last executing test programs: 10.9923952s ago: executing program 1 (id=1891): openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, 0x0, 0x40000, 0x0) bpf$auto(0x6, 0xffffffffffffffff, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0xfff, 0x5, 0x10, 0x0) socket(0x15, 0x5, 0x0) madvise$auto(0x4, 0x7, 0x100000000) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x9, 0x3ff57696, 0x9b72, 0x2, 0x8000000000008000) mmap$auto(0x8000000000, 0xc3a, 0xe2, 0x9b72, 0x7, 0x1000) fsopen$auto(0x0, 0x1) syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x5, 0x2) clone$auto(0x9001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x6) prctl$auto(0x43, 0x17, 0x0, 0x0, 0x0) flock$auto(0x6, 0x1) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x59, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x1c9002, 0x0) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x8001, 0x2) shmget$auto(0xa, 0x10563, 0x568d1af2) 10.896101792s ago: executing program 3 (id=1892): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x26, 0x1, 0x300) r0 = openat$auto_suspend_stats_fops_(0xffffffffffffff9c, &(0x7f0000000080), 0x440, 0x0) pread64$auto(r0, &(0x7f00000000c0)='/dev/nvme-fabrics\x00', 0x10, 0x9) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/bdi/43:256/min_ratio\x00', 0x181802, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000480)={{&(0x7f0000000000), 0x5aa, &(0x7f0000000100)={&(0x7f0000000380)='C', 0x49}, 0x8, &(0x7f0000000300), 0x6, 0x1000}, 0x5}, 0x2, 0xfd) socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000000040)='./file0\x00', 0x44, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0) mmap$auto(0x4000000, 0x4020009, 0x6, 0x15, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) syz_clone3(&(0x7f00000001c0)={0x129050100, 0x0, 0x0, 0x0, {0x4000031}, 0x0, 0x0, 0x0, 0x0}, 0x58) mmap$auto(0x0, 0x10000, 0x8000, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x1) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYBLOB="1b0026b58900fddbdf25030000002c00038028000180240006801d2074804cfe4d8088a8d00000080000040003002a9d272f660400338000000004000380040002824eb7ffa0ead772315c9d4591925a87a5fe624f54350e63339dc82b4e2f492cfc2e"], 0x48}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) madvise$auto(0x0, 0x2003f0, 0x15) 9.563688072s ago: executing program 0 (id=1893): sendmsg$auto_NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, 0x0, 0x24008804) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x401bf, 0x734f, 0x36, 0x67f, 0x1ffde, 0x7, 0x3, 0x20000002, 0xd, 0x3, 0x1, 0x2091, 0xb4, 0x9, 0x6, 0x6, 0x80, 0x4, 0x1cd7, 0x1000, 0x2000, 0x203, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff]}, 0x1fe, 0xd) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) keyctl$auto(0x1d, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x80000000) open(&(0x7f0000000100)='.\x00', 0x591002, 0x408) r0 = socket(0x10, 0x2, 0x0) getcwd$auto(&(0x7f0000000040)='HSR\x00', 0x5) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f0000000140), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) r1 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408) getdents$auto(r1, 0x0, 0x400018) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) write$auto(0x3, 0x0, 0x7ffffffff000) write$auto(0x1, 0x0, 0x80000000) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x8, 0x5) socket(0x2b, 0x1, 0x1) prctl$auto(0xffffffff, 0x28, 0x0, 0xffff, 0x2) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nbd8\x00', 0x200, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000140)='/dev/input/mice\x00', 0x22002, 0x0) write$auto_mousedev_fops_mousedev(r2, 0x0, 0x0) 9.424702101s ago: executing program 3 (id=1894): openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, 0x0, 0x40000, 0x0) bpf$auto(0x6, 0xffffffffffffffff, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0xfff, 0x5, 0x10, 0x0) ioprio_set$auto(0x3, 0x0, 0x4b34) madvise$auto(0x4, 0x7, 0x100000000) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x9, 0x3ff57696, 0x9b72, 0x2, 0x8000000000008000) mmap$auto(0x8000000000, 0xc3a, 0xe2, 0x9b72, 0x7, 0x1000) fsopen$auto(0x0, 0x1) syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x5, 0x2) clone$auto(0x9001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x6) prctl$auto(0x43, 0x17, 0x0, 0x0, 0x0) flock$auto(0x6, 0x1) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x59, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x1c9002, 0x0) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x8001, 0x2) shmget$auto(0xa, 0x10563, 0x568d1af2) 9.003518674s ago: executing program 1 (id=1896): sendmsg$auto_NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, 0x0, 0x24008804) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x401bf, 0x734f, 0x36, 0x67f, 0x1ffde, 0x7, 0x3, 0x20000002, 0xd, 0x3, 0x1, 0x2091, 0xb4, 0x9, 0x6, 0x6, 0x80, 0x4, 0x1cd7, 0x1000, 0x2000, 0x203, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff]}, 0x1fe, 0xd) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x13, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8040) open(&(0x7f0000000100)='.\x00', 0x591002, 0x408) r0 = socket(0x10, 0x2, 0x0) getcwd$auto(&(0x7f0000000040)='HSR\x00', 0x5) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f0000000140), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) r1 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408) getdents$auto(r1, 0x0, 0x400018) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) write$auto(0x3, 0x0, 0x7ffffffff000) write$auto(0x1, 0x0, 0x80000000) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x8, 0x5) socket(0x2b, 0x1, 0x1) prctl$auto(0xffffffff, 0x28, 0x0, 0xffff, 0x2) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nbd8\x00', 0x200, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000140)='/dev/input/mice\x00', 0x22002, 0x0) write$auto_mousedev_fops_mousedev(r2, 0x0, 0x0) 7.65299711s ago: executing program 2 (id=1897): socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0xa, 0x0) r0 = socket(0xa, 0x2, 0x0) r1 = socket(0xa, 0x3, 0xff) connect$auto(r1, &(0x7f00000018c0)=@generic={0xa}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) mmap$auto(0x200, 0x400008, 0x200, 0x9b72, r0, 0x6) openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000001640)='/proc/self/mem\x00', 0x20401, 0x0) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_MACSEC_CMD_DEL_RXSC(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16, @ANYBLOB="010527bd7000fbdbdf250200000008"], 0x34}, 0x1, 0x0, 0x0, 0x4068811}, 0x80) ppoll$auto(&(0x7f0000000080)={0xffffffffffffffff, 0x11b, 0xf}, 0xc, 0x0, 0x0, 0x8) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYBLOB="1e0027"], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) syz_clone3(&(0x7f0000000080)={0x123060000, 0x0, 0x0, 0x0, {0x14}, 0x0, 0x0, 0x0, 0x0}, 0x58) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x20000000000006, 0x2) shmget$auto(0x8, 0x10563, 0x568d1af2) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event2\x00', 0x20081, 0x0) 7.406857166s ago: executing program 0 (id=1898): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x26, 0x1, 0x300) pread64$auto(0xffffffffffffffff, &(0x7f00000000c0)='/dev/nvme-fabrics\x00', 0x10, 0x9) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/bdi/43:256/min_ratio\x00', 0x181802, 0x0) open_by_handle_at$auto(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x1b}, 0x403) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000480)={{&(0x7f0000000000), 0x5aa, &(0x7f0000000100)={&(0x7f0000000380)='C', 0x49}, 0x8, &(0x7f0000000300), 0x6, 0x1000}, 0x5}, 0x2, 0xfd) socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000000040)='./file0\x00', 0x44, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0) mmap$auto(0x4000000, 0x4020009, 0x6, 0x15, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) syz_clone3(&(0x7f00000001c0)={0x129050100, 0x0, 0x0, 0x0, {0x4000031}, 0x0, 0x0, 0x0, 0x0}, 0x58) mmap$auto(0x0, 0x10000, 0x8000, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x1) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYBLOB="1b0026b58900fddbdf25030000002c00038028000180240006801d2074804cfe4d8088a8d00000080000040003002a9d272f660400338000000004000380040002824eb7ffa0ead772315c9d4591925a87a5fe624f54350e63339dc82b4e2f492cfc2e"], 0x48}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) madvise$auto(0x0, 0x2003f0, 0x15) 7.123780364s ago: executing program 3 (id=1899): sendmsg$auto_NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, 0x0, 0x24008804) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x401bf, 0x734f, 0x36, 0x67f, 0x1ffde, 0x7, 0x3, 0x20000002, 0xd, 0x3, 0x1, 0x2091, 0xb4, 0x9, 0x6, 0x6, 0x80, 0x4, 0x1cd7, 0x1000, 0x2000, 0x203, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff]}, 0x1fe, 0xd) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x13, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8040) keyctl$auto(0x1d, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x80000000) open(&(0x7f0000000100)='.\x00', 0x591002, 0x408) getcwd$auto(&(0x7f0000000040)='HSR\x00', 0x5) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f0000000140), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) r0 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408) getdents$auto(r0, 0x0, 0x400018) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) write$auto(0x3, 0x0, 0x7ffffffff000) write$auto(0x1, 0x0, 0x80000000) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x8, 0x5) socket(0x2b, 0x1, 0x1) prctl$auto(0xffffffff, 0x28, 0x0, 0xffff, 0x2) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nbd8\x00', 0x200, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000140)='/dev/input/mice\x00', 0x22002, 0x0) write$auto_mousedev_fops_mousedev(r1, 0x0, 0x0) 6.901045934s ago: executing program 1 (id=1900): socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000001c0), 0xffffffffffffffff) write$auto(0xffffffffffffffff, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0xffffffffffff0004, 0x1a) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/ip_forward\x00', 0x2002, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = socket(0xa, 0x1, 0x84) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x1ac}}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) r3 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYRES16=r3], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x0) sendmmsg$auto(0x3, 0x0, 0x3, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40000) setgroups$auto(0xeb2, 0x0) madvise$auto(0x0, 0x200007, 0x19) read$auto_proc_pid_maps_operations_internal(0xffffffffffffffff, 0x0, 0x0) 6.160799258s ago: executing program 2 (id=1901): openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000180)='/dev/tty54\x00', 0x1, 0x0) mmap$auto(0x0, 0x6, 0x2, 0x40eb4, 0xffffffffffffffff, 0x6) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xfffffffffffffffe, 0x8000) ustat$auto(0x801, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) writev$auto(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x40}, 0x8) write$auto(r0, 0x0, 0x100000a3d9) write$auto(0xffffffffffffffff, 0x0, 0xaf0) r1 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) r2 = openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) fcntl$auto(r2, 0x8, 0x0) read$auto(r1, 0x0, 0xb4d3) write$auto(0x3, 0x0, 0xffd8) process_vm_readv$auto(0x0, &(0x7f0000000080)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0) prctl$auto_PR_SCHED_CORE_SHARE_FROM(0xc0, 0x3, 0x0, 0x8000000000000000, 0x6) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$auto(0x4000000000000c8, 0x800454cf, 0x3) pread64$auto(0xffffffffffffffff, 0x0, 0x10, 0x101000000003) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/dummy0/ifalias\x00', 0x8041, 0x0) creat$auto(&(0x7f0000000000)='./file0\x00', 0x3ff) 5.837780889s ago: executing program 0 (id=1902): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x26, 0x1, 0x300) openat$auto_suspend_stats_fops_(0xffffffffffffff9c, &(0x7f0000000080), 0x440, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/bdi/43:256/min_ratio\x00', 0x181802, 0x0) open_by_handle_at$auto(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x1b}, 0x403) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000480)={{&(0x7f0000000000), 0x5aa, &(0x7f0000000100)={&(0x7f0000000380)='C', 0x49}, 0x8, &(0x7f0000000300), 0x6, 0x1000}, 0x5}, 0x2, 0xfd) socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000000040)='./file0\x00', 0x44, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0) mmap$auto(0x4000000, 0x4020009, 0x6, 0x15, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) syz_clone3(&(0x7f00000001c0)={0x129050100, 0x0, 0x0, 0x0, {0x4000031}, 0x0, 0x0, 0x0, 0x0}, 0x58) mmap$auto(0x0, 0x10000, 0x8000, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x1) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYBLOB="1b0026b58900fddbdf25030000002c00038028000180240006801d2074804cfe4d8088a8d00000080000040003002a9d272f660400338000000004000380040002824eb7ffa0ead772315c9d4591925a87a5fe624f54350e63339dc82b4e2f492cfc2e"], 0x48}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) madvise$auto(0x0, 0x2003f0, 0x15) 5.320309565s ago: executing program 3 (id=1903): sendmsg$auto_NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, 0x0, 0x24008804) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x401bf, 0x734f, 0x36, 0x67f, 0x1ffde, 0x7, 0x3, 0x20000002, 0xd, 0x3, 0x1, 0x2091, 0xb4, 0x9, 0x6, 0x6, 0x80, 0x4, 0x1cd7, 0x1000, 0x2000, 0x203, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff]}, 0x1fe, 0xd) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) keyctl$auto(0x1d, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x80000000) open(&(0x7f0000000100)='.\x00', 0x591002, 0x408) r0 = socket(0x10, 0x2, 0x0) getcwd$auto(&(0x7f0000000040)='HSR\x00', 0x5) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f0000000140), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) r1 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408) getdents$auto(r1, 0x0, 0x400018) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) write$auto(0x3, 0x0, 0x7ffffffff000) write$auto(0x1, 0x0, 0x80000000) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x8, 0x5) socket(0x2b, 0x1, 0x1) prctl$auto(0xffffffff, 0x28, 0x0, 0xffff, 0x2) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nbd8\x00', 0x200, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000140)='/dev/input/mice\x00', 0x22002, 0x0) write$auto_mousedev_fops_mousedev(r2, 0x0, 0x0) 4.573940662s ago: executing program 2 (id=1904): r0 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) mmap$auto(0x0, 0x4, 0xffffffffffffffff, 0x400eb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0xe, 0x0) lsm_list_modules$auto(0x0, 0x0, 0x0) getcwd$auto(0x0, 0xfffffffffffdffff) r1 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f00000001c0), 0x80100, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r1, 0x40146f2c, 0x0) mmap$auto_tracing_buffers_fops_trace(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x8e051, r0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_DP_CMD_NEW(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001300)={0x34, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x4}, @OVS_DP_ATTR_NAME={0x8, 0x1, '.SR\x00'}, @OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x9}, @OVS_DP_ATTR_MASKS_CACHE_SIZE={0x8, 0x7, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000800}, 0x80) bpf$auto(0xd, 0x0, 0x6f5) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x480, 0x0) mprotect$auto(0x0, 0x806121, 0x6) r3 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) ioctl$auto_PAGEMAP_SCAN(r3, 0xc0606610, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/platform/dummy_hcd.0/usb1/power/autosuspend_delay_ms\x00', 0x20461, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000000000)='-7', 0x3a) init_module$auto(0x0, 0xffff9, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x8000000000000000, 0x15) madvise$auto(0x0, 0x2000000080000001, 0x3) close_range$auto(r0, r0, 0xc0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) capset$auto(0x0, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) keyctl$auto(0x2000000000000017, 0x3ff, 0x2a, 0x0, 0x4) keyctl$auto(0x2000000000000017, 0x3ff, 0x0, 0x0, 0x3) 4.55778392s ago: executing program 1 (id=1905): openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, 0x0, 0x40000, 0x0) bpf$auto(0x6, 0xffffffffffffffff, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0xfff, 0x5, 0x10, 0x0) ioprio_set$auto(0x3, 0x0, 0x4b34) socket(0x15, 0x5, 0x0) madvise$auto(0x4, 0x7, 0x100000000) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x9, 0x3ff57696, 0x9b72, 0x2, 0x8000000000008000) mmap$auto(0x8000000000, 0xc3a, 0xe2, 0x9b72, 0x7, 0x1000) fsopen$auto(0x0, 0x1) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x5, 0x2) clone$auto(0x9001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x6) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x8001, 0x2) 4.281549169s ago: executing program 0 (id=1906): socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000001c0), 0xffffffffffffffff) write$auto(0xffffffffffffffff, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0xffffffffffff0004, 0x1a) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/ip_forward\x00', 0x2002, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = socket(0xa, 0x1, 0x84) r2 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f00000005c0)={0x8, 0x1, 0x9, 0x7, 0x5, 0xfffffffffffffffa, 0x1ffde, 0x0, 0xa, 0x1, 0x9, 0x3, 0x9, 0x6, 0xb4, 0x9, 0x2, 0x10000, 0x80, 0x7, 0x0, 0x7, 0x2000, 0x200, 0x925e, 0x84, 0x400000000, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0xadd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xf81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], "8b32f718b99f05d4404beecb56319e20029ac593ba4bd98b5ab9c7d60291126e9494d7e29781da33a0a953f8034bbbb53263ccb4c4144bba02914aa132b58449a84eb720f268cde193c1544557a8e0ee6a704233384aac4ec363da494f42285b90f925b0dd91761410f8af8ae1802da04d1ff84093e1154bae5c7d6e26de8ba3f26dad5e34ede3ca467bfb57703acacf43acaf9e71f75439beada800"/166}, 0x8, 0x200d) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) r3 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYRES16=r3], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x0) sendmmsg$auto(0x3, 0x0, 0x3, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40000) setgroups$auto(0xeb2, 0x0) madvise$auto(0x0, 0x200007, 0x19) read$auto_proc_pid_maps_operations_internal(0xffffffffffffffff, 0x0, 0x0) 3.405163328s ago: executing program 3 (id=1907): sendmsg$auto_NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, 0x0, 0x24008804) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x401bf, 0x734f, 0x36, 0x67f, 0x1ffde, 0x7, 0x3, 0x20000002, 0xd, 0x3, 0x1, 0x2091, 0xb4, 0x9, 0x6, 0x6, 0x80, 0x4, 0x1cd7, 0x1000, 0x2000, 0x203, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff]}, 0x1fe, 0xd) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x13, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8040) keyctl$auto(0x1d, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x80000000) open(&(0x7f0000000100)='.\x00', 0x591002, 0x408) r0 = socket(0x10, 0x2, 0x0) getcwd$auto(&(0x7f0000000040)='HSR\x00', 0x5) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f0000000140), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) r1 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408) getdents$auto(r1, 0x0, 0x400018) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) write$auto(0x3, 0x0, 0x7ffffffff000) write$auto(0x1, 0x0, 0x80000000) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x8, 0x5) socket(0x2b, 0x1, 0x1) prctl$auto(0xffffffff, 0x28, 0x0, 0xffff, 0x2) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nbd8\x00', 0x200, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000140)='/dev/input/mice\x00', 0x22002, 0x0) write$auto_mousedev_fops_mousedev(r2, 0x0, 0x0) 3.20282708s ago: executing program 1 (id=1908): openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, 0x0, 0x40000, 0x0) bpf$auto(0x6, 0xffffffffffffffff, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) ioprio_set$auto(0x3, 0x0, 0x4b34) socket(0x15, 0x5, 0x0) madvise$auto(0x4, 0x7, 0x100000000) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x9, 0x3ff57696, 0x9b72, 0x2, 0x8000000000008000) mmap$auto(0x8000000000, 0xc3a, 0xe2, 0x9b72, 0x7, 0x1000) fsopen$auto(0x0, 0x1) syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x5, 0x2) clone$auto(0x9001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x6) prctl$auto(0x43, 0x17, 0x0, 0x0, 0x0) flock$auto(0x6, 0x1) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x59, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x1c9002, 0x0) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x8001, 0x2) shmget$auto(0xa, 0x10563, 0x568d1af2) 3.189875186s ago: executing program 2 (id=1909): openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, 0x0, 0x40000, 0x0) bpf$auto(0x6, 0xffffffffffffffff, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0xfff, 0x5, 0x10, 0x0) socket(0x15, 0x5, 0x0) madvise$auto(0x4, 0x7, 0x100000000) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x9, 0x3ff57696, 0x9b72, 0x2, 0x8000000000008000) mmap$auto(0x8000000000, 0xc3a, 0xe2, 0x9b72, 0x7, 0x1000) fsopen$auto(0x0, 0x1) syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x5, 0x2) clone$auto(0x9001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x6) prctl$auto(0x43, 0x17, 0x0, 0x0, 0x0) flock$auto(0x6, 0x1) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x59, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x1c9002, 0x0) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x8001, 0x2) shmget$auto(0xa, 0x10563, 0x568d1af2) 1.716401284s ago: executing program 0 (id=1910): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x26, 0x1, 0x300) openat$auto_suspend_stats_fops_(0xffffffffffffff9c, &(0x7f0000000080), 0x440, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/bdi/43:256/min_ratio\x00', 0x181802, 0x0) open_by_handle_at$auto(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x1b}, 0x403) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000480)={{&(0x7f0000000000), 0x5aa, &(0x7f0000000100)={&(0x7f0000000380)='C', 0x49}, 0x8, &(0x7f0000000300), 0x6, 0x1000}, 0x5}, 0x2, 0xfd) socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000000040)='./file0\x00', 0x44, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0) mmap$auto(0x4000000, 0x4020009, 0x6, 0x15, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) syz_clone3(&(0x7f00000001c0)={0x129050100, 0x0, 0x0, 0x0, {0x4000031}, 0x0, 0x0, 0x0, 0x0}, 0x58) mmap$auto(0x0, 0x10000, 0x8000, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x1) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYBLOB="1b0026b58900fddbdf25030000002c00038028000180240006801d2074804cfe4d8088a8d00000080000040003002a9d272f660400338000000004000380040002824eb7ffa0ead772315c9d4591925a87a5fe624f54350e63339dc82b4e2f492cfc2e"], 0x48}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) madvise$auto(0x0, 0x2003f0, 0x15) 1.546270836s ago: executing program 3 (id=1911): openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, 0x0, 0x40000, 0x0) bpf$auto(0x6, 0xffffffffffffffff, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0xfff, 0x5, 0x10, 0x0) ioprio_set$auto(0x3, 0x0, 0x4b34) socket(0x15, 0x5, 0x0) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x9, 0x3ff57696, 0x9b72, 0x2, 0x8000000000008000) mmap$auto(0x8000000000, 0xc3a, 0xe2, 0x9b72, 0x7, 0x1000) fsopen$auto(0x0, 0x1) syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x5, 0x2) clone$auto(0x9001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x6) prctl$auto(0x43, 0x17, 0x0, 0x0, 0x0) flock$auto(0x6, 0x1) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x59, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x1c9002, 0x0) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x8001, 0x2) shmget$auto(0xa, 0x10563, 0x568d1af2) 1.506205161s ago: executing program 2 (id=1912): socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x202000b, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0x2c, 0x0) r0 = fsopen$auto(0x0, 0x1) fsconfig$auto(r0, 0x8, 0x0, 0x0, 0x0) ioctl$auto_FS_IOC_SETFLAGS2(0xffffffffffffffff, 0x40086602, 0x0) mmap$auto(0x0, 0x20009, 0x0, 0xeb1, 0x40000000000a5, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x3, 0x6) r1 = socket(0x10, 0x2, 0x0) recvfrom$auto(0x3, 0x0, 0x800000000e, 0xfffff4a4, 0x0, 0xfffffffffffffffd) socket(0x28, 0x1, 0x0) setsockopt$auto(0x3, 0x1, 0x3c, 0x0, 0x9) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="1b000000", @ANYBLOB="1a00279e"], 0x1ac}, 0x1, 0x0, 0x0, 0x20000001}, 0x40000) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x5, 0x1f, 0x940, 0x1ffde, 0x3, 0x6, 0x8000003, 0x9, 0x5, 0x0, 0x4, 0xb0, 0x7, 0x2, 0x3, 0x205, 0x7, 0x0, 0x3ffff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, [0x0, 0x0, 0x0, 0x8, 0x0, 0x8000004, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x100000000, 0x0, 0x8000000000000001, 0x0, 0x0, 0x0, 0x0, 0x20, 0x4, 0x0, 0x0, 0x2000000000000000]}, 0x203, 0x7d) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) r2 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) close_range$auto(0x2, 0x8, 0x0) 1.410441824s ago: executing program 1 (id=1913): openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, 0x0, 0x40000, 0x0) bpf$auto(0x6, 0xffffffffffffffff, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0xfff, 0x5, 0x10, 0x0) socket(0x15, 0x5, 0x0) madvise$auto(0x4, 0x7, 0x100000000) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x9, 0x3ff57696, 0x9b72, 0x2, 0x8000000000008000) mmap$auto(0x8000000000, 0xc3a, 0xe2, 0x9b72, 0x7, 0x1000) fsopen$auto(0x0, 0x1) syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x5, 0x2) clone$auto(0x9001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x6) prctl$auto(0x43, 0x17, 0x0, 0x0, 0x0) flock$auto(0x6, 0x1) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x59, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x1c9002, 0x0) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x8001, 0x2) shmget$auto(0xa, 0x10563, 0x568d1af2) 300.814833ms ago: executing program 2 (id=1914): openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, 0x0, 0x40000, 0x0) bpf$auto(0x6, 0xffffffffffffffff, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0xfff, 0x5, 0x10, 0x0) socket(0x15, 0x5, 0x0) madvise$auto(0x4, 0x7, 0x100000000) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x9, 0x3ff57696, 0x9b72, 0x2, 0x8000000000008000) mmap$auto(0x8000000000, 0xc3a, 0xe2, 0x9b72, 0x7, 0x1000) fsopen$auto(0x0, 0x1) syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x5, 0x2) clone$auto(0x9001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x6) prctl$auto(0x43, 0x17, 0x0, 0x0, 0x0) flock$auto(0x6, 0x1) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x59, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x1c9002, 0x0) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x8001, 0x2) shmget$auto(0xa, 0x10563, 0x568d1af2) 0s ago: executing program 0 (id=1915): sendmsg$auto_NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, 0x0, 0x24008804) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x401bf, 0x734f, 0x36, 0x67f, 0x1ffde, 0x7, 0x3, 0x20000002, 0xd, 0x3, 0x1, 0x2091, 0xb4, 0x9, 0x6, 0x6, 0x80, 0x4, 0x1cd7, 0x1000, 0x2000, 0x203, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff]}, 0x1fe, 0xd) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x13, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8040) keyctl$auto(0x1d, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x80000000) open(&(0x7f0000000100)='.\x00', 0x591002, 0x408) r0 = socket(0x10, 0x2, 0x0) getcwd$auto(&(0x7f0000000040)='HSR\x00', 0x5) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f0000000140), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) r1 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408) getdents$auto(r1, 0x0, 0x400018) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) write$auto(0x3, 0x0, 0x7ffffffff000) write$auto(0x1, 0x0, 0x80000000) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x8, 0x5) socket(0x2b, 0x1, 0x1) prctl$auto(0xffffffff, 0x28, 0x0, 0xffff, 0x2) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nbd8\x00', 0x200, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000140)='/dev/input/mice\x00', 0x22002, 0x0) write$auto_mousedev_fops_mousedev(r2, 0x0, 0x0) kernel console output (not intermixed with test programs): 007][T10598] ? __sys_sendmmsg+0x200/0x420 [ 433.594035][T10598] ? __x64_sys_sendmmsg+0x9c/0x100 [ 433.594063][T10598] ? do_syscall_64+0xcd/0x490 [ 433.594121][T10598] ? sk_leave_memory_pressure+0xdd/0x130 [ 433.594159][T10598] ? __sk_mem_raise_allocated+0x94d/0x1670 [ 433.594198][T10598] sctp_primitive_ASSOCIATE+0x9c/0xd0 [ 433.594237][T10598] sctp_sendmsg_to_asoc+0xa45/0x1bf0 [ 433.594267][T10598] ? sctp_assoc_set_primary+0x177/0x300 [ 433.594298][T10598] ? sctp_assoc_add_peer+0x252/0x1550 [ 433.594335][T10598] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 433.594363][T10598] ? sctp_connect_new_asoc+0x41e/0x770 [ 433.594397][T10598] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 433.594437][T10598] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 433.594477][T10598] sctp_sendmsg+0xea2/0x1e10 [ 433.594518][T10598] ? __pfx_sctp_sendmsg+0x10/0x10 [ 433.594548][T10598] ? __pfx___might_resched+0x10/0x10 [ 433.594578][T10598] ? aa_sk_perm+0x2f4/0xb10 [ 433.594611][T10598] ? __pfx_aa_sk_perm+0x10/0x10 [ 433.594649][T10598] ? __pfx_sctp_sendmsg+0x10/0x10 [ 433.594684][T10598] inet_sendmsg+0x119/0x140 [ 433.594708][T10598] ____sys_sendmsg+0x973/0xc70 [ 433.594755][T10598] ? __pfx_____sys_sendmsg+0x10/0x10 [ 433.594796][T10598] ? find_held_lock+0x2b/0x80 [ 433.594820][T10598] ? futex_unqueue+0x133/0x2c0 [ 433.594853][T10598] ___sys_sendmsg+0x134/0x1d0 [ 433.594885][T10598] ? __pfx____sys_sendmsg+0x10/0x10 [ 433.594929][T10598] ? find_held_lock+0x2b/0x80 [ 433.594970][T10598] __sys_sendmmsg+0x200/0x420 [ 433.595004][T10598] ? __pfx___sys_sendmmsg+0x10/0x10 [ 433.595043][T10598] ? __pfx_do_futex+0x10/0x10 [ 433.595089][T10598] ? xfd_validate_state+0x61/0x180 [ 433.595124][T10598] ? __pfx___do_sys_close_range+0x10/0x10 [ 433.595158][T10598] __x64_sys_sendmmsg+0x9c/0x100 [ 433.595188][T10598] ? lockdep_hardirqs_on+0x7c/0x110 [ 433.595217][T10598] do_syscall_64+0xcd/0x490 [ 433.595249][T10598] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.595273][T10598] RIP: 0033:0x7f767118ebe9 [ 433.595292][T10598] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 433.595316][T10598] RSP: 002b:00007f766f3f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 433.595339][T10598] RAX: ffffffffffffffda RBX: 00007f76713b5fa0 RCX: 00007f767118ebe9 [ 433.595355][T10598] RDX: 0000000000000005 RSI: 0000200000000140 RDI: 0000000000000002 [ 433.595369][T10598] RBP: 00007f7671211e19 R08: 0000000000000000 R09: 0000000000000000 [ 433.595384][T10598] R10: 0000000000000311 R11: 0000000000000246 R12: 0000000000000000 [ 433.595398][T10598] R13: 00007f76713b6038 R14: 00007f76713b5fa0 R15: 00007ffd32570d38 [ 433.595428][T10598] g&[ 437.075411][T10625] ERROR: Out of memory at tomoyo_memory_ok. [ 438.796134][T10639] FAULT_INJECTION: forcing a failure. [ 438.796134][T10639] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 438.995542][T10639] CPU: 1 UID: 0 PID: 10639 Comm: syz.3.917 Not tainted 6.16.0-syzkaller-12256-g561c80369df0 #0 PREEMPT(full) [ 438.995579][T10639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 438.995594][T10639] Call Trace: [ 438.995601][T10639] [ 438.995610][T10639] dump_stack_lvl+0x16c/0x1f0 [ 438.995644][T10639] should_fail_ex+0x512/0x640 [ 438.995682][T10639] should_fail_alloc_page+0xe7/0x130 [ 438.995717][T10639] prepare_alloc_pages+0x3c2/0x610 [ 438.995758][T10639] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 438.995790][T10639] ? stack_trace_save+0x8e/0xc0 [ 438.995817][T10639] ? __pfx_stack_trace_save+0x10/0x10 [ 438.995842][T10639] ? rcu_is_watching+0x12/0xc0 [ 438.995865][T10639] ? stack_depot_save_flags+0x29/0x9c0 [ 438.995906][T10639] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 438.995933][T10639] ? __kasan_slab_alloc+0x89/0x90 [ 438.995962][T10639] ? __pmd_alloc+0xbf/0x930 [ 438.995996][T10639] ? handle_mm_fault+0x589/0xd10 [ 438.996017][T10639] ? do_user_addr_fault+0x7a6/0x1370 [ 438.996054][T10639] ? exc_page_fault+0x5c/0xb0 [ 438.996078][T10639] ? asm_exc_page_fault+0x26/0x30 [ 438.996100][T10639] ? strncpy_from_user+0x147/0x2e0 [ 438.996127][T10639] ? getname_flags.part.0+0x8f/0x550 [ 438.996167][T10639] ? getname_flags+0x93/0xf0 [ 438.996202][T10639] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 438.996240][T10639] ? policy_nodemask+0xea/0x4e0 [ 438.996273][T10639] alloc_pages_mpol+0x1fb/0x550 [ 438.996307][T10639] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 438.996346][T10639] alloc_pages_noprof+0x131/0x390 [ 438.996387][T10639] pte_alloc_one+0x1c/0x3a0 [ 438.996413][T10639] do_pte_missing+0x1afc/0x3ba0 [ 438.996438][T10639] ? do_raw_spin_unlock+0x172/0x230 [ 438.996478][T10639] ? __pmd_alloc+0x3fb/0x930 [ 438.996523][T10639] __handle_mm_fault+0x152a/0x2a50 [ 438.996551][T10639] ? mt_find+0x3ef/0xa30 [ 438.996584][T10639] ? __pfx___handle_mm_fault+0x10/0x10 [ 438.996607][T10639] ? __pfx_mt_find+0x10/0x10 [ 438.996654][T10639] ? find_vma+0xbf/0x140 [ 438.996685][T10639] ? __pfx_find_vma+0x10/0x10 [ 438.996719][T10639] handle_mm_fault+0x589/0xd10 [ 438.996745][T10639] ? __bpf_trace_exceptions+0x1/0x40 [ 438.996783][T10639] do_user_addr_fault+0x7a6/0x1370 [ 438.996824][T10639] ? rcu_is_watching+0x12/0xc0 [ 438.996851][T10639] exc_page_fault+0x5c/0xb0 [ 438.996879][T10639] asm_exc_page_fault+0x26/0x30 [ 438.996902][T10639] RIP: 0010:strncpy_from_user+0x147/0x2e0 [ 438.996933][T10639] Code: 00 00 4d 89 74 1d 00 48 83 ed 08 bf 07 00 00 00 48 83 c3 08 48 89 ee e8 47 42 a7 fc 48 83 fd 07 76 22 e8 cc 46 a7 fc 45 31 ff <49> 8b 04 1c 31 ff 44 89 fe 49 89 c6 e8 f8 41 a7 fc 45 85 ff 0f 84 [ 438.996957][T10639] RSP: 0018:ffffc9000b37fd10 EFLAGS: 00050246 [ 438.996977][T10639] RAX: 000000000000003b RBX: 0000000000000000 RCX: ffffc9000c995000 [ 438.996991][T10639] RDX: 0000000000080000 RSI: ffffffff8513c8f4 RDI: 0000000000000007 [ 438.997006][T10639] RBP: 0000000000000fe0 R08: 0000000000000007 R09: 0000000000000007 [ 438.997019][T10639] R10: 0000000000000fe0 R11: 0000000000000000 R12: 0000000000000000 [ 438.997033][T10639] R13: ffff888069d5b320 R14: 0000000000000fe0 R15: 0000000000000000 [ 438.997056][T10639] ? strncpy_from_user+0x144/0x2e0 [ 438.997094][T10639] getname_flags.part.0+0x8f/0x550 [ 438.997135][T10639] getname_flags+0x93/0xf0 [ 438.997161][T10639] do_sys_openat2+0xb8/0x1d0 [ 438.997197][T10639] ? __pfx_do_sys_openat2+0x10/0x10 [ 438.997245][T10639] __x64_sys_openat+0x174/0x210 [ 438.997283][T10639] ? __pfx___x64_sys_openat+0x10/0x10 [ 438.997333][T10639] do_syscall_64+0xcd/0x490 [ 438.997365][T10639] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.997388][T10639] RIP: 0033:0x7f432df8ebe9 [ 438.997407][T10639] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 438.997430][T10639] RSP: 002b:00007f432eddf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 438.997451][T10639] RAX: ffffffffffffffda RBX: 00007f432e1b5fa0 RCX: 00007f432df8ebe9 [ 438.997466][T10639] RDX: 0000000000000040 RSI: 0000000000000000 RDI: ffffffffffffff9c [ 438.997481][T10639] RBP: 00007f432e011e19 R08: 0000000000000000 R09: 0000000000000000 [ 438.997495][T10639] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 438.997515][T10639] R13: 00007f432e1b6038 R14: 00007f432e1b5fa0 R15: 00007ffd7a599f18 [ 438.997545][T10639] [ 439.941844][T10644] FAULT_INJECTION: forcing a failure. [ 439.941844][T10644] name failslab, interval 1, probability 0, space 0, times 0 [ 439.980990][T10644] CPU: 1 UID: 0 PID: 10644 Comm: syz.1.919 Not tainted 6.16.0-syzkaller-12256-g561c80369df0 #0 PREEMPT(full) [ 439.981032][T10644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 439.981051][T10644] Call Trace: [ 439.981059][T10644] [ 439.981067][T10644] dump_stack_lvl+0x16c/0x1f0 [ 439.981102][T10644] should_fail_ex+0x512/0x640 [ 439.981135][T10644] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 439.981171][T10644] should_failslab+0xc2/0x120 [ 439.981203][T10644] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 439.981235][T10644] ? __request_module+0x2cb/0x690 [ 439.981277][T10644] kstrdup+0x53/0x100 [ 439.981307][T10644] __request_module+0x2cb/0x690 [ 439.981343][T10644] ? __pfx___request_module+0x10/0x10 [ 439.981391][T10644] ? __get_fs_type+0x12c/0x170 [ 439.981425][T10644] ? do_raw_read_unlock+0x44/0xe0 [ 439.981471][T10644] get_fs_type+0xd7/0x190 [ 439.981502][T10644] tomoyo_mount_acl+0x262/0x850 [ 439.981532][T10644] ? bpf_ksym_find+0x124/0x1c0 [ 439.981556][T10644] ? is_bpf_text_address+0x94/0x1a0 [ 439.981587][T10644] ? __pfx_tomoyo_mount_acl+0x10/0x10 [ 439.981616][T10644] ? __kernel_text_address+0xd/0x40 [ 439.981637][T10644] ? unwind_get_return_address+0x59/0xa0 [ 439.981662][T10644] ? arch_stack_walk+0xa6/0x100 [ 439.981722][T10644] ? tomoyo_domain+0xbb/0x150 [ 439.981742][T10644] ? tomoyo_profile+0x47/0x60 [ 439.981782][T10644] tomoyo_mount_permission+0x16d/0x420 [ 439.981813][T10644] ? tomoyo_mount_permission+0x14f/0x420 [ 439.981845][T10644] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 439.981894][T10644] security_sb_mount+0x9b/0x260 [ 439.981921][T10644] path_mount+0x15f/0x1fd0 [ 439.981957][T10644] ? __pfx_path_mount+0x10/0x10 [ 439.981988][T10644] ? kmem_cache_free+0x2d1/0x4d0 [ 439.982013][T10644] ? putname+0x154/0x1a0 [ 439.982048][T10644] ? putname+0x154/0x1a0 [ 439.982083][T10644] ? __x64_sys_mount+0x28d/0x310 [ 439.982110][T10644] __x64_sys_mount+0x28d/0x310 [ 439.982140][T10644] ? __pfx___x64_sys_mount+0x10/0x10 [ 439.982179][T10644] do_syscall_64+0xcd/0x490 [ 439.982212][T10644] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.982235][T10644] RIP: 0033:0x7fb3b2b8ebe9 [ 439.982253][T10644] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 439.982276][T10644] RSP: 002b:00007fb3b39bc038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 439.982303][T10644] RAX: ffffffffffffffda RBX: 00007fb3b2db5fa0 RCX: 00007fb3b2b8ebe9 [ 439.982322][T10644] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000000 [ 439.982336][T10644] RBP: 00007fb3b2c11e19 R08: 00002000000001c0 R09: 0000000000000000 [ 439.982351][T10644] R10: 0000000000000200 R11: 0000000000000246 R12: 0000000000000000 [ 439.982364][T10644] R13: 00007fb3b2db6038 R14: 00007fb3b2db5fa0 R15: 00007ffcb0a5f8c8 [ 439.982394][T10644] g&g&[ 446.202956][T10690] [U] [ 446.205814][T10690] [U] [ 446.208529][T10690] [U] [ 446.211766][T10690] [U] [ 446.296047][T10680] ptp ptp0: only physical clock in use now [ 446.362199][T10690] [U] [ 446.365329][T10690] [U] [ 446.368148][T10690] [U] [ 446.371220][T10690] [U] [ 446.550038][T10690] [U] [ 446.552989][T10690] [U] [ 446.556226][T10690] [U] [ 446.559334][T10690] [U] [ 446.702688][T10698] [U] [ 447.503352][T10706] kAFS: No cell specified g& getty: ttyS0: re[ 449.589866][ T8044] ERROR: Out of memory at tomoyo_memory_ok. ad error: Resource temporarily unavailable [ 450.242661][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 450.249988][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 450.950529][T10744] ptp ptp0: only physical clock in use now [ 451.957492][T10780] [U] [ 451.960446][T10780] [U] [ 451.963450][T10780] [U] [ 451.966390][T10780] [U] [ 452.116948][T10780] [U] [ 452.119991][T10780] [U] [ 452.123013][T10780] [U] [ 452.126009][T10780] [U] [ 452.305066][T10780] [U] [ 452.307858][T10780] [U] [ 452.310752][T10780] [U] [ 452.313497][T10780] [U] [ 452.399843][T10780] [U] [ 452.402794][T10780] [U] [ 452.405517][T10780] [U] [ 452.408336][T10780] [U] [ 452.482410][T10780] [U] [ 452.485172][T10780] [U] [ 452.488239][T10780] [U] [ 452.491086][T10780] [U] [ 452.603566][T10792] [U] [ 453.125218][T10788] zswap: compressor not available [ 455.282891][T10814] kexec: Could not allocate control_code_buffer [ 455.989849][T10844] ptp ptp0: only physical clock in use now [ 456.448813][T10854] sp0: Synchronizing with TNC [ 456.952647][T10859] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 457.286790][T10866] ERROR: Out of memory at tomoyo_memory_ok. [ 457.533030][T10866] FAULT_INJECTION: forcing a failure. [ 457.533030][T10866] name failslab, interval 1, probability 0, space 0, times 0 [ 457.697887][T10869] can: request_module (can-proto-3) failed. [ 457.770568][T10866] CPU: 1 UID: 0 PID: 10866 Comm: syz.3.973 Not tainted 6.16.0-syzkaller-12256-g561c80369df0 #0 PREEMPT(full) [ 457.770604][T10866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 457.770620][T10866] Call Trace: [ 457.770628][T10866] [ 457.770636][T10866] dump_stack_lvl+0x16c/0x1f0 [ 457.770675][T10866] should_fail_ex+0x512/0x640 [ 457.770708][T10866] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 457.770736][T10866] should_failslab+0xc2/0x120 [ 457.770768][T10866] __kmalloc_cache_noprof+0x6a/0x3e0 [ 457.770793][T10866] ? alloc_netdev_mqs+0xec4/0x1500 [ 457.770828][T10866] alloc_netdev_mqs+0xec4/0x1500 [ 457.770865][T10866] internal_dev_create+0x8a/0x520 [ 457.770901][T10866] ovs_vport_add+0x147/0x4d0 [ 457.770934][T10866] new_vport+0x16/0x1d0 [ 457.770957][T10866] ovs_dp_cmd_new+0x6ba/0xe60 [ 457.770991][T10866] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 457.771023][T10866] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 457.771062][T10866] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 457.771107][T10866] genl_family_rcv_msg_doit+0x209/0x2f0 [ 457.771145][T10866] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 457.771191][T10866] ? bpf_lsm_capable+0x9/0x10 [ 457.771213][T10866] ? security_capable+0x7e/0x260 [ 457.771237][T10866] ? ns_capable+0xd7/0x110 [ 457.771264][T10866] genl_rcv_msg+0x55c/0x800 [ 457.771303][T10866] ? __pfx_genl_rcv_msg+0x10/0x10 [ 457.771353][T10866] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 457.771390][T10866] netlink_rcv_skb+0x158/0x420 [ 457.771421][T10866] ? __pfx_genl_rcv_msg+0x10/0x10 [ 457.771459][T10866] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 457.771502][T10866] ? netlink_deliver_tap+0x1ae/0xd30 [ 457.771536][T10866] genl_rcv+0x28/0x40 [ 457.771567][T10866] netlink_unicast+0x5a7/0x870 [ 457.771603][T10866] ? __pfx_netlink_unicast+0x10/0x10 [ 457.771634][T10866] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 457.771663][T10866] ? __lock_acquire+0xb97/0x1ce0 [ 457.771702][T10866] netlink_sendmsg+0x8d1/0xdd0 [ 457.771738][T10866] ? __pfx_netlink_sendmsg+0x10/0x10 [ 457.771773][T10866] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 457.771804][T10866] ____sys_sendmsg+0xa95/0xc70 [ 457.771842][T10866] ? copy_msghdr_from_user+0x10a/0x160 [ 457.771871][T10866] ? __pfx_____sys_sendmsg+0x10/0x10 [ 457.771922][T10866] ___sys_sendmsg+0x134/0x1d0 [ 457.771953][T10866] ? __pfx____sys_sendmsg+0x10/0x10 [ 457.772021][T10866] __sys_sendmsg+0x16d/0x220 [ 457.772051][T10866] ? __pfx___sys_sendmsg+0x10/0x10 [ 457.772086][T10866] ? __x64_sys_futex+0x1e0/0x4c0 [ 457.772136][T10866] do_syscall_64+0xcd/0x490 [ 457.772169][T10866] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.772193][T10866] RIP: 0033:0x7f432df8ebe9 [ 457.772212][T10866] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 457.772236][T10866] RSP: 002b:00007f432eddf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 457.772259][T10866] RAX: ffffffffffffffda RBX: 00007f432e1b5fa0 RCX: 00007f432df8ebe9 [ 457.772275][T10866] RDX: 0000000000000080 RSI: 0000200000000140 RDI: 0000000000000007 [ 457.772289][T10866] RBP: 00007f432e011e19 R08: 0000000000000000 R09: 0000000000000000 [ 457.772304][T10866] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 457.772326][T10866] R13: 00007f432e1b6038 R14: 00007f432e1b5fa0 R15: 00007ffd7a599f18 [ 457.772356][T10866] [ 460.330587][T10906] netlink: 338 bytes leftover after parsing attributes in process `syz.3.980'. [ 460.393772][T10906] netlink: 338 bytes leftover after parsing attributes in process `syz.3.980'. [ 460.566827][T10906] netlink: 290 bytes leftover after parsing attributes in process `syz.3.980'. [ 460.639308][T10906] veth0_macvtap: left promiscuous mode [ 461.698744][ T30] audit: type=1800 audit(6138071931.133:11): pid=10936 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.984" name="members" dev="configfs" ino=27278 res=0 errno=0 [ 462.464121][T10947] ERROR: Out of memory at tomoyo_memory_ok. syzkaller syzkaller login: [ 464.075691][T10975] sp0: Synchronizing with TNC [ 465.739424][T11006] sp0: Synchronizing with TNC g&[ 467.384784][T11034] random: crng reseeded on system resumption [ 467.489792][T11034] FAULT_INJECTION: forcing a failure. [ 467.489792][T11034] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 467.607463][T11034] CPU: 1 UID: 0 PID: 11034 Comm: syz.0.1012 Not tainted 6.16.0-syzkaller-12256-g561c80369df0 #0 PREEMPT(full) [ 467.607499][T11034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 467.607514][T11034] Call Trace: [ 467.607523][T11034] [ 467.607533][T11034] dump_stack_lvl+0x16c/0x1f0 [ 467.607568][T11034] should_fail_ex+0x512/0x640 [ 467.607607][T11034] should_fail_alloc_page+0xe7/0x130 [ 467.607643][T11034] prepare_alloc_pages+0x3c2/0x610 [ 467.607680][T11034] ? rcu_is_watching+0x12/0xc0 [ 467.607707][T11034] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 467.607746][T11034] ? stack_trace_save+0x8e/0xc0 [ 467.607772][T11034] ? __pfx_stack_trace_save+0x10/0x10 [ 467.607801][T11034] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 467.607842][T11034] ? kasan_save_stack+0x42/0x60 [ 467.607868][T11034] ? kasan_save_stack+0x33/0x60 [ 467.607898][T11034] ? do_dentry_open+0x97f/0x1530 [ 467.607926][T11034] ? vfs_open+0x82/0x3f0 [ 467.607958][T11034] ? path_openat+0x1de4/0x2cb0 [ 467.607983][T11034] ? do_filp_open+0x20b/0x470 [ 467.608011][T11034] ? do_sys_openat2+0x11b/0x1d0 [ 467.608047][T11034] ? __x64_sys_openat+0x174/0x210 [ 467.608084][T11034] ? do_syscall_64+0xcd/0x490 [ 467.608112][T11034] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.608138][T11034] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 467.608173][T11034] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 467.608211][T11034] ? policy_nodemask+0xea/0x4e0 [ 467.608244][T11034] alloc_pages_mpol+0x1fb/0x550 [ 467.608277][T11034] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 467.608316][T11034] alloc_pages_noprof+0x131/0x390 [ 467.608349][T11034] get_zeroed_page_noprof+0x18/0xb0 [ 467.608384][T11034] get_image_page+0x18/0x190 [ 467.608407][T11034] alloc_rtree_node+0x3c/0xb0 [ 467.608431][T11034] memory_bm_create+0x419/0x810 [ 467.608474][T11034] create_basic_memory_bitmaps+0x10b/0x320 [ 467.608506][T11034] snapshot_open+0x235/0x2b0 [ 467.608533][T11034] ? __pfx_snapshot_open+0x10/0x10 [ 467.608562][T11034] misc_open+0x35a/0x420 [ 467.608587][T11034] ? __pfx_misc_open+0x10/0x10 [ 467.608610][T11034] chrdev_open+0x231/0x6a0 [ 467.608639][T11034] ? __pfx_apparmor_file_open+0x10/0x10 [ 467.608664][T11034] ? __pfx_chrdev_open+0x10/0x10 [ 467.608695][T11034] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 467.608727][T11034] do_dentry_open+0x97f/0x1530 [ 467.608756][T11034] ? __pfx_chrdev_open+0x10/0x10 [ 467.608791][T11034] vfs_open+0x82/0x3f0 [ 467.608836][T11034] path_openat+0x1de4/0x2cb0 [ 467.608873][T11034] ? __pfx_path_openat+0x10/0x10 [ 467.608909][T11034] do_filp_open+0x20b/0x470 [ 467.608938][T11034] ? __pfx_do_filp_open+0x10/0x10 [ 467.608988][T11034] ? alloc_fd+0x471/0x7d0 [ 467.609022][T11034] do_sys_openat2+0x11b/0x1d0 [ 467.609058][T11034] ? __pfx_do_sys_openat2+0x10/0x10 [ 467.609092][T11034] ? __fget_files+0x204/0x3c0 [ 467.609128][T11034] __x64_sys_openat+0x174/0x210 [ 467.609166][T11034] ? __pfx___x64_sys_openat+0x10/0x10 [ 467.609216][T11034] do_syscall_64+0xcd/0x490 [ 467.609248][T11034] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.609273][T11034] RIP: 0033:0x7f767118ebe9 [ 467.609293][T11034] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 467.609317][T11034] RSP: 002b:00007f766f3f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 467.609340][T11034] RAX: ffffffffffffffda RBX: 00007f76713b5fa0 RCX: 00007f767118ebe9 [ 467.609355][T11034] RDX: 00000000001438bf RSI: 0000200000000000 RDI: ffffffffffffff9c [ 467.609370][T11034] RBP: 00007f7671211e19 R08: 0000000000000000 R09: 0000000000000000 [ 467.609385][T11034] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 467.609399][T11034] R13: 00007f76713b6038 R14: 00007f76713b5fa0 R15: 00007ffd32570d38 [ 467.609430][T11034] [ 468.750371][T11050] hugetlbfs: syz.0.1007 (11050): Using mlock ulimits for SHM_HUGETLB is obsolete [ 471.154128][T11074] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 474.973307][T11126] ERROR: Out of memory at tomoyo_memory_ok. [ 475.894030][T11139] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1028'. [ 476.015023][T11142] nfs4: Unknown parameter '€' [ 480.017799][ T30] audit: type=1800 audit(6138072972.538:12): pid=11184 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1035" name="members" dev="configfs" ino=28459 res=0 errno=0 [ 481.495001][ T5864] Bluetooth: hci3: unexpected event 0x1d length: 10 > 5 [ 481.512928][T11200] FAULT_INJECTION: forcing a failure. [ 481.512928][T11200] name failslab, interval 1, probability 0, space 0, times 0 [ 481.616428][T11200] CPU: 1 UID: 0 PID: 11200 Comm: syz.1.1037 Not tainted 6.16.0-syzkaller-12256-g561c80369df0 #0 PREEMPT(full) [ 481.616464][T11200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 481.616479][T11200] Call Trace: [ 481.616487][T11200] [ 481.616496][T11200] dump_stack_lvl+0x16c/0x1f0 [ 481.616530][T11200] should_fail_ex+0x512/0x640 [ 481.616563][T11200] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 481.616596][T11200] should_failslab+0xc2/0x120 [ 481.616629][T11200] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 481.616659][T11200] ? proc_alloc_inode+0x25/0x200 [ 481.616693][T11200] ? __pfx_proc_alloc_inode+0x10/0x10 [ 481.616722][T11200] proc_alloc_inode+0x25/0x200 [ 481.616752][T11200] alloc_inode+0x61/0x240 [ 481.616786][T11200] new_inode+0x22/0x1c0 [ 481.616823][T11200] proc_sys_make_inode+0x47/0x5c0 [ 481.616858][T11200] proc_sys_lookup+0x273/0x400 [ 481.616892][T11200] ? __pfx_proc_sys_lookup+0x10/0x10 [ 481.616937][T11200] ? lockdep_init_map_type+0x5c/0x280 [ 481.616972][T11200] ? lockdep_init_map_type+0x5c/0x280 [ 481.617010][T11200] __lookup_slow+0x251/0x460 [ 481.617048][T11200] ? __pfx___lookup_slow+0x10/0x10 [ 481.617103][T11200] ? lookup_fast+0x156/0x610 [ 481.617124][T11200] ? _raw_spin_unlock+0x28/0x50 [ 481.617152][T11200] walk_component+0x353/0x5b0 [ 481.617179][T11200] link_path_walk+0x627/0xe20 [ 481.617213][T11200] path_openat+0x1b0/0x2cb0 [ 481.617239][T11200] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 481.617275][T11200] ? __pfx_path_openat+0x10/0x10 [ 481.617310][T11200] do_filp_open+0x20b/0x470 [ 481.617340][T11200] ? __pfx_do_filp_open+0x10/0x10 [ 481.617389][T11200] ? alloc_fd+0x471/0x7d0 [ 481.617422][T11200] do_sys_openat2+0x11b/0x1d0 [ 481.617459][T11200] ? __pfx_do_sys_openat2+0x10/0x10 [ 481.617499][T11200] ? __pfx_task_mm_cid_work+0x10/0x10 [ 481.617539][T11200] ? __pfx___might_resched+0x10/0x10 [ 481.617566][T11200] __x64_sys_openat+0x174/0x210 [ 481.617604][T11200] ? __pfx___x64_sys_openat+0x10/0x10 [ 481.617643][T11200] ? xfd_validate_state+0x61/0x180 [ 481.617677][T11200] ? __pfx_mem_cgroup_handle_over_high+0x10/0x10 [ 481.617716][T11200] do_syscall_64+0xcd/0x490 [ 481.617749][T11200] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 481.617776][T11200] RIP: 0033:0x7fb3b2b8ebe9 [ 481.617795][T11200] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 481.617820][T11200] RSP: 002b:00007fb3b39bc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 481.617843][T11200] RAX: ffffffffffffffda RBX: 00007fb3b2db5fa0 RCX: 00007fb3b2b8ebe9 [ 481.617881][T11200] RDX: 0000000000040141 RSI: 0000200000000540 RDI: ffffffffffffff9c [ 481.617896][T11200] RBP: 00007fb3b2c11e19 R08: 0000000000000000 R09: 0000000000000000 [ 481.617911][T11200] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 481.617931][T11200] R13: 00007fb3b2db6038 R14: 00007fb3b2db5fa0 R15: 00007ffcb0a5f8c8 [ 481.617961][T11200] [ 482.665657][T11210] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1043'. [ 482.784070][T11210] nfs4: Unknown parameter '€' [ 489.579150][T11302] netlink: 338 bytes leftover after parsing attributes in process `syz.0.1061'. [ 489.623418][T11302] bridge0: port 2(bridge_slave_1) entered disabled state [ 489.631097][T11302] bridge0: port 1(bridge_slave_0) entered disabled state [ 489.718022][T11302] bridge0: entered promiscuous mode [ 490.127142][T11304] FAULT_INJECTION: forcing a failure. [ 490.127142][T11304] name failslab, interval 1, probability 0, space 0, times 0 [ 490.191057][T11304] CPU: 1 UID: 0 PID: 11304 Comm: syz.2.1062 Not tainted 6.16.0-syzkaller-12256-g561c80369df0 #0 PREEMPT(full) [ 490.191095][T11304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 490.191110][T11304] Call Trace: [ 490.191118][T11304] [ 490.191126][T11304] dump_stack_lvl+0x16c/0x1f0 [ 490.191161][T11304] should_fail_ex+0x512/0x640 [ 490.191194][T11304] ? __kmalloc_node_noprof+0xc5/0x500 [ 490.191228][T11304] should_failslab+0xc2/0x120 [ 490.191260][T11304] __kmalloc_node_noprof+0xd8/0x500 [ 490.191287][T11304] ? __get_vm_area_node+0x208/0x330 [ 490.191324][T11304] ? __vmalloc_node_range_noprof+0x3e5/0x14b0 [ 490.191369][T11304] __vmalloc_node_range_noprof+0x3e5/0x14b0 [ 490.191430][T11304] ? n_tty_open+0x1a/0x170 [ 490.191474][T11304] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 490.191518][T11304] ? find_held_lock+0x2b/0x80 [ 490.191542][T11304] ? n_tty_open+0x12b/0x170 [ 490.191579][T11304] ? n_tty_open+0x1a/0x170 [ 490.191614][T11304] __vmalloc_node_noprof+0xad/0xf0 [ 490.191653][T11304] ? n_tty_open+0x1a/0x170 [ 490.191687][T11304] ? __pfx_n_tty_open+0x10/0x10 [ 490.191724][T11304] n_tty_open+0x1a/0x170 [ 490.191759][T11304] ? __pfx_n_tty_open+0x10/0x10 [ 490.191794][T11304] tty_ldisc_open+0x9c/0x120 [ 490.191822][T11304] tty_ldisc_setup+0x87/0x100 [ 490.191851][T11304] tty_init_dev.part.0+0x1ec/0x500 [ 490.191897][T11304] tty_open+0xa50/0xf90 [ 490.191939][T11304] ? __pfx_tty_open+0x10/0x10 [ 490.191976][T11304] ? chrdev_open+0x10b/0x6a0 [ 490.192011][T11304] ? __pfx_tty_open+0x10/0x10 [ 490.192043][T11304] chrdev_open+0x231/0x6a0 [ 490.192072][T11304] ? __pfx_apparmor_file_open+0x10/0x10 [ 490.192098][T11304] ? __pfx_chrdev_open+0x10/0x10 [ 490.192130][T11304] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 490.192163][T11304] do_dentry_open+0x97f/0x1530 [ 490.192192][T11304] ? __pfx_chrdev_open+0x10/0x10 [ 490.192230][T11304] vfs_open+0x82/0x3f0 [ 490.192269][T11304] path_openat+0x1de4/0x2cb0 [ 490.192306][T11304] ? __pfx_path_openat+0x10/0x10 [ 490.192342][T11304] do_filp_open+0x20b/0x470 [ 490.192370][T11304] ? __pfx_do_filp_open+0x10/0x10 [ 490.192437][T11304] ? alloc_fd+0x471/0x7d0 [ 490.192472][T11304] do_sys_openat2+0x11b/0x1d0 [ 490.192510][T11304] ? __pfx_do_sys_openat2+0x10/0x10 [ 490.192560][T11304] __x64_sys_openat+0x174/0x210 [ 490.192597][T11304] ? __pfx___x64_sys_openat+0x10/0x10 [ 490.192649][T11304] do_syscall_64+0xcd/0x490 [ 490.192682][T11304] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.192707][T11304] RIP: 0033:0x7f058c78ebe9 [ 490.192726][T11304] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 490.192749][T11304] RSP: 002b:00007f058d5ee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 490.192771][T11304] RAX: ffffffffffffffda RBX: 00007f058c9b5fa0 RCX: 00007f058c78ebe9 [ 490.192787][T11304] RDX: 0000000000040001 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 490.192802][T11304] RBP: 00007f058c811e19 R08: 0000000000000000 R09: 0000000000000000 [ 490.192816][T11304] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 490.192830][T11304] R13: 00007f058c9b6038 R14: 00007f058c9b5fa0 R15: 00007ffe70031d48 [ 490.192860][T11304] [ 490.192873][T11304] syz.2.1062: vmalloc error: size 12288, failed to allocated page array size 24, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null) [ 490.594863][T11306] ima: policy update failed [ 490.808370][ T30] audit: type=1802 audit(6138074006.256:13): pid=11306 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.1071" res=0 errno=0 [ 491.093356][T11304] ,cpuset=/,mems_allowed=0-1 [ 491.112681][T11304] CPU: 1 UID: 0 PID: 11304 Comm: syz.2.1062 Not tainted 6.16.0-syzkaller-12256-g561c80369df0 #0 PREEMPT(full) [ 491.112716][T11304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 491.112730][T11304] Call Trace: [ 491.112738][T11304] [ 491.112747][T11304] dump_stack_lvl+0x16c/0x1f0 [ 491.112782][T11304] warn_alloc+0x248/0x3a0 [ 491.112812][T11304] ? __pfx_warn_alloc+0x10/0x10 [ 491.112837][T11304] ? dump_stack_lvl+0x185/0x1f0 [ 491.112863][T11304] ? lockdep_hardirqs_on+0x7c/0x110 [ 491.112900][T11304] ? rcu_is_watching+0x12/0xc0 [ 491.112924][T11304] ? trace_kmalloc+0x2b/0xd0 [ 491.112958][T11304] ? __get_vm_area_node+0x208/0x330 [ 491.113002][T11304] __vmalloc_node_range_noprof+0x101b/0x14b0 [ 491.113052][T11304] ? n_tty_open+0x1a/0x170 [ 491.113096][T11304] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 491.113140][T11304] ? find_held_lock+0x2b/0x80 [ 491.113163][T11304] ? n_tty_open+0x12b/0x170 [ 491.113201][T11304] ? n_tty_open+0x1a/0x170 [ 491.113235][T11304] __vmalloc_node_noprof+0xad/0xf0 [ 491.113273][T11304] ? n_tty_open+0x1a/0x170 [ 491.113308][T11304] ? __pfx_n_tty_open+0x10/0x10 [ 491.113354][T11304] n_tty_open+0x1a/0x170 [ 491.113389][T11304] ? __pfx_n_tty_open+0x10/0x10 [ 491.113424][T11304] tty_ldisc_open+0x9c/0x120 [ 491.113452][T11304] tty_ldisc_setup+0x87/0x100 [ 491.113482][T11304] tty_init_dev.part.0+0x1ec/0x500 [ 491.113520][T11304] tty_open+0xa50/0xf90 [ 491.113559][T11304] ? __pfx_tty_open+0x10/0x10 [ 491.113592][T11304] ? chrdev_open+0x10b/0x6a0 [ 491.113626][T11304] ? __pfx_tty_open+0x10/0x10 [ 491.113658][T11304] chrdev_open+0x231/0x6a0 [ 491.113688][T11304] ? __pfx_apparmor_file_open+0x10/0x10 [ 491.113719][T11304] ? __pfx_chrdev_open+0x10/0x10 [ 491.113751][T11304] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 491.113784][T11304] do_dentry_open+0x97f/0x1530 [ 491.113814][T11304] ? __pfx_chrdev_open+0x10/0x10 [ 491.113851][T11304] vfs_open+0x82/0x3f0 [ 491.113890][T11304] path_openat+0x1de4/0x2cb0 [ 491.113928][T11304] ? __pfx_path_openat+0x10/0x10 [ 491.113964][T11304] do_filp_open+0x20b/0x470 [ 491.113993][T11304] ? __pfx_do_filp_open+0x10/0x10 [ 491.114043][T11304] ? alloc_fd+0x471/0x7d0 [ 491.114076][T11304] do_sys_openat2+0x11b/0x1d0 [ 491.114113][T11304] ? __pfx_do_sys_openat2+0x10/0x10 [ 491.114161][T11304] __x64_sys_openat+0x174/0x210 [ 491.114199][T11304] ? __pfx___x64_sys_openat+0x10/0x10 [ 491.114249][T11304] do_syscall_64+0xcd/0x490 [ 491.114281][T11304] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.114306][T11304] RIP: 0033:0x7f058c78ebe9 [ 491.114325][T11304] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 491.114474][T11304] RSP: 002b:00007f058d5ee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 491.114497][T11304] RAX: ffffffffffffffda RBX: 00007f058c9b5fa0 RCX: 00007f058c78ebe9 [ 491.114512][T11304] RDX: 0000000000040001 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 491.114527][T11304] RBP: 00007f058c811e19 R08: 0000000000000000 R09: 0000000000000000 [ 491.114541][T11304] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 491.114554][T11304] R13: 00007f058c9b6038 R14: 00007f058c9b5fa0 R15: 00007ffe70031d48 [ 491.114585][T11304] [ 491.118539][T11304] Mem-Info: [ 492.233223][T11304] active_anon:12697 inactive_anon:21 isolated_anon:0 [ 492.233223][T11304] active_file:4947 inactive_file:51574 isolated_file:0 [ 492.233223][T11304] unevictable:768 dirty:524 writeback:6 [ 492.233223][T11304] slab_reclaimable:10975 slab_unreclaimable:95903 [ 492.233223][T11304] mapped:26195 shmem:1871 pagetables:1197 [ 492.233223][T11304] sec_pagetables:0 bounce:0 [ 492.233223][T11304] kernel_misc_reclaimable:0 [ 492.233223][T11304] free:1305481 free_pcp:19735 free_cma:0 [ 492.354281][T11304] Node 0 active_anon:46524kB inactive_anon:84kB active_file:19788kB inactive_file:206092kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:100672kB dirty:2088kB writeback:24kB shmem:5948kB shmem_thp:2048kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11024kB pagetables:4636kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 492.474781][T11304] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:8kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:80kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 492.569115][T11304] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 492.678430][T11304] lowmem_reserve[]: 0 2480 2481 2481 2481 [ 492.700649][T11304] Node 0 DMA32 free:1336568kB boost:0kB min:34076kB low:42592kB high:51108kB reserved_highatomic:0KB free_highatomic:0KB active_anon:46740kB inactive_anon:84kB active_file:19788kB inactive_file:204784kB unevictable:1536kB writepending:2136kB present:3129332kB managed:2539616kB mlocked:0kB bounce:0kB free_pcp:40536kB local_pcp:40536kB free_cma:0kB [ 492.820016][T11304] lowmem_reserve[]: 0 0 1 1 1 [ 492.843879][T11304] Node 0 Normal free:12kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1316kB unevictable:0kB writepending:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:16kB free_cma:0kB [ 492.959030][T11304] lowmem_reserve[]: 0 0 0 0 0 [ 492.982809][T11304] Node 1 Normal free:3871440kB boost:0kB min:55804kB low:69752kB high:83700kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:8kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:40052kB local_pcp:40052kB free_cma:0kB [ 493.124838][T11304] lowmem_reserve[]: 0 0 0 0 0 [ 493.157093][T11304] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 493.216624][T11304] Node 0 DMA32: 1956*4kB (ME) 1181*8kB (UM) 1178*16kB (UM) 715*32kB (UM) 404*64kB (UM) 275*128kB (ME) 169*256kB (M) 38*512kB (ME) 19*1024kB (ME) 2*2048kB (UM) 275*4096kB (UM) = 1332728kB [ 493.297373][T11304] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 493.358618][T11304] Node 1 Normal: 13*4kB (UME) 9*8kB (UME) 12*16kB (ME) 10*32kB (ME) 6*64kB (ME) 6*128kB (ME) 2*256kB (ME) 3*512kB (ME) 1*1024kB (M) 2*2048kB (UE) 943*4096kB (UM) = 3871484kB [ 493.405756][T11304] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 493.441211][T11304] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 493.471099][T11304] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 493.497530][T11304] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 493.527797][T11304] 59427 total pagecache pages [ 493.543225][T11304] 12 pages in swap cache [ 493.556206][T11304] Free swap = 124708kB [ 493.567820][T11304] Total swap = 124996kB [ 493.584081][T11304] 2097051 pages RAM [ 493.594727][T11304] 0 pages HighMem/MovableOnly [ 493.611658][T11304] 430185 pages reserved [ 493.623450][T11304] 0 pages cma reserved [ 493.635887][T11304] pty pty228: ldisc open failed (-12), clearing slot 228 [ 493.657927][T11309] tty tty12: ldisc open failed (-12), clearing slot 11 [ 493.672435][T11310] pty pty225: ldisc open failed (-12), clearing slot 225 [ 493.701258][T11321] tty tty12: ldisc open failed (-12), clearing slot 11 [ 495.203110][T11352] random: crng reseeded on system resumption [ 495.249396][T11352] FAULT_INJECTION: forcing a failure. [ 495.249396][T11352] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 495.344614][T11352] CPU: 1 UID: 0 PID: 11352 Comm: syz.3.1074 Not tainted 6.16.0-syzkaller-12256-g561c80369df0 #0 PREEMPT(full) [ 495.344649][T11352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 495.344664][T11352] Call Trace: [ 495.344672][T11352] [ 495.344680][T11352] dump_stack_lvl+0x16c/0x1f0 [ 495.344715][T11352] should_fail_ex+0x512/0x640 [ 495.344753][T11352] should_fail_alloc_page+0xe7/0x130 [ 495.344788][T11352] prepare_alloc_pages+0x3c2/0x610 [ 495.344829][T11352] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 495.344867][T11352] ? stack_trace_save+0x8e/0xc0 [ 495.344894][T11352] ? __pfx_stack_trace_save+0x10/0x10 [ 495.344923][T11352] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 495.344957][T11352] ? kasan_save_stack+0x42/0x60 [ 495.344982][T11352] ? kasan_save_stack+0x33/0x60 [ 495.345012][T11352] ? do_dentry_open+0x97f/0x1530 [ 495.345039][T11352] ? vfs_open+0x82/0x3f0 [ 495.345071][T11352] ? path_openat+0x1de4/0x2cb0 [ 495.345105][T11352] ? do_filp_open+0x20b/0x470 [ 495.345131][T11352] ? do_sys_openat2+0x11b/0x1d0 [ 495.345165][T11352] ? __x64_sys_openat+0x174/0x210 [ 495.345201][T11352] ? do_syscall_64+0xcd/0x490 [ 495.345230][T11352] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.345256][T11352] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 495.345290][T11352] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 495.345328][T11352] ? policy_nodemask+0xea/0x4e0 [ 495.345361][T11352] alloc_pages_mpol+0x1fb/0x550 [ 495.345394][T11352] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 495.345434][T11352] alloc_pages_noprof+0x131/0x390 [ 495.345467][T11352] get_zeroed_page_noprof+0x18/0xb0 [ 495.345502][T11352] get_image_page+0x18/0x190 [ 495.345526][T11352] alloc_rtree_node+0x3c/0xb0 [ 495.345550][T11352] memory_bm_create+0x519/0x810 [ 495.345585][T11352] create_basic_memory_bitmaps+0x10b/0x320 [ 495.345617][T11352] snapshot_open+0x235/0x2b0 [ 495.345650][T11352] ? __pfx_snapshot_open+0x10/0x10 [ 495.345679][T11352] misc_open+0x35a/0x420 [ 495.345704][T11352] ? __pfx_misc_open+0x10/0x10 [ 495.345728][T11352] chrdev_open+0x231/0x6a0 [ 495.345759][T11352] ? __pfx_apparmor_file_open+0x10/0x10 [ 495.345785][T11352] ? __pfx_chrdev_open+0x10/0x10 [ 495.345818][T11352] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 495.345850][T11352] do_dentry_open+0x97f/0x1530 [ 495.345880][T11352] ? __pfx_chrdev_open+0x10/0x10 [ 495.345917][T11352] vfs_open+0x82/0x3f0 [ 495.345959][T11352] path_openat+0x1de4/0x2cb0 [ 495.345996][T11352] ? __pfx_path_openat+0x10/0x10 [ 495.346032][T11352] do_filp_open+0x20b/0x470 [ 495.346060][T11352] ? __pfx_do_filp_open+0x10/0x10 [ 495.346115][T11352] ? alloc_fd+0x471/0x7d0 [ 495.346148][T11352] do_sys_openat2+0x11b/0x1d0 [ 495.346185][T11352] ? __pfx_do_sys_openat2+0x10/0x10 [ 495.346219][T11352] ? __fget_files+0x204/0x3c0 [ 495.346254][T11352] __x64_sys_openat+0x174/0x210 [ 495.346292][T11352] ? __pfx___x64_sys_openat+0x10/0x10 [ 495.346340][T11352] do_syscall_64+0xcd/0x490 [ 495.346372][T11352] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.346396][T11352] RIP: 0033:0x7f432df8ebe9 [ 495.346415][T11352] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 495.346438][T11352] RSP: 002b:00007f432eddf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 495.346461][T11352] RAX: ffffffffffffffda RBX: 00007f432e1b5fa0 RCX: 00007f432df8ebe9 [ 495.346476][T11352] RDX: 00000000001438bf RSI: 0000200000000000 RDI: ffffffffffffff9c [ 495.346491][T11352] RBP: 00007f432e011e19 R08: 0000000000000000 R09: 0000000000000000 [ 495.346505][T11352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 495.346519][T11352] R13: 00007f432e1b6038 R14: 00007f432e1b5fa0 R15: 00007ffd7a599f18 [ 495.346549][T11352] [ 496.104253][T11362] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1076'. [ 497.715478][T11391] vcan0: tx drop: invalid da for name 0x000000000000003f [ 498.128713][ T30] audit: type=1800 audit(6138074013.741:14): pid=11400 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1083" name="SYSV00000008" dev="hugetlbfs" ino=0 res=0 errno=0 [ 499.597311][T11423] syz.2.1088 uses obsolete (PF_INET,SOCK_PACKET) [ 501.383153][T11444] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 501.495353][T11444] openvswitch: .SR: Dropping previously announced user features [ 501.693472][T11448] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 501.922503][T11448] .SR: entered promiscuous mode [ 501.961500][T11451] i2c i2c-0: new_device: Missing parameters [ 501.970001][T11453] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 502.104655][T11449] Invalid ELF header magic: != ELF g&[ 503.626911][T11477] netlink: 'syz.1.1102': attribute type 33 has an invalid length. [ 504.056558][T11483] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 504.324720][T11486] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 504.402274][T11483] openvswitch: .SR: Dropping previously announced user features [ 504.429402][T11486] openvswitch: .SR: Dropping previously announced user features [ 504.688999][T11486] Invalid ELF header magic: != ELF [ 504.797792][T11494] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 506.982213][T11524] ubi0: attaching mtd0 [ 507.014661][T11524] ubi0: scanning is finished [ 507.037710][T11524] ubi0 warning: ubi_read_volume_table: volume table copy #2 is corrupted [ 507.120520][T11524] ubi0: volume table was restored [ 507.143445][T11527] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 507.661706][T11524] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 507.681270][T11532] .SR: entered promiscuous mode [ 507.740013][T11524] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 507.892071][T11524] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 507.983179][T11524] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 508.050891][T11524] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 508.058006][T11524] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 508.151016][T11524] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 3605622447 [ 508.225033][T11524] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 508.285170][T11526] ubi0: detaching mtd0 [ 508.295203][T11539] ubi0: background thread "ubi_bgt0d" started, PID 11539 [ 508.375087][T11526] ubi0: mtd0 is detached [ 508.444676][T11550] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 511.380425][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 511.387083][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 511.445024][T11592] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1125'. [ 511.569365][T11595] netlink: 93 bytes leftover after parsing attributes in process `syz.0.1125'. [ 511.828416][T11599] FAULT_INJECTION: forcing a failure. [ 511.828416][T11599] name failslab, interval 1, probability 0, space 0, times 0 [ 512.103533][T11599] CPU: 1 UID: 0 PID: 11599 Comm: syz.2.1126 Not tainted 6.16.0-syzkaller-12256-g561c80369df0 #0 PREEMPT(full) [ 512.103570][T11599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 512.103585][T11599] Call Trace: [ 512.103592][T11599] [ 512.103601][T11599] dump_stack_lvl+0x16c/0x1f0 [ 512.103636][T11599] should_fail_ex+0x512/0x640 [ 512.103668][T11599] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 512.103708][T11599] should_failslab+0xc2/0x120 [ 512.103740][T11599] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 512.103771][T11599] ? lockdep_hardirqs_on+0x7c/0x110 [ 512.103799][T11599] ? xfrm4_net_init+0x9e/0x1c0 [ 512.103833][T11599] ? __percpu_counter_init_many+0x2c1/0x3b0 [ 512.103864][T11599] ? __pfx_xfrm4_net_init+0x10/0x10 [ 512.103894][T11599] kmemdup_noprof+0x29/0x60 [ 512.103924][T11599] xfrm4_net_init+0x9e/0x1c0 [ 512.103954][T11599] ? __pfx_xfrm4_net_init+0x10/0x10 [ 512.103982][T11599] ops_init+0x1e2/0x5f0 [ 512.104017][T11599] setup_net+0x10f/0x380 [ 512.104046][T11599] ? lockdep_init_map_type+0x5c/0x280 [ 512.104088][T11599] ? __pfx_setup_net+0x10/0x10 [ 512.104122][T11599] ? debug_mutex_init+0x37/0x70 [ 512.104148][T11599] copy_net_ns+0x2a6/0x5f0 [ 512.104186][T11599] create_new_namespaces+0x3ea/0xa90 [ 512.104221][T11599] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 512.104251][T11599] ksys_unshare+0x45b/0xa40 [ 512.104285][T11599] ? __pfx_ksys_unshare+0x10/0x10 [ 512.104325][T11599] ? xfd_validate_state+0x61/0x180 [ 512.104370][T11599] __x64_sys_unshare+0x31/0x40 [ 512.104402][T11599] do_syscall_64+0xcd/0x490 [ 512.104434][T11599] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.104459][T11599] RIP: 0033:0x7f058c78ebe9 [ 512.104477][T11599] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 512.104500][T11599] RSP: 002b:00007f058d5ac038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 512.104523][T11599] RAX: ffffffffffffffda RBX: 00007f058c9b6180 RCX: 00007f058c78ebe9 [ 512.104538][T11599] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 512.104552][T11599] RBP: 00007f058c811e19 R08: 0000000000000000 R09: 0000000000000000 [ 512.104566][T11599] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 512.104580][T11599] R13: 00007f058c9b6218 R14: 00007f058c9b6180 R15: 00007ffe70031d48 [ 512.104610][T11599] [ 512.351457][ C1] vkms_vblank_simulate: vblank timer overrun [ 514.556884][T11625] FAULT_INJECTION: forcing a failure. [ 514.556884][T11625] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 514.674145][T11625] CPU: 1 UID: 0 PID: 11625 Comm: syz.1.1130 Not tainted 6.16.0-syzkaller-12256-g561c80369df0 #0 PREEMPT(full) [ 514.674188][T11625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 514.674203][T11625] Call Trace: [ 514.674212][T11625] [ 514.674222][T11625] dump_stack_lvl+0x16c/0x1f0 [ 514.674256][T11625] should_fail_ex+0x512/0x640 [ 514.674294][T11625] should_fail_alloc_page+0xe7/0x130 [ 514.674329][T11625] prepare_alloc_pages+0x3c2/0x610 [ 514.674370][T11625] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 514.674402][T11625] ? kasan_save_stack+0x42/0x60 [ 514.674428][T11625] ? kasan_save_stack+0x33/0x60 [ 514.674453][T11625] ? kasan_save_track+0x14/0x30 [ 514.674479][T11625] ? __kasan_slab_alloc+0x89/0x90 [ 514.674506][T11625] ? kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 514.674533][T11625] ? ptlock_alloc+0x1f/0x70 [ 514.674554][T11625] ? pte_alloc_one+0x82/0x3a0 [ 514.674577][T11625] ? __pte_alloc+0x6d/0x3c0 [ 514.674607][T11625] ? copy_page_range+0x3b83/0x5c80 [ 514.674628][T11625] ? dup_mmap+0xe88/0x21d0 [ 514.674661][T11625] ? copy_process+0x4081/0x7690 [ 514.674690][T11625] ? kernel_clone+0xfc/0x930 [ 514.674717][T11625] ? __do_sys_clone+0xce/0x120 [ 514.674745][T11625] ? do_syscall_64+0xcd/0x490 [ 514.674773][T11625] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.674800][T11625] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 514.674842][T11625] ? __lock_acquire+0x62e/0x1ce0 [ 514.674876][T11625] ? __lock_acquire+0xb97/0x1ce0 [ 514.674906][T11625] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 514.674945][T11625] ? policy_nodemask+0xea/0x4e0 [ 514.674979][T11625] alloc_pages_mpol+0x1fb/0x550 [ 514.675012][T11625] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 514.675042][T11625] ? page_table_check_set+0x627/0x750 [ 514.675079][T11625] alloc_pages_noprof+0x131/0x390 [ 514.675112][T11625] pte_alloc_one+0x1c/0x3a0 [ 514.675137][T11625] __pte_alloc+0x6d/0x3c0 [ 514.675169][T11625] ? __pfx___pte_alloc+0x10/0x10 [ 514.675207][T11625] ? __pfx___might_resched+0x10/0x10 [ 514.675230][T11625] ? copy_page_range+0x1fa8/0x5c80 [ 514.675257][T11625] copy_page_range+0x3b83/0x5c80 [ 514.675315][T11625] ? __pfx_copy_page_range+0x10/0x10 [ 514.675349][T11625] ? __pfx___might_resched+0x10/0x10 [ 514.675385][T11625] ? __pfx_mas_store+0x10/0x10 [ 514.675416][T11625] ? __vma_enter_locked+0x163/0x3f0 [ 514.675442][T11625] ? dup_mmap+0xe38/0x21d0 [ 514.675476][T11625] ? down_write+0x14d/0x200 [ 514.675512][T11625] ? up_write+0x1b2/0x520 [ 514.675550][T11625] dup_mmap+0xe88/0x21d0 [ 514.675597][T11625] ? __pfx_dup_mmap+0x10/0x10 [ 514.675654][T11625] copy_process+0x4081/0x7690 [ 514.675684][T11625] ? __pfx___futex_wait+0x10/0x10 [ 514.675731][T11625] ? __pfx_copy_process+0x10/0x10 [ 514.675761][T11625] ? futex_private_hash_put+0x176/0x300 [ 514.675793][T11625] ? futex_private_hash_put+0x18a/0x300 [ 514.675827][T11625] kernel_clone+0xfc/0x930 [ 514.675859][T11625] ? __pfx_kernel_clone+0x10/0x10 [ 514.675924][T11625] __do_sys_clone+0xce/0x120 [ 514.675955][T11625] ? __pfx___do_sys_clone+0x10/0x10 [ 514.676000][T11625] ? xfd_validate_state+0x61/0x180 [ 514.676034][T11625] ? __pfx_do_writev+0x10/0x10 [ 514.676068][T11625] do_syscall_64+0xcd/0x490 [ 514.676101][T11625] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.676195][T11625] RIP: 0033:0x7fb3b2b8ebe9 [ 514.676219][T11625] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 514.676243][T11625] RSP: 002b:00007fb3b399afe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 514.676264][T11625] RAX: ffffffffffffffda RBX: 00007fb3b2db6090 RCX: 00007fb3b2b8ebe9 [ 514.676280][T11625] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000002360411 [ 514.676294][T11625] RBP: 00007fb3b2c11e19 R08: 0000000000000000 R09: 0000000000000000 [ 514.676308][T11625] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 514.676322][T11625] R13: 00007fb3b2db6128 R14: 00007fb3b2db6090 R15: 00007ffcb0a5f8c8 [ 514.676352][T11625] [ 515.078335][ C1] vkms_vblank_simulate: vblank timer overrun [ 521.352046][ T30] audit: type=1800 audit(6138074037.070:15): pid=11724 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1146" name="features" dev="configfs" ino=31223 res=0 errno=0 [ 521.531104][T11729] ERROR: Out of memory at tomoyo_memory_ok. [ 522.051275][T11737] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 522.132877][T11737] openvswitch: .SR: Dropping previously announced user features [ 522.316640][T11739] Invalid ELF header magic: != ELF [ 522.381518][T11741] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 522.619766][T11746] openvswitch: .SR: Dropping previously announced user features [ 523.059981][T11737] could not allocate digest TFM handle [ 523.343088][T11732] ERROR: Out of memory at tomoyo_memory_ok. [ 523.481852][T11754] random: crng reseeded on system resumption [ 524.032286][T11741] Invalid ELF header magic: != ELF [ 524.810734][T11741] could not allocate digest TFM handle [ 528.866759][T11808] ERROR: Out of memory at tomoyo_memory_ok. [ 531.035436][T11830] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 531.218281][T11832] openvswitch: .SR: Dropping previously announced user features [ 531.408241][T11830] Invalid ELF header magic: != ELF [ 531.759091][T11835] usbip-vudc usbip-vudc.0: gadget not bound [ 532.725880][T11847] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 532.963274][T11847] openvswitch: .SR: Dropping previously announced user features [ 532.974033][T11832] could not allocate digest TFM handle [ 533.039809][T11850] Invalid ELF header magic: != ELF g&[ 537.134773][T11894] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 538.944852][T11926] netlink: 330 bytes leftover after parsing attributes in process `syz.0.1181'. [ 539.490568][T11926] ›: renamed from hsr0 (while UP) [ 540.765663][T11941] ERROR: Out of memory at tomoyo_memory_ok. [ 541.721683][T11958] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 541.807141][T11958] openvswitch: .SR: Dropping previously announced user features [ 542.601624][T11961] Invalid ELF header magic: != ELF [ 543.173046][T11961] could not allocate digest TFM handle [ 545.096062][T12009] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 545.166846][ T30] audit: type=1800 audit(38871.931:16): pid=12012 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1192" name="features" dev="configfs" ino=32227 res=0 errno=0 [ 545.307895][T12009] .SR: entered promiscuous mode [ 545.490860][T12014] Invalid ELF header magic: != ELF [ 546.737503][T12009] could not allocate digest TFM handle [ 547.469228][T12051] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 547.570991][T12051] openvswitch: .SR: Dropping previously announced user features [ 547.818953][T12061] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 547.872679][T12051] Invalid ELF header magic: != ELF [ 547.914911][T12061] openvswitch: .SR: Dropping previously announced user features [ 548.588286][T12061] Invalid ELF header magic: != ELF [ 548.832111][T12051] could not allocate digest TFM handle [ 549.112019][T12061] could not allocate digest TFM handle [ 550.320499][T12094] FAULT_INJECTION: forcing a failure. [ 550.320499][T12094] name failslab, interval 1, probability 0, space 0, times 0 [ 550.521131][T12094] CPU: 1 UID: 0 PID: 12094 Comm: syz.1.1204 Not tainted 6.16.0-syzkaller-12256-g561c80369df0 #0 PREEMPT(full) [ 550.521167][T12094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 550.521182][T12094] Call Trace: [ 550.521191][T12094] [ 550.521200][T12094] dump_stack_lvl+0x16c/0x1f0 [ 550.521235][T12094] should_fail_ex+0x512/0x640 [ 550.521267][T12094] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 550.521303][T12094] should_failslab+0xc2/0x120 [ 550.521334][T12094] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 550.521366][T12094] ? xfrm_sysctl_init+0x10a/0x2d0 [ 550.521404][T12094] kmemdup_noprof+0x29/0x60 [ 550.521433][T12094] xfrm_sysctl_init+0x10a/0x2d0 [ 550.521469][T12094] xfrm_net_init+0x842/0xcc0 [ 550.521506][T12094] ? __pfx_xfrm_net_init+0x10/0x10 [ 550.521537][T12094] ops_init+0x1e2/0x5f0 [ 550.521572][T12094] setup_net+0x10f/0x380 [ 550.521600][T12094] ? lockdep_init_map_type+0x5c/0x280 [ 550.521634][T12094] ? __pfx_setup_net+0x10/0x10 [ 550.521666][T12094] ? debug_mutex_init+0x37/0x70 [ 550.521692][T12094] copy_net_ns+0x2a6/0x5f0 [ 550.521729][T12094] create_new_namespaces+0x3ea/0xa90 [ 550.521762][T12094] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 550.521791][T12094] ksys_unshare+0x45b/0xa40 [ 550.521834][T12094] ? __pfx_ksys_unshare+0x10/0x10 [ 550.521868][T12094] ? xfd_validate_state+0x61/0x180 [ 550.521912][T12094] __x64_sys_unshare+0x31/0x40 [ 550.521944][T12094] do_syscall_64+0xcd/0x490 [ 550.521977][T12094] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 550.522000][T12094] RIP: 0033:0x7fb3b2b8ebe9 [ 550.522019][T12094] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 550.522042][T12094] RSP: 002b:00007fb3b397a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 550.522066][T12094] RAX: ffffffffffffffda RBX: 00007fb3b2db6180 RCX: 00007fb3b2b8ebe9 [ 550.522081][T12094] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 550.522095][T12094] RBP: 00007fb3b2c11e19 R08: 0000000000000000 R09: 0000000000000000 [ 550.522109][T12094] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 550.522123][T12094] R13: 00007fb3b2db6218 R14: 00007fb3b2db6180 R15: 00007ffcb0a5f8c8 [ 550.522153][T12094] [ 550.765067][ C1] vkms_vblank_simulate: vblank timer overrun [ 551.707949][T12115] sd 0:0:1:0: PR command failed: 1026 [ 551.835383][T12115] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 551.842868][T12115] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 552.987822][ T30] audit: type=1800 audit(38879.787:17): pid=12128 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1210" name="features" dev="configfs" ino=32487 res=0 errno=0 [ 553.618009][T12134] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 553.683103][T12134] openvswitch: .SR: Dropping previously announced user features [ 553.942043][T12141] random: crng reseeded on system resumption [ 554.225052][T12134] Invalid ELF header magic: != ELF                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  syzkaller syzkaller login: [ 669.300991][T13664] delete_channel: no stack [ 669.735847][T13667] capability: warning: `syz.0.1513' uses deprecated v2 capabilities in a way that may be insecure [ 670.409463][T13671] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 670.507732][T13671] openvswitch: .SR: Dropping previously announced user features [ 671.198015][T13671] could not allocate digest TFM handle [ 674.451742][T13717] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 674.522583][T13717] openvswitch: .SR: Dropping previously announced user features [ 674.688728][T13720] Invalid ELF header magic: != ELF [ 675.749072][T13717] could not allocate digest TFM handle [ 675.796300][T13720] could not allocate digest TFM handle [ 679.690425][T13774] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input23 [ 680.141127][T13780] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1528'. [ 680.823801][T13788] ERROR: Out of memory at tomoyo_memory_ok. g&g&[ 681.773608][T13812] ERROR: Out of memory at tomoyo_memory_ok. [ 681.892756][T13814] netlink: 'syz.0.1535': attribute type 33 has an invalid length. [ 682.143360][T13821] ERROR: Out of memory at tomoyo_memory_ok. [ 682.167561][T13823] ERROR: Out of memory at tomoyo_memory_ok. [ 682.443734][T13829] ERROR: Out of memory at tomoyo_memory_ok. [ 682.473116][T13830] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 682.524041][T13830] openvswitch: .SR: Dropping previously announced user features [ 682.676337][T13830] Invalid ELF header magic: != ELF [ 683.266127][T13830] could not allocate digest TFM handle [ 683.266563][T13832] could not allocate digest TFM handle [ 683.969770][T13853] ERROR: Out of memory at tomoyo_memory_ok. g&[ 686.083417][T13871] netlink: 'syz.3.1548': attribute type 33 has an invalid length. [ 687.031051][T13889] ERROR: Out of memory at tomoyo_memory_ok. [ 687.338792][T13891] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 687.377754][T13891] openvswitch: .SR: Dropping previously announced user features [ 687.528077][T13891] Invalid ELF header magic: != ELF syzkaller syzkaller login: [ 688.106440][T13901] ERROR: Out of memory at tomoyo_memory_ok. [ 688.427983][T13906] ERROR: Out of memory at tomoyo_memory_ok. [ 688.489064][T13908] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 688.563202][T13891] could not allocate digest TFM handle [ 688.587801][T13896] could not allocate digest TFM handle [ 688.610978][T13908] openvswitch: .SR: Dropping previously announced user features [ 688.866165][T13908] Invalid ELF header magic: != ELF [ 688.886106][T13914] ERROR: Out of memory at tomoyo_memory_ok. [ 689.068312][T13919] ERROR: Out of memory at tomoyo_memory_ok. [ 689.326727][T13924] ERROR: Out of memory at tomoyo_memory_ok. [ 689.419903][T13929] ERROR: Out of memory at tomoyo_memory_ok. [ 689.672177][T13932] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 689.777902][T13932] openvswitch: .SR: Dropping previously announced user features [ 689.869664][T13910] could not allocate digest TFM handle [ 689.927154][T13908] could not allocate digest TFM handle [ 689.984230][T13932] Invalid ELF header magic: != ELF [ 690.951377][T13938] could not allocate digest TFM handle [ 691.009342][T13932] could not allocate digest TFM handle [ 692.253423][T13969] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input24 [ 692.465809][T13975] ERROR: Out of memory at tomoyo_memory_ok. [ 692.595157][T13977] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1571'. [ 692.848392][T13982] ERROR: Out of memory at tomoyo_memory_ok. g&[ 693.415797][T13991] netlink: 'syz.3.1576': attribute type 33 has an invalid length. [ 694.023286][T13997] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 694.047138][T13997] openvswitch: .SR: Dropping previously announced user features [ 694.145560][T13997] Invalid ELF header magic: != ELF [ 694.782199][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 694.790915][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 695.147468][T14000] could not allocate digest TFM handle [ 695.198506][T13997] could not allocate digest TFM handle [ 695.827685][T14024] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. g&[ 697.520205][T14039] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 697.551228][T14039] openvswitch: .SR: Dropping previously announced user features [ 697.578251][T14039] Invalid ELF header magic: != ELF [ 697.972784][T14048] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1585'. [ 698.053472][T14039] could not allocate digest TFM handle [ 698.140302][T14043] could not allocate digest TFM handle [ 698.326818][T14053] ERROR: Out of memory at tomoyo_memory_ok. [ 698.978697][T14064] ERROR: Out of memory at tomoyo_memory_ok. [ 700.811143][T14084] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 700.873317][T14084] openvswitch: .SR: Dropping previously announced user features [ 700.961052][T14091] Invalid ELF header magic: != ELF [ 701.067685][T14094] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 701.086446][T14087] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 701.250369][T14094] openvswitch: .SR: Dropping previously announced user features [ 701.472728][T14097] Invalid ELF header magic: != ELF [ 701.494266][T14091] could not allocate digest TFM handle [ 701.506354][T14084] could not allocate digest TFM handle [ 702.285711][T14094] could not allocate digest TFM handle [ 702.325590][T14105] could not allocate digest TFM handle [ 702.841580][T14115] ERROR: Out of memory at tomoyo_memory_ok. [ 703.144647][T14117] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1603'. [ 703.639488][T14131] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1608'. [ 704.906949][T14143] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1609'. g&[ 706.658202][T14152] netlink: 'syz.3.1611': attribute type 33 has an invalid length. [ 707.011515][T14161] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1614'. [ 707.061749][T14165] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 707.073701][T14165] openvswitch: .SR: Dropping previously announced user features [ 707.252530][T14165] Invalid ELF header magic: != ELF [ 707.988794][T14178] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 708.052798][T14178] openvswitch: .SR: Dropping previously announced user features [ 708.122124][T14165] could not allocate digest TFM handle [ 708.178998][T14182] Invalid ELF header magic: != ELF [ 708.521250][T14188] ERROR: Out of memory at tomoyo_memory_ok. [ 708.712381][T14178] could not allocate digest TFM handle [ 708.740646][T14182] could not allocate digest TFM handle [ 708.867599][T14194] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 708.932837][T14194] openvswitch: .SR: Dropping previously announced user features [ 709.048471][T14199] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1622'. [ 709.112307][T14197] Invalid ELF header magic: != ELF [ 709.840975][T14194] could not allocate digest TFM handle [ 709.898948][T14197] could not allocate digest TFM handle g&[ 710.515252][T14216] netlink: 'syz.3.1624': attribute type 33 has an invalid length. [ 711.179967][T14223] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1625'. [ 712.297012][T14238] ERROR: Out of memory at tomoyo_memory_ok. [ 712.704592][T14244] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1629'. [ 714.605352][T14266] ERROR: Out of memory at tomoyo_memory_ok. [ 714.709668][T14269] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 714.734269][T14269] openvswitch: .SR: Dropping previously announced user features [ 714.836026][T14269] Invalid ELF header magic: != ELF [ 715.548570][T14282] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1637'. [ 715.790355][T14271] could not allocate digest TFM handle [ 715.834055][T14269] could not allocate digest TFM handle [ 716.157136][T14293] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1638'. [ 716.692197][T14296] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 716.768249][T14296] openvswitch: .SR: Dropping previously announced user features [ 716.860029][T14301] Invalid ELF header magic: != ELF [ 717.359804][T14296] could not allocate digest TFM handle [ 717.444264][T14301] could not allocate digest TFM handle [ 719.954730][T14335] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1645'. [ 720.220109][T14345] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1649'. [ 722.179128][T14357] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1651'. [ 722.411434][T14361] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1652'. [ 723.377150][T14369] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1653'. g&[ 724.476986][T14383] netlink: 338 bytes leftover after parsing attributes in process `syz.1.1656'. [ 728.208483][T14427] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 728.269603][T14427] openvswitch: .SR: Dropping previously announced user features [ 728.440661][T14427] Invalid ELF header magic: != ELF [ 729.321835][T14428] could not allocate digest TFM handle [ 729.361701][T14427] could not allocate digest TFM handle [ 730.520239][T14457] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 730.592244][T14457] openvswitch: .SR: Dropping previously announced user features [ 730.832376][T14457] Invalid ELF header magic: != ELF [ 730.906566][T14465] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1671'. [ 731.382843][T14470] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1672'. [ 731.414990][T14457] could not allocate digest TFM handle [ 731.694097][T14475] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1673'. [ 732.118138][T14479] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1674'. [ 732.880941][T14485] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1675'. [ 733.403180][T14488] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1676'. [ 733.705564][T14493] ERROR: Out of memory at tomoyo_memory_ok. [ 734.032565][T14495] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1678'. [ 736.264209][T14524] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1684'. [ 736.799704][T14530] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1685'. [ 736.938282][T14533] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 736.993264][T14533] openvswitch: .SR: Dropping previously announced user features [ 737.237943][T14533] Invalid ELF header magic: != ELF [ 737.920134][T14536] could not allocate digest TFM handle [ 737.958089][T14533] could not allocate digest TFM handle [ 738.104514][T14546] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1687'. [ 739.879644][T14568] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 739.939647][T14568] openvswitch: .SR: Dropping previously announced user features [ 740.109745][T14568] Invalid ELF header magic: != ELF [ 740.180408][T14572] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1692'. [ 740.989894][T14570] could not allocate digest TFM handle [ 741.047028][T14568] could not allocate digest TFM handle [ 743.385017][T14617] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1700'. [ 743.644526][T14619] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1701'. [ 744.097869][T14624] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 744.158876][T14624] openvswitch: .SR: Dropping previously announced user features [ 744.338776][T14625] Invalid ELF header magic: != ELF [ 745.251201][T14625] could not allocate digest TFM handle [ 745.265118][T14624] could not allocate digest TFM handle g&[ 748.390402][T14686] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 748.470175][T14686] openvswitch: .SR: Dropping previously announced user features [ 748.641316][T14686] Invalid ELF header magic: != ELF [ 749.516043][T14686] could not allocate digest TFM handle [ 749.548875][T14690] could not allocate digest TFM handle [ 750.249915][T14715] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1719'. [ 752.207425][T14735] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1723'. [ 753.506188][T14749] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1725'. [ 753.787654][T14752] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1726'. [ 755.417420][T14768] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1729'. [ 755.903331][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 755.911426][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 756.920138][T14784] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 756.986264][T14784] openvswitch: .SR: Dropping previously announced user features [ 757.212108][T14786] Invalid ELF header magic: != ELF [ 757.393018][T14791] ERROR: Out of memory at tomoyo_memory_ok. [ 757.902849][T14786] could not allocate digest TFM handle [ 757.938930][T14784] could not allocate digest TFM handle [ 758.931183][T14814] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 759.002258][T14814] openvswitch: .SR: Dropping previously announced user features [ 759.171332][T14814] Invalid ELF header magic: != ELF [ 759.889260][T14814] could not allocate digest TFM handle [ 759.930547][T14817] could not allocate digest TFM handle [ 760.327710][T14835] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1740'. [ 762.219116][T14857] ERROR: Out of memory at tomoyo_memory_ok. [ 763.843695][T14879] ERROR: Out of memory at tomoyo_memory_ok. [ 767.539053][T14935] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 767.599299][T14935] openvswitch: .SR: Dropping previously announced user features [ 767.722725][T14935] Invalid ELF header magic: != ELF [ 768.352268][T14949] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1762'. [ 768.670344][T14938] could not allocate digest TFM handle [ 768.711584][T14935] could not allocate digest TFM handle [ 769.133536][T14960] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 769.241597][T14960] openvswitch: .SR: Dropping previously announced user features [ 769.415340][T14960] Invalid ELF header magic: != ELF [ 769.543627][T14965] ERROR: Out of memory at tomoyo_memory_ok. [ 770.128272][T14961] could not allocate digest TFM handle [ 770.185382][T14960] could not allocate digest TFM handle [ 771.266133][T14993] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1769'. [ 771.963028][T14998] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1770'. [ 772.938949][T15005] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1772'. [ 773.120326][T15011] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1774'. [ 774.414668][T15018] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1775'. [ 776.574926][T15045] ERROR: Out of memory at tomoyo_memory_ok. [ 778.375546][T15071] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 778.437590][T15071] openvswitch: .SR: Dropping previously announced user features [ 778.566645][T15071] Invalid ELF header magic: != ELF [ 779.230483][T15079] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1787'. [ 779.516865][T15072] could not allocate digest TFM handle [ 779.578076][T15071] could not allocate digest TFM handle [ 781.223925][T15107] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1791'. [ 782.406386][T15123] ERROR: Out of memory at tomoyo_memory_ok. [ 783.369535][T15134] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1796'. [ 783.707961][T15140] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1798'. [ 786.291817][T15173] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1803'. [ 790.097768][T15217] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 790.161960][T15217] openvswitch: .SR: Dropping previously announced user features [ 790.319965][T15217] Invalid ELF header magic: != ELF [ 791.187675][T15217] could not allocate digest TFM handle [ 791.882679][T15240] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1816'. [ 792.841182][T15247] ERROR: Out of memory at tomoyo_memory_ok. [ 794.824317][T15273] netlink: 330 bytes leftover after parsing attributes in process `syz.1.1824'. [ 794.887406][T15273] ubi0: attaching mtd0 [ 794.921837][T15273] ubi0: scanning is finished [ 794.957484][T15273] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 795.149448][T15273] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 797.075793][T15307] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 797.275596][T15307] Invalid ELF header magic: != ELF [ 798.224461][T15312] could not allocate digest TFM handle [ 798.286377][T15307] could not allocate digest TFM handle [ 798.767613][T15335] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1834'. [ 803.123095][T15391] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 803.392475][T15391] Invalid ELF header magic: != ELF [ 803.950027][T15401] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1845'. [ 804.242684][T15391] could not allocate digest TFM handle [ 804.293961][T15392] could not allocate digest TFM handle [ 805.405077][T15423] netlink: 330 bytes leftover after parsing attributes in process `syz.0.1848'. [ 805.463527][T15423] ubi0: attaching mtd0 [ 805.510355][T15423] ubi0: scanning is finished [ 805.535490][T15423] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 805.741831][T15423] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 808.457857][T15459] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1855'. [ 810.890806][T15482] netlink: 330 bytes leftover after parsing attributes in process `syz.3.1860'. [ 810.962374][T15482] ubi0: attaching mtd0 [ 810.979938][T15482] ubi0: scanning is finished [ 811.009634][T15482] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 811.260093][T15482] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 813.750890][T15525] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 813.945760][T15525] Invalid ELF header magic: != ELF [ 814.962884][T15537] could not allocate digest TFM handle [ 814.998588][T15530] could not allocate digest TFM handle g&[ 817.039386][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 817.046164][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 817.638578][T15580] netlink: 330 bytes leftover after parsing attributes in process `syz.0.1879'. [ 817.706297][T15580] ubi0: attaching mtd0 [ 817.733444][T15580] ubi0: scanning is finished [ 817.761623][T15580] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 818.117433][T15580] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 818.709636][T15592] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 818.870599][T15592] Invalid ELF header magic: != ELF [ 819.600590][T15593] could not allocate digest TFM handle [ 819.628356][T15592] could not allocate digest TFM handle [ 820.716796][T15624] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1885'. [ 825.007935][T15674] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 825.045718][T15676] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1896'. [ 825.182367][T15674] Invalid ELF header magic: != ELF [ 825.978848][T15679] could not allocate digest TFM handle [ 826.035686][T15674] could not allocate digest TFM handle [ 829.509116][T15725] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 829.778174][T15725] Invalid ELF header magic: != ELF [ 830.468810][T15725] could not allocate digest TFM handle [ 830.528055][T15728] could not allocate digest TFM handle [ 832.684170][T15766] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1912'. [ 832.749807][T15766] bridge0: port 2(bridge_slave_1) entered disabled state [ 832.989582][T15766] bridge_slave_1 (unregistering): left allmulticast mode [ 832.996774][T15766] bridge_slave_1 (unregistering): left promiscuous mode [ 833.071546][T15766] bridge0: port 2(bridge_slave_1) entered disabled state [ 834.220479][ T31] INFO: task kworker/u8:0:12 blocked for more than 143 seconds. [ 834.251695][ T31] Not tainted 6.16.0-syzkaller-12256-g561c80369df0 #0 [ 834.292589][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 834.347486][ T31] task:kworker/u8:0 state:D stack:23560 pid:12 tgid:12 ppid:2 task_flags:0x4208160 flags:0x00004000 [ 834.427638][ T31] Workqueue: netns cleanup_net [ 834.461724][ T31] Call Trace: [ 834.485141][ T31] [ 834.502764][ T31] __schedule+0x1190/0x5de0 [ 834.536361][ T31] ? __lock_acquire+0x62e/0x1ce0 [ 834.574383][ T31] ? __pfx___schedule+0x10/0x10 [ 834.604548][ T31] ? find_held_lock+0x2b/0x80 [ 834.639139][ T31] ? schedule+0x2d7/0x3a0 [ 834.664870][ T31] schedule+0xe7/0x3a0 [ 834.686508][ T31] schedule_timeout+0x257/0x290 [ 834.706063][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 834.725591][ T31] ? mark_held_locks+0x49/0x80 [ 834.756470][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 834.789823][ T31] __wait_for_common+0x2fc/0x4e0 [ 834.811032][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 834.829878][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 834.852596][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 834.868658][ T31] ? flush_workqueue_prep_pwqs+0x2e9/0x510 [ 834.882509][ T31] __flush_workqueue+0x3e2/0x1230 [ 834.893949][ T31] ? find_held_lock+0x2b/0x80 [ 834.909908][ T31] ? find_held_lock+0x2b/0x80 [ 834.917034][ T31] ? __pfx___flush_workqueue+0x10/0x10 [ 834.932824][ T31] ? __queue_work+0x431/0x1160 [ 834.943786][ T31] ? queue_work_on+0x12a/0x1f0 [ 834.956044][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 834.968830][ T31] rxrpc_destroy_all_connections+0xed/0x440 [ 834.982881][ T31] ? __pfx_rxrpc_destroy_all_connections+0x10/0x10 [ 835.004419][ T31] ? __pfx___try_to_del_timer_sync+0x10/0x10 [ 835.017564][ T31] rxrpc_exit_net+0x7b/0xc0 [ 835.031417][ T31] ? __pfx_rxrpc_exit_net+0x10/0x10 [ 835.047639][ T31] ops_undo_list+0x2ee/0xab0 [ 835.055179][ T31] ? __pfx_ops_undo_list+0x10/0x10 [ 835.066640][ T31] ? cleanup_net+0x334/0x890 [ 835.079653][ T31] ? idr_destroy+0x62/0x2e0 [ 835.089370][ T31] cleanup_net+0x408/0x890 [ 835.100001][ T31] ? __pfx_cleanup_net+0x10/0x10 [ 835.112042][ T31] ? rcu_is_watching+0x12/0xc0 [ 835.122563][ T31] process_one_work+0x9cc/0x1b70 [ 835.137662][ T31] ? __pfx_batadv_nc_worker+0x10/0x10 [ 835.149930][ T31] ? __pfx_process_one_work+0x10/0x10 [ 835.166378][ T31] ? assign_work+0x1a0/0x250 [ 835.172406][ T31] worker_thread+0x6c8/0xf10 [ 835.183950][ T31] ? __pfx_worker_thread+0x10/0x10 [ 835.189814][ T31] kthread+0x3c5/0x780 [ 835.194355][ T31] ? __pfx_kthread+0x10/0x10 [ 835.200222][ T31] ? rcu_is_watching+0x12/0xc0 [ 835.205164][ T31] ? __pfx_kthread+0x10/0x10 [ 835.210296][ T31] ret_from_fork+0x5d7/0x6f0 [ 835.215047][ T31] ? __pfx_kthread+0x10/0x10 [ 835.220311][ T31] ret_from_fork_asm+0x1a/0x30 [ 835.225390][ T31] [ 835.288615][ T31] [ 835.288615][ T31] Showing all locks held in the system: [ 835.304746][ T31] 3 locks held by kworker/u8:0/12: [ 835.316272][ T31] #0: ffff88801c6fe948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 835.339392][ T31] #1: ffffc90000117d10 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 835.363346][ T31] #2: ffffffff9036f2f0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xad/0x890 [ 835.384586][ T31] 1 lock held by khungtaskd/31: [ 835.397196][ T31] #0: ffffffff8e5c0fe0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 835.422596][ T31] 1 lock held by udevd/5233: [ 835.447492][ T31] #0: ffff8880b853a458 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 835.465598][ T31] 2 locks held by kworker/u10:4/13838: [ 835.471412][ T31] #0: ffff888140fe3948 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 835.483391][ T31] #1: ffffc9000ae9fd10 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 835.497671][ T31] 2 locks held by getty/13893: [ 835.503314][ T31] #0: ffff888034c990a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 835.515918][ T31] #1: ffffc900000f62f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 835.527624][ T31] [ 835.530208][ T31] ============================================= [ 835.530208][ T31] [ 835.546284][ T31] NMI backtrace for cpu 1 [ 835.546303][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-syzkaller-12256-g561c80369df0 #0 PREEMPT(full) [ 835.546338][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 835.546354][ T31] Call Trace: [ 835.546363][ T31] [ 835.546373][ T31] dump_stack_lvl+0x116/0x1f0 [ 835.546412][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 835.546457][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 835.546499][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 835.546548][ T31] watchdog+0xf0e/0x1260 [ 835.546595][ T31] ? __pfx_watchdog+0x10/0x10 [ 835.546632][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 835.546667][ T31] ? __kthread_parkme+0x19e/0x250 [ 835.546704][ T31] ? __pfx_watchdog+0x10/0x10 [ 835.546745][ T31] kthread+0x3c5/0x780 [ 835.546783][ T31] ? __pfx_kthread+0x10/0x10 [ 835.546822][ T31] ? rcu_is_watching+0x12/0xc0 [ 835.546845][ T31] ? __pfx_kthread+0x10/0x10 [ 835.546889][ T31] ret_from_fork+0x5d7/0x6f0 [ 835.546924][ T31] ? __pfx_kthread+0x10/0x10 [ 835.546957][ T31] ret_from_fork_asm+0x1a/0x30 [ 835.546998][ T31] [ 835.547013][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 835.672972][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-syzkaller-12256-g561c80369df0 #0 PREEMPT(full) [ 835.684981][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 835.695694][ T31] Call Trace: [ 835.699171][ T31] [ 835.702439][ T31] dump_stack_lvl+0x3d/0x1f0 [ 835.713554][ T31] vpanic+0x6e8/0x7a0 [ 835.717595][ T31] ? __pfx_vpanic+0x10/0x10 [ 835.722245][ T31] panic+0xca/0xd0 [ 835.726112][ T31] ? __pfx_panic+0x10/0x10 [ 835.731018][ T31] ? nmi_backtrace_stall_check+0x6e/0x540 [ 835.737150][ T31] ? irq_work_queue+0xce/0x100 [ 835.741974][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 835.748186][ T31] ? __wake_up_klogd.part.0+0x99/0xf0 [ 835.753868][ T31] ? watchdog+0xd78/0x1260 [ 835.758531][ T31] ? watchdog+0xd6b/0x1260 [ 835.763151][ T31] watchdog+0xd89/0x1260 [ 835.767536][ T31] ? __pfx_watchdog+0x10/0x10 [ 835.772341][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 835.777673][ T31] ? __kthread_parkme+0x19e/0x250 [ 835.783030][ T31] ? __pfx_watchdog+0x10/0x10 [ 835.787756][ T31] kthread+0x3c5/0x780 [ 835.791933][ T31] ? __pfx_kthread+0x10/0x10 [ 835.796968][ T31] ? rcu_is_watching+0x12/0xc0 [ 835.801773][ T31] ? __pfx_kthread+0x10/0x10 [ 835.806607][ T31] ret_from_fork+0x5d7/0x6f0 [ 835.811421][ T31] ? __pfx_kthread+0x10/0x10 [ 835.816233][ T31] ret_from_fork_asm+0x1a/0x30 [ 835.821038][ T31] [ 835.824141][ T31] Kernel Offset: disabled [ 835.828830][ T31] Rebooting in 86400 seconds..