1.150 not setting count and/or reply_len properly [ 154.688281][ T6715] sysfs_service_op_store: Client not running :-5: [ 155.586742][ T6715] sysfs_service_op_show: Client not running :-5: [ 156.461118][ T5167] Bluetooth: hci2: unexpected event 0x14 length: 16 > 6 [ 157.735250][ T6767] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input13 [ 158.615953][ T6772] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input14 [ 159.136066][ T6792] ptrace attach of "./syz-executor exec"[5849] was attempted by "!r'f.B$2-1m9N۩8\x0akD1 4\x0dtHzך/q\x07ku9Ş=__})uN񄖋UwLs2k7mz4!:D6/l\x0bUfL%!h:|vzckvW0:(MC\x0d9Wjj\x1b 4S]H}DYT0~  FQ\x22;\x0a5;A#f> ئzE#9\x0cQ%zBJ\x09 c^}ۗHLuz/X\x0cy0zz*,M7(}'1ujك$㎮,ú];ave!௝*Rv]0c9U|8R@Av|R&%>}!\x07MЩ/-əs|5{s7,\x07}\x0ao\x2271(tәY#89Ą$әC [0ٰwޝ6\x5c蚫πsOBoN)Nl_W\x09VeK7\x0b(5\x22(*- SERgKl#ش&\x0c5ч\x0cpa~3f\x0aESG6E;RLuA4Gg,A-jKQKUaҽi~Ï?\x1bj\x1bх&_pZ1\x09[2'\x0dkI_?5D\x0a=}}/hxy[S|ƺ-bJ*ĎҜj~n\x0bA|هqcb|ǼcMJ{ђlzVe3pْc4$:xcP afضE [ 159.966029][ T6801] FAULT_INJECTION: forcing a failure. [ 159.966029][ T6801] name failslab, interval 1, probability 0, space 0, times 0 [ 160.199912][ T6801] CPU: 0 UID: 0 PID: 6801 Comm: syz.0.171 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 160.199954][ T6801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 160.199970][ T6801] Call Trace: [ 160.199979][ T6801] [ 160.199989][ T6801] dump_stack_lvl+0x16c/0x1f0 [ 160.200030][ T6801] should_fail_ex+0x512/0x640 [ 160.200056][ T6801] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 160.200091][ T6801] should_failslab+0xc2/0x120 [ 160.200121][ T6801] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 160.200151][ T6801] ? __d_alloc+0x31/0xaa0 [ 160.200185][ T6801] __d_alloc+0x31/0xaa0 [ 160.200216][ T6801] d_alloc_pseudo+0x1c/0xc0 [ 160.200250][ T6801] alloc_file_pseudo+0xcf/0x230 [ 160.200284][ T6801] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 160.200318][ T6801] ? _raw_spin_unlock+0x28/0x50 [ 160.200354][ T6801] ? alloc_fd+0x471/0x7d0 [ 160.200391][ T6801] __anon_inode_getfile+0xe8/0x280 [ 160.200436][ T6801] anon_inode_getfd+0x52/0xb0 [ 160.200478][ T6801] map_create+0xb68/0x1db0 [ 160.200527][ T6801] ? __pfx_map_create+0x10/0x10 [ 160.200560][ T6801] ? __might_fault+0xe3/0x190 [ 160.200585][ T6801] ? __might_fault+0xe3/0x190 [ 160.200609][ T6801] ? __might_fault+0x13b/0x190 [ 160.200649][ T6801] __sys_bpf+0x4d8d/0x4ea0 [ 160.200671][ T6801] ? __pfx_futex_wake+0x10/0x10 [ 160.200710][ T6801] ? __pfx___sys_bpf+0x10/0x10 [ 160.200731][ T6801] ? vfs_write+0x15d/0x1150 [ 160.200765][ T6801] ? do_futex+0x122/0x350 [ 160.200794][ T6801] ? __pfx_do_futex+0x10/0x10 [ 160.200846][ T6801] ? xfd_validate_state+0x61/0x180 [ 160.200879][ T6801] ? __pfx_ksys_write+0x10/0x10 [ 160.200911][ T6801] __x64_sys_bpf+0x78/0xc0 [ 160.200935][ T6801] ? lockdep_hardirqs_on+0x7c/0x110 [ 160.200960][ T6801] do_syscall_64+0xcd/0x490 [ 160.200990][ T6801] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.201017][ T6801] RIP: 0033:0x7f06f638e9a9 [ 160.201046][ T6801] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 160.201072][ T6801] RSP: 002b:00007f06f7165038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 160.201097][ T6801] RAX: ffffffffffffffda RBX: 00007f06f65b5fa0 RCX: 00007f06f638e9a9 [ 160.201115][ T6801] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 0000000000000000 [ 160.201131][ T6801] RBP: 00007f06f6410d69 R08: 0000000000000000 R09: 0000000000000000 [ 160.201146][ T6801] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 160.201161][ T6801] R13: 0000000000000000 R14: 00007f06f65b5fa0 R15: 00007ffe068e2e18 [ 160.201196][ T6801] [ 160.460905][ C0] vkms_vblank_simulate: vblank timer overrun [ 160.776707][ T6810] FAULT_INJECTION: forcing a failure. [ 160.776707][ T6810] name failslab, interval 1, probability 0, space 0, times 0 [ 160.789504][ T6810] CPU: 1 UID: 0 PID: 6810 Comm: syz.3.173 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 160.789539][ T6810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 160.789555][ T6810] Call Trace: [ 160.789564][ T6810] [ 160.789575][ T6810] dump_stack_lvl+0x16c/0x1f0 [ 160.789608][ T6810] should_fail_ex+0x512/0x640 [ 160.789641][ T6810] should_failslab+0xc2/0x120 [ 160.789674][ T6810] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 160.789704][ T6810] ? radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 160.789750][ T6810] radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 160.789792][ T6810] idr_get_free+0x528/0xa30 [ 160.789840][ T6810] idr_alloc_u32+0x190/0x2f0 [ 160.789883][ T6810] ? __pfx_idr_alloc_u32+0x10/0x10 [ 160.789927][ T6810] ? lock_acquire+0x179/0x350 [ 160.789971][ T6810] idr_alloc_cyclic+0x10b/0x230 [ 160.790015][ T6810] ? __pfx_idr_alloc_cyclic+0x10/0x10 [ 160.790054][ T6810] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 160.790108][ T6810] map_create+0x9aa/0x1db0 [ 160.790158][ T6810] ? __pfx_map_create+0x10/0x10 [ 160.790199][ T6810] ? __might_fault+0xe3/0x190 [ 160.790224][ T6810] ? __might_fault+0xe3/0x190 [ 160.790248][ T6810] ? __might_fault+0x13b/0x190 [ 160.790290][ T6810] __sys_bpf+0x4d8d/0x4ea0 [ 160.790319][ T6810] ? __pfx___sys_bpf+0x10/0x10 [ 160.790341][ T6810] ? vfs_write+0x15d/0x1150 [ 160.790377][ T6810] ? do_futex+0x122/0x350 [ 160.790409][ T6810] ? __pfx_do_futex+0x10/0x10 [ 160.790463][ T6810] ? xfd_validate_state+0x61/0x180 [ 160.790497][ T6810] ? __pfx_ksys_write+0x10/0x10 [ 160.790530][ T6810] __x64_sys_bpf+0x78/0xc0 [ 160.790554][ T6810] ? lockdep_hardirqs_on+0x7c/0x110 [ 160.790579][ T6810] do_syscall_64+0xcd/0x490 [ 160.790610][ T6810] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.790637][ T6810] RIP: 0033:0x7fd1c0b8e9a9 [ 160.790660][ T6810] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 160.790684][ T6810] RSP: 002b:00007fd1c1975038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 160.790710][ T6810] RAX: ffffffffffffffda RBX: 00007fd1c0db5fa0 RCX: 00007fd1c0b8e9a9 [ 160.790728][ T6810] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 0000000000000000 [ 160.790745][ T6810] RBP: 00007fd1c0c10d69 R08: 0000000000000000 R09: 0000000000000000 [ 160.790761][ T6810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 160.790777][ T6810] R13: 0000000000000000 R14: 00007fd1c0db5fa0 R15: 00007ffd49a94018 [ 160.790815][ T6810] [ 161.311758][ T6821] hub 8-0:1.0: USB hub found [ 161.316865][ T6821] hub 8-0:1.0: 1 port detected [ 161.601735][ T6823] hub 8-0:1.0: USB hub found [ 161.617831][ T6823] hub 8-0:1.0: 1 port detected [ 162.342847][ T6838] FAULT_INJECTION: forcing a failure. [ 162.342847][ T6838] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 162.401038][ T6838] CPU: 0 UID: 0 PID: 6838 Comm: syz.1.180 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 162.401081][ T6838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 162.401096][ T6838] Call Trace: [ 162.401104][ T6838] [ 162.401115][ T6838] dump_stack_lvl+0x16c/0x1f0 [ 162.401146][ T6838] should_fail_ex+0x512/0x640 [ 162.401178][ T6838] _copy_to_user+0x32/0xd0 [ 162.401209][ T6838] simple_read_from_buffer+0xcb/0x170 [ 162.401246][ T6838] proc_fail_nth_read+0x197/0x270 [ 162.401281][ T6838] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 162.401319][ T6838] ? rw_verify_area+0xcf/0x680 [ 162.401353][ T6838] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 162.401388][ T6838] vfs_read+0x1e4/0xc60 [ 162.401417][ T6838] ? __pfx___mutex_lock+0x10/0x10 [ 162.401443][ T6838] ? __pfx_vfs_read+0x10/0x10 [ 162.401476][ T6838] ? __fget_files+0x20e/0x3c0 [ 162.401524][ T6838] ksys_read+0x12a/0x250 [ 162.401547][ T6838] ? __pfx_ksys_read+0x10/0x10 [ 162.401571][ T6838] ? fput+0x70/0xf0 [ 162.401604][ T6838] do_syscall_64+0xcd/0x490 [ 162.401633][ T6838] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.401658][ T6838] RIP: 0033:0x7fa6e978d3bc [ 162.401678][ T6838] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 162.401700][ T6838] RSP: 002b:00007fa6ea6ab030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 162.401724][ T6838] RAX: ffffffffffffffda RBX: 00007fa6e99b5fa0 RCX: 00007fa6e978d3bc [ 162.401741][ T6838] RDX: 000000000000000f RSI: 00007fa6ea6ab0a0 RDI: 0000000000000004 [ 162.401756][ T6838] RBP: 00007fa6ea6ab090 R08: 0000000000000000 R09: 0000000000000000 [ 162.401771][ T6838] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 162.401785][ T6838] R13: 0000000000000000 R14: 00007fa6e99b5fa0 R15: 00007ffd7be9ab98 [ 162.401819][ T6838] [ 162.593700][ C0] vkms_vblank_simulate: vblank timer overrun [ 165.058788][ T6878] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input15 [ 165.700943][ T6881] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input16 [ 166.231362][ T6891] sysfs_service_op_store: Client not running :-5: [ 166.933114][ T6891] sysfs_service_op_show: Client not running :-5: [ 168.072944][ T6926] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input17 [ 168.435468][ T6933] FAULT_INJECTION: forcing a failure. [ 168.435468][ T6933] name failslab, interval 1, probability 0, space 0, times 0 [ 168.448226][ T6933] CPU: 0 UID: 0 PID: 6933 Comm: syz.2.202 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 168.448245][ T6933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 168.448254][ T6933] Call Trace: [ 168.448259][ T6933] [ 168.448265][ T6933] dump_stack_lvl+0x16c/0x1f0 [ 168.448285][ T6933] should_fail_ex+0x512/0x640 [ 168.448303][ T6933] should_failslab+0xc2/0x120 [ 168.448321][ T6933] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 168.448336][ T6933] ? radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 168.448359][ T6933] radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 168.448381][ T6933] idr_get_free+0x528/0xa30 [ 168.448408][ T6933] idr_alloc_u32+0x190/0x2f0 [ 168.448429][ T6933] ? __pfx_idr_alloc_u32+0x10/0x10 [ 168.448451][ T6933] ? lock_acquire+0x179/0x350 [ 168.448472][ T6933] idr_alloc_cyclic+0x10b/0x230 [ 168.448493][ T6933] ? __pfx_idr_alloc_cyclic+0x10/0x10 [ 168.448512][ T6933] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 168.448537][ T6933] map_create+0x9aa/0x1db0 [ 168.448562][ T6933] ? __pfx_map_create+0x10/0x10 [ 168.448579][ T6933] ? __might_fault+0xe3/0x190 [ 168.448591][ T6933] ? __might_fault+0xe3/0x190 [ 168.448603][ T6933] ? __might_fault+0x13b/0x190 [ 168.448622][ T6933] __sys_bpf+0x4d8d/0x4ea0 [ 168.448645][ T6933] ? __pfx___sys_bpf+0x10/0x10 [ 168.448656][ T6933] ? vfs_write+0x15d/0x1150 [ 168.448675][ T6933] ? do_futex+0x122/0x350 [ 168.448692][ T6933] ? __pfx_do_futex+0x10/0x10 [ 168.448719][ T6933] ? xfd_validate_state+0x61/0x180 [ 168.448738][ T6933] ? __pfx_ksys_write+0x10/0x10 [ 168.448754][ T6933] __x64_sys_bpf+0x78/0xc0 [ 168.448766][ T6933] ? lockdep_hardirqs_on+0x7c/0x110 [ 168.448779][ T6933] do_syscall_64+0xcd/0x490 [ 168.448794][ T6933] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.448808][ T6933] RIP: 0033:0x7f5facd8e9a9 [ 168.448820][ T6933] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 168.448832][ T6933] RSP: 002b:00007f5fadbdd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 168.448846][ T6933] RAX: ffffffffffffffda RBX: 00007f5facfb5fa0 RCX: 00007f5facd8e9a9 [ 168.448855][ T6933] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 0000000000000000 [ 168.448863][ T6933] RBP: 00007f5face10d69 R08: 0000000000000000 R09: 0000000000000000 [ 168.448872][ T6933] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 168.448880][ T6933] R13: 0000000000000000 R14: 00007f5facfb5fa0 R15: 00007ffe96b2d198 [ 168.448899][ T6933] [ 168.693934][ C0] vkms_vblank_simulate: vblank timer overrun [ 169.264189][ T6931] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input18 [ 169.369270][ T6943] sysfs_service_op_store: Client not running :-5: [ 169.871053][ T6943] sysfs_service_op_show: Client not running :-5: [ 170.098455][ T6953] hub 8-0:1.0: USB hub found [ 170.123502][ T6953] hub 8-0:1.0: 1 port detected [ 170.609609][ T6968] hub 8-0:1.0: USB hub found [ 170.631362][ T6968] hub 8-0:1.0: 1 port detected [ 171.629065][ T6990] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input19 [ 172.106740][ T6991] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input20 [ 172.615516][ T7013] netlink: 8 bytes leftover after parsing attributes in process `syz.0.219'. [ 177.370134][ T7116] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input21 [ 178.954469][ T7120] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input22 [ 180.036347][ T7149] sysfs_service_op_store: Client not running :-5: [ 180.777193][ T7149] sysfs_service_op_show: Client not running :-5: [ 181.609567][ T7173] FAULT_INJECTION: forcing a failure. [ 181.609567][ T7173] name failslab, interval 1, probability 0, space 0, times 0 [ 181.609600][ T7173] CPU: 0 UID: 0 PID: 7173 Comm: syz.1.257 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 181.609617][ T7173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 181.609625][ T7173] Call Trace: [ 181.609630][ T7173] [ 181.609638][ T7173] dump_stack_lvl+0x16c/0x1f0 [ 181.609658][ T7173] should_fail_ex+0x512/0x640 [ 181.609673][ T7173] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 181.609691][ T7173] should_failslab+0xc2/0x120 [ 181.609707][ T7173] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 181.609722][ T7173] ? __d_alloc+0x31/0xaa0 [ 181.609752][ T7173] __d_alloc+0x31/0xaa0 [ 181.609780][ T7173] d_alloc_pseudo+0x1c/0xc0 [ 181.609810][ T7173] alloc_file_pseudo+0xcf/0x230 [ 181.609830][ T7173] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 181.609848][ T7173] ? _raw_spin_unlock+0x28/0x50 [ 181.609867][ T7173] ? alloc_fd+0x471/0x7d0 [ 181.609888][ T7173] __anon_inode_getfile+0xe8/0x280 [ 181.609911][ T7173] anon_inode_getfd+0x52/0xb0 [ 181.609932][ T7173] map_create+0xb68/0x1db0 [ 181.609958][ T7173] ? __pfx_map_create+0x10/0x10 [ 181.609975][ T7173] ? __might_fault+0xe3/0x190 [ 181.609987][ T7173] ? __might_fault+0xe3/0x190 [ 181.609999][ T7173] ? __might_fault+0x13b/0x190 [ 181.610018][ T7173] __sys_bpf+0x4d8d/0x4ea0 [ 181.610033][ T7173] ? __pfx___sys_bpf+0x10/0x10 [ 181.610044][ T7173] ? vfs_write+0x15d/0x1150 [ 181.610060][ T7173] ? do_futex+0x122/0x350 [ 181.610077][ T7173] ? __pfx_do_futex+0x10/0x10 [ 181.610102][ T7173] ? xfd_validate_state+0x61/0x180 [ 181.610119][ T7173] ? __pfx_ksys_write+0x10/0x10 [ 181.610135][ T7173] __x64_sys_bpf+0x78/0xc0 [ 181.610146][ T7173] ? lockdep_hardirqs_on+0x7c/0x110 [ 181.610159][ T7173] do_syscall_64+0xcd/0x490 [ 181.610174][ T7173] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.610188][ T7173] RIP: 0033:0x7fa6e978e9a9 [ 181.610200][ T7173] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 181.610213][ T7173] RSP: 002b:00007fa6ea6ab038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 181.610226][ T7173] RAX: ffffffffffffffda RBX: 00007fa6e99b5fa0 RCX: 00007fa6e978e9a9 [ 181.610235][ T7173] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 0000000000000000 [ 181.610243][ T7173] RBP: 00007fa6e9810d69 R08: 0000000000000000 R09: 0000000000000000 [ 181.610252][ T7173] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 181.610261][ T7173] R13: 0000000000000000 R14: 00007fa6e99b5fa0 R15: 00007ffd7be9ab98 [ 181.610280][ T7173] [ 182.350101][ T7171] netlink: 12 bytes leftover after parsing attributes in process `syz.2.255'. [ 183.673706][ T7205] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input23 [ 184.832707][ T7206] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input24 [ 185.630307][ T7224] FAULT_INJECTION: forcing a failure. [ 185.630307][ T7224] name failslab, interval 1, probability 0, space 0, times 0 [ 185.643263][ T7224] CPU: 1 UID: 0 PID: 7224 Comm: syz.2.266 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 185.643298][ T7224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 185.643314][ T7224] Call Trace: [ 185.643323][ T7224] [ 185.643333][ T7224] dump_stack_lvl+0x16c/0x1f0 [ 185.643365][ T7224] should_fail_ex+0x512/0x640 [ 185.643399][ T7224] should_failslab+0xc2/0x120 [ 185.643431][ T7224] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 185.643461][ T7224] ? radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 185.643506][ T7224] radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 185.643553][ T7224] idr_get_free+0x528/0xa30 [ 185.643608][ T7224] idr_alloc_u32+0x190/0x2f0 [ 185.643651][ T7224] ? __pfx_idr_alloc_u32+0x10/0x10 [ 185.643695][ T7224] ? lock_acquire+0x179/0x350 [ 185.643739][ T7224] idr_alloc_cyclic+0x10b/0x230 [ 185.643781][ T7224] ? __pfx_idr_alloc_cyclic+0x10/0x10 [ 185.643820][ T7224] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 185.643871][ T7224] map_create+0x9aa/0x1db0 [ 185.643926][ T7224] ? __pfx_map_create+0x10/0x10 [ 185.643961][ T7224] ? __might_fault+0xe3/0x190 [ 185.643986][ T7224] ? __might_fault+0xe3/0x190 [ 185.644010][ T7224] ? __might_fault+0x13b/0x190 [ 185.644051][ T7224] __sys_bpf+0x4d8d/0x4ea0 [ 185.644080][ T7224] ? __pfx___sys_bpf+0x10/0x10 [ 185.644102][ T7224] ? vfs_write+0x15d/0x1150 [ 185.644137][ T7224] ? do_futex+0x122/0x350 [ 185.644169][ T7224] ? __pfx_do_futex+0x10/0x10 [ 185.644227][ T7224] ? xfd_validate_state+0x61/0x180 [ 185.644259][ T7224] ? __pfx_ksys_write+0x10/0x10 [ 185.644290][ T7224] __x64_sys_bpf+0x78/0xc0 [ 185.644314][ T7224] ? lockdep_hardirqs_on+0x7c/0x110 [ 185.644339][ T7224] do_syscall_64+0xcd/0x490 [ 185.644369][ T7224] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.644397][ T7224] RIP: 0033:0x7f5facd8e9a9 [ 185.644419][ T7224] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 185.644444][ T7224] RSP: 002b:00007f5fadbdd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 185.644469][ T7224] RAX: ffffffffffffffda RBX: 00007f5facfb5fa0 RCX: 00007f5facd8e9a9 [ 185.644488][ T7224] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 0000000000000000 [ 185.644504][ T7224] RBP: 00007f5face10d69 R08: 0000000000000000 R09: 0000000000000000 [ 185.644520][ T7224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 185.644535][ T7224] R13: 0000000000000000 R14: 00007f5facfb5fa0 R15: 00007ffe96b2d198 [ 185.644572][ T7224] [ 187.463255][ T7255] sysfs_service_op_store: Client not running :-5: [ 187.471840][ T7255] sysfs_service_op_show: Client not running :-5: [ 187.740722][ T7251] netlink: 12 bytes leftover after parsing attributes in process `syz.0.271'. [ 188.762605][ T7261] hub 8-0:1.0: USB hub found [ 188.811937][ T7269] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input25 [ 188.812334][ T7261] hub 8-0:1.0: 1 port detected [ 190.300004][ T7273] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input26 [ 190.310063][ T7289] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000 [ 190.318892][ T7289] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 190.410292][ T7289] ksm flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 190.509326][ T7289] page_type: f5(slab) [ 190.539631][ T7289] raw: 00fff00000000040 ffff88814040a780 ffffea00009c9700 dead000000000003 [ 190.590044][ T7289] raw: 0000000000000000 0000000000150015 00000000f5000000 0000000000000000 [ 190.720920][ T7289] head: 00fff00000000040 ffff88814040a780 ffffea00009c9700 dead000000000003 [ 190.854778][ T7289] head: 0000000000000000 0000000000150015 00000000f5000000 0000000000000000 [ 191.071630][ T7289] head: 00fff00000000001 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 191.238873][ T7289] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 191.270089][ T7289] page dumped because: unmovable page [ 191.277137][ T7289] page_owner tracks the page as allocated [ 191.283846][ T7289] page last allocated via order 1, migratetype Reclaimable, gfp_mask 0xd20d0(__GFP_RECLAIMABLE|__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5230, tgid 5230 (udevd), ts 34360364027, free_ts 28134268735 [ 191.306929][ T7289] post_alloc_hook+0x1c0/0x230 [ 191.311990][ T7289] get_page_from_freelist+0x1321/0x3890 [ 191.317687][ T7289] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 191.325853][ T7289] alloc_pages_mpol+0x1fb/0x550 [ 191.331507][ T7294] netlink: 8 bytes leftover after parsing attributes in process `syz.3.280'. [ 191.359901][ T7289] new_slab+0x23b/0x330 [ 191.364264][ T7289] ___slab_alloc+0xd9c/0x1940 [ 191.369005][ T7289] __slab_alloc.constprop.0+0x56/0xb0 [ 191.374747][ T7289] kmem_cache_alloc_lru_noprof+0xf4/0x3b0 [ 191.380601][ T7289] __d_alloc+0x31/0xaa0 [ 191.385199][ T7289] d_alloc+0x4a/0x1e0 [ 191.392529][ T7289] d_alloc_parallel+0xe3/0x12e0 [ 191.400088][ T7289] __lookup_slow+0x193/0x460 [ 191.405212][ T7289] walk_component+0x353/0x5b0 [ 191.410877][ T7289] link_path_walk+0x627/0xe20 [ 191.415642][ T7289] path_openat+0x1b0/0x2cb0 [ 191.469149][ T7289] do_filp_open+0x20b/0x470 [ 191.479426][ T7289] page last free pid 1 tgid 1 stack trace: [ 191.492174][ T7289] __free_frozen_pages+0x7fe/0x1180 [ 191.503056][ T7289] free_contig_range+0x183/0x4b0 [ 191.561134][ T7289] destroy_args+0x7f6/0xa60 [ 191.700990][ T7289] debug_vm_pgtable+0x13b8/0x2d00 [ 191.762008][ T7289] do_one_initcall+0x120/0x6e0 [ 191.770326][ T7289] kernel_init_freeable+0x5c2/0x900 [ 191.775617][ T7289] kernel_init+0x1c/0x2b0 [ 191.829441][ T7289] ret_from_fork+0x5d7/0x6f0 [ 191.835125][ T7306] ======================================================= [ 191.835125][ T7306] WARNING: The mand mount option has been deprecated and [ 191.835125][ T7306] and is ignored by this kernel. Remove the mand [ 191.835125][ T7306] option from the mount to silence this warning. [ 191.835125][ T7306] ======================================================= [ 191.870374][ C0] vkms_vblank_simulate: vblank timer overrun [ 191.880965][ T7289] ret_from_fork_asm+0x1a/0x30 [ 192.547277][ T7310] unchecked MSR access error: WRMSR to 0x418 (tried to write 0x0000000000000322) at rIP: 0xffffffff8163ef29 (__mcheck_cpu_init_clear_banks+0x109/0x1f0) [ 192.562984][ T7310] Call Trace: [ 192.566264][ T7310] [ 192.569232][ T7310] ? __pfx_mce_cpu_restart+0x10/0x10 [ 192.574545][ T7310] mce_cpu_restart+0x98/0xb0 [ 192.579165][ T7310] smp_call_function_many_cond+0xefc/0x1510 [ 192.585219][ T7310] ? __pfx_mce_cpu_restart+0x10/0x10 [ 192.590548][ T7310] ? lockdep_hardirqs_on+0x7c/0x110 [ 192.595750][ T7310] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 192.601570][ T7310] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 192.607986][ T7310] ? __pfx___try_to_del_timer_sync+0x10/0x10 [ 192.614165][ T7310] ? __pfx_mce_cpu_restart+0x10/0x10 [ 192.619471][ T7310] on_each_cpu_cond_mask+0x40/0x90 [ 192.624589][ T7310] set_bank+0x240/0x3a0 [ 192.628751][ T7310] ? __pfx_set_bank+0x10/0x10 [ 192.633427][ T7310] ? find_held_lock+0x2b/0x80 [ 192.638105][ T7310] ? __pfx_set_bank+0x10/0x10 [ 192.642779][ T7310] dev_attr_store+0x58/0x80 [ 192.647281][ T7310] ? __pfx_dev_attr_store+0x10/0x10 [ 192.652569][ T7310] sysfs_kf_write+0xf2/0x150 [ 192.657169][ T7310] kernfs_fop_write_iter+0x354/0x510 [ 192.662467][ T7310] ? __pfx_sysfs_kf_write+0x10/0x10 [ 192.667673][ T7310] vfs_write+0x6c4/0x1150 [ 192.671999][ T7310] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 192.677805][ T7310] ? __pfx___mutex_lock+0x10/0x10 [ 192.682829][ T7310] ? __pfx_vfs_write+0x10/0x10 [ 192.687712][ T7310] ksys_write+0x12a/0x250 [ 192.692057][ T7310] ? __pfx_ksys_write+0x10/0x10 [ 192.696902][ T7310] do_syscall_64+0xcd/0x490 [ 192.701423][ T7310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.707446][ T7310] RIP: 0033:0x7fa6e978e9a9 [ 192.711879][ T7310] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 192.731618][ T7310] RSP: 002b:00007fa6ea6ab038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 192.740058][ T7310] RAX: ffffffffffffffda RBX: 00007fa6e99b5fa0 RCX: 00007fa6e978e9a9 [ 192.748046][ T7310] RDX: 0000000000000003 RSI: 0000200000000240 RDI: 0000000000000006 [ 192.756035][ T7310] RBP: 00007fa6e9810d69 R08: 0000000000000000 R09: 0000000000000000 [ 192.764106][ T7310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 192.772088][ T7310] R13: 0000000000000000 R14: 00007fa6e99b5fa0 R15: 00007ffd7be9ab98 [ 192.780085][ T7310] [ 192.784286][ C0] vkms_vblank_simulate: vblank timer overrun [ 192.879000][ T7314] sysfs_service_op_store: Client not running :-5: [ 193.187051][ T7310] program syz.1.283 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 193.321106][ T7314] sysfs_service_op_show: Client not running :-5: [ 194.336239][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.349937][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.600477][ T7321] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 194.619460][ T7321] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 194.703522][ T7321] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 194.849942][ T7321] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 194.895098][ T7321] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 195.195967][ T7321] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 195.306528][ T7321] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 195.314524][ T7321] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 195.373684][ T5167] Bluetooth: hci0: command 0x0c1a tx timeout [ 195.602348][ T7321] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 195.713043][ T7321] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 195.730045][ T7321] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 195.830984][ T7321] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 195.961686][ T7353] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input27 [ 196.734010][ T7354] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input28 [ 196.929932][ T5167] Bluetooth: hci2: command 0x0c1a tx timeout [ 197.369964][ T5167] Bluetooth: hci1: command 0x0c1a tx timeout [ 197.460103][ T5167] Bluetooth: hci0: command 0x0c1a tx timeout [ 197.742830][ T7377] sysfs_service_op_store: Client not running :-5: [ 197.770331][ T5167] Bluetooth: hci3: command 0x0c1a tx timeout [ 198.179976][ T7377] sysfs_service_op_show: Client not running :-5: [ 198.420077][ T7387] hub 8-0:1.0: USB hub found [ 198.456288][ T7387] hub 8-0:1.0: 1 port detected [ 198.800735][ T7399] netlink: 28 bytes leftover after parsing attributes in process `syz.2.302'. [ 198.970180][ T5167] Bluetooth: hci2: command 0x0c1a tx timeout [ 199.452983][ T5167] Bluetooth: hci1: command 0x0c1a tx timeout [ 199.530092][ T5167] Bluetooth: hci0: command 0x0c1a tx timeout [ 199.849859][ T5167] Bluetooth: hci3: command 0x0c1a tx timeout [ 201.060345][ T5167] Bluetooth: hci2: command 0x0c1a tx timeout [ 201.373326][ T7431] sp0: Synchronizing with TNC [ 201.536299][ T5167] Bluetooth: hci1: command 0x0c1a tx timeout [ 201.930394][ T5167] Bluetooth: hci3: command 0x0c1a tx timeout [ 202.513330][ T7431] capability: warning: `syz.2.309' uses 32-bit capabilities (legacy support in use) [ 205.953767][ T7479] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input29 [ 206.764014][ T7484] phram: parameter too long [ 206.811847][ T7480] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input30 [ 207.704686][ T7494] sysfs_service_op_store: Client not running :-5: [ 208.111465][ T7494] sysfs_service_op_show: Client not running :-5: [ 208.917676][ T7506] FAULT_INJECTION: forcing a failure. [ 208.917676][ T7506] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 208.933705][ T7506] CPU: 0 UID: 0 PID: 7506 Comm: syz.0.324 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 208.933734][ T7506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 208.933747][ T7506] Call Trace: [ 208.933755][ T7506] [ 208.933765][ T7506] dump_stack_lvl+0x16c/0x1f0 [ 208.933794][ T7506] should_fail_ex+0x512/0x640 [ 208.933824][ T7506] _copy_to_user+0x32/0xd0 [ 208.933853][ T7506] simple_read_from_buffer+0xcb/0x170 [ 208.933891][ T7506] proc_fail_nth_read+0x197/0x270 [ 208.933922][ T7506] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 208.933962][ T7506] ? rw_verify_area+0xcf/0x680 [ 208.933994][ T7506] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 208.934026][ T7506] vfs_read+0x1e4/0xc60 [ 208.934050][ T7506] ? __pfx___mutex_lock+0x10/0x10 [ 208.934068][ T7506] ? __pfx_vfs_read+0x10/0x10 [ 208.934086][ T7506] ? __fget_files+0x20e/0x3c0 [ 208.934111][ T7506] ksys_read+0x12a/0x250 [ 208.934124][ T7506] ? __pfx_ksys_read+0x10/0x10 [ 208.934141][ T7506] do_syscall_64+0xcd/0x490 [ 208.934157][ T7506] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.934171][ T7506] RIP: 0033:0x7f06f638d3bc [ 208.934183][ T7506] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 208.934196][ T7506] RSP: 002b:00007f06f7165030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 208.934209][ T7506] RAX: ffffffffffffffda RBX: 00007f06f65b5fa0 RCX: 00007f06f638d3bc [ 208.934220][ T7506] RDX: 000000000000000f RSI: 00007f06f71650a0 RDI: 0000000000000004 [ 208.934228][ T7506] RBP: 00007f06f7165090 R08: 0000000000000000 R09: 0000000000000000 [ 208.934237][ T7506] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 208.934245][ T7506] R13: 0000000000000000 R14: 00007f06f65b5fa0 R15: 00007ffe068e2e18 [ 208.934264][ T7506] [ 209.120827][ C0] vkms_vblank_simulate: vblank timer overrun [ 209.470402][ T7514] FAULT_INJECTION: forcing a failure. [ 209.470402][ T7514] name failslab, interval 1, probability 0, space 0, times 0 [ 209.483132][ T7514] CPU: 1 UID: 0 PID: 7514 Comm: syz.0.325 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 209.483152][ T7514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 209.483160][ T7514] Call Trace: [ 209.483165][ T7514] [ 209.483171][ T7514] dump_stack_lvl+0x16c/0x1f0 [ 209.483189][ T7514] should_fail_ex+0x512/0x640 [ 209.483207][ T7514] should_failslab+0xc2/0x120 [ 209.483224][ T7514] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 209.483239][ T7514] ? radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 209.483262][ T7514] radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 209.483285][ T7514] idr_get_free+0x528/0xa30 [ 209.483312][ T7514] idr_alloc_u32+0x190/0x2f0 [ 209.483333][ T7514] ? __pfx_idr_alloc_u32+0x10/0x10 [ 209.483355][ T7514] ? lock_acquire+0x179/0x350 [ 209.483376][ T7514] idr_alloc_cyclic+0x10b/0x230 [ 209.483397][ T7514] ? __pfx_idr_alloc_cyclic+0x10/0x10 [ 209.483416][ T7514] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 209.483441][ T7514] map_create+0x9aa/0x1db0 [ 209.483466][ T7514] ? __pfx_map_create+0x10/0x10 [ 209.483483][ T7514] ? __might_fault+0xe3/0x190 [ 209.483495][ T7514] ? __might_fault+0xe3/0x190 [ 209.483507][ T7514] ? __might_fault+0x13b/0x190 [ 209.483527][ T7514] __sys_bpf+0x4d8d/0x4ea0 [ 209.483541][ T7514] ? __pfx___sys_bpf+0x10/0x10 [ 209.483552][ T7514] ? vfs_write+0x15d/0x1150 [ 209.483569][ T7514] ? do_futex+0x122/0x350 [ 209.483585][ T7514] ? __pfx_do_futex+0x10/0x10 [ 209.483611][ T7514] ? xfd_validate_state+0x61/0x180 [ 209.483628][ T7514] ? __pfx_ksys_write+0x10/0x10 [ 209.483644][ T7514] __x64_sys_bpf+0x78/0xc0 [ 209.483656][ T7514] ? lockdep_hardirqs_on+0x7c/0x110 [ 209.483669][ T7514] do_syscall_64+0xcd/0x490 [ 209.483684][ T7514] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.483698][ T7514] RIP: 0033:0x7f06f638e9a9 [ 209.483711][ T7514] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 209.483723][ T7514] RSP: 002b:00007f06f7165038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 209.483736][ T7514] RAX: ffffffffffffffda RBX: 00007f06f65b5fa0 RCX: 00007f06f638e9a9 [ 209.483745][ T7514] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 0000000000000000 [ 209.483753][ T7514] RBP: 00007f06f6410d69 R08: 0000000000000000 R09: 0000000000000000 [ 209.483761][ T7514] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 209.483769][ T7514] R13: 0000000000000000 R14: 00007f06f65b5fa0 R15: 00007ffe068e2e18 [ 209.483787][ T7514] [ 211.159157][ T7537] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input31 [ 211.464394][ T7543] sysfs_service_op_store: Client not running :-5: [ 211.750473][ T7543] sysfs_service_op_show: Client not running :-5: [ 216.352678][ T7599] FAULT_INJECTION: forcing a failure. [ 216.352678][ T7599] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 216.386611][ T7599] CPU: 0 UID: 0 PID: 7599 Comm: syz.0.342 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 216.386633][ T7599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 216.386641][ T7599] Call Trace: [ 216.386646][ T7599] [ 216.386652][ T7599] dump_stack_lvl+0x16c/0x1f0 [ 216.386671][ T7599] should_fail_ex+0x512/0x640 [ 216.386688][ T7599] should_fail_alloc_page+0xe7/0x130 [ 216.386706][ T7599] prepare_alloc_pages+0x3c2/0x610 [ 216.386728][ T7599] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 216.386747][ T7599] ? __lock_acquire+0x622/0x1c90 [ 216.386768][ T7599] ? arch_stack_walk+0xa6/0x100 [ 216.386781][ T7599] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 216.386812][ T7599] ? __lock_acquire+0xb8a/0x1c90 [ 216.386828][ T7599] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 216.386850][ T7599] ? policy_nodemask+0xea/0x4e0 [ 216.386866][ T7599] alloc_pages_mpol+0x1fb/0x550 [ 216.386883][ T7599] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 216.386899][ T7599] ? find_held_lock+0x2b/0x80 [ 216.386914][ T7599] ? __pfx___pollwait+0x10/0x10 [ 216.386933][ T7599] alloc_pages_noprof+0x131/0x390 [ 216.386948][ T7599] get_free_pages_noprof+0x10/0xb0 [ 216.386965][ T7599] __pollwait+0x295/0x490 [ 216.386985][ T7599] ? __pfx___pollwait+0x10/0x10 [ 216.387002][ T7599] unix_dgram_poll+0x82/0x770 [ 216.387022][ T7599] ? __pfx_unix_dgram_poll+0x10/0x10 [ 216.387040][ T7599] sock_poll+0x160/0x510 [ 216.387059][ T7599] ? __pfx_sock_poll+0x10/0x10 [ 216.387082][ T7599] do_select+0xd3a/0x17e0 [ 216.387116][ T7599] ? __pfx_do_select+0x10/0x10 [ 216.387137][ T7599] ? __pfx___pollwait+0x10/0x10 [ 216.387158][ T7599] ? __pfx_pollwake+0x10/0x10 [ 216.387178][ T7599] ? __pfx_pollwake+0x10/0x10 [ 216.387198][ T7599] ? __pfx_pollwake+0x10/0x10 [ 216.387218][ T7599] ? __pfx_pollwake+0x10/0x10 [ 216.387238][ T7599] ? __pfx_pollwake+0x10/0x10 [ 216.387258][ T7599] ? __pfx_pollwake+0x10/0x10 [ 216.387278][ T7599] ? __pfx_pollwake+0x10/0x10 [ 216.387297][ T7599] ? __pfx_pollwake+0x10/0x10 [ 216.387317][ T7599] ? __pfx_pollwake+0x10/0x10 [ 216.387337][ T7599] ? find_held_lock+0x2b/0x80 [ 216.387349][ T7599] ? __might_fault+0xe3/0x190 [ 216.387362][ T7599] ? __might_fault+0xe3/0x190 [ 216.387373][ T7599] ? __might_fault+0x13b/0x190 [ 216.387392][ T7599] ? core_sys_select+0x453/0xc10 [ 216.387410][ T7599] core_sys_select+0x453/0xc10 [ 216.387434][ T7599] ? __pfx_core_sys_select+0x10/0x10 [ 216.387457][ T7599] ? proc_fail_nth_write+0x9f/0x250 [ 216.387491][ T7599] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 216.387511][ T7599] kern_select+0x15d/0x1e0 [ 216.387530][ T7599] ? __pfx_kern_select+0x10/0x10 [ 216.387552][ T7599] ? __pfx_ksys_write+0x10/0x10 [ 216.387568][ T7599] __x64_sys_select+0xbd/0x160 [ 216.387587][ T7599] ? do_syscall_64+0x91/0x490 [ 216.387600][ T7599] ? lockdep_hardirqs_on+0x7c/0x110 [ 216.387612][ T7599] do_syscall_64+0xcd/0x490 [ 216.387627][ T7599] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.387641][ T7599] RIP: 0033:0x7f06f638e9a9 [ 216.387652][ T7599] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 216.387665][ T7599] RSP: 002b:00007f06f7123038 EFLAGS: 00000246 ORIG_RAX: 0000000000000017 [ 216.387679][ T7599] RAX: ffffffffffffffda RBX: 00007f06f65b6160 RCX: 00007f06f638e9a9 [ 216.387688][ T7599] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000011 [ 216.387696][ T7599] RBP: 00007f06f7123090 R08: 0000000000000000 R09: 0000000000000000 [ 216.387704][ T7599] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 216.387712][ T7599] R13: 0000000000000001 R14: 00007f06f65b6160 R15: 00007ffe068e2e18 [ 216.387729][ T7599] [ 217.241089][ T7606] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input32 [ 217.909600][ T7618] FAULT_INJECTION: forcing a failure. [ 217.909600][ T7618] name failslab, interval 1, probability 0, space 0, times 0 [ 217.934473][ T7620] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input33 [ 218.061140][ T7618] CPU: 0 UID: 0 PID: 7618 Comm: syz.1.346 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 218.061163][ T7618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 218.061172][ T7618] Call Trace: [ 218.061178][ T7618] [ 218.061184][ T7618] dump_stack_lvl+0x16c/0x1f0 [ 218.061204][ T7618] should_fail_ex+0x512/0x640 [ 218.061219][ T7618] ? __kmalloc_noprof+0xbf/0x510 [ 218.061235][ T7618] ? ops_init+0x77/0x5f0 [ 218.061249][ T7618] should_failslab+0xc2/0x120 [ 218.061265][ T7618] __kmalloc_noprof+0xd2/0x510 [ 218.061281][ T7618] ? vrf_netns_init+0x185/0x1f0 [ 218.061297][ T7618] ops_init+0x77/0x5f0 [ 218.061314][ T7618] setup_net+0x1ff/0x510 [ 218.061328][ T7618] ? lockdep_init_map_type+0x5c/0x280 [ 218.061348][ T7618] ? __pfx_setup_net+0x10/0x10 [ 218.061365][ T7618] ? debug_mutex_init+0x37/0x70 [ 218.061382][ T7618] copy_net_ns+0x2a6/0x5f0 [ 218.061408][ T7618] create_new_namespaces+0x3ea/0xa90 [ 218.061429][ T7618] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 218.061447][ T7618] ksys_unshare+0x45b/0xa40 [ 218.061467][ T7618] ? __pfx_ksys_unshare+0x10/0x10 [ 218.061485][ T7618] ? xfd_validate_state+0x61/0x180 [ 218.061508][ T7618] __x64_sys_unshare+0x31/0x40 [ 218.061526][ T7618] do_syscall_64+0xcd/0x490 [ 218.061541][ T7618] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.061555][ T7618] RIP: 0033:0x7fa6e978e9a9 [ 218.061567][ T7618] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 218.061580][ T7618] RSP: 002b:00007fa6ea669038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 218.061593][ T7618] RAX: ffffffffffffffda RBX: 00007fa6e99b6160 RCX: 00007fa6e978e9a9 [ 218.061604][ T7618] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 218.061617][ T7618] RBP: 00007fa6e9810d69 R08: 0000000000000000 R09: 0000000000000000 [ 218.061631][ T7618] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 218.061643][ T7618] R13: 0000000000000000 R14: 00007fa6e99b6160 R15: 00007ffd7be9ab98 [ 218.061675][ T7618] [ 218.867152][ T7622] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input34 [ 219.421446][ T7637] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input35 [ 220.264696][ T7639] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input36 [ 222.467133][ T7681] vhci_hcd: invalid port number 16 [ 222.475165][ T7681] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 222.475361][ T7682] vhci_hcd: invalid port number 16 [ 222.559993][ T7682] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 222.666829][ T7682] random: crng reseeded on system resumption [ 223.499410][ T7696] netlink: 'syz.1.362': attribute type 11 has an invalid length. [ 224.091706][ T7703] FAULT_INJECTION: forcing a failure. [ 224.091706][ T7703] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 224.104889][ T7703] CPU: 0 UID: 0 PID: 7703 Comm: syz.3.363 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 224.104921][ T7703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 224.104936][ T7703] Call Trace: [ 224.104945][ T7703] [ 224.104953][ T7703] dump_stack_lvl+0x16c/0x1f0 [ 224.104985][ T7703] should_fail_ex+0x512/0x640 [ 224.105016][ T7703] core_sys_select+0x4c5/0xc10 [ 224.105063][ T7703] ? __pfx_core_sys_select+0x10/0x10 [ 224.105107][ T7703] ? proc_fail_nth_write+0x9f/0x250 [ 224.105171][ T7703] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 224.105215][ T7703] kern_select+0x15d/0x1e0 [ 224.105251][ T7703] ? __pfx_kern_select+0x10/0x10 [ 224.105293][ T7703] ? __pfx_ksys_write+0x10/0x10 [ 224.105322][ T7703] __x64_sys_select+0xbd/0x160 [ 224.105357][ T7703] ? do_syscall_64+0x91/0x490 [ 224.105381][ T7703] ? lockdep_hardirqs_on+0x7c/0x110 [ 224.105406][ T7703] do_syscall_64+0xcd/0x490 [ 224.105433][ T7703] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.105458][ T7703] RIP: 0033:0x7fd1c0b8e9a9 [ 224.105478][ T7703] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 224.105500][ T7703] RSP: 002b:00007fd1c1933038 EFLAGS: 00000246 ORIG_RAX: 0000000000000017 [ 224.105523][ T7703] RAX: ffffffffffffffda RBX: 00007fd1c0db6160 RCX: 00007fd1c0b8e9a9 [ 224.105540][ T7703] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000011 [ 224.105554][ T7703] RBP: 00007fd1c1933090 R08: 0000000000000000 R09: 0000000000000000 [ 224.105569][ T7703] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 224.105584][ T7703] R13: 0000000000000001 R14: 00007fd1c0db6160 R15: 00007ffd49a94018 [ 224.105618][ T7703] [ 224.402514][ T7710] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input37 [ 224.547560][ T7709] blkio.reset_stats is deprecated [ 224.745469][ T7712] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input38 [ 225.197202][ T7729] sysfs_service_op_store: Client not running :-5: [ 225.511003][ T7732] sysfs_service_op_show: Client not running :-5: [ 226.149521][ T7740] FAULT_INJECTION: forcing a failure. [ 226.149521][ T7740] name failslab, interval 1, probability 0, space 0, times 0 [ 226.245451][ T7745] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input39 [ 226.282508][ T7740] CPU: 0 UID: 0 PID: 7740 Comm: syz.0.370 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 226.282536][ T7740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 226.282544][ T7740] Call Trace: [ 226.282550][ T7740] [ 226.282555][ T7740] dump_stack_lvl+0x16c/0x1f0 [ 226.282574][ T7740] should_fail_ex+0x512/0x640 [ 226.282589][ T7740] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 226.282607][ T7740] should_failslab+0xc2/0x120 [ 226.282623][ T7740] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 226.282638][ T7740] ? __d_alloc+0x31/0xaa0 [ 226.282655][ T7740] __d_alloc+0x31/0xaa0 [ 226.282671][ T7740] d_alloc_pseudo+0x1c/0xc0 [ 226.282688][ T7740] alloc_file_pseudo+0xcf/0x230 [ 226.282707][ T7740] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 226.282725][ T7740] ? _raw_spin_unlock+0x28/0x50 [ 226.282743][ T7740] ? alloc_fd+0x471/0x7d0 [ 226.282768][ T7740] __anon_inode_getfile+0xe8/0x280 [ 226.282792][ T7740] anon_inode_getfd+0x52/0xb0 [ 226.282813][ T7740] map_create+0xb68/0x1db0 [ 226.282839][ T7740] ? __pfx_map_create+0x10/0x10 [ 226.282856][ T7740] ? __might_fault+0xe3/0x190 [ 226.282869][ T7740] ? __might_fault+0xe3/0x190 [ 226.282880][ T7740] ? __might_fault+0x13b/0x190 [ 226.282900][ T7740] __sys_bpf+0x4d8d/0x4ea0 [ 226.282914][ T7740] ? __pfx___sys_bpf+0x10/0x10 [ 226.282925][ T7740] ? vfs_write+0x15d/0x1150 [ 226.282942][ T7740] ? do_futex+0x122/0x350 [ 226.282958][ T7740] ? __pfx_do_futex+0x10/0x10 [ 226.282984][ T7740] ? xfd_validate_state+0x61/0x180 [ 226.283008][ T7740] ? __pfx_ksys_write+0x10/0x10 [ 226.283024][ T7740] __x64_sys_bpf+0x78/0xc0 [ 226.283037][ T7740] ? lockdep_hardirqs_on+0x7c/0x110 [ 226.283050][ T7740] do_syscall_64+0xcd/0x490 [ 226.283066][ T7740] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.283080][ T7740] RIP: 0033:0x7f06f638e9a9 [ 226.283092][ T7740] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 226.283105][ T7740] RSP: 002b:00007f06f7165038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 226.283119][ T7740] RAX: ffffffffffffffda RBX: 00007f06f65b5fa0 RCX: 00007f06f638e9a9 [ 226.283128][ T7740] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 0000000000000000 [ 226.283136][ T7740] RBP: 00007f06f6410d69 R08: 0000000000000000 R09: 0000000000000000 [ 226.283145][ T7740] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 226.283153][ T7740] R13: 0000000000000000 R14: 00007f06f65b5fa0 R15: 00007ffe068e2e18 [ 226.283171][ T7740] [ 226.946306][ T7747] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input40 [ 227.320084][ T7735] ptrace attach of "./syz-executor exec"[5850] was attempted by "./syz-executor exec"[7735] [ 228.176090][ T7758] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input41 [ 228.638669][ T7750] phram: parameter too long [ 229.307651][ T7760] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input42 [ 230.695951][ T7792] FAULT_INJECTION: forcing a failure. [ 230.695951][ T7792] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 230.713445][ T7792] CPU: 1 UID: 0 PID: 7792 Comm: syz.2.379 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 230.713468][ T7792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 230.713477][ T7792] Call Trace: [ 230.713482][ T7792] [ 230.713487][ T7792] dump_stack_lvl+0x16c/0x1f0 [ 230.713506][ T7792] should_fail_ex+0x512/0x640 [ 230.713524][ T7792] _copy_from_iter+0x29f/0x16f0 [ 230.713541][ T7792] ? __alloc_skb+0x200/0x380 [ 230.713555][ T7792] ? __pfx__copy_from_iter+0x10/0x10 [ 230.713572][ T7792] ? __lock_acquire+0xb8a/0x1c90 [ 230.713595][ T7792] netlink_sendmsg+0x829/0xdd0 [ 230.713615][ T7792] ? __pfx_netlink_sendmsg+0x10/0x10 [ 230.713638][ T7792] ____sys_sendmsg+0xa98/0xc70 [ 230.713656][ T7792] ? copy_msghdr_from_user+0x10a/0x160 [ 230.713670][ T7792] ? __pfx_____sys_sendmsg+0x10/0x10 [ 230.713695][ T7792] ___sys_sendmsg+0x134/0x1d0 [ 230.713717][ T7792] ? __pfx____sys_sendmsg+0x10/0x10 [ 230.713729][ T7792] ? __lock_acquire+0x622/0x1c90 [ 230.713768][ T7792] __sys_sendmsg+0x16d/0x220 [ 230.713782][ T7792] ? __pfx___sys_sendmsg+0x10/0x10 [ 230.713808][ T7792] do_syscall_64+0xcd/0x490 [ 230.713823][ T7792] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.713837][ T7792] RIP: 0033:0x7f5facd8e9a9 [ 230.713848][ T7792] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 230.713861][ T7792] RSP: 002b:00007f5fadbbc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 230.713874][ T7792] RAX: ffffffffffffffda RBX: 00007f5facfb6080 RCX: 00007f5facd8e9a9 [ 230.713883][ T7792] RDX: 0000000000000080 RSI: 0000200000004080 RDI: 0000000000000003 [ 230.713892][ T7792] RBP: 00007f5fadbbc090 R08: 0000000000000000 R09: 0000000000000000 [ 230.713900][ T7792] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 230.713908][ T7792] R13: 0000000000000001 R14: 00007f5facfb6080 R15: 00007ffe96b2d198 [ 230.713927][ T7792] [ 230.910952][ C1] vkms_vblank_simulate: vblank timer overrun [ 231.304637][ T7797] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input43 [ 231.883766][ T7798] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input44 [ 232.743580][ T7813] sysfs_service_op_store: Client not running :-5: [ 233.420381][ T7812] sysfs_service_op_show: Client not running :-5: [ 234.925343][ T7836] sysfs_service_op_store: Client not running :-5: [ 235.190598][ T7836] sysfs_service_op_show: Client not running :-5: [ 236.274470][ T7851] FAULT_INJECTION: forcing a failure. [ 236.274470][ T7851] name failslab, interval 1, probability 0, space 0, times 0 [ 236.287267][ T7851] CPU: 0 UID: 0 PID: 7851 Comm: syz.3.391 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 236.287303][ T7851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 236.287319][ T7851] Call Trace: [ 236.287328][ T7851] [ 236.287339][ T7851] dump_stack_lvl+0x16c/0x1f0 [ 236.287372][ T7851] should_fail_ex+0x512/0x640 [ 236.287408][ T7851] should_failslab+0xc2/0x120 [ 236.287442][ T7851] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 236.287473][ T7851] ? radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 236.287521][ T7851] radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 236.287566][ T7851] idr_get_free+0x528/0xa30 [ 236.287623][ T7851] idr_alloc_u32+0x190/0x2f0 [ 236.287668][ T7851] ? __pfx_idr_alloc_u32+0x10/0x10 [ 236.287711][ T7851] ? lock_acquire+0x179/0x350 [ 236.287756][ T7851] idr_alloc_cyclic+0x10b/0x230 [ 236.287798][ T7851] ? __pfx_idr_alloc_cyclic+0x10/0x10 [ 236.287854][ T7851] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 236.287909][ T7851] map_create+0x9aa/0x1db0 [ 236.287959][ T7851] ? __pfx_map_create+0x10/0x10 [ 236.288036][ T7851] ? __might_fault+0xe3/0x190 [ 236.288070][ T7851] ? __might_fault+0xe3/0x190 [ 236.288093][ T7851] ? __might_fault+0x13b/0x190 [ 236.288158][ T7851] __sys_bpf+0x4d8d/0x4ea0 [ 236.288187][ T7851] ? __pfx___sys_bpf+0x10/0x10 [ 236.288212][ T7851] ? vfs_write+0x15d/0x1150 [ 236.288246][ T7851] ? do_futex+0x122/0x350 [ 236.288278][ T7851] ? __pfx_do_futex+0x10/0x10 [ 236.288334][ T7851] ? xfd_validate_state+0x61/0x180 [ 236.288366][ T7851] ? __pfx_ksys_write+0x10/0x10 [ 236.288402][ T7851] __x64_sys_bpf+0x78/0xc0 [ 236.288426][ T7851] ? lockdep_hardirqs_on+0x7c/0x110 [ 236.288451][ T7851] do_syscall_64+0xcd/0x490 [ 236.288484][ T7851] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.288511][ T7851] RIP: 0033:0x7fd1c0b8e9a9 [ 236.288537][ T7851] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 236.288561][ T7851] RSP: 002b:00007fd1c1975038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 236.288588][ T7851] RAX: ffffffffffffffda RBX: 00007fd1c0db5fa0 RCX: 00007fd1c0b8e9a9 [ 236.288608][ T7851] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 0000000000000000 [ 236.288624][ T7851] RBP: 00007fd1c0c10d69 R08: 0000000000000000 R09: 0000000000000000 [ 236.288639][ T7851] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 236.288659][ T7851] R13: 0000000000000000 R14: 00007fd1c0db5fa0 R15: 00007ffd49a94018 [ 236.288694][ T7851] [ 238.210274][ T7894] FAULT_INJECTION: forcing a failure. [ 238.210274][ T7894] name failslab, interval 1, probability 0, space 0, times 0 [ 238.252581][ T7894] CPU: 0 UID: 0 PID: 7894 Comm: syz.1.399 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 238.252618][ T7894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 238.252634][ T7894] Call Trace: [ 238.252643][ T7894] [ 238.252654][ T7894] dump_stack_lvl+0x16c/0x1f0 [ 238.252687][ T7894] should_fail_ex+0x512/0x640 [ 238.252714][ T7894] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 238.252747][ T7894] should_failslab+0xc2/0x120 [ 238.252777][ T7894] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 238.252822][ T7894] ? __d_alloc+0x31/0xaa0 [ 238.252856][ T7894] __d_alloc+0x31/0xaa0 [ 238.252889][ T7894] d_alloc_pseudo+0x1c/0xc0 [ 238.252923][ T7894] alloc_file_pseudo+0xcf/0x230 [ 238.252959][ T7894] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 238.252994][ T7894] ? _raw_spin_unlock+0x28/0x50 [ 238.253030][ T7894] ? alloc_fd+0x471/0x7d0 [ 238.253070][ T7894] __anon_inode_getfile+0xe8/0x280 [ 238.253116][ T7894] anon_inode_getfd+0x52/0xb0 [ 238.253159][ T7894] map_create+0xb68/0x1db0 [ 238.253209][ T7894] ? __pfx_map_create+0x10/0x10 [ 238.253244][ T7894] ? __might_fault+0xe3/0x190 [ 238.253269][ T7894] ? __might_fault+0xe3/0x190 [ 238.253292][ T7894] ? __might_fault+0x13b/0x190 [ 238.253332][ T7894] __sys_bpf+0x4d8d/0x4ea0 [ 238.253360][ T7894] ? __pfx___sys_bpf+0x10/0x10 [ 238.253383][ T7894] ? vfs_write+0x15d/0x1150 [ 238.253416][ T7894] ? do_futex+0x122/0x350 [ 238.253448][ T7894] ? __pfx_do_futex+0x10/0x10 [ 238.253498][ T7894] ? xfd_validate_state+0x61/0x180 [ 238.253532][ T7894] ? __pfx_ksys_write+0x10/0x10 [ 238.253564][ T7894] __x64_sys_bpf+0x78/0xc0 [ 238.253588][ T7894] ? lockdep_hardirqs_on+0x7c/0x110 [ 238.253613][ T7894] do_syscall_64+0xcd/0x490 [ 238.253643][ T7894] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.253671][ T7894] RIP: 0033:0x7fa6e978e9a9 [ 238.253692][ T7894] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 238.253716][ T7894] RSP: 002b:00007fa6ea6ab038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 238.253741][ T7894] RAX: ffffffffffffffda RBX: 00007fa6e99b5fa0 RCX: 00007fa6e978e9a9 [ 238.253759][ T7894] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 0000000000000000 [ 238.253775][ T7894] RBP: 00007fa6e9810d69 R08: 0000000000000000 R09: 0000000000000000 [ 238.253791][ T7894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 238.253816][ T7894] R13: 0000000000000000 R14: 00007fa6e99b5fa0 R15: 00007ffd7be9ab98 [ 238.253851][ T7894] [ 239.138499][ T7901] sysfs_service_op_store: Client not running :-5: [ 239.510356][ T7903] hub 8-0:1.0: USB hub found [ 239.537287][ T7903] hub 8-0:1.0: 1 port detected [ 239.748031][ T7918] sysfs_service_op_show: Client not running :-5: [ 241.381215][ T7920] ptrace attach of "./syz-executor exec"[5848] was attempted by "./syz-executor exec"[7920] [ 242.014812][ T7940] FAULT_INJECTION: forcing a failure. [ 242.014812][ T7940] name fail_futex, interval 1, probability 0, space 0, times 1 [ 242.209815][ T7940] CPU: 1 UID: 0 PID: 7940 Comm: syz.1.408 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 242.209849][ T7940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 242.209876][ T7940] Call Trace: [ 242.209884][ T7940] [ 242.209893][ T7940] dump_stack_lvl+0x16c/0x1f0 [ 242.209927][ T7940] should_fail_ex+0x512/0x640 [ 242.209951][ T7940] ? find_held_lock+0x2b/0x80 [ 242.209981][ T7940] get_futex_key+0x1d0/0x1540 [ 242.210013][ T7940] ? find_held_lock+0x2b/0x80 [ 242.210038][ T7940] ? __pfx_get_futex_key+0x10/0x10 [ 242.210069][ T7940] ? fput+0x70/0xf0 [ 242.210098][ T7940] ? fault_dirty_shared_page+0x18f/0x6c0 [ 242.210132][ T7940] futex_wake+0xe7/0x4e0 [ 242.210169][ T7940] ? __pfx_futex_wake+0x10/0x10 [ 242.210220][ T7940] do_futex+0x1e3/0x350 [ 242.210251][ T7940] ? __pfx_do_futex+0x10/0x10 [ 242.210280][ T7940] ? find_held_lock+0x2b/0x80 [ 242.210306][ T7940] ? handle_mm_fault+0x2ab/0xd10 [ 242.210345][ T7940] __x64_sys_futex+0x1e0/0x4c0 [ 242.210381][ T7940] ? __pfx___x64_sys_futex+0x10/0x10 [ 242.210425][ T7940] do_syscall_64+0xcd/0x490 [ 242.210453][ T7940] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.210479][ T7940] RIP: 0033:0x7fa6e978e9a9 [ 242.210499][ T7940] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 242.210522][ T7940] RSP: 002b:00007ffd7be9acf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 242.210546][ T7940] RAX: ffffffffffffffda RBX: 00007fa6e99b5fa8 RCX: 00007fa6e978e9a9 [ 242.210569][ T7940] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fa6e99b5fa8 [ 242.210585][ T7940] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000087be9afef [ 242.210600][ T7940] R10: 00007fa6e99b5fa0 R11: 0000000000000246 R12: 00007fa6e99b5fac [ 242.210616][ T7940] R13: 00007fa6e99b5fa0 R14: 0000000000001e64 R15: 0000000000000003 [ 242.210650][ T7940] [ 242.625597][ T7948] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input46 [ 243.444174][ T7951] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input47 [ 245.052958][ T7980] FAULT_INJECTION: forcing a failure. [ 245.052958][ T7980] name failslab, interval 1, probability 0, space 0, times 0 [ 245.111296][ T7980] CPU: 0 UID: 0 PID: 7980 Comm: syz.2.416 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 245.111318][ T7980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 245.111326][ T7980] Call Trace: [ 245.111332][ T7980] [ 245.111338][ T7980] dump_stack_lvl+0x16c/0x1f0 [ 245.111357][ T7980] should_fail_ex+0x512/0x640 [ 245.111379][ T7980] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 245.111397][ T7980] should_failslab+0xc2/0x120 [ 245.111414][ T7980] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 245.111428][ T7980] ? __d_alloc+0x31/0xaa0 [ 245.111446][ T7980] __d_alloc+0x31/0xaa0 [ 245.111463][ T7980] d_alloc_pseudo+0x1c/0xc0 [ 245.111480][ T7980] alloc_file_pseudo+0xcf/0x230 [ 245.111498][ T7980] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 245.111516][ T7980] ? _raw_spin_unlock+0x28/0x50 [ 245.111534][ T7980] ? alloc_fd+0x471/0x7d0 [ 245.111555][ T7980] __anon_inode_getfile+0xe8/0x280 [ 245.111579][ T7980] anon_inode_getfd+0x52/0xb0 [ 245.111601][ T7980] map_create+0xb68/0x1db0 [ 245.111626][ T7980] ? __pfx_map_create+0x10/0x10 [ 245.111643][ T7980] ? __might_fault+0xe3/0x190 [ 245.111655][ T7980] ? __might_fault+0xe3/0x190 [ 245.111667][ T7980] ? __might_fault+0x13b/0x190 [ 245.111687][ T7980] __sys_bpf+0x4d8d/0x4ea0 [ 245.111698][ T7980] ? __pfx_futex_wake+0x10/0x10 [ 245.111718][ T7980] ? __pfx___sys_bpf+0x10/0x10 [ 245.111729][ T7980] ? vfs_write+0x15d/0x1150 [ 245.111746][ T7980] ? do_futex+0x122/0x350 [ 245.111762][ T7980] ? __pfx_do_futex+0x10/0x10 [ 245.111787][ T7980] ? xfd_validate_state+0x61/0x180 [ 245.111804][ T7980] ? __pfx_ksys_write+0x10/0x10 [ 245.111820][ T7980] __x64_sys_bpf+0x78/0xc0 [ 245.111832][ T7980] ? lockdep_hardirqs_on+0x7c/0x110 [ 245.111844][ T7980] do_syscall_64+0xcd/0x490 [ 245.111859][ T7980] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.111873][ T7980] RIP: 0033:0x7f5facd8e9a9 [ 245.111885][ T7980] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 245.111898][ T7980] RSP: 002b:00007f5fadbdd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 245.111912][ T7980] RAX: ffffffffffffffda RBX: 00007f5facfb5fa0 RCX: 00007f5facd8e9a9 [ 245.111921][ T7980] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 0000000000000000 [ 245.111929][ T7980] RBP: 00007f5face10d69 R08: 0000000000000000 R09: 0000000000000000 [ 245.111937][ T7980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 245.111945][ T7980] R13: 0000000000000000 R14: 00007f5facfb5fa0 R15: 00007ffe96b2d198 [ 245.111962][ T7980] [ 245.371622][ C0] vkms_vblank_simulate: vblank timer overrun [ 247.003396][ T8008] netlink: zone id is out of range [ 247.019258][ T8008] netlink: del zone limit has 4 unknown bytes [ 247.140013][ T8011] FAULT_INJECTION: forcing a failure. [ 247.140013][ T8011] name failslab, interval 1, probability 0, space 0, times 0 [ 247.144182][ T8005] hub 8-0:1.0: USB hub found [ 247.152736][ T8011] CPU: 0 UID: 0 PID: 8011 Comm: syz.3.424 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 247.152767][ T8011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 247.152781][ T8011] Call Trace: [ 247.152792][ T8011] [ 247.152802][ T8011] dump_stack_lvl+0x16c/0x1f0 [ 247.152835][ T8011] should_fail_ex+0x512/0x640 [ 247.152866][ T8011] should_failslab+0xc2/0x120 [ 247.152898][ T8011] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 247.152926][ T8011] ? radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 247.152969][ T8011] radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 247.153013][ T8011] idr_get_free+0x528/0xa30 [ 247.153063][ T8011] idr_alloc_u32+0x190/0x2f0 [ 247.153104][ T8011] ? __pfx_idr_alloc_u32+0x10/0x10 [ 247.153152][ T8011] ? lock_acquire+0x179/0x350 [ 247.153196][ T8011] idr_alloc_cyclic+0x10b/0x230 [ 247.153238][ T8011] ? __pfx_idr_alloc_cyclic+0x10/0x10 [ 247.153275][ T8011] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 247.153325][ T8011] map_create+0x9aa/0x1db0 [ 247.153375][ T8011] ? __pfx_map_create+0x10/0x10 [ 247.153407][ T8011] ? __might_fault+0xe3/0x190 [ 247.153431][ T8011] ? __might_fault+0xe3/0x190 [ 247.153453][ T8011] ? __might_fault+0x13b/0x190 [ 247.153492][ T8011] __sys_bpf+0x4d8d/0x4ea0 [ 247.153520][ T8011] ? __pfx___sys_bpf+0x10/0x10 [ 247.153542][ T8011] ? vfs_write+0x15d/0x1150 [ 247.153574][ T8011] ? do_futex+0x122/0x350 [ 247.153605][ T8011] ? __pfx_do_futex+0x10/0x10 [ 247.153655][ T8011] ? xfd_validate_state+0x61/0x180 [ 247.153687][ T8011] ? __pfx_ksys_write+0x10/0x10 [ 247.153717][ T8011] __x64_sys_bpf+0x78/0xc0 [ 247.153740][ T8011] ? lockdep_hardirqs_on+0x7c/0x110 [ 247.153764][ T8011] do_syscall_64+0xcd/0x490 [ 247.153793][ T8011] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.153819][ T8011] RIP: 0033:0x7fd1c0b8e9a9 [ 247.153840][ T8011] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 247.153863][ T8011] RSP: 002b:00007fd1c1975038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 247.153887][ T8011] RAX: ffffffffffffffda RBX: 00007fd1c0db5fa0 RCX: 00007fd1c0b8e9a9 [ 247.153905][ T8011] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 0000000000000000 [ 247.153926][ T8011] RBP: 00007fd1c0c10d69 R08: 0000000000000000 R09: 0000000000000000 [ 247.153940][ T8011] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 247.153956][ T8011] R13: 0000000000000000 R14: 00007fd1c0db5fa0 R15: 00007ffd49a94018 [ 247.153991][ T8011] [ 247.240827][ T8007] netlink: set zone limit has 8 unknown bytes [ 247.280216][ T8005] hub 8-0:1.0: 1 port detected [ 247.335315][ T8018] syz.0.425 uses obsolete (PF_INET,SOCK_PACKET) [ 247.751158][ T8028] random: crng reseeded on system resumption [ 248.017591][ T8031] sysfs_service_op_store: Client not running :-5: [ 248.471188][ T8031] sysfs_service_op_show: Client not running :-5: [ 250.148846][ T8071] netlink: 20 bytes leftover after parsing attributes in process `syz.0.438'. [ 250.909338][ T8088] sysfs_service_op_store: Client not running :-5: [ 251.291471][ T8088] sysfs_service_op_show: Client not running :-5: [ 253.336753][ T8139] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input48 [ 253.452408][ T8140] FAULT_INJECTION: forcing a failure. [ 253.452408][ T8140] name failslab, interval 1, probability 0, space 0, times 0 [ 253.558724][ T8140] CPU: 1 UID: 0 PID: 8140 Comm: syz.3.455 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 253.558766][ T8140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 253.558785][ T8140] Call Trace: [ 253.558794][ T8140] [ 253.558804][ T8140] dump_stack_lvl+0x16c/0x1f0 [ 253.558840][ T8140] should_fail_ex+0x512/0x640 [ 253.558868][ T8140] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 253.558900][ T8140] should_failslab+0xc2/0x120 [ 253.558938][ T8140] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 253.558969][ T8140] ? __d_alloc+0x31/0xaa0 [ 253.559007][ T8140] __d_alloc+0x31/0xaa0 [ 253.559039][ T8140] d_alloc_pseudo+0x1c/0xc0 [ 253.559077][ T8140] alloc_file_pseudo+0xcf/0x230 [ 253.559113][ T8140] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 253.559151][ T8140] ? _raw_spin_unlock+0x28/0x50 [ 253.559189][ T8140] ? alloc_fd+0x471/0x7d0 [ 253.559233][ T8140] __anon_inode_getfile+0xe8/0x280 [ 253.559278][ T8140] anon_inode_getfd+0x52/0xb0 [ 253.559325][ T8140] map_create+0xb68/0x1db0 [ 253.559375][ T8140] ? __pfx_map_create+0x10/0x10 [ 253.559413][ T8140] ? __might_fault+0xe3/0x190 [ 253.559438][ T8140] ? __might_fault+0xe3/0x190 [ 253.559463][ T8140] ? __might_fault+0x13b/0x190 [ 253.559505][ T8140] __sys_bpf+0x4d8d/0x4ea0 [ 253.559526][ T8140] ? __pfx_futex_wake+0x10/0x10 [ 253.559570][ T8140] ? __pfx___sys_bpf+0x10/0x10 [ 253.559592][ T8140] ? vfs_write+0x15d/0x1150 [ 253.559625][ T8140] ? do_futex+0x122/0x350 [ 253.559658][ T8140] ? __pfx_do_futex+0x10/0x10 [ 253.559708][ T8140] ? xfd_validate_state+0x61/0x180 [ 253.559745][ T8140] ? __pfx_ksys_write+0x10/0x10 [ 253.559773][ T8140] __x64_sys_bpf+0x78/0xc0 [ 253.559795][ T8140] ? lockdep_hardirqs_on+0x7c/0x110 [ 253.559820][ T8140] do_syscall_64+0xcd/0x490 [ 253.559848][ T8140] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.559872][ T8140] RIP: 0033:0x7fd1c0b8e9a9 [ 253.559891][ T8140] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 253.559922][ T8140] RSP: 002b:00007fd1c1975038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 253.559946][ T8140] RAX: ffffffffffffffda RBX: 00007fd1c0db5fa0 RCX: 00007fd1c0b8e9a9 [ 253.559962][ T8140] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 0000000000000000 [ 253.559977][ T8140] RBP: 00007fd1c0c10d69 R08: 0000000000000000 R09: 0000000000000000 [ 253.559992][ T8140] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 253.560007][ T8140] R13: 0000000000000000 R14: 00007fd1c0db5fa0 R15: 00007ffd49a94018 [ 253.560041][ T8140] [ 254.082761][ T8142] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input49 [ 254.301774][ T8152] sysfs_service_op_store: Client not running :-5: [ 254.618521][ T8156] sysfs_service_op_store: Client not running :-5: [ 254.710592][ T8152] sysfs_service_op_show: Client not running :-5: [ 255.028755][ T8161] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input50 [ 255.135397][ T8156] sysfs_service_op_show: Client not running :-5: [ 255.392043][ T8164] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input51 [ 255.776166][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.782704][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.813124][ T8191] FAULT_INJECTION: forcing a failure. [ 256.813124][ T8191] name failslab, interval 1, probability 0, space 0, times 0 [ 256.825821][ T8191] CPU: 1 UID: 0 PID: 8191 Comm: syz.1.465 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 256.825840][ T8191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 256.825849][ T8191] Call Trace: [ 256.825855][ T8191] [ 256.825861][ T8191] dump_stack_lvl+0x16c/0x1f0 [ 256.825881][ T8191] should_fail_ex+0x512/0x640 [ 256.825899][ T8191] should_failslab+0xc2/0x120 [ 256.825916][ T8191] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 256.825932][ T8191] ? radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 256.825954][ T8191] radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 256.825977][ T8191] idr_get_free+0x528/0xa30 [ 256.826004][ T8191] idr_alloc_u32+0x190/0x2f0 [ 256.826025][ T8191] ? __pfx_idr_alloc_u32+0x10/0x10 [ 256.826047][ T8191] ? lock_acquire+0x179/0x350 [ 256.826068][ T8191] idr_alloc_cyclic+0x10b/0x230 [ 256.826090][ T8191] ? __pfx_idr_alloc_cyclic+0x10/0x10 [ 256.826108][ T8191] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 256.826133][ T8191] map_create+0x9aa/0x1db0 [ 256.826159][ T8191] ? __pfx_map_create+0x10/0x10 [ 256.826176][ T8191] ? __might_fault+0xe3/0x190 [ 256.826188][ T8191] ? __might_fault+0xe3/0x190 [ 256.826200][ T8191] ? __might_fault+0x13b/0x190 [ 256.826220][ T8191] __sys_bpf+0x4d8d/0x4ea0 [ 256.826234][ T8191] ? __pfx___sys_bpf+0x10/0x10 [ 256.826245][ T8191] ? vfs_write+0x15d/0x1150 [ 256.826263][ T8191] ? do_futex+0x122/0x350 [ 256.826279][ T8191] ? __pfx_do_futex+0x10/0x10 [ 256.826305][ T8191] ? xfd_validate_state+0x61/0x180 [ 256.826322][ T8191] ? __pfx_ksys_write+0x10/0x10 [ 256.826338][ T8191] __x64_sys_bpf+0x78/0xc0 [ 256.826351][ T8191] ? lockdep_hardirqs_on+0x7c/0x110 [ 256.826364][ T8191] do_syscall_64+0xcd/0x490 [ 256.826380][ T8191] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.826394][ T8191] RIP: 0033:0x7fa6e978e9a9 [ 256.826406][ T8191] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 256.826419][ T8191] RSP: 002b:00007fa6ea6ab038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 256.826432][ T8191] RAX: ffffffffffffffda RBX: 00007fa6e99b5fa0 RCX: 00007fa6e978e9a9 [ 256.826441][ T8191] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 0000000000000000 [ 256.826449][ T8191] RBP: 00007fa6e9810d69 R08: 0000000000000000 R09: 0000000000000000 [ 256.826457][ T8191] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 256.826465][ T8191] R13: 0000000000000000 R14: 00007fa6e99b5fa0 R15: 00007ffd7be9ab98 [ 256.826483][ T8191] [ 257.074726][ C1] vkms_vblank_simulate: vblank timer overrun [ 257.216443][ T8196] sysfs_service_op_store: Client not running :-5: [ 257.318572][ T8199] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input52 [ 257.806962][ T8210] sysfs_service_op_store: Client not running :-5: [ 258.128565][ T8196] sysfs_service_op_show: Client not running :-5: [ 258.250915][ T8200] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input53 [ 258.803438][ T8217] sysfs_service_op_show: Client not running :-5: [ 259.529956][ T8226] sysfs_service_op_store: Client not running :-5: [ 259.917488][ T8226] sysfs_service_op_show: Client not running :-5: [ 260.130991][ T8239] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input54 [ 260.411345][ T8242] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input55 [ 260.817786][ T8255] FAULT_INJECTION: forcing a failure. [ 260.817786][ T8255] name failslab, interval 1, probability 0, space 0, times 0 [ 260.892345][ T8255] CPU: 1 UID: 0 PID: 8255 Comm: syz.2.477 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 260.892384][ T8255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 260.892393][ T8255] Call Trace: [ 260.892399][ T8255] [ 260.892405][ T8255] dump_stack_lvl+0x16c/0x1f0 [ 260.892425][ T8255] should_fail_ex+0x512/0x640 [ 260.892440][ T8255] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 260.892458][ T8255] should_failslab+0xc2/0x120 [ 260.892475][ T8255] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 260.892491][ T8255] ? __d_alloc+0x31/0xaa0 [ 260.892508][ T8255] __d_alloc+0x31/0xaa0 [ 260.892524][ T8255] d_alloc_pseudo+0x1c/0xc0 [ 260.892542][ T8255] alloc_file_pseudo+0xcf/0x230 [ 260.892560][ T8255] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 260.892578][ T8255] ? _raw_spin_unlock+0x28/0x50 [ 260.892596][ T8255] ? alloc_fd+0x471/0x7d0 [ 260.892617][ T8255] __anon_inode_getfile+0xe8/0x280 [ 260.892641][ T8255] anon_inode_getfd+0x52/0xb0 [ 260.892662][ T8255] map_create+0xb68/0x1db0 [ 260.892688][ T8255] ? __pfx_map_create+0x10/0x10 [ 260.892705][ T8255] ? __might_fault+0xe3/0x190 [ 260.892718][ T8255] ? __might_fault+0xe3/0x190 [ 260.892730][ T8255] ? __might_fault+0x13b/0x190 [ 260.892750][ T8255] __sys_bpf+0x4d8d/0x4ea0 [ 260.892765][ T8255] ? __pfx___sys_bpf+0x10/0x10 [ 260.892776][ T8255] ? vfs_write+0x15d/0x1150 [ 260.892792][ T8255] ? do_futex+0x122/0x350 [ 260.892809][ T8255] ? __pfx_do_futex+0x10/0x10 [ 260.892839][ T8255] ? xfd_validate_state+0x61/0x180 [ 260.892857][ T8255] ? __pfx_ksys_write+0x10/0x10 [ 260.892873][ T8255] __x64_sys_bpf+0x78/0xc0 [ 260.892885][ T8255] ? lockdep_hardirqs_on+0x7c/0x110 [ 260.892898][ T8255] do_syscall_64+0xcd/0x490 [ 260.892915][ T8255] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.892929][ T8255] RIP: 0033:0x7f5facd8e9a9 [ 260.892942][ T8255] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 260.892955][ T8255] RSP: 002b:00007f5fadbdd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 260.892969][ T8255] RAX: ffffffffffffffda RBX: 00007f5facfb5fa0 RCX: 00007f5facd8e9a9 [ 260.892978][ T8255] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 0000000000000000 [ 260.892988][ T8255] RBP: 00007f5face10d69 R08: 0000000000000000 R09: 0000000000000000 [ 260.892997][ T8255] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 260.893006][ T8255] R13: 0000000000000000 R14: 00007f5facfb5fa0 R15: 00007ffe96b2d198 [ 260.893024][ T8255] [ 261.145507][ C1] vkms_vblank_simulate: vblank timer overrun [ 261.412809][ T8259] hub 8-0:1.0: USB hub found [ 261.417988][ T8259] hub 8-0:1.0: 1 port detected [ 263.750903][ T8308] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input56 [ 264.494334][ T8309] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input57 [ 265.419720][ T8331] FAULT_INJECTION: forcing a failure. [ 265.419720][ T8331] name failslab, interval 1, probability 0, space 0, times 0 [ 265.531319][ T8331] CPU: 0 UID: 0 PID: 8331 Comm: syz.3.491 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 265.531357][ T8331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 265.531372][ T8331] Call Trace: [ 265.531381][ T8331] [ 265.531390][ T8331] dump_stack_lvl+0x16c/0x1f0 [ 265.531421][ T8331] should_fail_ex+0x512/0x640 [ 265.531445][ T8331] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 265.531476][ T8331] should_failslab+0xc2/0x120 [ 265.531506][ T8331] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 265.531533][ T8331] ? __alloc_skb+0x2b2/0x380 [ 265.531564][ T8331] __alloc_skb+0x2b2/0x380 [ 265.531588][ T8331] ? __pfx___alloc_skb+0x10/0x10 [ 265.531613][ T8331] ? genl_rcv_msg+0x4bb/0x800 [ 265.531666][ T8331] netlink_ack+0x15d/0xb80 [ 265.531708][ T8331] netlink_rcv_skb+0x332/0x420 [ 265.531738][ T8331] ? __pfx_genl_rcv_msg+0x10/0x10 [ 265.531774][ T8331] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 265.531820][ T8331] ? netlink_deliver_tap+0x1ae/0xd30 [ 265.531856][ T8331] genl_rcv+0x28/0x40 [ 265.531885][ T8331] netlink_unicast+0x58d/0x850 [ 265.531920][ T8331] ? __pfx_netlink_unicast+0x10/0x10 [ 265.531962][ T8331] netlink_sendmsg+0x8d1/0xdd0 [ 265.532000][ T8331] ? __pfx_netlink_sendmsg+0x10/0x10 [ 265.532046][ T8331] ____sys_sendmsg+0xa98/0xc70 [ 265.532080][ T8331] ? copy_msghdr_from_user+0x10a/0x160 [ 265.532106][ T8331] ? __pfx_____sys_sendmsg+0x10/0x10 [ 265.532159][ T8331] ___sys_sendmsg+0x134/0x1d0 [ 265.532188][ T8331] ? __pfx____sys_sendmsg+0x10/0x10 [ 265.532212][ T8331] ? __lock_acquire+0x622/0x1c90 [ 265.532293][ T8331] __sys_sendmsg+0x16d/0x220 [ 265.532322][ T8331] ? __pfx___sys_sendmsg+0x10/0x10 [ 265.532383][ T8331] do_syscall_64+0xcd/0x490 [ 265.532413][ T8331] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.532439][ T8331] RIP: 0033:0x7fd1c0b8e9a9 [ 265.532459][ T8331] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 265.532484][ T8331] RSP: 002b:00007fd1c1975038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 265.532509][ T8331] RAX: ffffffffffffffda RBX: 00007fd1c0db5fa0 RCX: 00007fd1c0b8e9a9 [ 265.532526][ T8331] RDX: 0000000000000080 RSI: 0000200000004080 RDI: 0000000000000003 [ 265.532542][ T8331] RBP: 00007fd1c1975090 R08: 0000000000000000 R09: 0000000000000000 [ 265.532558][ T8331] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 265.532573][ T8331] R13: 0000000000000000 R14: 00007fd1c0db5fa0 R15: 00007ffd49a94018 [ 265.532609][ T8331] [ 266.374042][ T8339] netlink: zone id is out of range [ 266.382112][ T8335] netlink: set zone limit has 8 unknown bytes [ 266.420012][ T8339] netlink: del zone limit has 4 unknown bytes [ 267.173585][ T8357] sysfs_service_op_store: Client not running :-5: [ 267.390653][ T8354] sysfs_service_op_show: Client not running :-5: [ 267.563612][ T8357] sysfs_service_op_show: Client not running :-5: [ 268.093114][ T8370] FAULT_INJECTION: forcing a failure. [ 268.093114][ T8370] name failslab, interval 1, probability 0, space 0, times 0 [ 268.105777][ T8370] CPU: 0 UID: 0 PID: 8370 Comm: syz.2.503 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 268.105797][ T8370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 268.105806][ T8370] Call Trace: [ 268.105812][ T8370] [ 268.105818][ T8370] dump_stack_lvl+0x16c/0x1f0 [ 268.105838][ T8370] should_fail_ex+0x512/0x640 [ 268.105856][ T8370] should_failslab+0xc2/0x120 [ 268.105873][ T8370] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 268.105889][ T8370] ? radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 268.105912][ T8370] radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 268.105934][ T8370] idr_get_free+0x528/0xa30 [ 268.105962][ T8370] idr_alloc_u32+0x190/0x2f0 [ 268.105983][ T8370] ? __pfx_idr_alloc_u32+0x10/0x10 [ 268.106005][ T8370] ? lock_acquire+0x179/0x350 [ 268.106027][ T8370] idr_alloc_cyclic+0x10b/0x230 [ 268.106048][ T8370] ? __pfx_idr_alloc_cyclic+0x10/0x10 [ 268.106067][ T8370] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 268.106091][ T8370] map_create+0x9aa/0x1db0 [ 268.106117][ T8370] ? __pfx_map_create+0x10/0x10 [ 268.106134][ T8370] ? __might_fault+0xe3/0x190 [ 268.106146][ T8370] ? __might_fault+0xe3/0x190 [ 268.106158][ T8370] ? __might_fault+0x13b/0x190 [ 268.106178][ T8370] __sys_bpf+0x4d8d/0x4ea0 [ 268.106193][ T8370] ? __pfx___sys_bpf+0x10/0x10 [ 268.106204][ T8370] ? vfs_write+0x15d/0x1150 [ 268.106222][ T8370] ? do_futex+0x122/0x350 [ 268.106239][ T8370] ? __pfx_do_futex+0x10/0x10 [ 268.106265][ T8370] ? xfd_validate_state+0x61/0x180 [ 268.106282][ T8370] ? __pfx_ksys_write+0x10/0x10 [ 268.106298][ T8370] __x64_sys_bpf+0x78/0xc0 [ 268.106310][ T8370] ? lockdep_hardirqs_on+0x7c/0x110 [ 268.106323][ T8370] do_syscall_64+0xcd/0x490 [ 268.106339][ T8370] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.106353][ T8370] RIP: 0033:0x7f5facd8e9a9 [ 268.106364][ T8370] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 268.106378][ T8370] RSP: 002b:00007f5fadbdd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 268.106392][ T8370] RAX: ffffffffffffffda RBX: 00007f5facfb5fa0 RCX: 00007f5facd8e9a9 [ 268.106401][ T8370] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 0000000000000000 [ 268.106409][ T8370] RBP: 00007f5face10d69 R08: 0000000000000000 R09: 0000000000000000 [ 268.106417][ T8370] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 268.106425][ T8370] R13: 0000000000000000 R14: 00007f5facfb5fa0 R15: 00007ffe96b2d198 [ 268.106444][ T8370] [ 269.152947][ T8381] hub 8-0:1.0: USB hub found [ 269.167466][ T8381] hub 8-0:1.0: 1 port detected [ 271.462028][ T8407] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input58 [ 272.242167][ T8409] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input59 [ 272.826086][ T8422] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input60 [ 273.694040][ T8424] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input61 [ 273.970109][ T8440] sysfs_service_op_store: Client not running :-5: [ 274.384746][ T8432] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input62 [ 274.755303][ T8440] sysfs_service_op_show: Client not running :-5: [ 275.017017][ T8433] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input63 [ 276.593988][ T8469] hub 8-0:1.0: USB hub found [ 276.672916][ T8469] hub 8-0:1.0: 1 port detected [ 280.779053][ T8521] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input64 [ 281.194129][ T8522] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input65 [ 281.200645][ T8528] sysfs_service_op_store: Client not running :-5: [ 283.313189][ T8549] FAULT_INJECTION: forcing a failure. [ 283.313189][ T8549] name failslab, interval 1, probability 0, space 0, times 0 [ 283.326064][ T8549] CPU: 1 UID: 0 PID: 8549 Comm: syz.0.540 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 283.326100][ T8549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 283.326116][ T8549] Call Trace: [ 283.326125][ T8549] [ 283.326135][ T8549] dump_stack_lvl+0x16c/0x1f0 [ 283.326168][ T8549] should_fail_ex+0x512/0x640 [ 283.326203][ T8549] should_failslab+0xc2/0x120 [ 283.326235][ T8549] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 283.326273][ T8549] ? radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 283.326320][ T8549] radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 283.326367][ T8549] idr_get_free+0x528/0xa30 [ 283.326421][ T8549] idr_alloc_u32+0x190/0x2f0 [ 283.326462][ T8549] ? __pfx_idr_alloc_u32+0x10/0x10 [ 283.326506][ T8549] ? lock_acquire+0x179/0x350 [ 283.326546][ T8549] idr_alloc_cyclic+0x10b/0x230 [ 283.326581][ T8549] ? __pfx_idr_alloc_cyclic+0x10/0x10 [ 283.326610][ T8549] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 283.326654][ T8549] map_create+0x9aa/0x1db0 [ 283.326714][ T8549] ? __pfx_map_create+0x10/0x10 [ 283.326749][ T8549] ? __might_fault+0xe3/0x190 [ 283.326775][ T8549] ? __might_fault+0xe3/0x190 [ 283.326798][ T8549] ? __might_fault+0x13b/0x190 [ 283.326838][ T8549] __sys_bpf+0x4d8d/0x4ea0 [ 283.326867][ T8549] ? __pfx___sys_bpf+0x10/0x10 [ 283.326890][ T8549] ? vfs_write+0x15d/0x1150 [ 283.326923][ T8549] ? do_futex+0x122/0x350 [ 283.326957][ T8549] ? __pfx_do_futex+0x10/0x10 [ 283.327009][ T8549] ? xfd_validate_state+0x61/0x180 [ 283.327042][ T8549] ? __pfx_ksys_write+0x10/0x10 [ 283.327074][ T8549] __x64_sys_bpf+0x78/0xc0 [ 283.327098][ T8549] ? lockdep_hardirqs_on+0x7c/0x110 [ 283.327124][ T8549] do_syscall_64+0xcd/0x490 [ 283.327155][ T8549] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.327183][ T8549] RIP: 0033:0x7f06f638e9a9 [ 283.327204][ T8549] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 283.327230][ T8549] RSP: 002b:00007f06f7165038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 283.327264][ T8549] RAX: ffffffffffffffda RBX: 00007f06f65b5fa0 RCX: 00007f06f638e9a9 [ 283.327282][ T8549] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 0000000000000000 [ 283.327299][ T8549] RBP: 00007f06f6410d69 R08: 0000000000000000 R09: 0000000000000000 [ 283.327315][ T8549] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 283.327331][ T8549] R13: 0000000000000000 R14: 00007f06f65b5fa0 R15: 00007ffe068e2e18 [ 283.327368][ T8549] [ 283.574514][ C1] vkms_vblank_simulate: vblank timer overrun [ 284.629986][ T8567] sysfs_service_op_store: Client not running :-5: [ 285.098400][ T8577] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input66 [ 285.181428][ T8567] sysfs_service_op_show: Client not running :-5: [ 285.452377][ T8580] cifs: Unknown parameter 'T.żc[$⁍)UÑnE-ʙl- -_5Z omfwYh*/xDlݩgkǐA79Xa/f_ARxM vp$^;q3n-6+ek [ 285.939943][ T8590] dump_stack_lvl+0x16c/0x1f0 [ 285.939975][ T8590] should_fail_ex+0x512/0x640 [ 285.940005][ T8590] should_failslab+0xc2/0x120 [ 285.940039][ T8590] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 285.940069][ T8590] ? radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 285.940119][ T8590] radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 285.940163][ T8590] idr_get_free+0x528/0xa30 [ 285.940218][ T8590] idr_alloc_u32+0x190/0x2f0 [ 285.940262][ T8590] ? __pfx_idr_alloc_u32+0x10/0x10 [ 285.940310][ T8590] ? lock_acquire+0x179/0x350 [ 285.940358][ T8590] idr_alloc_cyclic+0x10b/0x230 [ 285.940411][ T8590] ? __pfx_idr_alloc_cyclic+0x10/0x10 [ 285.940452][ T8590] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 285.940527][ T8590] map_create+0x9aa/0x1db0 [ 285.940583][ T8590] ? __pfx_map_create+0x10/0x10 [ 285.940617][ T8590] ? __might_fault+0xe3/0x190 [ 285.940646][ T8590] ? __might_fault+0xe3/0x190 [ 285.940670][ T8590] ? __might_fault+0x13b/0x190 [ 285.940714][ T8590] __sys_bpf+0x4d8d/0x4ea0 [ 285.940743][ T8590] ? __pfx___sys_bpf+0x10/0x10 [ 285.940766][ T8590] ? vfs_write+0x15d/0x1150 [ 285.940805][ T8590] ? do_futex+0x122/0x350 [ 285.940836][ T8590] ? __pfx_do_futex+0x10/0x10 [ 285.940899][ T8590] ? xfd_validate_state+0x61/0x180 [ 285.940935][ T8590] ? __pfx_ksys_write+0x10/0x10 [ 285.940970][ T8590] __x64_sys_bpf+0x78/0xc0 [ 285.940994][ T8590] ? lockdep_hardirqs_on+0x7c/0x110 [ 285.941024][ T8590] do_syscall_64+0xcd/0x490 [ 285.941055][ T8590] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.941084][ T8590] RIP: 0033:0x7f06f638e9a9 [ 285.941110][ T8590] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 285.941135][ T8590] RSP: 002b:00007f06f7165038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 285.941161][ T8590] RAX: ffffffffffffffda RBX: 00007f06f65b5fa0 RCX: 00007f06f638e9a9 [ 285.941179][ T8590] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 0000000000000000 [ 285.941200][ T8590] RBP: 00007f06f6410d69 R08: 0000000000000000 R09: 0000000000000000 [ 285.941217][ T8590] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 285.941233][ T8590] R13: 0000000000000000 R14: 00007f06f65b5fa0 R15: 00007ffe068e2e18 [ 285.941271][ T8590] [ 286.743697][ T8600] hub 8-0:1.0: USB hub found [ 286.797420][ T8600] hub 8-0:1.0: 1 port detected [ 288.413713][ T8636] sysfs_service_op_store: Client not running :-5: [ 288.874411][ T8636] sysfs_service_op_show: Client not running :-5: [ 289.821986][ T8645] FAULT_INJECTION: forcing a failure. [ 289.821986][ T8645] name failslab, interval 1, probability 0, space 0, times 0 [ 289.834674][ T8645] CPU: 0 UID: 0 PID: 8645 Comm: syz.2.561 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 289.834694][ T8645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 289.834714][ T8645] Call Trace: [ 289.834721][ T8645] [ 289.834727][ T8645] dump_stack_lvl+0x16c/0x1f0 [ 289.834747][ T8645] should_fail_ex+0x512/0x640 [ 289.834765][ T8645] should_failslab+0xc2/0x120 [ 289.834782][ T8645] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 289.834797][ T8645] ? radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 289.834820][ T8645] radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 289.834843][ T8645] idr_get_free+0x528/0xa30 [ 289.834870][ T8645] idr_alloc_u32+0x190/0x2f0 [ 289.834891][ T8645] ? __pfx_idr_alloc_u32+0x10/0x10 [ 289.834913][ T8645] ? lock_acquire+0x179/0x350 [ 289.834935][ T8645] idr_alloc_cyclic+0x10b/0x230 [ 289.834956][ T8645] ? __pfx_idr_alloc_cyclic+0x10/0x10 [ 289.834975][ T8645] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 289.835000][ T8645] map_create+0x9aa/0x1db0 [ 289.835028][ T8645] ? lock_acquire+0x62/0x350 [ 289.835048][ T8645] ? __pfx_map_create+0x10/0x10 [ 289.835066][ T8645] ? __might_fault+0xe3/0x190 [ 289.835079][ T8645] ? __might_fault+0xe3/0x190 [ 289.835091][ T8645] ? __might_fault+0x13b/0x190 [ 289.835113][ T8645] __sys_bpf+0x4d8d/0x4ea0 [ 289.835129][ T8645] ? __pfx___sys_bpf+0x10/0x10 [ 289.835141][ T8645] ? vfs_write+0x15d/0x1150 [ 289.835159][ T8645] ? do_futex+0x122/0x350 [ 289.835176][ T8645] ? __pfx_do_futex+0x10/0x10 [ 289.835202][ T8645] ? xfd_validate_state+0x61/0x180 [ 289.835219][ T8645] ? __pfx_ksys_write+0x10/0x10 [ 289.835235][ T8645] __x64_sys_bpf+0x78/0xc0 [ 289.835247][ T8645] ? lockdep_hardirqs_on+0x7c/0x110 [ 289.835259][ T8645] do_syscall_64+0xcd/0x490 [ 289.835275][ T8645] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.835288][ T8645] RIP: 0033:0x7f5facd8e9a9 [ 289.835300][ T8645] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 289.835313][ T8645] RSP: 002b:00007f5fadbdd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 289.835327][ T8645] RAX: ffffffffffffffda RBX: 00007f5facfb5fa0 RCX: 00007f5facd8e9a9 [ 289.835336][ T8645] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 0000000000000000 [ 289.835345][ T8645] RBP: 00007f5face10d69 R08: 0000000000000000 R09: 0000000000000000 [ 289.835353][ T8645] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 289.835361][ T8645] R13: 0000000000000000 R14: 00007f5facfb5fa0 R15: 00007ffe96b2d198 [ 289.835380][ T8645] [ 291.871923][ T8663] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input68 [ 293.307929][ T8668] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input69 [ 293.865904][ T8686] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input70 [ 294.434576][ T8688] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input71 [ 294.552049][ T8695] FAULT_INJECTION: forcing a failure. [ 294.552049][ T8695] name failslab, interval 1, probability 0, space 0, times 0 [ 294.564801][ T8695] CPU: 1 UID: 0 PID: 8695 Comm: syz.2.571 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 294.564839][ T8695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 294.564856][ T8695] Call Trace: [ 294.564867][ T8695] [ 294.564878][ T8695] dump_stack_lvl+0x16c/0x1f0 [ 294.564912][ T8695] should_fail_ex+0x512/0x640 [ 294.564947][ T8695] should_failslab+0xc2/0x120 [ 294.564979][ T8695] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 294.565009][ T8695] ? radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 294.565053][ T8695] radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 294.565098][ T8695] idr_get_free+0x528/0xa30 [ 294.565150][ T8695] idr_alloc_u32+0x190/0x2f0 [ 294.565192][ T8695] ? __pfx_idr_alloc_u32+0x10/0x10 [ 294.565234][ T8695] ? lock_acquire+0x179/0x350 [ 294.565277][ T8695] idr_alloc_cyclic+0x10b/0x230 [ 294.565318][ T8695] ? __pfx_idr_alloc_cyclic+0x10/0x10 [ 294.565355][ T8695] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 294.565406][ T8695] map_create+0x9aa/0x1db0 [ 294.565453][ T8695] ? __pfx_map_create+0x10/0x10 [ 294.565488][ T8695] ? __might_fault+0xe3/0x190 [ 294.565513][ T8695] ? __might_fault+0xe3/0x190 [ 294.565537][ T8695] ? __might_fault+0x13b/0x190 [ 294.565577][ T8695] __sys_bpf+0x4d8d/0x4ea0 [ 294.565607][ T8695] ? __pfx___sys_bpf+0x10/0x10 [ 294.565628][ T8695] ? vfs_write+0x15d/0x1150 [ 294.565663][ T8695] ? do_futex+0x122/0x350 [ 294.565706][ T8695] ? __pfx_do_futex+0x10/0x10 [ 294.565759][ T8695] ? xfd_validate_state+0x61/0x180 [ 294.565792][ T8695] ? __pfx_ksys_write+0x10/0x10 [ 294.565824][ T8695] __x64_sys_bpf+0x78/0xc0 [ 294.565848][ T8695] ? lockdep_hardirqs_on+0x7c/0x110 [ 294.565873][ T8695] do_syscall_64+0xcd/0x490 [ 294.565903][ T8695] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.565931][ T8695] RIP: 0033:0x7f5facd8e9a9 [ 294.565952][ T8695] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 294.565979][ T8695] RSP: 002b:00007f5fadbdd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 294.566004][ T8695] RAX: ffffffffffffffda RBX: 00007f5facfb5fa0 RCX: 00007f5facd8e9a9 [ 294.566021][ T8695] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 0000000000000000 [ 294.566039][ T8695] RBP: 00007f5face10d69 R08: 0000000000000000 R09: 0000000000000000 [ 294.566055][ T8695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 294.566071][ T8695] R13: 0000000000000000 R14: 00007f5facfb5fa0 R15: 00007ffe96b2d198 [ 294.566108][ T8695] [ 294.814686][ C1] vkms_vblank_simulate: vblank timer overrun [ 295.496794][ T8706] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input72 [ 296.785367][ T8722] hub 8-0:1.0: USB hub found [ 296.826853][ T8722] hub 8-0:1.0: 1 port detected [ 297.721807][ T8738] sysfs_service_op_store: Client not running :-5: [ 298.485108][ T8745] FAULT_INJECTION: forcing a failure. [ 298.485108][ T8745] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 298.521251][ T8745] CPU: 0 UID: 0 PID: 8745 Comm: syz.0.581 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 298.521290][ T8745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 298.521306][ T8745] Call Trace: [ 298.521315][ T8745] [ 298.521326][ T8745] dump_stack_lvl+0x16c/0x1f0 [ 298.521360][ T8745] should_fail_ex+0x512/0x640 [ 298.521388][ T8745] ? page_copy_sane+0xcd/0x2d0 [ 298.521418][ T8745] copy_folio_from_iter_atomic+0x375/0x1aa0 [ 298.521462][ T8745] ? fault_in_readable+0x132/0x1d0 [ 298.521494][ T8745] ? fault_in_readable+0x135/0x1d0 [ 298.521525][ T8745] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 298.521557][ T8745] ? fault_in_readable+0x179/0x1d0 [ 298.521587][ T8745] ? __pfx_fault_in_readable+0x10/0x10 [ 298.521616][ T8745] ? rcu_is_watching+0x12/0xc0 [ 298.521643][ T8745] ? I_BDEV+0xd/0x20 [ 298.521674][ T8745] ? inode_to_bdi+0x9e/0x160 [ 298.521710][ T8745] iomap_file_buffered_write+0x546/0xaf0 [ 298.521759][ T8745] ? __pfx_iomap_file_buffered_write+0x10/0x10 [ 298.521832][ T8745] ? __pfx_down_read+0x10/0x10 [ 298.521863][ T8745] ? preempt_count_add+0x76/0x150 [ 298.521902][ T8745] ? mnt_put_write_access_file+0xc1/0xf0 [ 298.521945][ T8745] blkdev_write_iter+0x56f/0xdf0 [ 298.521981][ T8745] vfs_write+0x6c4/0x1150 [ 298.522008][ T8745] ? __pfx_blkdev_write_iter+0x10/0x10 [ 298.522038][ T8745] ? __pfx_vfs_write+0x10/0x10 [ 298.522061][ T8745] ? find_held_lock+0x2b/0x80 [ 298.522112][ T8745] ksys_write+0x12a/0x250 [ 298.522146][ T8745] ? __pfx_ksys_write+0x10/0x10 [ 298.522183][ T8745] do_syscall_64+0xcd/0x490 [ 298.522214][ T8745] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.522242][ T8745] RIP: 0033:0x7f06f638e9a9 [ 298.522265][ T8745] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 298.522291][ T8745] RSP: 002b:00007f06f7165038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 298.522317][ T8745] RAX: ffffffffffffffda RBX: 00007f06f65b5fa0 RCX: 00007f06f638e9a9 [ 298.522334][ T8745] RDX: 0000004080000000 RSI: 0000200000000040 RDI: 0000000000000009 [ 298.522352][ T8745] RBP: 00007f06f6410d69 R08: 0000000000000000 R09: 0000000000000000 [ 298.522367][ T8745] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 298.522380][ T8745] R13: 0000000000000000 R14: 00007f06f65b5fa0 R15: 00007ffe068e2e18 [ 298.522414][ T8745] [ 299.135518][ T8751] sysfs_service_op_store: Client not running :-5: [ 299.826444][ T8761] sysfs_service_op_store: Client not running :-5: [ 300.021137][ T8751] sysfs_service_op_show: Client not running :-5: [ 302.094852][ T8785] FAULT_INJECTION: forcing a failure. [ 302.094852][ T8785] name failslab, interval 1, probability 0, space 0, times 0 [ 302.107644][ T8785] CPU: 0 UID: 0 PID: 8785 Comm: syz.0.591 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 302.107680][ T8785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 302.107695][ T8785] Call Trace: [ 302.107703][ T8785] [ 302.107712][ T8785] dump_stack_lvl+0x16c/0x1f0 [ 302.107742][ T8785] should_fail_ex+0x512/0x640 [ 302.107774][ T8785] should_failslab+0xc2/0x120 [ 302.107802][ T8785] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 302.107827][ T8785] ? radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 302.107866][ T8785] radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 302.107906][ T8785] idr_get_free+0x528/0xa30 [ 302.107951][ T8785] idr_alloc_u32+0x190/0x2f0 [ 302.107989][ T8785] ? __pfx_idr_alloc_u32+0x10/0x10 [ 302.108042][ T8785] ? lock_acquire+0x179/0x350 [ 302.108080][ T8785] idr_alloc_cyclic+0x10b/0x230 [ 302.108118][ T8785] ? __pfx_idr_alloc_cyclic+0x10/0x10 [ 302.108151][ T8785] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 302.108194][ T8785] map_create+0x9aa/0x1db0 [ 302.108238][ T8785] ? __pfx_map_create+0x10/0x10 [ 302.108268][ T8785] ? __might_fault+0xe3/0x190 [ 302.108291][ T8785] ? __might_fault+0xe3/0x190 [ 302.108310][ T8785] ? __might_fault+0x13b/0x190 [ 302.108345][ T8785] __sys_bpf+0x4d8d/0x4ea0 [ 302.108370][ T8785] ? __pfx___sys_bpf+0x10/0x10 [ 302.108390][ T8785] ? vfs_write+0x15d/0x1150 [ 302.108419][ T8785] ? do_futex+0x122/0x350 [ 302.108447][ T8785] ? __pfx_do_futex+0x10/0x10 [ 302.108492][ T8785] ? xfd_validate_state+0x61/0x180 [ 302.108521][ T8785] ? __pfx_ksys_write+0x10/0x10 [ 302.108550][ T8785] __x64_sys_bpf+0x78/0xc0 [ 302.108571][ T8785] ? lockdep_hardirqs_on+0x7c/0x110 [ 302.108594][ T8785] do_syscall_64+0xcd/0x490 [ 302.108621][ T8785] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.108649][ T8785] RIP: 0033:0x7f06f638e9a9 [ 302.108672][ T8785] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 302.108698][ T8785] RSP: 002b:00007f06f7165038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 302.108724][ T8785] RAX: ffffffffffffffda RBX: 00007f06f65b5fa0 RCX: 00007f06f638e9a9 [ 302.108743][ T8785] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 0000000000000000 [ 302.108757][ T8785] RBP: 00007f06f6410d69 R08: 0000000000000000 R09: 0000000000000000 [ 302.108773][ T8785] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 302.108789][ T8785] R13: 0000000000000000 R14: 00007f06f65b5fa0 R15: 00007ffe068e2e18 [ 302.108825][ T8785] [ 302.936623][ T8798] sysfs_service_op_store: Client not running :-5: [ 303.606790][ T8806] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input73 [ 303.752575][ T8798] sysfs_service_op_show: Client not running :-5: [ 304.541149][ T8812] sysfs_service_op_store: Client not running :-5: [ 306.365572][ T8836] FAULT_INJECTION: forcing a failure. [ 306.365572][ T8836] name failslab, interval 1, probability 0, space 0, times 0 [ 306.378355][ T8836] CPU: 1 UID: 0 PID: 8836 Comm: syz.3.602 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 306.378375][ T8836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 306.378384][ T8836] Call Trace: [ 306.378391][ T8836] [ 306.378397][ T8836] dump_stack_lvl+0x16c/0x1f0 [ 306.378418][ T8836] should_fail_ex+0x512/0x640 [ 306.378442][ T8836] should_failslab+0xc2/0x120 [ 306.378461][ T8836] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 306.378476][ T8836] ? radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 306.378500][ T8836] radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 306.378524][ T8836] idr_get_free+0x528/0xa30 [ 306.378551][ T8836] idr_alloc_u32+0x190/0x2f0 [ 306.378573][ T8836] ? __pfx_idr_alloc_u32+0x10/0x10 [ 306.378595][ T8836] ? lock_acquire+0x179/0x350 [ 306.378617][ T8836] idr_alloc_cyclic+0x10b/0x230 [ 306.378639][ T8836] ? __pfx_idr_alloc_cyclic+0x10/0x10 [ 306.378658][ T8836] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 306.378683][ T8836] map_create+0x9aa/0x1db0 [ 306.378709][ T8836] ? __pfx_map_create+0x10/0x10 [ 306.378726][ T8836] ? __might_fault+0xe3/0x190 [ 306.378738][ T8836] ? __might_fault+0xe3/0x190 [ 306.378750][ T8836] ? __might_fault+0x13b/0x190 [ 306.378770][ T8836] __sys_bpf+0x4d8d/0x4ea0 [ 306.378781][ T8836] ? __pfx_futex_wake+0x10/0x10 [ 306.378802][ T8836] ? __pfx___sys_bpf+0x10/0x10 [ 306.378813][ T8836] ? vfs_write+0x15d/0x1150 [ 306.378831][ T8836] ? do_futex+0x122/0x350 [ 306.378847][ T8836] ? __pfx_do_futex+0x10/0x10 [ 306.378873][ T8836] ? xfd_validate_state+0x61/0x180 [ 306.378890][ T8836] ? __pfx_ksys_write+0x10/0x10 [ 306.378906][ T8836] __x64_sys_bpf+0x78/0xc0 [ 306.378918][ T8836] ? lockdep_hardirqs_on+0x7c/0x110 [ 306.378931][ T8836] do_syscall_64+0xcd/0x490 [ 306.378946][ T8836] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.378961][ T8836] RIP: 0033:0x7fd1c0b8e9a9 [ 306.378974][ T8836] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 306.378987][ T8836] RSP: 002b:00007fd1c1975038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 306.379001][ T8836] RAX: ffffffffffffffda RBX: 00007fd1c0db5fa0 RCX: 00007fd1c0b8e9a9 [ 306.379014][ T8836] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 0000000000000000 [ 306.379022][ T8836] RBP: 00007fd1c0c10d69 R08: 0000000000000000 R09: 0000000000000000 [ 306.379030][ T8836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 306.379038][ T8836] R13: 0000000000000000 R14: 00007fd1c0db5fa0 R15: 00007ffd49a94018 [ 306.379061][ T8836] [ 306.628745][ C1] vkms_vblank_simulate: vblank timer overrun [ 309.413519][ T8890] sysfs_service_op_store: Client not running :-5: [ 309.717543][ T8890] sysfs_service_op_show: Client not running :-5: [ 310.439331][ T8906] FAULT_INJECTION: forcing a failure. [ 310.439331][ T8906] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 310.460796][ T8906] CPU: 1 UID: 0 PID: 8906 Comm: syz.1.616 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 310.460832][ T8906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 310.460848][ T8906] Call Trace: [ 310.460856][ T8906] [ 310.460866][ T8906] dump_stack_lvl+0x16c/0x1f0 [ 310.460899][ T8906] should_fail_ex+0x512/0x640 [ 310.460931][ T8906] _copy_from_iter+0x29f/0x16f0 [ 310.460970][ T8906] ? __pfx__copy_from_iter+0x10/0x10 [ 310.461000][ T8906] ? rcu_is_watching+0x12/0xc0 [ 310.461028][ T8906] ? trace_kmalloc+0x2b/0xd0 [ 310.461057][ T8906] ? __kmalloc_noprof+0x242/0x510 [ 310.461093][ T8906] kernfs_fop_write_iter+0x19a/0x510 [ 310.461131][ T8906] vfs_write+0x6c4/0x1150 [ 310.461157][ T8906] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 310.461191][ T8906] ? __pfx___mutex_lock+0x10/0x10 [ 310.461218][ T8906] ? __pfx_vfs_write+0x10/0x10 [ 310.461269][ T8906] ksys_write+0x12a/0x250 [ 310.461294][ T8906] ? __pfx_ksys_write+0x10/0x10 [ 310.461330][ T8906] do_syscall_64+0xcd/0x490 [ 310.461370][ T8906] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.461397][ T8906] RIP: 0033:0x7fa6e978e9a9 [ 310.461418][ T8906] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 310.461443][ T8906] RSP: 002b:00007fa6ea68a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 310.461467][ T8906] RAX: ffffffffffffffda RBX: 00007fa6e99b6080 RCX: 00007fa6e978e9a9 [ 310.461485][ T8906] RDX: 00000000000098c7 RSI: 0000200000000540 RDI: 0000000000000003 [ 310.461501][ T8906] RBP: 00007fa6ea68a090 R08: 0000000000000000 R09: 0000000000000000 [ 310.461516][ T8906] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 310.461532][ T8906] R13: 0000000000000000 R14: 00007fa6e99b6080 R15: 00007ffd7be9ab98 [ 310.461568][ T8906] [ 310.650130][ C1] vkms_vblank_simulate: vblank timer overrun [ 310.696657][ T8905] FAULT_INJECTION: forcing a failure. [ 310.696657][ T8905] name failslab, interval 1, probability 0, space 0, times 0 [ 310.710713][ T8905] CPU: 0 UID: 0 PID: 8905 Comm: syz.0.618 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 310.710748][ T8905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 310.710763][ T8905] Call Trace: [ 310.710771][ T8905] [ 310.710781][ T8905] dump_stack_lvl+0x16c/0x1f0 [ 310.710813][ T8905] should_fail_ex+0x512/0x640 [ 310.710838][ T8905] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 310.710879][ T8905] should_failslab+0xc2/0x120 [ 310.710908][ T8905] __kmalloc_cache_noprof+0x6a/0x3e0 [ 310.710945][ T8905] ? alloc_pipe_info+0x10e/0x590 [ 310.710978][ T8905] alloc_pipe_info+0x10e/0x590 [ 310.711009][ T8905] splice_direct_to_actor+0x77d/0xa30 [ 310.711049][ T8905] ? __pfx_direct_splice_actor+0x10/0x10 [ 310.711096][ T8905] ? __pfx_aa_file_perm+0x10/0x10 [ 310.711122][ T8905] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 310.711156][ T8905] ? get_pid_task+0xfc/0x250 [ 310.711200][ T8905] do_splice_direct+0x174/0x240 [ 310.711236][ T8905] ? __pfx_do_splice_direct+0x10/0x10 [ 310.711273][ T8905] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 310.711315][ T8905] ? rw_verify_area+0xcf/0x680 [ 310.711352][ T8905] do_sendfile+0xb06/0xe50 [ 310.711395][ T8905] ? __pfx_do_sendfile+0x10/0x10 [ 310.711433][ T8905] ? __fget_files+0x20e/0x3c0 [ 310.711479][ T8905] __x64_sys_sendfile64+0x1d8/0x220 [ 310.711508][ T8905] ? ksys_write+0x1ac/0x250 [ 310.711532][ T8905] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 310.711573][ T8905] do_syscall_64+0xcd/0x490 [ 310.711602][ T8905] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.711628][ T8905] RIP: 0033:0x7f06f638e9a9 [ 310.711649][ T8905] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 310.711673][ T8905] RSP: 002b:00007f06f7165038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 310.711698][ T8905] RAX: ffffffffffffffda RBX: 00007f06f65b5fa0 RCX: 00007f06f638e9a9 [ 310.711715][ T8905] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000004 [ 310.711730][ T8905] RBP: 00007f06f7165090 R08: 0000000000000000 R09: 0000000000000000 [ 310.711746][ T8905] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 310.711761][ T8905] R13: 0000000000000000 R14: 00007f06f65b5fa0 R15: 00007ffe068e2e18 [ 310.711796][ T8905] [ 311.286426][ T8906] sysfs_service_op_show: Client not running :-5: [ 313.351934][ T8961] FAULT_INJECTION: forcing a failure. [ 313.351934][ T8961] name failslab, interval 1, probability 0, space 0, times 0 [ 313.382722][ T8961] CPU: 1 UID: 0 PID: 8961 Comm: syz.0.629 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 313.382746][ T8961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 313.382755][ T8961] Call Trace: [ 313.382761][ T8961] [ 313.382768][ T8961] dump_stack_lvl+0x16c/0x1f0 [ 313.382787][ T8961] should_fail_ex+0x512/0x640 [ 313.382801][ T8961] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 313.382819][ T8961] should_failslab+0xc2/0x120 [ 313.382835][ T8961] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 313.382849][ T8961] ? d_instantiate+0x77/0x90 [ 313.382865][ T8961] ? alloc_empty_file+0x55/0x1e0 [ 313.382884][ T8961] alloc_empty_file+0x55/0x1e0 [ 313.382902][ T8961] alloc_file_pseudo+0x13a/0x230 [ 313.382920][ T8961] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 313.382945][ T8961] ? _raw_spin_unlock+0x28/0x50 [ 313.382965][ T8961] ? alloc_fd+0x471/0x7d0 [ 313.382987][ T8961] __anon_inode_getfile+0xe8/0x280 [ 313.383013][ T8961] anon_inode_getfd+0x52/0xb0 [ 313.383036][ T8961] map_create+0xb68/0x1db0 [ 313.383062][ T8961] ? __pfx_map_create+0x10/0x10 [ 313.383078][ T8961] ? __might_fault+0xe3/0x190 [ 313.383091][ T8961] ? __might_fault+0xe3/0x190 [ 313.383103][ T8961] ? __might_fault+0x13b/0x190 [ 313.383123][ T8961] __sys_bpf+0x4d8d/0x4ea0 [ 313.383139][ T8961] ? __pfx_futex_wake+0x10/0x10 [ 313.383164][ T8961] ? __pfx___sys_bpf+0x10/0x10 [ 313.383175][ T8961] ? vfs_write+0x15d/0x1150 [ 313.383195][ T8961] ? do_futex+0x122/0x350 [ 313.383211][ T8961] ? __pfx_do_futex+0x10/0x10 [ 313.383240][ T8961] ? xfd_validate_state+0x61/0x180 [ 313.383257][ T8961] ? __pfx_ksys_write+0x10/0x10 [ 313.383273][ T8961] __x64_sys_bpf+0x78/0xc0 [ 313.383285][ T8961] ? lockdep_hardirqs_on+0x7c/0x110 [ 313.383298][ T8961] do_syscall_64+0xcd/0x490 [ 313.383314][ T8961] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.383328][ T8961] RIP: 0033:0x7f06f638e9a9 [ 313.383341][ T8961] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 313.383355][ T8961] RSP: 002b:00007f06f7165038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 313.383370][ T8961] RAX: ffffffffffffffda RBX: 00007f06f65b5fa0 RCX: 00007f06f638e9a9 [ 313.383380][ T8961] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 0000000000000000 [ 313.383388][ T8961] RBP: 00007f06f6410d69 R08: 0000000000000000 R09: 0000000000000000 [ 313.383397][ T8961] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 313.383404][ T8961] R13: 0000000000000000 R14: 00007f06f65b5fa0 R15: 00007ffe068e2e18 [ 313.383422][ T8961] [ 315.785599][ T5167] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 316.191551][ T8988] sysfs_service_op_store: Client not running :-5: [ 316.520804][ T8988] sysfs_service_op_show: Client not running :-5: [ 316.675872][ T8995] FAULT_INJECTION: forcing a failure. [ 316.675872][ T8995] name failslab, interval 1, probability 0, space 0, times 0 [ 316.722590][ T8995] CPU: 1 UID: 0 PID: 8995 Comm: syz.1.636 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 316.722625][ T8995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 316.722641][ T8995] Call Trace: [ 316.722649][ T8995] [ 316.722656][ T8995] dump_stack_lvl+0x16c/0x1f0 [ 316.722675][ T8995] should_fail_ex+0x512/0x640 [ 316.722691][ T8995] ? __kmalloc_noprof+0xbf/0x510 [ 316.722707][ T8995] ? alloc_pipe_info+0x1ec/0x590 [ 316.722720][ T8995] should_failslab+0xc2/0x120 [ 316.722743][ T8995] __kmalloc_noprof+0xd2/0x510 [ 316.722775][ T8995] alloc_pipe_info+0x1ec/0x590 [ 316.722805][ T8995] splice_direct_to_actor+0x77d/0xa30 [ 316.722843][ T8995] ? __pfx_direct_splice_actor+0x10/0x10 [ 316.722892][ T8995] ? __pfx_aa_file_perm+0x10/0x10 [ 316.722917][ T8995] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 316.722952][ T8995] ? get_pid_task+0xfc/0x250 [ 316.722995][ T8995] do_splice_direct+0x174/0x240 [ 316.723033][ T8995] ? __pfx_do_splice_direct+0x10/0x10 [ 316.723070][ T8995] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 316.723110][ T8995] ? rw_verify_area+0xcf/0x680 [ 316.723146][ T8995] do_sendfile+0xb06/0xe50 [ 316.723190][ T8995] ? __pfx_do_sendfile+0x10/0x10 [ 316.723228][ T8995] ? __fget_files+0x20e/0x3c0 [ 316.723274][ T8995] __x64_sys_sendfile64+0x1d8/0x220 [ 316.723303][ T8995] ? ksys_write+0x1ac/0x250 [ 316.723327][ T8995] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 316.723369][ T8995] do_syscall_64+0xcd/0x490 [ 316.723399][ T8995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.723425][ T8995] RIP: 0033:0x7fa6e978e9a9 [ 316.723446][ T8995] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 316.723471][ T8995] RSP: 002b:00007fa6ea6ab038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 316.723500][ T8995] RAX: ffffffffffffffda RBX: 00007fa6e99b5fa0 RCX: 00007fa6e978e9a9 [ 316.723517][ T8995] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000004 [ 316.723532][ T8995] RBP: 00007fa6ea6ab090 R08: 0000000000000000 R09: 0000000000000000 [ 316.723548][ T8995] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 316.723564][ T8995] R13: 0000000000000000 R14: 00007fa6e99b5fa0 R15: 00007ffd7be9ab98 [ 316.723599][ T8995] [ 317.228533][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.235216][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.857284][ T9003] sysfs_service_op_store: Client not running :-5: [ 318.601881][ T9017] sysfs_service_op_store: Client not running :-5: [ 318.633347][ T9003] sysfs_service_op_show: Client not running :-5: [ 319.284084][ T9026] sysfs_service_op_store: Client not running :-5: [ 319.677277][ T9017] sysfs_service_op_show: Client not running :-5: [ 320.224050][ T9026] sysfs_service_op_show: Client not running :-5: [ 320.374548][ T9030] [ 320.376937][ T9030] ====================================================== [ 320.383943][ T9030] WARNING: possible circular locking dependency detected [ 320.391081][ T9030] 6.16.0-rc7-syzkaller #0 Not tainted [ 320.396433][ T9030] ------------------------------------------------------ [ 320.403435][ T9030] syz.3.643/9030 is trying to acquire lock: [ 320.409310][ T9030] ffff888142367b40 (&q->elevator_lock){+.+.}-{4:4}, at: queue_requests_store+0x1c7/0x310 [ 320.419219][ T9030] [ 320.419219][ T9030] but task is already holding lock: [ 320.426571][ T9030] ffff888142367608 (&q->q_usage_counter(io)#26){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 320.437809][ T9030] [ 320.437809][ T9030] which lock already depends on the new lock. [ 320.437809][ T9030] [ 320.448219][ T9030] [ 320.448219][ T9030] the existing dependency chain (in reverse order) is: [ 320.457219][ T9030] [ 320.457219][ T9030] -> #3 (&q->q_usage_counter(io)#26){++++}-{0:0}: [ 320.465819][ T9030] blk_alloc_queue+0x619/0x760 [ 320.471097][ T9030] blk_mq_alloc_queue+0x175/0x290 [ 320.476627][ T9030] __blk_mq_alloc_disk+0x29/0x120 [ 320.482170][ T9030] loop_add+0x49e/0xb70 [ 320.486885][ T9030] loop_init+0x164/0x270 [ 320.491689][ T9030] do_one_initcall+0x120/0x6e0 [ 320.496998][ T9030] kernel_init_freeable+0x5c2/0x900 [ 320.502750][ T9030] kernel_init+0x1c/0x2b0 [ 320.507613][ T9030] ret_from_fork+0x5d7/0x6f0 [ 320.512736][ T9030] ret_from_fork_asm+0x1a/0x30 [ 320.518030][ T9030] [ 320.518030][ T9030] -> #2 (fs_reclaim){+.+.}-{0:0}: [ 320.525256][ T9030] fs_reclaim_acquire+0x102/0x150 [ 320.530821][ T9030] prepare_alloc_pages+0x162/0x610 [ 320.536469][ T9030] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 320.542889][ T9030] __alloc_pages_noprof+0xb/0x1b0 [ 320.548439][ T9030] pcpu_populate_chunk+0x110/0xb00 [ 320.554088][ T9030] pcpu_alloc_noprof+0x86a/0x1470 [ 320.559633][ T9030] xt_percpu_counter_alloc+0x13e/0x1b0 [ 320.565626][ T9030] find_check_entry.constprop.0+0xbc/0x9b0 [ 320.571966][ T9030] translate_table+0xc98/0x1720 [ 320.577350][ T9030] ipt_register_table+0x102/0x430 [ 320.582913][ T9030] iptable_security_table_init+0x40/0x60 [ 320.589074][ T9030] xt_find_table_lock+0x2e4/0x520 [ 320.594632][ T9030] xt_request_find_table_lock+0x28/0xf0 [ 320.600714][ T9030] get_info+0x190/0x610 [ 320.605402][ T9030] do_ipt_get_ctl+0x169/0xa10 [ 320.610612][ T9030] nf_getsockopt+0x79/0xe0 [ 320.615556][ T9030] ip_getsockopt+0x18c/0x1e0 [ 320.620678][ T9030] tcp_getsockopt+0x9e/0x100 [ 320.625790][ T9030] do_sock_getsockopt+0x34a/0x440 [ 320.631344][ T9030] __sys_getsockopt+0x123/0x1b0 [ 320.636721][ T9030] __x64_sys_getsockopt+0xbd/0x160 [ 320.642356][ T9030] do_syscall_64+0xcd/0x490 [ 320.647387][ T9030] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.653805][ T9030] [ 320.653805][ T9030] -> #1 (pcpu_alloc_mutex){+.+.}-{4:4}: [ 320.661552][ T9030] __mutex_lock+0x199/0xb90 [ 320.666577][ T9030] pcpu_alloc_noprof+0xb4c/0x1470 [ 320.672124][ T9030] sbitmap_init_node+0x2fd/0x770 [ 320.677593][ T9030] sbitmap_queue_init_node+0x41/0x560 [ 320.683496][ T9030] blk_mq_init_tags+0x12d/0x2b0 [ 320.688875][ T9030] blk_mq_alloc_map_and_rqs+0x237/0xf60 [ 320.694955][ T9030] blk_mq_init_sched+0x30c/0x610 [ 320.700425][ T9030] elevator_switch+0x1e1/0x7f0 [ 320.705721][ T9030] elevator_change+0x2ac/0x400 [ 320.711018][ T9030] elevator_set_default+0x292/0x320 [ 320.716748][ T9030] blk_register_queue+0x393/0x4f0 [ 320.722304][ T9030] __add_disk+0x74a/0xf00 [ 320.727156][ T9030] add_disk_fwnode+0x13f/0x5d0 [ 320.732442][ T9030] nbd_dev_add+0x791/0xbc0 [ 320.737384][ T9030] nbd_init+0x181/0x320 [ 320.742074][ T9030] do_one_initcall+0x120/0x6e0 [ 320.747361][ T9030] kernel_init_freeable+0x5c2/0x900 [ 320.753095][ T9030] kernel_init+0x1c/0x2b0 [ 320.757953][ T9030] ret_from_fork+0x5d7/0x6f0 [ 320.763074][ T9030] ret_from_fork_asm+0x1a/0x30 [ 320.768362][ T9030] [ 320.768362][ T9030] -> #0 (&q->elevator_lock){+.+.}-{4:4}: [ 320.776194][ T9030] __lock_acquire+0x126f/0x1c90 [ 320.781580][ T9030] lock_acquire+0x179/0x350 [ 320.786615][ T9030] __mutex_lock+0x199/0xb90 [ 320.791645][ T9030] queue_requests_store+0x1c7/0x310 [ 320.797371][ T9030] queue_attr_store+0x279/0x320 [ 320.802761][ T9030] sysfs_kf_write+0xf2/0x150 [ 320.807901][ T9030] kernfs_fop_write_iter+0x354/0x510 [ 320.813725][ T9030] iter_file_splice_write+0x91c/0x1150 [ 320.819725][ T9030] direct_splice_actor+0x18f/0x6c0 [ 320.825371][ T9030] splice_direct_to_actor+0x342/0xa30 [ 320.831284][ T9030] do_splice_direct+0x174/0x240 [ 320.836669][ T9030] do_sendfile+0xb06/0xe50 [ 320.841624][ T9030] __x64_sys_sendfile64+0x1d8/0x220 [ 320.847349][ T9030] do_syscall_64+0xcd/0x490 [ 320.852376][ T9030] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.858792][ T9030] [ 320.858792][ T9030] other info that might help us debug this: [ 320.858792][ T9030] [ 320.869013][ T9030] Chain exists of: [ 320.869013][ T9030] &q->elevator_lock --> fs_reclaim --> &q->q_usage_counter(io)#26 [ 320.869013][ T9030] [ 320.882781][ T9030] Possible unsafe locking scenario: [ 320.882781][ T9030] [ 320.890241][ T9030] CPU0 CPU1 [ 320.895606][ T9030] ---- ---- [ 320.900967][ T9030] lock(&q->q_usage_counter(io)#26); [ 320.906349][ T9030] lock(fs_reclaim); [ 320.912856][ T9030] lock(&q->q_usage_counter(io)#26); [ 320.920757][ T9030] lock(&q->elevator_lock); [ 320.925359][ T9030] [ 320.925359][ T9030] *** DEADLOCK *** [ 320.925359][ T9030] [ 320.933510][ T9030] 5 locks held by syz.3.643/9030: [ 320.938549][ T9030] #0: ffff888036b2a428 (sb_writers#7){.+.+}-{0:0}, at: splice_direct_to_actor+0x342/0xa30 [ 320.948615][ T9030] #1: ffff888035debc88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x510 [ 320.958399][ T9030] #2: ffff8881423cf008 (kn->active#113){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2b2/0x510 [ 320.968538][ T9030] #3: ffff888142367608 (&q->q_usage_counter(io)#26){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 320.980270][ T9030] #4: ffff888142367640 (&q->q_usage_counter(queue)#19){+.+.}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 320.992234][ T9030] [ 320.992234][ T9030] stack backtrace: [ 320.998137][ T9030] CPU: 0 UID: 0 PID: 9030 Comm: syz.3.643 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 320.998168][ T9030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 320.998183][ T9030] Call Trace: [ 320.998191][ T9030] [ 320.998200][ T9030] dump_stack_lvl+0x116/0x1f0 [ 320.998225][ T9030] print_circular_bug+0x275/0x350 [ 320.998258][ T9030] check_noncircular+0x14c/0x170 [ 320.998293][ T9030] __lock_acquire+0x126f/0x1c90 [ 320.998326][ T9030] ? __lock_acquire+0xb8a/0x1c90 [ 320.998358][ T9030] lock_acquire+0x179/0x350 [ 320.998388][ T9030] ? queue_requests_store+0x1c7/0x310 [ 320.998417][ T9030] ? __pfx___might_resched+0x10/0x10 [ 320.998443][ T9030] ? do_raw_spin_lock+0x12c/0x2b0 [ 320.998480][ T9030] __mutex_lock+0x199/0xb90 [ 320.998504][ T9030] ? queue_requests_store+0x1c7/0x310 [ 320.998539][ T9030] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 320.998574][ T9030] ? queue_requests_store+0x1c7/0x310 [ 320.998601][ T9030] ? lockdep_hardirqs_on+0x7c/0x110 [ 320.998623][ T9030] ? __pfx___mutex_lock+0x10/0x10 [ 320.998651][ T9030] ? __pfx_autoremove_wake_function+0x10/0x10 [ 320.998684][ T9030] ? queue_requests_store+0x1c7/0x310 [ 320.998711][ T9030] queue_requests_store+0x1c7/0x310 [ 320.998739][ T9030] ? __pfx_queue_requests_store+0x10/0x10 [ 320.998769][ T9030] ? __mutex_trylock_common+0xe9/0x250 [ 320.998803][ T9030] ? __pfx_queue_requests_store+0x10/0x10 [ 320.998830][ T9030] queue_attr_store+0x279/0x320 [ 320.998856][ T9030] ? __pfx_queue_attr_store+0x10/0x10 [ 320.998880][ T9030] ? __lock_acquire+0x622/0x1c90 [ 320.998918][ T9030] ? find_held_lock+0x2b/0x80 [ 320.998941][ T9030] ? sysfs_file_kobj+0xe4/0x290 [ 320.998975][ T9030] ? __pfx_queue_attr_store+0x10/0x10 [ 320.999001][ T9030] sysfs_kf_write+0xf2/0x150 [ 320.999033][ T9030] kernfs_fop_write_iter+0x354/0x510 [ 320.999062][ T9030] ? __pfx_sysfs_kf_write+0x10/0x10 [ 320.999096][ T9030] iter_file_splice_write+0x91c/0x1150 [ 320.999141][ T9030] ? __pfx_iter_file_splice_write+0x10/0x10 [ 320.999180][ T9030] ? __pfx_copy_splice_read+0x10/0x10 [ 320.999220][ T9030] ? __pfx_iter_file_splice_write+0x10/0x10 [ 320.999257][ T9030] direct_splice_actor+0x18f/0x6c0 [ 320.999294][ T9030] splice_direct_to_actor+0x342/0xa30 [ 320.999329][ T9030] ? __pfx_direct_splice_actor+0x10/0x10 [ 320.999366][ T9030] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 320.999405][ T9030] do_splice_direct+0x174/0x240 [ 320.999439][ T9030] ? __pfx_do_splice_direct+0x10/0x10 [ 320.999472][ T9030] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 320.999514][ T9030] ? rw_verify_area+0xcf/0x680 [ 320.999550][ T9030] do_sendfile+0xb06/0xe50 [ 320.999588][ T9030] ? __pfx_do_sendfile+0x10/0x10 [ 320.999625][ T9030] ? __x64_sys_futex+0x1e0/0x4c0 [ 320.999654][ T9030] ? __x64_sys_futex+0x1e9/0x4c0 [ 320.999683][ T9030] __x64_sys_sendfile64+0x1d8/0x220 [ 320.999711][ T9030] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 320.999742][ T9030] do_syscall_64+0xcd/0x490 [ 320.999765][ T9030] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.999790][ T9030] RIP: 0033:0x7fd1c0b8e9a9 [ 320.999809][ T9030] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 320.999833][ T9030] RSP: 002b:00007fd1c1954038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 320.999856][ T9030] RAX: ffffffffffffffda RBX: 00007fd1c0db6080 RCX: 00007fd1c0b8e9a9 SYZFAIL: failed to send rpc fd=3 want=48 sent=0 n=-1 (errno 32: Broken pipe) [ 320.999871][ T9030] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000005 [ 320.999885][ T9030] RBP: 00007fd1c0c10d69 R08: 0000000000000000 R09: 0000000000000000 [ 320.999900][ T9030] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 320.999914][ T9030] R13: 0000000000000000 R14: 00007fd1c0db6080 R15: 00007ffd49a94018 [ 320.999937][ T9030] [ 320.999960][ C0] vkms_vblank_simulate: vblank timer overrun [ 321.368239][ C0] vkms_vblank_simulate: vblank timer overrun [ 322.145643][ T67] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.193492][ T67] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.243543][ T9032] nvme_fabrics: missing parameter 'transport=%s' [ 322.250053][ T9032] nvme_fabrics: missing parameter 'nqn=%s' [ 322.261183][ T67] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.339528][ T67] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.445546][ T67] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.528718][ T67] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.598140][ T67] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.673397][ T67] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.802773][ T67] bridge_slave_0: left allmulticast mode [ 322.808497][ T67] bridge_slave_0: left promiscuous mode [ 322.815389][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.825141][ T67] bridge_slave_1: left allmulticast mode [ 322.831094][ T67] bridge_slave_1: left promiscuous mode [ 322.837282][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.846298][ T67] bridge_slave_0: left allmulticast mode [ 322.852280][ T67] bridge_slave_0: left promiscuous mode [ 322.857981][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.964433][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 322.974908][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 322.984618][ T67] bond0 (unregistering): Released all slaves [ 323.075213][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 323.084927][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 323.094667][ T67] bond0 (unregistering): Released all slaves [ 323.761699][ T67] hsr_slave_0: left promiscuous mode [ 323.767671][ T67] hsr_slave_1: left promiscuous mode [ 323.776775][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 323.785697][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 323.794800][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 323.802550][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 323.814358][ T67] hsr_slave_0: left promiscuous mode [ 323.820425][ T67] hsr_slave_1: left promiscuous mode [ 323.826339][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 323.835371][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 323.844454][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 323.854403][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 323.870752][ T67] veth1_macvtap: left promiscuous mode [ 323.876311][ T67] veth0_macvtap: left promiscuous mode [ 323.881958][ T67] veth1_vlan: left promiscuous mode [ 323.887280][ T67] veth0_vlan: left promiscuous mode [ 323.894894][ T67] veth1_macvtap: left promiscuous mode [ 323.901602][ T67] veth0_macvtap: left promiscuous mode [ 323.907180][ T67] veth1_vlan: left promiscuous mode [ 323.916202][ T67] veth0_vlan: left promiscuous mode [ 324.145430][ T67] team0 (unregistering): Port device team_slave_1 removed [ 324.168743][ T67] team0 (unregistering): Port device team_slave_0 removed [ 324.332784][ T67] team0 (unregistering): Port device team_slave_1 removed [ 324.353280][ T67] team0 (unregistering): Port device team_slave_0 removed [ 324.935072][ T67] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.977137][ T67] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.014917][ T67] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.056490][ T67] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.153691][ T67] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.184760][ T67] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.239555][ T67] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.298878][ T67] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.355228][ T67] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.443582][ T67] bridge_slave_1: left allmulticast mode [ 325.449281][ T67] bridge_slave_1: left promiscuous mode [ 325.456273][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.465649][ T67] bridge_slave_0: left allmulticast mode [ 325.471685][ T67] bridge_slave_0: left promiscuous mode [ 325.477422][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.487423][ T67] bridge_slave_1: left allmulticast mode [ 325.493723][ T67] bridge_slave_1: left promiscuous mode [ 325.499437][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.508461][ T67] bridge_slave_0: left allmulticast mode [ 325.515181][ T67] bridge_slave_0: left promiscuous mode [ 325.521206][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.706997][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 325.718194][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 325.727747][ T67] bond0 (unregistering): Released all slaves [ 325.815770][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 325.825714][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 325.835568][ T67] bond0 (unregistering): Released all slaves [ 326.765918][ T67] hsr_slave_0: left promiscuous mode [ 326.775015][ T67] hsr_slave_1: left promiscuous mode [ 326.781381][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 326.788804][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 326.796451][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 326.803888][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 326.813598][ T67] hsr_slave_1: left promiscuous mode [ 326.819250][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 326.826703][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 326.834720][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 326.842172][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 326.853400][ T67] veth1_macvtap: left promiscuous mode [ 326.858898][ T67] veth0_macvtap: left promiscuous mode [ 326.865630][ T67] veth1_vlan: left promiscuous mode [ 326.871566][ T67] veth0_vlan: left promiscuous mode [ 326.877447][ T67] veth1_macvtap: left promiscuous mode [ 326.883115][ T67] veth0_macvtap: left promiscuous mode [ 326.888653][ T67] veth1_vlan: left promiscuous mode [ 326.893993][ T67] veth0_vlan: left promiscuous mode [ 327.052098][ T67] team0 (unregistering): Port device team_slave_1 removed [ 327.074506][ T67] team0 (unregistering): Port device team_slave_0 removed [ 327.204160][ T67] team0 (unregistering): Port device team_slave_1 removed [ 327.229055][ T67] team0 (unregistering): Port device team_slave_0 removed