last executing test programs: 5m48.124098214s ago: executing program 2 (id=3182): close_range$auto(0xffffffffffffffff, 0xfffffffffffff000, 0x4) openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = socket(0x1e, 0x3, 0x9) socket(0xa, 0x2, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x0) openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x8800, 0x0) socket(0xa, 0x2, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x2, 0x0) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x787806, 0x0) r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x80000, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000140)={{@raw=0x80000000, 0x305, 0x1, 0x8, "3112d598004a614d19e22af9ffb683dbede3d0bf828bbfba40f035f4be6b7fe000900000000000755015e48d", @raw=0x4}, 0x3, 0x5, 0x4, @inferred, @integer={0x0, 0xfffffffffffffff9, 0x8}, "7a9fc199a16a2311eacf2fc7ae1da978dc3e8090334fdd7327b386425608af790ada71bdd70925450e24e87212f0bcab84a16f7ce8cbce0bb32777702b8d7c2d"}) close_range$auto(0x2, 0x8, 0x0) r3 = socket(0x10, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRES8=r0, @ANYRES8=r1], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x2000c082) write$auto(r3, &(0x7f0000000000)='-\x00', 0xfdef) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/ip_forward\x00', 0x2002, 0x0) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/rpc/nfsd.fh/flush\x00', 0xc8201, 0x0) write$auto(r4, 0x0, 0x6) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/ip_local_port_range\x00', 0x20202, 0x0) r5 = socket(0x15, 0x5, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x7, 0x800008000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) ustat$auto(0x801, 0x0) sendmsg$auto(r5, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0xb, 0x0, 0x1, 0x8}, 0x0) close_range$auto(0x2, 0x8, 0x0) 5m47.571446198s ago: executing program 2 (id=3184): openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000001040)='/proc/asound/card1/pcm1c/sub7/info\x00', 0x28102, 0x0) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) ioctl$auto_XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000000400)={{r0, &(0x7f0000000040)="0cb10a01f16fa40000", 0x1d2, &(0x7f0000000680)="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", 0x5, &(0x7f0000000480)="73ec254c65b023ed144b628407d7c5d6b9d7d9b442127ffe1160e8f2703624fb37e5a081d6331dfb0e324fb777b1405d588c257e7c71519872996faa3bee427f4a2b1c17c794a75e2741295e73a9c66cf2", &(0x7f0000000280)=0x20004}, {[0x52f, 0xf03, 0x9, 0x505]}, 0x5, 0x4, &(0x7f0000000840)="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"}) read$auto_regulator_summary_fops_(r1, &(0x7f0000001080)=""/4096, 0x1000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) bpf$auto(0x5, &(0x7f0000001540)=@bpf_attr_3={0x9, 0x4, 0x10000, 0x1, 0x9, 0x80000000, 0x3, 0x1000, 0x10000, "06dbde4e070000001b0000000800", 0x0, 0x6, 0x2, 0x100, 0x0, 0x81, 0x200, 0x1, 0x4, 0x5, @attach_prog_fd, 0x5, 0x1ff, 0x100000002, 0x101, 0xe4, 0x6}, 0x1000) msgctl$auto_IPC_RMID(0x10001, 0x0, &(0x7f0000000500)={{0x5, 0xee00, 0xffffffffffffffff, 0x9, 0x6, 0x100, 0xb8b6}, &(0x7f0000000180)=0x9e, &(0x7f00000002c0)=0xc, 0x8, 0x89a, 0xfbe, 0x8, 0x5e, 0x7fff, 0xffa7, 0x7fff, @raw=0x81}) r3 = setfsgid$auto(0xee01) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r4 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) semctl$auto_IPC_INFO(0x8, 0x5, 0x3, 0x7) r5 = fcntl$auto(r4, 0x6, 0x0) r6 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/locks\x00', 0x0, 0x0) read$auto_proc_iter_file_ops_compat_inode(r6, &(0x7f0000000180)=""/250, 0xfa) setresgid$auto(r3, 0x0, 0x0) fchownat$auto(r1, &(0x7f0000000140)='./file0\x00', r2, r3, 0x6) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/admmidi2\x00', 0x216000, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/tty35\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(r5, r0, 0xfffffffd) socket(0x10, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r7 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000100), 0x4100c0, 0x0) prctl$auto(0x23, 0x7, 0x2008, 0x0, 0x0) ioctl$auto_KVM_CREATE_VM(r7, 0xae01, 0x0) 5m47.21645763s ago: executing program 2 (id=3187): r0 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000580)='/dev/mtd0\x00', 0x1, 0x0) ioctl$auto_MEMERASE64(r0, 0x5452, &(0x7f0000000100)={0x8, 0xffffffffffffffff}) 5m47.061818692s ago: executing program 2 (id=3188): mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = prctl$auto(0x5, 0x1, 0x4, 0xb, 0x7) msgrcv$auto(0x60000000, &(0x7f0000000000)={0xef, 0xdf}, 0x9, 0x40, 0x4) r1 = semctl$auto_GETPID(0xfffffffa, 0x401, 0xb, 0x8) pidfd_send_signal$auto(r0, 0x8001, &(0x7f0000000340)={@siginfo_0_0={0x2af, 0x9, 0x49, @_sigchld={r1, 0xee00, 0x8, 0x31bd0352, 0x2}}}, 0x9) shmctl$auto_IPC_SET(0x5, 0x1, &(0x7f00000001c0)={{0x92e, 0xee01, 0xee00, 0xe, 0x400, 0xe1a1}, 0xfff, 0xff, 0x6, 0x4dd4382b, @inferred, @raw=0xffffffff, 0x1, 0x0, &(0x7f0000000040)="f8ba55f7a6dd0bb9e067071df75b680571c1005c40d7ba7500e9f14bde4f70d1c07b18fc9d0906a997ee15d86c8b7fb2837affbefd9e2696af950f232c2b480ab8a82cc77481d5cd7df3728d671ade989c434b7dcc61e71c6642830a1b4caa69f41a190e44bea51229c26d4f3d4c8b49f45c909ad70f76b10fed2c0c4bdfca714a60cd40", &(0x7f0000000100)="f9e09e6541279d221a3d608414090c945e4187c1b9a00fdb6c271d3e815102753aaf57b0b9b5c4b7889ce63b8959442afe61fc0b526eaef708939c6dc6c4270fc5d3f4c775e1fe234dbec2b0daa0c7cfd4d128d427ab00b369b9b38b8faf6d144d56aa44cd68a778f2dbafa7e2b753e052f9ac9dcbf71270e48d43c7290111548551a8ed0c33ea93308886ff5d311dc2e6f3d8b2376466c5c8396889f30ee8654e6288ead58624943ada6a8fd029"}) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/devices.deny\x00', 0x8ea182, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000000)='B', 0x1) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty51\x00', 0x40001, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) write$auto(0x3, 0x0, 0xfdef) ioctl$auto(0x3, 0x540a, r4) shmctl$auto_SHM_STAT_ANY(0x6, 0xf, &(0x7f00000002c0)={{0x4, 0x0, 0xee00, 0x80000001, 0xffffff0d, 0x80, 0x3}, 0x426c, 0x4, 0x6b, 0x8b, @inferred, @raw=0xfffff6e5, 0x2, 0x0, &(0x7f0000000240)="3ce3ba61838f8c584065c781b218e6da915559eda66814c0b4f660fb9f8489fea7b57dfdf592de8950f47b081a9d485dbedc77ade0d5ccd7b15793", &(0x7f0000000280)="ec1a870dc78b20e69eb413c17d110c1c934653c6903b9566feea7241f1c93a507ce9f118df"}) keyctl$auto_KEYCTL_CHOWN(0x4, 0x6, r2, r5, 0xbb24) 5m46.771342102s ago: executing program 2 (id=3193): close_range$auto(0xffffffffffffffff, 0xfffffffffffff000, 0x4) openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = socket(0x1e, 0x3, 0x9) socket(0xa, 0x2, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x0) openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x8800, 0x0) socket(0xa, 0x2, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x2, 0x0) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x787806, 0x0) r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x80000, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000140)={{@raw=0x80000000, 0x305, 0x1, 0x8, "3112d598004a614d19e22af9ffb683dbede3d0bf828bbfba40f035f4be6b7fe000900000000000755015e48d", @raw=0x4}, 0x3, 0x5, 0x4, @inferred, @integer={0x0, 0xfffffffffffffff9, 0x8}, "7a9fc199a16a2311eacf2fc7ae1da978dc3e8090334fdd7327b386425608af790ada71bdd70925450e24e87212f0bcab84a16f7ce8cbce0bb32777702b8d7c2d"}) close_range$auto(0x2, 0x8, 0x0) r3 = socket(0x10, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRES8=r0, @ANYRES8=r1], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x2000c082) write$auto(r3, &(0x7f0000000000)='-\x00', 0xfdef) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/ip_forward\x00', 0x2002, 0x0) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/rpc/nfsd.fh/flush\x00', 0xc8201, 0x0) write$auto(r4, 0x0, 0x6) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/ip_local_port_range\x00', 0x20202, 0x0) r5 = socket(0x15, 0x5, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x7, 0x800008000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) ustat$auto(0x801, 0x0) sendmsg$auto(r5, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0xb, 0x0, 0x1, 0x8}, 0x0) close_range$auto(0x2, 0x8, 0x0) 5m45.901586966s ago: executing program 2 (id=3197): getsid$auto(0x0) (async) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000600)='/proc/sys/vm/dirty_background_bytes\x00', 0x81, 0x0) write$auto_proc_sys_file_operations_proc_sysctl(r0, 0x0, 0x0) (async) socket(0xa, 0x3, 0x3a) (async) mmap$auto(0x0, 0x9, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async) r1 = openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, &(0x7f0000000600)='/proc/thread-self/clear_refs\x00', 0x2, 0x0) (async) r2 = socket(0x10, 0x2, 0x0) (async) r3 = socket(0x2c, 0xa, 0x8) (async) r4 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async) mmap$auto(0x0, 0x202000d, 0x8000000002, 0xeb1, 0xffffffffffffffff, 0x8000) r5 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) connect$auto(0x4, 0x0, 0x10) sendmsg$auto_NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010028bd2e3a6f2cc59a9409b4ad9fce00001c001e8018002280080046800400f7800a003786ed244c17"], 0x30}, 0x1, 0x0, 0x0, 0x20008000}, 0x8044) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB=']'], 0x1ac}}, 0x40000) (async) openat$auto_dfs_dom_ops_debugfs(0xffffffffffffff9c, &(0x7f0000000180), 0x2206a2, 0x0) (async) recvmmsg$auto(r2, &(0x7f0000000140)={{0x0, 0x1, &(0x7f0000000080)={0x0, 0x400}, 0x5, 0x0, 0x200002, 0x5}, 0x803}, 0xfffffff9, 0x10, 0x0) write$auto_proc_clear_refs_operations_internal(r1, 0x0, 0xffffff4b) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async) ioctl$NS_GET_PARENT(r5, 0xb702, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) (async) setresuid$auto(0x2, 0x7, 0x8080) openat$auto_dai_list_fops_(0xffffffffffffff9c, &(0x7f00000001c0), 0x200, 0x0) (async) ioctl$auto(0x3, 0x400454ca, 0x38) setsockopt$auto(0x400000000000003, 0x29, 0xd1, 0x0, 0x4) 5m30.438205879s ago: executing program 32 (id=3197): getsid$auto(0x0) (async) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000600)='/proc/sys/vm/dirty_background_bytes\x00', 0x81, 0x0) write$auto_proc_sys_file_operations_proc_sysctl(r0, 0x0, 0x0) (async) socket(0xa, 0x3, 0x3a) (async) mmap$auto(0x0, 0x9, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async) r1 = openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, &(0x7f0000000600)='/proc/thread-self/clear_refs\x00', 0x2, 0x0) (async) r2 = socket(0x10, 0x2, 0x0) (async) r3 = socket(0x2c, 0xa, 0x8) (async) r4 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async) mmap$auto(0x0, 0x202000d, 0x8000000002, 0xeb1, 0xffffffffffffffff, 0x8000) r5 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) connect$auto(0x4, 0x0, 0x10) sendmsg$auto_NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010028bd2e3a6f2cc59a9409b4ad9fce00001c001e8018002280080046800400f7800a003786ed244c17"], 0x30}, 0x1, 0x0, 0x0, 0x20008000}, 0x8044) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB=']'], 0x1ac}}, 0x40000) (async) openat$auto_dfs_dom_ops_debugfs(0xffffffffffffff9c, &(0x7f0000000180), 0x2206a2, 0x0) (async) recvmmsg$auto(r2, &(0x7f0000000140)={{0x0, 0x1, &(0x7f0000000080)={0x0, 0x400}, 0x5, 0x0, 0x200002, 0x5}, 0x803}, 0xfffffff9, 0x10, 0x0) write$auto_proc_clear_refs_operations_internal(r1, 0x0, 0xffffff4b) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async) ioctl$NS_GET_PARENT(r5, 0xb702, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) (async) setresuid$auto(0x2, 0x7, 0x8080) openat$auto_dai_list_fops_(0xffffffffffffff9c, &(0x7f00000001c0), 0x200, 0x0) (async) ioctl$auto(0x3, 0x400454ca, 0x38) setsockopt$auto(0x400000000000003, 0x29, 0xd1, 0x0, 0x4) 3m38.1101634s ago: executing program 1 (id=3703): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x1, 0x400008, 0xffffffffffffffff, 0x11, 0xffffffffffffffff, 0x1000000000008000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r0 = io_uring_setup$auto(0x4, 0x0) close_range$auto(0x2, r0, 0x0) mmap$auto(0x0, 0x2000009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, 0x0, 0x1000, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x2, 0x1, 0x106) read$auto_proc_iter_file_ops_compat_inode(0xffffffffffffffff, &(0x7f0000000180)=""/286, 0x11e) mmap$auto(0x0, 0x8, 0x80000000000000df, 0x10004000eb1, 0x8, 0x8000008000) ioctl$auto_SOUND_MIXER_READ_DEVMASK2(0xffffffffffffffff, 0x80044dfe, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (fail_nth: 8) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) listen$auto(0x3, 0x3) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, 0x0, 0xa2741, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) mkdir$auto(&(0x7f0000000000)='./cgroup.cpu/cpuset.cpus/file0\x00', 0x891) 3m37.032063152s ago: executing program 1 (id=3705): mmap$auto(0x0, 0x2000d, 0x4000000200df, 0xeb1, 0x404, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) r2 = openat$auto_hpet_fops_hpet(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_HPET_IE_OFF(r2, 0x6802, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x20809, 0x4000000000df, 0xeb1, 0x401, 0x8000) madvise$auto_MADV_GUARD_INSTALL(0x0, 0x2021000, 0x66) mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x8000000000000003, 0x8000) mremap$auto(0x0, 0x2, 0x8, 0x3, 0x7effffffb000) ioctl$auto(0x3, 0xae41, r1) ioctl$auto_KVM_GET_MSRS(r0, 0x4008ae89, 0x0) 3m36.273280657s ago: executing program 1 (id=3709): open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x40) execve$auto(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) execve$auto(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) execve$auto(0x0, &(0x7f0000000100)=&(0x7f0000000080)='\xac\x10', 0x0) 3m35.840754419s ago: executing program 1 (id=3711): r0 = openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f000000e680), 0x20000, 0x0) read$auto(r0, 0x0, 0x5) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f00000001c0)=0x6) unshare$auto(0x1) socket(0x1e, 0x1, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x80102, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000005800), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_TX_INFO_FRAME(r3, 0x0, 0x800) mmap$auto(0x0, 0x2020009, 0x8000000003, 0xeb1, 0xfffffffffffffffa, 0x8000) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x1, 0x0) syz_open_procfs$namespace(0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x1, 0x8000) prctl$auto(0x3f, 0x7ff, 0x0, 0x5, 0x5) tgkill$auto(0x0, 0x1, 0x1) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) clone$auto(0x100000000021, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x4) mmap$auto(0x0, 0x3, 0x4000000000df, 0xeb1, 0x401, 0x5) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/memory/memory15/online\x00', 0xa001, 0x0) write$auto(r4, &(0x7f0000000140)='0[.[\x00', 0xcd04) r5 = socket(0x10, 0x2, 0x14) sendmsg$auto_NLBL_MGMT_C_REMOVE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="01002bbddbb0000000000000d311"], 0x14}, 0x1, 0x0, 0x0, 0x44000}, 0x400000c) sysfs$auto(0x2, 0x101000000000007, 0x0) 3m34.071329556s ago: executing program 1 (id=3713): r0 = prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x40000d, 0x3, 0x0, 0x0, 0x2) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) write$auto(0x3, 0x0, 0x100082) syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xeb, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x100002000, 0xd, 0x8fd6, 0x948b, 0x3, 0x1, 0x3, 0x6, 0x2, 0x80000001, 0x7, 0x1, 0xbafd, 0x1, 0x3]}, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, 0x0, 0xa00, 0x0) remap_file_pages$auto(0x1ed, 0x3b5c00, 0x8, 0x5, 0xfffffffffffffffd) close_range$auto(0x2, 0x8, 0x0) readv$auto(r0, &(0x7f0000000200)={&(0x7f0000000180)}, 0x9) syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/time_for_children\x00') openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/bus/usb/040/001\x00', 0x470801, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000004400)='/dev/dsp1\x00', 0x1, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/afs/rootcell\x00', 0x1cb842, 0x0) setsockopt$auto(0xffffffffffffffff, 0x1, 0x1021, 0x0, 0xd) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) socket(0xa, 0x3, 0x6) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="1b000000", @ANYBLOB="1a00279e"], 0x1ac}, 0x1, 0x0, 0x0, 0x20000001}, 0x40000) 3m32.46224299s ago: executing program 1 (id=3716): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) statx$auto(0xffffffffffffffff, 0x0, 0x4, 0x2, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mlock$auto(0x102, 0x80006) mlockall$auto(0x800000000000005) madvise$auto(0x0, 0x200007, 0x19) mmap$auto(0x0, 0x4, 0xffffffffffffffff, 0x400eb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0x5, 0x0) r0 = gettid() syz_clone3(&(0x7f0000000300)={0x8020000, 0x0, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, &(0x7f0000000000)=[r0], 0x1}, 0x58) prctl$auto_PR_TIMER_CREATE_RESTORE_IDS_OFF(0x478, 0x0, r0, 0xfe, 0x4) pipe$auto(0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0x27, 0x0, 0xfffffffc) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/module/pwc/parameters/power_save\x00', 0x800, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xae00, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) socketpair$auto(0x1, 0x3, 0x5, 0x0) ioctl$auto(0x3, 0xc048aec8, r1) r3 = openat$auto_btrfs_ctl_fops_super(0xffffffffffffff9c, &(0x7f0000000080), 0x141b00, 0x0) ioctl$auto_BTRFS_IOC_SCAN_DEV(r3, 0x50009404, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_LISTENER_SET(r4, &(0x7f0000005380)={0x0, 0x0, &(0x7f0000005340)={&(0x7f0000000000)={0x40, r5, 0x1, 0x870bd2b, 0x25dfdbfc, {}, [@NFSD_A_SERVER_SOCK_ADDR={0x2c, 0x1, 0x0, 0x1, [@NFSD_A_SOCK_TRANSPORT_NAME={0x12, 0x2, '!\x06\x00\t\x00\x00\x00\x00\x00\x00\x00\x9c\xb6\x00'}, @NFSD_A_SOCK_ADDR={0x14, 0x1, "df9b201bba5d82e832454bc5b9c949fd"}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x140c4}, 0x20000000) 3m17.320597092s ago: executing program 33 (id=3716): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) statx$auto(0xffffffffffffffff, 0x0, 0x4, 0x2, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mlock$auto(0x102, 0x80006) mlockall$auto(0x800000000000005) madvise$auto(0x0, 0x200007, 0x19) mmap$auto(0x0, 0x4, 0xffffffffffffffff, 0x400eb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0x5, 0x0) r0 = gettid() syz_clone3(&(0x7f0000000300)={0x8020000, 0x0, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, &(0x7f0000000000)=[r0], 0x1}, 0x58) prctl$auto_PR_TIMER_CREATE_RESTORE_IDS_OFF(0x478, 0x0, r0, 0xfe, 0x4) pipe$auto(0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0x27, 0x0, 0xfffffffc) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/module/pwc/parameters/power_save\x00', 0x800, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xae00, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) socketpair$auto(0x1, 0x3, 0x5, 0x0) ioctl$auto(0x3, 0xc048aec8, r1) r3 = openat$auto_btrfs_ctl_fops_super(0xffffffffffffff9c, &(0x7f0000000080), 0x141b00, 0x0) ioctl$auto_BTRFS_IOC_SCAN_DEV(r3, 0x50009404, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_LISTENER_SET(r4, &(0x7f0000005380)={0x0, 0x0, &(0x7f0000005340)={&(0x7f0000000000)={0x40, r5, 0x1, 0x870bd2b, 0x25dfdbfc, {}, [@NFSD_A_SERVER_SOCK_ADDR={0x2c, 0x1, 0x0, 0x1, [@NFSD_A_SOCK_TRANSPORT_NAME={0x12, 0x2, '!\x06\x00\t\x00\x00\x00\x00\x00\x00\x00\x9c\xb6\x00'}, @NFSD_A_SOCK_ADDR={0x14, 0x1, "df9b201bba5d82e832454bc5b9c949fd"}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x140c4}, 0x20000000) 2m44.715541013s ago: executing program 4 (id=3855): r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mremap$auto(0x4000, 0xb8, 0x13fd4, 0x3, 0xfffff000) mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8000, 0x0) sysfs$auto(0x2, 0x100000000000037, 0x0) fsopen$auto(0x0, 0x1) fsconfig$auto(r1, 0x1, &(0x7f00000001c0)='+\x00', &(0x7f0000000280), 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r3, 0x4, 0x7ff) ptrace$auto_PTRACE_SETREGSET(0x4205, r3, 0x2, 0x9193) sendmsg$auto_NL80211_CMD_SET_HW_TIMESTAMP(r0, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0xa00, r2, 0x400, 0x70bd27, 0x25dfdbff, {}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_MAC_MASK={0xae, 0xd7, "ec4785ff90afb8f9f02a3b52f8934222e966ac5b54c5ce40c582f6b76659efdc03358d512ab9c75232f5b6387126fe72b75551bdd3f8479cdf4bd568d6489c0c3ada077ddbbf89ff973404e2d7ed3a8da9e7d7d5d745e96e6a57566c634a7e3ebec12033f87f008d0e85c8935cf05aacb2886bbfddc7c540e9fdc5f252157dd3f427e36abe4ae89bfcb32b4431cfe6469f8238d9f395fb527fbbfae5106135337ef7c398dd8215a8f9fe"}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x8000}, @NL80211_ATTR_IE_RIC={0x5ef, 0xb2, "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"}, @NL80211_ATTR_STA_WME={0x34, 0x81, 0x0, 0x1, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x7}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x1}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x9f}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x1}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x7}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0xa}]}, @NL80211_ATTR_STA_FLAGS={0x2fa, 0x11, 0x0, 0x1, [@typed={0x8, 0x13c, 0x0, 0x0, @fd=r1}, @nested={0x1b7, 0xa0, 0x0, 0x1, [@nested={0x4, 0x144}, @nested={0x4, 0x12e}, @nested={0x4, 0x6d}, @generic="4d272fafdac3085bed5a28c249d30b7abe68a605f42f0375", @generic="f992e7d75fd4805e3b4dd80b3b37b5a73822abf60332de399f0f61a3f4e6c2394123c516bbe554d6576d1b98ccf66a67216e1be7a9", @typed={0x4, 0x26}, @nested={0x4, 0x9e}, @generic="96e262e9919c3e2523ae57d3fc426f2234ea70f8fcd7c41c8fe6f490621290df70abeb4542b6ef1c99bf850d334e4780700aee9d90dc26bd065b1c18b3f4a67ed564547745cd53bfee1eb334baee999f9b7d9c98acf53760f37adbf146db4f95e7e0841481bdc32a7d022aa3ccd48478ff01dfa80a37e7deede84915fa7401e5c3dbeab0d20c2737bdba3bf0856bf0c616e73afcee8317288b151f7a3a4ba6195fd7041cdec95e95c45e7258aee549ff6140447804e006bf60f1d9c1a86ddcd21d96ab69da72a7660c2471493e1792", @generic="d95b78fcade2926e854ccd7925b640d9bde29ca0cc55b239a19c2d6345e4482e17cdef69a9bca0b1e69bf2fd85d1278643abcccbfcfd6dceb1d2632a524f15406f2077040b684a93fe40a3ce398fc38fa0efab741ed4c0faab0f4c10ae17e3275bf03a6a938d7b170e2b6eca6b328417fc2a5bb3f7af22037d582f93562454", @nested={0x4, 0x138}]}, @generic="f7a99dfbbff62fb4b9865b4fc45589c01685eeceb33326a9ea95454c558ce85dfabd36ef5a90f8a92942a1d010e2b65450fc9b85805b80b921d22c3203fb89fa3f73b2584770f46bc05bc124a077464af25e7e755eeeb19b40a7a82b62d3", @generic="efa504826aa822fe7b2b5cd9ced3215eb2f8294158d96a9cf5ce437c0e57b5a6800353452b0a776663df3e0368086cbc5fa927420c6264e6006fc0a2b0d51dc11f6d1fd465e7df2edad5e5a5a8e47ef9a4d638352375e9f50f205681f4790e30d8a7ff4f0ccc406369e4f4751865f75dc70cebca2b61cc7e67f8575b67ac2046b392f0223fa1088a", @typed={0x8, 0xd1, 0x0, 0x0, @uid=0xffffffffffffffff}, @nested={0x28, 0xcc, 0x0, 0x1, [@nested={0x4, 0x4f}, @typed={0x8, 0x11b, 0x0, 0x0, @fd=r1}, @nested={0x4, 0x134}, @typed={0x14, 0x95, 0x0, 0x0, @ipv6=@remote}]}, @nested={0xc, 0x26, 0x0, 0x1, [@nested={0x4, 0x74}, @typed={0x4, 0xb1}]}, @typed={0x6, 0x1f, 0x0, 0x0, @str='+\x00'}, @typed={0x8, 0xa0, 0x0, 0x0, @pid=r3}, @nested={0x4, 0x5}]}, @NL80211_ATTR_SCAN_SSIDS={0x4}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0xd}]}, 0xa00}, 0x1, 0x0, 0x0, 0x4001}, 0x800) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x4002, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0xa, 0x6, 0xf, 0x29f, 0x103, 0x7f, 0x101, 0x6, 0x2000}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x40, 0x76c5, 0x8, 0x100000000}}) madvise$auto(0x0, 0x400053, 0x9) 2m43.242239524s ago: executing program 4 (id=3859): close_range$auto(0xffffffffffffffff, 0xfffffffffffff000, 0x4) openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket(0xa, 0x2, 0x3a) socket(0xa, 0x5, 0x0) openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x8800, 0x0) socket(0xa, 0x2, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x2, 0x0) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x787806, 0x0) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x80000, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = socket(0x10, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRES8, @ANYRES8=r0], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x2000c082) write$auto(r2, &(0x7f0000000000)='-\x00', 0xfdef) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/ip_forward\x00', 0x2002, 0x0) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/rpc/nfsd.fh/flush\x00', 0xc8201, 0x0) write$auto(r3, 0x0, 0x6) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/ip_local_port_range\x00', 0x20202, 0x0) r4 = socket(0x15, 0x5, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x7, 0x800008000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) ustat$auto(0x801, 0x0) sendmsg$auto(r4, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0xb, 0x0, 0x1, 0x8}, 0x0) close_range$auto(0x2, 0x8, 0x0) 2m41.909516975s ago: executing program 4 (id=3863): open(&(0x7f00000000c0)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) flock$auto(0xffffffffffffffff, 0x3) r0 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/025/001\x00', 0x0, 0x0) lseek$auto(0xffffffffffffffff, 0x8009, 0x4) unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x3fd, 0x8000) r1 = prctl$auto(0x6, 0xe, 0x0, 0x68, 0xee43) settimeofday$auto(0x0, &(0x7f0000000000)={0x0, 0x6000}) getsockopt$auto(0xffffffffffffffff, 0x10002, 0x2, 0x0, &(0x7f0000000040)=0x2000000) mmap$auto(0x2000, 0x2020009, 0x80000000, 0x1e, r1, 0x40) r2 = io_uring_setup$auto(0x3, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000340), 0x108800, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) mmap$auto(0x0, 0xfff, 0xdf, 0xeb1, r0, 0x8000) close_range$auto(0x2, 0xa, 0x0) io_uring_setup$auto(0x3ff, 0x0) mmap$auto(0x0, 0x5, 0x329, 0x10011, 0x2, 0x8) mprotect$auto(0x0, 0x5, 0x8) close_range$auto(0x2, 0x8, 0x0) epoll_create$auto(0x5) epoll_ctl$auto(0x5, 0x1, 0x8000000000000000, 0x0) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, 0x0, 0x600000, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyy2\x00', 0x20000, 0x0) ioctl$auto(0x3, 0x80045438, 0x10000000000402) mlock$auto(0x4, 0x9) mmap$auto(0x0, 0x4020009, 0x6, 0x11, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) prctl$auto(0x23, 0xfffffffffffffffd, 0x0, 0x0, 0x0) 2m40.262400537s ago: executing program 4 (id=3867): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8020) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) socket(0xa, 0x1, 0x100) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x181782, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffff7ffffffffffa, 0x8000) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/rpc/auth.rpcsec.context/channel\x00', 0x101002, 0x0) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/scsi/device_info\x00', 0x40100, 0x0) pread64$auto(r1, 0x0, 0x10001, 0x830) write$auto(r0, 0x0, 0x30fe) madvise$auto(0x0, 0x80000001, 0x8) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) r2 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/lru_gen\x00', 0xe89a437005e2c174, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x11a001, 0x0) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0xc, 0x2, 0x6]}, 0x0) mmap$auto(0x0, 0x20007, 0x4000000000df, 0xeb1, 0x401, 0xfffffffffffffffb) pwrite64$auto(0xffffffffffffffff, &(0x7f0000000000)='./cgroup/memory.pressure\x00', 0x6bc, 0x5) unshare$auto(0x80) unshare$auto(0x80) madvise$auto_MADV_MERGEABLE(0xffffffffffffffff, 0x6, 0xc) readahead$auto(r2, 0x3, 0x4) mmap$auto(0x0, 0x4, 0x4000000000df, 0x78, 0x4, 0x300000000000) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000000240), r3) read$auto_u32_array_fops_file(r3, &(0x7f0000000380)=""/230, 0xe6) 2m39.167798552s ago: executing program 4 (id=3869): r0 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000400), 0x14400, 0x0) r1 = prctl$auto_PR_SCHED_CORE_CREATE(0x9, 0x1, 0x0, 0x1, 0x3e26) pidfd_getfd$auto(r0, r1, 0x9) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001a40), r2) r4 = openat$auto_lowpan_control_fops_6lowpan(0xffffffffffffff9c, &(0x7f0000000000), 0x80100, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) get_robust_list$auto(0x1, 0x0, 0x0) read$auto_lowpan_control_fops_6lowpan(r4, &(0x7f0000000080)=""/12, 0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000440)={'wg1\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r2, &(0x7f0000002f40)={0x0, 0x0, &(0x7f0000002f00)={&(0x7f0000001ac0)={0x2c, r3, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@ETHTOOL_A_CABLE_TEST_TDR_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_CABLE_TEST_TDR_CFG={0xc, 0x2, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @uid}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24040000}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) move_mount$auto(0xffffffffffffff9c, 0x0, 0xffffffffffffffff, &(0x7f0000000280)='\x00', 0x67) r7 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000740), 0xffffffffffffffff) r8 = openat$auto_mISDN_fops_timerdev(0xffffffffffffff9c, &(0x7f0000000180), 0x31d800, 0x0) ioctl$auto_IMADDTIMER(r8, 0x80044940, &(0x7f00000001c0)=0x9) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f00000001c0)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0\xa3\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14', 0x5, 0x0) ioperm$auto(0x5, 0x0, 0xc) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$auto_tcp_metrics(&(0x7f0000000300), r2) sendmsg$auto_TCP_METRICS_CMD_GET(r10, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r11, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@TCP_METRICS_ATTR_SADDR_IPV4={0x8, 0xb, @loopback}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040010}, 0x40020) umount2$auto(&(0x7f0000000480)='.\x00\xf8\x9b\x90h\xb2\x8b8\x9d\x89;\xael\x99\xf8\xb3\xf8\x98U\xbf\x9c\xf0G\x01f\xa7\xefH+\xc6\xb6\xb5\xcf\x06\x91\xd6\xecw\xd0\xcfmL\x90\xc8Z\xbc\rK+\x11_\x99\x9a\xe4\xb3\xd2BK\xd5\xeaX\x8du\x11_\xf5\xe8;P\xdb\xa7\xa6W\xe8sx\xa7\b\xfb\xe4\xb1M\x8f\xc2\xe9\xca\x94\xce\xd1\xe3\xd3O3\x17\xff\x10\xe4\xf8[\xa4\xc8H\xb7\xd3K\xeb\xfe\v\xe3\x9b\xd1p:n\f\x91\xa7c\x89\x1aqj\xdc\xd2\t\xc0\x92\xe3\xee\x8c\xea\xdcF\xdd\xb3k\xef:N\xb9\xd4r\xf0\x12\x9d\xbc\xef\x1c\x9b`@\xbe\xf1\xcb\v\xff\xe61%\x06y\xb4\x10\x8e\n\xd8\xf9\x91j\xb7_\x87+\a\xe0\xc0\x893|/<\xe8\x90\xb5\xd6F@]\x9b\xb0\x05A\xe5U!HNT5\xd0\xe5\xa0\xb9\xcc({\xea\xa7@RI\x1b\xc4 \x94\x89*\xc5\xe0\xec\x04\x17\xe5=\x00'/238, 0x4aa81) mmap$auto(0x4, 0x40009, 0xdf, 0x9b72, 0xffffffffffffffff, 0x1000) socket(0xa, 0x801, 0x84) getsockopt$auto(r4, 0xfffffffc, 0x6f, 0x0, &(0x7f0000000000)=0x9000c) sendmsg$auto_ETHTOOL_MSG_COALESCE_SET(r6, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000080)={0x40, r7, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_RX_MAX_FRAMES_LOW={0x8, 0xf, 0x5}, @ETHTOOL_A_COALESCE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @ETHTOOL_A_COALESCE_TX_USECS_IRQ={0x8, 0x8, 0x9}, @ETHTOOL_A_COALESCE_STATS_BLOCK_USECS={0x8, 0xa, 0xb}, @ETHTOOL_A_COALESCE_RX_USECS={0x8, 0x2, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$auto_ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x6c, r3, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@ETHTOOL_A_WOL_SOPASS={0x6, 0x3, "78c5"}, @ETHTOOL_A_WOL_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x80}, 0x8004) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/net/bond0/queues/tx-13/xps_cpus\x00', 0x2, 0x0) write$auto(r0, &(0x7f0000000580)='\x00\xc7\x19x\x01\x05,:j\xf4<\x15\xef\x91\x04zo\x82\xa5\x10-Q|\xcd\xb1\xeeB\xa2\xc8\xfe\xa8\x9a16*\xfb\x96\x17\x88\xa4\x00\xe2v\\\xe8g\x1b\x0fZ\xea\xa3\x81\xbd1\x99\xa0M2\xd3}/\xe7\xab\x10I\xff\x94-\xaa\xfc\x8e\x18\xf8fI\x18=w\xffH\x03\x81\x81\xbd\\\xb6\xde\xad\x02\x9a\xe6\xd4\xca\xd2\x10\xf1\xbfAd\xfb\x85w\xe08\x81\xc2\xd4R\t\xd9\xc7D\x02\f\x8f\x95\xeckB\xd1W\xf8\x85\x8d\x9fz\xffY\xceu\x88!\xb1\xee', 0xffffffff) 2m38.651281478s ago: executing program 4 (id=3872): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/mm/hugepages/hugepages-1048576kB/demote\x00', 0xa901, 0x0) write$auto(r0, &(0x7f0000000440)='7\x00\xf6\xf0\xef\xe4s\x95\xf2\x00\x97S\xb9O\xac\xbe\xd6\\J<\x02YK\xd6M\xe6\xe7\xa0\xb8\xc3[\x01\xc5\xe8|\xb0\xb0\x80\xbf\xa5?=i\x88UB\x1d\x8e\xd3\xc2\x949\xb6\xfb\x006\x02\x9c\x83\x14\x13\x99\xc7\xb4)M\xed\tN $\xd4\x90^?J\x92\x9a?\xf8b\x03\xd8\xdd\x84\xdf\x92\xf0\xcd\xd8\xbap\x15\x80\x9eo,\xc8\xf2\x82\xd2\x88\xbeL\xa0\x9b\x86_\xf0?\f<\xf3t7\xb6\x0f\x93\xc79@\xd8x\x9e\xef!\x006\b\xdbWB\x84\xdd\xac\xdau\x86g\x8f\x02@O7\x0f\xf8\x8d(\x9c\xf2NyD\x7f3\x14\x9eg\x86%)\xd6\b\xcd\x1f\x03\x00:\xa6\x83\'\xf4\xf2\x9dd\xf4z\x89\xc5D\xc4\x02\\\x81\xcf\x02Ep\xf6`\xde*\x1dV\x94R+\x94s\x84\xa4\xd4M\xa9\xea\\Vt\xde\xedS\xf8?\x91\xef\xb3 4^\xc9DO\x88Er\xb5\x82b\x8f\xfcd\xe3\x81\xf6\xe4\x16\xe1\x15\xaf\xf2q\xc41\xf5-\xcc\xcfj\x94\xce\xc2>\t=\xe5\"a\xde\x18\xd8\xe8', 0x4) r1 = openat$auto_dai_list_fops_(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) read$auto_dai_list_fops_(r1, &(0x7f0000000780)=""/59, 0x3b) ioctl$auto(r1, 0x1, r0) 2m22.878357361s ago: executing program 34 (id=3872): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/mm/hugepages/hugepages-1048576kB/demote\x00', 0xa901, 0x0) write$auto(r0, &(0x7f0000000440)='7\x00\xf6\xf0\xef\xe4s\x95\xf2\x00\x97S\xb9O\xac\xbe\xd6\\J<\x02YK\xd6M\xe6\xe7\xa0\xb8\xc3[\x01\xc5\xe8|\xb0\xb0\x80\xbf\xa5?=i\x88UB\x1d\x8e\xd3\xc2\x949\xb6\xfb\x006\x02\x9c\x83\x14\x13\x99\xc7\xb4)M\xed\tN $\xd4\x90^?J\x92\x9a?\xf8b\x03\xd8\xdd\x84\xdf\x92\xf0\xcd\xd8\xbap\x15\x80\x9eo,\xc8\xf2\x82\xd2\x88\xbeL\xa0\x9b\x86_\xf0?\f<\xf3t7\xb6\x0f\x93\xc79@\xd8x\x9e\xef!\x006\b\xdbWB\x84\xdd\xac\xdau\x86g\x8f\x02@O7\x0f\xf8\x8d(\x9c\xf2NyD\x7f3\x14\x9eg\x86%)\xd6\b\xcd\x1f\x03\x00:\xa6\x83\'\xf4\xf2\x9dd\xf4z\x89\xc5D\xc4\x02\\\x81\xcf\x02Ep\xf6`\xde*\x1dV\x94R+\x94s\x84\xa4\xd4M\xa9\xea\\Vt\xde\xedS\xf8?\x91\xef\xb3 4^\xc9DO\x88Er\xb5\x82b\x8f\xfcd\xe3\x81\xf6\xe4\x16\xe1\x15\xaf\xf2q\xc41\xf5-\xcc\xcfj\x94\xce\xc2>\t=\xe5\"a\xde\x18\xd8\xe8', 0x4) r1 = openat$auto_dai_list_fops_(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) read$auto_dai_list_fops_(r1, &(0x7f0000000780)=""/59, 0x3b) ioctl$auto(r1, 0x1, r0) 7.20276447s ago: executing program 3 (id=4481): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/version\x00', 0x3fbd02, 0x0) (async) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x400000, 0x4020009, 0xdf, 0x4000eb1, r0, 0x8000) (async) openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, 0x0, 0x2dc08f24db163610, 0x0) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x0, 0xfffffffffffffffd, 0xd4, 0x1, 0x6, 0x0, 0x0, 0x368a, 0x2, {0xfffffffffffffffc, 0x10000}, 0x5, 0x8, 0x7, 0xd, 0x0, 0x93, 0x81, 0xdfffffffffff628e, 0x6, 0xdeb1, 0x808}) (async) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x389400, 0x0) close_range$auto(0x2, 0x8, 0x0) (async) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) (async, rerun: 64) ioctl$auto(0x3, 0xae41, r2) (async, rerun: 64) ioctl$auto_KVM_GET_MSRS(r1, 0x4008ae89, &(0x7f0000000040)={0x2, 0x0, [{0x400000f3, 0x400, 0x2}]}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/sequencer\x00', 0x0, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D1\x00', 0x1, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0xa3db) (async) getsockopt$auto_SO_TIMESTAMPNS_NEW(r3, 0x80000001, 0x40, &(0x7f0000000100)='/Od\xa5o1\x00\x00\xfc\xff\xff\xff', &(0x7f0000000140)=0x7) (async) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$auto(r4, 0x5453, r4) (async) getrandom$auto(0x0, 0x6000000, 0xb) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) socketpair$auto(0x3, 0x5, 0x7, 0x0) socket(0xa, 0x1, 0x0) (async) socket(0x2, 0x1, 0x84) (async) connect$auto(0x3, 0x0, 0x55) (async) mmap$auto(0x0, 0x20009, 0x4000000000db, 0xeb1, 0x400, 0x8000) 6.698045424s ago: executing program 6 (id=4483): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xc18, 0x8000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) capset$auto(&(0x7f0000000180)={0x19980330}, 0x0) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) ioctl$auto(r0, 0x401070cd, 0x5) mmap$auto(0x0, 0x400008, 0xdf, 0xf1, 0x2, 0x8000) landlock_restrict_self$auto(0xffffffffffffffff, 0x2) socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x8001, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb5, 0x401, 0x300000000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001040)='/sys/devices/virtual/block/ram7/queue/chunk_sectors\x00', 0x80800, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000180)=""/187, 0xbb) syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$auto_NETDEV_CMD_QUEUE_GET(r1, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x810) prctl$auto(0x16, 0x2, 0x2, 0x4000000d, 0x100) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/adsp1\x00', 0x1, 0x0) ioctl$auto_SNDCTL_DSP_GETODELAY(r3, 0x80045017, 0x0) io_uring_setup$auto(0x6, 0x0) openat$auto_split_huge_pages_fops_huge_memory(0xffffffffffffff9c, 0x0, 0x800, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x40000008000) sendmsg$auto_NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x2404c800) kexec_load$auto(0x5, 0x2, &(0x7f0000000040)={@kbuf=0x0, 0x800c000, 0x4800c000, 0x800c000}, 0x4) 6.092097636s ago: executing program 3 (id=4484): r0 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r1, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002bbd7000fcdbdf25040000000400100008000cf1edfba1d1e45aea61b8f7020700000002681af944a5465101930e1f4b991ef2f10f485ddf80e07251de39066555baed365ef307143959554d"], 0x20}, 0x1, 0x0, 0x0, 0x24040000}, 0x18800) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) close_range$auto(r0, 0x8, 0x0) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r1) keyctl$auto(0x4, 0xfffffffffffffffc, 0x0, 0x0, 0x1) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f0000000400)={0x30, r3, 0x704, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_SAE_PASSWORD={0x12, 0x115, "ebdeaa83c79c7b73e04df5ebc3ce"}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x20080040}, 0x24000810) brk$auto(0xffffffffffffff66) write$auto_tty_fops_tty_io(0xffffffffffffffff, &(0x7f0000000300)="352c8efa618c0bcf83a4ebdb278754e15f334a572cad539da201096bbbc2ce7db19c429be7137d848ef31b38b0b3c7da1c61fef8e0e24e400f96eb989b4f68220f90f3df243e352f17abbc44e0cfececd72dc611200c0fc4cb84d1fc175dc31b38e002c53627c31e0f3a31c079ae368fd33dfdfc97f40f7f", 0x78) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000200), 0x100000, 0x0) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtd0ro\x00', 0x800, 0x0) close_range$auto(0x2, 0xa, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) r5 = ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x1e, 0x4, 0x0) fstatfs$auto(r5, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto(r5, 0x4020ae76, r6) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000380)='/proc/thread-self/net/icmp6\x00', 0x80000, 0x0) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0xda) 6.002698509s ago: executing program 6 (id=4485): mmap$auto(0x0, 0x6, 0xdb, 0x9b72, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x21, 0x3, 0x6) r0 = socket(0x18, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) timer_create$auto(0x9, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xffffeffe, 0x2) pipe$auto(0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup$auto(0x2, 0x0) socketpair$auto(0x8, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8000, 0x0) socket(0x2, 0xa, 0x6) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101080, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x40140, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r2) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/dummy_hcd.7/usb8/power/active_duration\x00', 0xc8080, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f00000000c0)=""/17, 0x11) ioctl$auto_KVM_CREATE_VM(r1, 0x4048aecb, 0x0) shmdt$auto(&(0x7f0000000180)=']}@\x00') sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) setresuid$auto(0xa59c, 0x8000000000000000, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4c094}, 0x20000011) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 5.950692372s ago: executing program 5 (id=4486): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20b42, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) socket(0x2, 0x1, 0x0) close_range$auto(0x2, 0xa, 0x0) openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f000000e680), 0x2, 0x0) r1 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x1c1041, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/kernel/ns_last_pid\x00', 0x68001, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x3, 0xc24) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x10083, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x0, 0x0) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYRES16, @ANYBLOB="010027bd7000fddbdf250a00050007"], 0x24}, 0x1, 0x0, 0x0, 0x4008}, 0x20000010) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1c003b"], 0x1ac}, 0x1, 0x0, 0x0, 0x40c0}, 0x40810) bpf$auto_BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000340)=@enable_stats={0x8}, 0x4) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x0, &(0x7f0000000040)={0x0, 0xc4}, 0x4, 0x0, 0x3, 0x9}, 0x6}, 0x3, 0x2) select$auto(0xe, 0x0, 0x0, &(0x7f0000000200)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0xfffffffffffffffe, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r2, &(0x7f0000000400)='/\xbab\xf1\"x\x81\x9cRT\ad', 0x100000001) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x3, 0x8000001f, 0x2, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0xeb1, 0x0, 0x8000) close_range$auto(r1, 0x8, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0x10, 0x2, 0xf) write$auto(r0, &(0x7f0000000040)='7\x00\\\x80\x04|\x03\xcb\x12\xfa\b\x1c\xc7k\x00\x0e\v9\xb5j\x00\x04\xc8\x1fa\x1c\x1a\x05 \xfdr/D\xbf\x98\x06\xe5\xf6\x8d\x1fX\xe5\xbc\xbc\"}$', 0x7fffffff) 5.666765214s ago: executing program 0 (id=4487): mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0xc0000, 0x0) ioctl$auto(r0, 0x2, 0x9) ioctl$auto(0x3, 0x400c4d05, 0x5) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_regulator_summary_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) ioctl$auto_PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, 0x100000, 0x7fffffffefff, 0xfffffffffffffffe, 0x1, 0x6, 0x50b301a, 0x0, 0x2, 0x0, 0x2}) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f0, 0x15) madvise$auto(0x0, 0x200007, 0x19) r2 = geteuid() setuid$auto(r2) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/rpc/auth.unix.ip/content\x00', 0x2000, 0x0) madvise$auto(0x6, 0xfff, 0x8067) pread64$auto(r3, 0x0, 0xf42c, 0xb9) arch_prctl$auto(0x1021, 0x3) r4 = openat$auto_ns_file_operations_nsfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/ns/cgroup\x00', 0x8080, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000500)='/dev/bus/usb/023/001\x00', 0x201, 0x0) r5 = socket(0x2, 0x800, 0xffff) sendmsg$auto_IPVS_CMD_GET_SERVICE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="000000004c5ac9f20e649ee291de29d200cd7c815163dd364534b45372aca7d554f58e57dcf752790ffce0dc780896df8534", @ANYRES16=r5, @ANYRES16=r0], 0xcf8}, 0x1, 0x0, 0x0, 0x48090}, 0x840) sendmsg$auto_NL80211_CMD_GET_REG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) recvmmsg$auto(r5, &(0x7f0000000140)={{0x0, 0x3, &(0x7f0000000040)={0x0, 0x844}, 0x1, 0x0, 0x2, 0x8}, 0x800}, 0x10a, 0x8, 0x0) setreuid$auto(0x3, 0x7) setreuid$auto(0x3, 0x7) ioctl$auto_NS_GET_OWNER_UID(r4, 0xb704, 0x0) 5.53294643s ago: executing program 6 (id=4488): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x1cb842, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x0) socket(0xa, 0x2, 0x3a) io_uring_setup$auto(0x52, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa}, 0x55) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xffff}, 0x1, 0x0, 0x2f, 0x9}, 0x100007}, 0x3, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="1b000000", @ANYBLOB="1a00279e"], 0x1ac}, 0x1, 0x0, 0x0, 0x20000001}, 0x40000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), r2) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000002b40)={0x44, r3, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@HWSIM_ATTR_RADIO_NAME={0x2d, 0x11, '/P\x13jE\f\xf9r\xf5\xa3\xd2\x84y\xf9*\x9b\"\x1c\xa4l-\x19\xfd\xa4\xf4y\x02\xc2\x96\xfa\x84L\x12\xcd\x83\xf7\x12\xd3\xc4\x1e]'}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008040}, 0x40800) mmap$auto(0x4c4, 0x7, 0x10000df, 0xeb1, 0x401, 0x8000000000000001) 4.301843722s ago: executing program 5 (id=4489): r0 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000000), 0x902, 0x0) ioctl$auto_RTC_UIE_ON(r0, 0x7003, 0x0) ioctl$auto_RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000000)={0x3, 0x3, {0x5, 0x4, 0x9, 0x7, 0x5, 0x3a50, 0xfffffffd, 0xffff, 0xfd}}) close_range$auto(0x2, 0x8, 0x3000000) 4.189621978s ago: executing program 6 (id=4490): mmap$auto(0x0, 0x6, 0xdb, 0x9b72, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x6) r0 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4c084}, 0x51) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/cpuidle/parameters/governor\x00', 0x2000, 0x0) read$auto(r1, 0x0, 0x20) socket(0x2, 0x1, 0x0) socketpair$auto(0x1e, 0x3, 0xfffffffe, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x3}, 0x7}, 0x3, 0xcad7) syz_genetlink_get_family_id$auto_smc_pnetid(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0x2, 0x8000) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) write$auto(0x3, 0x0, 0x100085) 4.125405158s ago: executing program 0 (id=4491): close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0xc, 0x9c0f, 0x44eb2, 0x10006, 0x300000000000) socket(0x2, 0x3, 0x6) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x0, 0x2) epoll_create$auto(0x4) r0 = socket(0x2, 0x1, 0x100) getsockopt$auto(r0, 0x0, 0x42, 0x0, &(0x7f00000000c0)=0x1e) getsockopt$auto_SO_ERROR(r0, 0x6, 0x4, 0x0, 0x0) getsockopt$auto(r0, 0x9, 0x1, 0x0, &(0x7f0000000040)=0x2) r1 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) r2 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r2, 0x0, 0x0) sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) socketpair$auto(0x1e, 0x3, 0xfffffffe, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x3}, 0x7}, 0x3, 0xcad7) 4.049153495s ago: executing program 5 (id=4492): socket(0x10, 0x2, 0x4) mmap$auto(0x0, 0x2000d, 0x4000000200df, 0xeb1, 0x404, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01eb"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000) bpf$auto(0x3, &(0x7f00000001c0)=@task_fd_query={0x0, 0xffffffffffffffff, 0x8, 0x10017, 0x8020000000a, 0x2, 0x5f, 0x20000000000803, 0x3}, 0x6f0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x44000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0x80900, 0x0) ioctl$auto_IOC_PR_CLEAR(r0, 0x401070cd, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x15, 0x5, 0x0) socket(0x2, 0x1, 0x106) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) getsockopt$auto(0x3, 0x200000000001, 0x1c, 0x0, 0x0) ioctl$auto(0x3, 0xae41, r1) close_range$auto(0x2, 0xa, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x6, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) writev$auto(0x3, 0x0, 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000004540), r2) sendmsg$auto_OVS_VPORT_CMD_DEL(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010027b9700001dcdf250200000004000a8008000800", @ANYRES32=0x0, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x240400c0) 3.654235212s ago: executing program 5 (id=4493): socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x240009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x100, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x6, 0xf, 0x29f, 0x100, 0x83, 0x101, 0x6, 0x2}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x40, 0x76c5, 0x8, 0x100000000}}) io_uring_register$auto(0x2, 0x11, &(0x7f0000000180), 0x83) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/asound/card0/pcm0c/sub4/xrun_injection\x00', 0x400, 0x0) r2 = openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x902, 0x0) ioctl$auto(r2, 0x80004d00, r1) read$auto(r0, 0x0, 0x20) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r3, 0x0, 0x3) r4 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000000), 0x109002, 0x0) madvise$auto(0x0, 0xffffffffffff0004, 0x19) madvise$auto(0x0, 0x200007, 0x8) r5 = ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$auto_RTC_IRQP_READ(r5, 0x8008700b, &(0x7f00000001c0)=0x8) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0x4008ae89, 0x0) madvise$auto(0x0, 0x2003f0, 0x15) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) sendfile$auto(r4, r4, 0x0, 0x10000800000003) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) shmctl$auto_SHM_STAT_ANY(0x7, 0xf, &(0x7f0000000140)={{0x67, 0xffffffffffffffff, 0x0, 0x5, 0x5, 0xccd, 0xfffb}, 0xe, 0xfffffffffffffff9, 0xd9, 0x9, @raw=0x1, @inferred, 0x4, 0x0, &(0x7f00000000c0)="88915931af2376e5a31021a61cfb9a52a8234052f1d1d4eb96e795de03796b5f66a6026793c7e26bd18e59fd281cb2f0c3955d18da71705eaed9c98b8dd7e6aeb15cbdb776be", &(0x7f0000000400)="3aed7b0cac16d27f41b0187813a0e48d49f345746184ea320575abe35da7edb4c54a14b5382669b54b3dcb6911ae15b3947a24e9a9cfd69da18f58e904dd7cdad780629ef3b050de64a60fd8e084fbd04f9dd5b12547f4a86377308fc87618e143cbf1aa0c3859ea3409f79f93c9f5ea2de88c969d3cfb2f2ee68e4fe4c4a117f44c77d48e2abe02917f18b05542f36166693e2883dc039cb7897f62a959965b477f8e07aad8f03475a67ef7b7de2f284d4933b779578dae628a91fbc62d933e9247208c407700"}) setregid$auto(0xee00, r7) shmctl$auto_SHM_LOCK(0x6, 0xb, &(0x7f0000000300)={{0x9, r6, 0xffffffffffffffff, 0xffffffbf, 0xfffffc01, 0x2, 0x7f}, 0x5, 0x5, 0x8000, 0x101, @inferred, @inferred, 0x200, 0x0, &(0x7f00000001c0), &(0x7f0000000240)="33dd20c44dfd0534435ebeaa343f2e479d893b7c4adc1a2577c17ddb10a931616fb75cc0461bfd8c"}) r8 = socket(0x2b, 0x1, 0x1) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) ioctl$auto(r8, 0x89a0, 0x4) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) 3.554553689s ago: executing program 3 (id=4494): close_range$auto(0xffffffffffffffff, 0xfffffffffffff000, 0x4) openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket(0xa, 0x2, 0x3a) socket(0xa, 0x5, 0x0) openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x8800, 0x0) socket(0xa, 0x2, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x2, 0x0) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x787806, 0x0) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x80000, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000140)={{@raw=0x80000000, 0x305, 0x1, 0x8, "3112d598004a614d19e22af9ffb683dbede3d0bf828bbfba40f035f4be6b7fe000900000000000755015e48d", @raw=0x4}, 0x3, 0x5, 0x4, @inferred, @integer={0x0, 0xfffffffffffffff9, 0x8}, "7a9fc199a16a2311eacf2fc7ae1da978dc3e8090334fdd7327b386425608af790ada71bdd70925450e24e87212f0bcab84a16f7ce8cbce0bb32777702b8d7c2d"}) close_range$auto(0x2, 0x8, 0x0) r2 = socket(0x10, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRES8, @ANYRES8=r0], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x2000c082) write$auto(r2, &(0x7f0000000000)='-\x00', 0xfdef) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/ip_forward\x00', 0x2002, 0x0) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/rpc/nfsd.fh/flush\x00', 0xc8201, 0x0) write$auto(r3, 0x0, 0x6) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/ip_local_port_range\x00', 0x20202, 0x0) r4 = socket(0x15, 0x5, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x7, 0x800008000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) ustat$auto(0x801, 0x0) sendmsg$auto(r4, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0xb, 0x0, 0x1, 0x8}, 0x0) close_range$auto(0x2, 0x8, 0x0) 3.32651279s ago: executing program 3 (id=4495): syz_clone3(&(0x7f0000000500)={0x201000000, 0x0, 0x0, 0x0, {0x35}, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x58) 3.212122802s ago: executing program 3 (id=4496): r0 = socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(r0, 0x0, 0x400fffd, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) ioperm$auto(0x400, 0x7f, 0xd) r2 = semctl$auto(0x0, 0xe3, 0x0, 0x5) r3 = socket$nl_generic(0x10, 0x3, 0x10) lsm_set_self_attr$auto(0x1, 0x0, 0x7, 0x6) sendmmsg$auto(0x3, 0x0, 0x9a5, 0x47ffff7a) r4 = socket(0xa, 0x2, 0x3a) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, r1, 0x8000) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80040, 0x0) syz_genetlink_get_family_id$auto_hsr(&(0x7f0000000240), r0) signalfd4$auto(r5, &(0x7f00000002c0)={0x80000000}, 0x4, 0x6) read$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f0000000040)=""/215, 0xd7) read$auto(0xffffffffffffffff, 0x0, 0x20) bind$auto(r4, &(0x7f0000000040)=@generic={0xa, "2c551d000000ff00"}, 0x66) r6 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000002f40), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000003080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001b00)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYRES8=r2], 0x2c}, 0x1, 0x0, 0x0, 0x20004800}, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) inotify_rm_watch$auto(r3, 0x43) mmap$auto(0x0, 0x7f, 0x1, 0xeb1, 0x401, 0x8000) write$auto(r6, &(0x7f0000000040)='#\x00', 0xff4b) read$auto_def_blk_fops_fs(r6, &(0x7f0000000140)=""/194, 0xc2) 3.157246006s ago: executing program 0 (id=4497): close_range$auto(0xffffffffffffffff, 0xfffffffffffff000, 0x4) openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket(0xa, 0x2, 0x3a) socket(0xa, 0x5, 0x0) openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x8800, 0x0) socket(0xa, 0x2, 0x0) r0 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x2, 0x0) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x787806, 0x0) r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x80000, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000140)={{@raw=0x80000000, 0x305, 0x1, 0x8, "3112d598004a614d19e22af9ffb683dbede3d0bf828bbfba40f035f4be6b7fe000900000000000755015e48d", @raw=0x4}, 0x3, 0x5, 0x4, @inferred, @integer={0x0, 0xfffffffffffffff9, 0x8}, "7a9fc199a16a2311eacf2fc7ae1da978dc3e8090334fdd7327b386425608af790ada71bdd70925450e24e87212f0bcab84a16f7ce8cbce0bb32777702b8d7c2d"}) close_range$auto(0x2, 0x8, 0x0) r3 = socket(0x10, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRES8, @ANYRES8=r1], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x2000c082) write$auto(r3, &(0x7f0000000000)='-\x00', 0xfdef) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/ip_forward\x00', 0x2002, 0x0) ioctl$auto_SCSI_IOCTL_PROBE_HOST(r0, 0x5385, &(0x7f00000000c0)="0dca53") r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/rpc/nfsd.fh/flush\x00', 0xc8201, 0x0) write$auto(r5, 0x0, 0x6) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/ip_local_port_range\x00', 0x20202, 0x0) r6 = socket(0x15, 0x5, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x7, 0x800008000) bind$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xffff) setsockopt$auto(r4, 0x41, 0x21, 0x0, 0x9) ustat$auto(0x801, 0x0) sendmsg$auto(r6, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0xb, 0x0, 0x1, 0x8}, 0x0) close_range$auto(0x2, 0x8, 0x0) 3.052072566s ago: executing program 6 (id=4498): r0 = socket(0x1a, 0x5, 0x0) fcntl$auto_F_SETOWN_EX(r0, 0xf, 0x5a5) (async) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, 0x0, 0x4840) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) (async) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/all/addr_gen_mode\x00', 0xa0202, 0x0) sendfile$auto(0xffffffffffffffff, r1, 0x0, 0x9) (async) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) (async) mmap$auto(0xfffffffffffffffd, 0x9, 0xffb, 0x8000000008011, 0x3, 0x800000000000) (async) write$auto(0x3, 0x0, 0x100082) mmap$auto(0x9, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) read$auto_v4l2_fops_v4l2_dev(0xffffffffffffffff, &(0x7f0000000080), 0x0) (async) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) move_pages$auto(r3, 0x1002, 0x0, 0x0, 0x0, 0x2) (async) r4 = getpid() kcmp$auto(r3, r4, 0x7, 0xffffffffffffffff, r2) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x17) (async) madvise$auto(0x2000000000000ec, 0x3, 0x15) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async) lstat$auto(0x0, 0x0) mmap$auto(0x0, 0x9, 0x10003, 0x12, 0x401, 0x88000) mseal$auto(0x0, 0x7dda, 0x0) (async) syz_genetlink_get_family_id$auto_mac80211_hwsim(0x0, 0xffffffffffffffff) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x0, 0x8000) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x400008, 0xb, 0x9b72, 0x2, 0x8000) (async) socket(0xa, 0x3, 0x3a) (async) socketpair$auto(0x3, 0x1, 0xc, 0x0) (async) setsockopt$auto(0x400000000000003, 0x29, 0xca, 0x0, 0x567) 2.788723303s ago: executing program 0 (id=4499): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00', 0x0}) sendmsg$auto_OVS_DP_CMD_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7020f8dbdf2501000000", @ANYRES32=0x4, @ANYBLOB="080001004866520008000200", @ANYRES32=0x9, @ANYBLOB='\b\x00\t\x00', @ANYRES32=r2], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x80) 2.025469745s ago: executing program 0 (id=4500): r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x240009, 0xdf, 0x9b72, 0x7, 0x28000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x100, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/asound/card0/pcm0c/sub4/xrun_injection\x00', 0x400, 0x0) r3 = openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x902, 0x0) ioctl$auto(r3, 0x80004d00, r2) read$auto(r1, 0x0, 0x20) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r4, 0x0, 0x3) r5 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000000), 0x109002, 0x0) madvise$auto(0x0, 0xffffffffffff0004, 0x19) madvise$auto(0x0, 0x200007, 0x8) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r6 = ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0x4008ae89, 0x0) madvise$auto(0x0, 0x2003f0, 0x15) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) sendfile$auto(r5, r5, 0x0, 0x10000800000003) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) shmctl$auto_SHM_STAT_ANY(0x7, 0xf, &(0x7f0000000140)={{0x67, 0xffffffffffffffff, 0x0, 0x5, 0x5, 0xccd, 0xfffb}, 0xe, 0xfffffffffffffff9, 0xd9, 0x9, @raw=0x1, @inferred=0x0, 0x4, 0x0, &(0x7f00000000c0)="88915931af2376e5a31021a61cfb9a52a8234052f1d1d4eb96e795de03796b5f66a6026793c7e26bd18e59fd281cb2f0c3955d18da71705eaed9c98b8dd7e6aeb15cbdb776be964bc9fdb4de44a05e4a", &(0x7f0000000400)="3aed7b0cac16d27f41b0187813a0e48d49f345746184ea320575abe35da7edb4c54a14b5382669b54b3dcb6911ae15b3947a24e9a9cfd69da18f58e904dd7cdad780629ef3b050de64a60fd8e084fbd04f9dd5b12547f4a86377308fc87618e143cbf1aa0c3859ea3409f79f93c9f5ea2de88c969d3cfb2f2ee68e4fe4c4a117f44c77d48e2abe02917f18b05542f36166693e2883dc039cb7897f62a959965b477f8e07aad8f03475a67ef7b7de2f284d4933b779578dae628a91fbc62d933e9247208c407700"}) setregid$auto(0xee00, r8) shmctl$auto_SHM_LOCK(0x3, 0xb, &(0x7f0000000300)={{0x9, r7, 0xffffffffffffffff, 0xffffffbf, 0xfffffc01, 0x2, 0x7f}, 0x5, 0x5, 0x8000, 0x101, @inferred=r9, @inferred=0xffffffffffffffff, 0x200, 0x0, &(0x7f0000000240)="34bc664c9302c4fe25772f1ce2c0876a83689409d3282510", &(0x7f0000000500)="33dd20c44dfd0534435ebeaa343f2e479d893b7c4adc1a2577c17ddb10a931616fb75cc0461bfd8c"}) r10 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000200), r6) r11 = openat$auto_dfs_dom_ops_debugfs(0xffffffffffffff9c, &(0x7f0000000380), 0x204040, 0x0) sendmsg$auto_NL80211_CMD_ABORT_SCAN(r0, &(0x7f0000001c40)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001c00)={&(0x7f0000001c80)={0x1774, r10, 0x300, 0x70bd29, 0x25dfdbfb, {}, [@NL80211_ATTR_REG_RULES={0x1663, 0x22, 0x0, 0x1, [@nested={0x68, 0x141, 0x0, 0x1, [@generic="6e0b6c73d49e08a7313c754e82e409e134409d4b2b5826c795c60a5829a773b199aa6340e2839916cd300c2c3903dec0f80e0c5aaad5a3ee2ba5344b8bf66b175cc97ccc25efe2e7418b90bee9a5de71acd937a34e204a0fee1f6b96eebf08fc09313e87"]}, @nested={0xa4, 0xf3, 0x0, 0x1, [@nested={0x8c, 0x2d, 0x0, 0x1, [@nested={0x87, 0x85, 0x0, 0x1, [@nested={0x4, 0x84}, @generic="0774d555b0fee0815b151b59185942aceb062a5e4d7b04850ac449df4b70ee94d9ddd0535ceadbc51a96d33ca811f7bfd1cfb465107ce7010bcb44c99ef6313d9e3accc19dba35119e895e79dd0f4f45f484c10d73edc9db25dded41f2d283bc4f77191c91eef942379717", @typed={0x14, 0xbe, 0x0, 0x0, @ipv6=@mcast2}]}]}, @nested={0x4, 0x2d}, @typed={0xe, 0x12, 0x0, 0x0, @str='/dev/zero\x00'}]}, @generic="5ac280989f63169079dd54edd8c7df29b790b8290435f2a7672cb373a95f164ae7b9ed1c4e2356ac51089e2434a531eb060e1d0af0c9194fa9e8310123674f09ccf9a341a42fbcec8609e19dbde0ceb85c18d9d489c982190e831a92dec9c7d105ff531154afd677b6ffafefcd7a59ac8703b18bc37ef14b63a3d3e482cf22881ede1d36a1", @generic="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", @nested={0x289, 0xc7, 0x0, 0x1, [@generic="2df05b026d8c71fa87f9a63cb6afd8c09b576f8e541c29434feb3cd278122b944d54f04f7af74b2024be1e645bf39655acc6404528cd2b9b265050c65d136fd5eb9ca73f2bd1653d0265be8073a051e74b9e2f2761ae21a4f2fc169cd9c200d28c0b9d6fad9a2ef0a94a466d9c90951fdddddab14f57a06292315bab20fedfb6baf2c8f4b44ebbf04bdb0398d9f30458377c4d757d7676792b46443e9154016f12b3e42e7ce093ec45dceb6042", @nested={0x4, 0x73}, @typed={0x14, 0x14d, 0x0, 0x0, @ipv6=@empty}, @typed={0x8, 0xe6, 0x0, 0x0, @fd=r11}, @typed={0x14, 0x77, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @generic="7b3a56ac7a2d3c0bc06835d3e566323a83ba2df42aefd12017eef495529845d975f413c8b2952520f2a862a043d52eb504a47e117fa5a104c6c630f6fa0ff1387810e2f647e16f4531908c70ff7fa820724e7cf28c0c8c80f93e196f397337ec88805f763512ffc6d8746dffe47f7772f97142292c0e413fb3565fb3809b3907315cc000e7119f209efcb63d53672d37495360227205d07626a859a6bc6ee9cb0bd4f30e965b25da1dd6", @nested={0x4, 0x136}, @generic="6b134610c060658d89990e2042b5fb1c014226dc231035926305b4247180f13e92b06c3bfa615ee77eb0d74db872dac70181b75abeb57c6956fea21e801fc9d85845a217baeed1cb445d12072fa02408c738754cf5644323fdb5de7230ef4889fcfaf3d55c466bb992c4e99c82b4d534bf45abecd9928d86fea59429ee16f13c515e35a2d7f19898d50cc36cbf8cacc4504b1bd9c812ff594087166d0542898888d11c44f07fd1b359826ed52a1f7d678fee85af14f7321973a237591f128c818d1af49eb04fcfbc4aea0b9dd67680fe90b9aaa17fd73eb99e6225f216acae52e5496b285164a4b7f3955cc2350e0ead10a1f80d96a8"]}, @generic="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", @nested={0x134, 0x12f, 0x0, 0x1, [@nested={0x4, 0x130}, @nested={0x4, 0x69}, @typed={0x16, 0xc, 0x0, 0x0, @str='-+/,-$-]+!([!&:,\x91\x00'}, @typed={0x4, 0x93}, @nested={0x4, 0x51}, @generic="5be9d18777e3cef8186fcf5a694d49fdb5cecaaec43fd4719a480e7b390cfc7a5458a40656ac2df9ed40049e1039957d8022ff12dd7fb0a8fdfa15c2c2bd7e8449e4719afa4545d31b0b9dbda0773e331cace35ab06f7934256e1f4245c8b6c50a3acd16cc9a6ad1a7d538197c7be0001382581d8b71b4801438c7600616ef8c1c6f2470918c2a68d825243480ece33fd88fd2ce7799a0b5ac54d2deab6d9fdf01f15cfed05b2020915242303196", @nested={0x4, 0xa0}, @generic="1a1dbefbb1eca79ff1c6c59544963d827523cfa6140f1ba80b3a26ab4682b2c63202a53e71c924df57bad3b7185a16e87ec4e9f8adc8cb3e878b9f2ea2d85918bcb46c7bac633eec5d19809e0d7f4ebe2b7d", @nested={0x4, 0x40}]}, @typed={0xe, 0x11e, 0x0, 0x0, @str=':.*$/(.(!\x00'}]}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0xfc, 0xbd, "d81191f3c62055285f3aac6e1a7440f567c5407dd6bb18bff35169afb58052b11511f11b05f8aca0fd33c79cabeccdf73b3fd72fdbe16f7d966ab11a5e2dea2849abd9049692eb107f030b2f6451d63965921f403df86a6a26590882a3d87d8c06fea0054119eb3f31daf8f621f92422bfebc18a38ddf41318aaf9c8d688e4ee6ed280567da46b9450c2d91aac5e88cf8a35dcb95e2673c0fe76ccc07e6c5f0bf21d4757b689cc5c3c807ce5d9075ad4dd1a282c26ef961c2dd44c4ed30a375ded517ef481589907989e8a1dfcb0009e7b4121ac4aa487c79e53dff47d56afbde22c119f7029428b9a5948c42805d70f3e2c63196a993536"}]}, 0x1774}, 0x1, 0x0, 0x0, 0x4080}, 0x44) r12 = socket(0x2b, 0x1, 0x1) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) ioctl$auto(r12, 0x89a0, 0x4) r13 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c29e0bd", @ANYRES16=r13, @ANYBLOB="010029bd7000fddbdf251600000018000180140002006e657464657673696d300000000000000500020009000000470004000b000000"], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x4040000) 1.854987312s ago: executing program 5 (id=4501): open(&(0x7f0000000440)='./file0\x00', 0x40440, 0x9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r0, 0x0, 0x1f40) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = socket(0x2, 0x1, 0x0) r3 = openat$dir(0xffffffffffffff9c, 0x0, 0x40000, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4ea2, @remote}, 0x6a) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x3, 0x101}, 0x7}, 0x7, 0x20020000) recvfrom$auto(r3, 0x0, 0x20008000000010, 0x4, 0x0, 0xfffffffffffffffd) socket(0x1d, 0x2, 0x6) mmap$auto(0x0, 0x400008, 0x1c, 0x18, 0x2, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x60742, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r5 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r4, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) write$auto(0x3, 0x0, 0xfffffdef) madvise$auto(0x0, 0xffffffffffff0005, 0x19) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$auto_BLKTRACESETUP32(r5, 0xc0401273, &(0x7f0000000180)={"c16f6303d5736a1b07ebd16a055427f1ebfd00000000000000004900", 0x3, 0xff, 0x8, 0xd, 0x813}) r6 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000480)='/proc/slabinfo\x00', 0x200081, 0x0) pread64$auto(r6, &(0x7f0000000140), 0x7fff, 0x3) waitid$auto_P_ALL(0x0, 0x8, &(0x7f0000000200)={@_si_pad}, 0x2, &(0x7f0000000280)={{0x3, 0x1}, {0x5, 0x100000000}, 0x2, 0x2, 0x8, 0x6, 0x8, 0x7, 0x80, 0x14, 0xfffffffffffffffc, 0x1, 0xf34, 0x6, 0x1000200000, 0x6}) fcntl$getown(r2, 0x9) msgctl$auto_MSG_STAT_ANY(0x101, 0xd, &(0x7f0000000380)={{0x4468ebf0, 0xee01, 0x0, 0x7, 0x1, 0x6, 0x2}, &(0x7f0000000100)=0x5, &(0x7f0000000340)=0x8, 0xfffffffffffffff6, 0x0, 0x1, 0x81, 0x3, 0x4, 0xf25, 0x5, @raw=0x858, @raw=0x5}) 1.791036584s ago: executing program 3 (id=4502): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x1, 0x400008, 0xffffffffffffffff, 0x11, 0xffffffffffffffff, 0x1000000000008000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r0 = io_uring_setup$auto(0x4, 0x0) close_range$auto(0x2, r0, 0x0) mmap$auto(0x0, 0x2000009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/kernel/domainname\x00', 0x88042, 0x0) setsockopt$auto(r1, 0xffffffc0, 0x2, &(0x7f0000000000)='/proc/sys/kernel/domainname\x00', 0x3e) poll$auto(&(0x7f0000000080)={r1, 0x0, 0x5}, 0x5, 0x49) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, 0x0, 0x6ca97a430b0ce0ba, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$auto(0xffffffffffffffff, 0xc0585611, 0xffffffffffffffff) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0xffffffffffff0005, 0x19) rt_sigprocmask$auto(0x10, 0x0, 0x0, 0x8) mmap$auto(0x0, 0x400, 0x3a, 0xe3e, 0xfffffffffffffffa, 0x8000) socket(0x2, 0x1, 0x106) read$auto_proc_iter_file_ops_compat_inode(0xffffffffffffffff, &(0x7f00000002c0)=""/285, 0x11d) mmap$auto(0x0, 0x8, 0x80000000000000df, 0x10004000eb1, 0x8, 0x8000008000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mremap$auto(0x4000, 0xfee0, 0x3fd6, 0x3, 0xfffff000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x3, 0x0) 539.147816ms ago: executing program 0 (id=4503): mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket(0xa, 0x5, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r0 = io_uring_setup$auto(0x1, 0x0) setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0x8) fanotify_init$auto(0x5, 0x2000000000002) socket$nl_generic(0x10, 0x3, 0x10) socket(0x26, 0x80805, 0x0) clone$auto(0x20003b4b, 0x2444d, 0x0, 0x0, 0x8b3) write$auto_dynamic_events_ops_trace_dynevent(r0, &(0x7f0000000000)="484ab2a7401b8eae8ddd9676b3d3dc012245ae3ba4f9af2b1c1588367d2abd835bc3a1ff777367c09c7d3ade1b24b795de56f2a0d5715111ca75b423525fd6fda564e2e3e979060dfb84835b0dea940c89249220e5d5f6f98e5af58242c10c2fd740400555510e8ee283bd0c3b17117d5624a490dcf1b41581be9861ce6f59adb6b7026d491e883673bd2c02554d1ff9e1133f9479dd21feed93af96cf224f5881404aceb9b0cb67aee670d7514b4cb314f6cfcba4851588c766c123275e46d5e179979f525cd053fdd91ff9f6c178c127ac1aca91dfc8db69376dfdcd6946f16d153469db74b0da0f421eb5aaf5a1b12706cf83c78404b7b8181ce63acf4d21692ea14b79e42411960ccb56b2546a53d130265217f980d31cb8d349a56df0ba787fba0f28e2c94fc614d12e0d85d6e38c1fbac7bc4a019b63dc38c08fb8222221f94625f60bc934ec82d246c002d2165801ea16bc53a2738ea4f42a19668ac523cbccb58846a8f828467278885ca78ccbf5777bebaeb383b7d5880b66e796bfecfeb6477cf53a9249de92aac50750357bfdf8447b331bab283a66f0491344892df7b8cd60bf3087eeb746f7d6b4bf04364c3bf8e575ec65539ab280b497698c06326f2ba3cf3c294b9b4a2b6e3b953d17cc67469091956e58fbdddbb5309386ea2c69241d6b77143e9e28cecec38dee7626385727a17e51f69068688dc20a99a215701c8bbc96cd0a281c17e07d7206dfb3e3d02f2b6b0a2bb4ea198944c6187ecf14ea50f9a77aeb94cfc7bf4894d94e0de2aae8b0ee78d798c28799bb9ceeba059b4fc991acd8583048519aed3c916282a1aba2a5401fdd0cdd8cb77d611b600ba92a324a023051241ba7fef668ac0bd10670ae3772c40db07cf0a246e0024f6df5efee526e4f00f2b3a4301e7d7416de9e8bb9ce060508fd02e5099c04f59a5de1e1bd82411630ac9574dbde1fceadbf189ea357b9bee2e33a88b8e2e3964576519049f303cee911a7ee97c615c0b1abc34c1c58e5bee8e3fd199ac7e84bf41939b06419c8082b84fe3329d42a749a29c1e2023f6a65a7ee34f7f11e1c0e2fc0f5f108f3092d376668b9b3da761e8f71e115a1a1445d33cc4b44762652547f7752362cff7f69e34aaee0da0105eec4989aa5c918d411b158929c30053a01ee8376be1e998bfdbbf54d6d7c3b6cc4f48a8863d3ce4864f174168320e70ea6bf03ce1a90c7b6d62ba8638fe121d0324b865dc124b21e1ee8246ec014eeb0e02bc5e12f53788638d9dedf8975792a6d220a35b139f0eed22c39b2425c52409f6e5d0494978302f287db44c2e8dcb25df685749d3560f5cfbb24d7afda65a443997975a0e44b4fe104555bc2e5606eaf8bbcf23d3ffd76baa3711c0dd52d8501be68f2404257eb2e9d7b8dc220eafd6449ec5db5e480c4f143927548466e5e576c52f621a132c6581dede50aacb023525a6ab8db66f4585cc8e9e71c511d677d51ff9d85e5deca8ff97ef7b97f0c636921e6bee3c8c26dd865c12663106e88f01a2dbdb811412c13afd9276060bdf4b02826da9d5f9dea818e235edb3087d50ed965a6131f699b538c0d8cf70093eeee5aa3d3fd46fbd1e28b15c2ecd4a8394f026070adbbcc2c09b3b7eb2d09a9c7feee0e6fcae041f15dd09c6578451267e572be5afe42e5c84602748b4d3099e3a2211008a739d8a2e0ff6568fb404af71368a0b0a6e8379047f3d7cbd5a54312af14a0ea23d756105c928145fe09c663be1c80abe090ae4d77ac57164c2b53a29be05df4ab0e485cf42c9f60975f25df97c12ace1b372596f59dd9065026663c0c1785f199795bf1a83b57769eed8f4668c9acfb02ce6ac3416e6fd77ee266dd1828154cb9decb9cb273f6979181685758835a9722fc90ca995c63f550383be32219dc10bff77ca6d401e4d1197f7ccc24701d17e39069ca21e8f7dc11b5a7a56580bb7a48b464c7cf20d852021d52e86d66add900fcc665b52c39f59cedda96fee79c063ac68fdedd6245541c3343aab68264cc8e636b3fac531e09e2b4b2d65c6ffa212ecd8b49babb19f8ac353f40a3a6f02b996ef0aecd8862f44a1c107d439ac661d5580656796b6298e0c355243e75f6cf3d9c5e8fea3a710bba77333386c95131e5d07e8079b15f9a729f6cf210f9e4f28c2e113be4cf706249731183d61c35c8037b2df452197588e1b6caa9d5868c25d5e5c83df6fd971a5bff5b3fd225bbea3aff452466b38b7dadac68679c811b558e11cafa3a2d01b8b87c7ecca145e0107ba3c1810d2cd1ab3bbe96924f7510feb1f2bed4c3c1e7ef7dc9a2cf278e29f87ed7e9c5920bcf142d2f1d24f7641d405f267ff3c04e1791d10e81bc09542490a1c26a9eca77529c060b75cab02ca554187bf3a38db78aa6b5da28f4d3dc5d022c2b4dedcdcfb1f93a6989c1b0c1160e419868dfd6c84710f83f232d9a467aed719540d239e24b4ec9f256607fa30a741ca185100931578fa1898b54124ce5c0af7f8dbc6086a0e950ccdf18a545235074ca99c583ed3cadca0c820e1420018c2c64d0f13a49386ba2936b25ec77cddcb03a0c74e829e54a2d25c87abe7570b0fd2cf624cf774395232263195b53d19c7ae94cbdd1bec9d8a9004e0448fa75c763d76dbe26da8e9918de5b158ecc13fc48a039b61fe63322d2a2faa2a9d466aa770de367101b3786dc0d100b99d38a2bc7e89a2b3402e24ef6940d364d0cb1d71f2bc33267b6e6a9123966da3f64eb478d328d04fb2e6ca3d541ee98e48d3c644c9422c7a57288a32532a64c64f0f4409395f56fd6c5acc3afe10fee416b3c5ec3a55f38ffae1a4a2e4b28909447207bea38faf5ff73d7e73ba38855471baa453bac7f63734e8674c3e53441d6761873231bbe390f7e90839e03a33b88a066511d001454809ce5e8e2094c26b5044b9afa1c139d799d3e8288b310afbfb3d8a235b79086df4ac1c60e834907f0b445ae4c5bbce15f4083fd0d5755e9e3ad85b66df96ac56f31583c7715f35ffd2dec01f57413518e963cd80d29613232c495167875958bd0946e14d89d4bcf2936fa3c903f4ad965a7359386384ce33055bec52a0d0d01debf7f90fa5ffca9b768613fe8e925fd60686f9f259006081f207566ea4eb39a31cddaa8616bd33e0df48bee560a68e5888c62066dc702cedb8de973187d5b887aa6d9daf2cc0607525fac9c85439920871740eb59af0732e5b9d8c23e55d7c56c5210def3b16e3982ec70c2c02e500d1afdf43b4eebd9071d3379459f71098c09c178cbec27c453fd9faea7e986e0eb1cc8adde280537e76d2ff2bd303aef4c80c5eb0774df138f53ca28f543bac899b737da635099d75b53d574f52dda171c68002ad3caec6ffa2e06fefa8106beedb3abde2249f924077fffb91865c6664e9bc602df6b784f4ea9ffa0455184e97db5b5de9c39a1180a4599e6f76987641951a83d59b5e952a83701f139ae77cadfbfa7972991496344a42c2fc51656a84bd8ef02877d81a694d5321cbd062405d38164efac4a5b0e7d13749f02fc3a717900c0133f147ed29ba266b9b15bb3a88f8a5df4d06eff0354130337cbc7487500d76dc05225c0894797d00066f4cb59d2f3d9f5e51fe14952c6be51bc56e2f5f580a3a11a6df5383ef812740dda94e1df51b58427adfc1506bf39fe724d49bfdf9a3713db295196cb2f8daadcf52a30eec057ad26abfd345babfd0f63a2c31d3be83dab9d4884daaed26c499811eb13279af983c8d76d28f89b95581bfb965b3f8a9994c02b9520d90ccb99b3357964e0ebd9498a927c280e0182a2d6fde20bc9c8767bec1f82a808be8b4833532568c45ad4a64bb00bd33555bcb85f32183c391018e40e3e84a86071902e253a2aa836e215c70fb1dfb3d9596a4994329cb0d567ef78c84a962b37b30db12f424613d62136549977606203f1602be3be69b4864f0aedef2f6aa9babc754320b5ec45d669460ce5e32bc9a9670c37ebb4a8658a9fcd815651f31f574752ada8c7bfc87e82e2aa0fe270c314cbe2858c8a351d5b852a8f76f4b30368666bd683b5e66946f6da236d8b31847b840850e831ccef9c41d035a0d81936b6481cbfcf92f2d03839dd79fa89228cf8e24bb1e80a1a781ce812c46fef9cc12597493d41a2db8177073877bdc6637d8d09fe88caee24c5e4a5d6e1be69a60c7bd82978e590c57cc201a3d9cb86f7defcde3380750d6a41d0c484a870382006013c53b73965f106efe5ef3a2d08638c285f2aa994eca07843fde4f43387002d5dd9f9b09b191c1a658a468cb26962a170d199051ab7a75f657e5f8f0a82ca099904e299d95b8948742ee6347e3892af4de7ec3b5a765d381ec56bce8a6789c09edc84c93d10b97be6ef8f7accb25f7032cbe655a9e23838c93e9521be8eb50c657a8593e13f32c4a8b87afafe76f707176c9d379dcb2be741b3b72c482d14781b4c856e45b38b9fe37636b55581216bfd7599d916b287e750dcdaf7e7efc160850b56598b7debfac9d26c3a716c05a2805f95bb8a8b61bb1baf1b13a00f5c2ead1ab3db7ef41e13863c52fd8cbb9e01b878e88d1aa9ae006400ac41225060a6b06828cb91612191dbc9474c7fde6018a197946fb2cfc13090887ab066c3283c98f3f9dede0d5080631d476f86afaf0f2fe07bcfad7d24e6e2dc0633ac35126b5ffb1acc58401f6bb93925aa3f1556005e56bc42ccf197c3598c12f57303e1f320de161275841f941a338d7a806a1b6319082519fcdac08fe3d66857c463dd9723407d1697f0f60f5aff932f991ff0b8fdc6a568514af4b913b3a6692a6820b2c48cafbeec8a11015088c09c0f74f6bee027837123ed19163eb0f88d0648a178b34f2341a1d57a056a3386ead957b2d52c6790e3e3c09a4680f461e32f25706d09ec35187171f5a7b1f6d2889ed193d8b3b56b9c0c4be4bb545672f2d5a5f25549d438b71f0c79e73a417aa6ca45dc5988fb1a10d6acd93d79ee8eb63c1ba086b0ead4d6128e513938c9003876c941b645967cc3cc03d3352639ff05d92cbb2be85858616073f9e7e786b6d1b9a4130e4a937c8fdac281f02f3ee196e25f1b573cb20ef6a7bdf787a948c740fed68f09534b87aafe16fc6392ff27c1028197783c13b8c03218f4251929631ac027044d69bd4597ce3f505b8eb98f9db263288abde05f7ec4db9369e7fae725a2bd186e9ab1c80a354ac22fc7bc564b049935949a65f1c181dd690005ce2ac43f66b9d3449aa4cd24da0e4344ff5545788e63184fb1fb7223168542fffaee5f5a272d87d9a623d2e49c58365b68221bb6b34aae243923b05098ebc7318b0cc773f711f0cae3ae4e6aa7f4cac3153961968ca66264df54a68ec1a6a310e629002341be21e546a65f6173496de853dca047d2f8eed0f972fbb8ea16597178378cc1772e73a3d0e6720a0f745de794c7d822194ac376725f0ef1fb545dba768b61744278bdefd022c1c669ee881023f92d04271328fc4d2a66b84f975f81d96fae70b291c658b7e3653e57fed7011f5c0f50d3926449838a9ed7edaa0a94b363cfb2086387e17a222b6f5b9eecf5faef5a2883b0394cb0c33d8e54dedd625537d7b51ffc4e9dc07eed9b426c4cd76d25ef281cfedc14c1b13cbd1ae96843d82fee64694761def51a4dbc18d099f6a56418c87ad9f1148965105df59ea8be1c05328fad722bd6a7ab479d69ae297829181310146fc43fee254f24e5ad5efe4aff12b94961d2c9f5c338662808269771c9582693afc70d1b", 0x1000) ioctl$auto(0x3, 0xff08, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x800006, 0x7) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x11, 0x3, 0x1) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x1000, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x80000000000, 0xffffffffffff0005, 0x19) mseal$auto(0x0, 0x7dda, 0x0) mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000) r1 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r1, 0xc004743e, 0x0) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) ioctl$auto_PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000040)={0x6, 0x0}) ioctl$auto_KVM_X86_GET_MCE_CAP_SUPPORTED(0xffffffffffffffff, 0x8008ae9d, &(0x7f00000000c0)=0xe957) ioctl$auto_PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000080)={0x9, &(0x7f0000000000)={0xc, 0xf1, 0xb0, @raw=0x43}}) mmap$auto(0x0, 0x2020009, 0x6, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) 372.288583ms ago: executing program 6 (id=4504): r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_rfkill_fops_core(0xffffffffffffff9c, 0x0, 0x40, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) unshare$auto(0x40000080) ioctl$auto(0x3, 0x4008ae48, 0x38) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) setgroups$auto(0xe32, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xac}, 0x5, 0x0, 0x1, 0x697b}, 0xed7138c}, 0x2, 0x9) recvmmsg$auto(0x4, 0x0, 0x7, 0xe, 0x0) sendmsg$auto_GTP_CMD_NEWPDP(r0, &(0x7f0000003080)={0x0, 0x0, &(0x7f0000003040)={&(0x7f0000000000)={0x1c, 0x0, 0x5, 0x70bd2b, 0x25dfdbfd, {}, [@GTPA_LINK={0x8, 0x1, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4c000}, 0x80) 0s ago: executing program 5 (id=4505): close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0xc, 0x9c0f, 0x44eb2, 0x10006, 0x300000000000) socket(0x2, 0x3, 0x6) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x0, 0x2) epoll_create$auto(0x4) r0 = socket(0x2, 0x1, 0x100) getsockopt$auto(r0, 0x0, 0x42, 0x0, &(0x7f00000000c0)=0x1e) getsockopt$auto_SO_ERROR(r0, 0x6, 0x4, 0x0, 0x0) getsockopt$auto(r0, 0x9, 0x1, 0x0, &(0x7f0000000040)=0x2) r1 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) r2 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r2, 0x0, 0x0) sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) openat$auto_cgwb_debug_stats_fops_(0xffffffffffffff9c, &(0x7f00000010c0)='/sys/kernel/debug/bdi/1:15/wb_stats\x00', 0x40, 0x0) socketpair$auto(0x1e, 0x3, 0xfffffffe, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x3}, 0x7}, 0x3, 0xcad7) kernel console output (not intermixed with test programs): 541.888235][T27891] ? trace_mm_page_alloc+0x11f/0x1a0 [ 1541.888264][T27891] ? __alloc_frozen_pages_noprof+0x294/0x23f0 [ 1541.888301][T27891] ? stack_trace_save+0x8e/0xc0 [ 1541.888329][T27891] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1541.888376][T27891] ? kmem_cache_alloc_node_noprof+0x1d5/0x3b0 [ 1541.888413][T27891] ? __get_vm_area_node+0x1ca/0x330 [ 1541.888441][T27891] ? __vmalloc_node_noprof+0xad/0xf0 [ 1541.888486][T27891] ? __snd_dma_alloc_pages+0x53/0x90 [ 1541.888530][T27891] ? snd_dma_alloc_dir_pages+0x151/0x240 [ 1541.888563][T27891] ? do_alloc_pages+0x115/0x280 [ 1541.888592][T27891] ? snd_pcm_lib_malloc_pages+0x3df/0x980 [ 1541.888624][T27891] ? snd_pcm_hw_params+0x15e1/0x1b40 [ 1541.888658][T27891] ? snd_pcm_kernel_ioctl+0x147/0x2e0 [ 1541.888694][T27891] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1541.888725][T27891] alloc_pages_bulk_noprof+0x71c/0x1410 [ 1541.888763][T27891] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1541.888801][T27891] ? policy_nodemask+0xea/0x4e0 [ 1541.888828][T27891] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 1541.888867][T27891] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1541.888912][T27891] kasan_populate_vmalloc+0xf1/0x1f0 [ 1541.888954][T27891] alloc_vmap_area+0x959/0x29c0 [ 1541.888993][T27891] ? __pfx_alloc_vmap_area+0x10/0x10 [ 1541.889028][T27891] __get_vm_area_node+0x1ca/0x330 [ 1541.889063][T27891] __vmalloc_node_range_noprof+0x271/0x14b0 [ 1541.889095][T27891] ? __snd_dma_alloc_pages+0x53/0x90 [ 1541.889131][T27891] ? __mutex_trylock_common+0xe9/0x250 [ 1541.889165][T27891] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1541.889199][T27891] ? __snd_dma_alloc_pages+0x53/0x90 [ 1541.889240][T27891] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1541.889297][T27891] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 1541.889326][T27891] ? __snd_dma_alloc_pages+0x53/0x90 [ 1541.889360][T27891] __vmalloc_node_noprof+0xad/0xf0 [ 1541.889391][T27891] ? __snd_dma_alloc_pages+0x53/0x90 [ 1541.889426][T27891] ? __pfx_snd_dma_vmalloc_alloc+0x10/0x10 [ 1541.889465][T27891] __snd_dma_alloc_pages+0x53/0x90 [ 1541.889502][T27891] snd_dma_alloc_dir_pages+0x151/0x240 [ 1541.889541][T27891] do_alloc_pages+0x115/0x280 [ 1541.889578][T27891] snd_pcm_lib_malloc_pages+0x3df/0x980 [ 1541.889618][T27891] snd_pcm_hw_params+0x15e1/0x1b40 [ 1541.889657][T27891] ? __pfx_snd_pcm_hw_params+0x10/0x10 [ 1541.889694][T27891] ? snd_pcm_hw_param_near.constprop.0+0x734/0x8e0 [ 1541.889731][T27891] ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10 [ 1541.889764][T27891] ? __asan_memset+0x23/0x50 [ 1541.889800][T27891] snd_pcm_kernel_ioctl+0x147/0x2e0 [ 1541.889836][T27891] snd_pcm_oss_change_params_locked+0x1432/0x3a30 [ 1541.889893][T27891] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 1541.889953][T27891] snd_pcm_oss_get_active_substream+0x168/0x1d0 [ 1541.889988][T27891] snd_pcm_oss_ioctl+0x21e9/0x37a0 [ 1541.890021][T27891] ? hook_file_ioctl_common+0x145/0x410 [ 1541.890050][T27891] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 1541.890084][T27891] ? __fget_files+0x20e/0x3c0 [ 1541.890122][T27891] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 1541.890153][T27891] __x64_sys_ioctl+0x18e/0x210 [ 1541.890185][T27891] do_syscall_64+0xcd/0x490 [ 1541.890210][T27891] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1541.890234][T27891] RIP: 0033:0x7f0b8618e929 [ 1541.890252][T27891] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1541.890276][T27891] RSP: 002b:00007f0b86f89038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1541.890298][T27891] RAX: ffffffffffffffda RBX: 00007f0b863b5fa0 RCX: 00007f0b8618e929 [ 1541.890315][T27891] RDX: 00002000000000c0 RSI: 00000000c0045002 RDI: 0000000000000003 [ 1541.890330][T27891] RBP: 00007f0b86210b39 R08: 0000000000000000 R09: 0000000000000000 [ 1541.890345][T27891] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1541.890359][T27891] R13: 0000000000000000 R14: 00007f0b863b5fa0 R15: 00007ffda668cff8 [ 1541.890389][T27891] [ 1542.419154][T27891] syz.5.4220: vmalloc error: size 2097152, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1542.862511][T27891] CPU: 0 UID: 0 PID: 27891 Comm: syz.5.4220 Tainted: G U 6.15.0-syzkaller-13473-gc0c9379f235d #0 PREEMPT(full) [ 1542.862559][T27891] Tainted: [U]=USER [ 1542.862567][T27891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1542.862583][T27891] Call Trace: [ 1542.862591][T27891] [ 1542.862600][T27891] dump_stack_lvl+0x16c/0x1f0 [ 1542.862644][T27891] warn_alloc+0x248/0x3a0 [ 1542.862682][T27891] ? __pfx_warn_alloc+0x10/0x10 [ 1542.862721][T27891] ? kfree+0x2b4/0x4d0 [ 1542.862758][T27891] ? __get_vm_area_node+0x208/0x330 [ 1542.862794][T27891] __vmalloc_node_range_noprof+0xb2d/0x14b0 [ 1542.862828][T27891] ? __mutex_trylock_common+0xe9/0x250 [ 1542.862863][T27891] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1542.862898][T27891] ? __snd_dma_alloc_pages+0x53/0x90 [ 1542.862940][T27891] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1542.862977][T27891] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 1542.863005][T27891] ? __snd_dma_alloc_pages+0x53/0x90 [ 1542.863038][T27891] __vmalloc_node_noprof+0xad/0xf0 [ 1542.863068][T27891] ? __snd_dma_alloc_pages+0x53/0x90 [ 1542.863101][T27891] ? __pfx_snd_dma_vmalloc_alloc+0x10/0x10 [ 1542.863139][T27891] __snd_dma_alloc_pages+0x53/0x90 [ 1542.863174][T27891] snd_dma_alloc_dir_pages+0x151/0x240 [ 1542.863212][T27891] do_alloc_pages+0x115/0x280 [ 1542.863253][T27891] snd_pcm_lib_malloc_pages+0x3df/0x980 [ 1542.863293][T27891] snd_pcm_hw_params+0x15e1/0x1b40 [ 1542.863335][T27891] ? __pfx_snd_pcm_hw_params+0x10/0x10 [ 1542.863369][T27891] ? snd_pcm_hw_param_near.constprop.0+0x734/0x8e0 [ 1542.863404][T27891] ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10 [ 1542.863435][T27891] ? __asan_memset+0x23/0x50 [ 1542.863470][T27891] snd_pcm_kernel_ioctl+0x147/0x2e0 [ 1542.863505][T27891] snd_pcm_oss_change_params_locked+0x1432/0x3a30 [ 1542.863550][T27891] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 1542.863611][T27891] snd_pcm_oss_get_active_substream+0x168/0x1d0 [ 1542.863647][T27891] snd_pcm_oss_ioctl+0x21e9/0x37a0 [ 1542.863680][T27891] ? hook_file_ioctl_common+0x145/0x410 [ 1542.863708][T27891] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 1542.863742][T27891] ? __fget_files+0x20e/0x3c0 [ 1542.863780][T27891] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 1542.863832][T27891] __x64_sys_ioctl+0x18e/0x210 [ 1542.863864][T27891] do_syscall_64+0xcd/0x490 [ 1542.863890][T27891] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1542.863915][T27891] RIP: 0033:0x7f0b8618e929 [ 1542.863934][T27891] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1542.863959][T27891] RSP: 002b:00007f0b86f89038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1542.863981][T27891] RAX: ffffffffffffffda RBX: 00007f0b863b5fa0 RCX: 00007f0b8618e929 [ 1542.863998][T27891] RDX: 00002000000000c0 RSI: 00000000c0045002 RDI: 0000000000000003 [ 1542.864013][T27891] RBP: 00007f0b86210b39 R08: 0000000000000000 R09: 0000000000000000 [ 1542.864028][T27891] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1542.864043][T27891] R13: 0000000000000000 R14: 00007f0b863b5fa0 R15: 00007ffda668cff8 [ 1542.864073][T27891] [ 1542.864083][T27891] Mem-Info: [ 1543.198899][T27891] active_anon:7751 inactive_anon:32716 isolated_anon:0 [ 1543.198899][T27891] active_file:22388 inactive_file:39654 isolated_file:0 [ 1543.198899][T27891] unevictable:1767 dirty:28 writeback:6 [ 1543.198899][T27891] slab_reclaimable:11849 slab_unreclaimable:102990 [ 1543.198899][T27891] mapped:40823 shmem:29780 pagetables:1536 [ 1543.198899][T27891] sec_pagetables:0 bounce:0 [ 1543.198899][T27891] kernel_misc_reclaimable:0 [ 1543.198899][T27891] free:1246770 free_pcp:18782 free_cma:0 [ 1543.326429][T27891] Node 0 active_anon:31004kB inactive_anon:132064kB active_file:89540kB inactive_file:158424kB unevictable:5532kB isolated(anon):0kB isolated(file):0kB mapped:163292kB dirty:312kB writeback:24kB shmem:117584kB shmem_thp:2048kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:13460kB pagetables:5912kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1543.363142][T27891] Node 1 active_anon:0kB inactive_anon:0kB active_file:12kB inactive_file:192kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1543.396580][T27891] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1543.433947][T27891] lowmem_reserve[]: 0 2481 2482 2482 2482 [ 1543.452027][T27891] Node 0 DMA32 free:1072572kB boost:0kB min:34092kB low:42612kB high:51132kB reserved_highatomic:0KB free_highatomic:0KB active_anon:30956kB inactive_anon:132664kB active_file:88036kB inactive_file:158348kB unevictable:5532kB writepending:336kB present:3129332kB managed:2540904kB mlocked:3996kB bounce:0kB free_pcp:45976kB local_pcp:18208kB free_cma:0kB [ 1543.644364][T27891] lowmem_reserve[]: 0 0 1 1 1 [ 1543.659711][T27891] Node 0 Normal free:16kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:1504kB inactive_file:76kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1543.701604][T27891] lowmem_reserve[]: 0 0 0 0 0 [ 1543.706460][T27891] Node 1 Normal free:3896520kB boost:0kB min:55788kB low:69732kB high:83676kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:12kB inactive_file:192kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:27392kB local_pcp:12992kB free_cma:0kB [ 1543.755605][T27891] lowmem_reserve[]: 0 0 0 0 0 [ 1543.760887][T27891] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1543.800282][T27891] Node 0 DMA32: 2603*4kB (UME) 1206*8kB (UME) 744*16kB (UM) 485*32kB (UME) 284*64kB (UME) 290*128kB (UM) 232*256kB (ME) 193*512kB (ME) 58*1024kB (ME) 2*2048kB (ME) 183*4096kB (M) = 1074044kB [ 1543.813775][T27903] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4222'. [ 1543.854874][T27891] Node 0 Normal: 0*4kB 2*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 1543.918582][T27891] Node 1 Normal: 210*4kB (UME) 58*8kB (UME) 39*16kB (UME) 208*32kB (UME) 99*64kB (UME) 41*128kB (UME) 12*256kB (UM) 5*512kB (U) 6*1024kB (UME) 5*2048kB (UME) 941*4096kB (M) = 3896520kB [ 1543.980378][T27891] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1544.048776][T27891] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1544.077705][T27891] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1544.144032][T27891] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1544.155561][T27891] 92521 total pagecache pages [ 1544.193308][T27891] 0 pages in swap cache [ 1544.205084][T27891] Free swap = 124984kB [ 1544.215210][T27891] Total swap = 124996kB [ 1544.235477][T27891] 2097051 pages RAM [ 1544.258896][T27912] FAULT_INJECTION: forcing a failure. [ 1544.258896][T27912] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1544.262261][T27891] 0 pages HighMem/MovableOnly [ 1544.291567][T27912] CPU: 1 UID: 0 PID: 27912 Comm: syz.3.4225 Tainted: G U 6.15.0-syzkaller-13473-gc0c9379f235d #0 PREEMPT(full) [ 1544.291620][T27912] Tainted: [U]=USER [ 1544.291632][T27912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1544.291651][T27912] Call Trace: [ 1544.291662][T27912] [ 1544.291675][T27912] dump_stack_lvl+0x16c/0x1f0 [ 1544.291736][T27912] should_fail_ex+0x512/0x640 [ 1544.291801][T27912] _copy_from_user+0x2e/0xd0 [ 1544.291834][T27912] copy_msghdr_from_user+0x98/0x160 [ 1544.291869][T27912] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1544.291909][T27912] ? kfree+0x24f/0x4d0 [ 1544.291951][T27912] ? __lock_acquire+0x622/0x1c90 [ 1544.292002][T27912] ___sys_recvmsg+0xdb/0x1a0 [ 1544.292035][T27912] ? __pfx____sys_recvmsg+0x10/0x10 [ 1544.292088][T27912] ? __pfx___might_resched+0x10/0x10 [ 1544.292131][T27912] do_recvmmsg+0x2fe/0x750 [ 1544.292170][T27912] ? __pfx_do_recvmmsg+0x10/0x10 [ 1544.292212][T27912] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 1544.292260][T27912] ? __fget_files+0x20e/0x3c0 [ 1544.292317][T27912] __x64_sys_recvmmsg+0x22a/0x280 [ 1544.292355][T27912] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1544.292404][T27912] do_syscall_64+0xcd/0x490 [ 1544.292440][T27912] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1544.292473][T27912] RIP: 0033:0x7f6caad8e929 [ 1544.292500][T27912] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1544.292532][T27912] RSP: 002b:00007f6cabc0f038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1544.292563][T27912] RAX: ffffffffffffffda RBX: 00007f6caafb6080 RCX: 00007f6caad8e929 [ 1544.292585][T27912] RDX: 0000000000010000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1544.292604][T27912] RBP: 00007f6cabc0f090 R08: 0000000000000000 R09: 0000000000000000 [ 1544.292624][T27912] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1544.292649][T27912] R13: 0000000000000000 R14: 00007f6caafb6080 R15: 00007ffe1c090778 [ 1544.292691][T27912] [ 1544.295302][T27891] 429783 pages reserved [ 1544.574967][T27891] 0 pages cma reserved [ 1545.323537][ T31] audit: type=1800 audit(6044227220.424:24): pid=27928 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.4232" name="dbroot" dev="configfs" ino=99334 res=0 errno=0 [ 1545.325755][T27928] db_root: not a directory: /dev/audio1 [ 1545.438275][T27926] FAULT_INJECTION: forcing a failure. [ 1545.438275][T27926] name failslab, interval 1, probability 0, space 0, times 0 [ 1545.492240][T27926] CPU: 0 UID: 0 PID: 27926 Comm: syz.3.4231 Tainted: G U 6.15.0-syzkaller-13473-gc0c9379f235d #0 PREEMPT(full) [ 1545.492300][T27926] Tainted: [U]=USER [ 1545.492312][T27926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1545.492332][T27926] Call Trace: [ 1545.492344][T27926] [ 1545.492358][T27926] dump_stack_lvl+0x16c/0x1f0 [ 1545.492422][T27926] should_fail_ex+0x512/0x640 [ 1545.492475][T27926] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 1545.492536][T27926] should_failslab+0xc2/0x120 [ 1545.492584][T27926] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1545.492641][T27926] ? __proc_create+0xc3/0x8c0 [ 1545.492672][T27926] ? __proc_create+0x2ce/0x8c0 [ 1545.492711][T27926] __proc_create+0x2ce/0x8c0 [ 1545.492745][T27926] ? __pfx___proc_create+0x10/0x10 [ 1545.492786][T27926] ? mark_held_locks+0x49/0x80 [ 1545.492836][T27926] _proc_mkdir+0xb9/0x200 [ 1545.492869][T27926] ? __pfx__proc_mkdir+0x10/0x10 [ 1545.492915][T27926] sctp_proc_init+0x59/0x270 [ 1545.492952][T27926] ? __pfx_sctp_defaults_init+0x10/0x10 [ 1545.492988][T27926] sctp_defaults_init+0x74a/0xd80 [ 1545.493028][T27926] ? __pfx_sctp_defaults_init+0x10/0x10 [ 1545.493066][T27926] ops_init+0x1e2/0x5f0 [ 1545.493109][T27926] setup_net+0x1ff/0x510 [ 1545.493144][T27926] ? lockdep_init_map_type+0x5c/0x280 [ 1545.493190][T27926] ? __pfx_setup_net+0x10/0x10 [ 1545.493231][T27926] ? debug_mutex_init+0x37/0x70 [ 1545.493270][T27926] copy_net_ns+0x2a6/0x5f0 [ 1545.493314][T27926] create_new_namespaces+0x3ea/0xa90 [ 1545.493361][T27926] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1545.493401][T27926] ksys_unshare+0x45b/0xa40 [ 1545.493446][T27926] ? __pfx_ksys_unshare+0x10/0x10 [ 1545.493493][T27926] ? xfd_validate_state+0x61/0x180 [ 1545.493550][T27926] __x64_sys_unshare+0x31/0x40 [ 1545.493606][T27926] do_syscall_64+0xcd/0x490 [ 1545.493644][T27926] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1545.493681][T27926] RIP: 0033:0x7f6caad8e929 [ 1545.493710][T27926] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1545.493745][T27926] RSP: 002b:00007f6cabc30038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1545.493779][T27926] RAX: ffffffffffffffda RBX: 00007f6caafb5fa0 RCX: 00007f6caad8e929 [ 1545.493801][T27926] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1545.493823][T27926] RBP: 00007f6caae10b39 R08: 0000000000000000 R09: 0000000000000000 [ 1545.493844][T27926] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1545.493864][T27926] R13: 0000000000000000 R14: 00007f6caafb5fa0 R15: 00007ffe1c090778 [ 1545.493909][T27926] [ 1548.125699][T20148] Bluetooth: hci3: unexpected event 0x36 length: 123 > 7 [ 1548.153368][T27974] FAULT_INJECTION: forcing a failure. [ 1548.153368][T27974] name failslab, interval 1, probability 0, space 0, times 0 [ 1548.173657][T27974] CPU: 0 UID: 0 PID: 27974 Comm: syz.5.4243 Tainted: G U 6.15.0-syzkaller-13473-gc0c9379f235d #0 PREEMPT(full) [ 1548.173710][T27974] Tainted: [U]=USER [ 1548.173722][T27974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1548.173742][T27974] Call Trace: [ 1548.173753][T27974] [ 1548.173766][T27974] dump_stack_lvl+0x16c/0x1f0 [ 1548.173825][T27974] should_fail_ex+0x512/0x640 [ 1548.173876][T27974] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 1548.173928][T27974] should_failslab+0xc2/0x120 [ 1548.173962][T27974] __kmalloc_cache_noprof+0x6a/0x3e0 [ 1548.174018][T27974] ? allocate_file_region_entries+0x15b/0x620 [ 1548.174069][T27974] ? allocate_file_region_entries+0x1a0/0x620 [ 1548.174126][T27974] allocate_file_region_entries+0x1a0/0x620 [ 1548.174186][T27974] ? __pfx_allocate_file_region_entries+0x10/0x10 [ 1548.174251][T27974] region_chg+0x85/0x140 [ 1548.174303][T27974] __vma_reservation_common+0x43b/0x740 [ 1548.174364][T27974] ? __pfx___vma_reservation_common+0x10/0x10 [ 1548.174415][T27974] ? want_pmd_share+0x141/0x180 [ 1548.174457][T27974] ? huge_pte_alloc+0x38e/0x5b0 [ 1548.174505][T27974] hugetlb_fault+0x1764/0x3060 [ 1548.174556][T27974] ? __pfx_hugetlb_fault+0x10/0x10 [ 1548.174620][T27974] ? find_vma+0xbf/0x140 [ 1548.174653][T27974] ? __pfx_find_vma+0x10/0x10 [ 1548.174692][T27974] handle_mm_fault+0xbfa/0xd10 [ 1548.174739][T27974] ? __pkru_allows_pkey+0x21/0xb0 [ 1548.174786][T27974] do_user_addr_fault+0x7a6/0x1370 [ 1548.174834][T27974] ? rcu_is_watching+0x12/0xc0 [ 1548.174872][T27974] exc_page_fault+0x5c/0xb0 [ 1548.174924][T27974] asm_exc_page_fault+0x26/0x30 [ 1548.174956][T27974] RIP: 0010:__put_user_4+0xd/0x20 [ 1548.174985][T27974] Code: 66 89 01 31 c9 0f 01 ca e9 d0 5a 03 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 0f 1f 80 00 00 00 00 90 90 90 [ 1548.175015][T27974] RSP: 0018:ffffc90004f4fcb0 EFLAGS: 00050246 [ 1548.175040][T27974] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 1548.175059][T27974] RDX: 1ffff1100fccdeae RSI: ffffffff8994c544 RDI: ffffffff8bf55a60 [ 1548.175079][T27974] RBP: 0000000000000000 R08: a23edf14cf8df726 R09: 0000000000000000 [ 1548.175099][T27974] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000 [ 1548.175116][T27974] R13: 1ffff920009e9f9f R14: ffff88807e66f000 R15: 0000000000000000 [ 1548.175151][T27974] ? netlink_getsockopt+0x494/0x5a0 [ 1548.175192][T27974] netlink_getsockopt+0x4da/0x5a0 [ 1548.175234][T27974] ? __pfx_netlink_getsockopt+0x10/0x10 [ 1548.175272][T27974] ? rep_movs_alternative+0xf/0x90 [ 1548.175315][T27974] ? __pfx_netlink_getsockopt+0x10/0x10 [ 1548.175351][T27974] do_sock_getsockopt+0x3ff/0x800 [ 1548.175408][T27974] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1548.175447][T27974] ? __fget_files+0x204/0x3c0 [ 1548.175514][T27974] __sys_getsockopt+0x123/0x1b0 [ 1548.175576][T27974] __x64_sys_getsockopt+0xbd/0x160 [ 1548.175626][T27974] ? do_syscall_64+0x91/0x490 [ 1548.175655][T27974] ? lockdep_hardirqs_on+0x7c/0x110 [ 1548.175705][T27974] do_syscall_64+0xcd/0x490 [ 1548.175739][T27974] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1548.175770][T27974] RIP: 0033:0x7f0b8618e929 [ 1548.175796][T27974] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1548.175825][T27974] RSP: 002b:00007f0b86f89038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1548.175853][T27974] RAX: ffffffffffffffda RBX: 00007f0b863b5fa0 RCX: 00007f0b8618e929 [ 1548.175874][T27974] RDX: 0000000000000009 RSI: 000000000000010e RDI: 0000000000000003 [ 1548.175893][T27974] RBP: 00007f0b86f89090 R08: 0000000000000000 R09: 0000000000000000 [ 1548.175911][T27974] R10: 9999999999999999 R11: 0000000000000246 R12: 0000000000000001 [ 1548.175930][T27974] R13: 0000000000000000 R14: 00007f0b863b5fa0 R15: 00007ffda668cff8 [ 1548.175970][T27974] [ 1548.811126][T27978] bond0: option packets_per_slave: invalid value ( Xµn‘pæ) [ 1548.821391][T27978] bond0: option packets_per_slave: allowed values 0 - 65535 [ 1549.025569][T27589] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 1549.907663][T27999] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input13 [ 1550.324692][T28000] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input14 [ 1552.000411][T28031] blktrace: Concurrent blktraces are not allowed on ram7 [ 1552.030355][T28031] FAULT_INJECTION: forcing a failure. [ 1552.030355][T28031] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1552.053000][T28031] CPU: 0 UID: 0 PID: 28031 Comm: syz.3.4257 Tainted: G U 6.15.0-syzkaller-13473-gc0c9379f235d #0 PREEMPT(full) [ 1552.053056][T28031] Tainted: [U]=USER [ 1552.053068][T28031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1552.053089][T28031] Call Trace: [ 1552.053101][T28031] [ 1552.053114][T28031] dump_stack_lvl+0x16c/0x1f0 [ 1552.053177][T28031] should_fail_ex+0x512/0x640 [ 1552.053249][T28031] should_fail_alloc_page+0xe7/0x130 [ 1552.053287][T28031] prepare_alloc_pages+0x3c2/0x610 [ 1552.053330][T28031] ? rcu_is_watching+0x12/0xc0 [ 1552.053368][T28031] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 1552.053429][T28031] ? rcu_is_watching+0x12/0xc0 [ 1552.053464][T28031] ? trace_mm_page_alloc+0x11f/0x1a0 [ 1552.053506][T28031] ? __alloc_frozen_pages_noprof+0x294/0x23f0 [ 1552.053559][T28031] ? stack_trace_save+0x8e/0xc0 [ 1552.053599][T28031] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1552.053668][T28031] ? kmem_cache_alloc_node_noprof+0x1d5/0x3b0 [ 1552.053749][T28031] ? __get_vm_area_node+0x1ca/0x330 [ 1552.053792][T28031] ? __vmalloc_node_noprof+0xad/0xf0 [ 1552.053835][T28031] ? __snd_dma_alloc_pages+0x53/0x90 [ 1552.053884][T28031] ? snd_dma_alloc_dir_pages+0x151/0x240 [ 1552.053934][T28031] ? do_alloc_pages+0x115/0x280 [ 1552.053979][T28031] ? snd_pcm_lib_malloc_pages+0x3df/0x980 [ 1552.054028][T28031] ? snd_pcm_hw_params+0x15e1/0x1b40 [ 1552.054074][T28031] ? snd_pcm_kernel_ioctl+0x147/0x2e0 [ 1552.054126][T28031] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1552.054171][T28031] alloc_pages_bulk_noprof+0x71c/0x1410 [ 1552.054225][T28031] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1552.054283][T28031] ? policy_nodemask+0xea/0x4e0 [ 1552.054322][T28031] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 1552.054379][T28031] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1552.054434][T28031] kasan_populate_vmalloc+0xf1/0x1f0 [ 1552.054495][T28031] alloc_vmap_area+0x959/0x29c0 [ 1552.054551][T28031] ? __pfx_alloc_vmap_area+0x10/0x10 [ 1552.054605][T28031] __get_vm_area_node+0x1ca/0x330 [ 1552.054657][T28031] __vmalloc_node_range_noprof+0x271/0x14b0 [ 1552.054705][T28031] ? __snd_dma_alloc_pages+0x53/0x90 [ 1552.054767][T28031] ? __mutex_trylock_common+0xe9/0x250 [ 1552.054819][T28031] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1552.054869][T28031] ? __snd_dma_alloc_pages+0x53/0x90 [ 1552.054932][T28031] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1552.054987][T28031] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 1552.055030][T28031] ? __snd_dma_alloc_pages+0x53/0x90 [ 1552.055080][T28031] __vmalloc_node_noprof+0xad/0xf0 [ 1552.055125][T28031] ? __snd_dma_alloc_pages+0x53/0x90 [ 1552.055175][T28031] ? __pfx_snd_dma_vmalloc_alloc+0x10/0x10 [ 1552.055241][T28031] __snd_dma_alloc_pages+0x53/0x90 [ 1552.055293][T28031] snd_dma_alloc_dir_pages+0x151/0x240 [ 1552.055350][T28031] do_alloc_pages+0x115/0x280 [ 1552.055404][T28031] snd_pcm_lib_malloc_pages+0x3df/0x980 [ 1552.055464][T28031] snd_pcm_hw_params+0x15e1/0x1b40 [ 1552.055522][T28031] ? __pfx_snd_pcm_hw_params+0x10/0x10 [ 1552.055574][T28031] ? snd_pcm_hw_param_near.constprop.0+0x734/0x8e0 [ 1552.055626][T28031] ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10 [ 1552.055672][T28031] ? __asan_memset+0x23/0x50 [ 1552.055721][T28031] snd_pcm_kernel_ioctl+0x147/0x2e0 [ 1552.055774][T28031] snd_pcm_oss_change_params_locked+0x1432/0x3a30 [ 1552.055830][T28031] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 1552.055897][T28031] snd_pcm_oss_get_active_substream+0x168/0x1d0 [ 1552.055942][T28031] snd_pcm_oss_ioctl+0x21e9/0x37a0 [ 1552.055982][T28031] ? hook_file_ioctl_common+0x145/0x410 [ 1552.056024][T28031] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 1552.056074][T28031] ? __fget_files+0x20e/0x3c0 [ 1552.056130][T28031] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 1552.056179][T28031] __x64_sys_ioctl+0x18e/0x210 [ 1552.056224][T28031] do_syscall_64+0xcd/0x490 [ 1552.056260][T28031] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1552.056295][T28031] RIP: 0033:0x7f6caad8e929 [ 1552.056321][T28031] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1552.056355][T28031] RSP: 002b:00007f6cabc30038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1552.056387][T28031] RAX: ffffffffffffffda RBX: 00007f6caafb5fa0 RCX: 00007f6caad8e929 [ 1552.056411][T28031] RDX: 00002000000000c0 RSI: 00000000c0045002 RDI: 0000000000000003 [ 1552.056432][T28031] RBP: 00007f6caae10b39 R08: 0000000000000000 R09: 0000000000000000 [ 1552.056453][T28031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1552.056473][T28031] R13: 0000000000000000 R14: 00007f6caafb5fa0 R15: 00007ffe1c090778 [ 1552.056516][T28031] [ 1552.599795][T28031] syz.3.4257: vmalloc error: size 2097152, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1552.660980][T28031] CPU: 1 UID: 0 PID: 28031 Comm: syz.3.4257 Tainted: G U 6.15.0-syzkaller-13473-gc0c9379f235d #0 PREEMPT(full) [ 1552.661041][T28031] Tainted: [U]=USER [ 1552.661054][T28031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1552.661075][T28031] Call Trace: [ 1552.661087][T28031] [ 1552.661101][T28031] dump_stack_lvl+0x16c/0x1f0 [ 1552.661165][T28031] warn_alloc+0x248/0x3a0 [ 1552.661223][T28031] ? __pfx_warn_alloc+0x10/0x10 [ 1552.661280][T28031] ? kfree+0x2b4/0x4d0 [ 1552.661336][T28031] ? __get_vm_area_node+0x208/0x330 [ 1552.661391][T28031] __vmalloc_node_range_noprof+0xb2d/0x14b0 [ 1552.661443][T28031] ? __mutex_trylock_common+0xe9/0x250 [ 1552.661494][T28031] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1552.661546][T28031] ? __snd_dma_alloc_pages+0x53/0x90 [ 1552.661611][T28031] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1552.661667][T28031] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 1552.661709][T28031] ? __snd_dma_alloc_pages+0x53/0x90 [ 1552.661766][T28031] __vmalloc_node_noprof+0xad/0xf0 [ 1552.661817][T28031] ? __snd_dma_alloc_pages+0x53/0x90 [ 1552.661867][T28031] ? __pfx_snd_dma_vmalloc_alloc+0x10/0x10 [ 1552.661925][T28031] __snd_dma_alloc_pages+0x53/0x90 [ 1552.661977][T28031] snd_dma_alloc_dir_pages+0x151/0x240 [ 1552.662035][T28031] do_alloc_pages+0x115/0x280 [ 1552.662089][T28031] snd_pcm_lib_malloc_pages+0x3df/0x980 [ 1552.662147][T28031] snd_pcm_hw_params+0x15e1/0x1b40 [ 1552.662206][T28031] ? __pfx_snd_pcm_hw_params+0x10/0x10 [ 1552.662258][T28031] ? snd_pcm_hw_param_near.constprop.0+0x734/0x8e0 [ 1552.662310][T28031] ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10 [ 1552.662358][T28031] ? __asan_memset+0x23/0x50 [ 1552.662410][T28031] snd_pcm_kernel_ioctl+0x147/0x2e0 [ 1552.662463][T28031] snd_pcm_oss_change_params_locked+0x1432/0x3a30 [ 1552.662538][T28031] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 1552.662619][T28031] snd_pcm_oss_get_active_substream+0x168/0x1d0 [ 1552.662679][T28031] snd_pcm_oss_ioctl+0x21e9/0x37a0 [ 1552.662728][T28031] ? hook_file_ioctl_common+0x145/0x410 [ 1552.662777][T28031] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 1552.662828][T28031] ? __fget_files+0x20e/0x3c0 [ 1552.662885][T28031] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 1552.662935][T28031] __x64_sys_ioctl+0x18e/0x210 [ 1552.662983][T28031] do_syscall_64+0xcd/0x490 [ 1552.663021][T28031] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1552.663057][T28031] RIP: 0033:0x7f6caad8e929 [ 1552.663085][T28031] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1552.663119][T28031] RSP: 002b:00007f6cabc30038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1552.663151][T28031] RAX: ffffffffffffffda RBX: 00007f6caafb5fa0 RCX: 00007f6caad8e929 [ 1552.663176][T28031] RDX: 00002000000000c0 RSI: 00000000c0045002 RDI: 0000000000000003 [ 1552.663199][T28031] RBP: 00007f6caae10b39 R08: 0000000000000000 R09: 0000000000000000 [ 1552.663221][T28031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1552.663243][T28031] R13: 0000000000000000 R14: 00007f6caafb5fa0 R15: 00007ffe1c090778 [ 1552.663290][T28031] [ 1552.981158][T28031] Mem-Info: [ 1552.984763][T28031] active_anon:7751 inactive_anon:32838 isolated_anon:0 [ 1552.984763][T28031] active_file:22275 inactive_file:39761 isolated_file:0 [ 1552.984763][T28031] unevictable:1767 dirty:0 writeback:6 [ 1552.984763][T28031] slab_reclaimable:11901 slab_unreclaimable:103581 [ 1552.984763][T28031] mapped:38836 shmem:29768 pagetables:1536 [ 1552.984763][T28031] sec_pagetables:0 bounce:0 [ 1552.984763][T28031] kernel_misc_reclaimable:0 [ 1552.984763][T28031] free:1245635 free_pcp:15679 free_cma:0 [ 1553.031135][T28031] Node 0 active_anon:31004kB inactive_anon:131320kB active_file:89088kB inactive_file:158852kB unevictable:5532kB isolated(anon):0kB isolated(file):0kB mapped:155316kB dirty:0kB writeback:0kB shmem:117532kB shmem_thp:2048kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:13276kB pagetables:5976kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1553.065745][T28031] Node 1 active_anon:0kB inactive_anon:0kB active_file:12kB inactive_file:192kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1553.098915][T28031] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1553.101546][T28022] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1553.128822][T28031] lowmem_reserve[]: 0 2481 2482 2482 2482 [ 1553.140048][T28031] Node 0 DMA32 free:1069676kB boost:0kB min:34092kB low:42612kB high:51132kB reserved_highatomic:0KB free_highatomic:0KB active_anon:30956kB inactive_anon:131220kB active_file:87584kB inactive_file:158776kB unevictable:5532kB writepending:0kB present:3129332kB managed:2540904kB mlocked:3996kB bounce:0kB free_pcp:36276kB local_pcp:18476kB free_cma:0kB [ 1553.174798][T28031] lowmem_reserve[]: 0 0 1 1 1 [ 1553.179723][T28031] Node 0 Normal free:16kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:1504kB inactive_file:76kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1553.217188][T28022] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1553.223689][T28031] lowmem_reserve[]: 0 0 0 0 0 [ 1553.233774][T28031] Node 1 Normal free:3897024kB boost:0kB min:55788kB low:69732kB high:83676kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:12kB inactive_file:192kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:26888kB local_pcp:10508kB free_cma:0kB [ 1553.302771][T28022] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1553.320191][T28036] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4258'. [ 1553.325182][T28022] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1553.345303][T28031] lowmem_reserve[]: 0 0 0 0 0 [ 1553.352319][T28022] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1553.358450][T28031] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1553.371679][T28022] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1553.404851][T28031] Node 0 DMA32: 1977*4kB (ME) 917*8kB (UME) 949*16kB (UM) 673*32kB (UM) 355*64kB (UM) 295*128kB (ME) 225*256kB (M) 197*512kB (UME) 64*1024kB (UME) 4*2048kB (UME) 177*4096kB (M) = 1069628kB [ 1553.510787][T28031] Node 0 Normal: 0*4kB 2*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 1553.564882][T28031] Node 1 Normal: 214*4kB (UME) 61*8kB (UME) 42*16kB (UME) 209*32kB (UME) 99*64kB (UME) 44*128kB (UME) 12*256kB (UM) 5*512kB (U) 6*1024kB (UME) 5*2048kB (UME) 941*4096kB (M) = 3897024kB [ 1553.694796][T28031] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1553.708795][T28031] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1553.734789][T28031] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1553.754866][T28031] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1553.789683][T28031] 92516 total pagecache pages [ 1553.794440][T28031] 0 pages in swap cache [ 1553.834680][T28031] Free swap = 124996kB [ 1553.842350][T28031] Total swap = 124996kB [ 1553.854492][T28031] 2097051 pages RAM [ 1553.876946][T28031] 0 pages HighMem/MovableOnly [ 1553.883376][T28031] 429783 pages reserved [ 1553.902157][T28031] 0 pages cma reserved [ 1554.232200][T28056] FAULT_INJECTION: forcing a failure. [ 1554.232200][T28056] name failslab, interval 1, probability 0, space 0, times 0 [ 1554.279705][T28056] CPU: 1 UID: 0 PID: 28056 Comm: syz.6.4265 Tainted: G U 6.15.0-syzkaller-13473-gc0c9379f235d #0 PREEMPT(full) [ 1554.279765][T28056] Tainted: [U]=USER [ 1554.279777][T28056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1554.279806][T28056] Call Trace: [ 1554.279818][T28056] [ 1554.279832][T28056] dump_stack_lvl+0x16c/0x1f0 [ 1554.279895][T28056] should_fail_ex+0x512/0x640 [ 1554.279948][T28056] ? __kmalloc_noprof+0xbf/0x510 [ 1554.280007][T28056] ? devlink_fmsg_put_name+0xf0/0x3f0 [ 1554.280048][T28056] should_failslab+0xc2/0x120 [ 1554.280085][T28056] __kmalloc_noprof+0xd2/0x510 [ 1554.280150][T28056] devlink_fmsg_put_name+0xf0/0x3f0 [ 1554.280199][T28056] devlink_fmsg_binary_pair_put+0xd1/0x4f0 [ 1554.280263][T28056] nsim_dev_dummy_fmsg_put+0xb5/0x1e0 [ 1554.280309][T28056] devlink_health_do_dump+0x240/0x620 [ 1554.280364][T28056] devlink_health_report+0x3c9/0x9c0 [ 1554.280423][T28056] ? __pfx_devlink_health_report+0x10/0x10 [ 1554.280475][T28056] ? _copy_from_user+0x59/0xd0 [ 1554.280514][T28056] nsim_dev_health_break_write+0x166/0x210 [ 1554.280556][T28056] ? __pfx_nsim_dev_health_break_write+0x10/0x10 [ 1554.280613][T28056] full_proxy_write+0x13f/0x200 [ 1554.280652][T28056] ? __pfx_full_proxy_write+0x10/0x10 [ 1554.280687][T28056] vfs_write+0x2a0/0x1150 [ 1554.280747][T28056] ? __pfx___mutex_lock+0x10/0x10 [ 1554.280789][T28056] ? __pfx_vfs_write+0x10/0x10 [ 1554.280855][T28056] ? __fget_files+0x20e/0x3c0 [ 1554.280920][T28056] ksys_write+0x12a/0x250 [ 1554.280971][T28056] ? __pfx_ksys_write+0x10/0x10 [ 1554.281038][T28056] do_syscall_64+0xcd/0x490 [ 1554.281076][T28056] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1554.281113][T28056] RIP: 0033:0x7ff22578e929 [ 1554.281141][T28056] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1554.281176][T28056] RSP: 002b:00007ff226642038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1554.281209][T28056] RAX: ffffffffffffffda RBX: 00007ff2259b5fa0 RCX: 00007ff22578e929 [ 1554.281232][T28056] RDX: 00000000000001ff RSI: 0000000000000000 RDI: 0000000000000005 [ 1554.281254][T28056] RBP: 00007ff225810b39 R08: 0000000000000000 R09: 0000000000000000 [ 1554.281276][T28056] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1554.281297][T28056] R13: 0000000000000000 R14: 00007ff2259b5fa0 R15: 00007ffc37ed7908 [ 1554.281343][T28056] [ 1555.203813][T27589] Bluetooth: hci0: command 0x0c1a tx timeout [ 1555.266211][T27589] Bluetooth: hci2: command 0x0c1a tx timeout [ 1555.344795][T27589] Bluetooth: hci1: command 0x0c1a tx timeout [ 1555.350914][T27589] Bluetooth: hci3: command 0x0c1a tx timeout [ 1555.429434][T28054] Process accounting resumed [ 1555.449689][T27589] Bluetooth: hci5: command 0x0c1a tx timeout [ 1555.455836][T20148] Bluetooth: hci4: command 0x0c1a tx timeout [ 1556.009497][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1556.018012][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1556.448602][ T31] audit: type=1800 audit(4294967300.270:25): pid=28092 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.4273" name="lu_gp_id" dev="configfs" ino=100629 res=0 errno=0 [ 1556.451270][T28092] ALUA LU Group already has a valid ID, ignoring request [ 1556.849042][ T31] audit: type=1800 audit(4294967300.670:26): pid=28101 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4275" name="dbroot" dev="configfs" ino=99848 res=0 errno=0 [ 1556.878825][T28101] db_root: not a directory: /dev/audio1 [ 1557.326034][T28112] FAULT_INJECTION: forcing a failure. [ 1557.326034][T28112] name failslab, interval 1, probability 0, space 0, times 0 [ 1557.354799][T28112] CPU: 0 UID: 0 PID: 28112 Comm: syz.6.4278 Tainted: G U 6.15.0-syzkaller-13473-gc0c9379f235d #0 PREEMPT(full) [ 1557.354842][T28112] Tainted: [U]=USER [ 1557.354850][T28112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1557.354865][T28112] Call Trace: [ 1557.354874][T28112] [ 1557.354883][T28112] dump_stack_lvl+0x16c/0x1f0 [ 1557.354927][T28112] should_fail_ex+0x512/0x640 [ 1557.354965][T28112] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 1557.355003][T28112] should_failslab+0xc2/0x120 [ 1557.355028][T28112] __kmalloc_cache_noprof+0x6a/0x3e0 [ 1557.355061][T28112] ? kasan_save_track+0x14/0x30 [ 1557.355098][T28112] ? snd_info_text_entry_open+0xfb/0x2a0 [ 1557.355133][T28112] snd_info_text_entry_open+0xfb/0x2a0 [ 1557.355163][T28112] ? __pfx_snd_info_text_entry_open+0x10/0x10 [ 1557.355192][T28112] ? trace_kmem_cache_alloc+0x28/0xc0 [ 1557.355219][T28112] ? __pfx_apparmor_file_open+0x10/0x10 [ 1557.355265][T28112] ? proc_reg_open+0x21d/0x610 [ 1557.355303][T28112] ? __pfx_snd_info_text_entry_open+0x10/0x10 [ 1557.355334][T28112] proc_reg_open+0x286/0x610 [ 1557.355377][T28112] do_dentry_open+0x741/0x1c10 [ 1557.355416][T28112] ? __pfx_proc_reg_open+0x10/0x10 [ 1557.355458][T28112] vfs_open+0x82/0x3f0 [ 1557.355490][T28112] path_openat+0x1de4/0x2cb0 [ 1557.355537][T28112] ? __pfx_path_openat+0x10/0x10 [ 1557.355576][T28112] ? __lock_acquire+0xb8a/0x1c90 [ 1557.355612][T28112] do_filp_open+0x20b/0x470 [ 1557.355649][T28112] ? __pfx_do_filp_open+0x10/0x10 [ 1557.355708][T28112] ? alloc_fd+0x471/0x7d0 [ 1557.355750][T28112] do_sys_openat2+0x11b/0x1d0 [ 1557.355779][T28112] ? __pfx_do_sys_openat2+0x10/0x10 [ 1557.355819][T28112] __x64_sys_openat+0x174/0x210 [ 1557.355848][T28112] ? __pfx___x64_sys_openat+0x10/0x10 [ 1557.355890][T28112] do_syscall_64+0xcd/0x490 [ 1557.355916][T28112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1557.355941][T28112] RIP: 0033:0x7ff22578e929 [ 1557.355960][T28112] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1557.355984][T28112] RSP: 002b:00007ff226621038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1557.356007][T28112] RAX: ffffffffffffffda RBX: 00007ff2259b6080 RCX: 00007ff22578e929 [ 1557.356022][T28112] RDX: 0000000000000000 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 1557.356039][T28112] RBP: 00007ff225810b39 R08: 0000000000000000 R09: 0000000000000000 [ 1557.356054][T28112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1557.356070][T28112] R13: 0000000000000000 R14: 00007ff2259b6080 R15: 00007ffc37ed7908 [ 1557.356100][T28112] [ 1558.421223][T28120] blktrace: Concurrent blktraces are not allowed on ram7 [ 1558.444323][T28123] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input16 [ 1558.573878][T28126] netlink: 'syz.3.4281': attribute type 1 has an invalid length. [ 1558.577425][T28124] netlink: 'syz.3.4281': attribute type 1 has an invalid length. [ 1558.641006][T28126] netlink: 33 bytes leftover after parsing attributes in process `syz.3.4281'. [ 1558.664179][T28124] netlink: 33 bytes leftover after parsing attributes in process `syz.3.4281'. [ 1561.824187][T28169] FAULT_INJECTION: forcing a failure. [ 1561.824187][T28169] name failslab, interval 1, probability 0, space 0, times 0 [ 1561.859318][T28169] CPU: 0 UID: 0 PID: 28169 Comm: syz.0.4293 Tainted: G U 6.15.0-syzkaller-13473-gc0c9379f235d #0 PREEMPT(full) [ 1561.859379][T28169] Tainted: [U]=USER [ 1561.859393][T28169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1561.859415][T28169] Call Trace: [ 1561.859426][T28169] [ 1561.859440][T28169] dump_stack_lvl+0x16c/0x1f0 [ 1561.859506][T28169] should_fail_ex+0x512/0x640 [ 1561.859559][T28169] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 1561.859614][T28169] should_failslab+0xc2/0x120 [ 1561.859650][T28169] __kmalloc_cache_noprof+0x6a/0x3e0 [ 1561.859698][T28169] ? kasan_save_track+0x14/0x30 [ 1561.859751][T28169] ? snd_info_text_entry_open+0xfb/0x2a0 [ 1561.859801][T28169] snd_info_text_entry_open+0xfb/0x2a0 [ 1561.859846][T28169] ? __pfx_snd_info_text_entry_open+0x10/0x10 [ 1561.859909][T28169] ? trace_kmem_cache_alloc+0x28/0xc0 [ 1561.859949][T28169] ? __pfx_apparmor_file_open+0x10/0x10 [ 1561.859996][T28169] ? proc_reg_open+0x21d/0x610 [ 1561.860049][T28169] ? __pfx_snd_info_text_entry_open+0x10/0x10 [ 1561.860094][T28169] proc_reg_open+0x286/0x610 [ 1561.860149][T28169] do_dentry_open+0x741/0x1c10 [ 1561.860204][T28169] ? __pfx_proc_reg_open+0x10/0x10 [ 1561.860265][T28169] vfs_open+0x82/0x3f0 [ 1561.860311][T28169] path_openat+0x1de4/0x2cb0 [ 1561.860380][T28169] ? __pfx_path_openat+0x10/0x10 [ 1561.860436][T28169] ? __lock_acquire+0xb8a/0x1c90 [ 1561.860488][T28169] do_filp_open+0x20b/0x470 [ 1561.860542][T28169] ? __pfx_do_filp_open+0x10/0x10 [ 1561.860628][T28169] ? alloc_fd+0x471/0x7d0 [ 1561.860689][T28169] do_sys_openat2+0x11b/0x1d0 [ 1561.860730][T28169] ? __pfx_do_sys_openat2+0x10/0x10 [ 1561.860790][T28169] __x64_sys_openat+0x174/0x210 [ 1561.860834][T28169] ? __pfx___x64_sys_openat+0x10/0x10 [ 1561.860901][T28169] do_syscall_64+0xcd/0x490 [ 1561.860940][T28169] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1561.860976][T28169] RIP: 0033:0x7f392198e929 [ 1561.861006][T28169] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1561.861042][T28169] RSP: 002b:00007f39228a2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1561.861076][T28169] RAX: ffffffffffffffda RBX: 00007f3921bb6080 RCX: 00007f392198e929 [ 1561.861100][T28169] RDX: 0000000000000000 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 1561.861123][T28169] RBP: 00007f3921a10b39 R08: 0000000000000000 R09: 0000000000000000 [ 1561.861144][T28169] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1561.861166][T28169] R13: 0000000000000000 R14: 00007f3921bb6080 R15: 00007ffd2fed5a98 [ 1561.861210][T28169] [ 1561.876630][T28170] FAULT_INJECTION: forcing a failure. [ 1561.876630][T28170] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1562.161614][T28170] CPU: 1 UID: 0 PID: 28170 Comm: syz.6.4292 Tainted: G U 6.15.0-syzkaller-13473-gc0c9379f235d #0 PREEMPT(full) [ 1562.161669][T28170] Tainted: [U]=USER [ 1562.161681][T28170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1562.161700][T28170] Call Trace: [ 1562.161711][T28170] [ 1562.161724][T28170] dump_stack_lvl+0x16c/0x1f0 [ 1562.161785][T28170] should_fail_ex+0x512/0x640 [ 1562.161844][T28170] _copy_to_iter+0x29f/0x16f0 [ 1562.161887][T28170] ? anon_pipe_read+0x7de/0x1210 [ 1562.161936][T28170] ? __pfx__copy_to_iter+0x10/0x10 [ 1562.161969][T28170] ? __pfx___mutex_lock+0x10/0x10 [ 1562.162019][T28170] copy_page_to_iter+0x12a/0x1e0 [ 1562.162060][T28170] anon_pipe_read+0x47e/0x1210 [ 1562.162134][T28170] ? __pfx_anon_pipe_read+0x10/0x10 [ 1562.162191][T28170] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1562.162234][T28170] ? __pfx_aa_file_perm+0x10/0x10 [ 1562.162286][T28170] ? __lock_acquire+0x622/0x1c90 [ 1562.162337][T28170] fifo_pipe_read+0x1e/0xd0 [ 1562.162388][T28170] do_iter_readv_writev+0x738/0x950 [ 1562.162438][T28170] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 1562.162491][T28170] ? bpf_lsm_file_permission+0x9/0x10 [ 1562.162526][T28170] ? security_file_permission+0x71/0x210 [ 1562.162574][T28170] ? rw_verify_area+0xcf/0x680 [ 1562.162622][T28170] vfs_readv+0x4cb/0x8b0 [ 1562.162677][T28170] ? __pfx_vfs_readv+0x10/0x10 [ 1562.162752][T28170] ? __fget_files+0x20e/0x3c0 [ 1562.162796][T28170] ? __fget_files+0x160/0x3c0 [ 1562.162854][T28170] ? do_readv+0x28c/0x340 [ 1562.162896][T28170] do_readv+0x28c/0x340 [ 1562.162941][T28170] ? __pfx_do_readv+0x10/0x10 [ 1562.162997][T28170] do_syscall_64+0xcd/0x490 [ 1562.163032][T28170] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1562.163065][T28170] RIP: 0033:0x7ff22578e929 [ 1562.163091][T28170] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1562.163131][T28170] RSP: 002b:00007ff226621038 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 1562.163162][T28170] RAX: ffffffffffffffda RBX: 00007ff2259b6080 RCX: 00007ff22578e929 [ 1562.163183][T28170] RDX: 0000000000000001 RSI: 0000200000000a80 RDI: 0000000000000003 [ 1562.163203][T28170] RBP: 00007ff226621090 R08: 0000000000000000 R09: 0000000000000000 [ 1562.163222][T28170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1562.163242][T28170] R13: 0000000000000001 R14: 00007ff2259b6080 R15: 00007ffc37ed7908 [ 1562.163284][T28170] [ 1562.480155][T28172] openvswitch: netlink: IP tunnel dst address not specified [ 1563.514476][T28192] blktrace: Concurrent blktraces are not allowed on ram7 [ 1564.092586][T28200] db_root: not a directory: /dev/audio1 [ 1564.093140][ T31] audit: type=1800 audit(4294967307.923:27): pid=28200 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4295" name="dbroot" dev="configfs" ino=100956 res=0 errno=0 [ 1564.556026][T28210] can: request_module (can-proto-3) failed. [ 1564.566193][T28209] FAULT_INJECTION: forcing a failure. [ 1564.566193][T28209] name failslab, interval 1, probability 0, space 0, times 0 [ 1564.595035][T28209] CPU: 1 UID: 0 PID: 28209 Comm: syz.5.4305 Tainted: G U 6.15.0-syzkaller-13473-gc0c9379f235d #0 PREEMPT(full) [ 1564.595096][T28209] Tainted: [U]=USER [ 1564.595110][T28209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1564.595131][T28209] Call Trace: [ 1564.595143][T28209] [ 1564.595157][T28209] dump_stack_lvl+0x16c/0x1f0 [ 1564.595223][T28209] should_fail_ex+0x512/0x640 [ 1564.595278][T28209] ? __kmalloc_noprof+0xbf/0x510 [ 1564.595335][T28209] ? devlink_fmsg_put_name+0xf0/0x3f0 [ 1564.595375][T28209] should_failslab+0xc2/0x120 [ 1564.595411][T28209] __kmalloc_noprof+0xd2/0x510 [ 1564.595474][T28209] devlink_fmsg_put_name+0xf0/0x3f0 [ 1564.595521][T28209] devlink_fmsg_string_pair_put+0xb6/0x1b0 [ 1564.595573][T28209] nsim_dev_dummy_fmsg_put+0x77/0x1e0 [ 1564.595626][T28209] devlink_health_do_dump+0x240/0x620 [ 1564.595680][T28209] devlink_health_report+0x3c9/0x9c0 [ 1564.595735][T28209] ? __pfx_devlink_health_report+0x10/0x10 [ 1564.595785][T28209] ? _copy_from_user+0x59/0xd0 [ 1564.595825][T28209] nsim_dev_health_break_write+0x166/0x210 [ 1564.595875][T28209] ? __pfx_nsim_dev_health_break_write+0x10/0x10 [ 1564.595934][T28209] full_proxy_write+0x13f/0x200 [ 1564.595974][T28209] ? __pfx_full_proxy_write+0x10/0x10 [ 1564.596009][T28209] vfs_write+0x2a0/0x1150 [ 1564.596072][T28209] ? __pfx___mutex_lock+0x10/0x10 [ 1564.596108][T28209] ? __pfx_vfs_write+0x10/0x10 [ 1564.596173][T28209] ? __fget_files+0x20e/0x3c0 [ 1564.596236][T28209] ksys_write+0x12a/0x250 [ 1564.596289][T28209] ? __pfx_ksys_write+0x10/0x10 [ 1564.596354][T28209] do_syscall_64+0xcd/0x490 [ 1564.596393][T28209] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1564.596428][T28209] RIP: 0033:0x7f0b8618e929 [ 1564.596456][T28209] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1564.596492][T28209] RSP: 002b:00007f0b86f89038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1564.596524][T28209] RAX: ffffffffffffffda RBX: 00007f0b863b5fa0 RCX: 00007f0b8618e929 [ 1564.596547][T28209] RDX: 00000000000001ff RSI: 0000000000000000 RDI: 0000000000000005 [ 1564.596568][T28209] RBP: 00007f0b86210b39 R08: 0000000000000000 R09: 0000000000000000 [ 1564.596597][T28209] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1564.596618][T28209] R13: 0000000000000000 R14: 00007f0b863b5fa0 R15: 00007ffda668cff8 [ 1564.596663][T28209] [ 1566.296330][T28233] netlink: 'syz.3.4312': attribute type 10 has an invalid length. [ 1566.347984][T28233] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4312'. [ 1567.426971][T28248] block nbd7: not configured, cannot reconfigure [ 1569.643437][T28286] blktrace: Concurrent blktraces are not allowed on ram7 [ 1571.023690][T28296] zswap: compressor »/ÇÅâK]Ñ-€guúÐÿC†¹1»º¿Uïå“­êoS not available [ 1571.298844][T28320] device-mapper: ioctl: Unable to rename non-existent device,  to „ [ 1571.812346][T28333] blktrace: Concurrent blktraces are not allowed on ram7 [ 1571.854380][T28333] FAULT_INJECTION: forcing a failure. [ 1571.854380][T28333] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1571.903580][T28333] CPU: 0 UID: 0 PID: 28333 Comm: syz.6.4337 Tainted: G U 6.15.0-syzkaller-13473-gc0c9379f235d #0 PREEMPT(full) [ 1571.903631][T28333] Tainted: [U]=USER [ 1571.903642][T28333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1571.903657][T28333] Call Trace: [ 1571.903667][T28333] [ 1571.903678][T28333] dump_stack_lvl+0x16c/0x1f0 [ 1571.903732][T28333] should_fail_ex+0x512/0x640 [ 1571.903783][T28333] should_fail_alloc_page+0xe7/0x130 [ 1571.903813][T28333] prepare_alloc_pages+0x3c2/0x610 [ 1571.903854][T28333] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 1571.903907][T28333] ? rcu_is_watching+0x12/0xc0 [ 1571.903938][T28333] ? trace_mm_page_alloc+0x11f/0x1a0 [ 1571.903976][T28333] ? __alloc_frozen_pages_noprof+0x294/0x23f0 [ 1571.904025][T28333] ? stack_trace_save+0x8e/0xc0 [ 1571.904062][T28333] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1571.904115][T28333] ? kmem_cache_alloc_node_noprof+0x1d5/0x3b0 [ 1571.904156][T28333] ? __get_vm_area_node+0x1ca/0x330 [ 1571.904187][T28333] ? __vmalloc_node_noprof+0xad/0xf0 [ 1571.904231][T28333] ? __snd_dma_alloc_pages+0x53/0x90 [ 1571.904273][T28333] ? snd_dma_alloc_dir_pages+0x151/0x240 [ 1571.904312][T28333] ? do_alloc_pages+0x115/0x280 [ 1571.904348][T28333] ? snd_pcm_lib_malloc_pages+0x3df/0x980 [ 1571.904391][T28333] ? snd_pcm_hw_params+0x15e1/0x1b40 [ 1571.904426][T28333] ? snd_pcm_kernel_ioctl+0x147/0x2e0 [ 1571.904466][T28333] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1571.904504][T28333] alloc_pages_bulk_noprof+0x71c/0x1410 [ 1571.904554][T28333] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1571.904607][T28333] ? policy_nodemask+0xea/0x4e0 [ 1571.904645][T28333] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 1571.904696][T28333] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1571.904745][T28333] kasan_populate_vmalloc+0xf1/0x1f0 [ 1571.904799][T28333] alloc_vmap_area+0x959/0x29c0 [ 1571.904857][T28333] ? __pfx_alloc_vmap_area+0x10/0x10 [ 1571.904910][T28333] __get_vm_area_node+0x1ca/0x330 [ 1571.904961][T28333] __vmalloc_node_range_noprof+0x271/0x14b0 [ 1571.905011][T28333] ? __snd_dma_alloc_pages+0x53/0x90 [ 1571.905066][T28333] ? __mutex_trylock_common+0xe9/0x250 [ 1571.905119][T28333] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1571.905171][T28333] ? __snd_dma_alloc_pages+0x53/0x90 [ 1571.905241][T28333] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1571.905297][T28333] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 1571.905340][T28333] ? __snd_dma_alloc_pages+0x53/0x90 [ 1571.905390][T28333] __vmalloc_node_noprof+0xad/0xf0 [ 1571.905436][T28333] ? __snd_dma_alloc_pages+0x53/0x90 [ 1571.905487][T28333] ? __pfx_snd_dma_vmalloc_alloc+0x10/0x10 [ 1571.905546][T28333] __snd_dma_alloc_pages+0x53/0x90 [ 1571.905598][T28333] snd_dma_alloc_dir_pages+0x151/0x240 [ 1571.905655][T28333] do_alloc_pages+0x115/0x280 [ 1571.905708][T28333] snd_pcm_lib_malloc_pages+0x3df/0x980 [ 1571.905768][T28333] snd_pcm_hw_params+0x15e1/0x1b40 [ 1571.905826][T28333] ? __pfx_snd_pcm_hw_params+0x10/0x10 [ 1571.905878][T28333] ? snd_pcm_hw_param_near.constprop.0+0x734/0x8e0 [ 1571.905931][T28333] ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10 [ 1571.906014][T28333] ? __asan_memset+0x23/0x50 [ 1571.906066][T28333] snd_pcm_kernel_ioctl+0x147/0x2e0 [ 1571.906122][T28333] snd_pcm_oss_change_params_locked+0x1432/0x3a30 [ 1571.906191][T28333] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 1571.906279][T28333] snd_pcm_oss_get_active_substream+0x168/0x1d0 [ 1571.906334][T28333] snd_pcm_oss_ioctl+0x21e9/0x37a0 [ 1571.906385][T28333] ? hook_file_ioctl_common+0x145/0x410 [ 1571.906427][T28333] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 1571.906479][T28333] ? __fget_files+0x20e/0x3c0 [ 1571.906536][T28333] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 1571.906584][T28333] __x64_sys_ioctl+0x18e/0x210 [ 1571.906632][T28333] do_syscall_64+0xcd/0x490 [ 1571.906668][T28333] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1571.906703][T28333] RIP: 0033:0x7ff22578e929 [ 1571.906729][T28333] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1571.906761][T28333] RSP: 002b:00007ff226642038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1571.906794][T28333] RAX: ffffffffffffffda RBX: 00007ff2259b5fa0 RCX: 00007ff22578e929 [ 1571.906817][T28333] RDX: 00002000000000c0 RSI: 00000000c0045002 RDI: 0000000000000003 [ 1571.906838][T28333] RBP: 00007ff225810b39 R08: 0000000000000000 R09: 0000000000000000 [ 1571.906860][T28333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1571.906881][T28333] R13: 0000000000000000 R14: 00007ff2259b5fa0 R15: 00007ffc37ed7908 [ 1571.906926][T28333] [ 1572.386717][T28333] syz.6.4337: vmalloc error: size 2097152, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1572.425865][T28333] CPU: 1 UID: 0 PID: 28333 Comm: syz.6.4337 Tainted: G U 6.15.0-syzkaller-13473-gc0c9379f235d #0 PREEMPT(full) [ 1572.425932][T28333] Tainted: [U]=USER [ 1572.425944][T28333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1572.425966][T28333] Call Trace: [ 1572.425978][T28333] [ 1572.425991][T28333] dump_stack_lvl+0x16c/0x1f0 [ 1572.426054][T28333] warn_alloc+0x248/0x3a0 [ 1572.426128][T28333] ? __pfx_warn_alloc+0x10/0x10 [ 1572.426187][T28333] ? kfree+0x2b4/0x4d0 [ 1572.426242][T28333] ? __get_vm_area_node+0x208/0x330 [ 1572.426295][T28333] __vmalloc_node_range_noprof+0xb2d/0x14b0 [ 1572.426348][T28333] ? __mutex_trylock_common+0xe9/0x250 [ 1572.426403][T28333] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1572.426455][T28333] ? __snd_dma_alloc_pages+0x53/0x90 [ 1572.426517][T28333] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1572.426574][T28333] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 1572.426617][T28333] ? __snd_dma_alloc_pages+0x53/0x90 [ 1572.426667][T28333] __vmalloc_node_noprof+0xad/0xf0 [ 1572.426714][T28333] ? __snd_dma_alloc_pages+0x53/0x90 [ 1572.426764][T28333] ? __pfx_snd_dma_vmalloc_alloc+0x10/0x10 [ 1572.426821][T28333] __snd_dma_alloc_pages+0x53/0x90 [ 1572.426872][T28333] snd_dma_alloc_dir_pages+0x151/0x240 [ 1572.426937][T28333] do_alloc_pages+0x115/0x280 [ 1572.426993][T28333] snd_pcm_lib_malloc_pages+0x3df/0x980 [ 1572.427051][T28333] snd_pcm_hw_params+0x15e1/0x1b40 [ 1572.427110][T28333] ? __pfx_snd_pcm_hw_params+0x10/0x10 [ 1572.427161][T28333] ? snd_pcm_hw_param_near.constprop.0+0x734/0x8e0 [ 1572.427226][T28333] ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10 [ 1572.427272][T28333] ? __asan_memset+0x23/0x50 [ 1572.427322][T28333] snd_pcm_kernel_ioctl+0x147/0x2e0 [ 1572.427374][T28333] snd_pcm_oss_change_params_locked+0x1432/0x3a30 [ 1572.427439][T28333] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 1572.427518][T28333] snd_pcm_oss_get_active_substream+0x168/0x1d0 [ 1572.427570][T28333] snd_pcm_oss_ioctl+0x21e9/0x37a0 [ 1572.427617][T28333] ? hook_file_ioctl_common+0x145/0x410 [ 1572.427657][T28333] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 1572.427706][T28333] ? __fget_files+0x20e/0x3c0 [ 1572.427761][T28333] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 1572.427806][T28333] __x64_sys_ioctl+0x18e/0x210 [ 1572.427852][T28333] do_syscall_64+0xcd/0x490 [ 1572.427899][T28333] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1572.427933][T28333] RIP: 0033:0x7ff22578e929 [ 1572.427961][T28333] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1572.427996][T28333] RSP: 002b:00007ff226642038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1572.428030][T28333] RAX: ffffffffffffffda RBX: 00007ff2259b5fa0 RCX: 00007ff22578e929 [ 1572.428052][T28333] RDX: 00002000000000c0 RSI: 00000000c0045002 RDI: 0000000000000003 [ 1572.428074][T28333] RBP: 00007ff225810b39 R08: 0000000000000000 R09: 0000000000000000 [ 1572.428096][T28333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1572.428116][T28333] R13: 0000000000000000 R14: 00007ff2259b5fa0 R15: 00007ffc37ed7908 [ 1572.428160][T28333] [ 1572.773772][T28304] Process accounting paused [ 1572.887082][T28333] Mem-Info: [ 1572.890294][T28333] active_anon:7750 inactive_anon:32735 isolated_anon:0 [ 1572.890294][T28333] active_file:20527 inactive_file:41629 isolated_file:0 [ 1572.890294][T28333] unevictable:1480 dirty:23 writeback:0 [ 1572.890294][T28333] slab_reclaimable:11830 slab_unreclaimable:103353 [ 1572.890294][T28333] mapped:37409 shmem:29767 pagetables:1524 [ 1572.890294][T28333] sec_pagetables:0 bounce:0 [ 1572.890294][T28333] kernel_misc_reclaimable:0 [ 1572.890294][T28333] free:1241996 free_pcp:23556 free_cma:0 [ 1572.994735][T28333] Node 0 active_anon:31000kB inactive_anon:130940kB active_file:82052kB inactive_file:166324kB unevictable:4384kB isolated(anon):0kB isolated(file):0kB mapped:149636kB dirty:0kB writeback:0kB shmem:117532kB shmem_thp:2048kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:13172kB pagetables:5964kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1573.056285][T28333] Node 1 active_anon:0kB inactive_anon:0kB active_file:56kB inactive_file:192kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1573.117201][T28333] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1573.156878][T28343] page: refcount:3 mapcount:2 mapping:0000000000000000 index:0xffff888078002dc0 pfn:0x78002 [ 1573.166150][T28333] lowmem_reserve[]: 0 2481 2482 2482 2482 [ 1573.173699][T28333] Node 0 DMA32 free:1121860kB boost:0kB min:34092kB low:42612kB high:51132kB reserved_highatomic:0KB free_highatomic:0KB active_anon:30952kB inactive_anon:133140kB active_file:80548kB inactive_file:166248kB unevictable:4384kB writepending:92kB present:3129332kB managed:2540904kB mlocked:2848kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1573.176700][T28343] flags: 0xfff00000000010(dirty|node=0|zone=1|lastcpupid=0x7ff) [ 1573.231914][T28343] raw: 00fff00000000010 0000000000000000 dead000000000122 0000000000000000 [ 1573.242164][T28343] raw: ffff888078002dc0 0000000000000000 0000000300000001 0000000000000000 [ 1573.251450][T28343] page dumped because: unmovable page [ 1573.257957][T28343] page_owner tracks the page as allocated [ 1573.263874][T28343] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2dc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), pid 23907, tgid 23907 (syz-executor), ts 1281808372230, free_ts 1262181887651 [ 1573.285030][T28343] post_alloc_hook+0x1c0/0x230 [ 1573.294269][T28343] get_page_from_freelist+0x1321/0x3890 [ 1573.300448][T28343] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 1573.314504][T28343] alloc_pages_mpol+0x1fb/0x550 [ 1573.316061][T28333] lowmem_reserve[]: 0 0 1 1 1 [ 1573.320123][T28343] alloc_pages_noprof+0x131/0x390 [ 1573.346010][T28333] Node 0 Normal free:16kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:1504kB inactive_file:76kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1573.347648][T28343] __vmalloc_node_range_noprof+0x72f/0x14b0 [ 1573.387102][T28343] vmalloc_user_noprof+0x9e/0xe0 [ 1573.392309][T28343] kcov_ioctl+0x4c/0x730 [ 1573.400623][T28343] __x64_sys_ioctl+0x18e/0x210 [ 1573.404312][T28333] lowmem_reserve[]: [ 1573.405606][T28343] do_syscall_64+0xcd/0x490 [ 1573.406689][T28333] 0 [ 1573.414277][T28343] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1573.414322][T28343] page last free pid 24 tgid 24 stack trace: [ 1573.414344][T28343] __free_frozen_pages+0x7fe/0x1180 [ 1573.414390][T28343] kasan_depopulate_vmalloc_pte+0x5f/0x80 [ 1573.414440][T28343] __apply_to_page_range+0xa8f/0x1350 [ 1573.414485][T28343] kasan_release_vmalloc+0xd1/0xe0 [ 1573.414533][T28343] purge_vmap_node+0x1c4/0xa30 [ 1573.414568][T28343] __purge_vmap_area_lazy+0xa06/0xc60 [ 1573.414605][T28343] drain_vmap_area_work+0x27/0x40 [ 1573.414641][T28343] process_one_work+0x9cf/0x1b70 [ 1573.414719][T28343] worker_thread+0x6c8/0xf10 [ 1573.414771][T28343] kthread+0x3c2/0x780 [ 1573.414818][T28343] ret_from_fork+0x5d7/0x6f0 [ 1573.414865][T28343] ret_from_fork_asm+0x1a/0x30 [ 1573.516129][T28333] 0 0 0 0 [ 1573.525930][T28333] Node 1 Normal free:3893580kB boost:0kB min:55788kB low:69732kB high:83676kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:56kB inactive_file:192kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:26056kB local_pcp:18592kB free_cma:0kB [ 1573.609009][T28333] lowmem_reserve[]: 0 0 0 0 0 [ 1573.613883][T28333] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1573.661946][T28333] Node 0 DMA32: 1012*4kB (UE) 1315*8kB (UME) 1408*16kB (UME) 1176*32kB (UME) 446*64kB (UME) 326*128kB (UME) 243*256kB (UME) 197*512kB (UME) 65*1024kB (UM) 9*2048kB (UME) 176*4096kB (M) = 1113960kB [ 1573.684320][T28333] Node 0 Normal: 0*4kB 2*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 1573.696911][T28333] Node 1 Normal: 215*4kB (UME) 63*8kB (UME) 44*16kB (UME) 213*32kB (UME) 104*64kB (UME) 44*128kB (UME) 13*256kB (UM) 5*512kB (U) 6*1024kB (UME) 3*2048kB (UME) 941*4096kB (M) = 3893684kB [ 1573.730667][T28333] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1573.740965][T28333] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1573.750654][T28333] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1573.770278][T28333] Node 1 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 1573.781151][T28333] 92459 total pagecache pages [ 1573.788882][T28333] 0 pages in swap cache [ 1573.793168][T28333] Free swap = 124996kB [ 1573.815758][T28333] Total swap = 124996kB [ 1573.819982][T28333] 2097051 pages RAM [ 1573.865797][T28333] 0 pages HighMem/MovableOnly [ 1573.870545][T28333] 429783 pages reserved [ 1573.874743][T28333] 0 pages cma reserved [ 1574.644786][T28376] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4343'. [ 1575.156738][T28376] bond0: (slave bond_slave_1): Releasing backup interface [ 1576.014117][T28403] blktrace: Concurrent blktraces are not allowed on ram7 [ 1576.055366][T28403] FAULT_INJECTION: forcing a failure. [ 1576.055366][T28403] name failslab, interval 1, probability 0, space 0, times 0 [ 1576.076987][T28403] CPU: 1 UID: 0 PID: 28403 Comm: syz.6.4355 Tainted: G U 6.15.0-syzkaller-13473-gc0c9379f235d #0 PREEMPT(full) [ 1576.077045][T28403] Tainted: [U]=USER [ 1576.077056][T28403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1576.077076][T28403] Call Trace: [ 1576.077088][T28403] [ 1576.077102][T28403] dump_stack_lvl+0x16c/0x1f0 [ 1576.077164][T28403] should_fail_ex+0x512/0x640 [ 1576.077217][T28403] ? __kmalloc_noprof+0xbf/0x510 [ 1576.077273][T28403] ? constrain_params_by_rules+0x175/0xca0 [ 1576.077315][T28403] should_failslab+0xc2/0x120 [ 1576.077348][T28403] __kmalloc_noprof+0xd2/0x510 [ 1576.077396][T28403] ? kasan_quarantine_put+0x10a/0x240 [ 1576.077444][T28403] ? constrain_params_by_rules+0xa09/0xca0 [ 1576.077495][T28403] constrain_params_by_rules+0x175/0xca0 [ 1576.077555][T28403] ? __pfx_constrain_params_by_rules+0x10/0x10 [ 1576.077609][T28403] ? __pfx_constrain_params_by_rules+0x10/0x10 [ 1576.077664][T28403] ? __mutex_trylock_common+0xe9/0x250 [ 1576.077724][T28403] ? snd_interval_refine+0x2fa/0x580 [ 1576.077799][T28403] snd_pcm_hw_refine+0x7de/0xad0 [ 1576.077858][T28403] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 1576.077911][T28403] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 1576.077962][T28403] ? snd_pcm_hw_param_value+0x266/0x5b0 [ 1576.078009][T28403] snd_pcm_hw_param_first+0x334/0x6f0 [ 1576.078059][T28403] snd_pcm_hw_params+0x5ad/0x1b40 [ 1576.078115][T28403] ? __pfx_snd_pcm_hw_params+0x10/0x10 [ 1576.078165][T28403] ? snd_pcm_hw_param_near.constprop.0+0x734/0x8e0 [ 1576.078215][T28403] ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10 [ 1576.078260][T28403] ? __asan_memset+0x23/0x50 [ 1576.078308][T28403] snd_pcm_kernel_ioctl+0x147/0x2e0 [ 1576.078359][T28403] snd_pcm_oss_change_params_locked+0x1432/0x3a30 [ 1576.078421][T28403] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 1576.078499][T28403] snd_pcm_oss_get_active_substream+0x168/0x1d0 [ 1576.078549][T28403] snd_pcm_oss_ioctl+0x21e9/0x37a0 [ 1576.078595][T28403] ? hook_file_ioctl_common+0x145/0x410 [ 1576.078635][T28403] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 1576.078683][T28403] ? __fget_files+0x20e/0x3c0 [ 1576.078737][T28403] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 1576.078783][T28403] __x64_sys_ioctl+0x18e/0x210 [ 1576.078834][T28403] do_syscall_64+0xcd/0x490 [ 1576.078871][T28403] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1576.078905][T28403] RIP: 0033:0x7ff22578e929 [ 1576.078931][T28403] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1576.078967][T28403] RSP: 002b:00007ff226642038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1576.078999][T28403] RAX: ffffffffffffffda RBX: 00007ff2259b5fa0 RCX: 00007ff22578e929 [ 1576.079022][T28403] RDX: 00002000000000c0 RSI: 00000000c0045002 RDI: 0000000000000003 [ 1576.079043][T28403] RBP: 00007ff225810b39 R08: 0000000000000000 R09: 0000000000000000 [ 1576.079064][T28403] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1576.079085][T28403] R13: 0000000000000000 R14: 00007ff2259b5fa0 R15: 00007ffc37ed7908 [ 1576.079127][T28403] [ 1576.668711][T28409] FAULT_INJECTION: forcing a failure. [ 1576.668711][T28409] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1576.714144][T28409] CPU: 1 UID: 0 PID: 28409 Comm: syz.6.4356 Tainted: G U 6.15.0-syzkaller-13473-gc0c9379f235d #0 PREEMPT(full) [ 1576.714199][T28409] Tainted: [U]=USER [ 1576.714210][T28409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1576.714233][T28409] Call Trace: [ 1576.714244][T28409] [ 1576.714257][T28409] dump_stack_lvl+0x16c/0x1f0 [ 1576.714317][T28409] should_fail_ex+0x512/0x640 [ 1576.714375][T28409] should_fail_alloc_page+0xe7/0x130 [ 1576.714413][T28409] prepare_alloc_pages+0x3c2/0x610 [ 1576.714461][T28409] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 1576.714530][T28409] ? kasan_save_stack+0x42/0x60 [ 1576.714579][T28409] ? kasan_save_stack+0x33/0x60 [ 1576.714628][T28409] ? kasan_save_track+0x14/0x30 [ 1576.714675][T28409] ? __kasan_slab_alloc+0x89/0x90 [ 1576.714703][T28409] ? kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 1576.714755][T28409] ? __pmd_alloc+0xbf/0x930 [ 1576.714792][T28409] ? __handle_mm_fault+0xaac/0x5490 [ 1576.714835][T28409] ? handle_mm_fault+0x589/0xd10 [ 1576.714878][T28409] ? do_user_addr_fault+0x7a6/0x1370 [ 1576.714923][T28409] ? exc_page_fault+0x5c/0xb0 [ 1576.714983][T28409] ? asm_exc_page_fault+0x26/0x30 [ 1576.715013][T28409] ? __get_user_4+0x14/0x20 [ 1576.715054][T28409] ? snd_seq_oss_timer_ioctl+0x404/0x620 [ 1576.715096][T28409] ? snd_seq_oss_ioctl+0x593/0xda0 [ 1576.715145][T28409] ? odev_ioctl+0x94/0x120 [ 1576.715174][T28409] ? __x64_sys_ioctl+0x18e/0x210 [ 1576.715209][T28409] ? do_syscall_64+0xcd/0x490 [ 1576.715236][T28409] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1576.715269][T28409] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1576.715338][T28409] ? __lock_acquire+0xb8a/0x1c90 [ 1576.715380][T28409] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1576.715430][T28409] ? policy_nodemask+0xea/0x4e0 [ 1576.715464][T28409] alloc_pages_mpol+0x1fb/0x550 [ 1576.715497][T28409] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1576.715540][T28409] ? __thp_vma_allowable_orders+0x1c5/0xb10 [ 1576.715582][T28409] alloc_pages_noprof+0x131/0x390 [ 1576.715615][T28409] pte_alloc_one+0x1c/0x3a0 [ 1576.715663][T28409] __handle_mm_fault+0x3a68/0x5490 [ 1576.715715][T28409] ? __pfx___handle_mm_fault+0x10/0x10 [ 1576.715756][T28409] ? __pfx_mt_find+0x10/0x10 [ 1576.715811][T28409] ? find_vma+0xbf/0x140 [ 1576.715843][T28409] ? __pfx_find_vma+0x10/0x10 [ 1576.715881][T28409] handle_mm_fault+0x589/0xd10 [ 1576.715924][T28409] ? __pkru_allows_pkey+0x21/0xb0 [ 1576.715967][T28409] do_user_addr_fault+0x7a6/0x1370 [ 1576.716015][T28409] ? rcu_is_watching+0x12/0xc0 [ 1576.716050][T28409] exc_page_fault+0x5c/0xb0 [ 1576.716098][T28409] asm_exc_page_fault+0x26/0x30 [ 1576.716126][T28409] RIP: 0010:__get_user_4+0x14/0x20 [ 1576.716168][T28409] Code: 00 00 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 ba 00 f0 ff ff ff 7f 00 00 48 39 d0 48 0f 47 c2 0f 01 cb <8b> 10 31 c0 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 [ 1576.716197][T28409] RSP: 0018:ffffc90004d6fda8 EFLAGS: 00050287 [ 1576.716221][T28409] RAX: 0000000000000003 RBX: 00000000c0045401 RCX: ffffc90004d6fd4c [ 1576.716240][T28409] RDX: 00007ffffffff000 RSI: ffffffff891cf84c RDI: ffffffff8bf55a60 [ 1576.716260][T28409] RBP: ffff888060ba0a00 R08: 9d65edb7ca2b73f4 R09: 0000000000000000 [ 1576.716280][T28409] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000003 [ 1576.716298][T28409] R13: ffff88802b163800 R14: 0000000000000001 R15: 0000000000000003 [ 1576.716330][T28409] ? snd_seq_oss_timer_ioctl+0x3fc/0x620 [ 1576.716375][T28409] snd_seq_oss_timer_ioctl+0x404/0x620 [ 1576.716412][T28409] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1576.716460][T28409] snd_seq_oss_ioctl+0x593/0xda0 [ 1576.716498][T28409] ? __pfx_snd_seq_oss_ioctl+0x10/0x10 [ 1576.716540][T28409] ? hook_file_ioctl_common+0x145/0x410 [ 1576.716584][T28409] ? __fget_files+0x20e/0x3c0 [ 1576.716634][T28409] odev_ioctl+0x94/0x120 [ 1576.716663][T28409] ? __pfx_odev_ioctl+0x10/0x10 [ 1576.716696][T28409] __x64_sys_ioctl+0x18e/0x210 [ 1576.716736][T28409] do_syscall_64+0xcd/0x490 [ 1576.716769][T28409] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1576.716799][T28409] RIP: 0033:0x7ff22578e929 [ 1576.716822][T28409] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1576.716851][T28409] RSP: 002b:00007ff226642038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1576.716877][T28409] RAX: ffffffffffffffda RBX: 00007ff2259b5fa0 RCX: 00007ff22578e929 [ 1576.716896][T28409] RDX: 0000000000000003 RSI: 00000000c0045401 RDI: 0000000000000003 [ 1576.716914][T28409] RBP: 00007ff226642090 R08: 0000000000000000 R09: 0000000000000000 [ 1576.716932][T28409] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1576.716949][T28409] R13: 0000000000000000 R14: 00007ff2259b5fa0 R15: 00007ffc37ed7908 [ 1576.716988][T28409] [ 1577.279636][ T31] audit: type=1800 audit(4294967321.110:28): pid=28413 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4357" name="dbroot" dev="configfs" ino=101405 res=0 errno=0 [ 1577.310731][T28411] FAULT_INJECTION: forcing a failure. [ 1577.310731][T28411] name failslab, interval 1, probability 0, space 0, times 0 [ 1577.323714][T28411] CPU: 1 UID: 0 PID: 28411 Comm: syz.0.4358 Tainted: G U 6.15.0-syzkaller-13473-gc0c9379f235d #0 PREEMPT(full) [ 1577.323769][T28411] Tainted: [U]=USER [ 1577.323780][T28411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1577.323800][T28411] Call Trace: [ 1577.323812][T28411] [ 1577.323824][T28411] dump_stack_lvl+0x16c/0x1f0 [ 1577.323884][T28411] should_fail_ex+0x512/0x640 [ 1577.323947][T28411] should_failslab+0xc2/0x120 [ 1577.323982][T28411] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 1577.324038][T28411] ? zswap_store+0x839/0x25a0 [ 1577.324087][T28411] zswap_store+0x839/0x25a0 [ 1577.324146][T28411] ? __pfx_zswap_store+0x10/0x10 [ 1577.324186][T28411] ? do_raw_spin_lock+0x12c/0x2b0 [ 1577.324237][T28411] ? find_held_lock+0x2b/0x80 [ 1577.324271][T28411] ? folio_free_swap+0x171/0x580 [ 1577.324306][T28411] ? do_raw_spin_unlock+0x172/0x230 [ 1577.324356][T28411] ? swp_swap_info+0xce/0x130 [ 1577.324391][T28411] ? __pfx_swp_swap_info+0x10/0x10 [ 1577.324435][T28411] swap_writeout+0x38e/0xfe0 [ 1577.324487][T28411] ? folio_clear_dirty_for_io+0x112/0x810 [ 1577.324528][T28411] ? __pfx_swap_writeout+0x10/0x10 [ 1577.324567][T28411] pageout+0x38f/0xa50 [ 1577.324606][T28411] ? __pfx_pageout+0x10/0x10 [ 1577.324641][T28411] ? mark_held_locks+0x49/0x80 [ 1577.324766][T28411] ? on_each_cpu_cond_mask+0x5a/0x90 [ 1577.324800][T28411] ? arch_tlbbatch_flush+0x18c/0x370 [ 1577.324867][T28411] shrink_folio_list+0x2f4d/0x3fc0 [ 1577.324927][T28411] ? __pfx_shrink_folio_list+0x10/0x10 [ 1577.324989][T28411] ? __lock_acquire+0x622/0x1c90 [ 1577.325048][T28411] ? __lock_acquire+0xb8a/0x1c90 [ 1577.325125][T28411] ? mark_held_locks+0x49/0x80 [ 1577.325165][T28411] ? finish_task_switch.isra.0+0x221/0xc10 [ 1577.325198][T28411] ? lockdep_hardirqs_on+0x7c/0x110 [ 1577.325256][T28411] reclaim_folio_list+0xda/0x5d0 [ 1577.325304][T28411] ? __pfx_reclaim_folio_list+0x10/0x10 [ 1577.325373][T28411] ? css_rstat_updated+0x9d/0xd30 [ 1577.325408][T28411] ? lru_gen_del_folio+0x32b/0x540 [ 1577.325452][T28411] reclaim_pages+0x47b/0x650 [ 1577.325500][T28411] ? __pfx_reclaim_pages+0x10/0x10 [ 1577.325560][T28411] ? find_held_lock+0x2b/0x80 [ 1577.325595][T28411] ? madvise_cold_or_pageout_pte_range+0x5fb/0x2180 [ 1577.325661][T28411] madvise_cold_or_pageout_pte_range+0x1427/0x2180 [ 1577.325736][T28411] ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10 [ 1577.325781][T28411] ? __lock_acquire+0x622/0x1c90 [ 1577.325839][T28411] ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10 [ 1577.325884][T28411] walk_pgd_range+0xc53/0x1f60 [ 1577.325973][T28411] ? __pfx_walk_pgd_range+0x10/0x10 [ 1577.326042][T28411] __walk_page_range+0x163/0x820 [ 1577.326079][T28411] ? find_vma+0xbf/0x140 [ 1577.326115][T28411] ? __pfx_find_vma+0x10/0x10 [ 1577.326155][T28411] ? walk_page_test+0x9b/0x180 [ 1577.326214][T28411] walk_page_range_mm+0x54d/0x8a0 [ 1577.326253][T28411] ? __pfx_walk_page_range_mm+0x10/0x10 [ 1577.326295][T28411] ? find_held_lock+0x2b/0x80 [ 1577.326329][T28411] ? mlock_drain_local+0x22d/0x4f0 [ 1577.326388][T28411] walk_page_range+0x63/0x90 [ 1577.326424][T28411] madvise_pageout+0x254/0x540 [ 1577.326465][T28411] ? __pfx_madvise_pageout+0x10/0x10 [ 1577.326523][T28411] ? find_held_lock+0x2b/0x80 [ 1577.326554][T28411] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1577.326616][T28411] madvise_vma_behavior+0x460/0x2420 [ 1577.326658][T28411] ? mt_find+0x3ef/0xa30 [ 1577.326705][T28411] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 1577.326746][T28411] ? __pfx_mt_find+0x10/0x10 [ 1577.326791][T28411] ? find_vma_prev+0xda/0x160 [ 1577.326842][T28411] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 1577.326880][T28411] ? find_vma+0xbf/0x140 [ 1577.326915][T28411] ? __pfx_find_vma+0x10/0x10 [ 1577.326973][T28411] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 1577.327010][T28411] madvise_walk_vmas+0x1ce/0x2c0 [ 1577.327046][T28411] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 1577.327094][T28411] madvise_do_behavior+0x15d/0x3f0 [ 1577.327138][T28411] ? __pfx_madvise_do_behavior+0x10/0x10 [ 1577.327202][T28411] do_madvise+0x161/0x230 [ 1577.327241][T28411] ? __pfx_do_madvise+0x10/0x10 [ 1577.327296][T28411] ? xfd_validate_state+0x61/0x180 [ 1577.327351][T28411] __x64_sys_madvise+0xa9/0x110 [ 1577.327406][T28411] ? lockdep_hardirqs_on+0x7c/0x110 [ 1577.327460][T28411] do_syscall_64+0xcd/0x490 [ 1577.327498][T28411] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1577.327533][T28411] RIP: 0033:0x7f392198e929 [ 1577.327561][T28411] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1577.327597][T28411] RSP: 002b:00007f39228c3038 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 1577.327631][T28411] RAX: ffffffffffffffda RBX: 00007f3921bb5fa0 RCX: 00007f392198e929 [ 1577.327653][T28411] RDX: 0000000000000015 RSI: 00040000002003f0 RDI: 0000001000000000 [ 1577.327675][T28411] RBP: 00007f3921a10b39 R08: 0000000000000000 R09: 0000000000000000 [ 1577.327702][T28411] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1577.327723][T28411] R13: 0000000000000000 R14: 00007f3921bb5fa0 R15: 00007ffd2fed5a98 [ 1577.327767][T28411] [ 1577.825256][T28413] db_root: not a directory: /dev/audio1 [ 1578.072407][T28418] FAULT_INJECTION: forcing a failure. [ 1578.072407][T28418] name failslab, interval 1, probability 0, space 0, times 0 [ 1578.086141][T28418] CPU: 1 UID: 0 PID: 28418 Comm: syz.5.4360 Tainted: G U 6.15.0-syzkaller-13473-gc0c9379f235d #0 PREEMPT(full) [ 1578.086195][T28418] Tainted: [U]=USER [ 1578.086206][T28418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1578.086227][T28418] Call Trace: [ 1578.086240][T28418] [ 1578.086253][T28418] dump_stack_lvl+0x16c/0x1f0 [ 1578.086315][T28418] should_fail_ex+0x512/0x640 [ 1578.086368][T28418] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 1578.086427][T28418] should_failslab+0xc2/0x120 [ 1578.086462][T28418] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1578.086518][T28418] ? vm_area_dup+0x27/0x8d0 [ 1578.086572][T28418] vm_area_dup+0x27/0x8d0 [ 1578.086622][T28418] copy_vma+0x4c2/0xa50 [ 1578.086691][T28418] ? __pfx_copy_vma+0x10/0x10 [ 1578.086743][T28418] ? lockdep_hardirqs_on+0x7c/0x110 [ 1578.086809][T28418] ? register_lock_class+0x41/0x4c0 [ 1578.086855][T28418] ? __schedule+0x1181/0x5de0 [ 1578.086924][T28418] ? __lock_acquire+0x622/0x1c90 [ 1578.086979][T28418] copy_vma_and_data+0x1cf/0x750 [ 1578.087037][T28418] ? __pfx_copy_vma_and_data+0x10/0x10 [ 1578.087101][T28418] ? __vma_enter_locked+0x163/0x3f0 [ 1578.087152][T28418] ? find_held_lock+0x2b/0x80 [ 1578.087187][T28418] ? move_vma+0x536/0x1740 [ 1578.087248][T28418] move_vma+0x548/0x1740 [ 1578.087308][T28418] ? __pfx_move_vma+0x10/0x10 [ 1578.087359][T28418] ? mm_get_unmapped_area+0x95/0xe0 [ 1578.087403][T28418] ? shmem_get_unmapped_area+0x170/0xa00 [ 1578.087451][T28418] ? cap_mmap_addr+0x4b/0x120 [ 1578.087485][T28418] ? bpf_lsm_mmap_addr+0x9/0x10 [ 1578.087523][T28418] ? security_mmap_addr+0x6c/0x1e0 [ 1578.087570][T28418] ? __get_unmapped_area+0x267/0x440 [ 1578.087617][T28418] ? vrm_set_new_addr+0x208/0x290 [ 1578.087683][T28418] __do_sys_mremap+0xe07/0x1590 [ 1578.087744][T28418] ? __pfx___do_sys_mremap+0x10/0x10 [ 1578.087822][T28418] ? __x64_sys_futex+0x1e0/0x4c0 [ 1578.087894][T28418] do_syscall_64+0xcd/0x490 [ 1578.087931][T28418] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1578.087967][T28418] RIP: 0033:0x7f0b8618e929 [ 1578.087995][T28418] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1578.088030][T28418] RSP: 002b:00007f0b86f89038 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 1578.088064][T28418] RAX: ffffffffffffffda RBX: 00007f0b863b5fa0 RCX: 00007f0b8618e929 [ 1578.088088][T28418] RDX: 0000000000013fd4 RSI: 00000000000000b8 RDI: 0000000000004000 [ 1578.088110][T28418] RBP: 00007f0b86210b39 R08: 00000000fffff000 R09: 0000000000000000 [ 1578.088133][T28418] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 1578.088163][T28418] R13: 0000000000000000 R14: 00007f0b863b5fa0 R15: 00007ffda668cff8 [ 1578.088207][T28418] [ 1578.962373][T28434] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4365'. [ 1581.359151][T28475] EXT4-fs error (device sda1): xattr_find_entry:333: inode #1312: comm kworker/u8:21: corrupted xattr entries [ 1582.300234][T28491] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(3) [ 1582.596746][T28497] db_root: not a directory: /dev/audio1 [ 1582.597414][ T31] audit: type=1800 audit(4294967326.433:29): pid=28497 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.4381" name="dbroot" dev="configfs" ino=102740 res=0 errno=0 [ 1583.265651][T28514] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input17 [ 1583.469622][T28518] blktrace: Concurrent blktraces are not allowed on ram7 [ 1583.531654][T28518] FAULT_INJECTION: forcing a failure. [ 1583.531654][T28518] name failslab, interval 1, probability 0, space 0, times 0 [ 1583.559614][T28518] CPU: 1 UID: 0 PID: 28518 Comm: syz.0.4389 Tainted: G U 6.15.0-syzkaller-13473-gc0c9379f235d #0 PREEMPT(full) [ 1583.559667][T28518] Tainted: [U]=USER [ 1583.559678][T28518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1583.559698][T28518] Call Trace: [ 1583.559708][T28518] [ 1583.559721][T28518] dump_stack_lvl+0x16c/0x1f0 [ 1583.559777][T28518] should_fail_ex+0x512/0x640 [ 1583.559824][T28518] ? __kmalloc_noprof+0xbf/0x510 [ 1583.559872][T28518] ? constrain_params_by_rules+0x175/0xca0 [ 1583.559912][T28518] should_failslab+0xc2/0x120 [ 1583.559943][T28518] __kmalloc_noprof+0xd2/0x510 [ 1583.559987][T28518] ? kasan_quarantine_put+0x10a/0x240 [ 1583.560032][T28518] ? lockdep_hardirqs_on+0x7c/0x110 [ 1583.560087][T28518] constrain_params_by_rules+0x175/0xca0 [ 1583.560123][T28518] ? constrain_params_by_rules+0xa09/0xca0 [ 1583.560168][T28518] ? constrain_params_by_rules+0xa0e/0xca0 [ 1583.560218][T28518] ? __pfx_constrain_params_by_rules+0x10/0x10 [ 1583.560265][T28518] ? __pfx_constrain_params_by_rules+0x10/0x10 [ 1583.560314][T28518] ? __mutex_trylock_common+0xe9/0x250 [ 1583.560366][T28518] snd_pcm_hw_refine+0x7de/0xad0 [ 1583.560411][T28518] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 1583.560456][T28518] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 1583.560507][T28518] snd_pcm_hw_param_first+0x334/0x6f0 [ 1583.560552][T28518] snd_pcm_hw_params+0x5ad/0x1b40 [ 1583.560602][T28518] ? __pfx_snd_pcm_hw_params+0x10/0x10 [ 1583.560646][T28518] ? snd_pcm_hw_param_near.constprop.0+0x734/0x8e0 [ 1583.560690][T28518] ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10 [ 1583.560730][T28518] ? __asan_memset+0x23/0x50 [ 1583.560774][T28518] snd_pcm_kernel_ioctl+0x147/0x2e0 [ 1583.560826][T28518] snd_pcm_oss_change_params_locked+0x1432/0x3a30 [ 1583.560891][T28518] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 1583.560965][T28518] snd_pcm_oss_get_active_substream+0x168/0x1d0 [ 1583.561012][T28518] snd_pcm_oss_ioctl+0x21e9/0x37a0 [ 1583.561055][T28518] ? hook_file_ioctl_common+0x145/0x410 [ 1583.561091][T28518] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 1583.561134][T28518] ? __fget_files+0x20e/0x3c0 [ 1583.561182][T28518] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 1583.561231][T28518] __x64_sys_ioctl+0x18e/0x210 [ 1583.561272][T28518] do_syscall_64+0xcd/0x490 [ 1583.561305][T28518] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1583.561336][T28518] RIP: 0033:0x7f392198e929 [ 1583.561360][T28518] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1583.561391][T28518] RSP: 002b:00007f39228c3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1583.561419][T28518] RAX: ffffffffffffffda RBX: 00007f3921bb5fa0 RCX: 00007f392198e929 [ 1583.561440][T28518] RDX: 00002000000000c0 RSI: 00000000c0045002 RDI: 0000000000000003 [ 1583.561461][T28518] RBP: 00007f3921a10b39 R08: 0000000000000000 R09: 0000000000000000 [ 1583.561481][T28518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1583.561499][T28518] R13: 0000000000000000 R14: 00007f3921bb5fa0 R15: 00007ffd2fed5a98 [ 1583.561538][T28518] [ 1584.807340][T28531] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 1585.263793][T28535] netlink: 13832 bytes leftover after parsing attributes in process `syz.0.4391'. [ 1585.538582][T28543] Process accounting paused [ 1585.841623][T28540] netlink: 186 bytes leftover after parsing attributes in process `syz.5.4393'. [ 1585.866045][T28540] synth uevent: /bus/hid/drivers/zeroplus: unknown uevent action string [ 1586.466061][T28560] db_root: not a directory: /dev/audio1 [ 1586.466591][ T31] audit: type=1800 audit(4294967330.295:30): pid=28560 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.4401" name="dbroot" dev="configfs" ino=103011 res=0 errno=0 [ 1587.280819][T28575] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4404'. [ 1588.309657][T28587] FAULT_INJECTION: forcing a failure. [ 1588.309657][T28587] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1588.349059][T28587] CPU: 1 UID: 0 PID: 28587 Comm: syz.0.4405 Tainted: G U 6.15.0-syzkaller-13473-gc0c9379f235d #0 PREEMPT(full) [ 1588.349112][T28587] Tainted: [U]=USER [ 1588.349123][T28587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1588.349142][T28587] Call Trace: [ 1588.349161][T28587] [ 1588.349174][T28587] dump_stack_lvl+0x16c/0x1f0 [ 1588.349232][T28587] should_fail_ex+0x512/0x640 [ 1588.349289][T28587] _copy_to_iter+0x29f/0x16f0 [ 1588.349324][T28587] ? __free_frozen_pages+0x922/0x1180 [ 1588.349372][T28587] ? anon_pipe_read+0x7de/0x1210 [ 1588.349420][T28587] ? __pfx__copy_to_iter+0x10/0x10 [ 1588.349463][T28587] ? __folio_put+0x32e/0x450 [ 1588.349493][T28587] ? __pfx___folio_put+0x10/0x10 [ 1588.349557][T28587] copy_page_to_iter+0x12a/0x1e0 [ 1588.349596][T28587] anon_pipe_read+0x47e/0x1210 [ 1588.349660][T28587] ? __pfx_anon_pipe_read+0x10/0x10 [ 1588.349714][T28587] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1588.349764][T28587] ? __pfx_aa_file_perm+0x10/0x10 [ 1588.349815][T28587] ? __lock_acquire+0x622/0x1c90 [ 1588.349863][T28587] fifo_pipe_read+0x1e/0xd0 [ 1588.349913][T28587] do_iter_readv_writev+0x738/0x950 [ 1588.349961][T28587] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 1588.350014][T28587] ? bpf_lsm_file_permission+0x9/0x10 [ 1588.350050][T28587] ? security_file_permission+0x71/0x210 [ 1588.350098][T28587] ? rw_verify_area+0xcf/0x680 [ 1588.350145][T28587] vfs_readv+0x4cb/0x8b0 [ 1588.350198][T28587] ? __pfx_vfs_readv+0x10/0x10 [ 1588.350280][T28587] ? __fget_files+0x20e/0x3c0 [ 1588.350322][T28587] ? __fget_files+0x160/0x3c0 [ 1588.350376][T28587] ? do_readv+0x28c/0x340 [ 1588.350414][T28587] do_readv+0x28c/0x340 [ 1588.350462][T28587] ? __pfx_do_readv+0x10/0x10 [ 1588.350516][T28587] do_syscall_64+0xcd/0x490 [ 1588.350549][T28587] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1588.350580][T28587] RIP: 0033:0x7f392198e929 [ 1588.350604][T28587] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1588.350653][T28587] RSP: 002b:00007f39228a2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 1588.350701][T28587] RAX: ffffffffffffffda RBX: 00007f3921bb6080 RCX: 00007f392198e929 [ 1588.350725][T28587] RDX: 0000000000000001 RSI: 0000200000000a80 RDI: 0000000000000003 [ 1588.350746][T28587] RBP: 00007f39228a2090 R08: 0000000000000000 R09: 0000000000000000 [ 1588.350766][T28587] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1588.350786][T28587] R13: 0000000000000001 R14: 00007f3921bb6080 R15: 00007ffd2fed5a98 [ 1588.350831][T28587] [ 1588.659638][T28590] EXT4-fs error (device sda1): xattr_find_entry:333: inode #1312: comm kworker/u8:9: corrupted xattr entries [ 1588.716025][T28591] EXT4-fs error (device sda1): xattr_find_entry:333: inode #1312: comm kworker/u8:0: corrupted xattr entries [ 1588.755008][T28593] EXT4-fs error (device sda1): xattr_find_entry:333: inode #1312: comm kworker/u8:0: corrupted xattr entries [ 1588.796984][T28594] EXT4-fs error (device sda1): xattr_find_entry:333: inode #1312: comm kworker/u8:0: corrupted xattr entries [ 1589.891457][T28620] EXT4-fs error (device sda1): xattr_find_entry:333: inode #1312: comm kworker/u8:12: corrupted xattr entries [ 1590.444648][T28626] page: refcount:3 mapcount:2 mapping:0000000000000000 index:0xffff888078002dc0 pfn:0x78002 [ 1590.483632][T28626] flags: 0xfff00000000010(dirty|node=0|zone=1|lastcpupid=0x7ff) [ 1590.493664][T28626] raw: 00fff00000000010 0000000000000000 dead000000000122 0000000000000000 [ 1590.549261][T28626] raw: ffff888078002dc0 0000000000000000 0000000300000001 0000000000000000 [ 1590.588560][T28626] page dumped because: unmovable page [ 1590.619287][T28626] page_owner tracks the page as allocated [ 1590.625112][T28626] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2dc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), pid 23907, tgid 23907 (syz-executor), ts 1281808372230, free_ts 1262181887651 [ 1590.763850][T28626] post_alloc_hook+0x1c0/0x230 [ 1590.797305][T28626] get_page_from_freelist+0x1321/0x3890 [ 1590.826951][T28626] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 1590.853688][T28626] alloc_pages_mpol+0x1fb/0x550 [ 1590.871957][T28626] alloc_pages_noprof+0x131/0x390 [ 1590.877436][T28626] __vmalloc_node_range_noprof+0x72f/0x14b0 [ 1590.917205][T28626] vmalloc_user_noprof+0x9e/0xe0 [ 1590.922278][T28626] kcov_ioctl+0x4c/0x730 [ 1590.942327][T28626] __x64_sys_ioctl+0x18e/0x210 [ 1590.966002][T28626] do_syscall_64+0xcd/0x490 [ 1591.004664][T28626] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1591.014330][T28626] page last free pid 24 tgid 24 stack trace: [ 1591.026447][T28626] __free_frozen_pages+0x7fe/0x1180 [ 1591.035316][T28626] kasan_depopulate_vmalloc_pte+0x5f/0x80 [ 1591.043519][T28626] __apply_to_page_range+0xa8f/0x1350 [ 1591.051623][T28626] kasan_release_vmalloc+0xd1/0xe0 [ 1591.056946][T28626] purge_vmap_node+0x1c4/0xa30 [ 1591.064525][T28626] __purge_vmap_area_lazy+0xa06/0xc60 [ 1591.072236][T28626] drain_vmap_area_work+0x27/0x40 [ 1591.080386][T28626] process_one_work+0x9cf/0x1b70 [ 1591.085702][T28626] worker_thread+0x6c8/0xf10 [ 1591.104532][T28626] kthread+0x3c2/0x780 [ 1591.115630][T28626] ret_from_fork+0x5d7/0x6f0 [ 1591.131327][T28626] ret_from_fork_asm+0x1a/0x30 [ 1591.179299][T28636] page: refcount:3 mapcount:2 mapping:0000000000000000 index:0xffff888078002dc0 pfn:0x78002 [ 1591.203183][T28636] flags: 0xfff00000000010(dirty|node=0|zone=1|lastcpupid=0x7ff) [ 1591.240464][T28636] raw: 00fff00000000010 0000000000000000 dead000000000122 0000000000000000 [ 1591.265690][T28636] raw: ffff888078002dc0 0000000000000000 0000000300000001 0000000000000000 [ 1591.289385][T28636] page dumped because: unmovable page [ 1591.294835][T28636] page_owner tracks the page as allocated [ 1591.335865][T28626] syz.5.4416 (28626): attempted to duplicate a private mapping with mremap. This is not supported. [ 1591.346851][T28636] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2dc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), pid 23907, tgid 23907 (syz-executor), ts 1281808372230, free_ts 1262181887651 [ 1591.380809][T28636] post_alloc_hook+0x1c0/0x230 [ 1591.385685][T28636] get_page_from_freelist+0x1321/0x3890 [ 1591.394807][T28636] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 1591.401428][T28636] alloc_pages_mpol+0x1fb/0x550 [ 1591.406429][T28636] alloc_pages_noprof+0x131/0x390 [ 1591.415924][T28636] __vmalloc_node_range_noprof+0x72f/0x14b0 [ 1591.423130][T28636] vmalloc_user_noprof+0x9e/0xe0 [ 1591.451811][T28636] kcov_ioctl+0x4c/0x730 [ 1591.456167][T28636] __x64_sys_ioctl+0x18e/0x210 [ 1591.479121][T28636] do_syscall_64+0xcd/0x490 [ 1591.483735][T28636] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1591.502017][T28636] page last free pid 24 tgid 24 stack trace: [ 1591.520048][T28636] __free_frozen_pages+0x7fe/0x1180 [ 1591.525361][T28636] kasan_depopulate_vmalloc_pte+0x5f/0x80 [ 1591.574850][T28636] __apply_to_page_range+0xa8f/0x1350 [ 1591.587071][T28636] kasan_release_vmalloc+0xd1/0xe0 [ 1591.592927][T28636] purge_vmap_node+0x1c4/0xa30 [ 1591.610073][T28636] __purge_vmap_area_lazy+0xa06/0xc60 [ 1591.615564][T28636] drain_vmap_area_work+0x27/0x40 [ 1591.632426][T28636] process_one_work+0x9cf/0x1b70 [ 1591.647208][T28636] worker_thread+0x6c8/0xf10 [ 1591.651964][T28636] kthread+0x3c2/0x780 [ 1591.656119][T28636] ret_from_fork+0x5d7/0x6f0 [ 1591.667004][T28636] ret_from_fork_asm+0x1a/0x30 [ 1591.690419][T28650] random: crng reseeded on system resumption [ 1591.851163][T28654] blktrace: Concurrent blktraces are not allowed on ram7 [ 1591.875321][T28654] FAULT_INJECTION: forcing a failure. [ 1591.875321][T28654] name failslab, interval 1, probability 0, space 0, times 0 [ 1591.893735][T28654] CPU: 1 UID: 0 PID: 28654 Comm: syz.0.4423 Tainted: G U 6.15.0-syzkaller-13473-gc0c9379f235d #0 PREEMPT(full) [ 1591.893786][T28654] Tainted: [U]=USER [ 1591.893798][T28654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1591.893817][T28654] Call Trace: [ 1591.893828][T28654] [ 1591.893841][T28654] dump_stack_lvl+0x16c/0x1f0 [ 1591.893898][T28654] should_fail_ex+0x512/0x640 [ 1591.893946][T28654] ? __kmalloc_noprof+0xbf/0x510 [ 1591.893999][T28654] ? constrain_params_by_rules+0x175/0xca0 [ 1591.894039][T28654] should_failslab+0xc2/0x120 [ 1591.894071][T28654] __kmalloc_noprof+0xd2/0x510 [ 1591.894116][T28654] ? kasan_quarantine_put+0x10a/0x240 [ 1591.894164][T28654] ? lockdep_hardirqs_on+0x7c/0x110 [ 1591.894222][T28654] constrain_params_by_rules+0x175/0xca0 [ 1591.894261][T28654] ? constrain_params_by_rules+0xa09/0xca0 [ 1591.894309][T28654] ? constrain_params_by_rules+0xa0e/0xca0 [ 1591.894354][T28654] ? __pfx_constrain_params_by_rules+0x10/0x10 [ 1591.894411][T28654] ? __pfx_constrain_params_by_rules+0x10/0x10 [ 1591.894463][T28654] ? __mutex_trylock_common+0xe9/0x250 [ 1591.894518][T28654] snd_pcm_hw_refine+0x7de/0xad0 [ 1591.894565][T28654] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 1591.894612][T28654] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 1591.894668][T28654] snd_pcm_hw_param_first+0x334/0x6f0 [ 1591.894715][T28654] snd_pcm_hw_params+0x5ad/0x1b40 [ 1591.894766][T28654] ? __pfx_snd_pcm_hw_params+0x10/0x10 [ 1591.894812][T28654] ? snd_pcm_hw_param_near.constprop.0+0x734/0x8e0 [ 1591.894859][T28654] ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10 [ 1591.894901][T28654] ? __asan_memset+0x23/0x50 [ 1591.894945][T28654] snd_pcm_kernel_ioctl+0x147/0x2e0 [ 1591.895000][T28654] snd_pcm_oss_change_params_locked+0x1432/0x3a30 [ 1591.895052][T28654] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 1591.895114][T28654] snd_pcm_oss_get_active_substream+0x168/0x1d0 [ 1591.895155][T28654] snd_pcm_oss_ioctl+0x21e9/0x37a0 [ 1591.895191][T28654] ? hook_file_ioctl_common+0x145/0x410 [ 1591.895224][T28654] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 1591.895263][T28654] ? __fget_files+0x20e/0x3c0 [ 1591.895307][T28654] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 1591.895344][T28654] __x64_sys_ioctl+0x18e/0x210 [ 1591.895389][T28654] do_syscall_64+0xcd/0x490 [ 1591.895420][T28654] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1591.895450][T28654] RIP: 0033:0x7f392198e929 [ 1591.895473][T28654] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1591.895502][T28654] RSP: 002b:00007f39228c3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1591.895530][T28654] RAX: ffffffffffffffda RBX: 00007f3921bb5fa0 RCX: 00007f392198e929 [ 1591.895550][T28654] RDX: 00002000000000c0 RSI: 00000000c0045002 RDI: 0000000000000003 [ 1591.895568][T28654] RBP: 00007f3921a10b39 R08: 0000000000000000 R09: 0000000000000000 [ 1591.895584][T28654] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1591.895601][T28654] R13: 0000000000000000 R14: 00007f3921bb5fa0 R15: 00007ffd2fed5a98 [ 1591.895638][T28654] [ 1592.813100][ T31] audit: type=1800 audit(4294967336.648:31): pid=28671 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.4428" name="dbroot" dev="configfs" ino=102260 res=0 errno=0 [ 1592.835309][T28671] db_root: not a directory: /dev/audio1 [ 1593.051553][T28675] blktrace: Concurrent blktraces are not allowed on ram7 [ 1593.092240][T28675] FAULT_INJECTION: forcing a failure. [ 1593.092240][T28675] name failslab, interval 1, probability 0, space 0, times 0 [ 1593.133702][T28675] CPU: 1 UID: 0 PID: 28675 Comm: syz.3.4430 Tainted: G U 6.15.0-syzkaller-13473-gc0c9379f235d #0 PREEMPT(full) [ 1593.133755][T28675] Tainted: [U]=USER [ 1593.133768][T28675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1593.133787][T28675] Call Trace: [ 1593.133799][T28675] [ 1593.133811][T28675] dump_stack_lvl+0x16c/0x1f0 [ 1593.133873][T28675] should_fail_ex+0x512/0x640 [ 1593.133925][T28675] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 1593.133976][T28675] should_failslab+0xc2/0x120 [ 1593.134009][T28675] __kmalloc_cache_noprof+0x6a/0x3e0 [ 1593.134068][T28675] ? snd_pcm_lib_malloc_pages+0x2aa/0x980 [ 1593.134124][T28675] snd_pcm_lib_malloc_pages+0x2aa/0x980 [ 1593.134170][T28675] ? fixup_unreferenced_params+0x4b3/0xed0 [ 1593.134218][T28675] snd_pcm_hw_params+0x15e1/0x1b40 [ 1593.134272][T28675] ? __pfx_snd_pcm_hw_params+0x10/0x10 [ 1593.134321][T28675] ? snd_pcm_hw_param_near.constprop.0+0x734/0x8e0 [ 1593.134370][T28675] ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10 [ 1593.134413][T28675] ? __asan_memset+0x23/0x50 [ 1593.134462][T28675] snd_pcm_kernel_ioctl+0x147/0x2e0 [ 1593.134511][T28675] snd_pcm_oss_change_params_locked+0x1432/0x3a30 [ 1593.134574][T28675] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 1593.134649][T28675] snd_pcm_oss_get_active_substream+0x168/0x1d0 [ 1593.134699][T28675] snd_pcm_oss_ioctl+0x21e9/0x37a0 [ 1593.134744][T28675] ? hook_file_ioctl_common+0x145/0x410 [ 1593.134783][T28675] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 1593.134830][T28675] ? __fget_files+0x20e/0x3c0 [ 1593.134882][T28675] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 1593.134927][T28675] __x64_sys_ioctl+0x18e/0x210 [ 1593.134971][T28675] do_syscall_64+0xcd/0x490 [ 1593.135005][T28675] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1593.135045][T28675] RIP: 0033:0x7f6caad8e929 [ 1593.135072][T28675] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1593.135106][T28675] RSP: 002b:00007f6cabc30038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1593.135138][T28675] RAX: ffffffffffffffda RBX: 00007f6caafb5fa0 RCX: 00007f6caad8e929 [ 1593.135159][T28675] RDX: 00002000000000c0 RSI: 00000000c0045002 RDI: 0000000000000003 [ 1593.135185][T28675] RBP: 00007f6caae10b39 R08: 0000000000000000 R09: 0000000000000000 [ 1593.135205][T28675] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1593.135226][T28675] R13: 0000000000000000 R14: 00007f6caafb5fa0 R15: 00007ffe1c090778 [ 1593.135269][T28675] [ 1593.649147][T28681] blktrace: Concurrent blktraces are not allowed on ram7 [ 1593.739248][T28685] FAULT_INJECTION: forcing a failure. [ 1593.739248][T28685] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1593.755253][T28684] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4431'. [ 1593.797655][T28684] nbd: must specify a device to reconfigure [ 1593.817495][T28685] CPU: 0 UID: 0 PID: 28685 Comm: syz.5.4432 Tainted: G U 6.15.0-syzkaller-13473-gc0c9379f235d #0 PREEMPT(full) [ 1593.817545][T28685] Tainted: [U]=USER [ 1593.817556][T28685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1593.817575][T28685] Call Trace: [ 1593.817585][T28685] [ 1593.817597][T28685] dump_stack_lvl+0x16c/0x1f0 [ 1593.817653][T28685] should_fail_ex+0x512/0x640 [ 1593.817708][T28685] _copy_from_user+0x2e/0xd0 [ 1593.817741][T28685] copy_msghdr_from_user+0x98/0x160 [ 1593.817774][T28685] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1593.817814][T28685] ? kfree+0x24f/0x4d0 [ 1593.817855][T28685] ? __lock_acquire+0x622/0x1c90 [ 1593.817905][T28685] ___sys_recvmsg+0xdb/0x1a0 [ 1593.817938][T28685] ? __pfx____sys_recvmsg+0x10/0x10 [ 1593.817999][T28685] ? __pfx___might_resched+0x10/0x10 [ 1593.818041][T28685] do_recvmmsg+0x2fe/0x750 [ 1593.818075][T28685] ? __pfx_do_recvmmsg+0x10/0x10 [ 1593.818115][T28685] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 1593.818158][T28685] ? __fget_files+0x20e/0x3c0 [ 1593.818212][T28685] __x64_sys_recvmmsg+0x22a/0x280 [ 1593.818246][T28685] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1593.818290][T28685] do_syscall_64+0xcd/0x490 [ 1593.818325][T28685] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1593.818356][T28685] RIP: 0033:0x7f0b8618e929 [ 1593.818381][T28685] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1593.818414][T28685] RSP: 002b:00007f0b86f68038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1593.818444][T28685] RAX: ffffffffffffffda RBX: 00007f0b863b6080 RCX: 00007f0b8618e929 [ 1593.818466][T28685] RDX: 0000000000010000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1593.818485][T28685] RBP: 00007f0b86f68090 R08: 0000000000000000 R09: 0000000000000000 [ 1593.818504][T28685] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1593.818524][T28685] R13: 0000000000000000 R14: 00007f0b863b6080 R15: 00007ffda668cff8 [ 1593.818562][T28685] [ 1594.456639][T28696] EXT4-fs error (device sda1): xattr_find_entry:333: inode #1312: comm kworker/u8:9: corrupted xattr entries [ 1594.491455][T28697] FAULT_INJECTION: forcing a failure. [ 1594.491455][T28697] name failslab, interval 1, probability 0, space 0, times 0 [ 1594.510185][T28697] CPU: 1 UID: 0 PID: 28697 Comm: syz.3.4436 Tainted: G U 6.15.0-syzkaller-13473-gc0c9379f235d #0 PREEMPT(full) [ 1594.510240][T28697] Tainted: [U]=USER [ 1594.510253][T28697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1594.510275][T28697] Call Trace: [ 1594.510287][T28697] [ 1594.510300][T28697] dump_stack_lvl+0x16c/0x1f0 [ 1594.510362][T28697] should_fail_ex+0x512/0x640 [ 1594.510414][T28697] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 1594.510467][T28697] should_failslab+0xc2/0x120 [ 1594.510501][T28697] __kmalloc_cache_noprof+0x6a/0x3e0 [ 1594.510548][T28697] ? __lock_acquire+0xb8a/0x1c90 [ 1594.510593][T28697] ? snd_timer_instance_new+0x47/0x2e0 [ 1594.510638][T28697] snd_timer_instance_new+0x47/0x2e0 [ 1594.510696][T28697] snd_seq_timer_open+0x1cc/0x5e0 [ 1594.510756][T28697] ? __pfx_snd_seq_timer_open+0x10/0x10 [ 1594.510816][T28697] ? find_held_lock+0x2b/0x80 [ 1594.510857][T28697] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1594.510920][T28697] ? lockdep_hardirqs_on+0x7c/0x110 [ 1594.510977][T28697] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1594.511037][T28697] queue_use+0xe3/0x250 [ 1594.511084][T28697] snd_seq_queue_alloc+0x2e5/0x550 [ 1594.511140][T28697] snd_seq_ioctl_create_queue+0xa9/0x380 [ 1594.511206][T28697] snd_seq_kernel_client_ctl+0x107/0x1c0 [ 1594.511253][T28697] alloc_seq_queue+0xda/0x180 [ 1594.511292][T28697] ? __pfx_alloc_seq_queue+0x10/0x10 [ 1594.511358][T28697] ? mark_held_locks+0x49/0x80 [ 1594.511403][T28697] ? _raw_spin_unlock_irq+0x23/0x50 [ 1594.511459][T28697] snd_seq_oss_open+0x38c/0xa20 [ 1594.511508][T28697] odev_open+0x6f/0x90 [ 1594.511542][T28697] ? __pfx_odev_open+0x10/0x10 [ 1594.511576][T28697] soundcore_open+0x40c/0x580 [ 1594.511616][T28697] ? __pfx_soundcore_open+0x10/0x10 [ 1594.511651][T28697] chrdev_open+0x234/0x6a0 [ 1594.511683][T28697] ? __pfx_apparmor_file_open+0x10/0x10 [ 1594.511730][T28697] ? __pfx_chrdev_open+0x10/0x10 [ 1594.511766][T28697] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 1594.511825][T28697] do_dentry_open+0x741/0x1c10 [ 1594.511907][T28697] ? __pfx_chrdev_open+0x10/0x10 [ 1594.511948][T28697] vfs_open+0x82/0x3f0 [ 1594.511992][T28697] path_openat+0x1de4/0x2cb0 [ 1594.512050][T28697] ? __pfx___schedule+0x10/0x10 [ 1594.512122][T28697] ? __pfx_path_openat+0x10/0x10 [ 1594.512176][T28697] ? __lock_acquire+0xb8a/0x1c90 [ 1594.512229][T28697] do_filp_open+0x20b/0x470 [ 1594.512290][T28697] ? __pfx_do_filp_open+0x10/0x10 [ 1594.512378][T28697] ? alloc_fd+0x471/0x7d0 [ 1594.512441][T28697] do_sys_openat2+0x11b/0x1d0 [ 1594.512483][T28697] ? __pfx_do_sys_openat2+0x10/0x10 [ 1594.512543][T28697] __x64_sys_openat+0x174/0x210 [ 1594.512587][T28697] ? __pfx___x64_sys_openat+0x10/0x10 [ 1594.512648][T28697] do_syscall_64+0xcd/0x490 [ 1594.512686][T28697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1594.512722][T28697] RIP: 0033:0x7f6caad8e929 [ 1594.512750][T28697] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1594.512785][T28697] RSP: 002b:00007f6cabc0f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1594.512819][T28697] RAX: ffffffffffffffda RBX: 00007f6caafb6080 RCX: 00007f6caad8e929 [ 1594.512843][T28697] RDX: 0000000000000080 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1594.512865][T28697] RBP: 00007f6caae10b39 R08: 0000000000000000 R09: 0000000000000000 [ 1594.512913][T28697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1594.512936][T28697] R13: 0000000000000000 R14: 00007f6caafb6080 R15: 00007ffe1c090778 [ 1594.512982][T28697] [ 1595.137479][T28707] FAULT_INJECTION: forcing a failure. [ 1595.137479][T28707] name failslab, interval 1, probability 0, space 0, times 0 [ 1595.161917][T28707] CPU: 0 UID: 0 PID: 28707 Comm: syz.0.4440 Tainted: G U 6.15.0-syzkaller-13473-gc0c9379f235d #0 PREEMPT(full) [ 1595.161969][T28707] Tainted: [U]=USER [ 1595.161998][T28707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1595.162015][T28707] Call Trace: [ 1595.162036][T28707] [ 1595.162048][T28707] dump_stack_lvl+0x16c/0x1f0 [ 1595.162102][T28707] should_fail_ex+0x512/0x640 [ 1595.162164][T28707] should_failslab+0xc2/0x120 [ 1595.162193][T28707] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1595.162238][T28707] ? skb_clone+0x190/0x3f0 [ 1595.162271][T28707] skb_clone+0x190/0x3f0 [ 1595.162300][T28707] netlink_deliver_tap+0xabd/0xd30 [ 1595.162340][T28707] netlink_unicast+0x5df/0x7f0 [ 1595.162379][T28707] ? __pfx_netlink_unicast+0x10/0x10 [ 1595.162424][T28707] netlink_sendmsg+0x8d1/0xdd0 [ 1595.162465][T28707] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1595.162511][T28707] ____sys_sendmsg+0xa98/0xc70 [ 1595.162549][T28707] ? copy_msghdr_from_user+0x10a/0x160 [ 1595.162576][T28707] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1595.162618][T28707] ? kfree+0x24f/0x4d0 [ 1595.162650][T28707] ? __pfx__kstrtoull+0x10/0x10 [ 1595.162693][T28707] ___sys_sendmsg+0x134/0x1d0 [ 1595.162723][T28707] ? __pfx____sys_sendmsg+0x10/0x10 [ 1595.162785][T28707] ? __pfx___might_resched+0x10/0x10 [ 1595.162823][T28707] __sys_sendmmsg+0x200/0x420 [ 1595.162864][T28707] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1595.162905][T28707] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1595.162948][T28707] ? fput+0x70/0xf0 [ 1595.162977][T28707] ? ksys_write+0x1ac/0x250 [ 1595.163019][T28707] ? __pfx_ksys_write+0x10/0x10 [ 1595.163067][T28707] __x64_sys_sendmmsg+0x9c/0x100 [ 1595.163096][T28707] ? lockdep_hardirqs_on+0x7c/0x110 [ 1595.163141][T28707] do_syscall_64+0xcd/0x490 [ 1595.163172][T28707] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1595.163200][T28707] RIP: 0033:0x7f392198e929 [ 1595.163223][T28707] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1595.163258][T28707] RSP: 002b:00007f39228c3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1595.163286][T28707] RAX: ffffffffffffffda RBX: 00007f3921bb5fa0 RCX: 00007f392198e929 [ 1595.163305][T28707] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003 [ 1595.163323][T28707] RBP: 00007f39228c3090 R08: 0000000000000000 R09: 0000000000000000 [ 1595.163340][T28707] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1595.163357][T28707] R13: 0000000000000000 R14: 00007f3921bb5fa0 R15: 00007ffd2fed5a98 [ 1595.163393][T28707] [ 1595.532305][T28712] netlink: 'syz.6.4443': attribute type 1 has an invalid length. [ 1596.224920][T28738] EXT4-fs error (device sda1): xattr_find_entry:333: inode #1312: comm kworker/u8:12: corrupted xattr entries [ 1596.340855][T28740] blktrace: Concurrent blktraces are not allowed on ram7 [ 1596.489234][T28740] FAULT_INJECTION: forcing a failure. [ 1596.489234][T28740] name failslab, interval 1, probability 0, space 0, times 0 [ 1596.502138][T28740] CPU: 0 UID: 0 PID: 28740 Comm: syz.0.4445 Tainted: G U 6.15.0-syzkaller-13473-gc0c9379f235d #0 PREEMPT(full) [ 1596.502188][T28740] Tainted: [U]=USER [ 1596.502200][T28740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1596.502216][T28740] Call Trace: [ 1596.502226][T28740] [ 1596.502237][T28740] dump_stack_lvl+0x16c/0x1f0 [ 1596.502291][T28740] should_fail_ex+0x512/0x640 [ 1596.502336][T28740] ? __kmalloc_noprof+0xbf/0x510 [ 1596.502384][T28740] ? constrain_params_by_rules+0x175/0xca0 [ 1596.502423][T28740] should_failslab+0xc2/0x120 [ 1596.502454][T28740] __kmalloc_noprof+0xd2/0x510 [ 1596.502500][T28740] ? kasan_quarantine_put+0x10a/0x240 [ 1596.502545][T28740] ? constrain_params_by_rules+0xa09/0xca0 [ 1596.502592][T28740] constrain_params_by_rules+0x175/0xca0 [ 1596.502647][T28740] ? __pfx_constrain_params_by_rules+0x10/0x10 [ 1596.502697][T28740] ? __pfx_constrain_params_by_rules+0x10/0x10 [ 1596.502747][T28740] ? __mutex_trylock_common+0xe9/0x250 [ 1596.502798][T28740] snd_pcm_hw_refine+0x7de/0xad0 [ 1596.502844][T28740] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 1596.502892][T28740] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 1596.502937][T28740] ? snd_pcm_hw_param_value+0x266/0x5b0 [ 1596.502995][T28740] snd_pcm_hw_param_first+0x334/0x6f0 [ 1596.503035][T28740] ? trace_hw_mask_param+0x18b/0x200 [ 1596.503071][T28740] snd_pcm_hw_params+0x5ad/0x1b40 [ 1596.503121][T28740] ? __pfx_snd_pcm_hw_params+0x10/0x10 [ 1596.503165][T28740] ? snd_pcm_hw_param_near.constprop.0+0x734/0x8e0 [ 1596.503213][T28740] ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10 [ 1596.503256][T28740] ? __asan_memset+0x23/0x50 [ 1596.503303][T28740] snd_pcm_kernel_ioctl+0x147/0x2e0 [ 1596.503349][T28740] snd_pcm_oss_change_params_locked+0x1432/0x3a30 [ 1596.503407][T28740] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 1596.503478][T28740] snd_pcm_oss_get_active_substream+0x168/0x1d0 [ 1596.503525][T28740] snd_pcm_oss_ioctl+0x21e9/0x37a0 [ 1596.503568][T28740] ? hook_file_ioctl_common+0x145/0x410 [ 1596.503604][T28740] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 1596.503650][T28740] ? __fget_files+0x20e/0x3c0 [ 1596.503699][T28740] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 1596.503740][T28740] __x64_sys_ioctl+0x18e/0x210 [ 1596.503781][T28740] do_syscall_64+0xcd/0x490 [ 1596.503815][T28740] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1596.503847][T28740] RIP: 0033:0x7f392198e929 [ 1596.503871][T28740] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1596.503922][T28740] RSP: 002b:00007f39228c3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1596.503963][T28740] RAX: ffffffffffffffda RBX: 00007f3921bb5fa0 RCX: 00007f392198e929 [ 1596.503985][T28740] RDX: 00002000000000c0 RSI: 00000000c0045002 RDI: 0000000000000003 [ 1596.504006][T28740] RBP: 00007f3921a10b39 R08: 0000000000000000 R09: 0000000000000000 [ 1596.504026][T28740] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1596.504045][T28740] R13: 0000000000000000 R14: 00007f3921bb5fa0 R15: 00007ffd2fed5a98 [ 1596.504088][T28740] [ 1597.077149][T28749] FAULT_INJECTION: forcing a failure. [ 1597.077149][T28749] name failslab, interval 1, probability 0, space 0, times 0 [ 1597.090030][T28749] CPU: 0 UID: 0 PID: 28749 Comm: syz.6.4448 Tainted: G U 6.15.0-syzkaller-13473-gc0c9379f235d #0 PREEMPT(full) [ 1597.090076][T28749] Tainted: [U]=USER [ 1597.090086][T28749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1597.090104][T28749] Call Trace: [ 1597.090114][T28749] [ 1597.090171][T28749] dump_stack_lvl+0x16c/0x1f0 [ 1597.090212][T28749] should_fail_ex+0x512/0x640 [ 1597.090244][T28749] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 1597.090278][T28749] should_failslab+0xc2/0x120 [ 1597.090300][T28749] __kmalloc_cache_noprof+0x6a/0x3e0 [ 1597.090328][T28749] ? _raw_spin_unlock_irq+0x23/0x50 [ 1597.090359][T28749] ? _request_firmware+0x2a4/0x1470 [ 1597.090394][T28749] _request_firmware+0x2a4/0x1470 [ 1597.090427][T28749] ? do_raw_spin_unlock+0x172/0x230 [ 1597.090461][T28749] ? _raw_spin_unlock+0x28/0x50 [ 1597.090491][T28749] ? alloc_lookup_fw_priv+0x50f/0x820 [ 1597.090522][T28749] ? __pfx__request_firmware+0x10/0x10 [ 1597.090550][T28749] ? fw_set_page_data+0x11/0x1a0 [ 1597.090591][T28749] request_firmware+0x35/0x50 [ 1597.090623][T28749] valid_regdb+0x188/0x590 [ 1597.090705][T28749] ? __pfx___mutex_lock+0x10/0x10 [ 1597.090729][T28749] ? __pfx_valid_regdb+0x10/0x10 [ 1597.090764][T28749] reg_reload_regdb+0x11e/0x460 [ 1597.090796][T28749] ? __pfx_reg_reload_regdb+0x10/0x10 [ 1597.090829][T28749] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 1597.090850][T28749] ? nl80211_pre_doit+0x1b0/0xb10 [ 1597.090876][T28749] genl_family_rcv_msg_doit+0x209/0x2f0 [ 1597.090915][T28749] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1597.090947][T28749] ? rcu_is_watching+0x12/0xc0 [ 1597.090982][T28749] ? bpf_lsm_capable+0x9/0x10 [ 1597.091012][T28749] ? security_capable+0x7e/0x260 [ 1597.091042][T28749] genl_rcv_msg+0x55c/0x800 [ 1597.091078][T28749] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1597.091111][T28749] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 1597.091131][T28749] ? __pfx_nl80211_reload_regdb+0x10/0x10 [ 1597.091160][T28749] ? __pfx_nl80211_post_doit+0x10/0x10 [ 1597.091193][T28749] netlink_rcv_skb+0x158/0x420 [ 1597.091221][T28749] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1597.091255][T28749] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1597.091306][T28749] ? netlink_deliver_tap+0x1ae/0xd30 [ 1597.091337][T28749] genl_rcv+0x28/0x40 [ 1597.091365][T28749] netlink_unicast+0x53a/0x7f0 [ 1597.091397][T28749] ? __pfx_netlink_unicast+0x10/0x10 [ 1597.091434][T28749] netlink_sendmsg+0x8d1/0xdd0 [ 1597.091468][T28749] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1597.091508][T28749] ____sys_sendmsg+0xa98/0xc70 [ 1597.091539][T28749] ? copy_msghdr_from_user+0x10a/0x160 [ 1597.091562][T28749] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1597.091607][T28749] ___sys_sendmsg+0x134/0x1d0 [ 1597.091634][T28749] ? __pfx____sys_sendmsg+0x10/0x10 [ 1597.091662][T28749] ? __lock_acquire+0x622/0x1c90 [ 1597.091768][T28749] __sys_sendmsg+0x16d/0x220 [ 1597.091798][T28749] ? __pfx___sys_sendmsg+0x10/0x10 [ 1597.091843][T28749] do_syscall_64+0xcd/0x490 [ 1597.091868][T28749] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1597.091905][T28749] RIP: 0033:0x7ff22578e929 [ 1597.091924][T28749] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1597.091946][T28749] RSP: 002b:00007ff226621038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1597.091968][T28749] RAX: ffffffffffffffda RBX: 00007ff2259b6080 RCX: 00007ff22578e929 [ 1597.091984][T28749] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000007 [ 1597.091999][T28749] RBP: 00007ff226621090 R08: 0000000000000000 R09: 0000000000000000 [ 1597.092013][T28749] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1597.092027][T28749] R13: 0000000000000000 R14: 00007ff2259b6080 R15: 00007ffc37ed7908 [ 1597.092057][T28749] [ 1597.092076][T28749] platform regulatory.0: _request_firmware_prepare: kmalloc(struct firmware) failed [ 1597.561365][ T31] audit: type=1326 audit(4294967341.399:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28750 comm="syz.0.4449" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f392198e929 code=0x0 [ 1597.791506][T28757] EXT4-fs error (device sda1): xattr_find_entry:333: inode #1312: comm kworker/u8:31: corrupted xattr entries [ 1599.662707][T28788] EXT4-fs error (device sda1): xattr_find_entry:333: inode #1312: comm kworker/u8:9: corrupted xattr entries [ 1600.384901][T28795] db_root: not a directory: /dev/audio1 [ 1600.397254][ T31] audit: type=1800 audit(4294967344.219:33): pid=28795 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.4462" name="dbroot" dev="configfs" ino=103588 res=0 errno=0 [ 1601.762690][T28821] Invalid ELF header magic: != ELF [ 1603.489863][T28850] EXT4-fs error (device sda1): xattr_find_entry:333: inode #1312: comm kworker/u8:16: corrupted xattr entries [ 1603.508551][T28851] EXT4-fs error (device sda1): xattr_find_entry:333: inode #1312: comm kworker/u8:20: corrupted xattr entries [ 1603.565026][T28854] EXT4-fs error (device sda1): xattr_find_entry:333: inode #1312: comm kworker/u8:20: corrupted xattr entries [ 1603.583126][T28853] EXT4-fs error (device sda1): xattr_find_entry:333: inode #1312: comm kworker/u8:16: corrupted xattr entries [ 1604.394990][T28863] syz.3.4478 (28863): /proc/28862/oom_adj is deprecated, please use /proc/28862/oom_score_adj instead. [ 1604.397203][T28865] db_root: not a directory: /dev/audio1 [ 1604.432211][ T31] audit: type=1800 audit(4294967348.229:34): pid=28865 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.4479" name="dbroot" dev="configfs" ino=104766 res=0 errno=0 [ 1604.547315][T28818] Process accounting resumed [ 1605.508253][T28887] sd 0:0:1:0: PR command failed: 1026 [ 1605.513888][T28887] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1605.521008][T28887] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1605.654797][T28889] EXT4-fs error (device sda1): xattr_find_entry:333: inode #1312: comm kworker/u8:21: corrupted xattr entries [ 1605.787534][T28891] EXT4-fs error (device sda1): xattr_find_entry:333: inode #1312: comm kworker/u8:9: corrupted xattr entries [ 1606.814153][T28908] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !PjE ùrõ£Ò„yù*›"¤l-ý¤ôy–ú„ [ 1607.769552][T28915] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1607.809837][ T24] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1607.827988][ T24] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1607.865987][ T24] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1607.873675][ T24] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1607.945650][ T24] rtc rtc0: __rtc_set_alarm: err=-22 [ 1607.988455][T28922] EXT4-fs error (device sda1): xattr_find_entry:333: inode #1312: comm kworker/u8:31: corrupted xattr entries [ 1608.161557][T28929] EXT4-fs error (device sda1): xattr_find_entry:333: inode #1312: comm kworker/u8:31: corrupted xattr entries [ 1609.296290][T28956] EXT4-fs error (device sda1): xattr_find_entry:333: inode #1312: comm kworker/u8:23: corrupted xattr entries [ 1609.396570][T28955] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4499'. [ 1609.422292][T28955] openvswitch: HfR: Dropping previously announced user features [ 1610.220382][T28965] FAULT_INJECTION: forcing a failure. [ 1610.220382][T28965] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1610.234893][T28965] CPU: 0 UID: 0 PID: 28965 Comm: syz.5.4501 Tainted: G U 6.15.0-syzkaller-13473-gc0c9379f235d #0 PREEMPT(full) [ 1610.234948][T28965] Tainted: [U]=USER [ 1610.234962][T28965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1610.234982][T28965] Call Trace: [ 1610.234993][T28965] [ 1610.235006][T28965] dump_stack_lvl+0x16c/0x1f0 [ 1610.235071][T28965] should_fail_ex+0x512/0x640 [ 1610.235129][T28965] should_fail_alloc_page+0xe7/0x130 [ 1610.235166][T28965] prepare_alloc_pages+0x3c2/0x610 [ 1610.235208][T28965] ? rcu_is_watching+0x12/0xc0 [ 1610.235245][T28965] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 1610.235299][T28965] ? kasan_save_stack+0x42/0x60 [ 1610.235353][T28965] ? __lock_acquire+0x622/0x1c90 [ 1610.235400][T28965] ? __vmf_anon_prepare+0x11c/0x240 [ 1610.235442][T28965] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1610.235501][T28965] ? __lock_acquire+0x622/0x1c90 [ 1610.235559][T28965] ? __lock_acquire+0x622/0x1c90 [ 1610.235606][T28965] ? __lock_acquire+0x622/0x1c90 [ 1610.235649][T28965] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1610.235703][T28965] ? policy_nodemask+0xea/0x4e0 [ 1610.235741][T28965] alloc_pages_mpol+0x1fb/0x550 [ 1610.235775][T28965] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1610.235821][T28965] folio_alloc_mpol_noprof+0x36/0x2f0 [ 1610.235863][T28965] vma_alloc_folio_noprof+0xed/0x1e0 [ 1610.235903][T28965] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 1610.235941][T28965] ? find_held_lock+0x2b/0x80 [ 1610.235975][T28965] ? __handle_mm_fault+0x1092/0x5490 [ 1610.236027][T28965] __handle_mm_fault+0x2f21/0x5490 [ 1610.236083][T28965] ? __pfx___handle_mm_fault+0x10/0x10 [ 1610.236130][T28965] ? __pte_offset_map_lock+0x174/0x310 [ 1610.236166][T28965] ? find_held_lock+0x2b/0x80 [ 1610.236196][T28965] ? find_held_lock+0x2b/0x80 [ 1610.236239][T28965] ? follow_page_pte+0x3af/0x14c0 [ 1610.236288][T28965] handle_mm_fault+0x589/0xd10 [ 1610.236342][T28965] __get_user_pages+0x589/0x3b80 [ 1610.236392][T28965] ? __pfx_mt_find+0x10/0x10 [ 1610.236429][T28965] ? __pfx___get_user_pages+0x10/0x10 [ 1610.236489][T28965] populate_vma_page_range+0x278/0x3a0 [ 1610.236534][T28965] ? __pfx_populate_vma_page_range+0x10/0x10 [ 1610.236576][T28965] ? __pfx_find_vma_intersection+0x10/0x10 [ 1610.236619][T28965] ? do_mmap+0x69c/0x1210 [ 1610.236662][T28965] __mm_populate+0x1d8/0x380 [ 1610.236716][T28965] ? __pfx___mm_populate+0x10/0x10 [ 1610.236777][T28965] ? up_write+0x1b2/0x520 [ 1610.236830][T28965] vm_mmap_pgoff+0x362/0x450 [ 1610.236870][T28965] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1610.236914][T28965] ? __x64_sys_futex+0x1e0/0x4c0 [ 1610.236952][T28965] ? __x64_sys_futex+0x1e9/0x4c0 [ 1610.236999][T28965] ksys_mmap_pgoff+0x7d/0x5c0 [ 1610.237036][T28965] ? xfd_validate_state+0x61/0x180 [ 1610.237087][T28965] __x64_sys_mmap+0x125/0x190 [ 1610.237137][T28965] do_syscall_64+0xcd/0x490 [ 1610.237173][T28965] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1610.237206][T28965] RIP: 0033:0x7f0b8618e929 [ 1610.237233][T28965] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1610.237267][T28965] RSP: 002b:00007f0b86f89038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1610.237300][T28965] RAX: ffffffffffffffda RBX: 00007f0b863b5fa0 RCX: 00007f0b8618e929 [ 1610.237322][T28965] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 1610.237343][T28965] RBP: 00007f0b86210b39 R08: 0000000000000002 R09: 0000000000008000 [ 1610.237363][T28965] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 1610.237384][T28965] R13: 0000000000000000 R14: 00007f0b863b5fa0 R15: 00007ffda668cff8 [ 1610.237426][T28965] [ 1610.919354][T28970] EXT4-fs error (device sda1): xattr_find_entry:333: inode #1312: comm kworker/u8:31: corrupted xattr entries [ 1612.238049][T28987] EXT4-fs error (device sda1): xattr_find_entry:333: inode #1312: comm kworker/u8:9: corrupted xattr entries [ 1612.287984][ T32] INFO: task syz-executor:23920 blocked for more than 143 seconds. [ 1612.297015][ T32] Tainted: G U 6.15.0-syzkaller-13473-gc0c9379f235d #0 [ 1612.323884][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1612.342990][ T32] task:syz-executor state:D stack:24360 pid:23920 tgid:23920 ppid:1 task_flags:0x400140 flags:0x00004004 [ 1612.373846][ T32] Call Trace: [ 1612.384292][ T32] [ 1612.432456][ T32] __schedule+0x116a/0x5de0 [ 1612.477920][ T32] ? __lock_acquire+0x622/0x1c90 [ 1612.552721][ T32] ? __pfx___schedule+0x10/0x10 [ 1612.626764][ T32] ? find_held_lock+0x2b/0x80 [ 1612.631678][ T32] ? schedule+0x2d7/0x3a0 [ 1612.638448][ T32] schedule+0xe7/0x3a0 [ 1612.646959][ T32] schedule_preempt_disabled+0x13/0x30 [ 1612.672713][ T32] __mutex_lock+0x6c7/0xb90 [ 1612.703444][ T32] ? nfsd_shutdown_threads+0x5b/0xf0 [ 1612.727691][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 1612.742061][ T32] ? net_generic+0xea/0x2a0 [ 1612.758243][ T32] ? nfsd_shutdown_threads+0x5b/0xf0 [ 1612.776713][ T32] nfsd_shutdown_threads+0x5b/0xf0 [ 1612.782402][ T32] nfsd_umount+0x48/0xe0 [ 1612.788324][ T32] deactivate_locked_super+0xc1/0x1a0 [ 1612.794159][ T32] deactivate_super+0xde/0x100 [ 1612.801435][ T32] cleanup_mnt+0x225/0x450 [ 1612.807097][ T32] task_work_run+0x150/0x240 [ 1612.812852][ T32] ? __pfx_task_work_run+0x10/0x10 [ 1612.819105][ T32] ? __pfx___x64_sys_umount+0x10/0x10 [ 1612.826380][ T32] exit_to_user_mode_loop+0xeb/0x110 [ 1612.833933][ T32] do_syscall_64+0x3f6/0x490 [ 1612.839200][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1612.845791][ T32] RIP: 0033:0x7f366038fc57 [ 1612.851300][ T32] RSP: 002b:00007ffcd329bcf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1612.860309][ T32] RAX: 0000000000000000 RBX: 00007f3660410925 RCX: 00007f366038fc57 [ 1612.870049][ T32] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcd329ce40 [ 1612.879327][ T32] RBP: 00007ffcd329ce2c R08: 0000000000000000 R09: 0000000000000000 [ 1612.888043][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffcd329ce40 [ 1612.896479][ T32] R13: 00007f3660410925 R14: 0000000000162c24 R15: 00007ffcd329ce80 [ 1612.904621][ T32] [ 1612.908916][ T32] [ 1612.908916][ T32] Showing all locks held in the system: [ 1612.917429][ T32] 1 lock held by khungtaskd/32: [ 1612.922550][ T32] #0: ffffffff8e3c4b40 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 1612.942251][ T32] 1 lock held by klogd/5194: [ 1612.952044][ T32] 2 locks held by kworker/u8:9/21952: [ 1612.957661][ T32] 2 locks held by syz-executor/23920: [ 1612.965199][ T32] #0: ffff88807ad500e0 (&type->s_umount_key#53){+.+.}-{4:4}, at: deactivate_super+0xd6/0x100 [ 1612.985145][ T32] #1: ffffffff8e7de4a8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 1613.005641][ T32] 2 locks held by syz.1.3716/25869: [ 1613.013286][ T32] #0: ffffffff901f3410 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1613.022474][ T32] #1: ffffffff8e7de4a8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0xdd/0x1a40 [ 1613.034966][ T32] 2 locks held by getty/26918: [ 1613.048191][ T32] #0: ffff88814bffa0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1613.059986][ T32] #1: ffffc900049432f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 1613.072915][ T32] 2 locks held by syz.0.4503/28975: [ 1613.078309][ T32] #0: ffffffff9014ec68 (rtnl_mutex){+.+.}-{4:4}, at: ppp_release+0x167/0x230 [ 1613.090714][ T32] #1: ffffffff8e3d00f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x284/0x3c0 [ 1613.101324][ T32] [ 1613.103696][ T32] ============================================= [ 1613.103696][ T32] [ 1613.121218][ T32] NMI backtrace for cpu 0 [ 1613.121245][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Tainted: G U 6.15.0-syzkaller-13473-gc0c9379f235d #0 PREEMPT(full) [ 1613.121303][ T32] Tainted: [U]=USER [ 1613.121314][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1613.121334][ T32] Call Trace: [ 1613.121345][ T32] [ 1613.121357][ T32] dump_stack_lvl+0x116/0x1f0 [ 1613.121417][ T32] nmi_cpu_backtrace+0x27b/0x390 [ 1613.121458][ T32] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 1613.121516][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1613.121562][ T32] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 1613.121609][ T32] watchdog+0xf70/0x12c0 [ 1613.121666][ T32] ? __pfx_watchdog+0x10/0x10 [ 1613.121711][ T32] ? lockdep_hardirqs_on+0x7c/0x110 [ 1613.121764][ T32] ? __kthread_parkme+0x19e/0x250 [ 1613.121805][ T32] ? __pfx_watchdog+0x10/0x10 [ 1613.121865][ T32] kthread+0x3c2/0x780 [ 1613.121909][ T32] ? __pfx_kthread+0x10/0x10 [ 1613.121956][ T32] ? rcu_is_watching+0x12/0xc0 [ 1613.121988][ T32] ? __pfx_kthread+0x10/0x10 [ 1613.122035][ T32] ret_from_fork+0x5d7/0x6f0 [ 1613.122077][ T32] ? __pfx_kthread+0x10/0x10 [ 1613.122125][ T32] ret_from_fork_asm+0x1a/0x30 [ 1613.122178][ T32] [ 1613.122217][ T32] Sending NMI from CPU 0 to CPUs 1: [ 1613.262098][ C1] NMI backtrace for cpu 1 [ 1613.262122][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G U 6.15.0-syzkaller-13473-gc0c9379f235d #0 PREEMPT(full) [ 1613.262166][ C1] Tainted: [U]=USER [ 1613.262175][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1613.262191][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1613.262240][ C1] Code: 2b 56 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d b3 3e 0e 00 fb f4 0c fb 02 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 1613.262265][ C1] RSP: 0018:ffffc90000197df8 EFLAGS: 000002c6 [ 1613.262286][ C1] RAX: 0000000000d741ed RBX: 0000000000000001 RCX: ffffffff8b7bcc69 [ 1613.262303][ C1] RDX: 0000000000000000 RSI: ffffffff8dc12ef0 RDI: ffffffff8bf55a60 [ 1613.262320][ C1] RBP: ffffed1003c57b40 R08: 0000000000000001 R09: ffffed10170a6645 [ 1613.262338][ C1] R10: ffff8880b853322b R11: 0000000000000001 R12: 0000000000000001 [ 1613.262354][ C1] R13: ffff88801e2bda00 R14: ffffffff90883450 R15: 0000000000000000 [ 1613.262373][ C1] FS: 0000000000000000(0000) GS:ffff888124a62000(0000) knlGS:0000000000000000 [ 1613.262398][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1613.262415][ C1] CR2: 0000001b300d9ff8 CR3: 0000000077e2c000 CR4: 00000000003526f0 [ 1613.262433][ C1] Call Trace: [ 1613.262442][ C1] [ 1613.262457][ C1] default_idle+0x13/0x20 [ 1613.262485][ C1] default_idle_call+0x6d/0xb0 [ 1613.262515][ C1] do_idle+0x391/0x510 [ 1613.262548][ C1] ? __pfx_do_idle+0x10/0x10 [ 1613.262575][ C1] ? trace_sched_exit_tp+0x31/0x130 [ 1613.262610][ C1] cpu_startup_entry+0x4f/0x60 [ 1613.262637][ C1] start_secondary+0x21d/0x2b0 [ 1613.262671][ C1] ? __pfx_start_secondary+0x10/0x10 [ 1613.262708][ C1] common_startup_64+0x13e/0x148 [ 1613.262761][ C1] [ 1613.287541][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 1613.287583][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Tainted: G U 6.15.0-syzkaller-13473-gc0c9379f235d #0 PREEMPT(full) [ 1613.287642][ T32] Tainted: [U]=USER [ 1613.287670][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1613.287694][ T32] Call Trace: [ 1613.287708][ T32] [ 1613.287724][ T32] dump_stack_lvl+0x3d/0x1f0 [ 1613.287790][ T32] panic+0x71c/0x800 [ 1613.287844][ T32] ? __pfx_panic+0x10/0x10 [ 1613.287895][ T32] ? preempt_schedule_thunk+0x16/0x30 [ 1613.287948][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1613.287995][ T32] ? preempt_schedule_thunk+0x16/0x30 [ 1613.288043][ T32] ? watchdog+0xdda/0x12c0 [ 1613.288093][ T32] ? watchdog+0xdcd/0x12c0 [ 1613.288152][ T32] watchdog+0xdeb/0x12c0 [ 1613.288213][ T32] ? __pfx_watchdog+0x10/0x10 [ 1613.288273][ T32] ? lockdep_hardirqs_on+0x7c/0x110 [ 1613.288334][ T32] ? __kthread_parkme+0x19e/0x250 [ 1613.288383][ T32] ? __pfx_watchdog+0x10/0x10 [ 1613.288437][ T32] kthread+0x3c2/0x780 [ 1613.288497][ T32] ? __pfx_kthread+0x10/0x10 [ 1613.288552][ T32] ? rcu_is_watching+0x12/0xc0 [ 1613.288596][ T32] ? __pfx_kthread+0x10/0x10 [ 1613.288650][ T32] ret_from_fork+0x5d7/0x6f0 [ 1613.288698][ T32] ? __pfx_kthread+0x10/0x10 [ 1613.288751][ T32] ret_from_fork_asm+0x1a/0x30 [ 1613.288809][ T32] [ 1613.580193][ T32] Kernel Offset: disabled [ 1613.584542][ T32] Rebooting in 86400 seconds..