last executing test programs: 4m10.436838117s ago: executing program 0 (id=559): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) (async, rerun: 32) preadv2$auto(r0, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) (async, rerun: 32) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) (async) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async, rerun: 64) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r2 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)={0x1c0, r2, 0x1b, 0x70bd26, 0x25dfdbfe, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f177904859082894f"}, @OVS_PACKET_ATTR_ACTIONS={0x190, 0x3, 0x0, 0x1, [@typed={0x8, 0xcc, 0x0, 0x0, @u32}, @nested={0x14a, 0xad, 0x0, 0x1, [@generic="bbe4083cc185678d234df6afd26d199d2f10541520698adaca9c1733b4a380a7b7d678fbae49e7d39dd9d9dab66add6adb615cc383225f2595a5b83ed5fd1c9f71705e58093ffba6e42a", @generic="cde07d52134623260b39962f06672a2d1dbc5707621d00737107f8f81c37e65d56d395e1e9cf2d1cdfb1ece1e79fb3eca4f3066247ef2d49dccdca29f246fcdf0364c6aa4dc64b847ecb3351c42fee7322d1c67327f58228d785ba6371df6165727271ce0a2b3ec3d32185ed36b4f0782ec8245113919f458453b934d60a1fb24e5c98d5288abf39ec2a4d057580c967dee85759fd230591c2c86d0169e26f9c565083b063ff8d38843ebf1c9ba45494928b652b6cdb7fcaa1547e806169273eb5d06b1daa305eb4d18a03c2eed5127cabf5910390a74802263871d035b83f62c4c1a252a8ca9170f27ab4144ddf1df35358448a", @typed={0x8, 0x16, 0x0, 0x0, @u32=0x1}]}, @nested={0xc, 0xf8, 0x0, 0x1, [@typed={0x8, 0xad, 0x0, 0x0, @uid}]}, @typed={0x14, 0x16, 0x0, 0x0, @ipv6=@remote}, @typed={0xc, 0xe8, 0x0, 0x0, @u64=0xc5c}, @typed={0x9, 0x134, 0x0, 0x0, @str='&)\'%\x00'}]}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x4004040}, 0x4800) (async) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0x40, 0x0) (async, rerun: 64) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (rerun: 64) rseq$auto(0x0, 0xfffffff4, 0x0, 0x5) (async) ioctl$auto_VHOST_SET_BACKEND_FEATURES(0xffffffffffffffff, 0x4008af25, 0x0) (async) mmap$auto(0x4, 0xa00006, 0x2, 0x100000000040eb1, 0x602, 0x300000000000) (async) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x62040, 0x0) r3 = openat$auto_tun_fops_tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) rseq$auto(&(0x7f0000000580)={0x4000, 0x85, 0x9416, 0xf, 0x7, 0xf}, 0x6, 0x3, 0xff) (async) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r5 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async, rerun: 64) write$auto(r4, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) (async, rerun: 64) mmap$auto(0x1, 0x40009, 0xdf, 0x13, 0xffffffffffffffff, 0x10001) msync$auto(0x1ffff000, 0x1800000ff000000, 0x400000004) (async, rerun: 64) socket(0xf, 0xa, 0x5) (rerun: 64) connect$auto(0x3, 0x0, 0x2) (async) ioperm$auto(0x7, 0x75, 0x4) (async, rerun: 64) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (rerun: 64) fcntl$auto_F_UNLCK(r3, 0x8, 0x2) (async) sendmsg$auto_NL80211_CMD_START_SCHED_SCAN(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="60010000", @ANYRES16=0x0, @ANYBLOB="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"/346], 0x160}}, 0x24008040) (async) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) (async, rerun: 64) kexec_load$auto(0xff, 0x2, &(0x7f0000000080)={@kbuf=0x0, 0x2, 0x8000, 0x3000}, 0x4) (async, rerun: 64) close_range$auto(0x2, 0xa, 0x0) 4m8.348076607s ago: executing program 0 (id=563): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/platform/i8042/serio1/rate\x00', 0x2, 0x0) read$auto(0x3, 0x0, 0xfffffdef) write$auto(0x3, 0x0, 0xfdef) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, 0x0, 0x4e4102, 0x0) ioctl$auto_CEC_DQEVENT(r0, 0xc0506107, &(0x7f0000000340)={0x0, 0x80003, 0x2, @lost_msgs={0x401}}) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio1\x00', 0x1c1102, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r1, 0xc0045002, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x0, 0x9, 0xeb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) socket(0x10, 0x2, 0x14) socketpair$auto(0x4, 0x2, 0x10, &(0x7f0000000040)=0x7) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x6, 0x1, 0x948b, 0x3, 0x1, 0x572f14dc, 0x80000000, 0x80000000, 0x0, 0x7, 0x6d3c, 0x7, 0x2, 0x1]}, 0x0) select$auto(0xa, 0x0, 0x0, &(0x7f00000002c0)={[0x1fe, 0xffffffffffffffff, 0x800009b, 0x1, 0x948b, 0x0, 0xffffffffffffffff, 0x41000000003, 0xb, 0x62, 0x8000008000001b, 0x7, 0xd0c, 0x9, 0x2, 0x200]}, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000010}, 0x80) openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/mem\x00', 0x200000, 0x0) write$auto(0x4, 0x0, 0x100082) socket(0x27, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) utimes$auto(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0xcb40, 0x6}) pselect6$auto(0x6b, &(0x7f00000001c0)={[0x3, 0x1, 0x1800000000000, 0x10000, 0x8, 0x100000001, 0x3, 0x80, 0x3, 0x4, 0x8, 0x3, 0x9, 0xd452b40000000000, 0x4, 0x4]}, &(0x7f0000000240)={[0x7, 0x9, 0x9, 0x1, 0x1, 0x1, 0x6, 0x3bd3f789, 0x4, 0x5, 0x0, 0x3, 0x6, 0x5, 0xff, 0x8]}, &(0x7f00000003c0)={[0x7, 0x2, 0x6, 0x9, 0x6, 0xc, 0x5, 0x5, 0x5, 0x4, 0xdab6, 0x4, 0x101, 0x3, 0x4, 0x400]}, &(0x7f0000000440)={0xe, 0x5}, &(0x7f0000000480)="037e98b6620995c808f048fcfbe1aa34e8f0afb34040c6fd589d6e4291acbb56da5b61b957eb371854dd03eaeb3224b6eed6624be109644b524c3caa2ac2b143546a67c0c5fc85330d590065ddbeb1329d29af1aeafc56dfab99c47b1c4e5c4b67a9c340f01143a57ac8d732fab2873aa63fe1d87f5152ed6ab94ab54ced09c4166a98d42a4aceb6957333d7a1e5d18a75bd5330d9fa196219995271ad2b6c3776b675a2364c48617bd105cf2ed038dbd66612c49f893c195a737cdb2b35f4f77f3143d591043cf1f6701ef53d786bc1004bba4ee76c5cd478da9a63") io_setup$auto(0x10000, 0x0) 4m6.88081949s ago: executing program 0 (id=567): openat$auto_proc_environ_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/environ\x00', 0x28042, 0x0) r0 = open(&(0x7f0000000100)='./bus\x00', 0x14d27e, 0x72) copy_file_range$auto(r0, 0x0, r0, &(0x7f0000000080)=0x8800000, 0x2, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/vkms/graphics/fb0/rotate\x00', 0x18881, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bus/usb/011/001\x00', 0x921800, 0x0) socket(0xa, 0x1, 0x84) socket(0x8, 0x3, 0x3) mmap$auto(0x0, 0x40009, 0xe1, 0x9b75, 0x7, 0x28000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/loop14/queue/dma_alignment\x00', 0x80000, 0x0) read$auto(r1, 0x0, 0x20) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/fail-nth\x00', 0x157202, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_tracing_cpumask_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/tracing_cpumask\x00', 0x8301, 0x0) unshare$auto(0x40000080) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer2\x00', 0x3dc981, 0x0) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv6/conf/ipvlan1/proxy_ndp\x00', 0x143881, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/bdi/43:288/max_ratio_fine\x00', 0x10b142, 0x0) sendfile$auto(r3, r4, 0x0, 0x1000200) 4m6.160893195s ago: executing program 0 (id=570): r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) write$auto(0x3, 0x0, 0xffd8) unshare$auto(0x40000080) r1 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r1, 0xfffffffffffffd02, &(0x7f00000001c0)) close_range$auto(r0, r1, 0x0) process_mrelease$auto(0xffffffffffffffff, 0xa) mincore$auto(0x1000, 0x8001, 0x0) fcntl$auto(0x8000000000000001, 0x7, 0x8) clone$auto(0x21, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x6) fcntl$auto(0x8000000000000001, 0x26, 0x8) 4m3.554574078s ago: executing program 0 (id=575): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) mmap$auto(0x0, 0x128009, 0xdf, 0xeb1, r0, 0x20000008000) sysfs$auto(0x2, 0x3e, 0x0) fsopen$auto(0x0, 0x1) socket(0x21, 0x2, 0x2) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) mmap$auto(0x0, 0x7ffffffff000, 0x8004, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2, 0x7f, 0xeb1, 0x401, 0x8000) socketpair$auto(0xa, 0x2, 0x8000000000000000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x103040, 0x0) r2 = ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x2200, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x62, 0x80000001, 0x4, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x400000000001ff, 0x7, 0xa, 0x1, 0x4, 0x3, 0x9, 0x5, 0x3, 0x48, 0x8002001f, 0x79d, 0x6d3e, 0x4, 0x6, 0x8]}, 0x0) prctl$auto(0x3e, 0x8, 0x0, 0x1, 0x40) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x0) open(0x0, 0x22240, 0x45) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$auto(0x3, 0x80a86f3d, r4) write$auto(r2, 0x0, 0x100000a3d9) 4m0.758543702s ago: executing program 0 (id=582): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sg0\x00', 0x141000, 0x0) sendmsg$auto_NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x18, 0x0, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@NL80211_ATTR_TDLS_SUPPORT={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x80}, 0x80) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond_slave_0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond_slave_0\x00', 0x0}) bpf$auto(0x40, &(0x7f00000000c0)=@bpf_attr_3={0xfe3, 0xdc8d, 0x4, 0x80, 0xfffffffc, 0x8, 0x7ff, 0x9, 0x10, "8cfa39c4e1b994354bf03066aeb654e8", r2, 0x3, r1, 0x4, 0x8001, 0x81, 0x9, 0x7, 0x2, 0x100, @attach_btf_obj_fd=r1, 0x4, 0x6, 0x9, 0x0, 0x2000, r1}, 0x7f) ioctl$auto_SCSI_IOCTL_SEND_COMMAND2(r1, 0x1, &(0x7f00000000c0)) (async) ioctl$auto_SCSI_IOCTL_SEND_COMMAND2(r1, 0x1, &(0x7f00000000c0)) r3 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, &(0x7f0000005380)={0x0, 0x0, &(0x7f0000005340)={&(0x7f0000000180)={0x28, r3, 0x1, 0x870bd2b, 0x25dfdbfc, {}, [@NFSD_A_SERVER_SOCK_ADDR={0x14, 0x1, 0x0, 0x1, [@NFSD_A_SOCK_TRANSPORT_NAME={0x9, 0x2, 'nfsd\x00'}, @NFSD_A_SOCK_ADDR={0x4}]}]}, 0x28}, 0x1, 0x0, 0x0, 0xc000}, 0x20000000) 3m45.161531447s ago: executing program 32 (id=582): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sg0\x00', 0x141000, 0x0) sendmsg$auto_NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x18, 0x0, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@NL80211_ATTR_TDLS_SUPPORT={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x80}, 0x80) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond_slave_0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond_slave_0\x00', 0x0}) bpf$auto(0x40, &(0x7f00000000c0)=@bpf_attr_3={0xfe3, 0xdc8d, 0x4, 0x80, 0xfffffffc, 0x8, 0x7ff, 0x9, 0x10, "8cfa39c4e1b994354bf03066aeb654e8", r2, 0x3, r1, 0x4, 0x8001, 0x81, 0x9, 0x7, 0x2, 0x100, @attach_btf_obj_fd=r1, 0x4, 0x6, 0x9, 0x0, 0x2000, r1}, 0x7f) ioctl$auto_SCSI_IOCTL_SEND_COMMAND2(r1, 0x1, &(0x7f00000000c0)) (async) ioctl$auto_SCSI_IOCTL_SEND_COMMAND2(r1, 0x1, &(0x7f00000000c0)) r3 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, &(0x7f0000005380)={0x0, 0x0, &(0x7f0000005340)={&(0x7f0000000180)={0x28, r3, 0x1, 0x870bd2b, 0x25dfdbfc, {}, [@NFSD_A_SERVER_SOCK_ADDR={0x14, 0x1, 0x0, 0x1, [@NFSD_A_SOCK_TRANSPORT_NAME={0x9, 0x2, 'nfsd\x00'}, @NFSD_A_SOCK_ADDR={0x4}]}]}, 0x28}, 0x1, 0x0, 0x0, 0xc000}, 0x20000000) 2m50.01104991s ago: executing program 3 (id=799): sendmsg$auto_NL80211_CMD_MODIFY_LINK_STA(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280), 0xc, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0], 0x20}, 0x1, 0x0, 0x0, 0x20044090}, 0x4000001) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = socket(0x2, 0x1, 0x0) getsockopt$auto(r1, 0x6, 0x23, 0x0, &(0x7f0000000100)=0x200039) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x3, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0xfffd, 0x8000, 0x0) sendmmsg$auto(0x3, 0x0, 0x787b, 0x7000000) sched_get_priority_min$auto(0x40) openat$auto_proc_projid_map_operations_base(0xffffffffffffff9c, 0x0, 0x981e82, 0x0) r2 = socket(0x6, 0x2, 0x80000000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40000) sendmmsg$auto(0x3, 0x0, 0x2, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) close_range$auto(r2, r0, 0x1) preadv$auto(0xffffffffffffffff, 0x0, 0x8, 0x6, 0x5) getpgid$auto(0x0) mmap$auto(0x0, 0x20009, 0x7, 0x12, 0xffffffffffffffff, 0xf4e) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x2, 0xdf, 0x9b72, 0x7, 0x28000) r4 = socket(0x15, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) sendmsg$auto(r4, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0) timer_delete$auto(0x2) 2m48.944450569s ago: executing program 3 (id=801): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/md_mod/parameters/new_array\x00', 0xa001, 0x0) mmap$auto(0x0, 0x2000d, 0x4000000000df, 0xeb1, 0x404, 0x8000) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv6/conf/ip6tnl0/rpl_seg_enabled\x00', 0x402000, 0x0) read$auto(r0, 0x0, 0x1ff) write$auto(0x3, 0x0, 0xfdef) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram11\x00', 0x14be02, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x8000003b, 0x6, 0x0, 0x800006, 0x200000000000000) socket(0x10, 0x5, 0xffffffc0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r2 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_OWNER(r2, 0xaf01, 0x5) ioctl$auto(r2, 0x4008af13, r2) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x406, 0x0, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x4000000000005, 0x6, 0x62, 0x8, 0x7, 0x1, 0xb, 0x100, 0x18]}, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d7) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) write$auto(r3, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) write$auto(r3, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x4, 0x15) fchdir$auto(0xffffffffffffffff) mkdir$auto(0x0, 0x6) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, 0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, 0x5f, 0x0, 0x3}, 0x6f3) r5 = socket(0xa, 0x2, 0x85) bpf$auto(0x0, &(0x7f0000000000)=@link_update={r5, @new_prog_fd=0x4, 0x4, @old_map_fd=r4}, 0xa3) mmap$auto(0x5, 0x4020008, 0x1001, 0xeb1, r5, 0x8003) madvise$auto(0x0, 0xffffffffffff0005, 0x19) 2m42.508819313s ago: executing program 3 (id=812): unshare$auto(0x40000080) ioctl$auto_TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptya5\x00', 0x62c00, 0x0) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, 0x0, 0x101001, 0x0) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram6\x00', 0x46202, 0x0) mmap$auto(0x0, 0x3, 0x1000df, 0x9b72, 0x7, 0x28000) mlockall$auto(0x7) r0 = getpgrp(0x0) prctl$auto(0x3e, 0x0, r0, 0x1, 0x200) mmap$auto(0x0, 0x810004, 0xffc, 0x8000000008011, 0x3, 0x8000) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/midiC2D2\x00', 0x10000, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) close_range$auto(0x2, 0x8, 0x0) socket(0x39, 0x80802, 0x0) socket(0x2b, 0x1, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) mmap$auto(0xfffffffffffffffc, 0x4020009, 0xdf, 0xd9, 0x401, 0x8004) statx$auto(0xffffffffffffffff, 0x0, 0x6d7, 0x80000008, 0x0) madvise$auto(0x0, 0x6, 0x19) mlockall$auto(0x800000000000005) madvise$auto(0x0, 0x200007, 0x19) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @loopback}, 0x6a) io_uring_setup$auto(0x8, 0x0) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000500)='/dev/tty34\x00', 0x2200, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) 2m40.312446396s ago: executing program 3 (id=815): mmap$auto(0x8000000000000000, 0x800008, 0xdf, 0x4000ebe, 0xffffffffffffffff, 0x8000) get_robust_list$auto(0x0, 0x0, 0x0) r0 = io_uring_setup$auto(0x1, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) close_range$auto(0x2, 0x8, 0x1) r2 = openat$auto_lowpan_control_fops_6lowpan(0xffffffffffffff9c, &(0x7f0000002140), 0x0, 0x0) pread64$auto(r2, 0x0, 0x663, 0x6) read$auto(0xffffffffffffffff, 0x0, 0x42) mmap$auto(0x0, 0x4, 0x4000000000df, 0x4000000040eb1, r0, 0x300000000000) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/fail-nth\x00', 0x2003, 0x0) read$auto(0xffffffffffffffff, 0x0, 0x20) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r3 = io_uring_setup$auto(0x6, 0x0) fcntl$auto_F_SETLK(r3, 0x6, 0x6) writev$auto(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x3}, 0x3) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/binderfs/binder0\x00', 0x101000, 0x0) r4 = fsopen$auto(0x0, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x1, 0xf819, 0xf6, 0xeba, 0xfffffffffffffffa, 0x2000000000008004) sendfile$auto(0xffffffffffffffff, r4, 0x0, 0x8c01) socket(0x1e, 0x6, 0xffffffff) pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x89\x06s\x1cJ\x99\x00:\x00!\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x10, 0x6) mmap$auto(0xfffffffffffffffa, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) getcwd$auto(0x0, 0xffffffffffffffff) setsockopt$auto(0x3, 0x10000000084, 0x2, 0x0, 0x8) bind$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x5, @loopback}, 0x6a) 2m39.574812274s ago: executing program 3 (id=816): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2b, 0x1, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_CHANGE_NAN_CONFIG(r1, 0x0, 0x90) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xfffffffd}, 0x10001}, 0x5, 0x20000000) bind$auto(0x3, 0x0, 0x6a) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) ioctl$auto(0x3, 0x80108907, 0x38) prctl$auto_PR_GET_TID_ADDRESS(0x28, 0x2, 0x0, 0x0, 0x40) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_bm_status_operations_binfmt_misc(0xffffffffffffff9c, 0x0, 0x80000, 0x0) write$auto(0x3, 0x0, 0xfffffdef) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f0000000040)='}[,&*}\x00\x0e\x15F\xf7\x1a\xd1K+\xedy\xc6\x9bb\x94\xb4^\xc2\x83%\xfbw}\xfb_P\"\x19\xdfi\xe9hA|Q\x8a_F\x04:Q\x90\'\x06', &(0x7f0000000140)='nfsd\x00', 0xc0ed0000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x103841, 0x0) syz_genetlink_get_family_id$auto_ipvs(0x0, 0xffffffffffffffff) shmctl$auto_SHM_UNLOCK(0xd, 0xc, 0x0) msgctl$auto_MSG_STAT_ANY(0x4f55, 0xd, 0x0) sendmsg$auto_IPVS_CMD_GET_DEST(r0, 0x0, 0x11) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x50a) socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) 2m33.942602584s ago: executing program 3 (id=832): r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/conf/syz_tun/forwarding\x00', 0x0, 0x0) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x40001, 0x0) ioctl$auto_TCFLSH2(r1, 0x80045439, 0x0) (async) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) ioctl$auto(r1, 0x8926, r1) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) (async) socket(0x2, 0x3, 0x6) (async) r2 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) (async) sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) (async) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) (async) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/core/rps_default_mask\x00', 0x82, 0x0) (async) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r3 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async) socket(0xa, 0x6, 0x84) (async) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) socketpair$auto(0x1e, 0x3, 0xfffffffe, 0x0) (async) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) read$auto_proc_sys_file_operations_proc_sysctl(r0, &(0x7f00000001c0)=""/141, 0x8d) (async) r4 = socket(0x2, 0x1, 0x106) getsockopt$auto(r4, 0x29, 0x4e, 0x0, 0x0) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x10002, 0x0, 0x1, 0x0, 0x0, 0x3}, 0x7}, 0x3, 0xcad7) (async) r5 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r6, &(0x7f0000004240)={0x0, 0x0, &(0x7f0000004200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010049bd7000fedbdf251400000006000b002c290000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000060}, 0x0) (async) sendmsg$auto_HWSIM_CMD_FRAME(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000a80)=ANY=[@ANYBLOB="38010000", @ANYRES16=r5, @ANYBLOB="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"], 0x138}, 0x1, 0x0, 0x0, 0x2}, 0x4048881) 2m18.85538993s ago: executing program 33 (id=832): r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/conf/syz_tun/forwarding\x00', 0x0, 0x0) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x40001, 0x0) ioctl$auto_TCFLSH2(r1, 0x80045439, 0x0) (async) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) ioctl$auto(r1, 0x8926, r1) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) (async) socket(0x2, 0x3, 0x6) (async) r2 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) (async) sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) (async) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) (async) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/core/rps_default_mask\x00', 0x82, 0x0) (async) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r3 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async) socket(0xa, 0x6, 0x84) (async) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) socketpair$auto(0x1e, 0x3, 0xfffffffe, 0x0) (async) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) read$auto_proc_sys_file_operations_proc_sysctl(r0, &(0x7f00000001c0)=""/141, 0x8d) (async) r4 = socket(0x2, 0x1, 0x106) getsockopt$auto(r4, 0x29, 0x4e, 0x0, 0x0) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x10002, 0x0, 0x1, 0x0, 0x0, 0x3}, 0x7}, 0x3, 0xcad7) (async) r5 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r6, &(0x7f0000004240)={0x0, 0x0, &(0x7f0000004200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010049bd7000fedbdf251400000006000b002c290000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000060}, 0x0) (async) sendmsg$auto_HWSIM_CMD_FRAME(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000a80)=ANY=[@ANYBLOB="38010000", @ANYRES16=r5, @ANYBLOB="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"], 0x138}, 0x1, 0x0, 0x0, 0x2}, 0x4048881) 38.9217742s ago: executing program 1 (id=1148): mmap$auto(0x0, 0x400008, 0x4, 0x9b73, 0x2, 0x8000) socket(0x5, 0x1, 0x9) r0 = open(&(0x7f0000000800)='./file0\x00', 0x62240, 0x154) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/ttyS2\x00', 0x201, 0x0) clock_nanosleep$auto(0x400000, 0x1, 0x0, &(0x7f0000000040)={0x7fff, 0x2}) ioctl$auto_TIOCSTI2(r1, 0x5412, &(0x7f0000000040)) r2 = prctl$auto(0x43, 0x17, 0x0, 0x0, 0x0) execveat$auto(r0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x11000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) setresuid$auto(0x0, 0x0, 0xffffffffffffffff) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) getpid() writev$auto(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x7}, 0x3) setsockopt$auto(0xffffffffffffffff, 0x107, 0x14, 0x0, 0x4) io_uring_setup$auto(0x6, 0x0) socket(0xa, 0x3, 0x3a) setsockopt$auto(0x400000000000003, 0x29, 0xd0, 0x0, 0x4) write$auto(0x3, 0x0, 0xfffffdef) mmap$auto(0x0, 0x400008, 0x2, 0x9b72, 0x2, 0x8000) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000240)=""/236, 0xec) pivot_root$auto(0x0, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0) writev$auto(r3, 0x0, 0x3) close_range$auto(0x0, 0xfffffffffffff000, 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x100, 0x0) socket(0x2b, 0x1, 0x1) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) listen$auto(0x3, 0x81) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) 36.724600609s ago: executing program 1 (id=1154): mmap$auto(0x0, 0x40009, 0xdb, 0x9b75, 0x7, 0x28000) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/platform/vhci_hcd.8/usb25/25-0:1.0/ep_81/power/runtime_active_time\x00', 0x222480, 0x0) mmap$auto(0xa, 0x4, 0x7, 0x19, 0xfffffffffffffffb, 0x7fff) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0) ioctl$auto_SNDCTL_DSP_SUBDIVIDE(r2, 0xc0045009, 0x0) read$auto(r1, 0x0, 0x20) writev$auto(r0, &(0x7f0000000200)={0x0, 0x3}, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) r4 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$auto(r4, 0x400454ca, 0x38) r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0x80900, 0x0) openat$auto_ftrace_system_enable_fops_trace_events(0xffffffffffffff9c, 0x0, 0x20a01, 0x0) ioctl$auto_BLKFLSBUF(r5, 0x1261, 0x0) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f00000000c0), 0xffffffffffffffff) mmap$auto(0xb2, 0x14, 0xffb, 0x8000000008015, r3, 0x8000) write$auto(0x3, 0x0, 0xfffffdef) ioctl$auto_BLKTRACETEARDOWN(r5, 0x1276, 0x0) mmap$auto(0x8000000000002001, 0x20009, 0xdf, 0x15, 0xffffffffffffffff, 0x8000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r6 = socket(0xa, 0x3, 0x3c) r7 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptyr1\x00', 0x880, 0x0) ioctl$auto(r7, 0x5609, r6) open_tree$auto(0xffffffffffffffff, 0x0, 0x74ee) 31.670533141s ago: executing program 1 (id=1165): openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2) socket(0x10, 0x4, 0xffffffc0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x406, 0x0, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x4000000000005, 0x6, 0x62, 0x8, 0x7, 0x1, 0xb, 0x100, 0x18]}, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d7) write$auto(0xffffffffffffffff, 0x0, 0x98c7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x4, 0x15) r2 = open(&(0x7f0000000180)='./cgroup\x00', 0x50141, 0x64) fchdir$auto(r2) mkdir$auto(&(0x7f0000000480)='./cgroup\x00', 0x6) bpf$auto(0x0, &(0x7f0000000000)=@link_update={0xffffffffffffffff, @new_prog_fd=0x4, 0x4, @old_map_fd}, 0xa3) madvise$auto(0x0, 0xffffffffffff0005, 0x19) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp1\x00', 0x20b42, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mremap$auto(0x4fff, 0xb8, 0x13fd4, 0x3, 0xfffff000) mmap$auto(0x0, 0x400008, 0xdc, 0x9b72, 0x2, 0x8000) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/tcp\x00', 0x181800, 0x0) pread64$auto(r3, &(0x7f0000000000)='/proc/thread-self/net/tcp6\x00\xd2)\x8e\x892\x82\x19\xfd\x03\xc3\x8d\xd7D\bz\xde5u4\xddS\xe6\x1a\x8a`\xad0\x98|\xbc\x00\x98\b\x0ey\xcb`\x9b\x91r\xd5\x13\x9e\xdd4\xe7\xb7\x94P\x8fBlm\x04eAW\xbc0\x9b\xbd\x8f\xf5];\x94\x18\xf0\v\xd7\xf4P\xd3\x9e,Q\xd8\x16\x989l\x03\a\xcc\x1e\xb9\xe9{\xeeS\xa9\xc60\x00\xb5&\x9e\xdbk{F\x18\xa8\xba*G\xd3\x80\xb1G.\xec1\x96uP\x97\x8co\xf1\xa6\xd5\xea\xc8L3|a\xb3\xaa\x90~Y\xb19\xad\xdc\x05o\x98g\xd4\x10]5\x95\xd0\xabJC\x06\xd0c\xd1Ra\xf7\xc4n\xdf\xe4\xc7\x03\x19x\xbb\v\x00\t\xde\xf5\x93\xfb\xfb#\xbd\xc0S\f57\x83\xdd\xaa\xf0\x9c\xd3G\xe1\x00'/232, 0x3ef, 0x9) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r4) ioctl$auto_KVM_CREATE_VM(r0, 0xae80, 0x0) 26.187846s ago: executing program 1 (id=1176): r0 = pidfd_open$auto(0x1, 0x0) mmap$auto(0x0, 0x2, 0x3, 0x20eb3, r0, 0x0) (async) prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x5, 0x3, 0x0, 0x0, 0x1) (async, rerun: 64) socket(0x1d, 0x2, 0x6) (async, rerun: 64) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) lsm_set_self_attr$auto(0x9, 0x0, 0x80, 0x0) (async) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x8000000000000003, 0x0, 0x1, 0x0) (async, rerun: 32) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (rerun: 32) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000240)='/dev/binderfs/binder0\x00', 0x800, 0x0) socket(0xa, 0x1, 0x100) (async) socket(0x2a, 0x3, 0x0) socket(0x2c, 0x3, 0x9) (async) r2 = socket(0x15, 0x5, 0x0) getsockopt$auto(r2, 0x114, 0x2713, 0xfffffffffffffffc, 0x0) write$auto(0x1, 0x0, 0x80000000) (async, rerun: 64) openat$auto_trace_options_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/options/test_nop_refuse\x00', 0x800, 0x0) (async, rerun: 64) preadv$auto(0x3, &(0x7f00000004c0)={0x0, 0x8000000}, 0x3, 0x10000, 0x10) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/netdevsim0/del_port\x00', 0xa001, 0x0) write$auto(r3, &(0x7f0000000380)='0\x81=\"\xad/\x8d\b\x00\x18\xa4\xb0\xb4\xd9\x82=~\x17\xfb&L\xeb=j\a\xf1y\xb3\"\xeb\a\xdd\xf4\xf4Ry\xee\xd7\x1e\x1c\x86\x0f\xcf\x7f\xbf\xab\x12{\xc2\xc2*\xc1M+6/v8\xea\xe9\x85s4\xfe\xe5\t\x7fc\xfb7^\xb86J_\x1d1s!\x01\xff\xff\xff\xff\xff\xff\xff\x1dF\xe6\xf6\x17\x10+\xc0\xb0\xafc\x99\xd4\x150Y~\x1e\xe2\xd6x4fW\x13\xc4U`\x9e-X\xd7\xe2H^\fLS`\xfc\xbb\r\f\x00\xeaN\xa5\xd2\x82;\x7f\xa0.\x9a\xfb\x8d\xf3l\xf2\xd3\x95\xc1M5\xcb\xa6I\x067\xe36\xea\xe9\xe3\xf44oT_`8\xb3\xef\x04 \x05K\xf9\x87pl\xac\x86\nE\xc7e\xc5Q\x89\xcd@\x1c\x92\x00\x87\x976\x9f>\xa2\xcfm\xec\r\x11\x7f\x00\x00\x00\xb1\xde@\x02\xce\x03\xb7\xb1\xfb\x9fr\v\xb2\xe3\xc7\b\x85K /zm\x7f\x8fg,p\a\xc8\x7f\xa5\x87\x02\x87\xbbR=A\x00\x1f\x8a\xa7/Q\"J\xbb\xb0m\xf2SP\x84\x84S\xf0\xba\x9a\xf6\xb6`WI\xba\xba*8\x9f\xea\xe8K/\x98\xbc7~>\x12\x9buB\xcb\xe4\x8aKf\xba\x8c\x19m\xe6I\x02\xde\x80\x9d\x87}\xf4\xbd9\xaa\xd6\xdb1]\xde\xa0r\x14\xca56^\x94\xd2\xd8\xe6}9\x91\xb6\xf7\xa1=\x96\x11\xf1\\\xa91\x0e\xd1\xe4z\xc1;Pw!\x8b\xf5{\xc7Xd\xf1\xf2}\x96EVf\xc9\xa8\xcd\xe4\xc9\x8d\x1d7\xd5\x94\\\xb5\r\xd2\xaa\xe6H\xfe)\xb3a\x04\x1eRMl\xa3F\xa8W0\x90\xc9Ky#\x03\xf5~\xd2Z\xe9(\x99\b\x00M\xde\x01]\r\xd09k\xc2\x84\xc1\xabN\x96\x8a6\x98@\xd3\xab\xa8m\xdf\x8d\x1d\b\x82\xfcP\x87\x93\x80\x97Q\x86\x8a\x9c\xf8L\x0f\xa8@VE2\x9d\x1e`#\xd8\xd7M\xd4k1\xe6\x13Y\\\x83E\xd0e\x0eM\xa9Q\xac\x0e\x1d]\a\x19H\x81\xd2\xccF\xc6\xd4\xe2R$\xfa\xd6}\xbdsN\x18\xdf\xf5\xffP\xf5\f\xccL\xef\x83\xb3$\xd4\xf4\xb5\xe6\xd0 \xb9\xa7\x8e6\t\x83q\xef\b\xd2\xdb', 0x1) fcntl$auto(0x0, 0x407, 0x100000) (async) setns(r0, 0x60020000) umount2$auto(&(0x7f0000000000)='.\x00', 0x8) (async) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) (async, rerun: 64) r4 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) socket(0x29, 0x2, 0x0) (async) syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000080), r4) (async) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/conf/team0/bc_forwarding\x00', 0x2102, 0x0) mmap$auto(0xffffffffffffffff, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) setgroups$auto(0xc00000000, 0xfffffffffffffffc) 23.673940673s ago: executing program 1 (id=1183): socket$nl_generic(0x10, 0x3, 0x10) r0 = getpid() ptrace$auto_PTRACE_POKEDATA(0x5, r0, 0xfffffffffffffa0d, 0x10) socket(0x18, 0xa, 0x1) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty28\x00', 0x80003, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) write$auto(0x1, 0x0, 0x80000000) r1 = socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) write$auto_proc_loginuid_operations_base(r1, &(0x7f0000000180)="3081f9f7", 0x4) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x25, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r2 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(r2, r2, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video62\x00', 0x80a01, 0x0) r3 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r2, 0xc0585611, r3) 23.204136099s ago: executing program 1 (id=1186): openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2) socket(0x10, 0x4, 0xffffffc0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x406, 0x0, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x4000000000005, 0x6, 0x62, 0x8, 0x7, 0x1, 0xb, 0x100, 0x18]}, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d7) write$auto(0xffffffffffffffff, 0x0, 0x98c7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x4, 0x15) r2 = open(&(0x7f0000000180)='./cgroup\x00', 0x50141, 0x64) fchdir$auto(r2) mkdir$auto(&(0x7f0000000480)='./cgroup\x00', 0x6) bpf$auto(0x0, &(0x7f0000000000)=@link_update={0xffffffffffffffff, @new_prog_fd=0x4, 0x4, @old_map_fd}, 0xa3) madvise$auto(0x0, 0xffffffffffff0005, 0x19) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp1\x00', 0x20b42, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mremap$auto(0x4fff, 0xb8, 0x13fd4, 0x3, 0xfffff000) mmap$auto(0x0, 0x400008, 0xdc, 0x9b72, 0x2, 0x8000) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/tcp\x00', 0x181800, 0x0) pread64$auto(r3, &(0x7f0000000000)='/proc/thread-self/net/tcp6\x00\xd2)\x8e\x892\x82\x19\xfd\x03\xc3\x8d\xd7D\bz\xde5u4\xddS\xe6\x1a\x8a`\xad0\x98|\xbc\x00\x98\b\x0ey\xcb`\x9b\x91r\xd5\x13\x9e\xdd4\xe7\xb7\x94P\x8fBlm\x04eAW\xbc0\x9b\xbd\x8f\xf5];\x94\x18\xf0\v\xd7\xf4P\xd3\x9e,Q\xd8\x16\x989l\x03\a\xcc\x1e\xb9\xe9{\xeeS\xa9\xc60\x00\xb5&\x9e\xdbk{F\x18\xa8\xba*G\xd3\x80\xb1G.\xec1\x96uP\x97\x8co\xf1\xa6\xd5\xea\xc8L3|a\xb3\xaa\x90~Y\xb19\xad\xdc\x05o\x98g\xd4\x10]5\x95\xd0\xabJC\x06\xd0c\xd1Ra\xf7\xc4n\xdf\xe4\xc7\x03\x19x\xbb\v\x00\t\xde\xf5\x93\xfb\xfb#\xbd\xc0S\f57\x83\xdd\xaa\xf0\x9c\xd3G\xe1\x00'/232, 0x3ef, 0x9) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r4) ioctl$auto_KVM_CREATE_VM(r0, 0xae80, 0x0) 15.102035443s ago: executing program 2 (id=1204): madvise$auto(0x0, 0x2000040080000004, 0xe) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x0, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptyab\x00', 0x88c80, 0x0) ioctl$auto_FIDEDUPERANGE(r1, 0xc0189436, 0x1) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x202000b, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = socket(0x2, 0x801, 0x6) setsockopt$auto(r2, 0x1, 0x12, 0x0, 0xa4) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/nbd9\x00', 0x0, 0x0) sendmsg$auto_NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000162bf2e0f7c562c691235555567190a8826fcd0cf756dfacd1464155407bf9b3acb701adf4fefbc1e3c225fda9eb4c4346887eff", @ANYRES16, @ANYBLOB="01002dbd7000ffdbdf25020000000800010009000000"], 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x2000c800) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) syslog$auto(0x3, 0x0, 0x5) poll$auto(0x0, 0x7f, 0x9) socket(0x25, 0x5, 0x6) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) socket(0x1d, 0x1, 0x7fff) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, 0x0, 0x8000) openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x3fdafc9, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0xc, 0x2, 0x6]}, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0) writev$auto(r5, &(0x7f0000000080)={&(0x7f0000000040), 0x1000}, 0x3) 11.943236384s ago: executing program 2 (id=1206): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/platform/i8042/serio1/rate\x00', 0x2, 0x0) read$auto(0x3, 0x0, 0xfffffdef) write$auto(0x3, 0x0, 0xfdef) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000002c00)='/dev/cec25\x00', 0x4e4102, 0x0) ioctl$auto_CEC_DQEVENT(r0, 0xc0506107, &(0x7f0000000340)={0x0, 0x80003, 0x2, @lost_msgs={0x401}}) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio1\x00', 0x1c1102, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r1, 0xc0045002, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x0, 0x9, 0xeb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) socket(0x10, 0x2, 0x14) socketpair$auto(0x4, 0x2, 0x10, &(0x7f0000000040)=0x7) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x6, 0x1, 0x948b, 0x3, 0x1, 0x572f14dc, 0x80000000, 0x80000000, 0x0, 0x7, 0x6d3c, 0x7, 0x2, 0x1]}, 0x0) select$auto(0xa, 0x0, 0x0, &(0x7f00000002c0)={[0x1fe, 0xffffffffffffffff, 0x800009b, 0x1, 0x948b, 0x0, 0xffffffffffffffff, 0x41000000003, 0xb, 0x62, 0x8000008000001b, 0x7, 0xd0c, 0x9, 0x2, 0x200]}, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000010}, 0x80) openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/mem\x00', 0x200000, 0x0) write$auto(0x4, 0x0, 0x100082) socket(0x27, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) utimes$auto(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0xcb40, 0x6}) pselect6$auto(0x6b, &(0x7f00000001c0)={[0x3, 0x1, 0x1800000000000, 0x10000, 0x8, 0x100000001, 0x3, 0x80, 0x3, 0x4, 0x8, 0x3, 0x9, 0xd452b40000000000, 0x4, 0x4]}, &(0x7f0000000240)={[0x7, 0x9, 0x9, 0x1, 0x1, 0x1, 0x6, 0x3bd3f789, 0x4, 0x5, 0x0, 0x3, 0x6, 0x5, 0xff, 0x8]}, &(0x7f00000003c0)={[0x7, 0x2, 0x6, 0x9, 0x6, 0xc, 0x5, 0x5, 0x5, 0x4, 0xdab6, 0x4, 0x101, 0x3, 0x4, 0x400]}, &(0x7f0000000440)={0xe, 0x5}, &(0x7f0000000480)="037e98b6620995c808f048fcfbe1aa34e8f0afb34040c6fd589d6e4291acbb56da5b61b957eb371854dd03eaeb3224b6eed6624be109644b524c3caa2ac2b143546a67c0c5fc85330d590065ddbeb1329d29af1aeafc56dfab99c47b1c4e5c4b67a9c340f01143a57ac8d732fab2873aa63fe1d87f5152ed6ab94ab54ced09c4166a98d42a4aceb6957333d7a1e5d18a75bd5330d9fa196219995271ad2b6c3776b675a2364c48617bd105cf2ed038dbd66612c49f893c195a737cdb2b35f4f77f3143d591043cf1f6701ef53d786b") io_setup$auto(0x10000, 0x0) 11.531745398s ago: executing program 5 (id=1207): sendmsg$auto_SMC_NETLINK_REMOVE_UEID(0xffffffffffffffff, 0x0, 0x20000000) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r1 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) ioctl$auto_UI_DEV_SETUP(r1, 0x405c5503, &(0x7f00000000c0)={{0x9, 0xf2cf, 0x8, 0x80}, "6a034a07c7b82d90b69a39e32576f893fba86c9dd051a0094a3836d61c9100fefbbabea6ef9368c7996e841f3f1561d4992f726b0a6c36b0b2fd1678e816201cf562367fe6596824588a2e3d84ba165f", 0xa}) ioctl$auto_UI_DEV_CREATE(r1, 0x5501, 0x0) setsockopt$auto(0xffffffffffffffff, 0x1, 0x1021, 0x0, 0xd) geteuid() sendmsg$auto_OVS_CT_LIMIT_CMD_GET(0xffffffffffffffff, 0x0, 0x200000c0) close_range$auto(0x2, 0xa, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x40802, 0x0) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)={0x2c, r2, 0x1, 0x70bd0d, 0x25dfdbfe, {}, [@NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0xfffffffc}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x8}, @NL80211_ATTR_MAX_HW_TIMESTAMP_PEERS={0x6, 0x143, 0x5}]}, 0x2c}, 0x1, 0x68, 0x0, 0x24000e00}, 0xd0) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r4, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) ioctl$auto_BLKFLSBUF(r4, 0x1261, 0x0) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x20000000000006, 0x2) socket(0x2, 0x3, 0xa) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x4000000000008000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb5, 0x401, 0x300000000000) prctl$auto(0x16, 0x2, 0x2, 0x4000000d, 0x100) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$auto_SNDCTL_DSP_GETODELAY(r5, 0x80045017, &(0x7f0000000c00)) io_uring_setup$auto(0x6, 0x0) 10.235047298s ago: executing program 2 (id=1210): openat$auto_proc_environ_operations_base(0xffffffffffffff9c, 0x0, 0x28042, 0x0) r0 = open(&(0x7f0000000100)='./bus\x00', 0x14d27e, 0x72) copy_file_range$auto(r0, 0x0, r0, &(0x7f0000000080)=0x8800000, 0x2, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/vkms/graphics/fb0/rotate\x00', 0x18881, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x921800, 0x0) socket(0xa, 0x1, 0x84) socket(0x8, 0x3, 0x3) mmap$auto(0x0, 0x40009, 0xe1, 0x9b75, 0x7, 0x28000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/loop14/queue/dma_alignment\x00', 0x80000, 0x0) read$auto(r1, 0x0, 0x20) writev$auto(0xffffffffffffffff, 0x0, 0x3) unshare$auto(0x40000080) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x3dc981, 0x0) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv6/conf/ipvlan1/proxy_ndp\x00', 0x143881, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/bdi/43:288/max_ratio_fine\x00', 0x10b142, 0x0) sendfile$auto(r2, r3, 0x0, 0x1000200) 8.472159749s ago: executing program 5 (id=1214): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x1, 0x0) write$auto(0x3, 0x0, 0xfffffdef) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) pivot_root$auto(&(0x7f0000000000)=':\\.[,:}]%\x00', &(0x7f0000000040)='/proc/fs/lockd/nlm_end_grace\x00') openat$dir(0xffffffffffffff9c, 0x0, 0x381000, 0x100) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0) writev$auto(r0, &(0x7f0000000080)={&(0x7f0000000040), 0x1000}, 0x3) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) open(0x0, 0x6041, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev3\x00', 0x169000, 0x0) mmap$auto(0x0, 0x20009, 0x7fffffff, 0xeb1, 0x401, 0x8000) memfd_secret$auto(0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/disk\x00', 0x100, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, 0x0, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsopen$auto(&(0x7f0000000040)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0xfffffffe) read$auto(r2, 0x0, 0x20) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) ioctl$auto_FIDEDUPERANGE(r2, 0xc0189436, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) r4 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20942, 0x0) write$auto_snd_pcm_oss_f_reg_pcm_oss(r4, &(0x7f0000000080)="c2", 0x1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_SNDCTL_DSP_SYNC(r4, 0x5001, 0xfffffffffffffffc) 7.616527267s ago: executing program 4 (id=1216): r0 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x18b002, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/usbip-vudc.0/usbip_status\x00', 0x20040, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000000)=""/84, 0x54) ioctl$auto_XFS_IOC_ALLOCSP(0xffffffffffffffff, 0x4030580a, 0x0) process_vm_readv$auto(0x0, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000240)="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", 0x40000000081243}, 0x10, 0x0) ioctl$auto(0x3, 0x400454c7, 0x38) mmap$auto(0x0, 0x2, 0x4000000000df, 0xeb0, 0xffffffffffffffff, 0x5) close_range$auto(r0, r0, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r2, 0x0, 0x7) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x0, 0x40, 0x8000000000000000, 0x0) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/tty60\x00', 0x101e81, 0x0) ioctl$auto_TIOCSETD2(r4, 0x5423, 0x0) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0x100000011, 0xffffffffffffffff, 0x1ff) bind$auto(0xffffffffffffffff, 0x0, 0x6a) read$auto(0x3, 0x0, 0x80) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x1, 0x0) r5 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) getsockopt$auto(0xffffffffffffffff, 0x84, 0x1f, 0x0, &(0x7f0000000080)=0x49b) sendmmsg$auto(r5, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0xc, 0x0, 0x80, 0xb}, 0x80000a}, 0x5, 0x20000000) 4.99656109s ago: executing program 4 (id=1217): r0 = socket(0xa, 0x3, 0x3b) connect$auto(r0, &(0x7f0000000000)=@llc={0x1a, 0x102, 0x7f, 0x1, 0x5, 0x8, @remote}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/block/zram0/idle\x00', 0xa001, 0x0) write$auto(r1, &(0x7f0000000000)='72\xa1\x84\xbd0\x00f\x19\x1c\xc7k\x00\x00\x00\x00', 0x7) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) close_range$auto(0x2, 0x8, 0x0) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x1c3281, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/cgroup.threads\x00', 0x80302, 0x0) preadv$auto(0x3, &(0x7f0000000040)={0x0, 0x5}, 0x3, 0xf8, 0xffffffffffffffff) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xd4, 0x8000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/irq/3/smp_affinity_list\x00', 0x2000, 0x0) r3 = getpid() process_vm_readv$auto(r3, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0) symlink$auto(0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6af82, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r4) r5 = ioctl$auto_KVM_CREATE_VM(r2, 0xae80, 0x0) r6 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/dri/vkms/vkms_config\x00', 0x40002, 0x0) ioctl$auto(0x3, 0xae41, r6) ioctl$auto_BTRFS_IOC_SCAN_DEV(r5, 0x50009404, &(0x7f0000001200)={@raw, "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"}) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) 4.422276093s ago: executing program 2 (id=1218): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) mmap$auto(0x0, 0x128009, 0xdf, 0xeb1, r0, 0x20000008000) sysfs$auto(0x2, 0x3e, 0x0) fsopen$auto(0x0, 0x1) socket(0x21, 0x2, 0x2) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) mmap$auto(0x0, 0x7ffffffff000, 0x8004, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2, 0x7f, 0xeb1, 0x401, 0x8000) socketpair$auto(0xa, 0x2, 0x8000000000000000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x103040, 0x0) r2 = ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x2200, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x62, 0x80000001, 0x4, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x400000000001ff, 0x7, 0xa, 0x1, 0x4, 0x3, 0x9, 0x5, 0x3, 0x48, 0x8002001f, 0x79d, 0x6d3e, 0x4, 0x6, 0x8]}, 0x0) prctl$auto(0x3e, 0x8, 0x0, 0x1, 0x40) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x0) open(0x0, 0x22240, 0x45) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$auto(0x3, 0x80a86f3d, r4) write$auto(r2, 0x0, 0x100000a3d9) 3.858655268s ago: executing program 4 (id=1219): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) mmap$auto(0x0, 0x128009, 0xdf, 0xeb1, r0, 0x20000008000) sysfs$auto(0x2, 0x3e, 0x0) fsopen$auto(0x0, 0x1) socket(0x21, 0x2, 0x2) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) mmap$auto(0x0, 0x7ffffffff000, 0x8004, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2, 0x7f, 0xeb1, 0x401, 0x8000) socketpair$auto(0xa, 0x2, 0x8000000000000000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x103040, 0x0) r2 = ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x2200, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x62, 0x80000001, 0x4, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x400000000001ff, 0x7, 0xa, 0x1, 0x4, 0x3, 0x9, 0x5, 0x3, 0x48, 0x8002001f, 0x79d, 0x6d3e, 0x4, 0x6, 0x8]}, 0x0) prctl$auto(0x3e, 0x8, 0x0, 0x1, 0x40) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x0) open(0x0, 0x22240, 0x45) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$auto(0x3, 0x80a86f3d, r4) write$auto(r2, 0x0, 0x100000a3d9) 3.649928447s ago: executing program 5 (id=1220): write$auto(0xffffffffffffffff, 0x0, 0xaf0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x130) fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d) unlink$auto(&(0x7f0000000380)='./file0\x00') fallocate$auto(0x8000000000000003, 0x0, 0x8000000d, 0x2cbd5d) mmap$auto(0x0, 0x400008, 0xe3, 0x410, r0, 0x8000) bind$auto(0xffffffffffffffff, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) ioctl$auto_USB_RAW_IOCTL_EPS_INFO(r0, 0x83c0550b, &(0x7f00000003c0)={[{"41ac7a2c9c03bbea1b9bc5af2371b761", 0xfffffff8, {0x1, 0x0, 0x0, 0x1}, {0x8000, 0x9, 0xf7}}, {"4be7c8c45265bf03db97f91e9b68710c", 0x1, {0x1, 0x1, 0x0, 0x1}, {0x3, 0x3, 0x5}}, {"58080ca78179a10bf038e648207afcec", 0x5e, {0x0, 0x1, 0x0, 0x0, 0x1}, {0x92dd, 0x1, 0x4}}, {"fe501a9c74d51595e85d19cbebb5b253", 0x5, {0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x4, 0x400, 0x2}}, {"f294e47bfbb9be061da59906e540cef4", 0x1, {0x0, 0x1, 0x0, 0x0, 0x1, 0x1}, {0x88e6, 0x2, 0xa9}}, {"6ebc301bb2cb50e5577e65b750978828", 0x79c, {0x0, 0x1, 0x1, 0x1, 0x1}, {0xb5, 0x3}}, {"9ffb6735ad4e54dbbcaac1fa47bfd810", 0xfff, {0x1, 0x1, 0x1, 0x0, 0x1}, {0x2, 0xfff9, 0x8}}, {"c65743ffdf18cca8ec28d194ca7153ce", 0xd2be, {0x0, 0x1, 0x1, 0x0, 0x1, 0x1}, {0x8, 0x3, 0x56ae}}, {"2e1620e18badb00192969b6edf4afb5f", 0x5, {0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x800, 0x3, 0x62f8}}, {"cce8b966e17656af15027d598ffc0b6b", 0x3, {0x0, 0x1}, {0x0, 0x4, 0xd6d8}}, {"0ace1798e2b1d8104e3f2044d3a38494", 0x400000, {0x1, 0x1, 0x0, 0x0, 0x1, 0x1}, {0x1c09, 0x0, 0x3}}, {"ed5773d5d50c55e0a5c34d914ed270fd", 0xe1a, {0x0, 0x1, 0x1, 0x1, 0x1, 0x1}, {0x5, 0xd, 0x9}}, {"29600df0ad63e08ca650c60b13dc4277", 0x1e8ecf6e, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x8, 0x8, 0x336}}, {"5edf301ef6bc0b881dad5f6c1933bc27", 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x7, 0xfff7, 0x1c}}, {"dc686bcc288ef848be4992fe3af38b71", 0xd060, {0x0, 0x1, 0x0, 0x1, 0x0, 0x1}, {0x9, 0x2, 0x2}}, {"8e17df0461a544d461082dc093b551b7", 0xd3f7, {0x0, 0x0, 0x1}, {0xfffb, 0x3, 0x7}}, {"b799ff040072bf40108b3cac4093b400", 0x3, {0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x0, 0x1ff, 0xa1}}, {"813b0a656f76f748329b7eb5792d686a", 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x2, 0x0, 0x7}}, {"05cc9723d17dcd8b9e45182935e09ecf", 0x8, {0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x3, 0x0, 0x776}}, {"d359d8a9959abc34db7484e500", 0x10, {0x0, 0x0, 0x0, 0x1}, {0x5, 0x1, 0x8}}, {"aaee063b6a38948bc5d79f01682954db", 0xffff0358, {0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x2, 0x5, 0x8}}, {"951bb7dcc772bc0ef0ffd9c22930bafe", 0x3, {0x0, 0x0, 0x0, 0x1, 0x1}, {0x5, 0x5, 0x7}}, {"8a62bacb6ba1803e20d1040551bc7ccc", 0x4, {0x1, 0x0, 0x1}, {0x4, 0x7, 0x8}}, {"ff45cd4447424c41c48ca63ab7e851e0", 0x73b, {0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x5, 0x7, 0x6}}, {"c55e0da5e379973f600927158222aba0", 0x5, {0x1, 0x0, 0x1, 0x1, 0x1, 0x1}, {0xca7, 0xfffe, 0x6}}, {"42117995d92c73c282342edb8b4a678a", 0x0, {0x1}, {0x9, 0x1, 0x8b8}}, {"9e3cfef39aff6d70acf0b72a76cb0f88", 0x40000000, {0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0xb, 0x8, 0x5}}, {"f2654e62c46c7ec3336d71c0b9d8e9c2", 0x400, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x8, 0x8}}, {"c852a485f25cc9c71c8cb127a6ba8776", 0x9, {0x0, 0x1}, {0x3, 0xf7, 0x8}}, {"60d20d7375238ec3df77ce23d4e2b3a0", 0xf, {0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x8, 0xf, 0x8}}]}) open(0x0, 0x7ffd, 0x12) kexec_load$auto(0x9, 0x0, 0x0, 0x1003e0000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400108, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x5, 0x84) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x40242, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_HWSIM_CMD_TX_INFO_FRAME(r1, &(0x7f0000006940)={0x0, 0x0, &(0x7f0000006900)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="100029bd7000ffbadf2503000000617208b289c39d1ee5674e7e481987e090fdb31459f5014ce7aac8a151db101831796cc1ae59b6ecb552c54642433de8c6f6aac70f7b20def5978031feedea70029eb0153832eac755c28639767dc30385b907feb53dd28b4d462fddb32e9400"/120], 0x14}, 0x1, 0x0, 0x0, 0x20000041}, 0x800) sched_get_priority_min$auto(0x40) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) 2.856428159s ago: executing program 2 (id=1221): mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x8000000000000003, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r1 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) bind$auto(0x3, &(0x7f0000000080)=@tipc=@name={0x1e, 0x2, 0x2, {{0x41, 0x3}}}, 0x6a) ioctl$auto(r0, 0x4b72, r1) 2.851077174s ago: executing program 4 (id=1222): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/platform/i8042/serio1/rate\x00', 0x2, 0x0) read$auto(0x3, 0x0, 0xfffffdef) write$auto(0x3, 0x0, 0xfdef) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000002c00)='/dev/cec25\x00', 0x4e4102, 0x0) ioctl$auto_CEC_DQEVENT(r0, 0xc0506107, &(0x7f0000000340)={0x0, 0x80003, 0x2, @lost_msgs={0x401}}) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio1\x00', 0x1c1102, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r1, 0xc0045002, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x0, 0x9, 0xeb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) socket(0x10, 0x2, 0x14) socketpair$auto(0x4, 0x2, 0x10, &(0x7f0000000040)=0x7) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x6, 0x1, 0x948b, 0x3, 0x1, 0x572f14dc, 0x80000000, 0x80000000, 0x0, 0x7, 0x6d3c, 0x7, 0x2, 0x1]}, 0x0) select$auto(0xa, 0x0, 0x0, &(0x7f00000002c0)={[0x1fe, 0xffffffffffffffff, 0x800009b, 0x1, 0x948b, 0x0, 0xffffffffffffffff, 0x41000000003, 0xb, 0x62, 0x8000008000001b, 0x7, 0xd0c, 0x9, 0x2, 0x200]}, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000010}, 0x80) openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/mem\x00', 0x200000, 0x0) write$auto(0x4, 0x0, 0x100082) socket(0x27, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) utimes$auto(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0xcb40, 0x6}) pselect6$auto(0x6b, &(0x7f00000001c0)={[0x3, 0x1, 0x1800000000000, 0x10000, 0x8, 0x100000001, 0x3, 0x80, 0x3, 0x4, 0x8, 0x3, 0x9, 0xd452b40000000000, 0x4, 0x4]}, &(0x7f0000000240)={[0x7, 0x9, 0x9, 0x1, 0x1, 0x1, 0x6, 0x3bd3f789, 0x4, 0x5, 0x0, 0x3, 0x6, 0x5, 0xff, 0x8]}, &(0x7f00000003c0)={[0x7, 0x2, 0x6, 0x9, 0x6, 0xc, 0x5, 0x5, 0x5, 0x4, 0xdab6, 0x4, 0x101, 0x3, 0x4, 0x400]}, &(0x7f0000000440)={0xe, 0x5}, &(0x7f0000000480)="037e98b6620995c808f048fcfbe1aa34e8f0afb34040c6fd589d6e4291acbb56da5b61b957eb371854dd03eaeb3224b6eed6624be109644b524c3caa2ac2b143546a67c0c5fc85330d590065ddbeb1329d29af1aeafc56dfab99c47b1c4e5c4b67a9c340f01143a57ac8d732fab2873aa63fe1d87f5152ed6ab94ab54ced09c4166a98d42a4aceb6957333d7a1e5d18a75bd5330d9fa196219995271ad2b6c3776b675a2364c48617bd105cf2ed038dbd66612c49f893c195a737cdb2b35f4f77f3143d591043cf1f6") io_setup$auto(0x10000, 0x0) 2.415624051s ago: executing program 5 (id=1223): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/platform/i8042/serio1/rate\x00', 0x2, 0x0) read$auto(0x3, 0x0, 0xfffffdef) write$auto(0x3, 0x0, 0xfdef) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000002c00)='/dev/cec25\x00', 0x4e4102, 0x0) ioctl$auto_CEC_DQEVENT(r0, 0xc0506107, &(0x7f0000000340)={0x0, 0x80003, 0x2, @lost_msgs={0x401}}) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio1\x00', 0x1c1102, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r1, 0xc0045002, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x0, 0x9, 0xeb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) socket(0x10, 0x2, 0x14) socketpair$auto(0x4, 0x2, 0x10, &(0x7f0000000040)=0x7) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x6, 0x1, 0x948b, 0x3, 0x1, 0x572f14dc, 0x80000000, 0x80000000, 0x0, 0x7, 0x6d3c, 0x7, 0x2, 0x1]}, 0x0) select$auto(0xa, 0x0, 0x0, &(0x7f00000002c0)={[0x1fe, 0xffffffffffffffff, 0x800009b, 0x1, 0x948b, 0x0, 0xffffffffffffffff, 0x41000000003, 0xb, 0x62, 0x8000008000001b, 0x7, 0xd0c, 0x9, 0x2, 0x200]}, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000010}, 0x80) openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/mem\x00', 0x200000, 0x0) write$auto(0x4, 0x0, 0x100082) socket(0x27, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) utimes$auto(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0xcb40, 0x6}) pselect6$auto(0x6b, &(0x7f00000001c0)={[0x3, 0x1, 0x1800000000000, 0x10000, 0x8, 0x100000001, 0x3, 0x80, 0x3, 0x4, 0x8, 0x3, 0x9, 0xd452b40000000000, 0x4, 0x4]}, &(0x7f0000000240)={[0x7, 0x9, 0x9, 0x1, 0x1, 0x1, 0x6, 0x3bd3f789, 0x4, 0x5, 0x0, 0x3, 0x6, 0x5, 0xff, 0x8]}, &(0x7f00000003c0)={[0x7, 0x2, 0x6, 0x9, 0x6, 0xc, 0x5, 0x5, 0x5, 0x4, 0xdab6, 0x4, 0x101, 0x3, 0x4, 0x400]}, &(0x7f0000000440)={0xe, 0x5}, &(0x7f0000000480)="037e98b6620995c808f048fcfbe1aa34e8f0afb34040c6fd589d6e4291acbb56da5b61b957eb371854dd03eaeb3224b6eed6624be109644b524c3caa2ac2b143546a67c0c5fc85330d590065ddbeb1329d29af1aeafc56dfab99c47b1c4e5c4b67a9c340f01143a57ac8d732fab2873aa63fe1d87f5152ed6ab94ab54ced09c4166a98d42a4aceb6957333d7a1e5d18a75bd5330d9fa196219995271ad2b6c3776b675a2364c48617bd105cf2ed038dbd66612c49f893c195a737cdb2b35f4f77f3143d591043cf1f6") io_setup$auto(0x10000, 0x0) 2.255880334s ago: executing program 2 (id=1224): mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x8000000000000003, 0x8000) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x20) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0x10, 0x6d4, 0x2, 0x8000) set_mempolicy$auto(0x6, &(0x7f0000000080)=0x3, 0x21) unshare$auto(0x40000080) socket(0xa, 0x5, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) msgctl$auto_IPC_RMID(0x4, 0x0, &(0x7f0000000240)={{0xffffffbe, 0xffffffffffffffff, 0xee00, 0x9, 0x5, 0x8, 0x4006}, &(0x7f00000001c0)=0x6, &(0x7f0000000200)=0x1, 0x1, 0xfff, 0x0, 0x7, 0x9, 0x4, 0x9, 0xf, @inferred, @raw=0x8}) ioctl$auto_KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f00000002c0)={0x8, r1, 0x1, 0x33}) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) writev$auto(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x40}, 0x8) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x109401, 0x0) ioctl$auto(r2, 0x540a, 0x0) close_range$auto(0x2, 0x8, 0x0) msgrcv$auto(0x9, 0x0, 0xfffffffffffffffd, 0x6, 0x80008) mmap$auto(0x0, 0x841a, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x2003f0, 0x15) mmap$auto(0x0, 0x2a, 0xdf, 0x9b72, 0x1000, 0x28000) madvise$auto(0x2, 0x5c61fa2c, 0xf) r3 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="c8000000", @ANYRES16=r3, @ANYBLOB="010029bd7000fadbdf1f2d70790004000800b0000180a100768008009a0001000000cb6f7e06b77ee5bdbc0b5a819c5a8852478ebeed7241cab5360240d3a16715263df92bb6873e757f000000002d3c47517fcc8910740de6437268b7814d80fe19351190d66c10a84bc1e37a47ed253a6bb922af6bd7e3e31212894011396f2e46321a4f4f4bdb1f84a908071b5d3a6baabbf49e3e091e41a038a661f80f01464b44173dc1ce6c2170f450f5a83c96b15167305bd6e2000000080014009f7b5b00"], 0xc8}, 0x1, 0x0, 0x0, 0x40010}, 0x800) r5 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) read$auto(r5, 0x0, 0xb4d3) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, 0x0, 0x24000044) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) 1.872484886s ago: executing program 4 (id=1225): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/vhci_hcd.13/usb35/power/runtime_active_time\x00', 0x573900, 0x0) openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) writev$auto(0x3, 0x0, 0x8009) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000140), r0) sendmsg$auto_OVS_FLOW_CMD_DEL(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB, @ANYBLOB="e388bea156873508fe4320d7f215affde7cb43996a0e289ba1d8ddea38fbe2c6ba05f1ec013ed33955942aff74d7d0d5eb8119526b0c262ed02c3d9843f041e8348fc0e29779fe"], 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x800) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000) mmap$auto(0x3, 0x402000b, 0x2000006, 0xeb1, 0x401, 0xfff) openat$auto_udf_dir_operations_udfdecl(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/bluetooth/hci4\x00', 0x2000, 0x0) mmap$auto(0x1ea7a82c, 0x400008, 0xdf, 0x9b70, 0xffffffffffffffff, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8400) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x81, 0x0, 0x0, 0x0, 0x0) write$auto(r1, &(0x7f0000000240)='//ev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/kallsyms\x00', 0x0, 0x0) pread64$auto(r2, 0x0, 0x8, 0x8000) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x400c058) r3 = io_uring_setup$auto(0x1, 0x0) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) unshare$auto(0x40000080) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/virtual/net/bond0/bonding/all_slaves_active\x00', 0x902, 0x0) pwritev$auto(0x3, &(0x7f0000001000)={0x0, 0x8}, 0x5, 0x3, 0x9) read$auto(r3, &(0x7f0000000300)='/sys/device\a\x00\x00\x00\x00\x00\x00\x00l/net/bod0/bondactive\x00', 0x5) write$auto(0x3, 0x0, 0xffd8) setreuid$auto(0x3, 0x7) 816.245737ms ago: executing program 5 (id=1226): openat$auto_proc_environ_operations_base(0xffffffffffffff9c, 0x0, 0x28042, 0x0) r0 = open(&(0x7f0000000100)='./bus\x00', 0x14d27e, 0x72) copy_file_range$auto(r0, 0x0, r0, &(0x7f0000000080)=0x8800000, 0x2, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/vkms/graphics/fb0/rotate\x00', 0x18881, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x921800, 0x0) socket(0xa, 0x1, 0x84) socket(0x8, 0x3, 0x3) mmap$auto(0x0, 0x40009, 0xe1, 0x9b75, 0x7, 0x28000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/loop14/queue/dma_alignment\x00', 0x80000, 0x0) read$auto(r1, 0x0, 0x20) writev$auto(0xffffffffffffffff, 0x0, 0x3) unshare$auto(0x40000080) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x3dc981, 0x0) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv6/conf/ipvlan1/proxy_ndp\x00', 0x143881, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/bdi/43:288/max_ratio_fine\x00', 0x10b142, 0x0) sendfile$auto(r2, r3, 0x0, 0x1000200) 261.211594ms ago: executing program 5 (id=1227): mmap$auto(0x8000000000000000, 0x800008, 0xdf, 0x4000ebe, 0xffffffffffffffff, 0x8000) get_robust_list$auto(0x0, 0x0, 0x0) r0 = io_uring_setup$auto(0x1, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) close_range$auto(0x2, 0x8, 0x1) r2 = openat$auto_lowpan_control_fops_6lowpan(0xffffffffffffff9c, &(0x7f0000002140), 0x0, 0x0) pread64$auto(r2, 0x0, 0x663, 0x6) mmap$auto(0x0, 0x4, 0x4000000000df, 0x4000000040eb1, r0, 0x300000000000) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/fail-nth\x00', 0x2003, 0x0) read$auto(0xffffffffffffffff, 0x0, 0x20) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r3 = io_uring_setup$auto(0x6, 0x0) fcntl$auto_F_SETLK(r3, 0x6, 0x6) writev$auto(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x3}, 0x3) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/binderfs/binder0\x00', 0x101000, 0x0) r4 = fsopen$auto(0x0, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x1, 0xf819, 0xf6, 0xeba, 0xfffffffffffffffa, 0x2000000000008004) sendfile$auto(0xffffffffffffffff, r4, 0x0, 0x8c01) ioctl$auto_USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, 0x0) socket(0x1e, 0x6, 0xffffffff) pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x89\x06s\x1cJ\x99\x00:\x00!\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x10, 0x6) mmap$auto(0xfffffffffffffffa, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) getcwd$auto(0x0, 0xffffffffffffffff) setsockopt$auto(0x3, 0x10000000084, 0x2, 0x0, 0x8) bind$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x5, @loopback}, 0x6a) 0s ago: executing program 4 (id=1228): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x1, 0x0) write$auto(0x3, 0x0, 0xfffffdef) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) pivot_root$auto(&(0x7f0000000000)=':\\.[,:}]%\x00', &(0x7f0000000040)='/proc/fs/lockd/nlm_end_grace\x00') openat$dir(0xffffffffffffff9c, 0x0, 0x381000, 0x100) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0) writev$auto(r0, &(0x7f0000000080)={&(0x7f0000000040), 0x1000}, 0x3) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) open(0x0, 0x6041, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev3\x00', 0x169000, 0x0) mmap$auto(0x0, 0x20009, 0x7fffffff, 0xeb1, 0x401, 0x8000) memfd_secret$auto(0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/disk\x00', 0x100, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, 0x0, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsopen$auto(&(0x7f0000000040)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0xfffffffe) read$auto(r2, 0x0, 0x20) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) ioctl$auto_FIDEDUPERANGE(r2, 0xc0189436, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) r4 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20942, 0x0) write$auto_snd_pcm_oss_f_reg_pcm_oss(r4, &(0x7f0000000080)="c2", 0x1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_SNDCTL_DSP_SYNC(r4, 0x5001, 0xfffffffffffffffc) kernel console output (not intermixed with test programs): 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 538.133325][ T9783] RSP: 002b:00007f8775f7e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 538.133349][ T9783] RAX: ffffffffffffffda RBX: 00007f87753b6090 RCX: 00007f877518ebe9 [ 538.133367][ T9783] RDX: 0000000000000001 RSI: 0000200000000080 RDI: 0000000000000005 [ 538.133383][ T9783] RBP: 00007f8775211e19 R08: 0000000000000000 R09: 0000000000000000 [ 538.133398][ T9783] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 538.133414][ T9783] R13: 00007f87753b6128 R14: 00007f87753b6090 R15: 00007ffcf0b1c0b8 [ 538.133449][ T9783] [ 538.690764][ T9779] /,mems_allowed=0-1 [ 538.697595][ T9779] CPU: 1 UID: 0 PID: 9779 Comm: syz.3.701 Not tainted syzkaller #0 PREEMPT(full) [ 538.697616][ T9779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 538.697624][ T9779] Call Trace: [ 538.697630][ T9779] [ 538.697637][ T9779] dump_stack_lvl+0x16c/0x1f0 [ 538.697660][ T9779] warn_alloc+0x248/0x3a0 [ 538.697685][ T9779] ? __pfx_warn_alloc+0x10/0x10 [ 538.697703][ T9779] ? kfree+0x2b4/0x4d0 [ 538.697720][ T9779] ? __get_vm_area_node+0x208/0x330 [ 538.697745][ T9779] __vmalloc_node_range_noprof+0xb2d/0x14b0 [ 538.697762][ T9779] ? __pfx___mutex_trylock_common+0x10/0x10 [ 538.697784][ T9779] ? __snd_dma_alloc_pages+0x50/0x90 [ 538.697801][ T9779] ? rcu_is_watching+0x12/0xc0 [ 538.697815][ T9779] ? trace_contention_end+0xdd/0x130 [ 538.697836][ T9779] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 538.697853][ T9779] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 538.697874][ T9779] ? __snd_dma_alloc_pages+0x50/0x90 [ 538.697889][ T9779] __vmalloc_node_noprof+0xad/0xf0 [ 538.697902][ T9779] ? __snd_dma_alloc_pages+0x50/0x90 [ 538.697918][ T9779] ? __pfx_snd_dma_vmalloc_alloc+0x10/0x10 [ 538.697938][ T9779] __snd_dma_alloc_pages+0x50/0x90 [ 538.697956][ T9779] snd_dma_alloc_dir_pages+0x151/0x240 [ 538.697974][ T9779] do_alloc_pages+0x136/0x2d0 [ 538.697993][ T9779] snd_pcm_lib_malloc_pages+0x3df/0x980 [ 538.698013][ T9779] snd_pcm_hw_params+0x1656/0x1ba0 [ 538.698033][ T9779] ? __pfx_snd_pcm_hw_params+0x10/0x10 [ 538.698050][ T9779] ? snd_pcm_hw_param_near.constprop.0+0x734/0x8e0 [ 538.698067][ T9779] ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10 [ 538.698090][ T9779] ? __asan_memset+0x23/0x50 [ 538.698106][ T9779] snd_pcm_kernel_ioctl+0x147/0x2e0 [ 538.698124][ T9779] snd_pcm_oss_change_params_locked+0x1432/0x3a30 [ 538.698148][ T9779] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 538.698173][ T9779] ? futex_private_hash_put+0x176/0x300 [ 538.698192][ T9779] snd_pcm_oss_make_ready_locked+0xb7/0x130 [ 538.698208][ T9779] snd_pcm_oss_write+0x4c3/0xa10 [ 538.698223][ T9779] ? bpf_lsm_file_permission+0x9/0x10 [ 538.698243][ T9779] ? security_file_permission+0x71/0x210 [ 538.698265][ T9779] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 538.698279][ T9779] vfs_write+0x2a0/0x11d0 [ 538.698300][ T9779] ? __pfx_vfs_write+0x10/0x10 [ 538.698314][ T9779] ? find_held_lock+0x2b/0x80 [ 538.698328][ T9779] ? __fget_files+0x204/0x3c0 [ 538.698346][ T9779] ? __fget_files+0x20e/0x3c0 [ 538.698366][ T9779] ksys_write+0x12a/0x250 [ 538.698381][ T9779] ? __pfx_ksys_write+0x10/0x10 [ 538.698402][ T9779] do_syscall_64+0xcd/0x490 [ 538.698422][ T9779] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 538.698437][ T9779] RIP: 0033:0x7f81d258ebe9 [ 538.698449][ T9779] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 538.698462][ T9779] RSP: 002b:00007f81d3482038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 538.698476][ T9779] RAX: ffffffffffffffda RBX: 00007f81d27b5fa0 RCX: 00007f81d258ebe9 [ 538.698485][ T9779] RDX: 0000000000000001 RSI: 0000200000000080 RDI: 0000000000000008 [ 538.698494][ T9779] RBP: 00007f81d2611e19 R08: 0000000000000000 R09: 0000000000000000 [ 538.698502][ T9779] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 538.698510][ T9779] R13: 00007f81d27b6038 R14: 00007f81d27b5fa0 R15: 00007ffcebab08b8 [ 538.698536][ T9779] [ 538.698545][ T9779] Mem-Info: [ 539.048548][ T9779] active_anon:10928 inactive_anon:10 isolated_anon:0 [ 539.048548][ T9779] active_file:17969 inactive_file:40563 isolated_file:0 [ 539.048548][ T9779] unevictable:768 dirty:657 writeback:0 [ 539.048548][ T9779] slab_reclaimable:11620 slab_unreclaimable:96160 [ 539.048548][ T9779] mapped:33860 shmem:1362 pagetables:1297 [ 539.048548][ T9779] sec_pagetables:0 bounce:0 [ 539.048548][ T9779] kernel_misc_reclaimable:0 [ 539.048548][ T9779] free:1299977 free_pcp:16784 free_cma:0 [ 539.130910][ T9779] Node 0 active_anon:43800kB inactive_anon:40kB active_file:71876kB inactive_file:162064kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:135444kB dirty:2644kB writeback:0kB shmem:3916kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12312kB pagetables:5008kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 539.308232][ T9779] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:188kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:80kB pagetables:160kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 539.382652][ T9779] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 539.546816][ T9779] lowmem_reserve[]: 0 2480 2481 2481 2481 [ 539.593367][ T9779] Node 0 DMA32 free:1277648kB boost:0kB min:34076kB low:42592kB high:51108kB reserved_highatomic:0KB free_highatomic:0KB active_anon:43924kB inactive_anon:40kB active_file:71876kB inactive_file:160748kB unevictable:1536kB writepending:2644kB present:3129332kB managed:2539588kB mlocked:0kB bounce:0kB free_pcp:54992kB local_pcp:16636kB free_cma:0kB [ 539.700356][ T9779] lowmem_reserve[]: 0 0 1 1 1 [ 539.706909][ T9779] Node 0 Normal free:20kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1316kB unevictable:0kB writepending:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 539.810801][ T9779] lowmem_reserve[]: 0 0 0 0 0 [ 539.855118][ T9779] Node 1 Normal free:3909756kB boost:0kB min:55804kB low:69752kB high:83700kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:188kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:7772kB local_pcp:7772kB free_cma:0kB [ 539.962699][ T9779] lowmem_reserve[]: 0 0 0 0 0 [ 539.967545][ T9779] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 540.011078][ T9779] Node 0 DMA32: 1625*4kB (M) 1332*8kB (M) 1245*16kB (UME) 693*32kB (UME) 580*64kB (UME) 298*128kB (UME) 111*256kB (UME) 30*512kB (ME) 8*1024kB (UME) 6*2048kB (UME) 261*4096kB (UM) = 1267828kB [ 540.222883][ T9779] Node 0 Normal: 3*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20kB [ 540.394090][ T9779] Node 1 Normal: 178*4kB (UME) 66*8kB (UME) 34*16kB (UME) 242*32kB (UME) 115*64kB (UME) 33*128kB (UME) 15*256kB (UME) 2*512kB (UE) 1*1024kB (U) 2*2048kB (ME) 947*4096kB (UM) = 3910008kB [ 540.539138][ T9779] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 540.594613][ T9779] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 540.620726][ T9779] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 540.685215][ T9779] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 540.696423][ T9779] 64022 total pagecache pages [ 540.702379][ T9779] 19 pages in swap cache [ 540.706889][ T9779] Free swap = 124792kB [ 540.729825][ T9779] Total swap = 124996kB [ 540.744293][ T9779] 2097051 pages RAM [ 540.785581][ T9779] 0 pages HighMem/MovableOnly [ 540.790356][ T9779] 430192 pages reserved [ 540.829516][ T9779] 0 pages cma reserved [ 541.341684][ T9834] cifs: Unknown parameter 'cifs' [ 541.376856][ T9833] vivid-007: ================= START STATUS ================= [ 541.400187][ T9834] FAULT_INJECTION: forcing a failure. [ 541.400187][ T9834] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 541.420549][ T9833] vivid-007: Generate PTS: true [ 541.511082][ T9834] CPU: 1 UID: 0 PID: 9834 Comm: syz.1.710 Not tainted syzkaller #0 PREEMPT(full) [ 541.511122][ T9834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 541.511138][ T9834] Call Trace: [ 541.511148][ T9834] [ 541.511159][ T9834] dump_stack_lvl+0x16c/0x1f0 [ 541.511200][ T9834] should_fail_ex+0x512/0x640 [ 541.511242][ T9834] should_fail_alloc_page+0xe7/0x130 [ 541.511280][ T9834] prepare_alloc_pages+0x3c2/0x610 [ 541.511324][ T9834] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 541.511370][ T9834] ? mas_next_slot+0x12d3/0x21b0 [ 541.511420][ T9834] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 541.511455][ T9834] ? mas_find+0x156/0x6d0 [ 541.511503][ T9834] ? __pfx_validate_mm+0x10/0x10 [ 541.511526][ T9834] ? __vma_enter_locked+0x163/0x3f0 [ 541.511554][ T9834] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 541.511592][ T9834] ? policy_nodemask+0xea/0x4e0 [ 541.511629][ T9834] alloc_pages_mpol+0x1fb/0x550 [ 541.511665][ T9834] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 541.511709][ T9834] alloc_pages_noprof+0x131/0x390 [ 541.511745][ T9834] __pud_alloc+0x3b/0x750 [ 541.511785][ T9834] alloc_new_pud+0x267/0x320 [ 541.511817][ T9834] move_page_tables+0x6b6/0x4230 [ 541.511856][ T9834] ? __pfx_copy_vma+0x10/0x10 [ 541.511893][ T9834] ? __pfx_move_page_tables+0x10/0x10 [ 541.511921][ T9834] ? register_lock_class+0x41/0x4c0 [ 541.511974][ T9834] ? finish_task_switch.isra.0+0x21c/0xc10 [ 541.512007][ T9834] copy_vma_and_data+0x24e/0x790 [ 541.512041][ T9834] ? __pfx_copy_vma_and_data+0x10/0x10 [ 541.512079][ T9834] ? __vma_enter_locked+0x163/0x3f0 [ 541.512108][ T9834] ? find_held_lock+0x2b/0x80 [ 541.512134][ T9834] ? move_vma+0x536/0x1780 [ 541.512161][ T9834] ? __vm_enough_memory+0x184/0x3f0 [ 541.512205][ T9834] move_vma+0x548/0x1780 [ 541.512240][ T9834] ? __pfx_move_vma+0x10/0x10 [ 541.512275][ T9834] ? mm_get_unmapped_area_vmflags+0x97/0xe0 [ 541.512313][ T9834] ? cap_mmap_addr+0x4b/0x120 [ 541.512346][ T9834] ? bpf_lsm_mmap_addr+0x9/0x10 [ 541.512383][ T9834] ? security_mmap_addr+0x6c/0x1e0 [ 541.512418][ T9834] ? __get_unmapped_area+0x267/0x440 [ 541.512459][ T9834] ? vrm_set_new_addr+0x208/0x290 [ 541.512491][ T9834] mremap_to+0x1b7/0x450 [ 541.512522][ T9834] do_mremap+0x13a3/0x2010 [ 541.512566][ T9834] ? __pfx_do_mremap+0x10/0x10 [ 541.512591][ T9834] ? __pfx_futex_wake+0x10/0x10 [ 541.512636][ T9834] ? up_write+0x1b2/0x520 [ 541.512681][ T9834] __do_sys_mremap+0x119/0x170 [ 541.512711][ T9834] ? __pfx___do_sys_mremap+0x10/0x10 [ 541.512751][ T9834] ? __x64_sys_futex+0x1e0/0x4c0 [ 541.512808][ T9834] do_syscall_64+0xcd/0x490 [ 541.512845][ T9834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 541.512871][ T9834] RIP: 0033:0x7ff4e618ebe9 [ 541.512894][ T9834] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 541.512920][ T9834] RSP: 002b:00007ff4e708c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 541.512945][ T9834] RAX: ffffffffffffffda RBX: 00007ff4e63b6090 RCX: 00007ff4e618ebe9 [ 541.512962][ T9834] RDX: 0000000000000008 RSI: 0000000000000002 RDI: 0000000000000000 [ 541.512978][ T9834] RBP: 00007ff4e6211e19 R08: 00007effffffb000 R09: 0000000000000000 [ 541.512996][ T9834] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 541.513012][ T9834] R13: 00007ff4e63b6128 R14: 00007ff4e63b6090 R15: 00007fff24872308 [ 541.513049][ T9834] [ 541.513538][ T9833] vivid-007: Generate SCR: true [ 541.936543][ T9833] tpg source WxH: 320x240 (Y'CbCr) [ 541.963153][ T9833] tpg field: 1 [ 542.122343][ T9833] tpg crop: (0,0)/320x240 [ 542.130799][ T9833] tpg compose: (0,0)/320x240 [ 542.135635][ T9833] tpg colorspace: 8 [ 542.139457][ T9833] tpg transfer function: 0/0 [ 542.219578][ T9833] tpg Y'CbCr encoding: 0/0 [ 542.224407][ T9833] tpg quantization: 0/0 [ 542.228749][ T9833] tpg RGB range: 0/2 [ 542.235088][ T9833] vivid-007: ================== END STATUS ================== [ 542.942728][ T9833] can: request_module (can-proto-3) failed. [ 543.549457][ T9849] FAULT_INJECTION: forcing a failure. [ 543.549457][ T9849] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 543.563523][ T9849] CPU: 1 UID: 0 PID: 9849 Comm: syz.1.712 Not tainted syzkaller #0 PREEMPT(full) [ 543.563559][ T9849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 543.563574][ T9849] Call Trace: [ 543.563583][ T9849] [ 543.563594][ T9849] dump_stack_lvl+0x16c/0x1f0 [ 543.563634][ T9849] should_fail_ex+0x512/0x640 [ 543.563687][ T9849] should_fail_alloc_page+0xe7/0x130 [ 543.563725][ T9849] prepare_alloc_pages+0x3c2/0x610 [ 543.563763][ T9849] ? rcu_is_watching+0x12/0xc0 [ 543.563793][ T9849] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 543.563831][ T9849] ? rcu_is_watching+0x12/0xc0 [ 543.563856][ T9849] ? trace_mm_page_alloc+0x11f/0x1a0 [ 543.563895][ T9849] ? __alloc_frozen_pages_noprof+0x294/0x23f0 [ 543.563925][ T9849] ? stack_trace_save+0x8e/0xc0 [ 543.563956][ T9849] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 543.564001][ T9849] ? kmem_cache_alloc_node_noprof+0x1d5/0x3b0 [ 543.564031][ T9849] ? __get_vm_area_node+0x1ca/0x330 [ 543.564068][ T9849] ? __vmalloc_node_noprof+0xad/0xf0 [ 543.564090][ T9849] ? __snd_dma_alloc_pages+0x50/0x90 [ 543.564118][ T9849] ? snd_dma_alloc_dir_pages+0x151/0x240 [ 543.564147][ T9849] ? do_alloc_pages+0x136/0x2d0 [ 543.564171][ T9849] ? snd_pcm_lib_malloc_pages+0x3df/0x980 [ 543.564199][ T9849] ? snd_pcm_hw_params+0x1656/0x1ba0 [ 543.564227][ T9849] ? snd_pcm_kernel_ioctl+0x147/0x2e0 [ 543.564260][ T9849] ? do_syscall_64+0xcd/0x490 [ 543.564292][ T9849] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 543.564325][ T9849] alloc_pages_bulk_noprof+0x71c/0x1410 [ 543.564355][ T9849] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 543.564391][ T9849] ? policy_nodemask+0xea/0x4e0 [ 543.564429][ T9849] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 543.564464][ T9849] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 543.564513][ T9849] kasan_populate_vmalloc+0xf1/0x1f0 [ 543.564549][ T9849] alloc_vmap_area+0x959/0x29c0 [ 543.564600][ T9849] ? __pfx_alloc_vmap_area+0x10/0x10 [ 543.564649][ T9849] __get_vm_area_node+0x1ca/0x330 [ 543.564695][ T9849] __vmalloc_node_range_noprof+0x271/0x14b0 [ 543.564722][ T9849] ? __snd_dma_alloc_pages+0x50/0x90 [ 543.564758][ T9849] ? __pfx___mutex_trylock_common+0x10/0x10 [ 543.564796][ T9849] ? __snd_dma_alloc_pages+0x50/0x90 [ 543.564824][ T9849] ? rcu_is_watching+0x12/0xc0 [ 543.564850][ T9849] ? trace_contention_end+0xdd/0x130 [ 543.564888][ T9849] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 543.564919][ T9849] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 543.565035][ T9849] ? __snd_dma_alloc_pages+0x50/0x90 [ 543.565068][ T9849] __vmalloc_node_noprof+0xad/0xf0 [ 543.565095][ T9849] ? __snd_dma_alloc_pages+0x50/0x90 [ 543.565128][ T9849] ? __pfx_snd_dma_vmalloc_alloc+0x10/0x10 [ 543.565165][ T9849] __snd_dma_alloc_pages+0x50/0x90 [ 543.565198][ T9849] snd_dma_alloc_dir_pages+0x151/0x240 [ 543.565232][ T9849] do_alloc_pages+0x136/0x2d0 [ 543.565266][ T9849] snd_pcm_lib_malloc_pages+0x3df/0x980 [ 543.565300][ T9849] snd_pcm_hw_params+0x1656/0x1ba0 [ 543.565343][ T9849] ? __pfx_snd_pcm_hw_params+0x10/0x10 [ 543.565373][ T9849] ? snd_pcm_hw_param_near.constprop.0+0x734/0x8e0 [ 543.565405][ T9849] ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10 [ 543.565448][ T9849] ? __asan_memset+0x23/0x50 [ 543.565476][ T9849] snd_pcm_kernel_ioctl+0x147/0x2e0 [ 543.565508][ T9849] snd_pcm_oss_change_params_locked+0x1432/0x3a30 [ 543.565550][ T9849] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 543.565597][ T9849] ? futex_private_hash_put+0x176/0x300 [ 543.565633][ T9849] snd_pcm_oss_make_ready_locked+0xb7/0x130 [ 543.565662][ T9849] snd_pcm_oss_write+0x4c3/0xa10 [ 543.565690][ T9849] ? bpf_lsm_file_permission+0x9/0x10 [ 543.565725][ T9849] ? security_file_permission+0x71/0x210 [ 543.565764][ T9849] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 543.565790][ T9849] vfs_write+0x2a0/0x11d0 [ 543.565828][ T9849] ? __pfx_vfs_write+0x10/0x10 [ 543.565854][ T9849] ? do_futex+0x122/0x350 [ 543.565887][ T9849] ? __pfx_do_futex+0x10/0x10 [ 543.565920][ T9849] ? __pfx___might_resched+0x10/0x10 [ 543.565950][ T9849] ? __x64_sys_futex+0x1e0/0x4c0 [ 543.565977][ T9849] ? __x64_sys_futex+0x1e9/0x4c0 [ 543.566011][ T9849] ksys_write+0x12a/0x250 [ 543.566039][ T9849] ? __pfx_ksys_write+0x10/0x10 [ 543.566076][ T9849] do_syscall_64+0xcd/0x490 [ 543.566112][ T9849] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 543.566137][ T9849] RIP: 0033:0x7ff4e618ebe9 [ 543.566158][ T9849] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 543.566184][ T9849] RSP: 002b:00007ff4e708c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 543.566209][ T9849] RAX: ffffffffffffffda RBX: 00007ff4e63b6090 RCX: 00007ff4e618ebe9 [ 543.566226][ T9849] RDX: 0000000000000001 RSI: 0000200000000080 RDI: 0000000000000005 [ 543.566241][ T9849] RBP: 00007ff4e6211e19 R08: 0000000000000000 R09: 0000000000000000 [ 543.566256][ T9849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 543.566270][ T9849] R13: 00007ff4e63b6128 R14: 00007ff4e63b6090 R15: 00007fff24872308 [ 543.566304][ T9849] [ 544.566399][ T9865] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(2) [ 544.859998][ T9882] netlink: 8 bytes leftover after parsing attributes in process `syz.2.720'. [ 546.241845][ T9899] netlink: 28 bytes leftover after parsing attributes in process `syz.2.725'. [ 547.071506][ T9923] net_ratelimit: 390 callbacks suppressed [ 547.071528][ T9923] openvswitch: netlink: IP tunnel dst address not specified [ 547.251522][ T9911] FAULT_INJECTION: forcing a failure. [ 547.251522][ T9911] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 547.440780][ T9911] CPU: 0 UID: 0 PID: 9911 Comm: syz.3.726 Not tainted syzkaller #0 PREEMPT(full) [ 547.440827][ T9911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 547.440843][ T9911] Call Trace: [ 547.440852][ T9911] [ 547.440863][ T9911] dump_stack_lvl+0x16c/0x1f0 [ 547.440909][ T9911] should_fail_ex+0x512/0x640 [ 547.440952][ T9911] should_fail_alloc_page+0xe7/0x130 [ 547.440991][ T9911] prepare_alloc_pages+0x3c2/0x610 [ 547.441030][ T9911] ? rcu_is_watching+0x12/0xc0 [ 547.441061][ T9911] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 547.441099][ T9911] ? rcu_is_watching+0x12/0xc0 [ 547.441126][ T9911] ? trace_mm_page_alloc+0x11f/0x1a0 [ 547.441166][ T9911] ? __alloc_frozen_pages_noprof+0x294/0x23f0 [ 547.441197][ T9911] ? stack_trace_save+0x8e/0xc0 [ 547.441228][ T9911] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 547.441272][ T9911] ? kmem_cache_alloc_node_noprof+0x1d5/0x3b0 [ 547.441303][ T9911] ? __get_vm_area_node+0x1ca/0x330 [ 547.441340][ T9911] ? __vmalloc_node_noprof+0xad/0xf0 [ 547.441362][ T9911] ? __snd_dma_alloc_pages+0x50/0x90 [ 547.441392][ T9911] ? snd_dma_alloc_dir_pages+0x151/0x240 [ 547.441421][ T9911] ? do_alloc_pages+0x136/0x2d0 [ 547.441445][ T9911] ? snd_pcm_lib_malloc_pages+0x3df/0x980 [ 547.441474][ T9911] ? snd_pcm_hw_params+0x1656/0x1ba0 [ 547.441502][ T9911] ? snd_pcm_kernel_ioctl+0x147/0x2e0 [ 547.441539][ T9911] ? do_syscall_64+0xcd/0x490 [ 547.441571][ T9911] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 547.441604][ T9911] alloc_pages_bulk_noprof+0x71c/0x1410 [ 547.441634][ T9911] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 547.441673][ T9911] ? policy_nodemask+0xea/0x4e0 [ 547.441711][ T9911] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 547.441746][ T9911] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 547.441797][ T9911] kasan_populate_vmalloc+0xf1/0x1f0 [ 547.441834][ T9911] alloc_vmap_area+0x959/0x29c0 [ 547.441892][ T9911] ? __pfx_alloc_vmap_area+0x10/0x10 [ 547.441939][ T9911] __get_vm_area_node+0x1ca/0x330 [ 547.441986][ T9911] __vmalloc_node_range_noprof+0x271/0x14b0 [ 547.442014][ T9911] ? __snd_dma_alloc_pages+0x50/0x90 [ 547.442050][ T9911] ? __pfx___mutex_trylock_common+0x10/0x10 [ 547.442091][ T9911] ? __snd_dma_alloc_pages+0x50/0x90 [ 547.442122][ T9911] ? rcu_is_watching+0x12/0xc0 [ 547.442148][ T9911] ? trace_contention_end+0xdd/0x130 [ 547.442187][ T9911] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 547.442220][ T9911] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 547.442260][ T9911] ? __snd_dma_alloc_pages+0x50/0x90 [ 547.442289][ T9911] __vmalloc_node_noprof+0xad/0xf0 [ 547.442314][ T9911] ? __snd_dma_alloc_pages+0x50/0x90 [ 547.442343][ T9911] ? __pfx_snd_dma_vmalloc_alloc+0x10/0x10 [ 547.442379][ T9911] __snd_dma_alloc_pages+0x50/0x90 [ 547.442415][ T9911] snd_dma_alloc_dir_pages+0x151/0x240 [ 547.442450][ T9911] do_alloc_pages+0x136/0x2d0 [ 547.442486][ T9911] snd_pcm_lib_malloc_pages+0x3df/0x980 [ 547.442523][ T9911] snd_pcm_hw_params+0x1656/0x1ba0 [ 547.442561][ T9911] ? __pfx_snd_pcm_hw_params+0x10/0x10 [ 547.442594][ T9911] ? snd_pcm_hw_param_near.constprop.0+0x734/0x8e0 [ 547.442626][ T9911] ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10 [ 547.442670][ T9911] ? __asan_memset+0x23/0x50 [ 547.442699][ T9911] snd_pcm_kernel_ioctl+0x147/0x2e0 [ 547.442732][ T9911] snd_pcm_oss_change_params_locked+0x1432/0x3a30 [ 547.442777][ T9911] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 547.442826][ T9911] ? futex_private_hash_put+0x176/0x300 [ 547.442863][ T9911] snd_pcm_oss_make_ready_locked+0xb7/0x130 [ 547.442899][ T9911] snd_pcm_oss_write+0x4c3/0xa10 [ 547.442929][ T9911] ? bpf_lsm_file_permission+0x9/0x10 [ 547.442966][ T9911] ? security_file_permission+0x71/0x210 [ 547.443011][ T9911] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 547.443037][ T9911] vfs_write+0x2a0/0x11d0 [ 547.443076][ T9911] ? __pfx_vfs_write+0x10/0x10 [ 547.443102][ T9911] ? find_held_lock+0x2b/0x80 [ 547.443129][ T9911] ? __fget_files+0x204/0x3c0 [ 547.443164][ T9911] ? __fget_files+0x20e/0x3c0 [ 547.443202][ T9911] ksys_write+0x12a/0x250 [ 547.443232][ T9911] ? __pfx_ksys_write+0x10/0x10 [ 547.443273][ T9911] do_syscall_64+0xcd/0x490 [ 547.443311][ T9911] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 547.443336][ T9911] RIP: 0033:0x7f81d258ebe9 [ 547.443359][ T9911] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 547.443385][ T9911] RSP: 002b:00007f81d3482038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 547.443411][ T9911] RAX: ffffffffffffffda RBX: 00007f81d27b5fa0 RCX: 00007f81d258ebe9 [ 547.443429][ T9911] RDX: 0000000000000001 RSI: 0000200000000080 RDI: 0000000000000008 [ 547.443446][ T9911] RBP: 00007f81d2611e19 R08: 0000000000000000 R09: 0000000000000000 [ 547.443463][ T9911] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 547.443479][ T9911] R13: 00007f81d27b6038 R14: 00007f81d27b5fa0 R15: 00007ffcebab08b8 [ 547.443516][ T9911] [ 548.344040][ T9928] FAULT_INJECTION: forcing a failure. [ 548.344040][ T9928] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 548.357433][ T9928] CPU: 0 UID: 0 PID: 9928 Comm: syz.3.729 Not tainted syzkaller #0 PREEMPT(full) [ 548.357455][ T9928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 548.357464][ T9928] Call Trace: [ 548.357472][ T9928] [ 548.357479][ T9928] dump_stack_lvl+0x16c/0x1f0 [ 548.357505][ T9928] should_fail_ex+0x512/0x640 [ 548.357533][ T9928] should_fail_alloc_page+0xe7/0x130 [ 548.357577][ T9928] prepare_alloc_pages+0x3c2/0x610 [ 548.357599][ T9928] ? rcu_is_watching+0x12/0xc0 [ 548.357617][ T9928] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 548.357637][ T9928] ? rcu_is_watching+0x12/0xc0 [ 548.357651][ T9928] ? trace_mm_page_alloc+0x11f/0x1a0 [ 548.357672][ T9928] ? __alloc_frozen_pages_noprof+0x294/0x23f0 [ 548.357689][ T9928] ? stack_trace_save+0x8e/0xc0 [ 548.357707][ T9928] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 548.357731][ T9928] ? kmem_cache_alloc_node_noprof+0x1d5/0x3b0 [ 548.357748][ T9928] ? __get_vm_area_node+0x1ca/0x330 [ 548.357768][ T9928] ? __vmalloc_node_noprof+0xad/0xf0 [ 548.357779][ T9928] ? __snd_dma_alloc_pages+0x50/0x90 [ 548.357796][ T9928] ? snd_dma_alloc_dir_pages+0x151/0x240 [ 548.357811][ T9928] ? do_alloc_pages+0x136/0x2d0 [ 548.357824][ T9928] ? snd_pcm_lib_malloc_pages+0x3df/0x980 [ 548.357839][ T9928] ? snd_pcm_hw_params+0x1656/0x1ba0 [ 548.357854][ T9928] ? snd_pcm_kernel_ioctl+0x147/0x2e0 [ 548.357871][ T9928] ? do_syscall_64+0xcd/0x490 [ 548.357889][ T9928] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 548.357907][ T9928] alloc_pages_bulk_noprof+0x71c/0x1410 [ 548.357923][ T9928] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 548.357946][ T9928] ? policy_nodemask+0xea/0x4e0 [ 548.357966][ T9928] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 548.357984][ T9928] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 548.358010][ T9928] kasan_populate_vmalloc+0xf1/0x1f0 [ 548.358030][ T9928] alloc_vmap_area+0x959/0x29c0 [ 548.358058][ T9928] ? __pfx_alloc_vmap_area+0x10/0x10 [ 548.358083][ T9928] __get_vm_area_node+0x1ca/0x330 [ 548.358108][ T9928] __vmalloc_node_range_noprof+0x271/0x14b0 [ 548.358121][ T9928] ? __snd_dma_alloc_pages+0x50/0x90 [ 548.358140][ T9928] ? __pfx___mutex_trylock_common+0x10/0x10 [ 548.358165][ T9928] ? __snd_dma_alloc_pages+0x50/0x90 [ 548.358181][ T9928] ? rcu_is_watching+0x12/0xc0 [ 548.358194][ T9928] ? trace_contention_end+0xdd/0x130 [ 548.358215][ T9928] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 548.358232][ T9928] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 548.358254][ T9928] ? __snd_dma_alloc_pages+0x50/0x90 [ 548.358269][ T9928] __vmalloc_node_noprof+0xad/0xf0 [ 548.358283][ T9928] ? __snd_dma_alloc_pages+0x50/0x90 [ 548.358298][ T9928] ? __pfx_snd_dma_vmalloc_alloc+0x10/0x10 [ 548.358317][ T9928] __snd_dma_alloc_pages+0x50/0x90 [ 548.358335][ T9928] snd_dma_alloc_dir_pages+0x151/0x240 [ 548.358353][ T9928] do_alloc_pages+0x136/0x2d0 [ 548.358372][ T9928] snd_pcm_lib_malloc_pages+0x3df/0x980 [ 548.358392][ T9928] snd_pcm_hw_params+0x1656/0x1ba0 [ 548.358411][ T9928] ? __pfx_snd_pcm_hw_params+0x10/0x10 [ 548.358428][ T9928] ? snd_pcm_hw_param_near.constprop.0+0x734/0x8e0 [ 548.358446][ T9928] ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10 [ 548.358470][ T9928] ? __asan_memset+0x23/0x50 [ 548.358485][ T9928] snd_pcm_kernel_ioctl+0x147/0x2e0 [ 548.358503][ T9928] snd_pcm_oss_change_params_locked+0x1432/0x3a30 [ 548.358527][ T9928] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 548.358549][ T9928] ? __pfx___futex_wait+0x10/0x10 [ 548.358569][ T9928] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 548.358590][ T9928] ? __pfx_futex_wake_mark+0x10/0x10 [ 548.358615][ T9928] ? futex_private_hash_put+0x176/0x300 [ 548.358636][ T9928] snd_pcm_oss_make_ready_locked+0xb7/0x130 [ 548.358652][ T9928] snd_pcm_oss_write+0x4c3/0xa10 [ 548.358668][ T9928] ? bpf_lsm_file_permission+0x9/0x10 [ 548.358688][ T9928] ? security_file_permission+0x71/0x210 [ 548.358711][ T9928] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 548.358725][ T9928] vfs_write+0x2a0/0x11d0 [ 548.358751][ T9928] ? __pfx_vfs_write+0x10/0x10 [ 548.358766][ T9928] ? do_futex+0x122/0x350 [ 548.358785][ T9928] ? __pfx_do_futex+0x10/0x10 [ 548.358805][ T9928] ? __pfx___might_resched+0x10/0x10 [ 548.358823][ T9928] ? __x64_sys_futex+0x1e0/0x4c0 [ 548.358840][ T9928] ? __x64_sys_futex+0x1e9/0x4c0 [ 548.358860][ T9928] ksys_write+0x12a/0x250 [ 548.358876][ T9928] ? __pfx_ksys_write+0x10/0x10 [ 548.358898][ T9928] do_syscall_64+0xcd/0x490 [ 548.358918][ T9928] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 548.358933][ T9928] RIP: 0033:0x7f81d258ebe9 [ 548.358947][ T9928] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 548.358961][ T9928] RSP: 002b:00007f81d3482038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 548.358976][ T9928] RAX: ffffffffffffffda RBX: 00007f81d27b5fa0 RCX: 00007f81d258ebe9 [ 548.358985][ T9928] RDX: 0000000000000001 RSI: 0000200000000080 RDI: 0000000000000006 [ 548.358995][ T9928] RBP: 00007f81d2611e19 R08: 0000000000000000 R09: 0000000000000000 [ 548.359003][ T9928] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 548.359013][ T9928] R13: 00007f81d27b6038 R14: 00007f81d27b5fa0 R15: 00007ffcebab08b8 [ 548.359032][ T9928] [ 548.359310][ T9928] warn_alloc: 3 callbacks suppressed [ 548.359319][ T9928] syz.3.729: vmalloc error: size 2097152, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 548.989680][ T9928] CPU: 0 UID: 0 PID: 9928 Comm: syz.3.729 Not tainted syzkaller #0 PREEMPT(full) [ 548.989711][ T9928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 548.989724][ T9928] Call Trace: [ 548.989732][ T9928] [ 548.989741][ T9928] dump_stack_lvl+0x16c/0x1f0 [ 548.989779][ T9928] warn_alloc+0x248/0x3a0 [ 548.989810][ T9928] ? __pfx_warn_alloc+0x10/0x10 [ 548.989842][ T9928] ? kfree+0x2b4/0x4d0 [ 548.989872][ T9928] ? __get_vm_area_node+0x208/0x330 [ 548.989916][ T9928] __vmalloc_node_range_noprof+0xb2d/0x14b0 [ 548.989947][ T9928] ? __pfx___mutex_trylock_common+0x10/0x10 [ 548.989983][ T9928] ? __snd_dma_alloc_pages+0x50/0x90 [ 548.990013][ T9928] ? rcu_is_watching+0x12/0xc0 [ 548.990038][ T9928] ? trace_contention_end+0xdd/0x130 [ 548.990075][ T9928] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 548.990106][ T9928] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 548.990144][ T9928] ? __snd_dma_alloc_pages+0x50/0x90 [ 548.990172][ T9928] __vmalloc_node_noprof+0xad/0xf0 [ 548.990195][ T9928] ? __snd_dma_alloc_pages+0x50/0x90 [ 548.990223][ T9928] ? __pfx_snd_dma_vmalloc_alloc+0x10/0x10 [ 548.990256][ T9928] __snd_dma_alloc_pages+0x50/0x90 [ 548.990286][ T9928] snd_dma_alloc_dir_pages+0x151/0x240 [ 548.990320][ T9928] do_alloc_pages+0x136/0x2d0 [ 548.990353][ T9928] snd_pcm_lib_malloc_pages+0x3df/0x980 [ 548.990389][ T9928] snd_pcm_hw_params+0x1656/0x1ba0 [ 548.990425][ T9928] ? __pfx_snd_pcm_hw_params+0x10/0x10 [ 548.990453][ T9928] ? snd_pcm_hw_param_near.constprop.0+0x734/0x8e0 [ 548.990485][ T9928] ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10 [ 548.990530][ T9928] ? __asan_memset+0x23/0x50 [ 548.990558][ T9928] snd_pcm_kernel_ioctl+0x147/0x2e0 [ 548.990585][ T9928] snd_pcm_oss_change_params_locked+0x1432/0x3a30 [ 548.990623][ T9928] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 548.990649][ T9928] ? __pfx___futex_wait+0x10/0x10 [ 548.990687][ T9928] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 548.990721][ T9928] ? __pfx_futex_wake_mark+0x10/0x10 [ 548.990763][ T9928] ? futex_private_hash_put+0x176/0x300 [ 548.990798][ T9928] snd_pcm_oss_make_ready_locked+0xb7/0x130 [ 548.990826][ T9928] snd_pcm_oss_write+0x4c3/0xa10 [ 548.990854][ T9928] ? bpf_lsm_file_permission+0x9/0x10 [ 548.990888][ T9928] ? security_file_permission+0x71/0x210 [ 548.990928][ T9928] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 548.990952][ T9928] vfs_write+0x2a0/0x11d0 [ 548.990990][ T9928] ? __pfx_vfs_write+0x10/0x10 [ 548.991015][ T9928] ? do_futex+0x122/0x350 [ 548.991045][ T9928] ? __pfx_do_futex+0x10/0x10 [ 548.991078][ T9928] ? __pfx___might_resched+0x10/0x10 [ 548.991108][ T9928] ? __x64_sys_futex+0x1e0/0x4c0 [ 548.991136][ T9928] ? __x64_sys_futex+0x1e9/0x4c0 [ 548.991172][ T9928] ksys_write+0x12a/0x250 [ 548.991200][ T9928] ? __pfx_ksys_write+0x10/0x10 [ 548.991240][ T9928] do_syscall_64+0xcd/0x490 [ 548.991274][ T9928] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 548.991299][ T9928] RIP: 0033:0x7f81d258ebe9 [ 548.991320][ T9928] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 548.991343][ T9928] RSP: 002b:00007f81d3482038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 548.991366][ T9928] RAX: ffffffffffffffda RBX: 00007f81d27b5fa0 RCX: 00007f81d258ebe9 [ 548.991383][ T9928] RDX: 0000000000000001 RSI: 0000200000000080 RDI: 0000000000000006 [ 548.991398][ T9928] RBP: 00007f81d2611e19 R08: 0000000000000000 R09: 0000000000000000 [ 548.991412][ T9928] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 548.991426][ T9928] R13: 00007f81d27b6038 R14: 00007f81d27b5fa0 R15: 00007ffcebab08b8 [ 548.991462][ T9928] [ 549.370799][ T9928] Mem-Info: [ 549.373955][ T9928] active_anon:11984 inactive_anon:10 isolated_anon:0 [ 549.373955][ T9928] active_file:16993 inactive_file:40002 isolated_file:0 [ 549.373955][ T9928] unevictable:768 dirty:871 writeback:0 [ 549.373955][ T9928] slab_reclaimable:11739 slab_unreclaimable:95519 [ 549.373955][ T9928] mapped:31096 shmem:1362 pagetables:1301 [ 549.373955][ T9928] sec_pagetables:0 bounce:0 [ 549.373955][ T9928] kernel_misc_reclaimable:0 [ 549.373955][ T9928] free:1303040 free_pcp:13910 free_cma:0 [ 549.450216][ T9928] Node 0 active_anon:49448kB inactive_anon:40kB active_file:67972kB inactive_file:159820kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:124432kB dirty:3560kB writeback:0kB shmem:3904kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12460kB pagetables:4948kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 549.487689][ T9928] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:188kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:80kB pagetables:160kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 549.520872][ T9928] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 549.628584][ T9928] lowmem_reserve[]: 0 2480 2481 2481 2481 [ 549.634976][ T9928] Node 0 DMA32 free:1280816kB boost:0kB min:34076kB low:42592kB high:51108kB reserved_highatomic:0KB free_highatomic:0KB active_anon:49904kB inactive_anon:40kB active_file:67972kB inactive_file:158504kB unevictable:1536kB writepending:3560kB present:3129332kB managed:2539588kB mlocked:0kB bounce:0kB free_pcp:48720kB local_pcp:14636kB free_cma:0kB [ 549.672142][ T9928] lowmem_reserve[]: 0 0 1 1 1 [ 549.696778][ T9928] Node 0 Normal free:20kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1316kB unevictable:0kB writepending:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 549.767623][ T9928] lowmem_reserve[]: 0 0 0 0 0 [ 549.773357][ T9928] Node 1 Normal free:3910348kB boost:0kB min:55804kB low:69752kB high:83700kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:188kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:7416kB local_pcp:7416kB free_cma:0kB [ 549.866977][ T9928] lowmem_reserve[]: 0 0 0 0 0 [ 549.922390][ T9928] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 549.957084][ T9928] Node 0 DMA32: 257*4kB (UM) 1440*8kB (UM) 1159*16kB (UME) 875*32kB (UME) 607*64kB (UME) 304*128kB (UME) 120*256kB (UME) 37*512kB (UME) 10*1024kB (UME) 7*2048kB (UME) 261*4096kB (UM) = 1280148kB [ 549.993157][ T9928] Node 0 Normal: 3*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20kB [ 550.020933][ T9928] Node 1 Normal: 203*4kB (UME) 64*8kB (UME) 34*16kB (UME) 244*32kB (UME) 116*64kB (UME) 34*128kB (UME) 15*256kB (UME) 2*512kB (UE) 1*1024kB (U) 2*2048kB (ME) 947*4096kB (UM) = 3910348kB [ 550.084499][ T9928] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 550.148542][ T9928] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 550.189329][ T9928] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 550.214111][ T9928] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 550.243905][ T9928] 58370 total pagecache pages [ 550.259072][ T9949] netlink: 8 bytes leftover after parsing attributes in process `syz.4.733'. [ 550.261387][ T9928] 19 pages in swap cache [ 550.290798][ T9928] Free swap = 124792kB [ 550.301181][ T9928] Total swap = 124996kB [ 550.310811][ T9928] 2097051 pages RAM [ 550.317816][ T9928] 0 pages HighMem/MovableOnly [ 550.341488][ T9928] 430192 pages reserved [ 550.385613][ T9928] 0 pages cma reserved [ 550.687274][ T9958] nfs: Unknown parameter 'w`_I+; HY Lu>>uh*C<+ ' [ 550.709662][ T9957] nfs: Unknown parameter 'w`_I+; HY Lu>>uh*C<+ ' [ 551.020704][ T9969] netlink: 8 bytes leftover after parsing attributes in process `syz.1.740'. [ 552.675897][ T9988] netlink: zone id is out of range [ 552.844993][ T9988] netlink: zone id is out of range [ 552.868430][ T9988] netlink: zone id is out of range [ 552.880323][ T9988] netlink: zone id is out of range [ 553.003851][ T9988] netlink: zone id is out of range [ 553.009058][ T9988] netlink: zone id is out of range [ 553.072770][ T9988] netlink: zone id is out of range [ 553.072789][ T9988] netlink: zone id is out of range [ 553.072798][ T9988] netlink: zone id is out of range [ 553.072806][ T9988] netlink: zone id is out of range [ 553.582696][ T9995] netlink: 338 bytes leftover after parsing attributes in process `syz.3.745'. [ 553.603525][ T9995] netlink: 338 bytes leftover after parsing attributes in process `syz.3.745'. [ 553.705777][ T9997] netlink: 134 bytes leftover after parsing attributes in process `syz.3.745'. [ 554.138761][ T9993] random: crng reseeded on system resumption [ 555.918833][T10034] FAULT_INJECTION: forcing a failure. [ 555.918833][T10034] name failslab, interval 1, probability 0, space 0, times 0 [ 555.974246][T10034] CPU: 0 UID: 0 PID: 10034 Comm: syz.4.755 Not tainted syzkaller #0 PREEMPT(full) [ 555.974283][T10034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 555.974298][T10034] Call Trace: [ 555.974307][T10034] [ 555.974318][T10034] dump_stack_lvl+0x16c/0x1f0 [ 555.974357][T10034] should_fail_ex+0x512/0x640 [ 555.974392][T10034] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 555.974429][T10034] should_failslab+0xc2/0x120 [ 555.974463][T10034] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 555.974495][T10034] ? alloc_empty_file+0x55/0x1e0 [ 555.974539][T10034] alloc_empty_file+0x55/0x1e0 [ 555.974575][T10034] path_openat+0xda/0x2cb0 [ 555.974603][T10034] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 555.974642][T10034] ? __pfx_path_openat+0x10/0x10 [ 555.974682][T10034] do_filp_open+0x20b/0x470 [ 555.974713][T10034] ? __pfx_do_filp_open+0x10/0x10 [ 555.974768][T10034] ? alloc_fd+0x471/0x7d0 [ 555.974813][T10034] do_sys_openat2+0x11b/0x1d0 [ 555.974853][T10034] ? __pfx_do_sys_openat2+0x10/0x10 [ 555.974906][T10034] __x64_sys_openat+0x174/0x210 [ 555.974945][T10034] ? __pfx___x64_sys_openat+0x10/0x10 [ 555.974998][T10034] do_syscall_64+0xcd/0x490 [ 555.975033][T10034] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 555.975058][T10034] RIP: 0033:0x7f877518ebe9 [ 555.975079][T10034] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 555.975104][T10034] RSP: 002b:00007f8775f9f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 555.975129][T10034] RAX: ffffffffffffffda RBX: 00007f87753b5fa0 RCX: 00007f877518ebe9 [ 555.975147][T10034] RDX: 0000000000200002 RSI: 0000200000000380 RDI: ffffffffffffff9c [ 555.975164][T10034] RBP: 00007f8775211e19 R08: 0000000000000000 R09: 0000000000000000 [ 555.975181][T10034] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 555.975196][T10034] R13: 00007f87753b6038 R14: 00007f87753b5fa0 R15: 00007ffcf0b1c0b8 [ 555.975231][T10034] [ 556.479696][T10031] FAULT_INJECTION: forcing a failure. [ 556.479696][T10031] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 556.515647][T10031] CPU: 0 UID: 0 PID: 10031 Comm: syz.3.753 Not tainted syzkaller #0 PREEMPT(full) [ 556.515686][T10031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 556.515701][T10031] Call Trace: [ 556.515711][T10031] [ 556.515722][T10031] dump_stack_lvl+0x16c/0x1f0 [ 556.515762][T10031] should_fail_ex+0x512/0x640 [ 556.515804][T10031] should_fail_alloc_page+0xe7/0x130 [ 556.515841][T10031] prepare_alloc_pages+0x3c2/0x610 [ 556.515880][T10031] ? rcu_is_watching+0x12/0xc0 [ 556.515911][T10031] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 556.515949][T10031] ? rcu_is_watching+0x12/0xc0 [ 556.515974][T10031] ? trace_mm_page_alloc+0x11f/0x1a0 [ 556.516013][T10031] ? __alloc_frozen_pages_noprof+0x294/0x23f0 [ 556.516041][T10031] ? stack_trace_save+0x8e/0xc0 [ 556.516067][T10031] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 556.516107][T10031] ? kmem_cache_alloc_node_noprof+0x1d5/0x3b0 [ 556.516134][T10031] ? __get_vm_area_node+0x1ca/0x330 [ 556.516167][T10031] ? __vmalloc_node_noprof+0xad/0xf0 [ 556.516187][T10031] ? __snd_dma_alloc_pages+0x50/0x90 [ 556.516215][T10031] ? snd_dma_alloc_dir_pages+0x151/0x240 [ 556.516244][T10031] ? do_alloc_pages+0x136/0x2d0 [ 556.516266][T10031] ? snd_pcm_lib_malloc_pages+0x3df/0x980 [ 556.516291][T10031] ? snd_pcm_hw_params+0x1656/0x1ba0 [ 556.516317][T10031] ? snd_pcm_kernel_ioctl+0x147/0x2e0 [ 556.516348][T10031] ? do_syscall_64+0xcd/0x490 [ 556.516381][T10031] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 556.516415][T10031] alloc_pages_bulk_noprof+0x71c/0x1410 [ 556.516447][T10031] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 556.516489][T10031] ? policy_nodemask+0xea/0x4e0 [ 556.516523][T10031] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 556.516571][T10031] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 556.516620][T10031] kasan_populate_vmalloc+0xf1/0x1f0 [ 556.516656][T10031] alloc_vmap_area+0x959/0x29c0 [ 556.516708][T10031] ? __pfx_alloc_vmap_area+0x10/0x10 [ 556.516755][T10031] __get_vm_area_node+0x1ca/0x330 [ 556.516797][T10031] __vmalloc_node_range_noprof+0x271/0x14b0 [ 556.516822][T10031] ? __snd_dma_alloc_pages+0x50/0x90 [ 556.516858][T10031] ? __pfx___mutex_trylock_common+0x10/0x10 [ 556.516898][T10031] ? __snd_dma_alloc_pages+0x50/0x90 [ 556.516930][T10031] ? rcu_is_watching+0x12/0xc0 [ 556.516958][T10031] ? trace_contention_end+0xdd/0x130 [ 556.516996][T10031] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 556.517027][T10031] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 556.517069][T10031] ? __snd_dma_alloc_pages+0x50/0x90 [ 556.517098][T10031] __vmalloc_node_noprof+0xad/0xf0 [ 556.517121][T10031] ? __snd_dma_alloc_pages+0x50/0x90 [ 556.517149][T10031] ? __pfx_snd_dma_vmalloc_alloc+0x10/0x10 [ 556.517185][T10031] __snd_dma_alloc_pages+0x50/0x90 [ 556.517216][T10031] snd_dma_alloc_dir_pages+0x151/0x240 [ 556.517249][T10031] do_alloc_pages+0x136/0x2d0 [ 556.517284][T10031] snd_pcm_lib_malloc_pages+0x3df/0x980 [ 556.517321][T10031] snd_pcm_hw_params+0x1656/0x1ba0 [ 556.517359][T10031] ? __pfx_snd_pcm_hw_params+0x10/0x10 [ 556.517392][T10031] ? snd_pcm_hw_param_near.constprop.0+0x734/0x8e0 [ 556.517425][T10031] ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10 [ 556.517472][T10031] ? __asan_memset+0x23/0x50 [ 556.517499][T10031] snd_pcm_kernel_ioctl+0x147/0x2e0 [ 556.517532][T10031] snd_pcm_oss_change_params_locked+0x1432/0x3a30 [ 556.517587][T10031] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 556.517614][T10031] ? __pfx___futex_wait+0x10/0x10 [ 556.517660][T10031] ? __pfx_futex_wake_mark+0x10/0x10 [ 556.517706][T10031] ? futex_private_hash_put+0x176/0x300 [ 556.517740][T10031] snd_pcm_oss_make_ready_locked+0xb7/0x130 [ 556.517770][T10031] snd_pcm_oss_write+0x4c3/0xa10 [ 556.517799][T10031] ? bpf_lsm_file_permission+0x9/0x10 [ 556.517837][T10031] ? security_file_permission+0x71/0x210 [ 556.517881][T10031] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 556.517907][T10031] vfs_write+0x2a0/0x11d0 [ 556.517948][T10031] ? __pfx_vfs_write+0x10/0x10 [ 556.517974][T10031] ? do_futex+0x122/0x350 [ 556.518007][T10031] ? __pfx_do_futex+0x10/0x10 [ 556.518038][T10031] ? __pfx___might_resched+0x10/0x10 [ 556.518066][T10031] ? __x64_sys_futex+0x1e0/0x4c0 [ 556.518096][T10031] ? __x64_sys_futex+0x1e9/0x4c0 [ 556.518131][T10031] ksys_write+0x12a/0x250 [ 556.518158][T10031] ? __pfx_ksys_write+0x10/0x10 [ 556.518195][T10031] do_syscall_64+0xcd/0x490 [ 556.518234][T10031] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 556.518260][T10031] RIP: 0033:0x7f81d258ebe9 [ 556.518283][T10031] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 556.518310][T10031] RSP: 002b:00007f81d3461038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 556.518337][T10031] RAX: ffffffffffffffda RBX: 00007f81d27b6090 RCX: 00007f81d258ebe9 [ 556.518354][T10031] RDX: 0000000000000001 RSI: 0000200000000080 RDI: 0000000000000006 [ 556.518370][T10031] RBP: 00007f81d2611e19 R08: 0000000000000000 R09: 0000000000000000 [ 556.518386][T10031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 556.518402][T10031] R13: 00007f81d27b6128 R14: 00007f81d27b6090 R15: 00007ffcebab08b8 [ 556.518440][T10031] [ 557.166330][T10046] netlink: 338 bytes leftover after parsing attributes in process `syz.1.758'. [ 557.206272][T10049] netlink: 338 bytes leftover after parsing attributes in process `syz.1.758'. [ 557.266157][T10046] netlink: 250 bytes leftover after parsing attributes in process `syz.1.758'. [ 557.727990][T10057] random: crng reseeded on system resumption [ 558.025424][ T7355] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 558.535900][T10056] bond0: option all_slaves_active: invalid value () [ 559.557224][T10109] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input17 [ 560.046264][T10111] netlink: 338 bytes leftover after parsing attributes in process `syz.2.771'. [ 560.080692][ T7277] Bluetooth: hci2: command 0x0c1a tx timeout [ 560.275150][T10112] netlink: 338 bytes leftover after parsing attributes in process `syz.2.771'. [ 560.323798][T10108] netlink: 126 bytes leftover after parsing attributes in process `syz.2.771'. [ 560.393797][T10092] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input18 [ 563.588718][T10166] random: crng reseeded on system resumption [ 568.207463][T10220] random: crng reseeded on system resumption [ 568.315088][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.321570][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 568.500898][T10209] netlink: 4 bytes leftover after parsing attributes in process `syz.4.788'. [ 570.026630][T10247] FAULT_INJECTION: forcing a failure. [ 570.026630][T10247] name fail_futex, interval 1, probability 0, space 0, times 0 [ 570.040351][T10247] CPU: 0 UID: 0 PID: 10247 Comm: syz.3.796 Not tainted syzkaller #0 PREEMPT(full) [ 570.040385][T10247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 570.040400][T10247] Call Trace: [ 570.040410][T10247] [ 570.040419][T10247] dump_stack_lvl+0x16c/0x1f0 [ 570.040459][T10247] should_fail_ex+0x512/0x640 [ 570.040499][T10247] get_futex_key+0x1d0/0x1560 [ 570.040538][T10247] ? __pfx_get_futex_key+0x10/0x10 [ 570.040577][T10247] futex_wake+0xea/0x530 [ 570.040609][T10247] ? lockdep_hardirqs_on+0x7c/0x110 [ 570.040642][T10247] ? __pfx_futex_wake+0x10/0x10 [ 570.040682][T10247] ? __sanitizer_cov_trace_switch+0x59/0x90 [ 570.040725][T10247] do_futex+0x1e3/0x350 [ 570.040758][T10247] ? __pfx_do_futex+0x10/0x10 [ 570.040789][T10247] ? fd_install+0x225/0x750 [ 570.040820][T10247] __x64_sys_futex+0x1e0/0x4c0 [ 570.040852][T10247] ? __sys_socket+0xac/0x260 [ 570.040877][T10247] ? __pfx___x64_sys_futex+0x10/0x10 [ 570.040908][T10247] ? xfd_validate_state+0x61/0x180 [ 570.040940][T10247] ? __pfx_do_writev+0x10/0x10 [ 570.040975][T10247] do_syscall_64+0xcd/0x490 [ 570.041010][T10247] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 570.041035][T10247] RIP: 0033:0x7f81d258ebe9 [ 570.041055][T10247] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 570.041091][T10247] RSP: 002b:00007f81d34400e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 570.041116][T10247] RAX: ffffffffffffffda RBX: 00007f81d27b6188 RCX: 00007f81d258ebe9 [ 570.041132][T10247] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f81d27b618c [ 570.041149][T10247] RBP: 00007f81d27b6180 R08: 00007f81d3483000 R09: 0000000000000000 [ 570.041163][T10247] R10: 000000000000000b R11: 0000000000000246 R12: 0000000000000000 [ 570.041177][T10247] R13: 00007f81d27b6218 R14: 00007ffcebab07d0 R15: 00007ffcebab08b8 [ 570.041209][T10247] [ 573.214612][T10278] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input19 [ 575.163088][T10284] netlink: 186 bytes leftover after parsing attributes in process `syz.1.800'. [ 575.479101][T10280] netlink: 186 bytes leftover after parsing attributes in process `syz.1.800'. [ 576.016793][T10279] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input20 [ 578.903712][T10311] random: crng reseeded on system resumption [ 582.478589][ T7277] Bluetooth: hci4: unexpected event 0x03 length: 17 > 11 [ 582.826103][T10361] netlink: 338 bytes leftover after parsing attributes in process `syz.2.818'. [ 582.845202][T10361] netlink: 338 bytes leftover after parsing attributes in process `syz.2.818'. [ 582.898162][T10361] netlink: 126 bytes leftover after parsing attributes in process `syz.2.818'. [ 583.571634][T10382] netlink: 8 bytes leftover after parsing attributes in process `syz.4.820'. [ 584.588231][T10370] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 584.613659][T10370] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 584.621293][T10370] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 584.816967][T10396] netlink: 186 bytes leftover after parsing attributes in process `syz.4.823'. [ 584.856692][T10370] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 584.867519][T10370] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 585.190826][ T7277] Bluetooth: hci0: command 0x0c1a tx timeout [ 585.422937][T10370] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 585.581627][T10370] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 585.650866][T10370] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 586.165238][T10370] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 586.639595][ T7277] Bluetooth: hci1: command 0x0c1a tx timeout [ 586.871735][ T7277] Bluetooth: hci2: command 0x0c1a tx timeout [ 587.145086][T10414] kAFS: unparsable volume name [ 587.204004][T10417] vhci_hcd: invalid port number 21 [ 587.294588][T10414] phram: parameter too long [ 587.431994][ T7277] Bluetooth: hci3: command 0x0c1a tx timeout [ 587.511893][ T7277] Bluetooth: hci4: command 0x0c1a tx timeout [ 588.710921][ T7277] Bluetooth: hci1: command 0x0c1a tx timeout [ 588.828259][T10455] netlink: 186 bytes leftover after parsing attributes in process `syz.2.836'. [ 588.950720][ T7277] Bluetooth: hci2: command 0x0c1a tx timeout [ 589.590914][ T7277] Bluetooth: hci4: command 0x0c1a tx timeout [ 589.638020][T10468] random: crng reseeded on system resumption [ 589.646586][T10466] netlink: 16 bytes leftover after parsing attributes in process `syz.1.838'. syzkaller syzkaller login: [ 590.181967][T10477] netlink: 'syz.2.840': attribute type 11 has an invalid length. [ 590.271345][T10478] block nbd7: not configured, cannot reconfigure [ 591.704725][ T7277] Bluetooth: hci4: command 0x0c1a tx timeout [ 592.217306][ T30] audit: type=1800 audit(59282.789:12): pid=10493 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.841" name="members" dev="configfs" ino=30797 res=0 errno=0 [ 592.274130][T10485] netlink: 338 bytes leftover after parsing attributes in process `syz.1.842'. [ 592.289400][T10497] netlink: 342 bytes leftover after parsing attributes in process `syz.1.842'. [ 594.558376][T10519] netlink: 338 bytes leftover after parsing attributes in process `syz.4.847'. [ 594.568496][T10519] netlink: 338 bytes leftover after parsing attributes in process `syz.4.847'. [ 594.581204][T10519] netlink: 134 bytes leftover after parsing attributes in process `syz.4.847'. [ 595.016927][T10529] netlink: 8 bytes leftover after parsing attributes in process `syz.4.850'. [ 596.263284][T10538] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 597.861321][T10559] netlink: 338 bytes leftover after parsing attributes in process `syz.2.859'. [ 597.893299][T10559] netlink: 338 bytes leftover after parsing attributes in process `syz.2.859'. [ 597.929539][T10559] netlink: 126 bytes leftover after parsing attributes in process `syz.2.859'. [ 597.942188][T10562] netlink: 28 bytes leftover after parsing attributes in process `syz.1.860'. [ 603.434612][T10622] block2mtd: error: cannot open device inX±jFBB>U;߸Ilk [ 603.610404][T10618] could not allocate digest TFM handle [ 603.651331][ T7355] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 603.667630][ T7355] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 603.676058][ T7355] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 603.702224][ T7355] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 603.713783][ T7355] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 603.714384][T10625] sp0: Synchronizing with TNC [ 605.028472][T10629] chnl_net:caif_netlink_parms(): no params data found [ 605.831197][ T7355] Bluetooth: hci5: command tx timeout [ 606.512113][T10629] bridge0: port 1(bridge_slave_0) entered blocking state [ 606.519403][T10629] bridge0: port 1(bridge_slave_0) entered disabled state [ 606.537180][T10629] bridge_slave_0: entered allmulticast mode [ 606.545291][T10629] bridge_slave_0: entered promiscuous mode [ 606.686458][T10629] bridge0: port 2(bridge_slave_1) entered blocking state [ 606.818828][T10629] bridge0: port 2(bridge_slave_1) entered disabled state [ 606.827423][T10629] bridge_slave_1: entered allmulticast mode [ 606.838249][T10629] bridge_slave_1: entered promiscuous mode [ 607.307655][T10629] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 607.341587][T10629] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 607.910791][ T7355] Bluetooth: hci5: command tx timeout [ 608.812893][T10629] team0: Port device team_slave_0 added [ 609.433723][T10629] team0: Port device team_slave_1 added [ 609.507866][T10629] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 609.517187][T10629] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 609.543749][T10629] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 609.587340][T10629] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 609.594397][T10629] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 609.622047][T10629] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 609.719513][T10629] hsr_slave_0: entered promiscuous mode [ 609.727691][T10629] hsr_slave_1: entered promiscuous mode [ 609.734544][T10629] debugfs: 'hsr0' already exists in 'hsr' [ 609.740299][T10629] Cannot create hsr debugfs directory [ 609.958833][T10699] netlink: 8 bytes leftover after parsing attributes in process `syz.4.888'. [ 609.994453][ T7355] Bluetooth: hci5: command tx timeout [ 610.324565][T10629] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 610.372000][T10629] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 610.403836][T10629] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 610.632613][T10629] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 610.640116][T10698] random: crng reseeded on system resumption [ 611.333385][T10629] 8021q: adding VLAN 0 to HW filter on device bond0 [ 611.414091][T10629] 8021q: adding VLAN 0 to HW filter on device team0 [ 611.537995][ T7268] bridge0: port 1(bridge_slave_0) entered blocking state [ 611.545360][ T7268] bridge0: port 1(bridge_slave_0) entered forwarding state [ 611.682889][T10732] netlink: 8 bytes leftover after parsing attributes in process `syz.4.893'. [ 611.705122][ T7268] bridge0: port 2(bridge_slave_1) entered blocking state [ 611.712438][ T7268] bridge0: port 2(bridge_slave_1) entered forwarding state [ 612.081509][T10629] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 612.100923][ T7355] Bluetooth: hci5: command tx timeout [ 612.105316][T10629] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 613.324279][T10629] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 614.836855][T10779] hub 8-0:1.0: USB hub found [ 614.871134][T10779] hub 8-0:1.0: 1 port detected [ 615.504943][T10629] veth0_vlan: entered promiscuous mode [ 615.584902][T10629] veth1_vlan: entered promiscuous mode [ 615.783738][T10629] veth0_macvtap: entered promiscuous mode [ 615.800560][T10629] veth1_macvtap: entered promiscuous mode [ 615.834608][T10629] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 616.204194][T10629] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 616.240215][ T7606] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 616.301272][ T7606] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 616.664884][ T7260] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 616.730302][ T7260] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.736768][ T7600] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 617.754685][ T7600] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 617.973848][ T7287] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 618.005375][ T7287] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 628.314477][ T7355] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 629.015890][T10987] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 629.766457][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 629.790693][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 630.053960][T10984] netlink: 8 bytes leftover after parsing attributes in process `syz.5.936'. [ 631.089560][T11004] netlink: 338 bytes leftover after parsing attributes in process `syz.1.945'. [ 631.110056][T11011] netlink: 338 bytes leftover after parsing attributes in process `syz.1.945'. [ 631.479948][T10991] random: crng reseeded on system resumption [ 631.943497][T11023] binder: 11022:11023 ioctl c018620c 0 returned -1 [ 633.642185][T11054] random: crng reseeded on system resumption [ 640.540995][ T30] audit: type=1806 audit(59331.109:13): xattr="." res=0 [ 641.611270][T11156] FAULT_INJECTION: forcing a failure. [ 641.611270][T11156] name failslab, interval 1, probability 0, space 0, times 0 [ 641.625769][T11156] CPU: 1 UID: 0 PID: 11156 Comm: syz.5.967 Not tainted syzkaller #0 PREEMPT(full) [ 641.625806][T11156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 641.625823][T11156] Call Trace: [ 641.625832][T11156] [ 641.625843][T11156] dump_stack_lvl+0x16c/0x1f0 [ 641.625882][T11156] should_fail_ex+0x512/0x640 [ 641.625917][T11156] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 641.625957][T11156] should_failslab+0xc2/0x120 [ 641.625992][T11156] __kmalloc_cache_noprof+0x6a/0x3e0 [ 641.626021][T11156] ? slhc_init+0x7d/0x570 [ 641.626063][T11156] slhc_init+0x7d/0x570 [ 641.626099][T11156] ? kasan_save_track+0x14/0x30 [ 641.626132][T11156] slip_open+0x8ee/0x1150 [ 641.626171][T11156] ? __pfx_n_tty_close+0x10/0x10 [ 641.626197][T11156] ? __pfx_slip_open+0x10/0x10 [ 641.626233][T11156] ? down_write+0x14d/0x200 [ 641.626270][T11156] ? __pfx_slip_open+0x10/0x10 [ 641.626306][T11156] tty_ldisc_open+0x9f/0x120 [ 641.626338][T11156] tty_set_ldisc+0x32b/0x780 [ 641.626374][T11156] tty_ioctl+0xc2e/0x1680 [ 641.626408][T11156] ? __pfx_tty_ioctl+0x10/0x10 [ 641.626454][T11156] ? find_held_lock+0x2b/0x80 [ 641.626479][T11156] ? hook_file_ioctl_common+0x145/0x410 [ 641.626520][T11156] ? __fget_files+0x20e/0x3c0 [ 641.626555][T11156] ? __pfx_tty_ioctl+0x10/0x10 [ 641.626588][T11156] __x64_sys_ioctl+0x18e/0x210 [ 641.626626][T11156] do_syscall_64+0xcd/0x490 [ 641.626661][T11156] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 641.626686][T11156] RIP: 0033:0x7fea0df8ebe9 [ 641.626708][T11156] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 641.626733][T11156] RSP: 002b:00007fea0c1d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 641.626759][T11156] RAX: ffffffffffffffda RBX: 00007fea0e1b6090 RCX: 00007fea0df8ebe9 [ 641.626777][T11156] RDX: 0000000000000000 RSI: 0000000000005423 RDI: 000000000000000b [ 641.626793][T11156] RBP: 00007fea0e011e19 R08: 0000000000000000 R09: 0000000000000000 [ 641.626808][T11156] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 641.626824][T11156] R13: 00007fea0e1b6128 R14: 00007fea0e1b6090 R15: 00007ffd1df9b5c8 [ 641.626860][T11156] [ 641.848337][T11156] Falling back ldisc for ptm1. [ 641.946745][T11169] : Can't lookup blockdev [ 647.759263][T11245] Invalid ELF header magic: != ELF [ 649.641304][T11291] program syz.2.994 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 656.074301][T11390] binder: 11383:11390 unknown command 0 [ 656.079906][T11390] binder: 11383:11390 ioctl c0306201 2000000000c0 returned -22 [ 656.560895][T11401] vhci_hcd: invalid port number 255 [ 656.569582][T11401] vhci_hcd: default hub control req: 5902 v0001 i00ff l1 [ 656.943781][T11415] tty tty17: ldisc open failed (-12), clearing slot 16 [ 657.010777][T11416] tty tty12: ldisc open failed (-12), clearing slot 11 [ 657.127786][T11411] sctp: [Deprecated]: syz.4.1024 (pid 11411) Use of int in max_burst socket option deprecated. [ 657.127786][T11411] Use struct sctp_assoc_value instead [ 658.839925][T11468] blktrace: Concurrent blktraces are not allowed on loop12 [ 659.063506][T11460] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 659.113693][T11460] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 659.174661][T11460] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 659.231046][T11460] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 659.237272][T11460] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 659.342653][T11460] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 659.348797][T11460] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 660.022962][T11460] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 660.353406][T11461] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 660.870972][ T7277] Bluetooth: hci0: command 0x0c1a tx timeout [ 661.191158][ T7277] Bluetooth: hci2: command 0x0c1a tx timeout [ 661.197303][ T7277] Bluetooth: hci1: command 0x0c1a tx timeout [ 661.271192][ T7355] Bluetooth: hci3: command 0x0c1a tx timeout [ 661.278312][ T7277] Bluetooth: hci4: command 0x0c1a tx timeout [ 661.350954][ T7277] Bluetooth: hci5: command 0x0c1a tx timeout [ 663.430883][ T7277] Bluetooth: hci5: command 0x0c1a tx timeout [ 664.721142][T11559] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1052'. [ 664.791484][T11562] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1053'. [ 664.814137][T11559] bridge0: port 2(bridge_slave_1) entered disabled state [ 665.036616][T11559] bridge_slave_1 (unregistering): left allmulticast mode [ 665.059060][T11559] bridge_slave_1 (unregistering): left promiscuous mode [ 665.079490][T11559] bridge0: port 2(bridge_slave_1) entered disabled state [ 665.510826][ T7277] Bluetooth: hci5: command 0x0c1a tx timeout [ 665.641606][ C0] hrtimer: interrupt took 989778 ns [ 666.453889][T11583] FAULT_INJECTION: forcing a failure. [ 666.453889][T11583] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 666.473672][T11583] CPU: 1 UID: 0 PID: 11583 Comm: syz.1.1059 Not tainted syzkaller #0 PREEMPT(full) [ 666.473706][T11583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 666.473720][T11583] Call Trace: [ 666.473730][T11583] [ 666.473740][T11583] dump_stack_lvl+0x16c/0x1f0 [ 666.473777][T11583] should_fail_ex+0x512/0x640 [ 666.473814][T11583] _copy_from_user+0x2e/0xd0 [ 666.473853][T11583] video_usercopy+0x723/0x1440 [ 666.473889][T11583] ? __pfx___video_do_ioctl+0x10/0x10 [ 666.473922][T11583] ? __pfx_video_usercopy+0x10/0x10 [ 666.473970][T11583] ? __fget_files+0x20e/0x3c0 [ 666.473997][T11583] v4l2_ioctl+0x1ba/0x250 [ 666.474023][T11583] ? __pfx_v4l2_ioctl+0x10/0x10 [ 666.474061][T11583] __x64_sys_ioctl+0x18e/0x210 [ 666.474100][T11583] do_syscall_64+0xcd/0x490 [ 666.474135][T11583] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 666.474160][T11583] RIP: 0033:0x7ff4e618ebe9 [ 666.474180][T11583] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 666.474204][T11583] RSP: 002b:00007ff4e70ad038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 666.474228][T11583] RAX: ffffffffffffffda RBX: 00007ff4e63b5fa0 RCX: 00007ff4e618ebe9 [ 666.474245][T11583] RDX: 0000000000000000 RSI: 00000000c0585611 RDI: 0000000000000000 [ 666.474259][T11583] RBP: 00007ff4e70ad090 R08: 0000000000000000 R09: 0000000000000000 [ 666.474274][T11583] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 666.474288][T11583] R13: 00007ff4e63b6038 R14: 00007ff4e63b5fa0 R15: 00007fff24872308 [ 666.474322][T11583] [ 666.614570][T11585] usbip-vudc usbip-vudc.0: gadget not bound [ 667.347606][T11581] FAULT_INJECTION: forcing a failure. [ 667.347606][T11581] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 667.361092][T11581] CPU: 1 UID: 0 PID: 11581 Comm: syz.4.1057 Not tainted syzkaller #0 PREEMPT(full) [ 667.361128][T11581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 667.361144][T11581] Call Trace: [ 667.361153][T11581] [ 667.361163][T11581] dump_stack_lvl+0x16c/0x1f0 [ 667.361203][T11581] should_fail_ex+0x512/0x640 [ 667.361244][T11581] should_fail_alloc_page+0xe7/0x130 [ 667.361281][T11581] prepare_alloc_pages+0x3c2/0x610 [ 667.361319][T11581] ? rcu_is_watching+0x12/0xc0 [ 667.361349][T11581] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 667.361386][T11581] ? rcu_is_watching+0x12/0xc0 [ 667.361412][T11581] ? trace_mm_page_alloc+0x11f/0x1a0 [ 667.361451][T11581] ? __alloc_frozen_pages_noprof+0x294/0x23f0 [ 667.361482][T11581] ? stack_trace_save+0x8e/0xc0 [ 667.361512][T11581] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 667.361557][T11581] ? kmem_cache_alloc_node_noprof+0x1d5/0x3b0 [ 667.361587][T11581] ? __get_vm_area_node+0x1ca/0x330 [ 667.361624][T11581] ? __vmalloc_node_noprof+0xad/0xf0 [ 667.361648][T11581] ? __snd_dma_alloc_pages+0x50/0x90 [ 667.361677][T11581] ? snd_dma_alloc_dir_pages+0x151/0x240 [ 667.361718][T11581] ? do_alloc_pages+0x136/0x2d0 [ 667.361745][T11581] ? snd_pcm_lib_malloc_pages+0x3df/0x980 [ 667.361776][T11581] ? snd_pcm_hw_params+0x1656/0x1ba0 [ 667.361806][T11581] ? snd_pcm_kernel_ioctl+0x147/0x2e0 [ 667.361838][T11581] ? do_syscall_64+0xcd/0x490 [ 667.361870][T11581] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 667.361904][T11581] alloc_pages_bulk_noprof+0x71c/0x1410 [ 667.361935][T11581] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 667.361975][T11581] ? policy_nodemask+0xea/0x4e0 [ 667.362012][T11581] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 667.362046][T11581] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 667.362096][T11581] kasan_populate_vmalloc+0xf1/0x1f0 [ 667.362129][T11581] alloc_vmap_area+0x959/0x29c0 [ 667.362178][T11581] ? __pfx_alloc_vmap_area+0x10/0x10 [ 667.362225][T11581] __get_vm_area_node+0x1ca/0x330 [ 667.362270][T11581] __vmalloc_node_range_noprof+0x271/0x14b0 [ 667.362296][T11581] ? __snd_dma_alloc_pages+0x50/0x90 [ 667.362332][T11581] ? __pfx___mutex_trylock_common+0x10/0x10 [ 667.362370][T11581] ? __snd_dma_alloc_pages+0x50/0x90 [ 667.362400][T11581] ? rcu_is_watching+0x12/0xc0 [ 667.362425][T11581] ? trace_contention_end+0xdd/0x130 [ 667.362463][T11581] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 667.362496][T11581] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 667.362537][T11581] ? __snd_dma_alloc_pages+0x50/0x90 [ 667.362567][T11581] __vmalloc_node_noprof+0xad/0xf0 [ 667.362591][T11581] ? __snd_dma_alloc_pages+0x50/0x90 [ 667.362620][T11581] ? __pfx_snd_dma_vmalloc_alloc+0x10/0x10 [ 667.362655][T11581] __snd_dma_alloc_pages+0x50/0x90 [ 667.362687][T11581] snd_dma_alloc_dir_pages+0x151/0x240 [ 667.362732][T11581] do_alloc_pages+0x136/0x2d0 [ 667.362767][T11581] snd_pcm_lib_malloc_pages+0x3df/0x980 [ 667.362805][T11581] snd_pcm_hw_params+0x1656/0x1ba0 [ 667.362841][T11581] ? __pfx_snd_pcm_hw_params+0x10/0x10 [ 667.362871][T11581] ? snd_pcm_hw_param_near.constprop.0+0x734/0x8e0 [ 667.362904][T11581] ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10 [ 667.362946][T11581] ? __asan_memset+0x23/0x50 [ 667.362975][T11581] snd_pcm_kernel_ioctl+0x147/0x2e0 [ 667.363008][T11581] snd_pcm_oss_change_params_locked+0x1432/0x3a30 [ 667.363054][T11581] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 667.363101][T11581] ? futex_private_hash_put+0x176/0x300 [ 667.363148][T11581] snd_pcm_oss_make_ready_locked+0xb7/0x130 [ 667.363178][T11581] snd_pcm_oss_write+0x4c3/0xa10 [ 667.363206][T11581] ? bpf_lsm_file_permission+0x9/0x10 [ 667.363240][T11581] ? security_file_permission+0x71/0x210 [ 667.363282][T11581] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 667.363309][T11581] vfs_write+0x2a0/0x11d0 [ 667.363350][T11581] ? __pfx_vfs_write+0x10/0x10 [ 667.363377][T11581] ? do_futex+0x122/0x350 [ 667.363410][T11581] ? __pfx_do_futex+0x10/0x10 [ 667.363446][T11581] ? __pfx___might_resched+0x10/0x10 [ 667.363477][T11581] ? __x64_sys_futex+0x1e0/0x4c0 [ 667.363507][T11581] ? __x64_sys_futex+0x1e9/0x4c0 [ 667.363543][T11581] ksys_write+0x12a/0x250 [ 667.363572][T11581] ? __pfx_ksys_write+0x10/0x10 [ 667.363612][T11581] do_syscall_64+0xcd/0x490 [ 667.363649][T11581] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 667.363675][T11581] RIP: 0033:0x7f877518ebe9 [ 667.363708][T11581] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 667.363735][T11581] RSP: 002b:00007f8775f9f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 667.363761][T11581] RAX: ffffffffffffffda RBX: 00007f87753b5fa0 RCX: 00007f877518ebe9 [ 667.363778][T11581] RDX: 0000000000000001 RSI: 0000200000000080 RDI: 0000000000000005 [ 667.363794][T11581] RBP: 00007f8775211e19 R08: 0000000000000000 R09: 0000000000000000 [ 667.363809][T11581] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 667.363824][T11581] R13: 00007f87753b6038 R14: 00007f87753b5fa0 R15: 00007ffcf0b1c0b8 [ 667.363860][T11581] [ 667.364309][T11581] warn_alloc: 1 callbacks suppressed [ 667.364323][T11581] syz.4.1057: vmalloc error: size 2097152, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 667.944070][T11581] CPU: 0 UID: 0 PID: 11581 Comm: syz.4.1057 Not tainted syzkaller #0 PREEMPT(full) [ 667.944107][T11581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 667.944121][T11581] Call Trace: [ 667.944130][T11581] [ 667.944139][T11581] dump_stack_lvl+0x16c/0x1f0 [ 667.944175][T11581] warn_alloc+0x248/0x3a0 [ 667.944206][T11581] ? __pfx_warn_alloc+0x10/0x10 [ 667.944238][T11581] ? kfree+0x2b4/0x4d0 [ 667.944268][T11581] ? __get_vm_area_node+0x208/0x330 [ 667.944312][T11581] __vmalloc_node_range_noprof+0xb2d/0x14b0 [ 667.944341][T11581] ? __pfx___mutex_trylock_common+0x10/0x10 [ 667.944378][T11581] ? __snd_dma_alloc_pages+0x50/0x90 [ 667.944406][T11581] ? rcu_is_watching+0x12/0xc0 [ 667.944431][T11581] ? trace_contention_end+0xdd/0x130 [ 667.944467][T11581] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 667.944496][T11581] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 667.944532][T11581] ? __snd_dma_alloc_pages+0x50/0x90 [ 667.944559][T11581] __vmalloc_node_noprof+0xad/0xf0 [ 667.944585][T11581] ? __snd_dma_alloc_pages+0x50/0x90 [ 667.944612][T11581] ? __pfx_snd_dma_vmalloc_alloc+0x10/0x10 [ 667.944642][T11581] __snd_dma_alloc_pages+0x50/0x90 [ 667.944671][T11581] snd_dma_alloc_dir_pages+0x151/0x240 [ 667.944704][T11581] do_alloc_pages+0x136/0x2d0 [ 667.944736][T11581] snd_pcm_lib_malloc_pages+0x3df/0x980 [ 667.944769][T11581] snd_pcm_hw_params+0x1656/0x1ba0 [ 667.944803][T11581] ? __pfx_snd_pcm_hw_params+0x10/0x10 [ 667.944831][T11581] ? snd_pcm_hw_param_near.constprop.0+0x734/0x8e0 [ 667.944861][T11581] ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10 [ 667.944908][T11581] ? __asan_memset+0x23/0x50 [ 667.944935][T11581] snd_pcm_kernel_ioctl+0x147/0x2e0 [ 667.944964][T11581] snd_pcm_oss_change_params_locked+0x1432/0x3a30 [ 667.945006][T11581] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 667.945050][T11581] ? futex_private_hash_put+0x176/0x300 [ 667.945085][T11581] snd_pcm_oss_make_ready_locked+0xb7/0x130 [ 667.945113][T11581] snd_pcm_oss_write+0x4c3/0xa10 [ 667.945140][T11581] ? bpf_lsm_file_permission+0x9/0x10 [ 667.945172][T11581] ? security_file_permission+0x71/0x210 [ 667.945211][T11581] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 667.945234][T11581] vfs_write+0x2a0/0x11d0 [ 667.945271][T11581] ? __pfx_vfs_write+0x10/0x10 [ 667.945295][T11581] ? do_futex+0x122/0x350 [ 667.945324][T11581] ? __pfx_do_futex+0x10/0x10 [ 667.945357][T11581] ? __pfx___might_resched+0x10/0x10 [ 667.945386][T11581] ? __x64_sys_futex+0x1e0/0x4c0 [ 667.945414][T11581] ? __x64_sys_futex+0x1e9/0x4c0 [ 667.945448][T11581] ksys_write+0x12a/0x250 [ 667.945475][T11581] ? __pfx_ksys_write+0x10/0x10 [ 667.945513][T11581] do_syscall_64+0xcd/0x490 [ 667.945547][T11581] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 667.945571][T11581] RIP: 0033:0x7f877518ebe9 [ 667.945591][T11581] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 667.945615][T11581] RSP: 002b:00007f8775f9f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 667.945637][T11581] RAX: ffffffffffffffda RBX: 00007f87753b5fa0 RCX: 00007f877518ebe9 [ 667.945653][T11581] RDX: 0000000000000001 RSI: 0000200000000080 RDI: 0000000000000005 [ 667.945667][T11581] RBP: 00007f8775211e19 R08: 0000000000000000 R09: 0000000000000000 [ 667.945682][T11581] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 667.945695][T11581] R13: 00007f87753b6038 R14: 00007f87753b5fa0 R15: 00007ffcf0b1c0b8 [ 667.945730][T11581] [ 667.945770][T11581] Mem-Info: [ 668.330708][T11581] active_anon:40106 inactive_anon:26 isolated_anon:200 [ 668.330708][T11581] active_file:16258 inactive_file:40645 isolated_file:0 [ 668.330708][T11581] unevictable:568 dirty:132 writeback:0 [ 668.330708][T11581] slab_reclaimable:11853 slab_unreclaimable:99805 [ 668.330708][T11581] mapped:36302 shmem:27760 pagetables:1362 [ 668.330708][T11581] sec_pagetables:0 bounce:0 [ 668.330708][T11581] kernel_misc_reclaimable:0 [ 668.330708][T11581] free:1249099 free_pcp:23422 free_cma:0 [ 668.470827][T11581] Node 0 active_anon:150824kB inactive_anon:104kB active_file:65032kB inactive_file:162392kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:145208kB dirty:624kB writeback:0kB shmem:103704kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:2048kB kernel_stack:12864kB pagetables:5388kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 668.601348][T11581] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:188kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:80kB pagetables:160kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 668.960838][T11581] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 669.027128][T11581] lowmem_reserve[]: 0 2480 2481 2481 2481 [ 669.112038][T11581] Node 0 DMA32 free:1110276kB boost:0kB min:34076kB low:42592kB high:51108kB reserved_highatomic:0KB free_highatomic:0KB active_anon:109700kB inactive_anon:1528kB active_file:65496kB inactive_file:161112kB unevictable:1536kB writepending:208kB present:3129332kB managed:2539588kB mlocked:0kB bounce:0kB free_pcp:94488kB local_pcp:48504kB free_cma:0kB [ 669.148919][T11581] lowmem_reserve[]: 0 0 1 1 1 [ 669.155045][T11581] Node 0 Normal free:20kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1316kB unevictable:0kB writepending:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 669.201361][T11581] lowmem_reserve[]: 0 0 0 0 0 [ 669.211006][T11581] Node 1 Normal free:3916512kB boost:0kB min:55804kB low:69752kB high:83700kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:188kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:1028kB local_pcp:980kB free_cma:0kB [ 669.313110][T11581] lowmem_reserve[]: 0 0 0 0 0 [ 669.317967][T11581] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 669.333876][T11581] Node 0 DMA32: 4875*4kB (UME) 1312*8kB (UME) 135*16kB (UME) 600*32kB (UME) 184*64kB (UME) 91*128kB (UME) 164*256kB (UME) 56*512kB (UME) 22*1024kB (UME) 11*2048kB (UME) 229*4096kB (M) = 1128476kB [ 669.377129][T11581] Node 0 Normal: 3*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20kB [ 669.440805][T11581] Node 1 Normal: 206*4kB (UME) 61*8kB (UME) 36*16kB (UME) 226*32kB (UME) 111*64kB (UME) 33*128kB (UME) 13*256kB (UME) 3*512kB (UME) 2*1024kB (UM) 3*2048kB (ME) 948*4096kB (UM) = 3916512kB [ 669.495892][T11608] bond0: option all_slaves_active: invalid value () [ 669.504464][T11581] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 669.533727][T11581] Node 0 hugepages_total=4 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 669.554964][T11581] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 669.585290][T11581] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 669.650725][T11581] 69119 total pagecache pages [ 669.686803][T11581] 42 pages in swap cache [ 669.698351][T11581] Free swap = 124788kB [ 669.717828][T11581] Total swap = 124996kB [ 669.735286][T11581] 2097051 pages RAM [ 669.739368][T11581] 0 pages HighMem/MovableOnly [ 669.759792][T11581] 430192 pages reserved [ 669.764448][T11581] 0 pages cma reserved [ 669.884766][T11623] vhci_hcd: invalid port number 255 [ 669.921037][T11623] vhci_hcd: default hub control req: 5902 v0001 i00ff l1 [ 670.339956][ C0] unchecked MSR access error: WRMSR to 0x418 (tried to write 0x0000000000000322) at rIP: 0xffffffff8163f829 (__mcheck_cpu_init_clear_banks+0x109/0x1f0) [ 670.355469][ C0] Call Trace: [ 670.358771][ C0] [ 670.361635][ C0] ? __pfx_mce_cpu_restart+0x10/0x10 [ 670.366944][ C0] mce_cpu_restart+0x98/0xb0 [ 670.371541][ C0] __flush_smp_call_function_queue+0x27d/0x8c0 [ 670.377713][ C0] __sysvec_call_function_single+0x87/0x400 [ 670.383617][ C0] sysvec_call_function_single+0x9f/0xc0 [ 670.389280][ C0] [ 670.392333][ C0] [ 670.395275][ C0] asm_sysvec_call_function_single+0x1a/0x20 [ 670.401266][ C0] RIP: 0010:lock_acquire+0x62/0x350 [ 670.406525][ C0] Code: 6f 3e 12 83 f8 07 0f 87 bc 02 00 00 89 c0 48 0f a3 05 d2 21 14 0f 0f 82 74 02 00 00 8b 35 6a 53 14 0f 85 f6 0f 85 8d 00 00 00 <48> 8b 44 24 30 65 48 2b 05 29 6f 3e 12 0f 85 c7 02 00 00 48 83 c4 [ 670.426139][ C0] RSP: 0018:ffffc900043efa28 EFLAGS: 00000206 [ 670.432213][ C0] RAX: 0000000000000046 RBX: ffff88805b7916d8 RCX: ffffffff93e6aac0 [ 670.440198][ C0] RDX: 0000000000000000 RSI: ffffffff8de2760d RDI: ffffffff8c162d00 [ 670.448190][ C0] RBP: 0000000000000000 R08: 09af6506e095525c R09: 0000000000000001 [ 670.456166][ C0] R10: 0000000000000002 R11: 0000000000000000 R12: 0000000000000001 [ 670.464144][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 670.472142][ C0] ? __pfx_batadv_nc_to_purge_nc_path_decoding+0x10/0x10 [ 670.479178][ C0] _raw_spin_lock_bh+0x33/0x40 [ 670.484036][ C0] ? batadv_nc_purge_paths+0xd9/0x3a0 [ 670.489425][ C0] batadv_nc_purge_paths+0xd9/0x3a0 [ 670.494654][ C0] batadv_nc_worker+0x958/0x1030 [ 670.499612][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 670.505432][ C0] ? __pfx_batadv_nc_worker+0x10/0x10 [ 670.510819][ C0] ? rcu_is_watching+0x12/0xc0 [ 670.515612][ C0] process_one_work+0x9cf/0x1b70 [ 670.520576][ C0] ? __pfx_batadv_nc_worker+0x10/0x10 [ 670.525950][ C0] ? __pfx_process_one_work+0x10/0x10 [ 670.531338][ C0] ? assign_work+0x1a0/0x250 [ 670.535940][ C0] worker_thread+0x6c8/0xf10 [ 670.540536][ C0] ? __pfx_worker_thread+0x10/0x10 [ 670.545672][ C0] kthread+0x3c5/0x780 [ 670.549782][ C0] ? __pfx_kthread+0x10/0x10 [ 670.554468][ C0] ? rcu_is_watching+0x12/0xc0 [ 670.559232][ C0] ? __pfx_kthread+0x10/0x10 [ 670.563832][ C0] ret_from_fork+0x5d4/0x6f0 [ 670.568429][ C0] ? __pfx_kthread+0x10/0x10 [ 670.573027][ C0] ret_from_fork_asm+0x1a/0x30 [ 670.577808][ C0] [ 670.657891][T11635] FAULT_INJECTION: forcing a failure. [ 670.657891][T11635] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 670.761169][T11635] CPU: 1 UID: 0 PID: 11635 Comm: syz.1.1070 Not tainted syzkaller #0 PREEMPT(full) [ 670.761202][T11635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 670.761214][T11635] Call Trace: [ 670.761223][T11635] [ 670.761232][T11635] dump_stack_lvl+0x16c/0x1f0 [ 670.761265][T11635] should_fail_ex+0x512/0x640 [ 670.761307][T11635] _copy_to_user+0x32/0xd0 [ 670.761330][T11635] simple_read_from_buffer+0xcb/0x170 [ 670.761357][T11635] proc_fail_nth_read+0x197/0x240 [ 670.761384][T11635] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 670.761412][T11635] ? rw_verify_area+0xcf/0x6c0 [ 670.761433][T11635] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 670.761459][T11635] vfs_read+0x1e4/0xcf0 [ 670.761491][T11635] ? __pfx___mutex_lock+0x10/0x10 [ 670.761521][T11635] ? __pfx_vfs_read+0x10/0x10 [ 670.761556][T11635] ? __fget_files+0x20e/0x3c0 [ 670.761591][T11635] ksys_read+0x12a/0x250 [ 670.761617][T11635] ? __pfx_ksys_read+0x10/0x10 [ 670.761644][T11635] ? fput+0x9b/0xd0 [ 670.761679][T11635] do_syscall_64+0xcd/0x490 [ 670.761713][T11635] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 670.761736][T11635] RIP: 0033:0x7ff4e618d5fc [ 670.761754][T11635] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 670.761776][T11635] RSP: 002b:00007ff4e70ad030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 670.761798][T11635] RAX: ffffffffffffffda RBX: 00007ff4e63b5fa0 RCX: 00007ff4e618d5fc [ 670.761814][T11635] RDX: 000000000000000f RSI: 00007ff4e70ad0a0 RDI: 000000000000000e [ 670.761828][T11635] RBP: 00007ff4e70ad090 R08: 0000000000000000 R09: 0000000000000000 [ 670.761843][T11635] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 670.761856][T11635] R13: 00007ff4e63b6038 R14: 00007ff4e63b5fa0 R15: 00007fff24872308 [ 670.761892][T11635] [ 672.370441][T11642] FAULT_INJECTION: forcing a failure. [ 672.370441][T11642] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 672.389825][T11642] CPU: 1 UID: 0 PID: 11642 Comm: syz.4.1071 Not tainted syzkaller #0 PREEMPT(full) [ 672.389858][T11642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 672.389872][T11642] Call Trace: [ 672.389880][T11642] [ 672.389891][T11642] dump_stack_lvl+0x16c/0x1f0 [ 672.389928][T11642] should_fail_ex+0x512/0x640 [ 672.389968][T11642] should_fail_alloc_page+0xe7/0x130 [ 672.390003][T11642] prepare_alloc_pages+0x3c2/0x610 [ 672.390041][T11642] ? rcu_is_watching+0x12/0xc0 [ 672.390069][T11642] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 672.390099][T11642] ? rcu_is_watching+0x12/0xc0 [ 672.390125][T11642] ? trace_mm_page_alloc+0x11f/0x1a0 [ 672.390164][T11642] ? __alloc_frozen_pages_noprof+0x294/0x23f0 [ 672.390194][T11642] ? stack_trace_save+0x8e/0xc0 [ 672.390223][T11642] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 672.390266][T11642] ? kmem_cache_alloc_node_noprof+0x1d5/0x3b0 [ 672.390296][T11642] ? __get_vm_area_node+0x1ca/0x330 [ 672.390345][T11642] ? __vmalloc_node_noprof+0xad/0xf0 [ 672.390368][T11642] ? __snd_dma_alloc_pages+0x50/0x90 [ 672.390397][T11642] ? snd_dma_alloc_dir_pages+0x151/0x240 [ 672.390425][T11642] ? do_alloc_pages+0x136/0x2d0 [ 672.390450][T11642] ? snd_pcm_lib_malloc_pages+0x3df/0x980 [ 672.390479][T11642] ? snd_pcm_hw_params+0x1656/0x1ba0 [ 672.390507][T11642] ? snd_pcm_kernel_ioctl+0x147/0x2e0 [ 672.390541][T11642] ? do_syscall_64+0xcd/0x490 [ 672.390573][T11642] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 672.390604][T11642] alloc_pages_bulk_noprof+0x71c/0x1410 [ 672.390637][T11642] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 672.390675][T11642] ? policy_nodemask+0xea/0x4e0 [ 672.390708][T11642] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 672.390738][T11642] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 672.390789][T11642] kasan_populate_vmalloc+0xf1/0x1f0 [ 672.390824][T11642] alloc_vmap_area+0x959/0x29c0 [ 672.390869][T11642] ? __pfx_alloc_vmap_area+0x10/0x10 [ 672.390914][T11642] __get_vm_area_node+0x1ca/0x330 [ 672.390960][T11642] __vmalloc_node_range_noprof+0x271/0x14b0 [ 672.390987][T11642] ? __snd_dma_alloc_pages+0x50/0x90 [ 672.391022][T11642] ? __pfx___mutex_trylock_common+0x10/0x10 [ 672.391062][T11642] ? __snd_dma_alloc_pages+0x50/0x90 [ 672.391090][T11642] ? rcu_is_watching+0x12/0xc0 [ 672.391116][T11642] ? trace_contention_end+0xdd/0x130 [ 672.391155][T11642] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 672.391187][T11642] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 672.391227][T11642] ? __snd_dma_alloc_pages+0x50/0x90 [ 672.391257][T11642] __vmalloc_node_noprof+0xad/0xf0 [ 672.391281][T11642] ? __snd_dma_alloc_pages+0x50/0x90 [ 672.391310][T11642] ? __pfx_snd_dma_vmalloc_alloc+0x10/0x10 [ 672.391353][T11642] __snd_dma_alloc_pages+0x50/0x90 [ 672.391385][T11642] snd_dma_alloc_dir_pages+0x151/0x240 [ 672.391421][T11642] do_alloc_pages+0x136/0x2d0 [ 672.391458][T11642] snd_pcm_lib_malloc_pages+0x3df/0x980 [ 672.391495][T11642] snd_pcm_hw_params+0x1656/0x1ba0 [ 672.391531][T11642] ? __pfx_snd_pcm_hw_params+0x10/0x10 [ 672.391563][T11642] ? snd_pcm_hw_param_near.constprop.0+0x734/0x8e0 [ 672.391593][T11642] ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10 [ 672.391635][T11642] ? __asan_memset+0x23/0x50 [ 672.391664][T11642] snd_pcm_kernel_ioctl+0x147/0x2e0 [ 672.391698][T11642] snd_pcm_oss_change_params_locked+0x1432/0x3a30 [ 672.391743][T11642] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 672.391771][T11642] ? __pfx___futex_wait+0x10/0x10 [ 672.391815][T11642] ? __pfx_futex_wake_mark+0x10/0x10 [ 672.391859][T11642] ? futex_private_hash_put+0x176/0x300 [ 672.391895][T11642] snd_pcm_oss_make_ready_locked+0xb7/0x130 [ 672.391926][T11642] snd_pcm_oss_write+0x4c3/0xa10 [ 672.391955][T11642] ? bpf_lsm_file_permission+0x9/0x10 [ 672.391991][T11642] ? security_file_permission+0x71/0x210 [ 672.392032][T11642] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 672.392057][T11642] vfs_write+0x2a0/0x11d0 [ 672.392151][T11642] ? __pfx_vfs_write+0x10/0x10 [ 672.392184][T11642] ? find_held_lock+0x2b/0x80 [ 672.392212][T11642] ? __fget_files+0x204/0x3c0 [ 672.392251][T11642] ? __fget_files+0x20e/0x3c0 [ 672.392290][T11642] ksys_write+0x12a/0x250 [ 672.392321][T11642] ? __pfx_ksys_write+0x10/0x10 [ 672.392363][T11642] do_syscall_64+0xcd/0x490 [ 672.392401][T11642] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 672.392442][T11642] RIP: 0033:0x7f877518ebe9 [ 672.392465][T11642] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 672.392491][T11642] RSP: 002b:00007f8775f9f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 672.392516][T11642] RAX: ffffffffffffffda RBX: 00007f87753b5fa0 RCX: 00007f877518ebe9 [ 672.392535][T11642] RDX: 0000000000000001 RSI: 0000200000000080 RDI: 0000000000000008 [ 672.392551][T11642] RBP: 00007f8775211e19 R08: 0000000000000000 R09: 0000000000000000 [ 672.392568][T11642] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 672.392584][T11642] R13: 00007f87753b6038 R14: 00007f87753b5fa0 R15: 00007ffcf0b1c0b8 [ 672.392618][T11642] [ 672.960544][T11671] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1077'. [ 674.707246][T11696] ALSA: mixer_oss: invalid OSS volume '' [ 676.128193][T11730] random: crng reseeded on system resumption [ 676.480761][T11735] __vm_enough_memory: pid: 11735, comm: syz.2.1088, bytes: 4398046511104 not enough memory for the allocation [ 676.935493][T11717] FAULT_INJECTION: forcing a failure. [ 676.935493][T11717] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 677.007777][T11717] CPU: 1 UID: 0 PID: 11717 Comm: syz.5.1085 Not tainted syzkaller #0 PREEMPT(full) [ 677.007815][T11717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 677.007831][T11717] Call Trace: [ 677.007840][T11717] [ 677.007850][T11717] dump_stack_lvl+0x16c/0x1f0 [ 677.007891][T11717] should_fail_ex+0x512/0x640 [ 677.007932][T11717] should_fail_alloc_page+0xe7/0x130 [ 677.007969][T11717] prepare_alloc_pages+0x3c2/0x610 [ 677.008008][T11717] ? rcu_is_watching+0x12/0xc0 [ 677.008039][T11717] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 677.008076][T11717] ? rcu_is_watching+0x12/0xc0 [ 677.008102][T11717] ? trace_mm_page_alloc+0x11f/0x1a0 [ 677.008143][T11717] ? __alloc_frozen_pages_noprof+0x294/0x23f0 [ 677.008175][T11717] ? stack_trace_save+0x8e/0xc0 [ 677.008206][T11717] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 677.008251][T11717] ? kmem_cache_alloc_node_noprof+0x1d5/0x3b0 [ 677.008282][T11717] ? __get_vm_area_node+0x1ca/0x330 [ 677.008318][T11717] ? __vmalloc_node_noprof+0xad/0xf0 [ 677.008340][T11717] ? __snd_dma_alloc_pages+0x50/0x90 [ 677.008369][T11717] ? snd_dma_alloc_dir_pages+0x151/0x240 [ 677.008398][T11717] ? do_alloc_pages+0x136/0x2d0 [ 677.008423][T11717] ? snd_pcm_lib_malloc_pages+0x3df/0x980 [ 677.008451][T11717] ? snd_pcm_hw_params+0x1656/0x1ba0 [ 677.008479][T11717] ? snd_pcm_kernel_ioctl+0x147/0x2e0 [ 677.008544][T11717] ? do_syscall_64+0xcd/0x490 [ 677.008579][T11717] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 677.008614][T11717] alloc_pages_bulk_noprof+0x71c/0x1410 [ 677.008644][T11717] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 677.008684][T11717] ? policy_nodemask+0xea/0x4e0 [ 677.008723][T11717] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 677.008755][T11717] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 677.008806][T11717] kasan_populate_vmalloc+0xf1/0x1f0 [ 677.008843][T11717] alloc_vmap_area+0x959/0x29c0 [ 677.008896][T11717] ? __pfx_alloc_vmap_area+0x10/0x10 [ 677.008944][T11717] __get_vm_area_node+0x1ca/0x330 [ 677.008990][T11717] __vmalloc_node_range_noprof+0x271/0x14b0 [ 677.009017][T11717] ? __snd_dma_alloc_pages+0x50/0x90 [ 677.009052][T11717] ? __pfx___mutex_trylock_common+0x10/0x10 [ 677.009092][T11717] ? __snd_dma_alloc_pages+0x50/0x90 [ 677.009122][T11717] ? rcu_is_watching+0x12/0xc0 [ 677.009148][T11717] ? trace_contention_end+0xdd/0x130 [ 677.009186][T11717] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 677.009219][T11717] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 677.009258][T11717] ? __snd_dma_alloc_pages+0x50/0x90 [ 677.009287][T11717] __vmalloc_node_noprof+0xad/0xf0 [ 677.009312][T11717] ? __snd_dma_alloc_pages+0x50/0x90 [ 677.009341][T11717] ? __pfx_snd_dma_vmalloc_alloc+0x10/0x10 [ 677.009376][T11717] __snd_dma_alloc_pages+0x50/0x90 [ 677.009408][T11717] snd_dma_alloc_dir_pages+0x151/0x240 [ 677.009443][T11717] do_alloc_pages+0x136/0x2d0 [ 677.009478][T11717] snd_pcm_lib_malloc_pages+0x3df/0x980 [ 677.009523][T11717] snd_pcm_hw_params+0x1656/0x1ba0 [ 677.009560][T11717] ? __pfx_snd_pcm_hw_params+0x10/0x10 [ 677.009592][T11717] ? snd_pcm_hw_param_near.constprop.0+0x734/0x8e0 [ 677.009626][T11717] ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10 [ 677.009670][T11717] ? __asan_memset+0x23/0x50 [ 677.009699][T11717] snd_pcm_kernel_ioctl+0x147/0x2e0 [ 677.009731][T11717] snd_pcm_oss_change_params_locked+0x1432/0x3a30 [ 677.009775][T11717] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 677.009801][T11717] ? __pfx___futex_wait+0x10/0x10 [ 677.009844][T11717] ? __pfx_futex_wake_mark+0x10/0x10 [ 677.009878][T11717] ? futex_private_hash_put+0x176/0x300 [ 677.009910][T11717] snd_pcm_oss_make_ready_locked+0xb7/0x130 [ 677.009937][T11717] snd_pcm_oss_write+0x4c3/0xa10 [ 677.009967][T11717] ? bpf_lsm_file_permission+0x9/0x10 [ 677.010002][T11717] ? security_file_permission+0x71/0x210 [ 677.010045][T11717] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 677.010071][T11717] vfs_write+0x2a0/0x11d0 [ 677.010109][T11717] ? __pfx_vfs_write+0x10/0x10 [ 677.010136][T11717] ? do_futex+0x122/0x350 [ 677.010168][T11717] ? __pfx_do_futex+0x10/0x10 [ 677.010210][T11717] ? __x64_sys_futex+0x1e0/0x4c0 [ 677.010240][T11717] ? __x64_sys_futex+0x1e9/0x4c0 [ 677.010278][T11717] ksys_write+0x12a/0x250 [ 677.010307][T11717] ? __pfx_ksys_write+0x10/0x10 [ 677.010348][T11717] do_syscall_64+0xcd/0x490 [ 677.010397][T11717] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 677.010424][T11717] RIP: 0033:0x7fea0df8ebe9 [ 677.010446][T11717] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 677.010470][T11717] RSP: 002b:00007fea0c1f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 677.010500][T11717] RAX: ffffffffffffffda RBX: 00007fea0e1b5fa0 RCX: 00007fea0df8ebe9 [ 677.010518][T11717] RDX: 0000000000000001 RSI: 0000200000000080 RDI: 0000000000000004 [ 677.010534][T11717] RBP: 00007fea0e011e19 R08: 0000000000000000 R09: 0000000000000000 [ 677.010551][T11717] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 677.010566][T11717] R13: 00007fea0e1b6038 R14: 00007fea0e1b5fa0 R15: 00007ffd1df9b5c8 [ 677.010603][T11717] [ 678.002300][T11717] warn_alloc: 1 callbacks suppressed [ 678.002319][T11717] syz.5.1085: vmalloc error: size 2097152, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 678.027836][T11717] CPU: 1 UID: 0 PID: 11717 Comm: syz.5.1085 Not tainted syzkaller #0 PREEMPT(full) [ 678.027871][T11717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 678.027885][T11717] Call Trace: [ 678.027893][T11717] [ 678.027903][T11717] dump_stack_lvl+0x16c/0x1f0 [ 678.027943][T11717] warn_alloc+0x248/0x3a0 [ 678.027977][T11717] ? __pfx_warn_alloc+0x10/0x10 [ 678.028010][T11717] ? kfree+0x2b4/0x4d0 [ 678.028040][T11717] ? __get_vm_area_node+0x208/0x330 [ 678.028081][T11717] __vmalloc_node_range_noprof+0xb2d/0x14b0 [ 678.028112][T11717] ? __pfx___mutex_trylock_common+0x10/0x10 [ 678.028151][T11717] ? __snd_dma_alloc_pages+0x50/0x90 [ 678.028181][T11717] ? rcu_is_watching+0x12/0xc0 [ 678.028206][T11717] ? trace_contention_end+0xdd/0x130 [ 678.028245][T11717] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 678.028277][T11717] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 678.028314][T11717] ? __snd_dma_alloc_pages+0x50/0x90 [ 678.028343][T11717] __vmalloc_node_noprof+0xad/0xf0 [ 678.028373][T11717] ? __snd_dma_alloc_pages+0x50/0x90 [ 678.028403][T11717] ? __pfx_snd_dma_vmalloc_alloc+0x10/0x10 [ 678.028437][T11717] __snd_dma_alloc_pages+0x50/0x90 [ 678.028464][T11717] snd_dma_alloc_dir_pages+0x151/0x240 [ 678.028507][T11717] do_alloc_pages+0x136/0x2d0 [ 678.028543][T11717] snd_pcm_lib_malloc_pages+0x3df/0x980 [ 678.028579][T11717] snd_pcm_hw_params+0x1656/0x1ba0 [ 678.028618][T11717] ? __pfx_snd_pcm_hw_params+0x10/0x10 [ 678.028649][T11717] ? snd_pcm_hw_param_near.constprop.0+0x734/0x8e0 [ 678.028766][T11717] ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10 [ 678.028817][T11717] ? __asan_memset+0x23/0x50 [ 678.028848][T11717] snd_pcm_kernel_ioctl+0x147/0x2e0 [ 678.028882][T11717] snd_pcm_oss_change_params_locked+0x1432/0x3a30 [ 678.028930][T11717] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 678.028960][T11717] ? __pfx___futex_wait+0x10/0x10 [ 678.029006][T11717] ? __pfx_futex_wake_mark+0x10/0x10 [ 678.029050][T11717] ? futex_private_hash_put+0x176/0x300 [ 678.029087][T11717] snd_pcm_oss_make_ready_locked+0xb7/0x130 [ 678.029118][T11717] snd_pcm_oss_write+0x4c3/0xa10 [ 678.029148][T11717] ? bpf_lsm_file_permission+0x9/0x10 [ 678.029184][T11717] ? security_file_permission+0x71/0x210 [ 678.029226][T11717] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 678.029252][T11717] vfs_write+0x2a0/0x11d0 [ 678.029291][T11717] ? __pfx_vfs_write+0x10/0x10 [ 678.029318][T11717] ? do_futex+0x122/0x350 [ 678.029353][T11717] ? __pfx_do_futex+0x10/0x10 [ 678.029402][T11717] ? __x64_sys_futex+0x1e0/0x4c0 [ 678.029433][T11717] ? __x64_sys_futex+0x1e9/0x4c0 [ 678.029471][T11717] ksys_write+0x12a/0x250 [ 678.029503][T11717] ? __pfx_ksys_write+0x10/0x10 [ 678.029544][T11717] do_syscall_64+0xcd/0x490 [ 678.029580][T11717] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 678.029603][T11717] RIP: 0033:0x7fea0df8ebe9 [ 678.029623][T11717] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 678.029648][T11717] RSP: 002b:00007fea0c1f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 678.029673][T11717] RAX: ffffffffffffffda RBX: 00007fea0e1b5fa0 RCX: 00007fea0df8ebe9 [ 678.029692][T11717] RDX: 0000000000000001 RSI: 0000200000000080 RDI: 0000000000000004 [ 678.029708][T11717] RBP: 00007fea0e011e19 R08: 0000000000000000 R09: 0000000000000000 [ 678.029722][T11717] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 678.029738][T11717] R13: 00007fea0e1b6038 R14: 00007fea0e1b5fa0 R15: 00007ffd1df9b5c8 [ 678.029770][T11717] [ 678.420483][T11717] Mem-Info: [ 678.423668][T11717] active_anon:33237 inactive_anon:12 isolated_anon:0 [ 678.423668][T11717] active_file:16295 inactive_file:44746 isolated_file:0 [ 678.423668][T11717] unevictable:768 dirty:360 writeback:0 [ 678.423668][T11717] slab_reclaimable:11802 slab_unreclaimable:99463 [ 678.423668][T11717] mapped:43125 shmem:21827 pagetables:1432 [ 678.423668][T11717] sec_pagetables:0 bounce:0 [ 678.423668][T11717] kernel_misc_reclaimable:0 [ 678.423668][T11717] free:1261998 free_pcp:13546 free_cma:0 [ 678.476157][T11717] Node 0 active_anon:130148kB inactive_anon:48kB active_file:65180kB inactive_file:178796kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:173300kB dirty:1436kB writeback:0kB shmem:82972kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:2048kB kernel_stack:12672kB pagetables:5368kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 678.790042][T11717] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:188kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:80kB pagetables:160kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 678.975889][T11717] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 679.212847][T11717] lowmem_reserve[]: 0 2480 2481 2481 2481 [ 679.237088][T11717] Node 0 DMA32 free:1095528kB boost:0kB min:34076kB low:42592kB high:51108kB reserved_highatomic:0KB free_highatomic:0KB active_anon:142952kB inactive_anon:44kB active_file:64220kB inactive_file:161096kB unevictable:1536kB writepending:68kB present:3129332kB managed:2539588kB mlocked:0kB bounce:0kB free_pcp:82180kB local_pcp:11928kB free_cma:0kB [ 679.345742][T11717] lowmem_reserve[]: 0 0 1 1 1 [ 679.439966][T11717] Node 0 Normal free:20kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1316kB unevictable:0kB writepending:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 679.581088][T11717] lowmem_reserve[]: 0 0 0 0 0 [ 679.604085][T11717] Node 1 Normal free:3916304kB boost:0kB min:55804kB low:69752kB high:83700kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:188kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:976kB local_pcp:240kB free_cma:0kB [ 679.748580][T11717] lowmem_reserve[]: 0 0 0 0 0 [ 679.753311][T11717] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 679.859249][T11717] Node 0 DMA32: 384*4kB (UME) 432*8kB (UME) 180*16kB (UE) 309*32kB (UM) 51*64kB (UE) 199*128kB (UME) 164*256kB (UME) 57*512kB (UME) 22*1024kB (UME) 7*2048kB (ME) 226*4096kB (M) = 1080224kB [ 679.935110][T11717] Node 0 Normal: 3*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20kB [ 680.021518][T11717] Node 1 Normal: 186*4kB (UME) 61*8kB (UME) 26*16kB (UME) 219*32kB (UME) 111*64kB (UME) 33*128kB (UME) 14*256kB (UME) 3*512kB (UME) 2*1024kB (UM) 3*2048kB (ME) 948*4096kB (UM) = 3916304kB [ 680.112036][T11717] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 680.152156][T11717] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 680.181188][T11717] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 680.279528][T11717] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 680.350956][T11717] 83117 total pagecache pages [ 680.369273][T11717] 20 pages in swap cache [ 680.387262][T11717] Free swap = 124788kB [ 680.430380][T11717] Total swap = 124996kB [ 680.528213][T11717] 2097051 pages RAM [ 680.548162][T11717] 0 pages HighMem/MovableOnly [ 680.552881][T11717] 430192 pages reserved [ 680.653452][T11717] 0 pages cma reserved [ 682.801869][T11797] FAULT_INJECTION: forcing a failure. [ 682.801869][T11797] name failslab, interval 1, probability 0, space 0, times 0 [ 682.849805][T11797] CPU: 1 UID: 0 PID: 11797 Comm: syz.4.1104 Not tainted syzkaller #0 PREEMPT(full) [ 682.849845][T11797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 682.849862][T11797] Call Trace: [ 682.849872][T11797] [ 682.849882][T11797] dump_stack_lvl+0x16c/0x1f0 [ 682.849925][T11797] should_fail_ex+0x512/0x640 [ 682.849961][T11797] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 682.849995][T11797] should_failslab+0xc2/0x120 [ 682.850038][T11797] __kmalloc_cache_noprof+0x6a/0x3e0 [ 682.850064][T11797] ? allocate_file_region_entries+0x15b/0x620 [ 682.850097][T11797] ? allocate_file_region_entries+0x1a0/0x620 [ 682.850135][T11797] allocate_file_region_entries+0x1a0/0x620 [ 682.850175][T11797] ? __pfx_allocate_file_region_entries+0x10/0x10 [ 682.850220][T11797] region_chg+0x85/0x140 [ 682.850253][T11797] __vma_reservation_common+0x43b/0x740 [ 682.850288][T11797] ? __pfx___vma_reservation_common+0x10/0x10 [ 682.850320][T11797] ? want_pmd_share+0x141/0x180 [ 682.850360][T11797] ? huge_pte_alloc+0x38e/0x5b0 [ 682.850390][T11797] hugetlb_fault+0x2295/0x2f40 [ 682.850424][T11797] ? __pfx_hugetlb_fault+0x10/0x10 [ 682.850466][T11797] ? find_vma+0xbf/0x140 [ 682.850499][T11797] ? __pfx_find_vma+0x10/0x10 [ 682.850537][T11797] handle_mm_fault+0xbfa/0xd10 [ 682.850566][T11797] ? __bpf_trace_exceptions+0x1/0x40 [ 682.850607][T11797] do_user_addr_fault+0x7a6/0x1370 [ 682.850652][T11797] ? rcu_is_watching+0x12/0xc0 [ 682.850684][T11797] exc_page_fault+0x5c/0xb0 [ 682.850717][T11797] asm_exc_page_fault+0x26/0x30 [ 682.850743][T11797] RIP: 0010:__put_user_4+0xd/0x20 [ 682.850776][T11797] Code: 66 89 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca e9 c7 68 03 00 0f 1f 80 00 00 00 00 90 90 90 [ 682.850802][T11797] RSP: 0018:ffffc9000480fdc8 EFLAGS: 00050246 [ 682.850825][T11797] RAX: 0000000020080522 RBX: 0000000000000000 RCX: 0000000000000000 [ 682.850842][T11797] RDX: 0000000000080000 RSI: ffffffff817d0a76 RDI: ffffffff8c162d00 [ 682.850859][T11797] RBP: 0000000000000000 R08: d5e9e978e57f2557 R09: 0000000000000001 [ 682.850875][T11797] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 682.850890][T11797] R13: ffffc9000480fe28 R14: 0000000000000000 R15: 0000000000000000 [ 682.850919][T11797] ? cap_validate_magic+0x86/0x200 [ 682.850952][T11797] cap_validate_magic+0x93/0x200 [ 682.850982][T11797] __do_sys_capget+0xe1/0x540 [ 682.851010][T11797] ? __pfx___do_sys_capget+0x10/0x10 [ 682.851052][T11797] ? __x64_sys_futex+0x1e9/0x4c0 [ 682.851101][T11797] ? rcu_is_watching+0x12/0xc0 [ 682.851125][T11797] do_syscall_64+0xcd/0x490 [ 682.851160][T11797] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 682.851185][T11797] RIP: 0033:0x7f877518ebe9 [ 682.851206][T11797] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 682.851231][T11797] RSP: 002b:00007f8775f7e038 EFLAGS: 00000246 ORIG_RAX: 000000000000007d [ 682.851254][T11797] RAX: ffffffffffffffda RBX: 00007f87753b6090 RCX: 00007f877518ebe9 [ 682.851272][T11797] RDX: 0000000000000000 RSI: 9999999999999999 RDI: 0000000000000000 [ 682.851288][T11797] RBP: 00007f8775211e19 R08: 0000000000000000 R09: 0000000000000000 [ 682.851305][T11797] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 682.851320][T11797] R13: 00007f87753b6128 R14: 00007f87753b6090 R15: 00007ffcf0b1c0b8 [ 682.851356][T11797] [ 687.230179][T11842] block nbd9: NBD_DISCONNECT [ 690.392583][T11867] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1119'. [ 691.193360][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 691.202865][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 693.903663][T11915] block nbd9: NBD_DISCONNECT [ 694.365103][T11927] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1132'. [ 695.589844][T11939] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1133'. [ 698.158644][T11961] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1137'. [ 699.070663][T11970] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1138'. [ 699.735398][T11982] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1141'. [ 702.343272][T12012] netlink: 'syz.1.1144': attribute type 1 has an invalid length. [ 707.849134][T12072] net_ratelimit: 673 callbacks suppressed [ 707.849158][T12072] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 711.447049][T12139] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input21 [ 715.535939][T12161] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 718.114077][T12211] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1184'. [ 718.873736][T12216] netlink: 186 bytes leftover after parsing attributes in process `syz.2.1185'. [ 719.204672][ T7601] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 719.882006][ T7601] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 721.694637][T12249] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 721.717577][T12249] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 721.742796][T12249] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 721.746413][T12242] netlink: 144 bytes leftover after parsing attributes in process `syz.5.1193'. [ 721.761153][T12249] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 721.783467][T12249] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 722.441056][ T7601] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 722.899433][ T7601] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 723.669685][T12267] netlink: 186 bytes leftover after parsing attributes in process `syz.4.1198'. [ 723.903004][T12249] Bluetooth: hci0: command tx timeout [ 724.263914][T12278] syz.4.1200(12278): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 724.448100][T12279] netlink: 338 bytes leftover after parsing attributes in process `syz.4.1200'. [ 726.018295][T12249] Bluetooth: hci0: command tx timeout [ 726.957732][T12249] Bluetooth: hci5: unexpected subevent 0x01 length: 123 > 18 [ 728.070781][T12249] Bluetooth: hci0: command tx timeout [ 729.022714][T12249] Bluetooth: hci5: command 0x0c1a tx timeout [ 729.841043][ T7601] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 729.876073][ T7601] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 729.890401][ T7601] bond0 (unregistering): Released all slaves [ 729.927268][T12279] bridge0: port 2(bridge_slave_1) entered disabled state [ 729.936701][T12279] bridge0: port 1(bridge_slave_0) entered disabled state [ 730.146773][T12249] Bluetooth: hci0: command tx timeout [ 730.344826][T12248] chnl_net:caif_netlink_parms(): no params data found [ 730.417527][T12343] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input22 [ 732.851785][T12343] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 732.873201][T12343] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 732.887266][T12343] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 734.140454][ T7601] hsr_slave_0: left promiscuous mode [ 734.161248][ T7601] hsr_slave_1: left promiscuous mode [ 734.177593][T12395] FAULT_INJECTION: forcing a failure. [ 734.177593][T12395] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 734.195220][T12395] CPU: 1 UID: 0 PID: 12395 Comm: syz.4.1216 Not tainted syzkaller #0 PREEMPT(full) [ 734.195258][T12395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 734.195274][T12395] Call Trace: [ 734.195285][T12395] [ 734.195296][T12395] dump_stack_lvl+0x16c/0x1f0 [ 734.195337][T12395] should_fail_ex+0x512/0x640 [ 734.195380][T12395] should_fail_alloc_page+0xe7/0x130 [ 734.195415][T12395] prepare_alloc_pages+0x3c2/0x610 [ 734.195459][T12395] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 734.195500][T12395] ? find_held_lock+0x2b/0x80 [ 734.195529][T12395] ? is_bpf_text_address+0x8a/0x1a0 [ 734.195559][T12395] ? bpf_ksym_find+0x124/0x1c0 [ 734.195587][T12395] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 734.195616][T12395] ? is_bpf_text_address+0x94/0x1a0 [ 734.195658][T12395] ? __kernel_text_address+0xd/0x40 [ 734.195683][T12395] ? unwind_get_return_address+0x59/0xa0 [ 734.195729][T12395] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 734.195772][T12395] ? policy_nodemask+0xea/0x4e0 [ 734.195809][T12395] alloc_pages_mpol+0x1fb/0x550 [ 734.195845][T12395] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 734.195874][T12395] ? kasan_save_stack+0x33/0x60 [ 734.195903][T12395] ? __kasan_kmalloc+0xaa/0xb0 [ 734.195930][T12395] ? __get_vm_area_node+0x101/0x330 [ 734.195973][T12395] alloc_pages_noprof+0x131/0x390 [ 734.196009][T12395] get_free_pages_noprof+0x10/0xb0 [ 734.196044][T12395] kasan_populate_vmalloc+0x89/0x1f0 [ 734.196082][T12395] alloc_vmap_area+0x959/0x29c0 [ 734.196136][T12395] ? __pfx_alloc_vmap_area+0x10/0x10 [ 734.196184][T12395] __get_vm_area_node+0x1ca/0x330 [ 734.196231][T12395] __vmalloc_node_range_noprof+0x271/0x14b0 [ 734.196258][T12395] ? n_tty_open+0x1a/0x170 [ 734.196295][T12395] ? look_up_lock_class+0x6b/0x150 [ 734.196338][T12395] ? n_tty_open+0x1a/0x170 [ 734.196385][T12395] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 734.196416][T12395] ? console_unlock+0x184/0x210 [ 734.196443][T12395] ? __pfx_console_unlock+0x10/0x10 [ 734.196473][T12395] ? __pfx___ldsem_down_write_nested+0x10/0x10 [ 734.196519][T12395] ? n_tty_open+0x1a/0x170 [ 734.196556][T12395] __vmalloc_node_noprof+0xad/0xf0 [ 734.196581][T12395] ? n_tty_open+0x1a/0x170 [ 734.196617][T12395] ? __pfx_n_tty_open+0x10/0x10 [ 734.196666][T12395] n_tty_open+0x1a/0x170 [ 734.196704][T12395] ? __pfx_n_tty_open+0x10/0x10 [ 734.196744][T12395] tty_ldisc_open+0x9f/0x120 [ 734.196778][T12395] tty_ldisc_setup+0x40/0x100 [ 734.196813][T12395] tty_init_dev.part.0+0x1ec/0x500 [ 734.196853][T12395] tty_open+0xa50/0xf90 [ 734.196898][T12395] ? __pfx_tty_open+0x10/0x10 [ 734.196934][T12395] ? chrdev_open+0x58c/0x6a0 [ 734.196972][T12395] ? __pfx_tty_open+0x10/0x10 [ 734.197007][T12395] chrdev_open+0x234/0x6a0 [ 734.197041][T12395] ? __pfx_chrdev_open+0x10/0x10 [ 734.197077][T12395] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 734.197115][T12395] do_dentry_open+0x982/0x1530 [ 734.197148][T12395] ? __pfx_chrdev_open+0x10/0x10 [ 734.197188][T12395] vfs_open+0x82/0x3f0 [ 734.197232][T12395] path_openat+0x1de4/0x2cb0 [ 734.197276][T12395] ? __pfx_path_openat+0x10/0x10 [ 734.197319][T12395] do_filp_open+0x20b/0x470 [ 734.197350][T12395] ? __pfx_do_filp_open+0x10/0x10 [ 734.197408][T12395] ? alloc_fd+0x471/0x7d0 [ 734.197447][T12395] do_sys_openat2+0x11b/0x1d0 [ 734.197485][T12395] ? __pfx_do_sys_openat2+0x10/0x10 [ 734.197539][T12395] __x64_sys_openat+0x174/0x210 [ 734.197579][T12395] ? __pfx___x64_sys_openat+0x10/0x10 [ 734.197634][T12395] do_syscall_64+0xcd/0x490 [ 734.197679][T12395] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 734.197706][T12395] RIP: 0033:0x7f877518ebe9 [ 734.197730][T12395] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 734.197756][T12395] RSP: 002b:00007f8775f7e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 734.197781][T12395] RAX: ffffffffffffffda RBX: 00007f87753b6090 RCX: 00007f877518ebe9 [ 734.197800][T12395] RDX: 0000000000101e81 RSI: 0000200000000400 RDI: ffffffffffffff9c [ 734.197819][T12395] RBP: 00007f8775211e19 R08: 0000000000000000 R09: 0000000000000000 [ 734.197836][T12395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 734.197852][T12395] R13: 00007f87753b6128 R14: 00007f87753b6090 R15: 00007ffcf0b1c0b8 [ 734.197890][T12395] [ 734.197959][T12395] syz.4.1216: vmalloc error: size 9128, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 734.641410][T12395] CPU: 1 UID: 0 PID: 12395 Comm: syz.4.1216 Not tainted syzkaller #0 PREEMPT(full) [ 734.641442][T12395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 734.641455][T12395] Call Trace: [ 734.641463][T12395] [ 734.641472][T12395] dump_stack_lvl+0x16c/0x1f0 [ 734.641510][T12395] warn_alloc+0x248/0x3a0 [ 734.641544][T12395] ? __pfx_warn_alloc+0x10/0x10 [ 734.641577][T12395] ? kfree+0x2b4/0x4d0 [ 734.641610][T12395] ? __get_vm_area_node+0x208/0x330 [ 734.641655][T12395] __vmalloc_node_range_noprof+0xb2d/0x14b0 [ 734.641686][T12395] ? look_up_lock_class+0x6b/0x150 [ 734.641724][T12395] ? n_tty_open+0x1a/0x170 [ 734.641768][T12395] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 734.641791][T12395] ? console_unlock+0x184/0x210 [ 734.641814][T12395] ? __pfx_console_unlock+0x10/0x10 [ 734.641838][T12395] ? __pfx___ldsem_down_write_nested+0x10/0x10 [ 734.641876][T12395] ? n_tty_open+0x1a/0x170 [ 734.641909][T12395] __vmalloc_node_noprof+0xad/0xf0 [ 734.641933][T12395] ? n_tty_open+0x1a/0x170 [ 734.641968][T12395] ? __pfx_n_tty_open+0x10/0x10 [ 734.642005][T12395] n_tty_open+0x1a/0x170 [ 734.642041][T12395] ? __pfx_n_tty_open+0x10/0x10 [ 734.642076][T12395] tty_ldisc_open+0x9f/0x120 [ 734.642106][T12395] tty_ldisc_setup+0x40/0x100 [ 734.642138][T12395] tty_init_dev.part.0+0x1ec/0x500 [ 734.642175][T12395] tty_open+0xa50/0xf90 [ 734.642216][T12395] ? __pfx_tty_open+0x10/0x10 [ 734.642252][T12395] ? chrdev_open+0x58c/0x6a0 [ 734.642306][T12395] ? __pfx_tty_open+0x10/0x10 [ 734.642340][T12395] chrdev_open+0x234/0x6a0 [ 734.642375][T12395] ? __pfx_chrdev_open+0x10/0x10 [ 734.642413][T12395] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 734.642448][T12395] do_dentry_open+0x982/0x1530 [ 734.642482][T12395] ? __pfx_chrdev_open+0x10/0x10 [ 734.642520][T12395] vfs_open+0x82/0x3f0 [ 734.642560][T12395] path_openat+0x1de4/0x2cb0 [ 734.642604][T12395] ? __pfx_path_openat+0x10/0x10 [ 734.642643][T12395] do_filp_open+0x20b/0x470 [ 734.642671][T12395] ? __pfx_do_filp_open+0x10/0x10 [ 734.642733][T12395] ? alloc_fd+0x471/0x7d0 [ 734.642778][T12395] do_sys_openat2+0x11b/0x1d0 [ 734.642813][T12395] ? __pfx_do_sys_openat2+0x10/0x10 [ 734.642865][T12395] __x64_sys_openat+0x174/0x210 [ 734.642901][T12395] ? __pfx___x64_sys_openat+0x10/0x10 [ 734.642953][T12395] do_syscall_64+0xcd/0x490 [ 734.642989][T12395] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 734.643015][T12395] RIP: 0033:0x7f877518ebe9 [ 734.643036][T12395] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 734.643062][T12395] RSP: 002b:00007f8775f7e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 734.643087][T12395] RAX: ffffffffffffffda RBX: 00007f87753b6090 RCX: 00007f877518ebe9 [ 734.643104][T12395] RDX: 0000000000101e81 RSI: 0000200000000400 RDI: ffffffffffffff9c [ 734.643120][T12395] RBP: 00007f8775211e19 R08: 0000000000000000 R09: 0000000000000000 [ 734.643134][T12395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 734.643148][T12395] R13: 00007f87753b6128 R14: 00007f87753b6090 R15: 00007ffcf0b1c0b8 [ 734.643182][T12395] [ 734.959332][ T7601] veth1_macvtap: left promiscuous mode [ 734.973919][ T7601] veth0_macvtap: left promiscuous mode [ 735.040914][T12395] Mem-Info: [ 735.052494][T12395] active_anon:12412 inactive_anon:10 isolated_anon:0 [ 735.052494][T12395] active_file:17147 inactive_file:40380 isolated_file:0 [ 735.052494][T12395] unevictable:768 dirty:648 writeback:0 [ 735.052494][T12395] slab_reclaimable:12101 slab_unreclaimable:100858 [ 735.052494][T12395] mapped:38524 shmem:1364 pagetables:1360 [ 735.052494][T12395] sec_pagetables:0 bounce:0 [ 735.052494][T12395] kernel_misc_reclaimable:0 [ 735.052494][T12395] free:1272166 free_pcp:25812 free_cma:0 [ 735.153292][T12395] Node 0 active_anon:49672kB inactive_anon:40kB active_file:68588kB inactive_file:161432kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:154260kB dirty:2588kB writeback:0kB shmem:3924kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:2048kB kernel_stack:12904kB pagetables:5316kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 735.194152][T12395] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:188kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:80kB pagetables:160kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 735.235615][T12395] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 735.285761][T12395] lowmem_reserve[]: 0 2480 2481 2481 2481 [ 735.306938][T12395] Node 0 DMA32 free:1215076kB boost:0kB min:34076kB low:42592kB high:51108kB reserved_highatomic:0KB free_highatomic:0KB active_anon:49636kB inactive_anon:40kB active_file:68588kB inactive_file:160116kB unevictable:1536kB writepending:2684kB present:3129332kB managed:2539588kB mlocked:0kB bounce:0kB free_pcp:41568kB local_pcp:15444kB free_cma:0kB [ 735.358803][T12395] lowmem_reserve[]: 0 0 1 1 1 [ 735.377410][T12395] Node 0 Normal free:20kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1316kB unevictable:0kB writepending:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 735.412769][T12395] lowmem_reserve[]: 0 0 0 0 0 [ 735.417869][T12395] Node 1 Normal free:3859332kB boost:0kB min:55804kB low:69752kB high:83700kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:188kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:58316kB local_pcp:25460kB free_cma:0kB [ 735.452417][T12395] lowmem_reserve[]: 0 0 0 0 0 [ 735.457388][T12395] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 735.470589][T12395] Node 0 DMA32: 1296*4kB (UME) 1280*8kB (ME) 963*16kB (ME) 820*32kB (UME) 688*64kB (UME) 393*128kB (UME) 195*256kB (UME) 74*512kB (UME) 32*1024kB (UME) 10*2048kB (UME) 225*4096kB (UM) = 1214064kB [ 735.490757][T12395] Node 0 Normal: 3*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20kB [ 735.503714][T12395] Node 1 Normal: 215*4kB (UME) 65*8kB (UME) 24*16kB (UME) 217*32kB (UME) 114*64kB (UME) 38*128kB (UME) 18*256kB (UME) 6*512kB (UME) 5*1024kB (UM) 2*2048kB (ME) 933*4096kB (UM) = 3859332kB [ 735.530915][T12395] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 735.541119][T12395] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 735.551042][T12395] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 735.561201][T12395] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 735.571283][T12395] 58933 total pagecache pages [ 735.576337][T12395] 20 pages in swap cache [ 735.580631][T12395] Free swap = 124788kB [ 735.585885][T12395] Total swap = 124996kB [ 735.590324][T12395] 2097051 pages RAM [ 735.594851][T12395] 0 pages HighMem/MovableOnly [ 735.599861][T12395] 430192 pages reserved [ 735.604966][T12395] 0 pages cma reserved [ 735.609709][T12395] tty tty60: ldisc open failed (-12), clearing slot 59 [ 735.990380][ T7601] team0 (unregistering): Port device team_slave_1 removed [ 736.042534][ T7601] team0 (unregistering): Port device team_slave_0 removed [ 736.592083][T12248] bridge0: port 1(bridge_slave_0) entered blocking state [ 736.599540][T12248] bridge0: port 1(bridge_slave_0) entered disabled state [ 736.607286][T12248] bridge_slave_0: entered allmulticast mode [ 736.617313][T12248] bridge_slave_0: entered promiscuous mode [ 736.675971][T12248] bridge0: port 2(bridge_slave_1) entered blocking state [ 736.691340][T12248] bridge0: port 2(bridge_slave_1) entered disabled state [ 736.699307][T12248] bridge_slave_1: entered allmulticast mode [ 736.724482][T12248] bridge_slave_1: entered promiscuous mode [ 736.916949][T12248] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 736.962316][T12248] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 737.059868][T12248] team0: Port device team_slave_0 added [ 737.084106][T12248] team0: Port device team_slave_1 added [ 737.190181][T12248] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 737.197254][T12248] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 737.225710][T12248] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 737.247537][T12248] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 737.279062][T12248] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 737.570306][T12248] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 738.978753][T12248] hsr_slave_0: entered promiscuous mode [ 739.035228][T12248] hsr_slave_1: entered promiscuous mode [ 739.061505][T12248] debugfs: 'hsr0' already exists in 'hsr' [ 739.098343][T12248] Cannot create hsr debugfs directory [ 741.746294][ T31] INFO: task syz-executor:5906 blocked for more than 143 seconds. [ 741.768576][ T31] Not tainted syzkaller #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 741.789220][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 741.862780][ T31] task:syz-executor state:D stack:23368 pid:5906 tgid:5906 ppid:1 task_flags:0x400140 flags:0x00004004 [ 741.887795][ T31] Call Trace: [ 741.891135][ T31] [ 741.894535][ T31] __schedule+0x1190/0x5de0 [ 741.899180][ T31] ? __lock_acquire+0x62e/0x1ce0 [ 741.905142][ T31] ? __pfx___schedule+0x10/0x10 [ 741.910139][ T31] ? find_held_lock+0x2b/0x80 [ 741.915412][ T31] ? schedule+0x2d7/0x3a0 [ 741.919851][ T31] ? nfsd_shutdown_threads+0x5b/0xf0 [ 741.925766][ T31] schedule+0xe7/0x3a0 [ 741.929877][ T31] schedule_preempt_disabled+0x13/0x30 [ 741.935998][ T31] __mutex_lock+0x81b/0x1060 [ 742.017729][ T31] ? __lock_acquire+0x62e/0x1ce0 [ 742.141390][ T31] ? nfsd_shutdown_threads+0x5b/0xf0 [ 742.152806][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 742.158062][ T31] ? net_generic+0xea/0x2a0 [ 742.163136][ T31] ? nfsd_shutdown_threads+0x5b/0xf0 [ 742.168694][ T31] nfsd_shutdown_threads+0x5b/0xf0 [ 742.174957][ T31] nfsd_umount+0x48/0xe0 [ 742.179445][ T31] deactivate_locked_super+0xbe/0x1a0 [ 742.272745][ T31] deactivate_super+0xde/0x100 [ 742.277652][ T31] cleanup_mnt+0x225/0x450 [ 742.282268][ T31] task_work_run+0x14d/0x240 [ 742.318036][ T31] ? __pfx_task_work_run+0x10/0x10 [ 742.337442][ T31] ? __pfx___x64_sys_umount+0x10/0x10 [ 742.343465][ T31] exit_to_user_mode_loop+0xeb/0x110 [ 742.348855][ T31] do_syscall_64+0x3f6/0x490 [ 742.371415][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 742.407052][ T31] RIP: 0033:0x7f81d258ff17 [ 742.411589][ T31] RSP: 002b:00007ffcebaafb48 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 742.425859][ T31] RAX: 0000000000000000 RBX: 00007f81d2611c05 RCX: 00007f81d258ff17 [ 742.436702][ T31] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcebaafc00 [ 742.448522][ T31] RBP: 00007ffcebaafc00 R08: 0000000000000000 R09: 0000000000000000 [ 742.458636][ T31] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffcebab0c90 [ 742.473319][ T31] R13: 00007f81d2611c05 R14: 000000000008e72b R15: 00007ffcebab0cd0 [ 742.481949][ T31] [ 742.507219][ T31] [ 742.507219][ T31] Showing all locks held in the system: [ 742.542847][ T31] 1 lock held by khungtaskd/31: [ 742.597735][ T31] #0: ffffffff8e5c10a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 742.620045][ T31] 3 locks held by kworker/0:3/5844: [ 742.644323][T11361] base_sock_release(ffff88806b8ff200) sk=ffff888033174000 [ 742.649138][ T31] #0: ffff88801b880d48 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 742.669366][ T31] #1: ffffc90003e47d10 ((fqdir_free_work).work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 742.680353][ T31] #2: ffffffff8e5cc500 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x48/0x6e0 [ 742.699063][ T31] 2 locks held by syz-executor/5906: [ 742.705440][ T31] #0: ffff88804231e0e0 (&type->s_umount_key#54){+.+.}-{4:4}, at: deactivate_super+0xd6/0x100 [ 742.719995][ T31] #1: ffffffff8e9d96c8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 742.729996][ T31] 3 locks held by kworker/1:3/5952: [ 742.739734][ T31] #0: ffff88801b880d48 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 742.750981][ T31] #1: ffffc9000459fd10 (deferred_process_work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 742.767735][ T31] #2: ffffffff90386b48 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 742.778626][ T31] 3 locks held by kworker/1:5/5972: [ 742.789818][ T31] #0: ffff88801b880d48 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 742.802199][ T31] #1: ffffc900047ffd10 (free_ipc_work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 742.815572][ T31] #2: ffffffff8e5cc638 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x284/0x3c0 [ 742.825808][ T31] 4 locks held by kworker/u10:11/7601: [ 742.831264][ T31] #0: ffff88801c6fe948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 742.841870][ T31] #1: ffffc9000485fd10 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 742.851921][ T31] #2: ffffffff90370850 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xad/0x890 [ 742.862065][ T31] #3: ffffffff90386b48 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x7e9/0xab0 [ 742.871380][ T31] 3 locks held by kworker/u10:17/8344: [ 742.877077][ T31] #0: ffff88801b889148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 742.888448][ T31] #1: ffffc90003627d10 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 742.899356][ T31] #2: ffffffff90386b48 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0x51/0xc0 [ 742.911952][ T31] 2 locks held by syz.0.582/9109: [ 742.917202][ T31] #0: ffffffff9042a010 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 742.925696][ T31] #1: ffffffff8e9d96c8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0xd5/0x1b10 [ 742.935900][ T31] 2 locks held by getty/10464: [ 742.940676][ T31] #0: ffff88814d8e80a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 742.950795][ T31] #1: ffffc9000356b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 742.961115][ T31] 3 locks held by syz-executor/10629: [ 742.966651][ T31] #0: ffff888030934dc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0x90 [ 742.976494][ T31] #1: ffff8880309340b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x3ae/0x11d0 [ 742.986503][ T31] #2: ffffffff8e5cc638 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a3/0x3c0 [ 742.996847][ T31] 7 locks held by syz-executor/12248: [ 743.002244][ T31] #0: ffff88803515e428 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 743.011358][ T31] #1: ffff888022771088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x510 [ 743.021422][ T31] #2: ffff888144301e18 (kn->active#53){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2b2/0x510 [ 743.031637][ T31] #3: ffffffff8f8f6468 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: new_device_store+0x185/0x730 [ 743.042152][ T31] #4: ffff8880776130e8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4b0 [ 743.051491][ T31] #5: ffff888077612250 (&devlink->lock_key#7){+.+.}-{4:4}, at: nsim_drv_probe+0xd4/0x1520 [ 743.061735][ T31] #6: ffffffff90386b48 (rtnl_mutex){+.+.}-{4:4}, at: register_nexthop_notifier+0x1b/0x70 [ 743.071758][ T31] 2 locks held by syz.2.1224/12460: [ 743.077002][ T31] #0: ffffffff90370850 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x286/0x5f0 [ 743.086500][ T31] #1: ffffffff90386b48 (rtnl_mutex){+.+.}-{4:4}, at: mpls_net_exit+0x83/0x350 [ 743.095840][ T31] 2 locks held by syz.4.1228/12501: [ 743.101144][ T31] #0: ffffffff90370850 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x286/0x5f0 [ 743.110828][ T31] #1: ffffffff90386b48 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x23/0xb0 [ 743.121608][ T31] [ 743.124873][ T31] ============================================= [ 743.124873][ T31] [ 743.175511][ T31] NMI backtrace for cpu 0 [ 743.175533][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 743.175574][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 743.175588][ T31] Call Trace: [ 743.175597][ T31] [ 743.175607][ T31] dump_stack_lvl+0x116/0x1f0 [ 743.175644][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 743.175669][ T31] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 743.175699][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 743.175736][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 743.175766][ T31] watchdog+0xf0e/0x1260 [ 743.175808][ T31] ? __pfx_watchdog+0x10/0x10 [ 743.175839][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 743.175872][ T31] ? __kthread_parkme+0x19e/0x250 [ 743.175903][ T31] ? __pfx_watchdog+0x10/0x10 [ 743.175935][ T31] kthread+0x3c5/0x780 [ 743.175969][ T31] ? __pfx_kthread+0x10/0x10 [ 743.176004][ T31] ? rcu_is_watching+0x12/0xc0 [ 743.176030][ T31] ? __pfx_kthread+0x10/0x10 [ 743.176065][ T31] ret_from_fork+0x5d4/0x6f0 [ 743.176100][ T31] ? __pfx_kthread+0x10/0x10 [ 743.176135][ T31] ret_from_fork_asm+0x1a/0x30 [ 743.176181][ T31] [ 743.176212][ T31] Sending NMI from CPU 0 to CPUs 1: [ 743.302967][ C1] NMI backtrace for cpu 1 [ 743.302989][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 743.303019][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 743.303035][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 743.303072][ C1] Code: fc 64 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 63 61 19 00 fb f4 3c 09 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 743.303097][ C1] RSP: 0018:ffffc90000197df8 EFLAGS: 000002c6 [ 743.303117][ C1] RAX: 00000000002fb9d9 RBX: 0000000000000001 RCX: ffffffff8b90abf9 [ 743.303134][ C1] RDX: 0000000000000000 RSI: ffffffff8de4cac1 RDI: ffffffff8c162d00 [ 743.303151][ C1] RBP: ffffed1003c55b40 R08: 0000000000000001 R09: ffffed10170a6655 [ 743.303167][ C1] R10: ffff8880b85332ab R11: 0000000000000000 R12: 0000000000000001 [ 743.303183][ C1] R13: ffff88801e2ada00 R14: ffffffff90ab8290 R15: 0000000000000000 [ 743.303200][ C1] FS: 0000000000000000(0000) GS:ffff8881247c3000(0000) knlGS:0000000000000000 [ 743.303224][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 743.303241][ C1] CR2: 000055c845e15078 CR3: 000000002f9f6000 CR4: 00000000003526f0 [ 743.303257][ C1] Call Trace: [ 743.303266][ C1] [ 743.303274][ C1] default_idle+0x13/0x20 [ 743.303315][ C1] default_idle_call+0x6d/0xb0 [ 743.303351][ C1] do_idle+0x391/0x510 [ 743.303377][ C1] ? __pfx_do_idle+0x10/0x10 [ 743.303402][ C1] ? trace_sched_exit_tp+0x2f/0x120 [ 743.303443][ C1] cpu_startup_entry+0x4f/0x60 [ 743.303468][ C1] start_secondary+0x21d/0x2b0 [ 743.303503][ C1] ? __pfx_start_secondary+0x10/0x10 [ 743.303540][ C1] common_startup_64+0x13e/0x148 [ 743.303576][ C1] [ 743.317819][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 743.317843][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 743.317872][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 743.317888][ T31] Call Trace: [ 743.317897][ T31] [ 743.317908][ T31] dump_stack_lvl+0x3d/0x1f0 [ 743.317944][ T31] vpanic+0x6e8/0x7a0 [ 743.317979][ T31] ? __pfx_vpanic+0x10/0x10 [ 743.318022][ T31] panic+0xca/0xd0 [ 743.318054][ T31] ? __pfx_panic+0x10/0x10 [ 743.318088][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 743.318124][ T31] ? nmi_trigger_cpumask_backtrace+0x1b1/0x300 [ 743.318151][ T31] ? watchdog+0xd78/0x1260 [ 743.318184][ T31] ? watchdog+0xd6b/0x1260 [ 743.318219][ T31] watchdog+0xd89/0x1260 [ 743.318258][ T31] ? __pfx_watchdog+0x10/0x10 [ 743.318299][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 743.318332][ T31] ? __kthread_parkme+0x19e/0x250 [ 743.318364][ T31] ? __pfx_watchdog+0x10/0x10 [ 743.318397][ T31] kthread+0x3c5/0x780 [ 743.318431][ T31] ? __pfx_kthread+0x10/0x10 [ 743.318467][ T31] ? rcu_is_watching+0x12/0xc0 [ 743.318493][ T31] ? __pfx_kthread+0x10/0x10 [ 743.318528][ T31] ret_from_fork+0x5d4/0x6f0 [ 743.318562][ T31] ? __pfx_kthread+0x10/0x10 [ 743.318596][ T31] ret_from_fork_asm+0x1a/0x30 [ 743.318640][ T31] [ 743.617307][ T31] Kernel Offset: disabled [ 743.621696][ T31] Rebooting in 86400 seconds..