last executing test programs: 15.009884585s ago: executing program 1 (id=2128): openat$auto_tracing_mark_raw_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/trace_marker_raw\x00', 0x401, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x801, 0x0) socket(0xf, 0x3, 0x2) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x2abc) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) open(&(0x7f0000000100)='./bus\x00', 0x14d27e, 0x72) select$auto(0x6, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x3, 0xfff, 0x1, 0x948b, 0x3, 0x95f4da2d, 0xc, 0x6, 0x62, 0x7, 0x7, 0x6d3f, 0xa, 0x5, 0x5]}, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000140), 0x60a41, 0x0) syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) select$auto(0xe, 0x0, 0x0, &(0x7f0000000100)={[0x1ff, 0x6, 0x1, 0xfffffffffffffff7, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000021, 0x7, 0x6d3e, 0x7fff, 0x2, 0x6]}, 0x0) write$auto(0x3, 0x0, 0x5c8) 14.179405509s ago: executing program 3 (id=2130): keyctl$auto(0xf, 0x400, 0x8001, 0x100, 0x3) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) read$auto_long_retry_limit_ops_(r0, &(0x7f0000000280)=""/140, 0x8c) r2 = syz_genetlink_get_family_id$auto_hsr(&(0x7f00000000c0), r0) sendmsg$auto_HSR_C_GET_NODE_STATUS(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='\b\x00\x00:', @ANYRES16=r2, @ANYBLOB="04002dbd7000fbdbdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000080) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = socket(0x2, 0x801, 0x106) getsockopt$auto(r3, 0x11c, 0x1, 0x0, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) r4 = openat$auto_hwflags_ops_debugfs(0xffffffffffffff9c, 0x0, 0x101000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x1, 0xb5, 0x10, 0x7, 0x4, 0xffffffffffffffff, 0xa, "2af051a940806ec05be276cfc83ce63f", 0x0, r4, 0x5, 0x7, 0xe5, 0x3}, 0x10) bpf$auto(0x1a, &(0x7f0000000380)=@link_create={@map_fd, @target_ifindex=r5, 0x3, 0x81, @uprobe_multi={0x81, 0x1ff, 0x3d7e, 0x0, 0x1, 0x4}}, 0x92) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0xffffffffffffb8f1, 0x5, 0x3, 0x613, 0xfffffffffffffffa, 0x100000000000006) r6 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r6, &(0x7f0000000040)='//\xf2\x00', 0x80000000) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), r7) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000002b40)={0x28, r8, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@HWSIM_ATTR_PMSR_SUPPORT={0x14, 0x1a, 0x0, 0x1, [@NL80211_PMSR_ATTR_TYPE_CAPA={0x10, 0x4, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_CAPA_ATTR_MAX_BURSTS_EXPONENT={0x5, 0x7, 0x4}]}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008040}, 0x4000800) 13.175830937s ago: executing program 0 (id=2133): symlink$auto(&(0x7f0000001500)='./file0/file0\x00', 0x0) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) io_uring_setup$auto(0x401, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = prctl$auto_PR_SET_MM_BRK(0xfffffff7, 0x7, 0x0, 0x2, 0x2) syz_genetlink_get_family_id$auto_macsec(&(0x7f00000000c0), r0) socket(0x11, 0x3, 0x2) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/fs/cifs/Stats\x00', 0x28102, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) listmount$auto(0xfffffffffffffffd, 0x0, 0x8, 0x0) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) madvise$auto(0x110c230000, 0x1, 0x9) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/pagetypeinfo\x00', 0x43102, 0x0) r1 = socket(0xa, 0x2, 0x0) setsockopt$auto(r1, 0x29, 0x30, 0x0, 0x56b) mmap$auto(0x0, 0x40009, 0x36, 0x9b72, 0x7, 0x28000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x2003f0, 0x18) 13.138784811s ago: executing program 1 (id=2134): keyctl$auto(0xf, 0x400, 0x8001, 0x100, 0x3) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) read$auto_long_retry_limit_ops_(r0, &(0x7f0000000280)=""/140, 0x8c) r2 = syz_genetlink_get_family_id$auto_hsr(&(0x7f00000000c0), r0) sendmsg$auto_HSR_C_GET_NODE_STATUS(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='\b\x00\x00:', @ANYRES16=r2, @ANYBLOB="04002dbd7000fbdbdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000080) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = socket(0x2, 0x801, 0x106) getsockopt$auto(r3, 0x11c, 0x1, 0x0, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x1, 0xb5, 0x10, 0x7, 0x4, 0xffffffffffffffff, 0xa, "2af051a940806ec05be276cfc83ce63f", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0xe5, 0x3}, 0x10) bpf$auto(0x1a, &(0x7f0000000380)=@link_create={@map_fd, @target_ifindex=r4, 0x3, 0x81, @uprobe_multi={0x81, 0x1ff, 0x3d7e, 0x0, 0x1, 0x4}}, 0x92) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0xffffffffffffb8f1, 0x5, 0x3, 0x613, 0xfffffffffffffffa, 0x100000000000006) r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r5, &(0x7f0000000040)='//\xf2\x00', 0x80000000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), r6) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000002b40)={0x28, r7, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@HWSIM_ATTR_PMSR_SUPPORT={0x14, 0x1a, 0x0, 0x1, [@NL80211_PMSR_ATTR_TYPE_CAPA={0x10, 0x4, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_CAPA_ATTR_MAX_BURSTS_EXPONENT={0x5, 0x7, 0x4}]}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008040}, 0x4000800) 12.063034677s ago: executing program 3 (id=2135): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4ea2, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0x101}, 0x8}, 0x7, 0x20020000) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) r1 = openat$auto_ima_ascii_measurements_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000300), 0x80, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffff7fffff0005, 0x8) madvise$auto(0x0, 0xffffffffffff0005, 0x17) r2 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/smaps_rollup\x00', 0x40000, 0x0) read$auto_proc_pid_maps_operations_internal(r2, &(0x7f00000010c0)=""/4096, 0x1000) fadvise64$auto_POSIX_FADV_NORMAL(r1, 0x7, 0xd, 0x0) write$auto(0x3, 0x0, 0x7fffffff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r4, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) sendmsg$auto_NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r3, 0x300, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x400c080) write$auto(0x3, 0x0, 0xfffffdef) mmap$auto(0x0, 0x70, 0xdf, 0x9b72, 0x2, 0x80000000008000) connect$auto(0x3, 0x0, 0x55) r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) openat$auto_mgts_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0xa001, 0x0) bpf$auto(0x0, 0x0, 0x0) read$auto(0x3, 0x0, 0x80) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) ioctl$auto_BLKRRPART(r5, 0x125f, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000) 11.236227605s ago: executing program 0 (id=2136): ioctl$auto_TCFLSH2(0xffffffffffffffff, 0x80045439, 0x0) ioctl$auto(0xffffffffffffffff, 0x89b3, 0xffffffffffffffff) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0xc0000, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x15, 0x5, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8001) connect$auto(0xffffffffffffffff, 0x0, 0x55) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) move_pages$auto(0x0, 0x4f4f, 0x0, 0x0, 0x0, 0xfffffffe) ioctl$auto(0xffffffffffffffff, 0x5, 0xffffffffffffffff) ioctl$auto(0x3, 0x5403, 0x38) close_range$auto(0x2, 0xa, 0x0) connect$auto(0x3, 0x0, 0xc) sendmmsg$auto(0x3, 0x0, 0x3, 0x6) setsockopt$auto_SO_TIMESTAMPING_NEW(r0, 0x0, 0x41, 0x0, 0x3) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/nfs/parameters/nfs_idmap_cache_timeout\x00', 0xc2902, 0x0) read$auto(r1, 0x0, 0x20) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48140, 0x0) ioctl$auto_TIOCSWINSZ2(r3, 0x5414, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x40, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20b42, 0x0) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000000140), 0xffffffffffffffff) unshare$auto(0x40000080) write$auto_mousedev_fops_mousedev(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) 9.144039524s ago: executing program 1 (id=2138): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x30004, 0x0) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fa02, 0x0) mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC0\x00', 0x802, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/Fixed MDIO bus.0/mdio_bus/fixed-0/statistics/errors_23\x00', 0x80000, 0x0) sendmsg$auto_NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000001100)={0x1468, r2, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x80}, @NL80211_ATTR_DISABLE_HE={0x4}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5}, @NL80211_ATTR_AP_SETTINGS_FLAGS={0x8, 0x135, 0xb40}, @NL80211_ATTR_SAR_SPEC={0xc, 0x12c, 0x0, 0x1, [@NL80211_SAR_ATTR_TYPE={0x8, 0x1, 0x81}]}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x4}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x1422, 0x75, 0x0, 0x1, [@nested={0x1277, 0x11, 0x0, 0x1, [@generic="894609c429d3fc0d47badfa011bf41735e8271babea772aa1ceec3226020fc11d6abcfa4eb3af6b5d00249651a2abfb7ad3a18fe746a8e1c084aa61c4c661f39c0980dd3ea4adfd07461e9ecd5f1d935c65618bbcb28740a759447fb31e1f32c523631f7163feff51c209e7d21816429f517278c0b2e7ada8130ebec48c98cc03e8d3f977a8008e54d7241563e5add9f37022bcd9a7ddb6fa5ec03f3", @nested={0x4, 0xf7}, @nested={0x4, 0x144}, @generic="13ae40f4445103897369e30f427e3c6460fe09b0b25a23022c515b71f74b116a43b067fa3b72915c5eb6c01071f70b0a512c3a8d49c5019fb23dd81e80d5b0cf719b7d60429f974f94e46b0f7485d44fcebfb645fcedc966c1655a32db8b09f80913428f310a02f7fba843af8d29c7fcf3220f2a042764778b5041cb0f86652b06fb10a5887beadb82c5de26800b5b3bc2eb7c12387c66568005535623c7a2af9aa7c1ab10be172b7b053ee48892c74afa870d3e625ba7d4b24f1bbc051282bb8ab9f4edbc35065643f7646107fcb3f1d987c290b4de4d8c97a86e", @generic="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", @generic="49099b5666d48c8b70a802aacf6c62212eb2435ad7d83adccd7e6cc2ade1553eb84320af09264d62f944cba40acb8244fbd8e10ede6d2be010dbaa080dac4ee3c41c4dce68045e9710b81572259f7a22ad608a8f2fc7678c7f9ca3e052a8093913ac7fe27cdd0385000ec57b1a2f4a2019a8327fa226fc2c39796295787a0c7d94131dc36cc05dc0530a839b00e47b3a93609b79c6a2ab4ff6de0d7b985a22c847dc6093b61a5d0a4edd3df2924fffc87b0fd04ea0295482fdf1824ec6d70e", @generic="dcd3ee517c4bdcfd61fb319b902b637d3211897589aa392886615f12dad94c1f9964925819356a1463", @typed={0xa, 0x61, 0x0, 0x0, @str='&@*\x9e{\x00'}]}, @generic="81e60f0740d3706bf5f6d4ca28e4878bf4a755430d906c3b184db34a424052fbaf737f9edec57f543dd1dd048f663b5e73707125134ba9682a71a183343bdc941e7df68034cfba016097418e031eef279e9110b44ef77cf9732759e9604e1277a5297303502d9aec6e4c45b72da7696444cfb5c2746ff4e64df5ec855e8a1a56660afefc52bd2483b7442b995eab3e0f38dfa74b5ad58da53d88d3745edffa548df070c6b07a234376174e5e9b106357dce7fd1bc120585b693f", @typed={0x8, 0x142, 0x0, 0x0, @uid=0xffffffffffffffff}, @typed={0x8, 0x3, 0x0, 0x0, @fd=r3}, @nested={0xb4, 0x97, 0x0, 0x1, [@generic="ca4b3286c0fb3ed9edecfd667058327743e350c989bcaca5e503cc8946c9c01cd040ea1d3479cf60b16bca0b13752be7e0c71a40efcbc6e88ec9eeddd2e76d2561356cb2ab88106be1d0cf67faf956dae2f1ecc35d46fa259db9d35c54c05b2baa634110fb663f1edae1ebe78d88d44978dfe906cab68dcabbc6d97c2a9d9094303af15082afeb643c25dd932f9f4f05c2f8fefa31ac6edf72b3d86601b055343cccb75038d9ceec70c36ed613c2610c"]}, @nested={0x20, 0x12d, 0x0, 0x1, [@nested={0x4, 0x64}, @typed={0x7, 0x2, 0x0, 0x0, @str='{\'\x00'}, @nested={0x4, 0xb1}, @typed={0xc, 0x85, 0x0, 0x0, @u64=0x7}]}, @typed={0x5, 0xde, 0x0, 0x0, @str='\x00'}]}]}, 0x1468}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/amidi2\x00', 0x8080, 0x0) prctl$auto(0xdd7e, 0x1, 0x0, 0x1, 0x0) syz_open_procfs$namespace(0x0, 0x0) getdents$auto(r1, 0x0, 0xfb5) socket$nl_generic(0x10, 0x3, 0x10) unshare$auto(0x40000080) madvise$auto(0x0, 0xffffffffffff0001, 0x9) openat$auto_stat_fops_per_vm_kvm_main(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/kvm/pages_4k\x00', 0xa03, 0x0) 8.918189916s ago: executing program 3 (id=2139): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cpu.max\x00', 0x20b02, 0x0) sendfile$auto(r0, r0, 0x0, 0x3) sendfile$auto(r0, r0, &(0x7f0000000000)=0x3, 0xad6) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1) pread64$auto(0xffffffffffffffff, 0x0, 0x7fc, 0x400) r1 = socket(0x22, 0x1, 0x2) r2 = openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/kernel/debug/tracing/per_cpu/cpu1/trace\x00', 0x600, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x74c) unshare$auto(0x40000080) sendmmsg$auto(r1, 0x0, 0x3b87, 0xa) mmap$auto(0x0, 0x400008, 0xe4, 0x9b72, 0x2, 0x400) madvise$auto(0x7, 0x4000000000002, 0x6) madvise$auto(0x0, 0xffffffffffff0001, 0x15) socket(0xa, 0x2, 0x88) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0}, 0x8000) r3 = io_uring_setup$auto(0x6, 0x0) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000200), 0xffffffffffffffff) socket(0x5, 0x800, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_HWSIM_CMD_DEL_RADIO(r4, &(0x7f0000003bc0)={0x0, 0x0, &(0x7f0000003b80)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRESHEX=r3, @ANYRES64=r2], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x2000081) madvise$auto(0x0, 0xffffffffffff0005, 0x17) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x200000, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x5) shmctl$auto_SHM_STAT_ANY(0x7ff, 0xf, &(0x7f0000000180)={{0x16000000, 0xee01, 0xee01, 0x7, 0x12000, 0x9, 0x5}, 0xf, 0xfffffffffffffffd, 0x3f, 0xc, @inferred, @raw=0x7d9, 0x9, 0x0, &(0x7f0000000100)="0fd0a48af0ed02391cf6fcd4785d2921bcd7097eeefed8f8691400fb335d1f4599f9c609618aed2e60703b3f86a159d6b1002a9993a8442bd1ff57d5c208098f9f6ee5247b7ddd4f18971955a758", &(0x7f0000000400)="a34eb4a0705a20bda8e0ce259e84b73c4a5550243e5b618e87ce093cbedb7e656fa5f6b0b358a7536e48d3cd6127e84ecfe1bf644f6a3c26ddd9f016bb0c716fadfb019bcde882261fc0edbd19c3c73160ba56efb468b79fda19b84ca0610687272fdecf628cbf796a9de45009229cdede0ad43a05d8ac82e0f6cf46f505c89eafe9db398ff515a4a29dd11c0781182d719f2ac27aa9322ab71ee7955ad794ef8963094f475586e9aec22c3cc622f41117799ab97d"}) unshare$auto(0x40000080) madvise$auto(0x0, 0x200004, 0x15) 7.831903186s ago: executing program 0 (id=2141): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/orangefs/perf_history_size\x00', 0x1182, 0x0) io_uring_setup$auto(0x86, 0x0) r1 = socket(0x10, 0x4, 0xffffffc0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x120e2, 0x0) write$auto(r3, 0x0, 0x81) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r4, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010325bd7040ffdbdf250a0000000c0002006e6c383032313100"], 0x28}, 0x1, 0x0, 0x0, 0x30000881}, 0xc040810) r6 = syz_genetlink_get_family_id$auto_mac80211_hwsim(0x0, 0xffffffffffffffff) r7 = geteuid() msgctl$auto_MSG_STAT_ANY(0x10000, 0xd, &(0x7f0000000340)={{0xa0, 0xee01, 0xee01, 0x7, 0x0, 0x5, 0x9dc4}, &(0x7f00000000c0)=0x4, 0x0, 0x2, 0x5dd8, 0x7fff, 0xb12, 0x2, 0x8000, 0x4, 0xac0, @inferred, @inferred=0xffffffffffffffff}) r9 = setfsuid$auto(0xee00) setresuid$auto(0xffffffffffffffff, r9, 0x8000) msgctl$auto_MSG_STAT(0xbc7, 0xb, &(0x7f0000000480)={{0x8, 0xffffffffffffffff, 0x0, 0x8, 0x10001, 0xfd36, 0xfff9}, &(0x7f00000003c0)=0x3, &(0x7f0000000440)=0x7f, 0x7fffffff, 0x4, 0x1, 0x8000000000000000, 0x6, 0xc210, 0x3, 0x3, @inferred=0xffffffffffffffff, @raw=0x45}) setresuid$auto(r8, r9, r10) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r1, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="c002", @ANYRES16=0x0, @ANYBLOB="100028bd7000fbdbdf25030000007902028055966726eb2c50fc833990e033caf7d4a0810673c746c88b509902eb373a697ab827894d11296c2c26bc7394e459c97021b7ac53c98b43b5af99985920326fd45dca13a4b2cfe1c2082265e49d2f153052c021392c713b54b3e81d86c429af2dceae10decfba701bea8e0686ec3ff8e2e34ae16b83d5a155b07a3eaaa8cf6ce4ff1ec35c234e8cd8304effe01e6efce374c74e08efc7afae761953b46b59a15e5d027ca10e2789c2a200b1faf9892ad8b867ed7f2b3a01fa8008001600", @ANYRES32=r2, @ANYBLOB="08001700ed6800000400140023c147e609298e820550ed982c247549240ed8e1200262a8bb35945296c09b757c11e50f1651465773b3a7c37b2233ab7856a309709573b914dc62b790ed13609f383f65efa792134ccc0980486fbd94ea554093cf39f9b367d86738584dfcace94c1ce1adaf212fbefcb2b54f03689be2ec3d42da71fcd5111b7a530c3a9d464b3e4a11c5a69546ce7c3a8b5825db0266067102354ba51d6c0fe8ee5c292cb1fca3011e23bd7c2b98f28fb654e82aad077d5d7260c5388829199562a56abf5c64a62f2e050f05336efa32f1dc3179efdb560854687ce095a71abcdc379c6825e7d5714ffb3f78b0ed518793a039c2cd8ef75c7f34209bd9012200c2c65d56422fe28a629e63230c6ef4ef3cf9dc2f856a11366d7cb627b2df69751a16dc5065714400000800d500", @ANYRES32, @ANYBLOB="14003800fe8000000000000000000000000000aa30007d80040035800400a5801c0031002f70726f632f73656c662f736d6170735f726f6c6c75700008004a00", @ANYRES32=r7, @ANYBLOB="771c61cc08002c00", @ANYRES32=r9, @ANYBLOB="04007a802500f88004001a802a676f03444bff83d35b7c6f1417397075987f466d88f51d5ce34ad1f70000000000000400080004000800060009000300000006000900090000000c000b000100000001000000060009000400000004000800"], 0x2c0}, 0x1, 0x0, 0x0, 0x4040004}, 0x10000000) sendmsg$auto_HWSIM_CMD_GET_RADIO(0xffffffffffffffff, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000280)={0x14, r6, 0xf3e97f51700e57cf, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x884}, 0x8020) write$auto(r0, &(0x7f0000000540)='0\x00\xa6\x1fZ\xb2\'Q8-\x18\xdb\x80\b\xaf\x9f\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xabcOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xad*HqP\x0f\x00\x00\x00\x1c\x89OO}e\xab\xd5\xef\xc0\x04z\xd0I4\x00\x00\x00\xf6\xff\xff\xff\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3\xfbm\f\x84\x13\x04\x92\xeb\xf3\x04\xa3\xf4}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x16O\xacA\xa5[\x18\xb8;\x02tcf\x06r\x06\xeb\xf0\xc4\xcb\x10\xaeUV\x11\xcb\xdd\x81\xbe\xdeL\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdf\x13<\xf0\v\x1f\x14\xf3\xd0\t\xd2L!\x81\xea\x03\xa0\r|%\xbf\x02trg\x9a\xe7)\xc9\xd5\x13\x16\xea\xa1w\x80\v\xe5\b\'\xfe\a\xf4\xaaE\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x80O4\xca\x95\xe7\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4p\xf0\xe2\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xcb\a\x8dO\xe9\xfc\xb7R\t\f+\x7f\xd5\t\xfb\xb2\x9c\xb9UQC\xcdH\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb0\x00S\xda\r\xccm\xe0h\xb4@\x01\"\x06\x0f\\E0)}\xe1b\xfcc;=\xb5\xe0\xfe\x99C\xdb\t\xb2\xba\xfc\xa4\xb0g\xf3\x00\xd24\xc5\x19\fe\xc5\xd8\x06\x9b\xe3\x1cU(\x05\x8f\x8aDE\xb1|\xefe\xd2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc2g\xf5\xc3\xb0\xdc\x85h\xfdfS\x06\x1f@\x8f\x94\x9e\xa1\x12\xc3\xb8\x00G\x00\x00\xd1ksq\xc5hq\xb1\xb9\xbb\xb7\x00'/510, 0x98c7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) madvise$auto(0x0, 0x200007, 0x19) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/smaps_rollup\x00', 0x40000, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) io_setup$auto(0x1, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000a00)=""/176, 0xb0) 7.144175679s ago: executing program 2 (id=2142): close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) mmap$auto(0x0, 0x5, 0xdf, 0x9b72, 0x7, 0x28000) socketpair$auto(0x1e, 0x5, 0x200000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x55) r0 = socket(0x2, 0x3, 0xa) setsockopt$auto(r0, 0x1, 0x3e, 0x0, 0x8) connect$auto(0x3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @multicast1}, 0x55) recvmmsg$auto(0xffffffffffffffff, &(0x7f0000000100)={{0x0, 0xbb, 0x0, 0x8, &(0x7f0000000040), 0x81, 0x9}, 0xfffffffb}, 0x5, 0x6586, 0x0) sendmsg$auto_NL802154_CMD_DEL_INTERFACE(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100080}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20050001}, 0x80) sendmmsg$auto(0x3, &(0x7f00000001c0)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram11\x00', 0x20000, 0x0) mseal$auto(0x1ffff000, 0xfffffffffffffff3, 0x0) mmap$auto(0x0, 0x2020006, 0x1000000000000007, 0xeb1, 0x0, 0x1008000) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) madvise$auto(0x108000, 0x2, 0xa) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x400, 0x2) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)) r2 = fanotify_init$auto(0x6a1, 0x2000000000002) read$auto(0xffffffffffffffff, 0x0, 0x1) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) sendmsg$auto_NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) write$auto(r3, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x5, 0x1ff, 0x7fa, 0x4, 0x9, 0x7, r2, 0x20010180, 0xa}, 0x10) r4 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x1036c2, 0x0) ioctl$auto_SNDCTL_DSP_GETBLKSIZE(r4, 0xc0045004, 0x0) getsockopt$auto_SO_TXREHASH(r4, 0x2, 0x4a, 0x0, 0x0) fchdir$auto(r1) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x100842, 0x0) 6.528448253s ago: executing program 1 (id=2143): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cpu.max\x00', 0x20b02, 0x0) sendfile$auto(r0, r0, 0x0, 0x3) sendfile$auto(r0, r0, &(0x7f0000000000)=0x3, 0xad6) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1) pread64$auto(0xffffffffffffffff, 0x0, 0x7fc, 0x400) r1 = socket(0x22, 0x1, 0x2) r2 = openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/kernel/debug/tracing/per_cpu/cpu1/trace\x00', 0x600, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x74c) unshare$auto(0x40000080) sendmmsg$auto(r1, 0x0, 0x3b87, 0xa) mmap$auto(0x0, 0x400008, 0xe4, 0x9b72, 0x2, 0x400) madvise$auto(0x7, 0x4000000000002, 0x6) madvise$auto(0x0, 0xffffffffffff0001, 0x15) socket(0xa, 0x2, 0x88) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.events\x00', 0x60640, 0x0) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0}, 0x8000) r3 = io_uring_setup$auto(0x6, 0x0) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000200), 0xffffffffffffffff) socket(0x5, 0x800, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_HWSIM_CMD_DEL_RADIO(r4, &(0x7f0000003bc0)={0x0, 0x0, &(0x7f0000003b80)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRESHEX=r3, @ANYRES64=r2], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x2000081) madvise$auto(0x0, 0xffffffffffff0005, 0x17) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x200000, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x5) shmctl$auto_SHM_STAT_ANY(0x7ff, 0xf, &(0x7f0000000180)={{0x16000000, 0xee01, 0xee01, 0x7, 0x12000, 0x9, 0x5}, 0xf, 0xfffffffffffffffd, 0x3f, 0xc, @inferred, @raw=0x7d9, 0x9, 0x0, &(0x7f0000000100)="0fd0a48af0ed02391cf6fcd4785d2921bcd7097eeefed8f8691400fb335d1f4599f9c609618aed2e60703b3f86a159d6b1002a9993a8442bd1ff57d5c208098f9f6ee5247b7ddd4f18971955a758", &(0x7f0000000400)="a34eb4a0705a20bda8e0ce259e84b73c4a5550243e5b618e87ce093cbedb7e656fa5f6b0b358a7536e48d3cd6127e84ecfe1bf644f6a3c26ddd9f016bb0c716fadfb019bcde882261fc0edbd19c3c73160ba56efb468b79fda19b84ca0610687272fdecf628cbf796a9de45009229cdede0ad43a05d8ac82e0f6cf46f505c89eafe9db398ff515a4a29dd11c0781182d719f2ac27aa9322ab71ee7955ad794ef8963094f475586e9aec22c3cc622f41117799ab97d"}) unshare$auto(0x40000080) madvise$auto(0x0, 0x200004, 0x15) 6.526830935s ago: executing program 2 (id=2144): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/orangefs/perf_history_size\x00', 0x1182, 0x0) io_uring_setup$auto(0x86, 0x0) r1 = socket(0x10, 0x4, 0xffffffc0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x120e2, 0x0) write$auto(r3, 0x0, 0x81) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r4, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010325bd7040ffdbdf250a0000000c0002006e6c383032313100"], 0x28}, 0x1, 0x0, 0x0, 0x30000881}, 0xc040810) r6 = syz_genetlink_get_family_id$auto_mac80211_hwsim(0x0, 0xffffffffffffffff) r7 = geteuid() msgctl$auto_MSG_STAT_ANY(0x10000, 0xd, &(0x7f0000000340)={{0xa0, 0xee01, 0xee01, 0x7, 0x0, 0x5, 0x9dc4}, &(0x7f00000000c0)=0x4, 0x0, 0x2, 0x5dd8, 0x7fff, 0xb12, 0x2, 0x8000, 0x4, 0xac0, @inferred, @inferred=0xffffffffffffffff}) r9 = setfsuid$auto(0xee00) setresuid$auto(0xffffffffffffffff, r9, 0x8000) msgctl$auto_MSG_STAT(0xbc7, 0xb, &(0x7f0000000480)={{0x8, 0xffffffffffffffff, 0x0, 0x8, 0x10001, 0xfd36, 0xfff9}, &(0x7f00000003c0)=0x3, &(0x7f0000000440)=0x7f, 0x7fffffff, 0x4, 0x1, 0x8000000000000000, 0x6, 0xc210, 0x3, 0x3, @inferred=0xffffffffffffffff, @raw=0x45}) setresuid$auto(r8, r9, r10) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r1, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="c002", @ANYRES16=0x0, @ANYBLOB="100028bd7000fbdbdf25030000007902028055966726eb2c50fc833990e033caf7d4a0810673c746c88b509902eb373a697ab827894d11296c2c26bc7394e459c97021b7ac53c98b43b5af99985920326fd45dca13a4b2cfe1c2082265e49d2f153052c021392c713b54b3e81d86c429af2dceae10decfba701bea8e0686ec3ff8e2e34ae16b83d5a155b07a3eaaa8cf6ce4ff1ec35c234e8cd8304effe01e6efce374c74e08efc7afae761953b46b59a15e5d027ca10e2789c2a200b1faf9892ad8b867ed7f2b3a01fa8008001600", @ANYRES32=r2, @ANYBLOB="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", @ANYRES32, @ANYBLOB="14003800fe8000000000000000000000000000aa30007d80040035800400a5801c0031002f70726f632f73656c662f736d6170735f726f6c6c75700008004a00", @ANYRES32=r7, @ANYBLOB="771c61cc08002c00", @ANYRES32=r9, @ANYBLOB="04007a802500f88004001a802a676f03444bff83d35b7c6f1417397075987f466d88f51d5ce34ad1f70000000000000400080004000800060009000300000006000900090000000c000b000100000001000000060009000400000004000800"], 0x2c0}, 0x1, 0x0, 0x0, 0x4040004}, 0x10000000) sendmsg$auto_HWSIM_CMD_GET_RADIO(0xffffffffffffffff, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000280)={0x14, r6, 0xf3e97f51700e57cf, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x884}, 0x8020) write$auto(r0, &(0x7f0000000540)='0\x00\xa6\x1fZ\xb2\'Q8-\x18\xdb\x80\b\xaf\x9f\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xabcOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xad*HqP\x0f\x00\x00\x00\x1c\x89OO}e\xab\xd5\xef\xc0\x04z\xd0I4\x00\x00\x00\xf6\xff\xff\xff\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3\xfbm\f\x84\x13\x04\x92\xeb\xf3\x04\xa3\xf4}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x16O\xacA\xa5[\x18\xb8;\x02tcf\x06r\x06\xeb\xf0\xc4\xcb\x10\xaeUV\x11\xcb\xdd\x81\xbe\xdeL\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdf\x13<\xf0\v\x1f\x14\xf3\xd0\t\xd2L!\x81\xea\x03\xa0\r|%\xbf\x02trg\x9a\xe7)\xc9\xd5\x13\x16\xea\xa1w\x80\v\xe5\b\'\xfe\a\xf4\xaaE\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x80O4\xca\x95\xe7\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4p\xf0\xe2\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xcb\a\x8dO\xe9\xfc\xb7R\t\f+\x7f\xd5\t\xfb\xb2\x9c\xb9UQC\xcdH\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb0\x00S\xda\r\xccm\xe0h\xb4@\x01\"\x06\x0f\\E0)}\xe1b\xfcc;=\xb5\xe0\xfe\x99C\xdb\t\xb2\xba\xfc\xa4\xb0g\xf3\x00\xd24\xc5\x19\fe\xc5\xd8\x06\x9b\xe3\x1cU(\x05\x8f\x8aDE\xb1|\xefe\xd2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc2g\xf5\xc3\xb0\xdc\x85h\xfdfS\x06\x1f@\x8f\x94\x9e\xa1\x12\xc3\xb8\x00G\x00\x00\xd1ksq\xc5hq\xb1\xb9\xbb\xb7\x00'/510, 0x98c7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) madvise$auto(0x0, 0x200007, 0x19) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/smaps_rollup\x00', 0x40000, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) io_setup$auto(0x1, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000a00)=""/176, 0xb0) 5.772368966s ago: executing program 0 (id=2145): prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2) r0 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x0, 0x0) ioctl$auto(r0, 0x64c4, 0xffffffffffffffff) socket(0x10, 0x4, 0xffffffc0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x406, 0x0, 0x8fd6, 0x948b, 0x3, 0x35f4da0a, 0x4000000000005, 0x6, 0x62, 0x8, 0x7, 0x1, 0x10b, 0x100, 0x18]}, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d7) write$auto(0xffffffffffffffff, &(0x7f0000000180)='1\x00\\\xa0N?F`\x12\xfa\b\x1c\xc7k\x9eC\xbf^\xce\x14\x10\x99\xfa<\xf5\xe2GPc\xc6\x80.\xa9\xf3\x92\xac\x96>Fi-\xd81R\xfc\xde\x0f\xf9\x02p\x9f\x80\x86S\x9b\xd6\x81\xbd-\xaaWy\x19\xe2\x96\xc3\xe1\xad)Aa\xd2\xe6.\xfdZ\f\xdeG\xcb\x81\xaeH\xf2p\f\xc9\xb2\xf6\x91\xfb\r\xe8\xe0(\x94F7\xf5L\xf0\x14\xc3\x9a\xac0\x8e\x91\x01\x1bc\x1d-^r\xcc\xc6\"*Y\x18|\xf2\x87', 0x281) write$auto(0xffffffffffffffff, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x4, 0x15) open(&(0x7f0000000000)='./cgroup\x00', 0x0, 0x64) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000000)={{0x0, 0x6, 0x0, 0x106, 0x0, 0x1, 0x3}, 0x57177fc5}, 0xd, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/can/rcvlist_eff\x00', 0xb00, 0x0) read$auto(0x3, 0x0, 0xf34) 4.412288619s ago: executing program 0 (id=2146): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/orangefs/perf_history_size\x00', 0x1182, 0x0) r1 = io_uring_setup$auto(0x86, 0x0) r2 = socket(0x10, 0x4, 0xffffffc0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x120e2, 0x0) write$auto(r4, 0x0, 0x81) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x14044085}, 0xc040810) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_mac80211_hwsim(0x0, 0xffffffffffffffff) r7 = geteuid() msgctl$auto_MSG_STAT_ANY(0x10000, 0xd, &(0x7f0000000340)={{0xa0, 0xee01, 0xee01, 0x7, 0x0, 0x5, 0x9dc4}, &(0x7f00000000c0)=0x4, 0x0, 0x2, 0x5dd8, 0x7fff, 0xb12, 0x2, 0x8000, 0x4, 0xac0, @inferred, @inferred=0xffffffffffffffff}) r9 = setfsuid$auto(0xee00) setresuid$auto(0xffffffffffffffff, r9, 0x8000) msgctl$auto_MSG_STAT(0xbc7, 0xb, &(0x7f0000000480)={{0x8, 0xffffffffffffffff, 0x0, 0x8, 0x10001, 0xfd36, 0xfff9}, &(0x7f00000003c0)=0x3, &(0x7f0000000440)=0x7f, 0x7fffffff, 0x4, 0x1, 0x8000000000000000, 0x6, 0xc210, 0x3, 0x3, @inferred=0xffffffffffffffff, @raw=0x45}) setresuid$auto(r8, r9, r10) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r2, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="c0020000", @ANYRES16=0x0, @ANYRESOCT, @ANYBLOB="92359e047af25dfafa78ad0268efe8950ee76b5df0c015d9b51adf912725219db61e31b3c52e5e3468a856fec8fbc31673d5c031b969253ffb8aebbf6db6f53cde7c414e789c555dc785a4b33a", @ANYBLOB="08001700ed6800000400140023c147e609298e820550ed982c247549240ed8e1200262a8bb35945296c09b757c11e50f1651465773b3a7c37b2233ab7856a309709573b914dc62b790ed13609f383f65efa792134ccc0980486fbd94ea554093cf39f9b367d86738584dfcace94c1ce1adaf212fbefcb2b54f03689be2ec3d42da71fcd5111b7a530c3a9d464b3e4a11c5a69546ce7c3a8b5825db0266067102354ba51d6c0fe8ee5c292cb1fca3011e23bd7c2b98f28fb654e82aad077d5d7260c5388829199562a56abf5c64a62f2e050f05336efa32f1dc3179efdb560854687ce095a71abcdc379c6825e7d5714ffb3f78b0ed518793a039c2cd8ef75c7f34209bd9012200c2c65d56422fe28a629e63230c6ef4ef3cf9dc2f856a11366d7cb627b2df69751a16dc5065714400000800d500", @ANYRES8=r5, @ANYBLOB="1400380000000000000000000000aa30007d80040035800400a5801c0031002f70726f632f73656c662f736d617073178b6f6c6c75700008004a000000000000", @ANYRES32=r7, @ANYRES32=r3, @ANYRES32=r9, @ANYBLOB="04007a802500f88004001a802a676f03444bff83d35b7c6f1417397075987f466d88f51d5ce34ad1f70000000000000400080004000800060009000300000006000900090000000c000b000100000001000000060009000400000004000800"], 0x2c0}, 0x1, 0x0, 0x0, 0x4040004}, 0x10) sendmsg$auto_HWSIM_CMD_GET_RADIO(r5, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="cf5728bd7000fedbdf2506000000fef8a4214a4bbb34a8dfca6cfb1efc60e6454718dc303b10f77976526d9a661f0e3408e18668e6ac7bf5e971ace8c85d25e0f9557056ee74020ccb55dff4685a7335321f8c26fad42639efa1f5c5e38427980c8324a847235e134c575e319cdabba1d9993dcdad6c7dc182cc9548529734ff3e68000552a6416edbb507d256d04689dd97ffabff77a644d7424d57f3b0db7d99dd3c691c374e062499e811a744fd0ea385590fc18b5e9a4472101fcfaf91475bb0331b78b8afefb990a3acbe0c007e250a7d5724d113702e24cf1558baf7cbb326e144c2f8f9f6154bf08a66d2ddca8915eee25f444b73228b835d"], 0x14}, 0x1, 0x0, 0x0, 0x884}, 0x8020) write$auto(r0, &(0x7f0000000540)='0\x00\xa6\x1fZ\xb2\'Q8-\x18\xdb\x80\b\xaf\x9f\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xabcOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xad*HqP\x0f\x00\x00\x00\x1c\x89OO}e\xab\xd5\xef\xc0\x04z\xd0I4\x00\x00\x00\xf6\xff\xff\xff\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3\xfbm\f\x84\x13\x04\x92\xeb\xf3\x04\xa3\xf4}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x16O\xacA\xa5[\x18\xb8;\x02tcf\x06r\x06\xeb\xf0\xc4\xcb\x10\xaeUV\x11\xcb\xdd\x81\xbe\xdeL\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdf\x13<\xf0\v\x1f\x14\xf3\xd0\t\xd2L!\x81\xea\x03\xa0\r|%\xbf\x02trg\x9a\xe7)\xc9\xd5\x13\x16\xea\xa1w\x80\v\xe5\b\'\xfe\a\xf4\xaaE\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x80O4\xca\x95\xe7\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4p\xf0\xe2\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xcb\a\x8dO\xe9\xfc\xb7R\t\f+\x7f\xd5\t\xfb\xb2\x9c\xb9UQC\xcdH\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb0\x00S\xda\r\xccm\xe0h\xb4@\x01\"\x06\x0f\\E0)}\xe1b\xfcc;=\xb5\xe0\xfe\x99C\xdb\t\xb2\xba\xfc\xa4\xb0g\xf3\x00\xd24\xc5\x19\fe\xc5\xd8\x06\x9b\xe3\x1cU(\x05\x8f\x8aDE\xb1|\xefe\xd2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc2g\xf5\xc3\xb0\xdc\x85h\xfdfS\x06\x1f@\x8f\x94\x9e\xa1\x12\xc3\xb8\x00G\x00\x00\xd1ksq\xc5hq\xb1\xb9\xbb\xb7\x00'/510, 0x98c7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x5, 0xfffffffffffffffe) madvise$auto(0x0, 0x200007, 0x19) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/smaps_rollup\x00', 0x40000, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) io_setup$auto(0x9b2, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000a00)=""/176, 0xb0) 4.038126327s ago: executing program 2 (id=2147): mmap$auto(0x0, 0x400008, 0xdf, 0x10, 0xffffffffffffffff, 0xb1) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = fcntl$auto(0x8000000000000001, 0x5, 0x8) close_range$auto(0x2, 0x8000, 0x0) r1 = openat$auto_vsock_device_ops_af_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_IOCTL_VM_SOCKETS_GET_LOCAL_CID(r1, 0x7b9, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/dummy_hcd.7/usb8/bConfigurationValue\x00', 0x10b041, 0x0) sendfile$auto(r0, r0, 0x0, 0x2) socket(0xa, 0xa, 0x88) socket(0x2, 0x1, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{&(0x7f00000000c0)="8d2117d6a4ab0098f70ee4d8441d9ba8fb3e47e0fcafcb6ef3944ac7d7b755ec79b1bf8ba738c401a54e1c82c59a3131ef860e8d4565078f2ac18a30", 0x12, 0x0, 0x51c3490d, 0x0, 0x80000000}, 0x10001}, 0x8100007, 0x20020004) prctl$auto(0x41, 0x200000081, 0x0, 0x188, 0x4b) prctl$auto(0x41, 0x3, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x801, 0x0) socket(0xf, 0x3, 0x2) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x465283, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) open(&(0x7f0000000100)='./bus\x00', 0x14d27e, 0x72) socket(0x2a, 0x1, 0xfffffffd) mmap$auto(0x0, 0x400008, 0xfffffffffffffffb, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x1000, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) clone$auto(0x2, 0x81, 0x0, 0x0, 0x3) select$auto(0x6, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x3, 0xfff, 0x1, 0x948b, 0x3, 0x95f4da2d, 0xc, 0x6, 0x62, 0x7, 0x7, 0x6d3f, 0xa, 0x5, 0x5]}, 0x0) setfsgid$auto(0x9) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/pid_for_children\x00') 3.554118616s ago: executing program 0 (id=2148): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cpu.max\x00', 0x20b02, 0x0) sendfile$auto(r0, r0, 0x0, 0x3) sendfile$auto(r0, r0, &(0x7f0000000000)=0x3, 0xad6) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1) pread64$auto(0xffffffffffffffff, 0x0, 0x7fc, 0x400) r1 = socket(0x22, 0x1, 0x2) r2 = openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/kernel/debug/tracing/per_cpu/cpu1/trace\x00', 0x600, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x74c) unshare$auto(0x40000080) sendmmsg$auto(r1, 0x0, 0x3b87, 0xa) mmap$auto(0x0, 0x400008, 0xe4, 0x9b72, 0x2, 0x400) madvise$auto(0x7, 0x4000000000002, 0x6) madvise$auto(0x0, 0xffffffffffff0001, 0x15) socket(0xa, 0x2, 0x88) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0}, 0x8000) r3 = io_uring_setup$auto(0x6, 0x0) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000200), 0xffffffffffffffff) socket(0x5, 0x800, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_HWSIM_CMD_DEL_RADIO(r4, &(0x7f0000003bc0)={0x0, 0x0, &(0x7f0000003b80)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRESHEX=r3, @ANYRES64=r2], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x2000081) madvise$auto(0x0, 0xffffffffffff0005, 0x17) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x200000, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x5) shmctl$auto_SHM_STAT_ANY(0x7ff, 0xf, &(0x7f0000000180)={{0x16000000, 0xee01, 0xee01, 0x7, 0x12000, 0x9, 0x5}, 0xf, 0xfffffffffffffffd, 0x3f, 0xc, @inferred, @raw=0x7d9, 0x9, 0x0, &(0x7f0000000100)="0fd0a48af0ed02391cf6fcd4785d2921bcd7097eeefed8f8691400fb335d1f4599f9c609618aed2e60703b3f86a159d6b1002a9993a8442bd1ff57d5c208098f9f6ee5247b7ddd4f18971955a758", &(0x7f0000000400)="a34eb4a0705a20bda8e0ce259e84b73c4a5550243e5b618e87ce093cbedb7e656fa5f6b0b358a7536e48d3cd6127e84ecfe1bf644f6a3c26ddd9f016bb0c716fadfb019bcde882261fc0edbd19c3c73160ba56efb468b79fda19b84ca0610687272fdecf628cbf796a9de45009229cdede0ad43a05d8ac82e0f6cf46f505c89eafe9db398ff515a4a29dd11c0781182d719f2ac27aa9322ab71ee7955ad794ef8963094f475586e9aec22c3cc622f41117799ab97d"}) unshare$auto(0x40000080) madvise$auto(0x0, 0x200004, 0x15) 3.519598985s ago: executing program 2 (id=2149): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x2, 0x1, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/mac80211_hwsim/hwsim1/net/wlan1/statistics/rx_crc_errors\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000100)=""/4096, 0x1000) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x78, 0xffffffffffffffff, 0x300000000000) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) modify_ldt$auto(0x1, 0x0, 0x10) r1 = socket(0x2, 0x1, 0x106) getsockopt$auto_SO_NOFCS(r1, 0x5, 0x2b, 0x0, &(0x7f0000000080)=0x7ff) bind$auto(0x3, &(0x7f0000000040)=@xdp={0x2c, 0xb, 0x0, 0x800}, 0x9) seccomp$auto_SECCOMP_SET_MODE_FILTER(0x1, 0x56c, 0x0) write$auto(0x3, 0x0, 0x2a9) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x106) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x100e983, 0x5, 0xebd, 0x401, 0x10000008000) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd457, 0x8001, 0x958c, 0x3, 0x15f4da0a, 0x3, 0x3, 0x61, 0x40008000001f, 0x7, 0x6d3e, 0x7, 0xcd6, 0x10000]}, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) rseq$auto(0x0, 0x8000, 0x0, 0x8000006) bind$auto(0xffffffffffffffff, 0x0, 0x2) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) read$auto(0x3, 0x0, 0xf34) setsockopt$auto(0x3, 0x1, 0x1d, 0x0, 0x9) write$auto(0x3, 0x0, 0xffd8) setsockopt$auto(0x3, 0x0, 0x33, 0x0, 0x4) 2.288038029s ago: executing program 3 (id=2150): mmap$auto(0x0, 0x2020409, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/fail-nth\x00', 0x88c02, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x0, 0x0) read$auto(r1, 0x0, 0x20) writev$auto(r0, 0x0, 0x3) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x80) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/kernel/hung_task_check_interval_secs\x00', 0x88542, 0x0) write$auto(r2, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = socket(0x2b, 0x1, 0x1) setsockopt$auto(r3, 0x0, 0x1, 0x0, 0x1e) 1.641620576s ago: executing program 3 (id=2151): symlink$auto(&(0x7f0000001500)='./file0/file0\x00', 0x0) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) io_uring_setup$auto(0x401, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = prctl$auto_PR_SET_MM_BRK(0xfffffff7, 0x7, 0x0, 0x2, 0x2) syz_genetlink_get_family_id$auto_macsec(&(0x7f00000000c0), r0) socket(0x11, 0x3, 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) listmount$auto(0xfffffffffffffffd, 0x0, 0x8, 0x0) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) madvise$auto(0x110c230000, 0x1, 0x9) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/pagetypeinfo\x00', 0x43102, 0x0) r1 = socket(0xa, 0x2, 0x0) setsockopt$auto(r1, 0x29, 0x30, 0x0, 0x56b) mmap$auto(0x0, 0x40009, 0x36, 0x9b72, 0x7, 0x28000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x2003f0, 0x18) 1.544163448s ago: executing program 2 (id=2152): syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) mmap$auto(0x2, 0xaa06, 0xdf, 0xeb1, 0xffffffffffffffff, 0x2) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, r0, 0x2) madvise$auto(0x0, 0xffffffffffff0001, 0x15) close_range$auto(0x2, 0x8, 0x0) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000180), 0xffffffffffffffff) msgctl$auto_MSG_INFO(0x9, 0xc, &(0x7f0000000240)={{0x80020000, 0xee00, 0xee01, 0x9, 0x0, 0x7, 0x8}, 0x0, &(0x7f0000000200)=0xd5, 0x6, 0xfffffffffffff90b, 0x1fa1ac89, 0x10, 0x1000, 0x598, 0xf, 0x3, @inferred, @raw=0xffffffff}) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) prctl$auto(0x1000000003b, 0x7, 0x0, 0x9, 0x7) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r2 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) write$auto(r2, 0x0, 0x4) setresuid$auto(0x2, 0x7, 0x8080) ioprio_get$auto(0x3, 0x2) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/pci0000:00/0000:00:03.0/resource0\x00', 0x103000, 0x0) readv$auto(0x3, &(0x7f0000003080)={&(0x7f0000003040), 0x4}, 0x9) 1.186127634s ago: executing program 1 (id=2153): bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x7, 0x4, 0x200, 0x1001, 0x24, 0x1, 0xffffffffffffffff, 0x0, 0x5}, 0x4f4) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, 0x0, 0x189002, 0x0) r1 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$auto_VHOST_SET_OWNER(r1, 0xaf01, 0x5) ioctl$auto_VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000000)={0x6}) ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0) socket(0xf, 0x3, 0x2) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = socket(0x2, 0x2, 0x0) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/trace_pipe\x00', 0x20c01, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x800001ff, 0x7, 0xd, 0x1, 0x4, 0x3, 0x15f4da0a, 0x69a, 0x6, 0x3, 0x208000001f, 0x2, 0x6d3c, 0x9, 0x2, 0x6]}, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, r4) socket(0xa, 0x5, 0x8) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04, 0x0) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000002b80)='/dev/snd/pcmC1D1p\x00', 0x2205, 0x0) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000002ec0), 0xffffffffffffffff) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) 83.99613ms ago: executing program 1 (id=2154): r0 = ioctl$auto_SIOCSIFHWADDR2(0xffffffffffffffff, 0x8924, &(0x7f0000000040)="b499a074b70ed78aa1d3e3fcac9736ec83223354cd6da7b58d11f0e2a01ad368261ffba763690fd3b173f036005c78a969c9b552866745eaa03e5f8ab5d7eaa6a6c733b3250186dafc35b3921886ef40656ab673eec1abffeff28fde60661e0428b230c4bf06ae6e380c77ac5972942d0310f9a82759dfd87d51415a080dce051e08c2104ca8d81b68ce84c6fa58094f79676a946f7ac60cb64bbd07ef33e5") mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x8000000000000003, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) r1 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0x8402, 0x0) ioctl$auto_SG_SET_FORCE_PACK_ID(r1, 0x227b, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto(0x3, 0x0, 0x5c8) read$auto(r1, 0x0, 0xfff) mmap$auto(0x8, 0x400005, 0x1df, 0x40000009b70, r0, 0x8000) socket(0x10, 0x2, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/loop9/queue/nr_requests\x00', 0x10b042, 0x0) r3 = openat$auto_nvmf_dev_fops_fabrics(0xffffffffffffff9c, &(0x7f00000004c0), 0x101202, 0x0) write$auto_nvmf_dev_fops_fabrics(r3, 0x0, 0x0) sendfile$auto(r2, r2, 0x0, 0x2) bpf$auto(0x6, 0xffffffffffffffff, 0x0) r4 = socket(0x2, 0x3, 0x6) r5 = pipe$auto(&(0x7f0000000780)=0xffffffffffffffff) splice$auto(r6, 0x0, r4, &(0x7f0000002100)=0x1ff, 0x768, 0x6) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x2b, 0x1, 0x1) r7 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000300)='/dev/mtd0\x00', 0x28082, 0x0) r8 = socket(0x29, 0x2, 0x0) sendmsg$auto_NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r8, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x4) syz_genetlink_get_family_id$auto_netdev(&(0x7f00000002c0), r8) write$auto_proc_pid_set_comm_operations_base(r2, &(0x7f00000007c0)="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", 0x1000) ioctl$auto(r7, 0x4d13, r7) socket(0xa, 0xa, 0x88) msgctl$auto_MSG_STAT_ANY(0xd, 0xd, &(0x7f00000001c0)={{0xb69, 0xffffffffffffffff, 0xee00, 0x1, 0x1, 0x4, 0x2e}, &(0x7f0000000140)=0x24, &(0x7f0000000180)=0xa, 0x3, 0x1, 0x5, 0x2, 0x1, 0xfffa, 0x0, 0x331a, @raw=0xffff5a60, @raw=0x8}) sendmsg$auto_NL80211_CMD_JOIN_OCB(r5, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0xa4260910}, 0xc, &(0x7f0000000240)={&(0x7f0000000500)={0x240, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@NL80211_ATTR_TX_RATES={0x21f, 0x5a, 0x0, 0x1, [@typed={0x4, 0x9a}, @nested={0xf6, 0x6, 0x0, 0x1, [@generic="5c32026c189803fe5388dcd55aba1dd5af5d9e40bf257d8cc596120b354602a7ba0b3d29cf918307c87aa628d8ee87321598f074131cbfc0be066612a189e6c3f794e57a953b2f9fac77af01971491e56bf6e921b3db61ba1e186caf50bc5d59f5b6fe43004fa974d4753a85c53bad54aedfce24f7f24e10d631061e9fc59b4e6769a861d268b1ca9928735cae4a8fd1a423f19226a3fad5559b5c7d015e6d2fda2d8fe4f6e666268a4db4eb9fbda205cedbe90e7a30af1a07f2", @typed={0x8, 0x116, 0x0, 0x0, @ipv4=@loopback}, @nested={0x4, 0xed}, @nested={0x4, 0xa0}, @nested={0x4, 0x54}, @typed={0x14, 0xaf, 0x0, 0x0, @ipv6=@local}, @nested={0x4, 0x80}, @typed={0x9, 0x84, 0x0, 0x0, @str='\'-$+\x00'}]}, @generic="61b8f75a22a250dafcf945221b4e1df8da28a625711d75c7f4022f3229307f8c315ef51a116c604426d79b41193801a9b0e917a4b9daaca0642fa79e2c7ff80af6cb8bed43291bb8ef6c8f52c8174eda0ee06661bb110595de7e4e6573c4f686", @generic="439ed50b7467586304f8ead9434ed31ba9d7122e70adc39f35cf02", @nested={0xa3, 0x2f, 0x0, 0x1, [@nested={0x4, 0x6c}, @nested={0x4, 0x11e}, @nested={0x4, 0xa6}, @generic="2bf43f4e0217bdf4ad3383330449d8bf7f2c8f8cad1057ae963b4765ed051996f145de48b47716ad4a527877c0d6a703ff8d946e46416419b4205e6a2cdfa11d7784f9ff067d7b32c43369cf18095c17c5cdd5351e0631e867808d33b23dba85f2072c7cfc473528fa32d413e17b38cec7b2c9eb325ea0be1aef83d9d7e7393bd55ed7817f0fc2959ddf31", @typed={0x8, 0x23, 0x0, 0x0, @uid=r9}]}]}, @NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0x1ff}]}, 0x240}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) 35.399374ms ago: executing program 2 (id=2155): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/orangefs/perf_history_size\x00', 0x1182, 0x0) io_uring_setup$auto(0x86, 0x0) r1 = socket(0x10, 0x4, 0xffffffc0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x120e2, 0x0) write$auto(r3, 0x0, 0x81) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r4, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010325bd7040ffdbdf250a0000000c0002006e6c383032313100"], 0x28}, 0x1, 0x0, 0x0, 0x30000881}, 0xc040810) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = geteuid() msgctl$auto_MSG_STAT_ANY(0x10000, 0xd, &(0x7f0000000340)={{0xa0, 0xee01, 0xee01, 0x7, 0x0, 0x5, 0x9dc4}, &(0x7f00000000c0)=0x4, 0x0, 0x2, 0x5dd8, 0x7fff, 0xb12, 0x2, 0x8000, 0x4, 0xac0, @inferred, @inferred=0xffffffffffffffff}) r9 = setfsuid$auto(0xee00) setresuid$auto(0xffffffffffffffff, r9, 0x8000) msgctl$auto_MSG_STAT(0xbc7, 0xb, &(0x7f0000000480)={{0x8, 0xffffffffffffffff, 0x0, 0x8, 0x10001, 0xfd36, 0xfff9}, &(0x7f00000003c0)=0x3, &(0x7f0000000440)=0x7f, 0x7fffffff, 0x4, 0x1, 0x8000000000000000, 0x6, 0xc210, 0x3, 0x3, @inferred=0xffffffffffffffff, @raw=0x45}) setresuid$auto(r8, r9, r10) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r1, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="c002", @ANYRES16=0x0, @ANYBLOB="100028bd7000fbdbdf25030000007902028055966726eb2c50fc833990e033caf7d4a0810673c746c88b509902eb373a697ab827894d11296c2c26bc7394e459c97021b7ac53c98b43b5af99985920326fd45dca13a4b2cfe1c2082265e49d2f153052c021392c713b54b3e81d86c429af2dceae10decfba701bea8e0686ec3ff8e2e34ae16b83d5a155b07a3eaaa8cf6ce4ff1ec35c234e8cd8304effe01e6efce374c74e08efc7afae761953b46b59a15e5d027ca10e2789c2a200b1faf9892ad8b867ed7f2b3a01fa8008001600", @ANYRES32=r2, @ANYBLOB="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", @ANYRES32, @ANYBLOB="14003800fe8000000000000000000000000000aa30007d80040035800400a5801c0031002f70726f632f73656c662f736d6170735f726f6c6c75700008004a00", @ANYRES32=r7, @ANYBLOB="771c61cc08002c00", @ANYRES32=r9, @ANYBLOB="04007a802500f88004001a802a676f03444bff83d35b7c6f1417397075987f466d88f51d5ce34ad1f70000000000000400080004000800060009000300000006000900090000000c000b000100000001000000060009000400000004000800"], 0x2c0}, 0x1, 0x0, 0x0, 0x4040004}, 0x10000000) sendmsg$auto_HWSIM_CMD_GET_RADIO(r6, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000280)={0x14, 0x0, 0xf3e97f51700e57cf, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x884}, 0x8020) write$auto(r0, &(0x7f0000000540)='0\x00\xa6\x1fZ\xb2\'Q8-\x18\xdb\x80\b\xaf\x9f\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xabcOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xad*HqP\x0f\x00\x00\x00\x1c\x89OO}e\xab\xd5\xef\xc0\x04z\xd0I4\x00\x00\x00\xf6\xff\xff\xff\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3\xfbm\f\x84\x13\x04\x92\xeb\xf3\x04\xa3\xf4}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x16O\xacA\xa5[\x18\xb8;\x02tcf\x06r\x06\xeb\xf0\xc4\xcb\x10\xaeUV\x11\xcb\xdd\x81\xbe\xdeL\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdf\x13<\xf0\v\x1f\x14\xf3\xd0\t\xd2L!\x81\xea\x03\xa0\r|%\xbf\x02trg\x9a\xe7)\xc9\xd5\x13\x16\xea\xa1w\x80\v\xe5\b\'\xfe\a\xf4\xaaE\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x80O4\xca\x95\xe7\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4p\xf0\xe2\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xcb\a\x8dO\xe9\xfc\xb7R\t\f+\x7f\xd5\t\xfb\xb2\x9c\xb9UQC\xcdH\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb0\x00S\xda\r\xccm\xe0h\xb4@\x01\"\x06\x0f\\E0)}\xe1b\xfcc;=\xb5\xe0\xfe\x99C\xdb\t\xb2\xba\xfc\xa4\xb0g\xf3\x00\xd24\xc5\x19\fe\xc5\xd8\x06\x9b\xe3\x1cU(\x05\x8f\x8aDE\xb1|\xefe\xd2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc2g\xf5\xc3\xb0\xdc\x85h\xfdfS\x06\x1f@\x8f\x94\x9e\xa1\x12\xc3\xb8\x00G\x00\x00\xd1ksq\xc5hq\xb1\xb9\xbb\xb7\x00'/510, 0x98c7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) madvise$auto(0x0, 0x200007, 0x19) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/smaps_rollup\x00', 0x40000, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) io_setup$auto(0x1, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000a00)=""/176, 0xb0) 0s ago: executing program 3 (id=2156): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/blkio.reset_stats\x00', 0xa801, 0x0) mmap$auto(0x0, 0x99, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1e, 0x5, 0x4, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x2, 0x1, 0x0, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f0, 0x15) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio1\x00', 0x20b42, 0x0) mmap$auto(0x8, 0x9, 0x1, 0xebf, 0xfffefffffffffffa, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/graphics/fbcon/cursor_blink\x00', 0x60040, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x149443, 0x14) fcntl$auto(r1, 0x40a, 0x0) r2 = ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000100)=""/192, 0xc0) write$auto(0x3, 0x0, 0x100082) mmap$auto(0x0, 0x4020009, 0xde, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) sendmsg$auto_GTP_CMD_NEWPDP(r2, 0x0, 0x0) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x7, 0x4008) acct$auto(0x0) unshare$auto(0x40) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) migrate_pages$auto(0x0, 0x8, 0x0, &(0x7f00000001c0)=0x7b) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x480582, 0x0) ioctl$auto_SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f00000001c0)) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) mbind$auto(0x0, 0x2, 0x1, &(0x7f0000000200)=0x4, 0x7, 0x4) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/stat\x00', 0x0, 0x0) madvise$auto(0x6, 0x7fffffffefffffff, 0xa) kernel console output (not intermixed with test programs): +0x16c/0x1f0 [ 524.880559][T13560] should_fail_ex+0x512/0x640 [ 524.880594][T13560] should_failslab+0xc2/0x120 [ 524.880628][T13560] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 524.880658][T13560] ? radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 524.880706][T13560] radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 524.880756][T13560] idr_get_free+0x528/0xa30 [ 524.880812][T13560] idr_alloc_u32+0x190/0x2f0 [ 524.880857][T13560] ? __pfx_idr_alloc_u32+0x10/0x10 [ 524.880905][T13560] ? lock_acquire+0x179/0x350 [ 524.880951][T13560] idr_alloc_cyclic+0x10b/0x230 [ 524.880996][T13560] ? __pfx_idr_alloc_cyclic+0x10/0x10 [ 524.881047][T13560] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 524.881103][T13560] map_create+0x9aa/0x1db0 [ 524.881158][T13560] ? __pfx_map_create+0x10/0x10 [ 524.881197][T13560] ? __might_fault+0xe3/0x190 [ 524.881223][T13560] ? __might_fault+0xe3/0x190 [ 524.881248][T13560] ? __might_fault+0x13b/0x190 [ 524.881289][T13560] __sys_bpf+0x4d8d/0x4ea0 [ 524.881319][T13560] ? __pfx___sys_bpf+0x10/0x10 [ 524.881342][T13560] ? vfs_write+0x15d/0x1150 [ 524.881377][T13560] ? do_futex+0x122/0x350 [ 524.881412][T13560] ? __pfx_do_futex+0x10/0x10 [ 524.881468][T13560] ? xfd_validate_state+0x61/0x180 [ 524.881505][T13560] ? __pfx_ksys_write+0x10/0x10 [ 524.881538][T13560] __x64_sys_bpf+0x78/0xc0 [ 524.881564][T13560] ? lockdep_hardirqs_on+0x7c/0x110 [ 524.881591][T13560] do_syscall_64+0xcd/0x490 [ 524.881635][T13560] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 524.881668][T13560] RIP: 0033:0x7fcec578e9a9 [ 524.881691][T13560] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 524.881739][T13560] RSP: 002b:00007fcec6560038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 524.881769][T13560] RAX: ffffffffffffffda RBX: 00007fcec59b5fa0 RCX: 00007fcec578e9a9 [ 524.881791][T13560] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 0000000000000000 [ 524.881810][T13560] RBP: 00007fcec5810d69 R08: 0000000000000000 R09: 0000000000000000 [ 524.881829][T13560] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 524.881847][T13560] R13: 0000000000000000 R14: 00007fcec59b5fa0 R15: 00007fff5e13d138 [ 524.881888][T13560] [ 526.454854][T13581] sysfs_service_op_store: Client not running :-5: [ 526.465193][T13581] sysfs_service_op_show: Client not running :-5: [ 527.199984][T13592] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1518'. [ 527.684415][ T5860] udevd[5860]: inotify_add_watch(7, /dev/nbd1, 10) failed: No such file or directory [ 529.153361][T13621] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input49 [ 529.555915][T13615] FAULT_INJECTION: forcing a failure. [ 529.555915][T13615] name failslab, interval 1, probability 0, space 0, times 0 [ 529.555976][T13615] CPU: 1 UID: 0 PID: 13615 Comm: syz.1.1522 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 529.556009][T13615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 529.556025][T13615] Call Trace: [ 529.556034][T13615] [ 529.556044][T13615] dump_stack_lvl+0x16c/0x1f0 [ 529.556078][T13615] should_fail_ex+0x512/0x640 [ 529.556106][T13615] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 529.556154][T13615] should_failslab+0xc2/0x120 [ 529.556189][T13615] __kmalloc_cache_noprof+0x6a/0x3e0 [ 529.556233][T13615] ? devlink_fmsg_nest_common.part.0+0x48/0x1e0 [ 529.556275][T13615] devlink_fmsg_nest_common.part.0+0x48/0x1e0 [ 529.556328][T13615] devlink_fmsg_arr_pair_nest_end+0xb4/0x180 [ 529.556371][T13615] nsim_dev_dummy_fmsg_put+0x110/0x1e0 [ 529.556414][T13615] devlink_health_do_dump+0x243/0x620 [ 529.556458][T13615] devlink_health_report+0x3c9/0x9c0 [ 529.556504][T13615] ? __pfx_devlink_health_report+0x10/0x10 [ 529.556545][T13615] ? _copy_from_user+0x59/0xd0 [ 529.556582][T13615] nsim_dev_health_break_write+0x166/0x210 [ 529.556622][T13615] ? __pfx_nsim_dev_health_break_write+0x10/0x10 [ 529.556674][T13615] full_proxy_write+0x13f/0x200 [ 529.556713][T13615] ? __pfx_full_proxy_write+0x10/0x10 [ 529.556749][T13615] vfs_write+0x29d/0x1150 [ 529.556782][T13615] ? __pfx___mutex_lock+0x10/0x10 [ 529.556812][T13615] ? __pfx_vfs_write+0x10/0x10 [ 529.556850][T13615] ? __fget_files+0x20e/0x3c0 [ 529.556912][T13615] ksys_write+0x12a/0x250 [ 529.556943][T13615] ? __pfx_ksys_write+0x10/0x10 [ 529.556983][T13615] do_syscall_64+0xcd/0x490 [ 529.557017][T13615] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 529.557046][T13615] RIP: 0033:0x7fcec578e9a9 [ 529.557069][T13615] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 529.557097][T13615] RSP: 002b:00007fcec6560038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 529.557123][T13615] RAX: ffffffffffffffda RBX: 00007fcec59b5fa0 RCX: 00007fcec578e9a9 [ 529.557140][T13615] RDX: 00000000000001ff RSI: 0000000000000000 RDI: 0000000000000009 [ 529.557156][T13615] RBP: 00007fcec5810d69 R08: 0000000000000000 R09: 0000000000000000 [ 529.557172][T13615] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 529.557188][T13615] R13: 0000000000000000 R14: 00007fcec59b5fa0 R15: 00007fff5e13d138 [ 529.557224][T13615] [ 530.494299][T13652] FAULT_INJECTION: forcing a failure. [ 530.494299][T13652] name failslab, interval 1, probability 0, space 0, times 0 [ 530.494426][T13652] CPU: 1 UID: 0 PID: 13652 Comm: syz.1.1529 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 530.494460][T13652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 530.494476][T13652] Call Trace: [ 530.494485][T13652] [ 530.494495][T13652] dump_stack_lvl+0x16c/0x1f0 [ 530.494535][T13652] should_fail_ex+0x512/0x640 [ 530.494564][T13652] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 530.494598][T13652] should_failslab+0xc2/0x120 [ 530.494631][T13652] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 530.494657][T13652] ? find_held_lock+0x2b/0x80 [ 530.494687][T13652] ? skb_clone+0x190/0x3f0 [ 530.494722][T13652] skb_clone+0x190/0x3f0 [ 530.494752][T13652] netlink_broadcast_filtered+0xb27/0xf30 [ 530.494797][T13652] ? sprintf+0xcc/0x100 [ 530.494822][T13652] ? __pfx_netlink_broadcast_filtered+0x10/0x10 [ 530.494867][T13652] ? netlink_has_listeners+0x20f/0x430 [ 530.494905][T13652] netlink_broadcast+0x39/0x50 [ 530.494940][T13652] kobject_uevent_env+0xc6a/0x1870 [ 530.494983][T13652] ? bus_to_subsys+0x131/0x160 [ 530.495029][T13652] device_add+0x10dd/0x1a70 [ 530.495068][T13652] ? __pfx_device_add+0x10/0x10 [ 530.495113][T13652] nfc_register_device+0x41/0x3c0 [ 530.495145][T13652] nci_register_device+0x7f1/0xb80 [ 530.495187][T13652] ? __pfx_nci_register_device+0x10/0x10 [ 530.495235][T13652] ? lockdep_init_map_type+0x5c/0x280 [ 530.495284][T13652] virtual_ncidev_open+0x141/0x220 [ 530.495328][T13652] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 530.495371][T13652] misc_open+0x35a/0x420 [ 530.495415][T13652] ? __pfx_misc_open+0x10/0x10 [ 530.495457][T13652] chrdev_open+0x231/0x6a0 [ 530.495487][T13652] ? __pfx_apparmor_file_open+0x10/0x10 [ 530.495539][T13652] ? __pfx_chrdev_open+0x10/0x10 [ 530.495575][T13652] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 530.495628][T13652] do_dentry_open+0x744/0x1c10 [ 530.495657][T13652] ? __pfx_chrdev_open+0x10/0x10 [ 530.495697][T13652] vfs_open+0x82/0x3f0 [ 530.495737][T13652] path_openat+0x1de4/0x2cb0 [ 530.495779][T13652] ? __pfx_path_openat+0x10/0x10 [ 530.495809][T13652] ? __lock_acquire+0xb8a/0x1c90 [ 530.495853][T13652] do_filp_open+0x20b/0x470 [ 530.495882][T13652] ? __pfx_do_filp_open+0x10/0x10 [ 530.495938][T13652] ? alloc_fd+0x471/0x7d0 [ 530.495998][T13652] do_sys_openat2+0x11b/0x1d0 [ 530.496038][T13652] ? __pfx_do_sys_openat2+0x10/0x10 [ 530.496092][T13652] __x64_sys_openat+0x174/0x210 [ 530.496131][T13652] ? __pfx___x64_sys_openat+0x10/0x10 [ 530.496187][T13652] do_syscall_64+0xcd/0x490 [ 530.496222][T13652] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 530.496251][T13652] RIP: 0033:0x7fcec578e9a9 [ 530.496274][T13652] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 530.496302][T13652] RSP: 002b:00007fcec6560038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 530.496329][T13652] RAX: ffffffffffffffda RBX: 00007fcec59b5fa0 RCX: 00007fcec578e9a9 [ 530.496348][T13652] RDX: 0000000000000002 RSI: 0000200000000400 RDI: ffffffffffffff9c [ 530.496365][T13652] RBP: 00007fcec5810d69 R08: 0000000000000000 R09: 0000000000000000 [ 530.496381][T13652] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 530.496397][T13652] R13: 0000000000000000 R14: 00007fcec59b5fa0 R15: 00007fff5e13d138 [ 530.496433][T13652] [ 530.556631][T13647] vhci_hcd: invalid port number 64 [ 530.556644][T13647] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 531.091033][T13666] sysfs_service_op_store: Client not running :-5: [ 531.091294][T13666] sysfs_service_op_show: Client not running :-5: [ 531.674765][T13683] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input50 [ 531.701555][T13677] could not allocate digest TFM handle binfmt_misc [ 532.041521][T13686] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1537'. [ 532.558372][T13705] sysfs_service_op_store: Client not running :-5: [ 534.390307][T13725] random: crng reseeded on system resumption [ 534.586773][T13703] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 534.613288][T13703] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 535.370069][T13743] FAULT_INJECTION: forcing a failure. [ 535.370069][T13743] name failslab, interval 1, probability 0, space 0, times 0 [ 535.383253][T13743] CPU: 0 UID: 0 PID: 13743 Comm: syz.2.1550 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 535.383289][T13743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 535.383306][T13743] Call Trace: [ 535.383315][T13743] [ 535.383326][T13743] dump_stack_lvl+0x16c/0x1f0 [ 535.383359][T13743] should_fail_ex+0x512/0x640 [ 535.383388][T13743] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 535.383421][T13743] should_failslab+0xc2/0x120 [ 535.383455][T13743] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 535.383486][T13743] ? security_file_alloc+0x34/0x2b0 [ 535.383536][T13743] security_file_alloc+0x34/0x2b0 [ 535.383579][T13743] init_file+0x93/0x4c0 [ 535.383616][T13743] alloc_empty_file+0x73/0x1e0 [ 535.383653][T13743] path_openat+0xda/0x2cb0 [ 535.383676][T13743] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.383710][T13743] ? __pfx_path_openat+0x10/0x10 [ 535.383734][T13743] ? __lock_acquire+0xb8a/0x1c90 [ 535.383770][T13743] do_filp_open+0x20b/0x470 [ 535.383793][T13743] ? __pfx_do_filp_open+0x10/0x10 [ 535.383839][T13743] ? alloc_fd+0x471/0x7d0 [ 535.383883][T13743] do_sys_openat2+0x11b/0x1d0 [ 535.383914][T13743] ? __pfx_do_sys_openat2+0x10/0x10 [ 535.383956][T13743] __x64_sys_openat+0x174/0x210 [ 535.383989][T13743] ? __pfx___x64_sys_openat+0x10/0x10 [ 535.384032][T13743] do_syscall_64+0xcd/0x490 [ 535.384058][T13743] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.384087][T13743] RIP: 0033:0x7f24c1f8e9a9 [ 535.384105][T13743] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 535.384130][T13743] RSP: 002b:00007f24bfdd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 535.384152][T13743] RAX: ffffffffffffffda RBX: 00007f24c21b6080 RCX: 00007f24c1f8e9a9 [ 535.384168][T13743] RDX: 0000000000000000 RSI: 0000200000000240 RDI: ffffffffffffff9c [ 535.384182][T13743] RBP: 00007f24c2010d69 R08: 0000000000000000 R09: 0000000000000000 [ 535.384196][T13743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 535.384210][T13743] R13: 0000000000000000 R14: 00007f24c21b6080 R15: 00007ffd13610558 [ 535.384238][T13743] [ 535.742035][T13741] can: request_module (can-proto-0) failed. [ 536.072946][T13750] netlink: 'syz.2.1552': attribute type 11 has an invalid length. [ 536.208239][T13748] zswap: compressor 000 not available [ 537.124184][T13769] sysfs_service_op_store: Client not running :-5: [ 538.367257][T13786] FAULT_INJECTION: forcing a failure. [ 538.367257][T13786] name failslab, interval 1, probability 0, space 0, times 0 [ 538.466082][T13786] CPU: 0 UID: 0 PID: 13786 Comm: syz.2.1557 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 538.466122][T13786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 538.466140][T13786] Call Trace: [ 538.466149][T13786] [ 538.466160][T13786] dump_stack_lvl+0x16c/0x1f0 [ 538.466195][T13786] should_fail_ex+0x512/0x640 [ 538.466223][T13786] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 538.466270][T13786] should_failslab+0xc2/0x120 [ 538.466303][T13786] __kmalloc_cache_noprof+0x6a/0x3e0 [ 538.466348][T13786] ? devlink_fmsg_nest_common.part.0+0x48/0x1e0 [ 538.466392][T13786] devlink_fmsg_nest_common.part.0+0x48/0x1e0 [ 538.466434][T13786] devlink_fmsg_u64_pair_put+0x270/0x2f0 [ 538.466472][T13786] ? __pfx_devlink_fmsg_u64_pair_put+0x10/0x10 [ 538.466520][T13786] ? devlink_fmsg_nest_common.part.0+0xcd/0x1e0 [ 538.466565][T13786] nsim_dev_dummy_fmsg_put+0x61/0x1e0 [ 538.466608][T13786] devlink_health_do_dump+0x243/0x620 [ 538.466654][T13786] devlink_health_report+0x3c9/0x9c0 [ 538.466700][T13786] ? __pfx_devlink_health_report+0x10/0x10 [ 538.466740][T13786] ? _copy_from_user+0x59/0xd0 [ 538.466776][T13786] nsim_dev_health_break_write+0x166/0x210 [ 538.466815][T13786] ? __pfx_nsim_dev_health_break_write+0x10/0x10 [ 538.466868][T13786] full_proxy_write+0x13f/0x200 [ 538.466906][T13786] ? __pfx_full_proxy_write+0x10/0x10 [ 538.466941][T13786] vfs_write+0x29d/0x1150 [ 538.466974][T13786] ? __pfx___mutex_lock+0x10/0x10 [ 538.467003][T13786] ? __pfx_vfs_write+0x10/0x10 [ 538.467040][T13786] ? __fget_files+0x20e/0x3c0 [ 538.467095][T13786] ksys_write+0x12a/0x250 [ 538.467127][T13786] ? __pfx_ksys_write+0x10/0x10 [ 538.467166][T13786] do_syscall_64+0xcd/0x490 [ 538.467198][T13786] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 538.467227][T13786] RIP: 0033:0x7f24c1f8e9a9 [ 538.467249][T13786] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 538.467276][T13786] RSP: 002b:00007f24bfdf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 538.467301][T13786] RAX: ffffffffffffffda RBX: 00007f24c21b5fa0 RCX: 00007f24c1f8e9a9 [ 538.467320][T13786] RDX: 00000000000001ff RSI: 0000000000000000 RDI: 000000000000000b [ 538.467336][T13786] RBP: 00007f24c2010d69 R08: 0000000000000000 R09: 0000000000000000 [ 538.467353][T13786] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 538.467368][T13786] R13: 0000000000000000 R14: 00007f24c21b5fa0 R15: 00007ffd13610558 [ 538.467404][T13786] [ 541.854255][T13826] sysfs_service_op_store: Client not running :-5: [ 542.901698][T13830] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 543.264286][T13838] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1569'. [ 543.375973][T13838] bridge0: port 2(bridge_slave_1) entered disabled state [ 543.591173][T13838] bridge_slave_1 (unregistering): left allmulticast mode [ 543.610137][T13838] bridge_slave_1 (unregistering): left promiscuous mode [ 543.663938][T13838] bridge0: port 2(bridge_slave_1) entered disabled state [ 544.736813][T13851] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input52 [ 545.102085][T13862] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1574'. [ 546.078173][T13872] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1578'. [ 546.513913][T13878] sysfs_service_op_store: Client not running :-5: [ 547.053326][T13878] sysfs_service_op_show: Client not running :-5: [ 547.893522][T13887] tipc: Trying to set illegal importance in message [ 555.853135][T13974] sysfs_service_op_store: Client not running :-5: [ 556.355200][T13977] sysfs_service_op_show: Client not running :-5: [ 558.150931][T14001] FAULT_INJECTION: forcing a failure. [ 558.150931][T14001] name failslab, interval 1, probability 0, space 0, times 0 [ 558.216229][T14001] CPU: 0 UID: 0 PID: 14001 Comm: syz.0.1601 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 558.216259][T14001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 558.216271][T14001] Call Trace: [ 558.216279][T14001] [ 558.216286][T14001] dump_stack_lvl+0x16c/0x1f0 [ 558.216311][T14001] should_fail_ex+0x512/0x640 [ 558.216332][T14001] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 558.216357][T14001] should_failslab+0xc2/0x120 [ 558.216381][T14001] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 558.216403][T14001] ? sk_prot_alloc+0x60/0x2a0 [ 558.216433][T14001] sk_prot_alloc+0x60/0x2a0 [ 558.216462][T14001] sk_alloc+0x36/0xc20 [ 558.216482][T14001] tipc_sk_create+0xcf/0x21a0 [ 558.216517][T14001] ? find_held_lock+0x2b/0x80 [ 558.216539][T14001] ? __sock_create+0x2f2/0x8d0 [ 558.216571][T14001] __sock_create+0x335/0x8d0 [ 558.216604][T14001] __sys_socket+0x14d/0x260 [ 558.216634][T14001] ? __pfx___sys_socket+0x10/0x10 [ 558.216665][T14001] ? __pfx___x64_sys_clock_gettime+0x10/0x10 [ 558.216704][T14001] __x64_sys_socket+0x72/0xb0 [ 558.216732][T14001] ? lockdep_hardirqs_on+0x7c/0x110 [ 558.216751][T14001] do_syscall_64+0xcd/0x490 [ 558.216774][T14001] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 558.216795][T14001] RIP: 0033:0x7fa3da98e9a9 [ 558.216811][T14001] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 558.216832][T14001] RSP: 002b:00007fa3db826038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 558.216851][T14001] RAX: ffffffffffffffda RBX: 00007fa3dabb6160 RCX: 00007fa3da98e9a9 [ 558.216865][T14001] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 000000000000001e [ 558.216877][T14001] RBP: 00007fa3daa10d69 R08: 0000000000000000 R09: 0000000000000000 [ 558.216889][T14001] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 558.216901][T14001] R13: 0000000000000000 R14: 00007fa3dabb6160 R15: 00007ffc1802dba8 [ 558.216926][T14001] [ 559.132987][T14009] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1604'. [ 559.284101][T14009] FAULT_INJECTION: forcing a failure. [ 559.284101][T14009] name failslab, interval 1, probability 0, space 0, times 0 [ 559.297913][T14009] CPU: 1 UID: 0 PID: 14009 Comm: syz.3.1604 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 559.297948][T14009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 559.297965][T14009] Call Trace: [ 559.297975][T14009] [ 559.297985][T14009] dump_stack_lvl+0x16c/0x1f0 [ 559.298021][T14009] should_fail_ex+0x512/0x640 [ 559.298049][T14009] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 559.298099][T14009] should_failslab+0xc2/0x120 [ 559.298132][T14009] __kmalloc_cache_noprof+0x6a/0x3e0 [ 559.298176][T14009] ? mem_cgroup_css_alloc+0xdc/0x1e80 [ 559.298217][T14009] ? mem_cgroup_css_alloc+0x83a/0x1e80 [ 559.298266][T14009] mem_cgroup_css_alloc+0x83a/0x1e80 [ 559.298320][T14009] cgroup_apply_control_enable+0x4b0/0xbb0 [ 559.298378][T14009] cgroup_mkdir+0x5e7/0x11f0 [ 559.298428][T14009] ? __pfx_cgroup_mkdir+0x10/0x10 [ 559.298489][T14009] kernfs_iop_mkdir+0x10e/0x190 [ 559.298519][T14009] ? bpf_lsm_inode_mkdir+0x9/0x10 [ 559.298554][T14009] vfs_mkdir+0x593/0x8c0 [ 559.298607][T14009] do_mkdirat+0x304/0x3e0 [ 559.298639][T14009] ? __pfx_do_mkdirat+0x10/0x10 [ 559.298671][T14009] ? getname_flags.part.0+0x1c5/0x550 [ 559.298714][T14009] __x64_sys_mkdir+0xef/0x140 [ 559.298743][T14009] do_syscall_64+0xcd/0x490 [ 559.298780][T14009] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 559.298810][T14009] RIP: 0033:0x7fb82018e9a9 [ 559.298832][T14009] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 559.298860][T14009] RSP: 002b:00007fb820f20038 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 559.298886][T14009] RAX: ffffffffffffffda RBX: 00007fb8203b5fa0 RCX: 00007fb82018e9a9 [ 559.298905][T14009] RDX: 0000000000000000 RSI: 00000000000008cd RDI: 0000200000000000 [ 559.298923][T14009] RBP: 00007fb820210d69 R08: 0000000000000000 R09: 0000000000000000 [ 559.298939][T14009] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 559.298955][T14009] R13: 0000000000000000 R14: 00007fb8203b5fa0 R15: 00007fff807beb58 [ 559.298991][T14009] [ 563.756065][T14066] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1618'. [ 563.972766][T14062] FAULT_INJECTION: forcing a failure. [ 563.972766][T14062] name fail_futex, interval 1, probability 0, space 0, times 0 [ 564.022751][T14062] CPU: 0 UID: 0 PID: 14062 Comm: syz.2.1616 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 564.022792][T14062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 564.022811][T14062] Call Trace: [ 564.022821][T14062] [ 564.022834][T14062] dump_stack_lvl+0x16c/0x1f0 [ 564.022871][T14062] should_fail_ex+0x512/0x640 [ 564.022931][T14062] get_futex_key+0x293/0x1540 [ 564.022965][T14062] ? __pfx_get_futex_key+0x10/0x10 [ 564.022993][T14062] ? __mutex_trylock_common+0xe9/0x250 [ 564.023035][T14062] futex_wake+0xe7/0x4e0 [ 564.023076][T14062] ? __pfx_futex_wake+0x10/0x10 [ 564.023110][T14062] ? __lock_acquire+0xb8a/0x1c90 [ 564.023161][T14062] do_futex+0x1e3/0x350 [ 564.023195][T14062] ? __pfx_do_futex+0x10/0x10 [ 564.023226][T14062] ? __might_fault+0xe3/0x190 [ 564.023261][T14062] mm_release+0x24e/0x300 [ 564.023293][T14062] do_exit+0x68b/0x2bd0 [ 564.023334][T14062] ? __pfx_do_exit+0x10/0x10 [ 564.023365][T14062] ? do_raw_spin_lock+0x12c/0x2b0 [ 564.023407][T14062] ? find_held_lock+0x2b/0x80 [ 564.023434][T14062] do_group_exit+0xd3/0x2a0 [ 564.023468][T14062] get_signal+0x2673/0x26d0 [ 564.023498][T14062] ? __lock_acquire+0x622/0x1c90 [ 564.023533][T14062] ? __pfx_get_signal+0x10/0x10 [ 564.023558][T14062] ? do_futex+0x122/0x350 [ 564.023586][T14062] ? __pfx_do_futex+0x10/0x10 [ 564.023615][T14062] arch_do_signal_or_restart+0x8f/0x790 [ 564.023644][T14062] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 564.023687][T14062] exit_to_user_mode_loop+0x84/0x110 [ 564.023725][T14062] do_syscall_64+0x3f6/0x490 [ 564.023750][T14062] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 564.023774][T14062] RIP: 0033:0x7f24c1f8e9a9 [ 564.023791][T14062] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 564.023814][T14062] RSP: 002b:00007f24bfdd50e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 564.023835][T14062] RAX: fffffffffffffe00 RBX: 00007f24c21b6088 RCX: 00007f24c1f8e9a9 [ 564.023850][T14062] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f24c21b6088 [ 564.023864][T14062] RBP: 00007f24c21b6080 R08: 0000000000000000 R09: 0000000000000000 [ 564.023877][T14062] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f24c21b608c [ 564.023891][T14062] R13: 0000000000000000 R14: 00007ffd13610470 R15: 00007ffd13610558 [ 564.023918][T14062] [ 567.835930][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 567.843666][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 571.642618][T14158] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1635'. [ 571.850069][T14163] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1635'. [ 572.196976][T14163] hsr_slave_0 (unregistering): left promiscuous mode [ 572.914762][T14179] sysfs_service_op_store: Client not running :-5: [ 573.460047][T14179] sysfs_service_op_show: Client not running :-5: [ 575.517680][T14210] Invalid ELF header magic: != ELF [ 576.798803][T14226] sysfs_service_op_store: Client not running :-5: [ 578.261354][T14237] FAULT_INJECTION: forcing a failure. [ 578.261354][T14237] name failslab, interval 1, probability 0, space 0, times 0 [ 578.274101][T14237] CPU: 0 UID: 0 PID: 14237 Comm: syz.0.1651 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 578.274139][T14237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 578.274157][T14237] Call Trace: [ 578.274166][T14237] [ 578.274178][T14237] dump_stack_lvl+0x16c/0x1f0 [ 578.274213][T14237] should_fail_ex+0x512/0x640 [ 578.274249][T14237] should_failslab+0xc2/0x120 [ 578.274285][T14237] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 578.274319][T14237] ? radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 578.274370][T14237] radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 578.274424][T14237] idr_get_free+0x528/0xa30 [ 578.274487][T14237] idr_alloc_u32+0x190/0x2f0 [ 578.274538][T14237] ? __pfx_idr_alloc_u32+0x10/0x10 [ 578.274589][T14237] ? lock_acquire+0x179/0x350 [ 578.274638][T14237] idr_alloc_cyclic+0x10b/0x230 [ 578.274689][T14237] ? __pfx_idr_alloc_cyclic+0x10/0x10 [ 578.274734][T14237] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 578.274793][T14237] map_create+0x9aa/0x1db0 [ 578.274850][T14237] ? __pfx_map_create+0x10/0x10 [ 578.274891][T14237] ? __might_fault+0xe3/0x190 [ 578.274919][T14237] ? __might_fault+0xe3/0x190 [ 578.274945][T14237] ? __might_fault+0x13b/0x190 [ 578.275013][T14237] __sys_bpf+0x4d8d/0x4ea0 [ 578.275043][T14237] ? __pfx___sys_bpf+0x10/0x10 [ 578.275067][T14237] ? vfs_write+0x15d/0x1150 [ 578.275112][T14237] ? do_futex+0x122/0x350 [ 578.275148][T14237] ? __pfx_do_futex+0x10/0x10 [ 578.275205][T14237] ? xfd_validate_state+0x61/0x180 [ 578.275240][T14237] ? __pfx_ksys_write+0x10/0x10 [ 578.275274][T14237] __x64_sys_bpf+0x78/0xc0 [ 578.275299][T14237] ? lockdep_hardirqs_on+0x7c/0x110 [ 578.275324][T14237] do_syscall_64+0xcd/0x490 [ 578.275357][T14237] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 578.275386][T14237] RIP: 0033:0x7fa3da98e9a9 [ 578.275409][T14237] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 578.275438][T14237] RSP: 002b:00007fa3db868038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 578.275464][T14237] RAX: ffffffffffffffda RBX: 00007fa3dabb5fa0 RCX: 00007fa3da98e9a9 [ 578.275482][T14237] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 0000000000000000 [ 578.275498][T14237] RBP: 00007fa3daa10d69 R08: 0000000000000000 R09: 0000000000000000 [ 578.275515][T14237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 578.275530][T14237] R13: 0000000000000000 R14: 00007fa3dabb5fa0 R15: 00007ffc1802dba8 [ 578.275565][T14237] [ 581.355634][T14270] FAULT_INJECTION: forcing a failure. [ 581.355634][T14270] name failslab, interval 1, probability 0, space 0, times 0 [ 581.368340][T14270] CPU: 1 UID: 0 PID: 14270 Comm: syz.3.1662 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 581.368377][T14270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 581.368395][T14270] Call Trace: [ 581.368404][T14270] [ 581.368415][T14270] dump_stack_lvl+0x16c/0x1f0 [ 581.368450][T14270] should_fail_ex+0x512/0x640 [ 581.368487][T14270] should_failslab+0xc2/0x120 [ 581.368521][T14270] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 581.368552][T14270] ? radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 581.368603][T14270] radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 581.368653][T14270] idr_get_free+0x528/0xa30 [ 581.368714][T14270] idr_alloc_u32+0x190/0x2f0 [ 581.368761][T14270] ? __pfx_idr_alloc_u32+0x10/0x10 [ 581.368816][T14270] ? lock_acquire+0x179/0x350 [ 581.368864][T14270] idr_alloc_cyclic+0x10b/0x230 [ 581.368913][T14270] ? __pfx_idr_alloc_cyclic+0x10/0x10 [ 581.368958][T14270] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 581.369015][T14270] map_create+0x9aa/0x1db0 [ 581.369071][T14270] ? __pfx_map_create+0x10/0x10 [ 581.369112][T14270] ? __might_fault+0xe3/0x190 [ 581.369140][T14270] ? __might_fault+0xe3/0x190 [ 581.369165][T14270] ? __might_fault+0x13b/0x190 [ 581.369208][T14270] __sys_bpf+0x4d8d/0x4ea0 [ 581.369238][T14270] ? __pfx___sys_bpf+0x10/0x10 [ 581.369262][T14270] ? vfs_write+0x15d/0x1150 [ 581.369299][T14270] ? do_futex+0x122/0x350 [ 581.369334][T14270] ? __pfx_do_futex+0x10/0x10 [ 581.369390][T14270] ? xfd_validate_state+0x61/0x180 [ 581.369428][T14270] ? __pfx_ksys_write+0x10/0x10 [ 581.369462][T14270] __x64_sys_bpf+0x78/0xc0 [ 581.369488][T14270] ? lockdep_hardirqs_on+0x7c/0x110 [ 581.369516][T14270] do_syscall_64+0xcd/0x490 [ 581.369549][T14270] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 581.369578][T14270] RIP: 0033:0x7fb82018e9a9 [ 581.369600][T14270] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 581.369629][T14270] RSP: 002b:00007fb820f20038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 581.369654][T14270] RAX: ffffffffffffffda RBX: 00007fb8203b5fa0 RCX: 00007fb82018e9a9 [ 581.369672][T14270] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 0000000000000000 [ 581.369689][T14270] RBP: 00007fb820210d69 R08: 0000000000000000 R09: 0000000000000000 [ 581.369705][T14270] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 581.369720][T14270] R13: 0000000000000000 R14: 00007fb8203b5fa0 R15: 00007fff807beb58 [ 581.369755][T14270] [ 582.900057][T14288] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input54 [ 584.564636][T14298] sysfs_service_op_store: Client not running :-5: [ 584.968875][T14298] sysfs_service_op_show: Client not running :-5: [ 585.296397][T14307] FAULT_INJECTION: forcing a failure. [ 585.296397][T14307] name failslab, interval 1, probability 0, space 0, times 0 [ 585.296452][T14307] CPU: 1 UID: 0 PID: 14307 Comm: syz.1.1672 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 585.296477][T14307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 585.296490][T14307] Call Trace: [ 585.296496][T14307] [ 585.296504][T14307] dump_stack_lvl+0x16c/0x1f0 [ 585.296529][T14307] should_fail_ex+0x512/0x640 [ 585.296572][T14307] should_failslab+0xc2/0x120 [ 585.296602][T14307] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 585.296626][T14307] ? radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 585.296664][T14307] radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 585.296704][T14307] idr_get_free+0x528/0xa30 [ 585.296769][T14307] idr_alloc_u32+0x190/0x2f0 [ 585.296809][T14307] ? __pfx_idr_alloc_u32+0x10/0x10 [ 585.296850][T14307] ? lock_acquire+0x179/0x350 [ 585.296888][T14307] idr_alloc_cyclic+0x10b/0x230 [ 585.296928][T14307] ? __pfx_idr_alloc_cyclic+0x10/0x10 [ 585.296964][T14307] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 585.297010][T14307] map_create+0x9aa/0x1db0 [ 585.297055][T14307] ? __pfx_map_create+0x10/0x10 [ 585.297088][T14307] ? __might_fault+0xe3/0x190 [ 585.297110][T14307] ? __might_fault+0xe3/0x190 [ 585.297130][T14307] ? __might_fault+0x13b/0x190 [ 585.297164][T14307] __sys_bpf+0x4d8d/0x4ea0 [ 585.297187][T14307] ? __pfx___sys_bpf+0x10/0x10 [ 585.297207][T14307] ? vfs_write+0x15d/0x1150 [ 585.297235][T14307] ? do_futex+0x122/0x350 [ 585.297265][T14307] ? __pfx_do_futex+0x10/0x10 [ 585.297310][T14307] ? xfd_validate_state+0x61/0x180 [ 585.297340][T14307] ? __pfx_ksys_write+0x10/0x10 [ 585.297368][T14307] __x64_sys_bpf+0x78/0xc0 [ 585.297389][T14307] ? lockdep_hardirqs_on+0x7c/0x110 [ 585.297411][T14307] do_syscall_64+0xcd/0x490 [ 585.297443][T14307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 585.297466][T14307] RIP: 0033:0x7fcec578e9a9 [ 585.297484][T14307] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 585.297507][T14307] RSP: 002b:00007fcec6560038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 585.297528][T14307] RAX: ffffffffffffffda RBX: 00007fcec59b5fa0 RCX: 00007fcec578e9a9 [ 585.297544][T14307] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 0000000000000000 [ 585.297558][T14307] RBP: 00007fcec5810d69 R08: 0000000000000000 R09: 0000000000000000 [ 585.297572][T14307] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 585.297587][T14307] R13: 0000000000000000 R14: 00007fcec59b5fa0 R15: 00007fff5e13d138 [ 585.297616][T14307] [ 587.468501][T14334] usb usb2: usbfs: process 14334 (syz.2.1675) did not claim interface 1 before use [ 590.799611][T14359] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1681'. [ 590.884122][T14362] sysfs_service_op_store: Client not running :-5: [ 591.161516][T14362] sysfs_service_op_show: Client not running :-5: [ 591.193809][T14367] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1683'. [ 592.113341][ T5847] Bluetooth: hci1: unexpected event 0x14 length: 16 > 6 [ 592.865735][T14386] FAULT_INJECTION: forcing a failure. [ 592.865735][T14386] name failslab, interval 1, probability 0, space 0, times 0 [ 592.885476][T14386] CPU: 0 UID: 0 PID: 14386 Comm: syz.1.1686 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 592.885520][T14386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 592.885540][T14386] Call Trace: [ 592.885551][T14386] [ 592.885564][T14386] dump_stack_lvl+0x16c/0x1f0 [ 592.885612][T14386] should_fail_ex+0x512/0x640 [ 592.885654][T14386] should_failslab+0xc2/0x120 [ 592.885695][T14386] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 592.885731][T14386] ? radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 592.885797][T14386] radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 592.885856][T14386] idr_get_free+0x528/0xa30 [ 592.885934][T14386] idr_alloc_u32+0x190/0x2f0 [ 592.885994][T14386] ? __pfx_idr_alloc_u32+0x10/0x10 [ 592.886056][T14386] ? lock_acquire+0x179/0x350 [ 592.886110][T14386] idr_alloc_cyclic+0x10b/0x230 [ 592.886176][T14386] ? __pfx_idr_alloc_cyclic+0x10/0x10 [ 592.886229][T14386] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 592.886296][T14386] map_create+0x9aa/0x1db0 [ 592.886366][T14386] ? __pfx_map_create+0x10/0x10 [ 592.886413][T14386] ? __might_fault+0xe3/0x190 [ 592.886445][T14386] ? __might_fault+0xe3/0x190 [ 592.886487][T14386] ? __might_fault+0x13b/0x190 [ 592.886551][T14386] __sys_bpf+0x4d8d/0x4ea0 [ 592.886586][T14386] ? __pfx___sys_bpf+0x10/0x10 [ 592.886615][T14386] ? vfs_write+0x15d/0x1150 [ 592.886663][T14386] ? do_futex+0x122/0x350 [ 592.886705][T14386] ? __pfx_do_futex+0x10/0x10 [ 592.886778][T14386] ? xfd_validate_state+0x61/0x180 [ 592.886822][T14386] ? __pfx_ksys_write+0x10/0x10 [ 592.886863][T14386] __x64_sys_bpf+0x78/0xc0 [ 592.886895][T14386] ? lockdep_hardirqs_on+0x7c/0x110 [ 592.886937][T14386] do_syscall_64+0xcd/0x490 [ 592.886974][T14386] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 592.887008][T14386] RIP: 0033:0x7fcec578e9a9 [ 592.887034][T14386] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 592.887077][T14386] RSP: 002b:00007fcec6560038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 592.887108][T14386] RAX: ffffffffffffffda RBX: 00007fcec59b5fa0 RCX: 00007fcec578e9a9 [ 592.887129][T14386] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 0000000000000000 [ 592.887149][T14386] RBP: 00007fcec5810d69 R08: 0000000000000000 R09: 0000000000000000 [ 592.887168][T14386] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 592.887193][T14386] R13: 0000000000000000 R14: 00007fcec59b5fa0 R15: 00007fff5e13d138 [ 592.887236][T14386] [ 594.655691][T14408] sysfs_service_op_store: Client not running :-5: [ 595.194022][T14408] sysfs_service_op_show: Client not running :-5: [ 597.397111][T14441] FAULT_INJECTION: forcing a failure. [ 597.397111][T14441] name failslab, interval 1, probability 0, space 0, times 0 [ 597.409837][T14441] CPU: 1 UID: 0 PID: 14441 Comm: syz.2.1696 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 597.409874][T14441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 597.409892][T14441] Call Trace: [ 597.409901][T14441] [ 597.409911][T14441] dump_stack_lvl+0x16c/0x1f0 [ 597.409946][T14441] should_fail_ex+0x512/0x640 [ 597.409981][T14441] should_failslab+0xc2/0x120 [ 597.410015][T14441] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 597.410045][T14441] ? radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 597.410095][T14441] radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 597.410155][T14441] idr_get_free+0x528/0xa30 [ 597.410214][T14441] idr_alloc_u32+0x190/0x2f0 [ 597.410262][T14441] ? __pfx_idr_alloc_u32+0x10/0x10 [ 597.410316][T14441] ? lock_acquire+0x179/0x350 [ 597.410363][T14441] idr_alloc_cyclic+0x10b/0x230 [ 597.410411][T14441] ? __pfx_idr_alloc_cyclic+0x10/0x10 [ 597.410454][T14441] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 597.410510][T14441] map_create+0x9aa/0x1db0 [ 597.410564][T14441] ? __pfx_map_create+0x10/0x10 [ 597.410603][T14441] ? __might_fault+0xe3/0x190 [ 597.410629][T14441] ? __might_fault+0xe3/0x190 [ 597.410653][T14441] ? __might_fault+0x13b/0x190 [ 597.410695][T14441] __sys_bpf+0x4d8d/0x4ea0 [ 597.410726][T14441] ? __pfx___sys_bpf+0x10/0x10 [ 597.410749][T14441] ? vfs_write+0x15d/0x1150 [ 597.410784][T14441] ? do_futex+0x122/0x350 [ 597.410818][T14441] ? __pfx_do_futex+0x10/0x10 [ 597.410872][T14441] ? xfd_validate_state+0x61/0x180 [ 597.410909][T14441] ? __pfx_ksys_write+0x10/0x10 [ 597.410942][T14441] __x64_sys_bpf+0x78/0xc0 [ 597.410967][T14441] ? lockdep_hardirqs_on+0x7c/0x110 [ 597.410994][T14441] do_syscall_64+0xcd/0x490 [ 597.411025][T14441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 597.411053][T14441] RIP: 0033:0x7f24c1f8e9a9 [ 597.411076][T14441] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 597.411104][T14441] RSP: 002b:00007f24bfdf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 597.411131][T14441] RAX: ffffffffffffffda RBX: 00007f24c21b5fa0 RCX: 00007f24c1f8e9a9 [ 597.411150][T14441] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 0000000000000000 [ 597.411167][T14441] RBP: 00007f24c2010d69 R08: 0000000000000000 R09: 0000000000000000 [ 597.411184][T14441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 597.411199][T14441] R13: 0000000000000000 R14: 00007f24c21b5fa0 R15: 00007ffd13610558 [ 597.411235][T14441] [ 597.815099][T14439] FAULT_INJECTION: forcing a failure. [ 597.815099][T14439] name failslab, interval 1, probability 0, space 0, times 0 [ 597.827850][T14439] CPU: 0 UID: 0 PID: 14439 Comm: syz.0.1695 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 597.827887][T14439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 597.827907][T14439] Call Trace: [ 597.827917][T14439] [ 597.827927][T14439] dump_stack_lvl+0x16c/0x1f0 [ 597.827962][T14439] should_fail_ex+0x512/0x640 [ 597.828000][T14439] should_failslab+0xc2/0x120 [ 597.828034][T14439] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 597.828068][T14439] ? radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 597.828117][T14439] radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 597.828170][T14439] idr_get_free+0x528/0xa30 [ 597.828233][T14439] idr_alloc_u32+0x190/0x2f0 [ 597.828288][T14439] ? __pfx_idr_alloc_u32+0x10/0x10 [ 597.828340][T14439] ? lock_acquire+0x179/0x350 [ 597.828390][T14439] idr_alloc_cyclic+0x10b/0x230 [ 597.828437][T14439] ? __pfx_idr_alloc_cyclic+0x10/0x10 [ 597.828483][T14439] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 597.828543][T14439] map_create+0x9aa/0x1db0 [ 597.828600][T14439] ? __pfx_map_create+0x10/0x10 [ 597.828640][T14439] ? __might_fault+0xe3/0x190 [ 597.828669][T14439] ? __might_fault+0xe3/0x190 [ 597.828694][T14439] ? __might_fault+0x13b/0x190 [ 597.828739][T14439] __sys_bpf+0x4d8d/0x4ea0 [ 597.828771][T14439] ? __pfx___sys_bpf+0x10/0x10 [ 597.828797][T14439] ? vfs_write+0x15d/0x1150 [ 597.828833][T14439] ? do_futex+0x122/0x350 [ 597.828871][T14439] ? __pfx_do_futex+0x10/0x10 [ 597.828927][T14439] ? xfd_validate_state+0x61/0x180 [ 597.828968][T14439] ? __pfx_ksys_write+0x10/0x10 [ 597.829001][T14439] __x64_sys_bpf+0x78/0xc0 [ 597.829030][T14439] ? lockdep_hardirqs_on+0x7c/0x110 [ 597.829056][T14439] do_syscall_64+0xcd/0x490 [ 597.829088][T14439] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 597.829120][T14439] RIP: 0033:0x7fa3da98e9a9 [ 597.829143][T14439] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 597.829175][T14439] RSP: 002b:00007fa3db868038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 597.829200][T14439] RAX: ffffffffffffffda RBX: 00007fa3dabb5fa0 RCX: 00007fa3da98e9a9 [ 597.829217][T14439] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 0000000000000000 [ 597.829232][T14439] RBP: 00007fa3daa10d69 R08: 0000000000000000 R09: 0000000000000000 [ 597.829249][T14439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 597.829277][T14439] R13: 0000000000000000 R14: 00007fa3dabb5fa0 R15: 00007ffc1802dba8 [ 597.829315][T14439] [ 598.387179][T14453] sysfs_service_op_store: Client not running :-5: [ 599.425522][T14445] sysfs_service_op_show: Client not running :-5: [ 600.086329][T14464] FAULT_INJECTION: forcing a failure. [ 600.086329][T14464] name failslab, interval 1, probability 0, space 0, times 0 [ 600.122942][T14464] CPU: 0 UID: 0 PID: 14464 Comm: syz.3.1701 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 600.122981][T14464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 600.122998][T14464] Call Trace: [ 600.123007][T14464] [ 600.123019][T14464] dump_stack_lvl+0x16c/0x1f0 [ 600.123055][T14464] should_fail_ex+0x512/0x640 [ 600.123084][T14464] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 600.123119][T14464] should_failslab+0xc2/0x120 [ 600.123153][T14464] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 600.123185][T14464] ? __d_alloc+0x31/0xaa0 [ 600.123219][T14464] __d_alloc+0x31/0xaa0 [ 600.123252][T14464] d_alloc_pseudo+0x1c/0xc0 [ 600.123291][T14464] alloc_file_pseudo+0xcf/0x230 [ 600.123329][T14464] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 600.123368][T14464] ? _raw_spin_unlock+0x28/0x50 [ 600.123408][T14464] ? alloc_fd+0x471/0x7d0 [ 600.123453][T14464] __anon_inode_getfile+0xe8/0x280 [ 600.123502][T14464] anon_inode_getfd+0x52/0xb0 [ 600.123549][T14464] map_create+0xb68/0x1db0 [ 600.123602][T14464] ? __pfx_map_create+0x10/0x10 [ 600.123639][T14464] ? __might_fault+0xe3/0x190 [ 600.123666][T14464] ? __might_fault+0xe3/0x190 [ 600.123690][T14464] ? __might_fault+0x13b/0x190 [ 600.123732][T14464] __sys_bpf+0x4d8d/0x4ea0 [ 600.123754][T14464] ? __pfx_futex_wake+0x10/0x10 [ 600.123797][T14464] ? __pfx___sys_bpf+0x10/0x10 [ 600.123827][T14464] ? vfs_write+0x15d/0x1150 [ 600.123862][T14464] ? do_futex+0x122/0x350 [ 600.123897][T14464] ? __pfx_do_futex+0x10/0x10 [ 600.123951][T14464] ? xfd_validate_state+0x61/0x180 [ 600.123988][T14464] ? __pfx_ksys_write+0x10/0x10 [ 600.124022][T14464] __x64_sys_bpf+0x78/0xc0 [ 600.124047][T14464] ? lockdep_hardirqs_on+0x7c/0x110 [ 600.124075][T14464] do_syscall_64+0xcd/0x490 [ 600.124108][T14464] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 600.124137][T14464] RIP: 0033:0x7fb82018e9a9 [ 600.124159][T14464] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 600.124187][T14464] RSP: 002b:00007fb820f20038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 600.124213][T14464] RAX: ffffffffffffffda RBX: 00007fb8203b5fa0 RCX: 00007fb82018e9a9 [ 600.124231][T14464] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 0000000000000000 [ 600.124247][T14464] RBP: 00007fb820210d69 R08: 0000000000000000 R09: 0000000000000000 [ 600.124263][T14464] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 600.124278][T14464] R13: 0000000000000000 R14: 00007fb8203b5fa0 R15: 00007fff807beb58 [ 600.124313][T14464] [ 600.992041][T14483] sysfs_service_op_store: Client not running :-5: [ 601.487231][T14491] sysfs_service_op_show: Client not running :-5: [ 602.848023][T14509] sysfs_service_op_store: Client not running :-5: [ 603.875984][T14525] sysfs_service_op_show: Client not running :-5: [ 605.247168][T14545] sysfs_service_op_store: Client not running :-5: [ 605.931949][T14556] sysfs_service_op_show: Client not running :-5: [ 607.106236][T14573] sysfs_service_op_store: Client not running :-5: [ 607.266056][T14577] FAULT_INJECTION: forcing a failure. [ 607.266056][T14577] name failslab, interval 1, probability 0, space 0, times 0 [ 607.278807][T14577] CPU: 0 UID: 0 PID: 14577 Comm: syz.3.1731 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 607.278841][T14577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 607.278858][T14577] Call Trace: [ 607.278867][T14577] [ 607.278878][T14577] dump_stack_lvl+0x16c/0x1f0 [ 607.278911][T14577] should_fail_ex+0x512/0x640 [ 607.278945][T14577] should_failslab+0xc2/0x120 [ 607.278979][T14577] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 607.279010][T14577] ? radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 607.279059][T14577] radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 607.279107][T14577] idr_get_free+0x528/0xa30 [ 607.279172][T14577] idr_alloc_u32+0x190/0x2f0 [ 607.279219][T14577] ? __pfx_idr_alloc_u32+0x10/0x10 [ 607.279268][T14577] ? lock_acquire+0x179/0x350 [ 607.279312][T14577] idr_alloc_cyclic+0x10b/0x230 [ 607.279358][T14577] ? __pfx_idr_alloc_cyclic+0x10/0x10 [ 607.279400][T14577] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 607.279455][T14577] map_create+0x9aa/0x1db0 [ 607.279508][T14577] ? __pfx_map_create+0x10/0x10 [ 607.279548][T14577] ? __might_fault+0xe3/0x190 [ 607.279574][T14577] ? __might_fault+0xe3/0x190 [ 607.279598][T14577] ? __might_fault+0x13b/0x190 [ 607.279639][T14577] __sys_bpf+0x4d8d/0x4ea0 [ 607.279669][T14577] ? __pfx___sys_bpf+0x10/0x10 [ 607.279692][T14577] ? vfs_write+0x15d/0x1150 [ 607.279728][T14577] ? do_futex+0x122/0x350 [ 607.279762][T14577] ? __pfx_do_futex+0x10/0x10 [ 607.279817][T14577] ? xfd_validate_state+0x61/0x180 [ 607.279852][T14577] ? __pfx_ksys_write+0x10/0x10 [ 607.279886][T14577] __x64_sys_bpf+0x78/0xc0 [ 607.279912][T14577] ? lockdep_hardirqs_on+0x7c/0x110 [ 607.279938][T14577] do_syscall_64+0xcd/0x490 [ 607.279970][T14577] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 607.279998][T14577] RIP: 0033:0x7fb82018e9a9 [ 607.280020][T14577] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 607.280047][T14577] RSP: 002b:00007fb820f20038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 607.280072][T14577] RAX: ffffffffffffffda RBX: 00007fb8203b5fa0 RCX: 00007fb82018e9a9 [ 607.280090][T14577] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 0000000000000000 [ 607.280106][T14577] RBP: 00007fb820210d69 R08: 0000000000000000 R09: 0000000000000000 [ 607.280122][T14577] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 607.280146][T14577] R13: 0000000000000000 R14: 00007fb8203b5fa0 R15: 00007fff807beb58 [ 607.280183][T14577] [ 608.012443][T14573] sysfs_service_op_show: Client not running :-5: [ 608.327122][T14591] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input55 [ 609.014829][T14592] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input56 [ 609.413682][T14606] sysfs_service_op_store: Client not running :-5: [ 609.934639][T14606] sysfs_service_op_show: Client not running :-5: [ 613.131035][T14654] FAULT_INJECTION: forcing a failure. [ 613.131035][T14654] name failslab, interval 1, probability 0, space 0, times 0 [ 613.143746][T14654] CPU: 0 UID: 0 PID: 14654 Comm: syz.3.1749 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 613.143780][T14654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 613.143797][T14654] Call Trace: [ 613.143806][T14654] [ 613.143818][T14654] dump_stack_lvl+0x16c/0x1f0 [ 613.143853][T14654] should_fail_ex+0x512/0x640 [ 613.143889][T14654] should_failslab+0xc2/0x120 [ 613.143924][T14654] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 613.143955][T14654] ? radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 613.144002][T14654] radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 613.144053][T14654] idr_get_free+0x528/0xa30 [ 613.144111][T14654] idr_alloc_u32+0x190/0x2f0 [ 613.144157][T14654] ? __pfx_idr_alloc_u32+0x10/0x10 [ 613.144206][T14654] ? lock_acquire+0x179/0x350 [ 613.144252][T14654] idr_alloc_cyclic+0x10b/0x230 [ 613.144298][T14654] ? __pfx_idr_alloc_cyclic+0x10/0x10 [ 613.144340][T14654] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 613.144395][T14654] map_create+0x9aa/0x1db0 [ 613.144449][T14654] ? __pfx_map_create+0x10/0x10 [ 613.144488][T14654] ? __might_fault+0xe3/0x190 [ 613.144515][T14654] ? __might_fault+0xe3/0x190 [ 613.144540][T14654] ? __might_fault+0x13b/0x190 [ 613.144581][T14654] __sys_bpf+0x4d8d/0x4ea0 [ 613.144619][T14654] ? __pfx___sys_bpf+0x10/0x10 [ 613.144643][T14654] ? vfs_write+0x15d/0x1150 [ 613.144679][T14654] ? do_futex+0x122/0x350 [ 613.144714][T14654] ? __pfx_do_futex+0x10/0x10 [ 613.144770][T14654] ? xfd_validate_state+0x61/0x180 [ 613.144806][T14654] ? __pfx_ksys_write+0x10/0x10 [ 613.144840][T14654] __x64_sys_bpf+0x78/0xc0 [ 613.144867][T14654] ? lockdep_hardirqs_on+0x7c/0x110 [ 613.144894][T14654] do_syscall_64+0xcd/0x490 [ 613.144925][T14654] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 613.144954][T14654] RIP: 0033:0x7fb82018e9a9 [ 613.144976][T14654] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 613.145004][T14654] RSP: 002b:00007fb820f20038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 613.145030][T14654] RAX: ffffffffffffffda RBX: 00007fb8203b5fa0 RCX: 00007fb82018e9a9 [ 613.145048][T14654] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 0000000000000000 [ 613.145065][T14654] RBP: 00007fb820210d69 R08: 0000000000000000 R09: 0000000000000000 [ 613.145080][T14654] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 613.145096][T14654] R13: 0000000000000000 R14: 00007fb8203b5fa0 R15: 00007fff807beb58 [ 613.145131][T14654] [ 613.800028][T14665] sysfs_service_op_store: Client not running :-5: [ 614.058071][T14665] sysfs_service_op_show: Client not running :-5: [ 614.753311][T14663] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1752'. [ 615.241525][T14683] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input57 [ 615.996341][T14685] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input58 [ 616.950076][T14710] sysfs_service_op_store: Client not running :-5: [ 617.436374][T14710] sysfs_service_op_show: Client not running :-5: [ 618.666421][T14749] random: crng reseeded on system resumption [ 619.440342][T14766] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input59 [ 620.054042][T14767] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input60 [ 621.084471][T14792] sysfs_service_op_store: Client not running :-5: [ 621.192554][T14792] sysfs_service_op_show: Client not running :-5: [ 622.333216][T14804] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input61 [ 623.661633][T14824] random: crng reseeded on system resumption [ 623.871286][T14806] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input62 [ 624.050237][T14824] Unrecognized hibernate image header format! [ 624.093208][T14824] PM: hibernation: Image mismatch: architecture specific data [ 627.475877][T14876] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input63 [ 627.926139][T14877] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input64 [ 629.043875][T14893] HfR: entered promiscuous mode [ 629.257187][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 629.263774][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 629.324371][T14903] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input65 [ 629.597358][T14907] FAULT_INJECTION: forcing a failure. [ 629.597358][T14907] name failslab, interval 1, probability 0, space 0, times 0 [ 629.610137][T14907] CPU: 1 UID: 0 PID: 14907 Comm: syz.1.1805 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 629.610173][T14907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 629.610190][T14907] Call Trace: [ 629.610199][T14907] [ 629.610210][T14907] dump_stack_lvl+0x16c/0x1f0 [ 629.610244][T14907] should_fail_ex+0x512/0x640 [ 629.610280][T14907] should_failslab+0xc2/0x120 [ 629.610315][T14907] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 629.610347][T14907] ? radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 629.610396][T14907] radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 629.610445][T14907] idr_get_free+0x528/0xa30 [ 629.610501][T14907] idr_alloc_u32+0x190/0x2f0 [ 629.610550][T14907] ? __pfx_idr_alloc_u32+0x10/0x10 [ 629.610598][T14907] ? lock_acquire+0x179/0x350 [ 629.610646][T14907] idr_alloc_cyclic+0x10b/0x230 [ 629.610693][T14907] ? __pfx_idr_alloc_cyclic+0x10/0x10 [ 629.610734][T14907] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 629.610791][T14907] map_create+0x9aa/0x1db0 [ 629.610845][T14907] ? __pfx_map_create+0x10/0x10 [ 629.610884][T14907] ? __might_fault+0xe3/0x190 [ 629.610911][T14907] ? __might_fault+0xe3/0x190 [ 629.610935][T14907] ? __might_fault+0x13b/0x190 [ 629.610977][T14907] __sys_bpf+0x4d8d/0x4ea0 [ 629.611007][T14907] ? __pfx___sys_bpf+0x10/0x10 [ 629.611031][T14907] ? vfs_write+0x15d/0x1150 [ 629.611075][T14907] ? do_futex+0x122/0x350 [ 629.611112][T14907] ? __pfx_do_futex+0x10/0x10 [ 629.611168][T14907] ? xfd_validate_state+0x61/0x180 [ 629.611205][T14907] ? __pfx_ksys_write+0x10/0x10 [ 629.611239][T14907] __x64_sys_bpf+0x78/0xc0 [ 629.611264][T14907] ? lockdep_hardirqs_on+0x7c/0x110 [ 629.611292][T14907] do_syscall_64+0xcd/0x490 [ 629.611323][T14907] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 629.611352][T14907] RIP: 0033:0x7fcec578e9a9 [ 629.611374][T14907] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 629.611402][T14907] RSP: 002b:00007fcec6560038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 629.611429][T14907] RAX: ffffffffffffffda RBX: 00007fcec59b5fa0 RCX: 00007fcec578e9a9 [ 629.611446][T14907] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 0000000000000000 [ 629.611463][T14907] RBP: 00007fcec5810d69 R08: 0000000000000000 R09: 0000000000000000 [ 629.611479][T14907] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 629.611494][T14907] R13: 0000000000000000 R14: 00007fcec59b5fa0 R15: 00007fff5e13d138 [ 629.611527][T14907] [ 630.176750][T14904] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input66 [ 633.378195][T14954] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input67 [ 633.861594][T14955] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input68 [ 635.100694][T14970] sysfs_service_op_store: Client not running :-5: [ 635.316028][T14966] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1815'. [ 635.791054][T14970] sysfs_service_op_show: Client not running :-5: [ 640.483060][T15050] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input69 [ 641.558712][T15053] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input70 [ 641.710923][T15065] FAULT_INJECTION: forcing a failure. [ 641.710923][T15065] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 641.726827][T15065] CPU: 1 UID: 0 PID: 15065 Comm: syz.2.1834 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 641.726861][T15065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 641.726877][T15065] Call Trace: [ 641.726885][T15065] [ 641.726895][T15065] dump_stack_lvl+0x16c/0x1f0 [ 641.726927][T15065] should_fail_ex+0x512/0x640 [ 641.726960][T15065] _copy_to_iter+0x463/0x16f0 [ 641.727008][T15065] ? __pfx__copy_to_iter+0x10/0x10 [ 641.727039][T15065] ? kernfs_seq_stop+0xcd/0x120 [ 641.727079][T15065] ? kernfs_put_active+0x86/0xe0 [ 641.727113][T15065] seq_read_iter+0xcf8/0x12c0 [ 641.727170][T15065] kernfs_fop_read_iter+0x40f/0x5a0 [ 641.727204][T15065] ? copy_iovec_from_user+0x131/0x170 [ 641.727238][T15065] do_iter_readv_writev+0x735/0x950 [ 641.727282][T15065] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 641.727336][T15065] ? rw_verify_area+0xcf/0x680 [ 641.727378][T15065] vfs_readv+0x4cb/0x8b0 [ 641.727420][T15065] ? __pfx___might_resched+0x10/0x10 [ 641.727452][T15065] ? rcu_is_watching+0x12/0xc0 [ 641.727482][T15065] ? __pfx_vfs_readv+0x10/0x10 [ 641.727522][T15065] ? __mutex_lock+0x1ca/0xb90 [ 641.727558][T15065] ? __pfx___mutex_lock+0x10/0x10 [ 641.727598][T15065] ? __fget_files+0x20e/0x3c0 [ 641.727639][T15065] ? __fget_files+0x1b0/0x3c0 [ 641.727691][T15065] ? do_readv+0x132/0x340 [ 641.727728][T15065] do_readv+0x132/0x340 [ 641.727769][T15065] ? __pfx_do_readv+0x10/0x10 [ 641.727825][T15065] do_syscall_64+0xcd/0x490 [ 641.727856][T15065] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 641.727883][T15065] RIP: 0033:0x7f24c1f8e9a9 [ 641.727905][T15065] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 641.727931][T15065] RSP: 002b:00007f24bfdf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 641.727956][T15065] RAX: ffffffffffffffda RBX: 00007f24c21b5fa0 RCX: 00007f24c1f8e9a9 [ 641.727974][T15065] RDX: 0000000000000002 RSI: 0000200000000080 RDI: 0000000000000003 [ 641.727995][T15065] RBP: 00007f24bfdf6090 R08: 0000000000000000 R09: 0000000000000000 [ 641.728011][T15065] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 641.728026][T15065] R13: 0000000000000000 R14: 00007f24c21b5fa0 R15: 00007ffd13610558 [ 641.728061][T15065] [ 642.019860][T15068] netlink: 334 bytes leftover after parsing attributes in process `syz.2.1835'. [ 642.853808][T15082] sysfs_service_op_store: Client not running :-5: [ 642.886812][T15078] FAULT_INJECTION: forcing a failure. [ 642.886812][T15078] name failslab, interval 1, probability 0, space 0, times 0 [ 642.899553][T15078] CPU: 0 UID: 0 PID: 15078 Comm: syz.1.1837 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 642.899588][T15078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 642.899605][T15078] Call Trace: [ 642.899615][T15078] [ 642.899625][T15078] dump_stack_lvl+0x16c/0x1f0 [ 642.899660][T15078] should_fail_ex+0x512/0x640 [ 642.899694][T15078] should_failslab+0xc2/0x120 [ 642.899729][T15078] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 642.899760][T15078] ? radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 642.899809][T15078] radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 642.899858][T15078] idr_get_free+0x528/0xa30 [ 642.899927][T15078] idr_alloc_u32+0x190/0x2f0 [ 642.899975][T15078] ? __pfx_idr_alloc_u32+0x10/0x10 [ 642.900025][T15078] ? lock_acquire+0x179/0x350 [ 642.900071][T15078] idr_alloc_cyclic+0x10b/0x230 [ 642.900118][T15078] ? __pfx_idr_alloc_cyclic+0x10/0x10 [ 642.900160][T15078] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 642.900215][T15078] map_create+0x9aa/0x1db0 [ 642.900270][T15078] ? __pfx_map_create+0x10/0x10 [ 642.900308][T15078] ? __might_fault+0xe3/0x190 [ 642.900335][T15078] ? __might_fault+0xe3/0x190 [ 642.900360][T15078] ? __might_fault+0x13b/0x190 [ 642.900402][T15078] __sys_bpf+0x4d8d/0x4ea0 [ 642.900432][T15078] ? __pfx___sys_bpf+0x10/0x10 [ 642.900455][T15078] ? vfs_write+0x15d/0x1150 [ 642.900490][T15078] ? do_futex+0x122/0x350 [ 642.900526][T15078] ? __pfx_do_futex+0x10/0x10 [ 642.900580][T15078] ? xfd_validate_state+0x61/0x180 [ 642.900618][T15078] ? __pfx_ksys_write+0x10/0x10 [ 642.900651][T15078] __x64_sys_bpf+0x78/0xc0 [ 642.900678][T15078] ? lockdep_hardirqs_on+0x7c/0x110 [ 642.900704][T15078] do_syscall_64+0xcd/0x490 [ 642.900736][T15078] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 642.900765][T15078] RIP: 0033:0x7fcec578e9a9 [ 642.900787][T15078] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 642.900815][T15078] RSP: 002b:00007fcec6560038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 642.900841][T15078] RAX: ffffffffffffffda RBX: 00007fcec59b5fa0 RCX: 00007fcec578e9a9 [ 642.900867][T15078] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 0000000000000000 [ 642.900885][T15078] RBP: 00007fcec5810d69 R08: 0000000000000000 R09: 0000000000000000 [ 642.900901][T15078] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 642.900917][T15078] R13: 0000000000000000 R14: 00007fcec59b5fa0 R15: 00007fff5e13d138 [ 642.900953][T15078] [ 643.146939][ C0] vkms_vblank_simulate: vblank timer overrun [ 643.235928][T15082] sysfs_service_op_show: Client not running :-5: [ 643.960562][T15089] sysfs_service_op_store: Client not running :-5: [ 644.162846][T15090] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz.3.1840: bg 4: bad block bitmap checksum [ 644.273096][T15090] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 74 [ 644.287748][T15090] EXT4-fs (sda1): This should not happen!! Data will be lost [ 644.287748][T15090] [ 644.687297][T15069] kexec: Could not allocate control_code_buffer [ 644.764340][T15096] sysfs_service_op_show: Client not running :-5: [ 648.063345][T15140] device-mapper: ioctl: Unable to rename non-existent device, to uuid [ 651.013495][T15167] EXT4-fs error (device sda1): ext4_discard_preallocations:5601: comm syz.3.1855: Error -117 reading block bitmap for 4 [ 652.841204][T15188] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input71 [ 653.491588][T15191] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input72 [ 654.815290][T15209] ptrace attach of "./syz-executor exec"[5855] was attempted by "./syz-executor exec"[15209] [ 656.419795][T15250] sysfs_service_op_store: Client not running :-5: [ 657.019067][T15245] sysfs_service_op_show: Client not running :-5: [ 657.441416][T15257] sysfs_service_op_store: Client not running :-5: [ 658.360850][T15257] sysfs_service_op_show: Client not running :-5: [ 658.588910][T15259] phram: parameter too long [ 659.258031][T15271] FAULT_INJECTION: forcing a failure. [ 659.258031][T15271] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 659.381723][T15271] CPU: 1 UID: 0 PID: 15271 Comm: syz.0.1875 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 659.381778][T15271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 659.381797][T15271] Call Trace: [ 659.381808][T15271] [ 659.381820][T15271] dump_stack_lvl+0x16c/0x1f0 [ 659.381857][T15271] should_fail_ex+0x512/0x640 [ 659.381896][T15271] _copy_to_user+0x32/0xd0 [ 659.381935][T15271] simple_read_from_buffer+0xcb/0x170 [ 659.381988][T15271] proc_fail_nth_read+0x197/0x270 [ 659.382034][T15271] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 659.382081][T15271] ? rw_verify_area+0xcf/0x680 [ 659.382129][T15271] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 659.382175][T15271] vfs_read+0x1e4/0xc60 [ 659.382213][T15271] ? __pfx_vfs_read+0x10/0x10 [ 659.382243][T15271] ? do_sys_openat2+0x157/0x1d0 [ 659.382286][T15271] ? __pfx_do_sys_openat2+0x10/0x10 [ 659.382337][T15271] ? find_held_lock+0x2b/0x80 [ 659.382372][T15271] ? handle_mm_fault+0x2ab/0xd10 [ 659.382436][T15271] ksys_read+0x12a/0x250 [ 659.382464][T15271] ? __pfx_ksys_read+0x10/0x10 [ 659.382506][T15271] do_syscall_64+0xcd/0x490 [ 659.382543][T15271] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 659.382576][T15271] RIP: 0033:0x7fa3da98d3bc [ 659.382600][T15271] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 659.382631][T15271] RSP: 002b:00007fa3db868030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 659.382665][T15271] RAX: ffffffffffffffda RBX: 00007fa3dabb5fa0 RCX: 00007fa3da98d3bc [ 659.382685][T15271] RDX: 000000000000000f RSI: 00007fa3db8680a0 RDI: 0000000000000002 [ 659.382703][T15271] RBP: 00007fa3db868090 R08: 0000000000000000 R09: 0000000000000000 [ 659.382721][T15271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 659.382738][T15271] R13: 0000000000000000 R14: 00007fa3dabb5fa0 R15: 00007ffc1802dba8 [ 659.382778][T15271] [ 661.849564][T15309] sysfs_service_op_store: Client not running :-5: [ 663.044631][T15309] sysfs_service_op_show: Client not running :-5: [ 664.061210][T15317] phram: parameter too long [ 667.165220][T15363] FAULT_INJECTION: forcing a failure. [ 667.165220][T15363] name failslab, interval 1, probability 0, space 0, times 0 [ 667.177944][T15363] CPU: 0 UID: 0 PID: 15363 Comm: syz.2.1894 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 667.177980][T15363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 667.177996][T15363] Call Trace: [ 667.178005][T15363] [ 667.178015][T15363] dump_stack_lvl+0x16c/0x1f0 [ 667.178050][T15363] should_fail_ex+0x512/0x640 [ 667.178085][T15363] should_failslab+0xc2/0x120 [ 667.178119][T15363] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 667.178150][T15363] ? radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 667.178197][T15363] radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 667.178257][T15363] idr_get_free+0x528/0xa30 [ 667.178314][T15363] idr_alloc_u32+0x190/0x2f0 [ 667.178362][T15363] ? __pfx_idr_alloc_u32+0x10/0x10 [ 667.178416][T15363] ? lock_acquire+0x179/0x350 [ 667.178464][T15363] idr_alloc_cyclic+0x10b/0x230 [ 667.178509][T15363] ? __pfx_idr_alloc_cyclic+0x10/0x10 [ 667.178552][T15363] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 667.178610][T15363] map_create+0x9aa/0x1db0 [ 667.178667][T15363] ? __pfx_map_create+0x10/0x10 [ 667.178707][T15363] ? __might_fault+0xe3/0x190 [ 667.178741][T15363] ? __might_fault+0xe3/0x190 [ 667.178766][T15363] ? __might_fault+0x13b/0x190 [ 667.178809][T15363] __sys_bpf+0x4d8d/0x4ea0 [ 667.178839][T15363] ? __pfx___sys_bpf+0x10/0x10 [ 667.178870][T15363] ? vfs_write+0x15d/0x1150 [ 667.178905][T15363] ? do_futex+0x122/0x350 [ 667.178942][T15363] ? __pfx_do_futex+0x10/0x10 [ 667.179003][T15363] ? xfd_validate_state+0x61/0x180 [ 667.179041][T15363] ? __pfx_ksys_write+0x10/0x10 [ 667.179090][T15363] __x64_sys_bpf+0x78/0xc0 [ 667.179117][T15363] ? lockdep_hardirqs_on+0x7c/0x110 [ 667.179145][T15363] do_syscall_64+0xcd/0x490 [ 667.179178][T15363] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 667.179206][T15363] RIP: 0033:0x7f24c1f8e9a9 [ 667.179228][T15363] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 667.179256][T15363] RSP: 002b:00007f24bfdf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 667.179281][T15363] RAX: ffffffffffffffda RBX: 00007f24c21b5fa0 RCX: 00007f24c1f8e9a9 [ 667.179299][T15363] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 0000000000000000 [ 667.179316][T15363] RBP: 00007f24c2010d69 R08: 0000000000000000 R09: 0000000000000000 [ 667.179332][T15363] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 667.179348][T15363] R13: 0000000000000000 R14: 00007f24c21b5fa0 R15: 00007ffd13610558 [ 667.179384][T15363] [ 670.249651][T15403] blkio.reset_stats is deprecated [ 671.519122][T15422] FAULT_INJECTION: forcing a failure. [ 671.519122][T15422] name failslab, interval 1, probability 0, space 0, times 0 [ 671.531862][T15422] CPU: 1 UID: 0 PID: 15422 Comm: syz.1.1905 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 671.531903][T15422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 671.531924][T15422] Call Trace: [ 671.531939][T15422] [ 671.531951][T15422] dump_stack_lvl+0x16c/0x1f0 [ 671.531990][T15422] should_fail_ex+0x512/0x640 [ 671.532029][T15422] should_failslab+0xc2/0x120 [ 671.532070][T15422] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 671.532107][T15422] ? radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 671.532167][T15422] radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 671.532227][T15422] idr_get_free+0x528/0xa30 [ 671.532298][T15422] idr_alloc_u32+0x190/0x2f0 [ 671.532355][T15422] ? __pfx_idr_alloc_u32+0x10/0x10 [ 671.532413][T15422] ? lock_acquire+0x179/0x350 [ 671.532477][T15422] idr_alloc_cyclic+0x10b/0x230 [ 671.532536][T15422] ? __pfx_idr_alloc_cyclic+0x10/0x10 [ 671.532588][T15422] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 671.532655][T15422] map_create+0x9aa/0x1db0 [ 671.532720][T15422] ? __pfx_map_create+0x10/0x10 [ 671.532769][T15422] ? __might_fault+0xe3/0x190 [ 671.532802][T15422] ? __might_fault+0xe3/0x190 [ 671.532832][T15422] ? __might_fault+0x13b/0x190 [ 671.532881][T15422] __sys_bpf+0x4d8d/0x4ea0 [ 671.532917][T15422] ? __pfx___sys_bpf+0x10/0x10 [ 671.532956][T15422] ? vfs_write+0x15d/0x1150 [ 671.533005][T15422] ? do_futex+0x122/0x350 [ 671.533042][T15422] ? __pfx_do_futex+0x10/0x10 [ 671.533098][T15422] ? xfd_validate_state+0x61/0x180 [ 671.533136][T15422] ? __pfx_ksys_write+0x10/0x10 [ 671.533169][T15422] __x64_sys_bpf+0x78/0xc0 [ 671.533230][T15422] ? lockdep_hardirqs_on+0x7c/0x110 [ 671.533259][T15422] do_syscall_64+0xcd/0x490 [ 671.533291][T15422] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 671.533320][T15422] RIP: 0033:0x7fcec578e9a9 [ 671.533343][T15422] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 671.533377][T15422] RSP: 002b:00007fcec6560038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 671.533404][T15422] RAX: ffffffffffffffda RBX: 00007fcec59b5fa0 RCX: 00007fcec578e9a9 [ 671.533422][T15422] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 0000000000000000 [ 671.533439][T15422] RBP: 00007fcec5810d69 R08: 0000000000000000 R09: 0000000000000000 [ 671.533462][T15422] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 671.533477][T15422] R13: 0000000000000000 R14: 00007fcec59b5fa0 R15: 00007fff5e13d138 [ 671.533514][T15422] [ 672.088282][T15426] FAULT_INJECTION: forcing a failure. [ 672.088282][T15426] name failslab, interval 1, probability 0, space 0, times 0 [ 672.101005][T15426] CPU: 0 UID: 0 PID: 15426 Comm: syz.2.1906 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 672.101032][T15426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 672.101045][T15426] Call Trace: [ 672.101052][T15426] [ 672.101059][T15426] dump_stack_lvl+0x16c/0x1f0 [ 672.101083][T15426] should_fail_ex+0x512/0x640 [ 672.101108][T15426] should_failslab+0xc2/0x120 [ 672.101133][T15426] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 672.101173][T15426] ? radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 672.101209][T15426] radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 672.101245][T15426] idr_get_free+0x528/0xa30 [ 672.101287][T15426] idr_alloc_u32+0x190/0x2f0 [ 672.101322][T15426] ? __pfx_idr_alloc_u32+0x10/0x10 [ 672.101365][T15426] idr_alloc_cyclic+0x10b/0x230 [ 672.101402][T15426] ? __pfx_idr_alloc_cyclic+0x10/0x10 [ 672.101434][T15426] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 672.101476][T15426] map_create+0x9aa/0x1db0 [ 672.101510][T15426] ? __might_fault+0x13b/0x190 [ 672.101534][T15426] ? __pfx_map_create+0x10/0x10 [ 672.101564][T15426] ? __might_fault+0xe3/0x190 [ 672.101582][T15426] ? __might_fault+0xe3/0x190 [ 672.101600][T15426] ? __might_fault+0x13b/0x190 [ 672.101629][T15426] __sys_bpf+0x4d8d/0x4ea0 [ 672.101651][T15426] ? __pfx___sys_bpf+0x10/0x10 [ 672.101667][T15426] ? vfs_write+0x15d/0x1150 [ 672.101692][T15426] ? do_futex+0x122/0x350 [ 672.101719][T15426] ? __pfx_do_futex+0x10/0x10 [ 672.101776][T15426] ? xfd_validate_state+0x61/0x180 [ 672.101809][T15426] ? __pfx_ksys_write+0x10/0x10 [ 672.101837][T15426] __x64_sys_bpf+0x78/0xc0 [ 672.101859][T15426] ? lockdep_hardirqs_on+0x7c/0x110 [ 672.101881][T15426] do_syscall_64+0xcd/0x490 [ 672.101908][T15426] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 672.101933][T15426] RIP: 0033:0x7f24c1f8e9a9 [ 672.101951][T15426] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 672.101975][T15426] RSP: 002b:00007f24bfdf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 672.101998][T15426] RAX: ffffffffffffffda RBX: 00007f24c21b5fa0 RCX: 00007f24c1f8e9a9 [ 672.102014][T15426] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 0000000000000000 [ 672.102029][T15426] RBP: 00007f24c2010d69 R08: 0000000000000000 R09: 0000000000000000 [ 672.102044][T15426] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 672.102058][T15426] R13: 0000000000000000 R14: 00007f24c21b5fa0 R15: 00007ffd13610558 [ 672.102089][T15426] [ 673.675892][T15450] sysfs_service_op_store: Client not running :-5: [ 674.050687][T15450] sysfs_service_op_show: Client not running :-5: [ 675.798927][T15465] netlink: 'syz.3.1914': attribute type 11 has an invalid length. [ 676.103049][T15436] ptrace attach of "./syz-executor exec"[5848] was attempted by "./syz-executor exec"[15436] [ 677.723914][T15493] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input74 [ 678.210653][T15501] FAULT_INJECTION: forcing a failure. [ 678.210653][T15501] name fail_futex, interval 1, probability 0, space 0, times 0 [ 678.261981][T15501] CPU: 1 UID: 0 PID: 15501 Comm: syz.0.1921 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 678.262023][T15501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 678.262042][T15501] Call Trace: [ 678.262052][T15501] [ 678.262065][T15501] dump_stack_lvl+0x16c/0x1f0 [ 678.262102][T15501] should_fail_ex+0x512/0x640 [ 678.262143][T15501] should_fail_futex+0x4c/0x60 [ 678.262180][T15501] __x64_sys_futex+0x25e/0x4c0 [ 678.262226][T15501] ? __pfx___x64_sys_futex+0x10/0x10 [ 678.262282][T15501] do_syscall_64+0xcd/0x490 [ 678.262319][T15501] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 678.262353][T15501] RIP: 0033:0x7fa3da98e9a9 [ 678.262377][T15501] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 678.262407][T15501] RSP: 002b:00007ffc1802dd08 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 678.262437][T15501] RAX: ffffffffffffffda RBX: 00000000000a5936 RCX: 00007fa3da98e9a9 [ 678.262458][T15501] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fa3dabb5fac [ 678.262477][T15501] RBP: 0000000000000032 R08: 00007fa3db869000 R09: 000000081802dfff [ 678.262497][T15501] R10: 00007ffc1802de00 R11: 0000000000000246 R12: 00007fa3dabb5fac [ 678.262518][T15501] R13: 00007ffc1802de00 R14: 00000000000a5968 R15: 00007ffc1802de20 [ 678.262560][T15501] [ 678.766249][T15494] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input75 [ 679.723689][T15504] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input76 [ 680.023446][T15505] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input77 [ 680.107385][T15520] ubi0: attaching mtd0 [ 680.111549][T15520] ubi0 error: ubi_attach_mtd_dev: bad VID header (63) or data offsets (127) [ 681.713460][T15540] netlink: 'syz.1.1928': attribute type 11 has an invalid length. [ 685.232142][T15590] FAULT_INJECTION: forcing a failure. [ 685.232142][T15590] name failslab, interval 1, probability 0, space 0, times 0 [ 685.277311][T15590] CPU: 1 UID: 0 PID: 15590 Comm: syz.2.1937 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 685.277351][T15590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 685.277369][T15590] Call Trace: [ 685.277379][T15590] [ 685.277390][T15590] dump_stack_lvl+0x16c/0x1f0 [ 685.277430][T15590] should_fail_ex+0x512/0x640 [ 685.277461][T15590] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 685.277504][T15590] should_failslab+0xc2/0x120 [ 685.277540][T15590] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 685.277579][T15590] ? __d_alloc+0x31/0xaa0 [ 685.277616][T15590] __d_alloc+0x31/0xaa0 [ 685.277661][T15590] d_alloc_pseudo+0x1c/0xc0 [ 685.277710][T15590] alloc_file_pseudo+0xcf/0x230 [ 685.277753][T15590] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 685.277792][T15590] ? _raw_spin_unlock+0x28/0x50 [ 685.277837][T15590] ? alloc_fd+0x471/0x7d0 [ 685.277883][T15590] __anon_inode_getfile+0xe8/0x280 [ 685.277941][T15590] anon_inode_getfd+0x52/0xb0 [ 685.277991][T15590] map_create+0xb68/0x1db0 [ 685.278045][T15590] ? __pfx_map_create+0x10/0x10 [ 685.278085][T15590] ? __might_fault+0xe3/0x190 [ 685.278112][T15590] ? __might_fault+0xe3/0x190 [ 685.278138][T15590] ? __might_fault+0x13b/0x190 [ 685.278179][T15590] __sys_bpf+0x4d8d/0x4ea0 [ 685.278203][T15590] ? __pfx_futex_wake+0x10/0x10 [ 685.278247][T15590] ? __pfx___sys_bpf+0x10/0x10 [ 685.278271][T15590] ? vfs_write+0x15d/0x1150 [ 685.278307][T15590] ? do_futex+0x122/0x350 [ 685.278342][T15590] ? __pfx_do_futex+0x10/0x10 [ 685.278398][T15590] ? xfd_validate_state+0x61/0x180 [ 685.278435][T15590] ? __pfx_ksys_write+0x10/0x10 [ 685.278469][T15590] __x64_sys_bpf+0x78/0xc0 [ 685.278495][T15590] ? lockdep_hardirqs_on+0x7c/0x110 [ 685.278522][T15590] do_syscall_64+0xcd/0x490 [ 685.278562][T15590] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 685.278592][T15590] RIP: 0033:0x7f24c1f8e9a9 [ 685.278614][T15590] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 685.278642][T15590] RSP: 002b:00007f24bfdf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 685.278669][T15590] RAX: ffffffffffffffda RBX: 00007f24c21b5fa0 RCX: 00007f24c1f8e9a9 [ 685.278686][T15590] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 0000000000000000 [ 685.278702][T15590] RBP: 00007f24c2010d69 R08: 0000000000000000 R09: 0000000000000000 [ 685.278719][T15590] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 685.278734][T15590] R13: 0000000000000000 R14: 00007f24c21b5fa0 R15: 00007ffd13610558 [ 685.278770][T15590] [ 688.011551][T15633] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input79 [ 688.644163][T15634] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input80 [ 689.696979][T15651] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input81 [ 690.697948][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 690.708850][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 691.468646][T15653] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input82 [ 692.040215][T15670] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input83 [ 692.692110][T15673] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz.2.1950: bg 5: bad block bitmap checksum [ 692.764230][T15673] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 74 [ 692.776671][T15673] EXT4-fs (sda1): This should not happen!! Data will be lost [ 692.776671][T15673] [ 693.018106][T15672] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input84 [ 693.996798][T15686] netlink: set zone limit has 8 unknown bytes [ 694.003403][T15691] sysfs_service_op_store: Client not running :-5: [ 694.098599][T15686] netlink: zone id is out of range [ 694.124249][T15686] netlink: del zone limit has 4 unknown bytes [ 694.739688][T15699] FAULT_INJECTION: forcing a failure. [ 694.739688][T15699] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 694.756022][T15699] CPU: 0 UID: 0 PID: 15699 Comm: syz.3.1956 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 694.756056][T15699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 694.756071][T15699] Call Trace: [ 694.756080][T15699] [ 694.756090][T15699] dump_stack_lvl+0x16c/0x1f0 [ 694.756122][T15699] should_fail_ex+0x512/0x640 [ 694.756158][T15699] _copy_from_user+0x2e/0xd0 [ 694.756191][T15699] kstrtouint_from_user+0xd6/0x1d0 [ 694.756233][T15699] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 694.756273][T15699] ? __lock_acquire+0xb8a/0x1c90 [ 694.756335][T15699] proc_fail_nth_write+0x83/0x250 [ 694.756376][T15699] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 694.756424][T15699] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 694.756462][T15699] vfs_write+0x29d/0x1150 [ 694.756492][T15699] ? __pfx___mutex_lock+0x10/0x10 [ 694.756521][T15699] ? __pfx_vfs_write+0x10/0x10 [ 694.756558][T15699] ? __fget_files+0x20e/0x3c0 [ 694.756613][T15699] ksys_write+0x12a/0x250 [ 694.756639][T15699] ? __pfx_ksys_write+0x10/0x10 [ 694.756677][T15699] do_syscall_64+0xcd/0x490 [ 694.756708][T15699] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 694.756736][T15699] RIP: 0033:0x7fb82018d45f [ 694.756757][T15699] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 694.756783][T15699] RSP: 002b:00007fb81dfd5030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 694.756809][T15699] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fb82018d45f [ 694.756827][T15699] RDX: 0000000000000001 RSI: 00007fb81dfd50a0 RDI: 000000000000000a [ 694.756844][T15699] RBP: 00007fb81dfd5090 R08: 0000000000000000 R09: 0000000000000000 [ 694.756860][T15699] R10: 00002000000002c0 R11: 0000000000000293 R12: 0000000000000001 [ 694.756878][T15699] R13: 0000000000000001 R14: 00007fb8203b6160 R15: 00007fff807beb58 [ 694.756915][T15699] [ 694.948491][ C0] vkms_vblank_simulate: vblank timer overrun [ 695.304868][T15691] sysfs_service_op_show: Client not running :-5: [ 696.068972][T15713] random: crng reseeded on system resumption [ 696.209346][T15714] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 696.225578][T15714] EXT4-fs (sda1): This should not happen!! Data will be lost [ 696.225578][T15714] [ 697.379444][T15727] sysfs_service_op_store: Client not running :-5: [ 698.306379][T15746] FAULT_INJECTION: forcing a failure. [ 698.306379][T15746] name failslab, interval 1, probability 0, space 0, times 0 [ 698.319031][T15746] CPU: 1 UID: 0 PID: 15746 Comm: syz.1.1964 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 698.319058][T15746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 698.319070][T15746] Call Trace: [ 698.319077][T15746] [ 698.319085][T15746] dump_stack_lvl+0x16c/0x1f0 [ 698.319109][T15746] should_fail_ex+0x512/0x640 [ 698.319135][T15746] should_failslab+0xc2/0x120 [ 698.319159][T15746] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 698.319182][T15746] ? radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 698.319218][T15746] radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 698.319255][T15746] idr_get_free+0x528/0xa30 [ 698.319298][T15746] idr_alloc_u32+0x190/0x2f0 [ 698.319332][T15746] ? __pfx_idr_alloc_u32+0x10/0x10 [ 698.319368][T15746] ? lock_acquire+0x179/0x350 [ 698.319403][T15746] idr_alloc_cyclic+0x10b/0x230 [ 698.319438][T15746] ? __pfx_idr_alloc_cyclic+0x10/0x10 [ 698.319470][T15746] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 698.319511][T15746] map_create+0x9aa/0x1db0 [ 698.319551][T15746] ? __pfx_map_create+0x10/0x10 [ 698.319580][T15746] ? __might_fault+0xe3/0x190 [ 698.319599][T15746] ? __might_fault+0xe3/0x190 [ 698.319618][T15746] ? __might_fault+0x13b/0x190 [ 698.319647][T15746] __sys_bpf+0x4d8d/0x4ea0 [ 698.319668][T15746] ? __pfx___sys_bpf+0x10/0x10 [ 698.319685][T15746] ? vfs_write+0x15d/0x1150 [ 698.319710][T15746] ? do_futex+0x122/0x350 [ 698.319741][T15746] ? __pfx_do_futex+0x10/0x10 [ 698.319781][T15746] ? xfd_validate_state+0x61/0x180 [ 698.319808][T15746] ? __pfx_ksys_write+0x10/0x10 [ 698.319833][T15746] __x64_sys_bpf+0x78/0xc0 [ 698.319851][T15746] ? lockdep_hardirqs_on+0x7c/0x110 [ 698.319871][T15746] do_syscall_64+0xcd/0x490 [ 698.319894][T15746] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 698.319915][T15746] RIP: 0033:0x7fcec578e9a9 [ 698.319931][T15746] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 698.319951][T15746] RSP: 002b:00007fcec6560038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 698.319971][T15746] RAX: ffffffffffffffda RBX: 00007fcec59b5fa0 RCX: 00007fcec578e9a9 [ 698.319985][T15746] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 0000000000000000 [ 698.319997][T15746] RBP: 00007fcec5810d69 R08: 0000000000000000 R09: 0000000000000000 [ 698.320010][T15746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 698.320022][T15746] R13: 0000000000000000 R14: 00007fcec59b5fa0 R15: 00007fff5e13d138 [ 698.320048][T15746] [ 698.582734][ T13] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 698.597900][ T13] EXT4-fs (sda1): This should not happen!! Data will be lost [ 698.597900][ T13] [ 698.906567][T15727] sysfs_service_op_show: Client not running :-5: [ 699.451375][T15762] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input85 [ 699.619639][T15765] FAULT_INJECTION: forcing a failure. [ 699.619639][T15765] name failslab, interval 1, probability 0, space 0, times 0 [ 699.637054][T15765] CPU: 1 UID: 0 PID: 15765 Comm: syz.3.1967 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 699.637088][T15765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 699.637103][T15765] Call Trace: [ 699.637112][T15765] [ 699.637122][T15765] dump_stack_lvl+0x16c/0x1f0 [ 699.637154][T15765] should_fail_ex+0x512/0x640 [ 699.637181][T15765] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 699.637215][T15765] should_failslab+0xc2/0x120 [ 699.637249][T15765] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 699.637279][T15765] ? __alloc_skb+0x2b2/0x380 [ 699.637311][T15765] __alloc_skb+0x2b2/0x380 [ 699.637337][T15765] ? __pfx___alloc_skb+0x10/0x10 [ 699.637363][T15765] ? genl_rcv_msg+0x4bb/0x800 [ 699.637412][T15765] netlink_ack+0x15d/0xb80 [ 699.637448][T15765] ? __lock_acquire+0x622/0x1c90 [ 699.637494][T15765] netlink_rcv_skb+0x332/0x420 [ 699.637528][T15765] ? __pfx_genl_rcv_msg+0x10/0x10 [ 699.637569][T15765] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 699.637630][T15765] ? netlink_deliver_tap+0x1ae/0xd30 [ 699.637661][T15765] ? is_vmalloc_addr+0x86/0xa0 [ 699.637694][T15765] genl_rcv+0x28/0x40 [ 699.637728][T15765] netlink_unicast+0x58d/0x850 [ 699.637768][T15765] ? __pfx_netlink_unicast+0x10/0x10 [ 699.637814][T15765] netlink_sendmsg+0x8d1/0xdd0 [ 699.637854][T15765] ? __pfx_netlink_sendmsg+0x10/0x10 [ 699.637903][T15765] ____sys_sendmsg+0xa98/0xc70 [ 699.637942][T15765] ? copy_msghdr_from_user+0x10a/0x160 [ 699.637973][T15765] ? __pfx_____sys_sendmsg+0x10/0x10 [ 699.638029][T15765] ___sys_sendmsg+0x134/0x1d0 [ 699.638061][T15765] ? __pfx____sys_sendmsg+0x10/0x10 [ 699.638088][T15765] ? __lock_acquire+0x622/0x1c90 [ 699.638171][T15765] __sys_sendmsg+0x16d/0x220 [ 699.638201][T15765] ? __pfx___sys_sendmsg+0x10/0x10 [ 699.638255][T15765] do_syscall_64+0xcd/0x490 [ 699.638287][T15765] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 699.638315][T15765] RIP: 0033:0x7fb82018e9a9 [ 699.638336][T15765] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 699.638363][T15765] RSP: 002b:00007fb820f20038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 699.638388][T15765] RAX: ffffffffffffffda RBX: 00007fb8203b5fa0 RCX: 00007fb82018e9a9 [ 699.638405][T15765] RDX: 0000000000000080 RSI: 0000200000004080 RDI: 0000000000000003 [ 699.638421][T15765] RBP: 00007fb820f20090 R08: 0000000000000000 R09: 0000000000000000 [ 699.638436][T15765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 699.638451][T15765] R13: 0000000000000000 R14: 00007fb8203b5fa0 R15: 00007fff807beb58 [ 699.638486][T15765] [ 700.472944][T15771] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 700.492693][T15771] EXT4-fs (sda1): This should not happen!! Data will be lost [ 700.492693][T15771] [ 701.034252][T15776] EXT4-fs error (device sda1): ext4_discard_preallocations:5601: comm syz.2.1972: Error -117 reading block bitmap for 5 [ 701.078481][T15763] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input86 [ 702.994393][T15803] FAULT_INJECTION: forcing a failure. [ 702.994393][T15803] name failslab, interval 1, probability 0, space 0, times 0 [ 703.007049][T15803] CPU: 1 UID: 0 PID: 15803 Comm: syz.1.1976 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 703.007075][T15803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 703.007090][T15803] Call Trace: [ 703.007099][T15803] [ 703.007110][T15803] dump_stack_lvl+0x16c/0x1f0 [ 703.007144][T15803] should_fail_ex+0x512/0x640 [ 703.007178][T15803] should_failslab+0xc2/0x120 [ 703.007204][T15803] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 703.007226][T15803] ? radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 703.007263][T15803] radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 703.007301][T15803] idr_get_free+0x528/0xa30 [ 703.007343][T15803] idr_alloc_u32+0x190/0x2f0 [ 703.007379][T15803] ? __pfx_idr_alloc_u32+0x10/0x10 [ 703.007414][T15803] ? lock_acquire+0x179/0x350 [ 703.007454][T15803] idr_alloc_cyclic+0x10b/0x230 [ 703.007502][T15803] ? __pfx_idr_alloc_cyclic+0x10/0x10 [ 703.007538][T15803] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 703.007585][T15803] map_create+0x9aa/0x1db0 [ 703.007625][T15803] ? __pfx_map_create+0x10/0x10 [ 703.007654][T15803] ? __might_fault+0xe3/0x190 [ 703.007674][T15803] ? __might_fault+0xe3/0x190 [ 703.007692][T15803] ? __might_fault+0x13b/0x190 [ 703.007721][T15803] __sys_bpf+0x4d8d/0x4ea0 [ 703.007743][T15803] ? __pfx___sys_bpf+0x10/0x10 [ 703.007760][T15803] ? vfs_write+0x15d/0x1150 [ 703.007785][T15803] ? do_futex+0x122/0x350 [ 703.007811][T15803] ? __pfx_do_futex+0x10/0x10 [ 703.007850][T15803] ? xfd_validate_state+0x61/0x180 [ 703.007878][T15803] ? __pfx_ksys_write+0x10/0x10 [ 703.007902][T15803] __x64_sys_bpf+0x78/0xc0 [ 703.007920][T15803] ? lockdep_hardirqs_on+0x7c/0x110 [ 703.007940][T15803] do_syscall_64+0xcd/0x490 [ 703.007963][T15803] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 703.007988][T15803] RIP: 0033:0x7fcec578e9a9 [ 703.008004][T15803] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 703.008024][T15803] RSP: 002b:00007fcec6560038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 703.008043][T15803] RAX: ffffffffffffffda RBX: 00007fcec59b5fa0 RCX: 00007fcec578e9a9 [ 703.008056][T15803] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 0000000000000000 [ 703.008068][T15803] RBP: 00007fcec5810d69 R08: 0000000000000000 R09: 0000000000000000 [ 703.008080][T15803] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 703.008092][T15803] R13: 0000000000000000 R14: 00007fcec59b5fa0 R15: 00007fff5e13d138 [ 703.008118][T15803] [ 703.256817][ C1] vkms_vblank_simulate: vblank timer overrun [ 703.906397][T15817] sysfs_service_op_store: Client not running :-5: [ 703.977920][T15818] netlink: zone id is out of range [ 704.160771][T15818] netlink: del zone limit has 4 unknown bytes [ 704.324208][T15816] netlink: set zone limit has 8 unknown bytes [ 704.410495][T15825] sysfs_service_op_show: Client not running :-5: [ 704.848040][T15833] sysfs_service_op_store: Client not running :-5: [ 704.908918][T15817] sysfs_service_op_show: Client not running :-5: [ 705.527381][T15840] sysfs_service_op_show: Client not running :-5: [ 705.710358][T15833] sysfs_service_op_show: Client not running :-5: [ 706.906455][T15860] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input87 [ 707.468201][T15861] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input88 [ 709.001085][T15889] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input89 [ 709.386794][T15896] sysfs_service_op_store: Client not running :-5: [ 709.544603][T15890] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input90 [ 709.830796][T15896] sysfs_service_op_show: Client not running :-5: [ 713.653414][T15946] FAULT_INJECTION: forcing a failure. [ 713.653414][T15946] name failslab, interval 1, probability 0, space 0, times 0 [ 713.697602][T15946] CPU: 0 UID: 0 PID: 15946 Comm: syz.1.2005 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 713.697641][T15946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 713.697659][T15946] Call Trace: [ 713.697668][T15946] [ 713.697681][T15946] dump_stack_lvl+0x16c/0x1f0 [ 713.697717][T15946] should_fail_ex+0x512/0x640 [ 713.697745][T15946] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 713.697780][T15946] should_failslab+0xc2/0x120 [ 713.697813][T15946] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 713.697845][T15946] ? __d_alloc+0x31/0xaa0 [ 713.697881][T15946] __d_alloc+0x31/0xaa0 [ 713.697915][T15946] d_alloc_pseudo+0x1c/0xc0 [ 713.697954][T15946] alloc_file_pseudo+0xcf/0x230 [ 713.697994][T15946] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 713.698033][T15946] ? _raw_spin_unlock+0x28/0x50 [ 713.698075][T15946] ? alloc_fd+0x471/0x7d0 [ 713.698122][T15946] __anon_inode_getfile+0xe8/0x280 [ 713.698172][T15946] anon_inode_getfd+0x52/0xb0 [ 713.698220][T15946] map_create+0xb68/0x1db0 [ 713.698274][T15946] ? __pfx_map_create+0x10/0x10 [ 713.698321][T15946] ? __might_fault+0xe3/0x190 [ 713.698349][T15946] ? __might_fault+0xe3/0x190 [ 713.698374][T15946] ? __might_fault+0x13b/0x190 [ 713.698416][T15946] __sys_bpf+0x4d8d/0x4ea0 [ 713.698447][T15946] ? __pfx___sys_bpf+0x10/0x10 [ 713.698471][T15946] ? vfs_write+0x15d/0x1150 [ 713.698505][T15946] ? do_futex+0x122/0x350 [ 713.698541][T15946] ? __pfx_do_futex+0x10/0x10 [ 713.698597][T15946] ? xfd_validate_state+0x61/0x180 [ 713.698635][T15946] ? __pfx_ksys_write+0x10/0x10 [ 713.698669][T15946] __x64_sys_bpf+0x78/0xc0 [ 713.698695][T15946] ? lockdep_hardirqs_on+0x7c/0x110 [ 713.698722][T15946] do_syscall_64+0xcd/0x490 [ 713.698754][T15946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 713.698783][T15946] RIP: 0033:0x7fcec578e9a9 [ 713.698805][T15946] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 713.698833][T15946] RSP: 002b:00007fcec6560038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 713.698859][T15946] RAX: ffffffffffffffda RBX: 00007fcec59b5fa0 RCX: 00007fcec578e9a9 [ 713.698877][T15946] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 0000000000000000 [ 713.698895][T15946] RBP: 00007fcec5810d69 R08: 0000000000000000 R09: 0000000000000000 [ 713.698913][T15946] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 713.698929][T15946] R13: 0000000000000000 R14: 00007fcec59b5fa0 R15: 00007fff5e13d138 [ 713.698965][T15946] [ 714.378713][T15953] sysfs_service_op_store: Client not running :-5: [ 714.801418][T15956] sysfs_service_op_show: Client not running :-5: [ 716.290918][T15963] busy [ 716.904439][T15986] FAULT_INJECTION: forcing a failure. [ 716.904439][T15986] name failslab, interval 1, probability 0, space 0, times 0 [ 716.917221][T15986] CPU: 0 UID: 0 PID: 15986 Comm: syz.1.2015 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 716.917256][T15986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 716.917280][T15986] Call Trace: [ 716.917290][T15986] [ 716.917301][T15986] dump_stack_lvl+0x16c/0x1f0 [ 716.917336][T15986] should_fail_ex+0x512/0x640 [ 716.917373][T15986] should_failslab+0xc2/0x120 [ 716.917408][T15986] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 716.917441][T15986] ? radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 716.917491][T15986] radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 716.917542][T15986] idr_get_free+0x528/0xa30 [ 716.917601][T15986] idr_alloc_u32+0x190/0x2f0 [ 716.917650][T15986] ? __pfx_idr_alloc_u32+0x10/0x10 [ 716.917699][T15986] ? lock_acquire+0x179/0x350 [ 716.917747][T15986] idr_alloc_cyclic+0x10b/0x230 [ 716.917794][T15986] ? __pfx_idr_alloc_cyclic+0x10/0x10 [ 716.917838][T15986] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 716.917895][T15986] map_create+0x9aa/0x1db0 [ 716.917950][T15986] ? __pfx_map_create+0x10/0x10 [ 716.917991][T15986] ? __might_fault+0xe3/0x190 [ 716.918017][T15986] ? __might_fault+0xe3/0x190 [ 716.918042][T15986] ? __might_fault+0x13b/0x190 [ 716.918085][T15986] __sys_bpf+0x4d8d/0x4ea0 [ 716.918108][T15986] ? __pfx_futex_wake+0x10/0x10 [ 716.918148][T15986] ? __pfx___sys_bpf+0x10/0x10 [ 716.918169][T15986] ? vfs_write+0x15d/0x1150 [ 716.918202][T15986] ? do_futex+0x122/0x350 [ 716.918233][T15986] ? __pfx_do_futex+0x10/0x10 [ 716.918293][T15986] ? xfd_validate_state+0x61/0x180 [ 716.918328][T15986] ? __pfx_ksys_write+0x10/0x10 [ 716.918359][T15986] __x64_sys_bpf+0x78/0xc0 [ 716.918383][T15986] ? lockdep_hardirqs_on+0x7c/0x110 [ 716.918409][T15986] do_syscall_64+0xcd/0x490 [ 716.918439][T15986] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 716.918466][T15986] RIP: 0033:0x7fcec578e9a9 [ 716.918486][T15986] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 716.918514][T15986] RSP: 002b:00007fcec6560038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 716.918540][T15986] RAX: ffffffffffffffda RBX: 00007fcec59b5fa0 RCX: 00007fcec578e9a9 [ 716.918558][T15986] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 0000000000000000 [ 716.918574][T15986] RBP: 00007fcec5810d69 R08: 0000000000000000 R09: 0000000000000000 [ 716.918590][T15986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 716.918604][T15986] R13: 0000000000000000 R14: 00007fcec59b5fa0 R15: 00007fff5e13d138 [ 716.918640][T15986] [ 717.986891][T16003] sysfs_service_op_store: Client not running :-5: [ 718.810064][T16003] sysfs_service_op_show: Client not running :-5: [ 718.826063][T16015] sysfs_service_op_store: Client not running :-5: [ 719.577726][T16015] sysfs_service_op_show: Client not running :-5: [ 720.848251][T16032] FAULT_INJECTION: forcing a failure. [ 720.848251][T16032] name failslab, interval 1, probability 0, space 0, times 0 [ 720.860931][T16032] CPU: 1 UID: 0 PID: 16032 Comm: syz.3.2027 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 720.860964][T16032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 720.860977][T16032] Call Trace: [ 720.860985][T16032] [ 720.860992][T16032] dump_stack_lvl+0x16c/0x1f0 [ 720.861017][T16032] should_fail_ex+0x512/0x640 [ 720.861042][T16032] should_failslab+0xc2/0x120 [ 720.861067][T16032] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 720.861090][T16032] ? radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 720.861126][T16032] radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 720.861163][T16032] idr_get_free+0x528/0xa30 [ 720.861206][T16032] idr_alloc_u32+0x190/0x2f0 [ 720.861241][T16032] ? __pfx_idr_alloc_u32+0x10/0x10 [ 720.861277][T16032] ? lock_acquire+0x179/0x350 [ 720.861312][T16032] idr_alloc_cyclic+0x10b/0x230 [ 720.861347][T16032] ? __pfx_idr_alloc_cyclic+0x10/0x10 [ 720.861379][T16032] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 720.861420][T16032] map_create+0x9aa/0x1db0 [ 720.861460][T16032] ? __pfx_map_create+0x10/0x10 [ 720.861489][T16032] ? __might_fault+0xe3/0x190 [ 720.861509][T16032] ? __might_fault+0xe3/0x190 [ 720.861527][T16032] ? __might_fault+0x13b/0x190 [ 720.861557][T16032] __sys_bpf+0x4d8d/0x4ea0 [ 720.861578][T16032] ? __pfx___sys_bpf+0x10/0x10 [ 720.861595][T16032] ? vfs_write+0x15d/0x1150 [ 720.861620][T16032] ? do_futex+0x122/0x350 [ 720.861646][T16032] ? __pfx_do_futex+0x10/0x10 [ 720.861685][T16032] ? xfd_validate_state+0x61/0x180 [ 720.861712][T16032] ? __pfx_ksys_write+0x10/0x10 [ 720.861739][T16032] __x64_sys_bpf+0x78/0xc0 [ 720.861757][T16032] ? lockdep_hardirqs_on+0x7c/0x110 [ 720.861776][T16032] do_syscall_64+0xcd/0x490 [ 720.861800][T16032] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 720.861839][T16032] RIP: 0033:0x7fb82018e9a9 [ 720.861858][T16032] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 720.861882][T16032] RSP: 002b:00007fb820f20038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 720.861904][T16032] RAX: ffffffffffffffda RBX: 00007fb8203b5fa0 RCX: 00007fb82018e9a9 [ 720.861920][T16032] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 0000000000000000 [ 720.861935][T16032] RBP: 00007fb820210d69 R08: 0000000000000000 R09: 0000000000000000 [ 720.861950][T16032] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 720.861970][T16032] R13: 0000000000000000 R14: 00007fb8203b5fa0 R15: 00007fff807beb58 [ 720.862000][T16032] [ 720.864655][T16029] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input91 [ 722.091228][T16048] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input92 [ 725.800877][T16097] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input93 [ 726.405346][T16098] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input94 [ 728.803862][T16114] sysfs_service_op_store: Client not running :-5: [ 728.933777][T16121] sysfs_service_op_store: Client not running :-5: [ 730.613584][T16142] sp0: Synchronizing with TNC [ 730.914308][T16148] sp0: Synchronizing with TNC [ 731.507200][T16157] sysfs_service_op_store: Client not running :-5: [ 732.135958][T16158] sysfs_service_op_show: Client not running :-5: [ 732.671380][T16168] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input95 [ 733.257265][T16180] cifs: Unknown parameter 'T.żc[$⁍)UÑnE-ʙl- -_5Z omfwYh*/xDlݩgkǐA79Xa/f_ARxM vp$^;q3n-6+ek [ 739.907208][T16272] dump_stack_lvl+0x16c/0x1f0 [ 739.907247][T16272] should_fail_ex+0x512/0x640 [ 739.907287][T16272] should_failslab+0xc2/0x120 [ 739.907328][T16272] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 739.907364][T16272] ? radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 739.907421][T16272] radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 739.907481][T16272] idr_get_free+0x528/0xa30 [ 739.907549][T16272] idr_alloc_u32+0x190/0x2f0 [ 739.907605][T16272] ? __pfx_idr_alloc_u32+0x10/0x10 [ 739.907662][T16272] ? lock_acquire+0x179/0x350 [ 739.907716][T16272] idr_alloc_cyclic+0x10b/0x230 [ 739.907772][T16272] ? __pfx_idr_alloc_cyclic+0x10/0x10 [ 739.907822][T16272] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 739.907888][T16272] map_create+0x9aa/0x1db0 [ 739.907952][T16272] ? __pfx_map_create+0x10/0x10 [ 739.907997][T16272] ? __might_fault+0xe3/0x190 [ 739.908028][T16272] ? __might_fault+0xe3/0x190 [ 739.908057][T16272] ? __might_fault+0x13b/0x190 [ 739.908106][T16272] __sys_bpf+0x4d8d/0x4ea0 [ 739.908154][T16272] ? __pfx___sys_bpf+0x10/0x10 [ 739.908182][T16272] ? vfs_write+0x15d/0x1150 [ 739.908224][T16272] ? do_futex+0x122/0x350 [ 739.908266][T16272] ? __pfx_do_futex+0x10/0x10 [ 739.908332][T16272] ? xfd_validate_state+0x61/0x180 [ 739.908376][T16272] ? __pfx_ksys_write+0x10/0x10 [ 739.908416][T16272] __x64_sys_bpf+0x78/0xc0 [ 739.908446][T16272] ? lockdep_hardirqs_on+0x7c/0x110 [ 739.908478][T16272] do_syscall_64+0xcd/0x490 [ 739.908515][T16272] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 739.908549][T16272] RIP: 0033:0x7fb82018e9a9 [ 739.908574][T16272] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 739.908606][T16272] RSP: 002b:00007fb820f20038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 739.908636][T16272] RAX: ffffffffffffffda RBX: 00007fb8203b5fa0 RCX: 00007fb82018e9a9 [ 739.908658][T16272] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 0000000000000000 [ 739.908677][T16272] RBP: 00007fb820210d69 R08: 0000000000000000 R09: 0000000000000000 [ 739.908697][T16272] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 739.908716][T16272] R13: 0000000000000000 R14: 00007fb8203b5fa0 R15: 00007fff807beb58 [ 739.908758][T16272] [ 741.245400][T16289] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input96 [ 742.141018][T16301] sysfs_service_op_store: Client not running :-5: [ 742.838056][T16301] sysfs_service_op_show: Client not running :-5: [ 744.973106][T16320] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz.1.2086: bg 1: bad block bitmap checksum [ 745.002797][T16320] EXT4-fs error (device sda1) in ext4_mb_clear_bb:6548: Filesystem failed CRC [ 746.006091][T16335] netlink: 'syz.1.2090': attribute type 1 has an invalid length. [ 747.647260][T16368] FAULT_INJECTION: forcing a failure. [ 747.647260][T16368] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 747.756052][T16368] CPU: 1 UID: 0 PID: 16368 Comm: syz.0.2095 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 747.756096][T16368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 747.756115][T16368] Call Trace: [ 747.756125][T16368] [ 747.756137][T16368] dump_stack_lvl+0x16c/0x1f0 [ 747.756186][T16368] should_fail_ex+0x512/0x640 [ 747.756231][T16368] _copy_to_user+0x32/0xd0 [ 747.756271][T16368] simple_read_from_buffer+0xcb/0x170 [ 747.756324][T16368] proc_fail_nth_read+0x197/0x270 [ 747.756372][T16368] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 747.756419][T16368] ? rw_verify_area+0xcf/0x680 [ 747.756468][T16368] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 747.756514][T16368] vfs_read+0x1e4/0xc60 [ 747.756549][T16368] ? __pfx___mutex_lock+0x10/0x10 [ 747.756584][T16368] ? __pfx_vfs_read+0x10/0x10 [ 747.756627][T16368] ? __fget_files+0x20e/0x3c0 [ 747.756690][T16368] ksys_read+0x12a/0x250 [ 747.756720][T16368] ? __pfx_ksys_read+0x10/0x10 [ 747.756763][T16368] do_syscall_64+0xcd/0x490 [ 747.756800][T16368] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 747.756833][T16368] RIP: 0033:0x7fa3da98d3bc [ 747.756858][T16368] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 747.756887][T16368] RSP: 002b:00007fa3db868030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 747.756914][T16368] RAX: ffffffffffffffda RBX: 00007fa3dabb5fa0 RCX: 00007fa3da98d3bc [ 747.756933][T16368] RDX: 000000000000000f RSI: 00007fa3db8680a0 RDI: 0000000000000004 [ 747.756950][T16368] RBP: 00007fa3db868090 R08: 0000000000000000 R09: 0000000000000000 [ 747.756967][T16368] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 747.756985][T16368] R13: 0000000000000000 R14: 00007fa3dabb5fa0 R15: 00007ffc1802dba8 [ 747.757024][T16368] [ 748.715740][T16380] kvm: kvm [16377]: vcpu2, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010007) = 0xffffffffffffffff [ 752.020707][T16422] FAULT_INJECTION: forcing a failure. [ 752.020707][T16422] name failslab, interval 1, probability 0, space 0, times 0 [ 752.033446][T16422] CPU: 1 UID: 0 PID: 16422 Comm: syz.0.2105 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 752.033481][T16422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 752.033499][T16422] Call Trace: [ 752.033508][T16422] [ 752.033519][T16422] dump_stack_lvl+0x16c/0x1f0 [ 752.033553][T16422] should_fail_ex+0x512/0x640 [ 752.033588][T16422] should_failslab+0xc2/0x120 [ 752.033623][T16422] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 752.033654][T16422] ? radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 752.033703][T16422] radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 752.033752][T16422] idr_get_free+0x528/0xa30 [ 752.033808][T16422] idr_alloc_u32+0x190/0x2f0 [ 752.033855][T16422] ? __pfx_idr_alloc_u32+0x10/0x10 [ 752.033904][T16422] ? lock_acquire+0x179/0x350 [ 752.033951][T16422] idr_alloc_cyclic+0x10b/0x230 [ 752.033996][T16422] ? __pfx_idr_alloc_cyclic+0x10/0x10 [ 752.034046][T16422] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 752.034103][T16422] map_create+0x9aa/0x1db0 [ 752.034158][T16422] ? __pfx_map_create+0x10/0x10 [ 752.034196][T16422] ? __might_fault+0xe3/0x190 [ 752.034222][T16422] ? __might_fault+0xe3/0x190 [ 752.034247][T16422] ? __might_fault+0x13b/0x190 [ 752.034289][T16422] __sys_bpf+0x4d8d/0x4ea0 [ 752.034319][T16422] ? __pfx___sys_bpf+0x10/0x10 [ 752.034342][T16422] ? vfs_write+0x15d/0x1150 [ 752.034377][T16422] ? do_futex+0x122/0x350 [ 752.034412][T16422] ? __pfx_do_futex+0x10/0x10 [ 752.034467][T16422] ? xfd_validate_state+0x61/0x180 [ 752.034503][T16422] ? __pfx_ksys_write+0x10/0x10 [ 752.034537][T16422] __x64_sys_bpf+0x78/0xc0 [ 752.034563][T16422] ? lockdep_hardirqs_on+0x7c/0x110 [ 752.034589][T16422] do_syscall_64+0xcd/0x490 [ 752.034620][T16422] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 752.034648][T16422] RIP: 0033:0x7fa3da98e9a9 [ 752.034670][T16422] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 752.034698][T16422] RSP: 002b:00007fa3db868038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 752.034725][T16422] RAX: ffffffffffffffda RBX: 00007fa3dabb5fa0 RCX: 00007fa3da98e9a9 [ 752.034743][T16422] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 0000000000000000 [ 752.034761][T16422] RBP: 00007fa3daa10d69 R08: 0000000000000000 R09: 0000000000000000 [ 752.034778][T16422] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 752.034794][T16422] R13: 0000000000000000 R14: 00007fa3dabb5fa0 R15: 00007ffc1802dba8 [ 752.034830][T16422] [ 752.287120][ C1] vkms_vblank_simulate: vblank timer overrun [ 752.603273][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 752.613297][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 753.084658][T16427] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input97 [ 753.342478][T16433] sysfs_service_op_store: Client not running :-5: [ 754.368168][T16433] sysfs_service_op_show: Client not running :-5: [ 755.384153][T16448] sysfs_service_op_store: Client not running :-5: [ 755.829627][T16448] sysfs_service_op_show: Client not running :-5: [ 755.854633][T16456] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input98 [ 760.270085][T16498] FAULT_INJECTION: forcing a failure. [ 760.270085][T16498] name failslab, interval 1, probability 0, space 0, times 0 [ 760.282851][T16498] CPU: 1 UID: 0 PID: 16498 Comm: syz.2.2121 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 760.282891][T16498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 760.282910][T16498] Call Trace: [ 760.282920][T16498] [ 760.282932][T16498] dump_stack_lvl+0x16c/0x1f0 [ 760.282969][T16498] should_fail_ex+0x512/0x640 [ 760.283019][T16498] should_failslab+0xc2/0x120 [ 760.283051][T16498] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 760.283082][T16498] ? radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 760.283131][T16498] radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 760.283180][T16498] idr_get_free+0x528/0xa30 [ 760.283238][T16498] idr_alloc_u32+0x190/0x2f0 [ 760.283292][T16498] ? __pfx_idr_alloc_u32+0x10/0x10 [ 760.283341][T16498] ? lock_acquire+0x179/0x350 [ 760.283390][T16498] idr_alloc_cyclic+0x10b/0x230 [ 760.283439][T16498] ? __pfx_idr_alloc_cyclic+0x10/0x10 [ 760.283483][T16498] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 760.283540][T16498] map_create+0x9aa/0x1db0 [ 760.283594][T16498] ? __pfx_map_create+0x10/0x10 [ 760.283635][T16498] ? __might_fault+0xe3/0x190 [ 760.283662][T16498] ? __might_fault+0xe3/0x190 [ 760.283688][T16498] ? __might_fault+0x13b/0x190 [ 760.283731][T16498] __sys_bpf+0x4d8d/0x4ea0 [ 760.283761][T16498] ? __pfx___sys_bpf+0x10/0x10 [ 760.283785][T16498] ? vfs_write+0x15d/0x1150 [ 760.283821][T16498] ? do_futex+0x122/0x350 [ 760.283857][T16498] ? __pfx_do_futex+0x10/0x10 [ 760.283912][T16498] ? xfd_validate_state+0x61/0x180 [ 760.283951][T16498] ? __pfx_ksys_write+0x10/0x10 [ 760.283986][T16498] __x64_sys_bpf+0x78/0xc0 [ 760.284011][T16498] ? lockdep_hardirqs_on+0x7c/0x110 [ 760.284038][T16498] do_syscall_64+0xcd/0x490 [ 760.284070][T16498] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 760.284100][T16498] RIP: 0033:0x7f24c1f8e9a9 [ 760.284122][T16498] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 760.284150][T16498] RSP: 002b:00007f24bfdf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 760.284176][T16498] RAX: ffffffffffffffda RBX: 00007f24c21b5fa0 RCX: 00007f24c1f8e9a9 [ 760.284195][T16498] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 0000000000000000 [ 760.284211][T16498] RBP: 00007f24c2010d69 R08: 0000000000000000 R09: 0000000000000000 [ 760.284228][T16498] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 760.284244][T16498] R13: 0000000000000000 R14: 00007f24c21b5fa0 R15: 00007ffd13610558 [ 760.284288][T16498] [ 760.537192][ C1] vkms_vblank_simulate: vblank timer overrun [ 764.113203][T16545] FAULT_INJECTION: forcing a failure. [ 764.113203][T16545] name failslab, interval 1, probability 0, space 0, times 0 [ 764.125925][T16545] CPU: 1 UID: 0 PID: 16545 Comm: syz.0.2131 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 764.125961][T16545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 764.125978][T16545] Call Trace: [ 764.125986][T16545] [ 764.125997][T16545] dump_stack_lvl+0x16c/0x1f0 [ 764.126031][T16545] should_fail_ex+0x512/0x640 [ 764.126067][T16545] should_failslab+0xc2/0x120 [ 764.126100][T16545] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 764.126131][T16545] ? radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 764.126182][T16545] radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 764.126232][T16545] idr_get_free+0x528/0xa30 [ 764.126290][T16545] idr_alloc_u32+0x190/0x2f0 [ 764.126337][T16545] ? __pfx_idr_alloc_u32+0x10/0x10 [ 764.126385][T16545] ? lock_acquire+0x179/0x350 [ 764.126431][T16545] idr_alloc_cyclic+0x10b/0x230 [ 764.126478][T16545] ? __pfx_idr_alloc_cyclic+0x10/0x10 [ 764.126521][T16545] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 764.126577][T16545] map_create+0x9aa/0x1db0 [ 764.126632][T16545] ? __pfx_map_create+0x10/0x10 [ 764.126671][T16545] ? __might_fault+0xe3/0x190 [ 764.126699][T16545] ? __might_fault+0xe3/0x190 [ 764.126723][T16545] ? __might_fault+0x13b/0x190 [ 764.126761][T16545] __sys_bpf+0x4d8d/0x4ea0 [ 764.126783][T16545] ? __pfx_futex_wake+0x10/0x10 [ 764.126824][T16545] ? __pfx___sys_bpf+0x10/0x10 [ 764.126847][T16545] ? vfs_write+0x15d/0x1150 [ 764.126880][T16545] ? do_futex+0x122/0x350 [ 764.126921][T16545] ? __pfx_do_futex+0x10/0x10 [ 764.126974][T16545] ? xfd_validate_state+0x61/0x180 [ 764.127011][T16545] ? __pfx_ksys_write+0x10/0x10 [ 764.127043][T16545] __x64_sys_bpf+0x78/0xc0 [ 764.127067][T16545] ? lockdep_hardirqs_on+0x7c/0x110 [ 764.127093][T16545] do_syscall_64+0xcd/0x490 [ 764.127124][T16545] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 764.127153][T16545] RIP: 0033:0x7fa3da98e9a9 [ 764.127174][T16545] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 764.127201][T16545] RSP: 002b:00007fa3db868038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 764.127228][T16545] RAX: ffffffffffffffda RBX: 00007fa3dabb5fa0 RCX: 00007fa3da98e9a9 [ 764.127246][T16545] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 0000000000000000 [ 764.127262][T16545] RBP: 00007fa3daa10d69 R08: 0000000000000000 R09: 0000000000000000 [ 764.127278][T16545] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 764.127294][T16545] R13: 0000000000000000 R14: 00007fa3dabb5fa0 R15: 00007ffc1802dba8 [ 764.127331][T16545] [ 764.642824][T16554] sysfs_service_op_store: Client not running :-5: [ 766.232750][T16554] sysfs_service_op_show: Client not running :-5: [ 766.810956][T16575] FAULT_INJECTION: forcing a failure. [ 766.810956][T16575] name failslab, interval 1, probability 0, space 0, times 0 [ 766.985773][T16575] CPU: 0 UID: 0 PID: 16575 Comm: syz.0.2136 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 766.985814][T16575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 766.985830][T16575] Call Trace: [ 766.985839][T16575] [ 766.985850][T16575] dump_stack_lvl+0x16c/0x1f0 [ 766.985888][T16575] should_fail_ex+0x512/0x640 [ 766.985916][T16575] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 766.985956][T16575] should_failslab+0xc2/0x120 [ 766.985989][T16575] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 766.986026][T16575] ? kstrdup_const+0x63/0x80 [ 766.986061][T16575] kstrdup+0x53/0x100 [ 766.986092][T16575] kstrdup_const+0x63/0x80 [ 766.986121][T16575] __kernfs_new_node+0x9b/0x8e0 [ 766.986168][T16575] ? trace_event_raw_event_ishtp_dump+0x109/0x260 [ 766.986204][T16575] ? __pfx___kernfs_new_node+0x10/0x10 [ 766.986258][T16575] ? find_held_lock+0x2b/0x80 [ 766.986290][T16575] ? kernfs_root+0xee/0x2a0 [ 766.986323][T16575] kernfs_new_node+0x13c/0x1e0 [ 766.986355][T16575] ? net_ns_get_ownership+0xf8/0x1b0 [ 766.986400][T16575] kernfs_create_dir_ns+0x4c/0x1a0 [ 766.986438][T16575] sysfs_create_dir_ns+0x13a/0x2b0 [ 766.986484][T16575] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 766.986526][T16575] ? find_held_lock+0x2b/0x80 [ 766.986559][T16575] ? net_namespace+0x12/0x50 [ 766.986592][T16575] ? device_namespace+0x76/0xa0 [ 766.986631][T16575] kobject_add_internal+0x2c4/0x9b0 [ 766.986673][T16575] kobject_add+0x16e/0x240 [ 766.986706][T16575] ? __pfx_kobject_add+0x10/0x10 [ 766.986740][T16575] ? get_device_parent+0x1c5/0x4e0 [ 766.986775][T16575] ? kobject_put+0xab/0x5a0 [ 766.986816][T16575] device_add+0x288/0x1a70 [ 766.986853][T16575] ? __pfx_dev_set_name+0x10/0x10 [ 766.986894][T16575] ? __pfx_device_add+0x10/0x10 [ 766.986932][T16575] ? lockdep_init_map_type+0x5c/0x280 [ 766.986973][T16575] ? __init_waitqueue_head+0xca/0x150 [ 766.987011][T16575] netdev_register_kobject+0x182/0x3a0 [ 766.987053][T16575] register_netdevice+0x13dc/0x2270 [ 766.987095][T16575] ? __pfx_register_netdevice+0x10/0x10 [ 766.987139][T16575] ? __pfx_loopback_net_init+0x10/0x10 [ 766.987182][T16575] register_netdev+0x34/0x50 [ 766.987215][T16575] loopback_net_init+0x7a/0x170 [ 766.987257][T16575] ? __pfx_loopback_net_init+0x10/0x10 [ 766.987296][T16575] ops_init+0x1df/0x5f0 [ 766.987332][T16575] setup_net+0x1ff/0x510 [ 766.987362][T16575] ? lockdep_init_map_type+0x5c/0x280 [ 766.987411][T16575] ? __pfx_setup_net+0x10/0x10 [ 766.987446][T16575] ? debug_mutex_init+0x37/0x70 [ 766.987479][T16575] copy_net_ns+0x2a6/0x5f0 [ 766.987519][T16575] create_new_namespaces+0x3ea/0xa90 [ 766.987560][T16575] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 766.987598][T16575] ksys_unshare+0x45b/0xa40 [ 766.987638][T16575] ? __pfx_ksys_unshare+0x10/0x10 [ 766.987678][T16575] ? xfd_validate_state+0x61/0x180 [ 766.987727][T16575] __x64_sys_unshare+0x31/0x40 [ 766.987766][T16575] do_syscall_64+0xcd/0x490 [ 766.987798][T16575] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 766.987827][T16575] RIP: 0033:0x7fa3da98e9a9 [ 766.987851][T16575] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 766.987879][T16575] RSP: 002b:00007fa3db868038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 766.987906][T16575] RAX: ffffffffffffffda RBX: 00007fa3dabb5fa0 RCX: 00007fa3da98e9a9 [ 766.987923][T16575] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 766.987940][T16575] RBP: 00007fa3daa10d69 R08: 0000000000000000 R09: 0000000000000000 [ 766.987956][T16575] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 766.987971][T16575] R13: 0000000000000000 R14: 00007fa3dabb5fa0 R15: 00007ffc1802dba8 [ 766.988007][T16575] [ 766.988021][T16575] kobject: kobject_add_internal failed for lo (error: -12 parent: net) [ 769.751872][ T30] audit: type=1804 audit(1843104782.260:17): pid=16596 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.2139" name="/newroot/sys/kernel/debug/tracing/per_cpu/cpu1/trace" dev="tracefs" ino=144 res=1 errno=0 [ 769.884217][ T30] audit: type=1804 audit(1843104782.380:18): pid=16603 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.2140" name="/newroot/sys/kernel/debug/tracing/per_cpu/cpu1/trace" dev="tracefs" ino=144 res=1 errno=0 [ 770.355046][T16609] sysfs_service_op_store: Client not running :-5: [ 770.772046][T16614] FAULT_INJECTION: forcing a failure. [ 770.772046][T16614] name failslab, interval 1, probability 0, space 0, times 0 [ 770.784742][T16614] CPU: 1 UID: 0 PID: 16614 Comm: syz.2.2142 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 770.784768][T16614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 770.784781][T16614] Call Trace: [ 770.784788][T16614] [ 770.784796][T16614] dump_stack_lvl+0x16c/0x1f0 [ 770.784821][T16614] should_fail_ex+0x512/0x640 [ 770.784846][T16614] should_failslab+0xc2/0x120 [ 770.784871][T16614] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 770.784893][T16614] ? radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 770.784929][T16614] radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 770.784966][T16614] idr_get_free+0x528/0xa30 [ 770.785007][T16614] idr_alloc_u32+0x190/0x2f0 [ 770.785042][T16614] ? __pfx_idr_alloc_u32+0x10/0x10 [ 770.785078][T16614] ? lock_acquire+0x179/0x350 [ 770.785112][T16614] idr_alloc_cyclic+0x10b/0x230 [ 770.785147][T16614] ? __pfx_idr_alloc_cyclic+0x10/0x10 [ 770.785179][T16614] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 770.785219][T16614] map_create+0x9aa/0x1db0 [ 770.785259][T16614] ? __pfx_map_create+0x10/0x10 [ 770.785294][T16614] ? __might_fault+0xe3/0x190 [ 770.785313][T16614] ? __might_fault+0xe3/0x190 [ 770.785332][T16614] ? __might_fault+0x13b/0x190 [ 770.785361][T16614] __sys_bpf+0x4d8d/0x4ea0 [ 770.785378][T16614] ? __pfx_futex_wake+0x10/0x10 [ 770.785410][T16614] ? __pfx___sys_bpf+0x10/0x10 [ 770.785427][T16614] ? vfs_write+0x15d/0x1150 [ 770.785453][T16614] ? do_futex+0x122/0x350 [ 770.785478][T16614] ? __pfx_do_futex+0x10/0x10 [ 770.785518][T16614] ? xfd_validate_state+0x61/0x180 [ 770.785545][T16614] ? __pfx_ksys_write+0x10/0x10 [ 770.785568][T16614] __x64_sys_bpf+0x78/0xc0 [ 770.785587][T16614] ? lockdep_hardirqs_on+0x7c/0x110 [ 770.785606][T16614] do_syscall_64+0xcd/0x490 [ 770.785629][T16614] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 770.785650][T16614] RIP: 0033:0x7f24c1f8e9a9 [ 770.785666][T16614] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 770.785687][T16614] RSP: 002b:00007f24bfdf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 770.785706][T16614] RAX: ffffffffffffffda RBX: 00007f24c21b5fa0 RCX: 00007f24c1f8e9a9 [ 770.785720][T16614] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 0000000000000000 [ 770.785733][T16614] RBP: 00007f24c2010d69 R08: 0000000000000000 R09: 0000000000000000 [ 770.785746][T16614] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 770.785758][T16614] R13: 0000000000000000 R14: 00007f24c21b5fa0 R15: 00007ffd13610558 [ 770.785784][T16614] [ 771.225536][T16609] sysfs_service_op_show: Client not running :-5: [ 771.797768][T16624] sysfs_service_op_store: Client not running :-5: [ 772.930912][T16624] sysfs_service_op_show: Client not running :-5: [ 773.453134][T16635] sysfs_service_op_store: Client not running :-5: [ 773.492674][T16635] sysfs_service_op_store: Client not running :-5: [ 773.991998][T16635] sysfs_service_op_show: Client not running :-5: [ 777.971518][T16684] sysfs_service_op_store: Client not running :-5: [ 778.502758][T16686] sysfs_service_op_show: Client not running :-5: [ 778.834892][T16688] [ 778.837281][T16688] ====================================================== [ 778.844325][T16688] WARNING: possible circular locking dependency detected [ 778.851366][T16688] 6.16.0-rc7-syzkaller #0 Not tainted [ 778.856751][T16688] ------------------------------------------------------ [ 778.863770][T16688] syz.1.2154/16688 is trying to acquire lock: [ 778.869838][T16688] ffff88814279fb40 (&q->elevator_lock){+.+.}-{4:4}, at: queue_requests_store+0x1c7/0x310 [ 778.879705][T16688] [ 778.879705][T16688] but task is already holding lock: [ 778.887076][T16688] ffff88814279f608 (&q->q_usage_counter(io)#26){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 778.898349][T16688] [ 778.898349][T16688] which lock already depends on the new lock. [ 778.898349][T16688] [ 778.908757][T16688] [ 778.908757][T16688] the existing dependency chain (in reverse order) is: [ 778.917774][T16688] [ 778.917774][T16688] -> #3 (&q->q_usage_counter(io)#26){++++}-{0:0}: [ 778.926408][T16688] blk_alloc_queue+0x619/0x760 [ 778.931723][T16688] blk_mq_alloc_queue+0x175/0x290 [ 778.937298][T16688] __blk_mq_alloc_disk+0x29/0x120 [ 778.942877][T16688] loop_add+0x49e/0xb70 [ 778.947594][T16688] loop_init+0x164/0x270 [ 778.952391][T16688] do_one_initcall+0x120/0x6e0 [ 778.957709][T16688] kernel_init_freeable+0x5c2/0x900 [ 778.963467][T16688] kernel_init+0x1c/0x2b0 [ 778.968340][T16688] ret_from_fork+0x5d7/0x6f0 [ 778.973495][T16688] ret_from_fork_asm+0x1a/0x30 [ 778.978799][T16688] [ 778.978799][T16688] -> #2 (fs_reclaim){+.+.}-{0:0}: [ 778.986037][T16688] fs_reclaim_acquire+0x102/0x150 [ 778.991608][T16688] prepare_alloc_pages+0x162/0x610 [ 778.997268][T16688] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 779.003695][T16688] __alloc_pages_noprof+0xb/0x1b0 [ 779.009261][T16688] pcpu_populate_chunk+0x110/0xb00 [ 779.014936][T16688] pcpu_alloc_noprof+0x86a/0x1470 [ 779.020492][T16688] xt_percpu_counter_alloc+0x13e/0x1b0 [ 779.026497][T16688] find_check_entry.constprop.0+0xbf/0xa20 [ 779.032860][T16688] translate_table+0xd0b/0x17b0 [ 779.038274][T16688] ip6t_register_table+0x102/0x430 [ 779.043938][T16688] ip6table_security_table_init+0x40/0x60 [ 779.050207][T16688] xt_find_table_lock+0x2e4/0x520 [ 779.055781][T16688] xt_request_find_table_lock+0x28/0xf0 [ 779.061882][T16688] get_info+0x190/0x620 [ 779.066590][T16688] do_ip6t_get_ctl+0x169/0xa50 [ 779.071905][T16688] nf_getsockopt+0x79/0xe0 [ 779.076872][T16688] ipv6_getsockopt+0x1f7/0x280 [ 779.082188][T16688] tcp_getsockopt+0x9e/0x100 [ 779.087330][T16688] do_sock_getsockopt+0x34a/0x440 [ 779.092929][T16688] __sys_getsockopt+0x123/0x1b0 [ 779.098341][T16688] __x64_sys_getsockopt+0xbd/0x160 [ 779.104001][T16688] do_syscall_64+0xcd/0x490 [ 779.109045][T16688] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 779.115478][T16688] [ 779.115478][T16688] -> #1 (pcpu_alloc_mutex){+.+.}-{4:4}: [ 779.123241][T16688] __mutex_lock+0x199/0xb90 [ 779.128293][T16688] pcpu_alloc_noprof+0xb4c/0x1470 [ 779.133852][T16688] sbitmap_init_node+0x2fd/0x770 [ 779.139331][T16688] sbitmap_queue_init_node+0x41/0x560 [ 779.145249][T16688] blk_mq_init_tags+0x12d/0x2b0 [ 779.150636][T16688] blk_mq_alloc_map_and_rqs+0x237/0xf60 [ 779.156732][T16688] blk_mq_init_sched+0x30c/0x610 [ 779.162220][T16688] elevator_switch+0x1e1/0x7f0 [ 779.167546][T16688] elevator_change+0x2ac/0x400 [ 779.172863][T16688] elevator_set_default+0x292/0x320 [ 779.178618][T16688] blk_register_queue+0x393/0x4f0 [ 779.184185][T16688] __add_disk+0x74a/0xf00 [ 779.189049][T16688] add_disk_fwnode+0x13f/0x5d0 [ 779.194344][T16688] nbd_dev_add+0x791/0xbc0 [ 779.199298][T16688] nbd_init+0x181/0x320 [ 779.204006][T16688] do_one_initcall+0x120/0x6e0 [ 779.209308][T16688] kernel_init_freeable+0x5c2/0x900 [ 779.215053][T16688] kernel_init+0x1c/0x2b0 [ 779.219926][T16688] ret_from_fork+0x5d7/0x6f0 [ 779.225062][T16688] ret_from_fork_asm+0x1a/0x30 [ 779.230362][T16688] [ 779.230362][T16688] -> #0 (&q->elevator_lock){+.+.}-{4:4}: [ 779.238241][T16688] __lock_acquire+0x126f/0x1c90 [ 779.243639][T16688] lock_acquire+0x179/0x350 [ 779.248687][T16688] __mutex_lock+0x199/0xb90 [ 779.253723][T16688] queue_requests_store+0x1c7/0x310 [ 779.259473][T16688] queue_attr_store+0x279/0x320 [ 779.264864][T16688] sysfs_kf_write+0xf2/0x150 [ 779.269996][T16688] kernfs_fop_write_iter+0x354/0x510 [ 779.275820][T16688] iter_file_splice_write+0x91c/0x1150 [ 779.281847][T16688] direct_splice_actor+0x18f/0x6c0 [ 779.287517][T16688] splice_direct_to_actor+0x342/0xa30 [ 779.293453][T16688] do_splice_direct+0x174/0x240 [ 779.298849][T16688] do_sendfile+0xb06/0xe50 [ 779.303836][T16688] __x64_sys_sendfile64+0x1d8/0x220 [ 779.309574][T16688] do_syscall_64+0xcd/0x490 [ 779.314611][T16688] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 779.321039][T16688] [ 779.321039][T16688] other info that might help us debug this: [ 779.321039][T16688] [ 779.331275][T16688] Chain exists of: [ 779.331275][T16688] &q->elevator_lock --> fs_reclaim --> &q->q_usage_counter(io)#26 [ 779.331275][T16688] [ 779.345155][T16688] Possible unsafe locking scenario: [ 779.345155][T16688] [ 779.352637][T16688] CPU0 CPU1 [ 779.358014][T16688] ---- ---- [ 779.363382][T16688] lock(&q->q_usage_counter(io)#26); [ 779.368778][T16688] lock(fs_reclaim); [ 779.375301][T16688] lock(&q->q_usage_counter(io)#26); [ 779.383216][T16688] lock(&q->elevator_lock); [ 779.387825][T16688] [ 779.387825][T16688] *** DEADLOCK *** [ 779.387825][T16688] [ 779.395967][T16688] 5 locks held by syz.1.2154/16688: [ 779.401166][T16688] #0: ffff88803194a428 (sb_writers#7){.+.+}-{0:0}, at: splice_direct_to_actor+0x342/0xa30 [ 779.411238][T16688] #1: ffff88805d52d488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x510 [ 779.421027][T16688] #2: ffff888142b1c008 (kn->active#276){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2b2/0x510 [ 779.431175][T16688] #3: ffff88814279f608 (&q->q_usage_counter(io)#26){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 779.442896][T16688] #4: ffff88814279f640 (&q->q_usage_counter(queue)#22){+.+.}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 779.454921][T16688] [ 779.454921][T16688] stack backtrace: [ 779.460819][T16688] CPU: 1 UID: 0 PID: 16688 Comm: syz.1.2154 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 779.460849][T16688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 779.460864][T16688] Call Trace: [ 779.460872][T16688] [ 779.460881][T16688] dump_stack_lvl+0x116/0x1f0 [ 779.460907][T16688] print_circular_bug+0x275/0x350 [ 779.460942][T16688] check_noncircular+0x14c/0x170 [ 779.460978][T16688] __lock_acquire+0x126f/0x1c90 [ 779.461014][T16688] ? __lock_acquire+0xb8a/0x1c90 [ 779.461058][T16688] lock_acquire+0x179/0x350 [ 779.461089][T16688] ? queue_requests_store+0x1c7/0x310 [ 779.461117][T16688] ? __pfx___might_resched+0x10/0x10 [ 779.461160][T16688] ? do_raw_spin_lock+0x12c/0x2b0 [ 779.461200][T16688] __mutex_lock+0x199/0xb90 [ 779.461239][T16688] ? queue_requests_store+0x1c7/0x310 [ 779.461267][T16688] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 779.461302][T16688] ? queue_requests_store+0x1c7/0x310 [ 779.461328][T16688] ? lockdep_hardirqs_on+0x7c/0x110 [ 779.461349][T16688] ? __pfx___mutex_lock+0x10/0x10 [ 779.461376][T16688] ? __pfx_autoremove_wake_function+0x10/0x10 [ 779.461408][T16688] ? queue_requests_store+0x1c7/0x310 [ 779.461435][T16688] queue_requests_store+0x1c7/0x310 [ 779.461462][T16688] ? __pfx_queue_requests_store+0x10/0x10 [ 779.461494][T16688] ? __mutex_trylock_common+0xe9/0x250 [ 779.461533][T16688] ? __pfx_queue_requests_store+0x10/0x10 [ 779.461563][T16688] queue_attr_store+0x279/0x320 [ 779.461591][T16688] ? __pfx_queue_attr_store+0x10/0x10 [ 779.461615][T16688] ? __lock_acquire+0x622/0x1c90 [ 779.461653][T16688] ? find_held_lock+0x2b/0x80 [ 779.461676][T16688] ? sysfs_file_kobj+0xe4/0x290 [ 779.461728][T16688] ? __pfx_queue_attr_store+0x10/0x10 [ 779.461754][T16688] sysfs_kf_write+0xf2/0x150 [ 779.461793][T16688] kernfs_fop_write_iter+0x354/0x510 [ 779.461824][T16688] ? __pfx_sysfs_kf_write+0x10/0x10 [ 779.461880][T16688] iter_file_splice_write+0x91c/0x1150 [ 779.461933][T16688] ? __pfx_iter_file_splice_write+0x10/0x10 [ 779.461979][T16688] ? __pfx_copy_splice_read+0x10/0x10 [ 779.462028][T16688] ? __pfx_iter_file_splice_write+0x10/0x10 [ 779.462073][T16688] direct_splice_actor+0x18f/0x6c0 [ 779.462116][T16688] splice_direct_to_actor+0x342/0xa30 [ 779.462158][T16688] ? __pfx_direct_splice_actor+0x10/0x10 [ 779.462203][T16688] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 779.462256][T16688] do_splice_direct+0x174/0x240 [ 779.462296][T16688] ? __pfx_do_splice_direct+0x10/0x10 [ 779.462337][T16688] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 779.462380][T16688] ? rw_verify_area+0xcf/0x680 [ 779.462422][T16688] do_sendfile+0xb06/0xe50 [ 779.462468][T16688] ? __pfx_do_sendfile+0x10/0x10 [ 779.462513][T16688] ? __x64_sys_futex+0x1e0/0x4c0 [ 779.462546][T16688] ? __x64_sys_futex+0x1e9/0x4c0 [ 779.462581][T16688] __x64_sys_sendfile64+0x1d8/0x220 [ 779.462618][T16688] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 779.462656][T16688] do_syscall_64+0xcd/0x490 [ 779.462684][T16688] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 779.462713][T16688] RIP: 0033:0x7fcec578e9a9 [ 779.462734][T16688] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 779.462760][T16688] RSP: 002b:00007fcec651e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 779.462784][T16688] RAX: ffffffffffffffda RBX: 00007fcec59b6160 RCX: 00007fcec578e9a9 [ 779.462802][T16688] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000005 [ 779.462818][T16688] RBP: 00007fcec5810d69 R08: 0000000000000000 R09: 0000000000000000 [ 779.462834][T16688] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 779.462850][T16688] R13: 0000000000000000 R14: 00007fcec59b6160 R15: 00007fff5e13d138 [ 779.462875][T16688] [ 780.673746][T16677] nvme_fabrics: missing parameter 'transport=%s' [ 780.680218][T16677] nvme_fabrics: missing parameter 'nqn=%s'