last executing test programs: 12m25.105188633s ago: executing program 0 (id=1203): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x4) r0 = socket(0x1d, 0x2, 0x7) r1 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(r0, &(0x7f0000000000)=@can={0x1d, r2}, 0x6a) connect$auto(0x3, &(0x7f00000018c0)=@can={0x1d, r3}, 0x18) write$auto(0x3, 0x0, 0xffd8) fcntl$auto(0x3, 0x4, 0xa553) socket(0x1e, 0x4, 0x0) select$auto(0x7, 0x0, &(0x7f0000000080)={[0x209c, 0xe9e, 0x48, 0x15, 0x1000, 0x100000001, 0xc, 0xf, 0x0, 0x0, 0xe, 0xd59, 0x101, 0xff, 0xfffffffffffffdfe, 0x1]}, 0x0, 0x0) 12m23.782482743s ago: executing program 1 (id=1205): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2, 0xe1, 0x9b72, r0, 0x28000) pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x00\rs\x1cJ\x99\x00:c\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x2, 0x1000000000001) close_range$auto(0x0, 0xfffffffffffff000, 0x2) read$auto_regulator_summary_fops_(r0, &(0x7f0000000200)=""/166, 0xa6) bpf$auto(0x40000000, 0x0, 0x2000096) connect$auto(0x3, 0x0, 0x54) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/dri/vgem/clients\x00', 0x60000, 0x0) getpid() mincore$auto(0x1000, 0x20000000008005, 0x0) r2 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) fcntl$auto_F_GETLEASE(r0, 0x401, 0x5) read$auto(r2, 0x0, 0xb4d3) write$auto(0x3, 0x0, 0xffd8) semget$auto(0x0, 0x13c, 0x1ff) 12m23.668106642s ago: executing program 0 (id=1206): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) (async) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) ioctl$auto(r1, 0x2285, r0) (async) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x8001, 0x0) mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x4) (async) r2 = open(&(0x7f0000000000)='./file0\x00', 0x7eb680, 0x100) mmap$auto(0x0, 0xf2b, 0xdf, 0x2000009b72, 0x7, 0x28000) (async) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) (async) socket(0xa, 0x1, 0x84) (async, rerun: 64) socket(0x2, 0x1, 0x106) (rerun: 64) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) r3 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/set_event\x00', 0xa0301, 0x0) write$auto(r3, 0x0, 0x4) rseq$auto(0x0, 0x8000, 0x0, 0x6) (async) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) (async) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) (async) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (async) shutdown$auto(0x200000003, 0x2) (async) write$auto_cachefiles_daemon_fops_internal(r2, &(0x7f00000000c0)='a', 0x1) pipe$auto(&(0x7f0000000500)=0xffffffffffffffff) flock$auto(r4, 0x5) (async) read$auto_proc_iter_file_ops_compat_inode(0xffffffffffffffff, &(0x7f0000000180)=""/250, 0xfa) (async) mmap$auto(0x0, 0x2a, 0xdf, 0x9b72, 0x1000, 0x28000) unshare$auto(0x40000080) (async, rerun: 64) close_range$auto(0x2, 0xa, 0x0) (async, rerun: 64) io_uring_setup$auto(0x1, 0x0) 12m22.80098521s ago: executing program 1 (id=1208): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000140), 0x8040, 0x0) io_uring_setup$auto(0x1, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r0, 0x403c6f2b, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8080) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/platform/dummy_hcd.0/usb1/1-0:1.0/bInterfaceProtocol\x00', 0x100, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000001c00)=""/4111, 0x100f) close_range$auto(0x0, 0xffffffffffffffff, 0x4000000000002) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x9, 0x21e9, 0x7ff, 0x6, 0x2, 0xb, 0x2e, 0x0, 0x3}, 0x6f4) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffff, 0x0, 0x3}, 0xf) eventfd$auto(0x8e) openat$auto_mISDN_fops_timerdev(0xffffffffffffff9c, &(0x7f0000000000), 0x22a40, 0x0) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6eb82, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r2) socket(0xa, 0x3, 0xff) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x10, 0x2, 0x0) 12m22.561348525s ago: executing program 1 (id=1210): r0 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f00000017c0)='/sys/kernel/debug/lru_gen\x00', 0x1, 0x0) ioctl$auto_VHOST_SET_VRING_ERR2(0xffffffffffffffff, 0x4008af22, &(0x7f0000000000)={0x6, r0}) ioctl$auto_BTRFS_IOC_ADD_DEV(0xffffffffffffffff, 0x5000940a, &(0x7f0000000040)={@inferred=r1, "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"}) (async) write$auto(0x3, 0x0, 0xffd8) 12m22.438634041s ago: executing program 1 (id=1211): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x2, 0x801, 0x106) epoll_create$auto(0x240000) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/028/001\x00', 0x6a801, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f00000005c0), 0xffffffffffffffff) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) fsconfig$auto_FSCONFIG_CMD_RECONFIGURE(r0, 0x7, &(0x7f0000000180)='%#\x00', &(0x7f0000001200), 0x5b17cd93) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d7) r3 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20000004020009, 0x1, 0xeb1, 0x401, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) madvise$auto(0x0, 0x200007, 0x19) mremap$auto(0x0, 0x2, 0x9, 0x3, 0x7fffffffb000) r4 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_OVS_CT_LIMIT_CMD_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003b40)=ANY=[@ANYBLOB="28190000", @ANYRES16=r4, @ANYBLOB="01002ebd5100fbcbdf250100000004000180101901800400068005190480fc921cf096b39f43034e2db36a74c0ade1e6a4dafab35aa84881d05d1662bd8a8f48943ea4276b7e1465958d17dd9c9706336d0f4a94c7de9fa79cb659b67f43fa331b6f98fa8ad43a943eac1b528ba83992018ecb03ba5dba6660c32c87b1dc86b69a7f6e747504f11d7688a74c47a4ba4c52d520334c57c56a5fe9358c7a8b45d2c39492577b0c60cedaffccee1b2ebd9a11ad0eab4d390826b494ea05d6578176f70cd9cfc566abf6d1329a68a6a6fc28a2e2c669c39ce8481822800c00f3003d69e35a0000000004003b0034188b8008002600", @ANYRES32=r3, @ANYBLOB="08006e00ac1414aa2018bc800c00090004000000000000000c001a0004000000000000008202988004004280d0014f80cc01eb8008006e00", @ANYRES32=0x0, @ANYBLOB="0c00d50008000000000000007c01e68008007d000300000008003d00", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="0400338060459644219488b0fc8609458320c80a5d6689ba38586d0717f34dd72e6eb9c640040013800000000f003b002f6465762f7662693132000008008c00", @ANYRES32=0x0, @ANYBLOB="548d10ff813c12384a1695503744c2c6e8e73c8917b403c82ae0f73574df954c08528206aceda4aa913194d8234526a356c6010d917ca2a4357ba1b76fc577f94042691e5cfbe9bda43d6ba8fa55eeabb51771b1f047da89442ac8d4b7fa95d66ed58575bbf1dad9167662932fa21515acb7a947eeeae5f968208870aaaa33d39ca7cb284b840f3af0223f47e14316f2045e00008015ae8004000c807315d0800800c100", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="00041f237b000000ad5fee1f0a025b1747a894bd95d960205681b6fca53bb99d90324ab442623b3dbf33f3120e52e21773fa06b1fb931a063a887c70c0185e357b5dbc5e7367c06cd1b13ada290d897832a6b0057d14332825e9622d64"], 0x1928}, 0x1, 0x0, 0x0, 0x40}, 0x4) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x80, 0x0) socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000000280)='./file0\x00', 0x225c2, 0x14f) socket(0xa, 0x5, 0x0) r5 = socket(0xa, 0x2, 0x88) close_range$auto(0x2, 0x8, 0x0) capset$auto(0x0, 0x0) open(0x0, 0x22240, 0x154) socket(0xa, 0x2, 0x88) bpf$auto(0x0, &(0x7f0000000400)=@link_update={0xffffffffffffffff, @new_prog_fd=0x4, 0x4, @old_map_fd=0x3ff}, 0xa3) bpf$auto(0x0, &(0x7f00000000c0)=@link_update={0xa, @new_map_fd=r5, 0x100, @old_prog_fd=r5}, 0x10) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffff, 0x0, 0x3}, 0xc) 12m21.895153502s ago: executing program 0 (id=1212): r0 = openat$auto_show_traces_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/available_tracers\x00', 0x40000, 0x0) pread64$auto(r0, &(0x7f0000001d00)='*\x00', 0x2, 0x3) set_mempolicy$auto(0x3, &(0x7f0000000000)=0x7, 0x9) r1 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vbi15\x00', 0x13b982, 0x0) write$auto(r1, &(0x7f0000000340)='%]{\fZ', 0x100000000) open_by_handle_at$auto(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x9}, 0x3) ioctl$auto_BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) write$auto(0x1, 0x0, 0x80000000) socket(0x10, 0x3, 0xb) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x60d02, 0x0) write$auto(0x3, 0x0, 0xfdef) mknod$auto(&(0x7f0000000900)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00', 0x4, 0x407) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r3 = socket(0xa, 0x1, 0x84) getsockopt$auto(r3, 0x84, 0x81, 0x0, &(0x7f0000000000)=0x9b) lstat$auto(&(0x7f0000000540)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00', 0x0) ioctl$auto(0x3, 0x5420, 0x38) r4 = socket(0xf, 0x800, 0xfffffffd) setsockopt$auto(r4, 0x119, 0xfffffffe, 0x0, 0x8) read$auto(r2, 0x0, 0x73) close_range$auto(0x2, 0x8, 0x0) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, 0x0, 0x80080, 0x0) madvise$auto(0x0, 0xffffffffffff0004, 0x19) mmap$auto(0x3, 0x20009, 0x10000000000e3, 0xeb2, 0x401, 0x4) openat$auto_clear_warn_once_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 12m21.452882239s ago: executing program 1 (id=1216): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000001640), r0) sendmsg$auto_NL802154_CMD_SET_CCA_MODE(r0, &(0x7f0000001f40)={0x0, 0x0, &(0x7f0000001f00)={&(0x7f0000000180)={0x20, r1, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) prctl$auto(0x34, 0x1, 0x0, 0x0, 0x0) mmap$auto(0x3, 0x4020009, 0xdf, 0x19, 0x401, 0x8000) mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) r2 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/input/event0\x00', 0x8000, 0x0) socket(0x10, 0x2, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x1eb343, 0x100) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D3\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f00000000c0)='/dev/audio1\x00', 0x100000a3d9) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x3, 0x0, 0xfffffffffffffffc, 0x696b}, 0xed7138c}, 0x2, 0x9) r4 = socket(0xa, 0x5, 0x84) sendto$auto(r4, 0x0, 0x401, 0x7f, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe80000700"}, 0x1c) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/pcm1p/sub5/hw_params\x00', 0x81000, 0x0) read$auto_proc_reg_file_ops_compat_inode(r5, 0x0, 0xfffffe36) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getrlimit$auto(0x9, 0x0) r6 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) ioctl$auto_BLKZEROOUT(r6, 0x127f, 0x0) ioctl$auto_BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000140)={"2252f65ca1b92f72a92538725b0694521629e8c3e6ba91c62e2e9d42cf4aef15", 0x4, 0x3, 0x8004, 0x6, 0xff}) ioctl$auto_EVIOCGEFFECTS(r2, 0x80044584, 0x0) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000bc0), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) fadvise64$auto(r8, 0x0, 0xffffffff80000001, 0x8) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'batadv0\x00'}) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) 12m20.99755073s ago: executing program 0 (id=1218): openat$auto_nsim_pp_hold_fops_netdev(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/netdevsim/netdevsim1/ports/3/pp_hold\x00', 0x101001, 0x0) r0 = socket(0x1b, 0x3, 0x1) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000200)='/proc/thread-self/fail-nth\x00', 0x240002, 0x0) madvise$auto(0x0, 0x2000040080000004, 0xe) r2 = socket(0x2b, 0x1, 0x1) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) sendmsg$auto_ETHTOOL_MSG_PSE_GET(r0, &(0x7f00000005c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000600)=ANY=[@ANYBLOB="ec000000", @ANYRES16=0x0, @ANYBLOB="010027bd7000fcdbdf25240000001800018014000200626174616476300000000010000000000c00018008000400050000004400018008000400080000001400020064756d6d793000000000000000000100140002722727a45f1c9171cb68a8c476006261746164765f736c6176655f3100", @ANYRES32=0x0, @ANYRES16=r0, @ANYRES32=0x0, @ANYBLOB="54000180140002007465616d300000000000000000000000080003000200000008000300f705000008000100", @ANYRES64=r2, @ANYBLOB="08000300ff0f000008000300050000001400020076657468305f746f5f68737200000000"], 0xec}, 0x1, 0x0, 0x0, 0x100}, 0x4000080) listen$auto(0xffffffffffffffff, 0x1ff) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000040)='//\xf2\x00', 0x80000000) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) statmount$auto(0x0, 0x0, 0x1fe, 0x81) sendmsg$auto_TIPC_NL_BEARER_SET(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x81080400}, 0xc, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[@ANYRES16=r1, @ANYRES16=0x0, @ANYRESOCT=r0, @ANYRES32=r1, @ANYRES32=r4], 0x12a0}, 0x1, 0x0, 0x0, 0x884}, 0x4080) ppoll$auto(0x0, 0x2, 0x0, 0x0, 0x8) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ila(&(0x7f0000000280), 0xffffffffffffffff) syslog$auto(0x2, &(0x7f0000000380)=']^^/W#\'\x00', 0x3) syz_clone(0x4040400, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0x5, 0xa, 0x2000) close_range$auto(0x2, 0x8, 0x0) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x1000, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0xd551) socket(0x2c, 0x6, 0x2) 12m19.886931699s ago: executing program 1 (id=1223): madvise$auto(0x4000000, 0xffffffffffff0085, 0x1004) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000002340)='/dev/binderfs/binder1\x00', 0x0, 0x0) dup$auto(r0) socket(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_taskstats(&(0x7f0000000140), 0xffffffffffffffff) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) r1 = clone$auto(0x6db, 0x9, 0x0, 0x0, 0x6) migrate_pages$auto(r1, 0x4, 0x0, &(0x7f0000000180)=0x2) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x101, 0xffffffffffffffff, 0x3, 0x62, 0x5, 0x7, 0x6d3f, 0x8, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r2, &(0x7f0000000080)='/dev/audio1\x00', 0x100000a3d9) select$auto(0x11, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0xa73, 0xd, 0x801, 0x958b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x40008000001f, 0x7, 0x6d3e, 0x6, 0x2, 0x10000]}, 0x0) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x3, 0x2020009, 0x6, 0xeb1, 0xffffffffffffffff, 0x6) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000100)={"fda256c4", 0x3, 0x6, 0x4, 0x9b4, 0x9, "0800aafc241cd010c7543bfbca2ce1", "0200", '\x00\x00 \x00', "2ff43123", ['\x00', "f8ff0b00fbf2ffff0000b401", "0004154db00b0004000400", "5fe10eedab2c4b353c392a92"]}) sysfs$auto(0x2, 0x23, 0x0) openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/mem\x00', 0x40000, 0x0) r3 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) write$auto(r3, 0x0, 0x4) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range$auto(0xffffffffffffffff, 0x8, 0x1) 12m19.64859582s ago: executing program 0 (id=1226): syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000040), 0xffffffffffffffff) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000002000)='/sys/kernel/debug/tracing/trace_pipe\x00', 0x100, 0x0) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) readv$auto(0x3, &(0x7f0000000080)={0x0, 0x2}, 0x2) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000340), 0x206a00, 0x0) mmap$auto(0x0, 0x8, 0x4000000000df, 0x4000eb1, 0x401, 0x8000) socket(0xa, 0x801, 0x84) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x10000000084, 0x71, 0x0, 0x8) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/netdevsim3/sriov_numvfs\x00', 0x10b142, 0x0) sendfile$auto(r0, r0, 0x0, 0x200) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000000600), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_IOAM6_CMD_DEL_NAMESPACE(r2, 0x0, 0x808) r3 = syz_genetlink_get_family_id$auto_nfc(&(0x7f00000001c0), r1) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NFC_CMD_GET_DEVICE(r4, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000640)={0x120, r3, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NFC_ATTR_FIRMWARE_NAME={0x4}, @NFC_ATTR_SE_APDU={0xf7, 0x19, "a36fcb1b1fc5e1eadb5f157f60fae8d359b2d423b1b32f0d231cbdc20815fd94f435979ba0ffaec70d185acaa5aaa2c24776bf86080000001d2b27c45f201968e9319610b032bd787d76a06e8ea3be070fad2441d360c712259a4c4f5ad881a7895acce6e7bbcf13998ff166a182d23b7726528e8ac4dd425d48ebb20dc3b2a3fb3908f367eb4a4e60e7f9e03cc09b684dc81e4cca809525c91a231b35602e59cd2463591c2aaabd7f1362cf486acc03d11da0f911c45b54e6dd3a94036de388d40948694b650f6d096606dc9a5c71b83feb96a90eb90fb111355f7ffa9d8a8e8b188ffa5bef764b0499c5eefa4fa77c07e937"}, @NFC_ATTR_SE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, 0x2b2d}]}, 0x120}, 0x1, 0x0, 0x0, 0x4040}, 0x24040054) sendmsg$auto_NFC_CMD_FW_DOWNLOAD(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r3, 0x800, 0x70bd27, 0x25dfdbff, {}, [@NFC_ATTR_LLC_PARAM_RW={0x5, 0x10, 0x5}]}, 0x1c}}, 0x20008010) mmap$auto(0x0, 0x2000a, 0xdf, 0xe31, 0x40000000000a5, 0x8000) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r5 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$auto(r5, 0x10e, 0xfffffffc, 0x0, 0x0) ioctl$auto(0x3, 0x541b, 0x10000000000402) 12m17.778069937s ago: executing program 0 (id=1229): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000001640), r0) sendmsg$auto_NL802154_CMD_SET_CCA_MODE(r0, &(0x7f0000001f40)={0x0, 0x0, &(0x7f0000001f00)={&(0x7f0000000180)={0x20, r1, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) prctl$auto(0x34, 0x1, 0x0, 0x0, 0x0) mmap$auto(0x3, 0x4020009, 0xdf, 0x19, 0x401, 0x8000) mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) r2 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/input/event0\x00', 0x8000, 0x0) socket(0x10, 0x2, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x1eb343, 0x100) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D3\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f00000000c0)='/dev/audio1\x00', 0x100000a3d9) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x3, 0x0, 0xfffffffffffffffc, 0x696b}, 0xed7138c}, 0x2, 0x9) r4 = socket(0xa, 0x5, 0x84) sendto$auto(r4, 0x0, 0x401, 0x7f, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe80000700"}, 0x1c) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/pcm1p/sub5/hw_params\x00', 0x81000, 0x0) read$auto_proc_reg_file_ops_compat_inode(r5, 0x0, 0xfffffe36) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getrlimit$auto(0x9, 0x0) r6 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) ioctl$auto_BLKZEROOUT(r6, 0x127f, 0x0) ioctl$auto_BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000140)={"2252f65ca1b92f72a92538725b0694521629e8c3e6ba91c62e2e9d42cf4aef15", 0x4, 0x3, 0x8004, 0x6, 0xff}) ioctl$auto_EVIOCGEFFECTS(r2, 0x80044584, 0x0) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000bc0), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) fadvise64$auto(r8, 0x0, 0xffffffff80000001, 0x8) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'batadv0\x00'}) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) 12m16.404780951s ago: executing program 3 (id=1231): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/card0/pcm0c/sub3/hw_params\x00', 0x200, 0x0) r1 = socket(0x2, 0x1, 0x106) setsockopt$auto(r1, 0x1, 0x10, 0x0, 0x8) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) mlock$auto(0x7c89, 0x47fff) r2 = getpgid(0xffffffffffffffff) r3 = getpid() process_vm_readv$auto(r3, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0) (async) tgkill$auto(r2, r3, 0x100) pread64$auto(r0, 0x0, 0xf469, 0xbc3ab41) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000900)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x8800}, 0x8000) r4 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x100, 0x0) ioctl$auto_SNDCTL_SEQ_OUTOFBAND(r4, 0x40085112, &(0x7f00000001c0)="ff") (async) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) setfsuid$auto(0x1) (async) rseq$auto(&(0x7f0000000040)={0x1, 0x9, 0xd2c8a8c, 0x8, 0x0, 0xafb7, "5249b83db6d481689c965f1eebbc882263f00aa63eff5a3ed9062facfd290b8828c7e15c2632a54697f07b54bbfe1e3d0ba2be34568b5814da485e9bc5fdcf958047aadad1189f7608a0f56b150385d62c35b778893ee43ac988b46197aeaf1ede650815cb3d7188922e7c639a4f2e50b2708099603b22daef8e7847dad0bd1980c3a415947ca94d262ca53df02e1aa17b1f6430cc9e2c71bc22cdc24aa58b23d954ce6074fdd7d6477eff88c2a1daeb65442e80a8ada89a2cff68ad04a711df2b3772e448ee36e3ce78a4221b205ff2d355489c2f26dd8ef700308f3f62c68fdd48f5988425ed4a75"}, 0x8, 0x0, 0x3) (async) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$auto(0x3, 0xc208ae62, 0x38) 12m8.380052525s ago: executing program 3 (id=1233): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/smaps_rollup\x00', 0x40000, 0x0) madvise$auto(0x0, 0xfffffffffffefffd, 0x16) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/route\x00', 0x0, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/snd/controlC0\x00', 0x2a8c2, 0x0) r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/038/001\x00', 0x40001, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x44400, 0x0) ioctl$auto_USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x23, 0x3, 0x2, 0x5, 0x9, 0x2, 0x0}) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x10003e, 0x1, 0x0, 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/bus/usb/012/001\x00', 0x40001, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) syz_genetlink_get_family_id$auto_macsec(0x0, r2) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) read$auto_proc_iter_file_ops_compat_inode(0xffffffffffffffff, 0x0, 0x4d) bind$auto(r1, &(0x7f0000000000)=@in={0x2, 0x4e22, @broadcast}, 0x5) mmap$auto(0xfffffffffffffffe, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x7fff) r3 = gettid() process_vm_writev$auto(r3, &(0x7f0000002980)={0x0, 0x7ff}, 0x3, &(0x7f0000002a40)={0x0, 0x100000004007}, 0x4, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x40001, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/pcm1p/sub6/xrun_injection\x00', 0x64000, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) r4 = socket(0x2, 0x1, 0x106) getsockopt$auto_SO_NOFCS(r4, 0x6, 0x2b, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, 0xffffffffffffffff) ioctl$auto_KVM_GET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000140)={0x3, 0x0, [{0xba1c, 0x5, 0x6}]}) 12m3.103017824s ago: executing program 32 (id=1223): madvise$auto(0x4000000, 0xffffffffffff0085, 0x1004) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000002340)='/dev/binderfs/binder1\x00', 0x0, 0x0) dup$auto(r0) socket(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_taskstats(&(0x7f0000000140), 0xffffffffffffffff) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) r1 = clone$auto(0x6db, 0x9, 0x0, 0x0, 0x6) migrate_pages$auto(r1, 0x4, 0x0, &(0x7f0000000180)=0x2) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x101, 0xffffffffffffffff, 0x3, 0x62, 0x5, 0x7, 0x6d3f, 0x8, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r2, &(0x7f0000000080)='/dev/audio1\x00', 0x100000a3d9) select$auto(0x11, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0xa73, 0xd, 0x801, 0x958b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x40008000001f, 0x7, 0x6d3e, 0x6, 0x2, 0x10000]}, 0x0) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x3, 0x2020009, 0x6, 0xeb1, 0xffffffffffffffff, 0x6) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000100)={"fda256c4", 0x3, 0x6, 0x4, 0x9b4, 0x9, "0800aafc241cd010c7543bfbca2ce1", "0200", '\x00\x00 \x00', "2ff43123", ['\x00', "f8ff0b00fbf2ffff0000b401", "0004154db00b0004000400", "5fe10eedab2c4b353c392a92"]}) sysfs$auto(0x2, 0x23, 0x0) openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/mem\x00', 0x40000, 0x0) r3 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) write$auto(r3, 0x0, 0x4) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range$auto(0xffffffffffffffff, 0x8, 0x1) 12m2.219921028s ago: executing program 33 (id=1229): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000001640), r0) sendmsg$auto_NL802154_CMD_SET_CCA_MODE(r0, &(0x7f0000001f40)={0x0, 0x0, &(0x7f0000001f00)={&(0x7f0000000180)={0x20, r1, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) prctl$auto(0x34, 0x1, 0x0, 0x0, 0x0) mmap$auto(0x3, 0x4020009, 0xdf, 0x19, 0x401, 0x8000) mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) r2 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/input/event0\x00', 0x8000, 0x0) socket(0x10, 0x2, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x1eb343, 0x100) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D3\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f00000000c0)='/dev/audio1\x00', 0x100000a3d9) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x3, 0x0, 0xfffffffffffffffc, 0x696b}, 0xed7138c}, 0x2, 0x9) r4 = socket(0xa, 0x5, 0x84) sendto$auto(r4, 0x0, 0x401, 0x7f, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe80000700"}, 0x1c) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/pcm1p/sub5/hw_params\x00', 0x81000, 0x0) read$auto_proc_reg_file_ops_compat_inode(r5, 0x0, 0xfffffe36) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getrlimit$auto(0x9, 0x0) r6 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) ioctl$auto_BLKZEROOUT(r6, 0x127f, 0x0) ioctl$auto_BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000140)={"2252f65ca1b92f72a92538725b0694521629e8c3e6ba91c62e2e9d42cf4aef15", 0x4, 0x3, 0x8004, 0x6, 0xff}) ioctl$auto_EVIOCGEFFECTS(r2, 0x80044584, 0x0) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000bc0), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) fadvise64$auto(r8, 0x0, 0xffffffff80000001, 0x8) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'batadv0\x00'}) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) 11m59.628833117s ago: executing program 3 (id=1237): syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000040), 0xffffffffffffffff) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000002000)='/sys/kernel/debug/tracing/trace_pipe\x00', 0x100, 0x0) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) readv$auto(0x3, &(0x7f0000000080)={0x0, 0x2}, 0x2) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000340), 0x206a00, 0x0) mmap$auto(0x0, 0x8, 0x4000000000df, 0x4000eb1, 0x401, 0x8000) socket(0xa, 0x801, 0x84) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x10000000084, 0x71, 0x0, 0x8) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/netdevsim3/sriov_numvfs\x00', 0x10b142, 0x0) sendfile$auto(r0, r0, 0x0, 0x200) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000000600), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_IOAM6_CMD_DEL_NAMESPACE(r2, 0x0, 0x808) r3 = syz_genetlink_get_family_id$auto_nfc(&(0x7f00000001c0), r1) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NFC_CMD_GET_DEVICE(r4, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000640)={0x124, r3, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NFC_ATTR_SE_INDEX={0x8, 0x15, 0xfffffffa}, @NFC_ATTR_SE_APDU={0xf7, 0x19, "a36fcb1b1fc5e1eadb5f157f60fae8d359b2d423b1b32f0d231cbdc20815fd94f435979ba0ffaec70d185acaa5aaa2c24776bf86080000001d2b27c45f201968e9319610b032bd787d76a06e8ea3be070fad2441d360c712259a4c4f5ad881a7895acce6e7bbcf13998ff166a182d23b7726528e8ac4dd425d48ebb20dc3b2a3fb3908f367eb4a4e60e7f9e03cc09b684dc81e4cca809525c91a231b35602e59cd2463591c2aaabd7f1362cf486acc03d11da0f911c45b54e6dd3a94036de388d40948694b650f6d096606dc9a5c71b83feb96a90eb90fb111355f7ffa9d8a8e8b188ffa5bef764b0499c5eefa4fa77c07e937"}, @NFC_ATTR_SE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, 0x2b2d}]}, 0x124}, 0x1, 0x0, 0x0, 0x4040}, 0x24040054) sendmsg$auto_NFC_CMD_FW_DOWNLOAD(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r3, 0x800, 0x70bd27, 0x25dfdbff, {}, [@NFC_ATTR_LLC_PARAM_RW={0x5, 0x10, 0x5}]}, 0x1c}}, 0x20008010) mmap$auto(0x0, 0x2000a, 0xdf, 0xe31, 0x40000000000a5, 0x8000) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r5 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$auto(r5, 0x10e, 0xfffffffc, 0x0, 0x0) ioctl$auto(0x3, 0x541b, 0x10000000000402) 11m58.774856775s ago: executing program 3 (id=1238): socket(0xa, 0x1, 0x100) modify_ldt$auto(0x1, 0x0, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x40, 0x0) readv$auto(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x29e4}, 0xe8) socket(0x1, 0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) pread64$auto(0xffffffffffffffff, 0x0, 0x7ff, 0x400) socket(0x1e, 0x1, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121900, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x17f, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x7fffffff, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r0, &(0x7f00000005c0)='/Eev/aud\x03\x00\x00\x00\x00\x00\x00\x00\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc}\xc0/\x9bY\x01\x18\t\xc1TVu\x9f\xd9I\xbc\v\xe6K7\xb1g\xfb\xa1\xa2m\xf7\x1b\xf9/I\xd5\xc8\xc57\x93\xe0T\x97\x97\xe0\xcc\xf7P\x81W\xd3\x18\x10\xd8;\r\xa1\xd4E\xaf\xd2f\xb5\x14o\xf9\x00MN[\xf5\xa6x5rc\xccPTpn\f\x88Y\xe9\xe8\x14 \xac\x81u\xf6\xbaIO\xb2e8\x7fW\xd6nTEK\xcb\xb3\xa2ki +r1}, 0xcc0d) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nbd8\x00', 0x0, 0x0) ioctl$auto(r3, 0xab07, r3) mmap$auto(0xa, 0x2020009, 0x100000000000003, 0xeb1, r2, 0x8000) write$auto(0xca, &(0x7f0000000180)='\x04\x02\x00\r\xfb\xff\xf6\xdd\x90\x806\xc8\xbe\x94\xf2\xa2', 0x4) r4 = open(&(0x7f0000000100)='.\x00', 0x0, 0x110) getdents64$auto(r4, 0x0, 0x400) mmap$auto(0x0, 0x2020008, 0x1000000000000007, 0xeb1, 0x0, 0x1008000) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_FIONREAD(r2, 0x541b, 0x40c) r5 = socket(0xa, 0x801, 0x84) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x4, 0x9, 0xffb, 0x800000000801e, r1, 0x0) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) r6 = socketpair$auto(0x2000001f, 0x10000, 0x8, 0x0) io_uring_enter$auto(0x3, 0x0, 0x1, 0x3, 0x0, 0x2) io_uring_enter$auto(0x3, 0x1, 0x2688, 0x5, 0x0, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000340), r6) sendmsg$auto_TIPC_NL_NET_SET(r7, &(0x7f00000079c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002cbd7000ffdbdf250f0000000c0007800800020012545e047cbf7caee591ff7b3caf77776860d1492ea0a50f5ab32ed2d578be98e47c9cd26d50b79ff6bfe6129305ad86c9db00245d5353e35b30399c2fc46da54396b36ea766cc27fc57ff893ce48714af7c009c89d0255833c9024daaa4468d9d3847d044d0fcfa67b5b7ca9b6b8ff8e95e4d16ed0eae084e00000000000db8cd306d50b6f199bbb1b27d1ea8688af4316d0340111d6e9862", @ANYRES32=0xee00, @ANYBLOB="019b18d11ab6de965d1fae539218e325be05918df4aa94e281d5f61236481e838a4a6f23816aae006216478bd07a6fc352179e5637b74ae0eed69b112ec9f0cb0e3017422fb4004cacc2adeac9095f57f55c47883e89c72f20e41ddd53f6d58a7352415a0d0b6448f9a0f6e7f226490457b4c551cecbc6913e971d5853"], 0x20}, 0x1, 0x0, 0x0, 0x40010}, 0x2) r9 = setfsuid$auto(0x0) setuid$auto(r9) sendmsg$auto_TIPC_NL_PUBL_GET(r2, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYRES16=r0, @ANYRES16=r8, @ANYRESHEX=r6, @ANYRES64=r5, @ANYBLOB="5c00c0006daeedb793b63c092045ff3d046a1ba7814fd624818d7798d71b8d44a0caf78118f9612d4648cd10da79524830d5cb9c36210e1044c03da21c01a05d73ee5a94e5aa4284904f5df64ea0b4e59f2c30008aba336b8def38b37469eb630d8b697a2c43491459c35b6bc857db9dc5486760581a14d9343b718861b96f4669f8273e0b6719d70c92fece42061265ee34aa04a8eef358ebdc47b9a646bfd5b68c832e713bc1a47b0ffc1cfc93f44a71591458b68f0aaa2c12043b5a6789697caca4c6840aca3af0a3bbbc6e4a92dc8e49f82c519bd4b72d8f6f1763f038dfd1a94771b0303f5ed000"/246], 0x120}, 0x1, 0x0, 0x0, 0x20008005}, 0x4000000) ioctl$auto(0xffffffffffffffff, 0xc0285629, 0xffffffffffffffff) set_mempolicy_home_node$auto(0x0, 0x2010001, 0x0, 0x0) 9m52.156613368s ago: executing program 6 (id=1538): openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/netdevsim/netdevsim1/health/break_health\x00', 0x40440, 0x0) r0 = openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer1\x00', 0x180, 0x0) ioctl$auto_OSS_ALSAEMULVER(r0, 0x40086602, &(0x7f0000000100)) mmap$auto(0x0, 0x20009, 0x233, 0xeb1, 0x405, 0x8000) socket(0x18, 0x5, 0x4) r1 = socketcall$auto_SYS_ACCEPT4(0x12, &(0x7f00000000c0)=0x7c8a) ioctl$auto_FS_IOC_SETFLAGS2(r1, 0x40086602, &(0x7f0000000140)=0x7ff) ioctl$auto(0x4000000000000c8, 0x800454cf, 0x3) sendmsg$auto_MACSEC_CMD_DEL_TXSA(r1, &(0x7f0000000640)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000600)={&(0x7f0000003e80)=ANY=[@ANYBLOB='`,\x00\x00', @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r1, @ANYBLOB="04734d5ee1753d1804770da31c2e1ff4a8d10fa320a1c60df5ba27ef3025ef7fa826add8330167098e1a42864ba64bc84cecc9cd35e4934e6a56d0823bbf11f0e2a5df72cb5d400417bc0a8cd8fc76bb9552f815d7bb6d4897a449cd21725bacf872edc08cf0da37a0225c2129cea0677999a62d7581d70e436cb86afd767ca068269e2bdb6777f3be6d0eeb73117a856fb494b36d498d061b738e174943641c6d778f6afcedf763e25dce62d188913c228570afeb21071ab8ebe546b9e3475817df6c12cd705f75b835e39c78d7c3caf1f8469da9f59bf0660f0843c2fc87c8e91afd4cf772329a9f1cb1397c13788977b0f5a8d8ccc72601af80c652c4510105d410e5cb360ccb99ed6d5ba96914add21619313261733f3914b731e8b995ab6b123555ccd98d4a47db00bb8bc9493e23ad06cabbe6d635bf42f5cde0fc84a46dacb10a801a2ac0cd32951259666774010d5b1b743292fc683f9f235765bc7f2a7c073d373a31c8ab294c73122da414f7443d2b710c426d97a523053935d609c8342ce6ba76338a17b281393a80d31ee1603ca9b13a01b1b8e14e8666521b11b021d99aeb43242cd6ecab87c4e2307378c1de003844c0c0fd7c5c442d961a72b5e1e1430b8b5881587235d8cb9a30b6716a8d05af44e9d63f9906934f1947ca65d00b8e29873027d8b7d28abb57d12cfda00c35c320209b3b51bfc7a87da003b9e0dc23d08896c00821866e23d27a54dfc56f5022d5df3e40eed6727638071fd1d0c783299ea28ea95cfd2a8f920369d8d14ce89c5d2520e033bbf770e20c3e282e4696cfd0d13349372162a0289291b37a99b8551b87dda9bf3894728d2e6be74e6b3c90b24a977376e3bb52765965503a1f27dffe472783d2197c9901ad4c3aa41c702cd916d187d92b6eab85fe22f5920261cb4ec49ee0e734bdf84c70b6c4c0d20807f13e186dc36d2683dd0eb064a937b156588cbbd11fb9cdfa208e28e665826af1137c60e25a9d8613cdfe930b5c0e57c5e29a9bee11dd334f473a99dd0f96686c2637a7434e857aa4c99fb67efa8479d7b78d4b9a67cf1bce20743ea38c0a0822bb8403f90ab490503ab9c2892990c744d7a34eabed6740526b2b91334cd73cc1814b9773248b4f493902f818176e7078c58e099db19fbf26165aec83d51e435acff8c43c916d380ae96c83ee1ed61f6396f6d2e3cafe7427f22a9766c45f65ee61e721ca171be1fe863b0182007f9e9d03f184ab2ba7cb75e722c5778690ec016c488e02838ea446e240d0f9406fd857030ed5147da70b6b302a6ccfa79d837cf50f92d076f98e235fc071c31fdb473a99eda6580ce6c58c3f5c392d6be66eeb872037e51d93ccfa9e34866d2391f47734801405065fd7bbead6c7c83743c9cdf96db14e704a18b322651bf91ab947a36dd8f08992d5ebcdbfdb50d858956fbcfbe4633846ef94fdfe93ec00818d424ce27b827f554ee1276aad6fa36a6d9b539d59fcc0e1c532da82229dfcc1518780aa578b317ab8da69910468c924a698f8a9ec67c16f3b5b16f842588c8f0ae1647b6b3416fb5916b5aaec2564ca41a6a8f957fef469382247a146095dd614823bcda0270fa189911905a60cd14984a93c40929ae0a855365d7850fa96c36e2c4a278d28c2bd7afe87522069fe40d73fa82836580d35e04833fdc1dee6695ff39e04d2b952080a6c1b52cba8c02f5c6cf98530611d3bc8383be6a5ac734c93c66c32aea309fe9a2ccda7eb6e2b8994bdcd8d0508ee31750b5cba0dcc59cb990e1892974d98822d436424d82adccc22c138e18646b3f7b958c8db703ff90f0aebc748b7b583f113e9b48c27795282ec7f55c9435edc1ddc62af26fdb8ccb2c1337ded39470d9e14157a151bffad9229beaeb8529bd9b6f45ca3084783634d9d7d5085f487ce908b0a7c8b36e6e596972c9de97e643ecb8ca9516e6d754ff491867e4b4703ec5ba98a8e72337a553412d5038665134c9af1d3cb1cfebf233fbafd6ecb4a2f4c80687c4cb865d3d0b407c8fc42ecc9ba30f585e8f3d60f87d5603ad59ffb19220ca9073a5d9528a246ce4e5485259dd16dea09f356534da940cefa70ea09dc8cc4073d1f5eab1c3304399533b5c1b12697a3e00e0e78e4af9b61ebc0db621986953ce13b8726dc73f64e1503282568c4921051a325959c49b7135c5b2588de5299bc469824149eaadf7df673e77f9dd316bd0d87e913949de37663b3d6dd49653cf4984c86edc5f00f7b8f2cea9f87b858b6c837df30141a67d9cd2b86a8db2eafa1c21c7e581fdcf8bc597934e92dcdbd2489081077376773d9e40f196bfeba8dadb414fede11e0bd8fe423d84708e5b28e840db0102f3ba6bb937f5b12968d04755a64cf85c7e3c9d8b2a65b320b9f88db7f748f11f163da966c44677702c51346aa2fd4193ad9c97b09332d9def835b2ef0a88067f2feb6c8091bf5ad353e5bff040e9a6225972ee90b3a0285e985e2fa64b5705842e0a13083bcc0dd846ea1962a332f77772586da0a14f7336f4f66dd70defd650c46d3e9ec1ad5e17770cfff2ba36ecd56cca6240ce28b87a51a1bd2f82c3dd188ea3ea6ea28228b899c6d438bb573583f1e31a043f0b9dfcb7adb485152595246908a1d9421c4383809e59b1aec0f0a0ce03c2812aeb2cc5bd2e707699d8dbd522fe6e484a231ea6d1ee0a7d8163089c9b953f22fae5277481b96f05cda11b7aac4a2f10dd25d2055a7f9c7089928b0bdc26564694bd1f6eb4c82601863ac52e815814728389be3009b2a92580aab75f688fb073356c3cbb5ce51bd98199d4a692e6b50fa547b308a4b2ce6bc63dcfbbc26108ccb908008f9cf302eca200d5a8665522c58d68532d26aed5f471d1a4429f7e86a2dc6a88a97b464267e1e093eff4c86c0b0a91011567bf96e17ce7425075314213e723f73b3e45bd8f382f6bc77969aa094f7eb68136a2158f256d85a048c24d3daa0ead3b1213f4d529a2e5707da7f1d611f53d36561b7bc84d87936c63ddea020bc472cfcca19363e4082ac53c4f499833837911ff58f2e9f8eb22b6832addc586c22cebd84dcee2ec229c527ad30b7a6068b9bdd84102e3ce3c7d7a8b93f311ef871e4d8ad5dc1fee8c93cca249c3290f0f3ad249aee447d97bccc2fe1d2dbc15c22c8b0bebfb49b6881e2dc6962e0174dc1c185437b05d197f8af2b26be4f74d29c84163cd9b0f36d730c3662e2a40c26a21796fd458a939aa5d43e503d05d3b30990d25a456cd3d62e0ca8038e55ae943dab4fabfb0f5653374418c9c88ff4dd47ff94b1aaea1798356624be1b1e3d331f74b20ee45fe78ee41b54a57fa5db977cd5edf565860d62ae1a3ba5bda78f9b7d6e4252b86a818112a57d8db589315952c323cc3f279b813d867c9927cbbaf69ebe9dccca45d9ad0ed878f9e9007c0fbfddab3ac7875add5f3a16a7d898057af7ab6a2ac768a4a21a69e3584e73a760e55716b8cd618196360e6732d7d453e231a9edbd4978ae0ef2d61d074cafe142bd4f800ca258e20b550efb15c5567df3468fe7916598cacbf24b9c305c918e6ac50add1c33d8e0e34ea273cd17cb21d1f2f22b0f04e2491b1d31ce9bc74cefde1d8e64195e5dee40ed8deabf98653e6e960a2bfced9e767f4c2495a30bc2ab7260f379a1689329f39ea0728319c2e4700ed14ac198674ef393f18d344ae6afbe3c1844e23caf80f4e86b80a6d1d87c60ca4f3fda55ada328a7d7122310ea6e38251523a77936888ac011f2034e6533426aa93f1c3a56f60fa745d991bb663df96951a3f8a4bdc7d06a856e129a7df86777d348cc92b9dd333764c73a7ab238f04da9cdaa781902d2f921436276af92fb334ab8cd75513afacdfc4c46d2f7919a0f2e7407f487b830bb469b12a1d0e718d3dc440f3b42e69536bd40a8f11dc3a0c20414c480945bf39019f8cce703981906a28fee4a70bba7baf75cb3fe35c392b5ca9f89d103cb1358e8556bcd583ce38b4229525edbf5aa0c1c6ebc9a5ac2603747c9ebb08806f862298ef783220f6d33e536f4a73a2b21a2c9c730d28d9580f5240e24728bd5c1ffca546fd9560d52d5d315896dd04925c926bbbdaca48b85f09ca985472984d2354fdba078be7fabe375c11fb6cf8ac0ced8dbba9343437a41ff5aea0751ef2b76cb03f4b0f89a5c6e1b5f87588b4bacebbf2aeeb87515753d64c9ad52a01c8c4d720a85e20a4eb65f90fc8514f99b157777aff8eca809e5be5616f7f411d27780499674128cee2f59acfa3e4dce35c608334084121ddfa6f67f170b96951f46cf4d641941f797ba4b2d2edb2d2436755c737246408f637d711c5b5c50cc06f1b6222933875118f53ca388e9027f12beea76f0a21aae9bf9320c4fcbaa40e64ab908323413184d09f01fd92e847b54f844ff59eb89118dd47711016acd871d7ac41696dffcf45f877321341207bba6f2f2ce651cbcc8342be139ec73e75b1037b3b3e55323ea1322901c989623bea8d0f7caf2e7622330df9e5c162ab3e0c32861415cf57d77b4524b8cc0f2515544831d03004ddb5fb6d775b3fe9c37d88034176c66fcc734d5dfc47c3f1e5af6c9c36360961a6f504273cc823775bc9d845c266a7bfe5e1fea738efe73514eeb2079bd5adb52da4f865881fca59efc159ea04c7745da010b8556793e4baac574c856aa9788dfcc79e7e56319d7a6f530f73096a0d6e8f6d38a97c82ae9d0ad8ac6d4ee0269fc2b18ec2723b0ab7c71bbb0cd058588917201c76ed6771b8a0d91d51d07fab12352d6b80f0d04e45ac3df6ee5113ccc41ee212b937606ff4cda892fd87121c99515c087155212ab0615d2cfffdb48393374f9acc06d0a8b4b4fdc061c53227080ade54b4b6a5908491f29b70bf985c1760a719164c5d551bd64de0166f229722e8312f8a97659b0327e2617444e7273d9a4e9b28caa8b3c6b6d80fd495ad22a12a152bac57b6d028747dec8fe123f000ed9effc26e88da1ee44475e533502250e41a1992b72e9e87aa23e179745c04e8b4a75acf573e184fd2a48c18a5f7666fe4f1780c2bb43eb9e4be10016c9b41c6ae91a2f46755f9eeca091456fa84699c39000b949edde21dee27f02471e85767b881a4845d41deef84aa682b90045099baf51a8bdeeee82b2202dd7a56a6c13f21bea90043c3be0117ffa55cb5983830cd0519e9dafd2624f18e17ae5fa9a5550e72db5c3b9dafcad862791b975cbea53e20ff3deccbcd6368c3626c02585578399fbee3b6b43878dc47322fb0a52714b8897460876c63f1f458258c67c88086f23e29a6bcbab6bb7ee25190a12b38e30a2d91493c597ff24c67db8b1fd40264dfcb5754ae214042645efaebfc9042662320ace9b83ffb754ce076fc09491f7a286f6f3e5b733dc39cfe7c2359a450d2aeb014c22a8717ebbd6aa7cd9f6c5732d3225f6443ffb61469515a464765fcf8cbb2c8dfbc8add55b8a24ed6cd92344f7e37a744847612f70c902f9bfa2f9d751cb0f72c9427abceb0de946ce3145200ba634a822fc3a994826e884823df24bdf6b02d0f41e14e2d641762beb6c2f6c7ae05be966c799a310dadfb569e863978169d355d87364576d6836f4963efe5c5c55a97ec955e847e4c762542ebad6a9a95a520afb404f9e4b6d33583337d7945f6cb32abd0f76131aa8745ac9e8451e1d2faaf7ec7e76b1818abe24f4524be703294e99829d51e24e00cd9a0cd46dc1d3334700dfa3ea5e244ffcfba8458b7b31d4c36e9371d5bd1c33d06e61e907c00000f904098004003780210195800400b5800400ac80da8f72c62bfb235955643d96054be56eb0c67a2338a81b779ac03d9fc9131c2d653f74886e85278dbf912bf15bce22836c232b77239772f706fbb6d603c81acce55ab0f4029f8b96eaeaf176e35c4fe904003a808b2830528dac09a468f485f118d26fd4c9f538cd87b767c898d31dddbccad9a1b24a53d67541bf692212a80cb465a0b87c8c615d1a0d69abba711534848d1b7123129aad5729824e91b0a86a6bb8c57695196b365fc62e6eface8b76ad06e51962889712f329188aa755f3bef776fdd676eee2ec3875594088899cc9cdc6b0aa2f0d7b5ba4b24e6b8b5ab8213afc534040562063a65120c150962144b1e6ad34c763df755b19f8a39370ae6be12336c4c19a7217733282a00bb18c41b8fbbeffd90000008c6e9db2b6981d9af47291e6824e86584fd0d95548963bd44badd91ec4bcc177e456f0a62fdd8f1643b7f3d7dc5c6dcb9c76f9557f30080fa68e543b67e0c72baa12a46f448aab3a670f24aacea46ffb09710200595ed9a6a21ccad5dbb7e5dbb7c5937b636937fcae6521dec4ab335df2399074921374e056361bf7a0c58068ca93e682bd43a33f2f0eb00947923414be228588548c43cd4664808c1e77e26f53cc0e862fed1cae60d2b5fe207c8e44bb731e7861bc29fc96531cd5131c1448092122c81bba52e9772234f326221d99823afe01fdb97e6c766737ba854b7f364ae84fe3589e0f48006e80e071d520b15e6671b800eab8127d32857ca0981b5ab1f2cbb44472bffb765e918dff322948f2dafe9e5be8ed6aeed898f0165f006836042155e51ddebda756a25eebc1f40e008c002f6465762f766d6369000000e10484022680e9422cdd8030ffc292854f3475c5a036f8072f087329bd99761a3f3ac4c932063875a035fc7dd07a5e848a573da51f860d4ae5d4e744842446f38264ca573f0396f49bd87cb3a876a027fb18973c9c4d13d5dfab0727eaeb42fac7bd61ab258c74613bf766cd1c2b2cc75de27823b579f02186c0027a37574da9d6c30c8abce14a4fa46c2a33e3696db60400c4803067229c5e4be643b51d373b566eab96a04053a92e5a2b409c19fc524251424b672c4e706792dd4b562f7fcc895272699f123ea5f07caa3e000f1d49d6c494c8cc157a7c6fddc1712e55c284812186b662c11f419ad1c3a4784c1107b67bc6e7fb49de1a20c9906e717840d74c1b1ee7de6abfd8709b7bae59864858ce5a0400bb8004004480679330e691e18767d47690e68bb3c9aff22dea74ef020da706efa54a7fb402d579cd9e3561117804f9b197709ba24d5479f675228289ea38a7bf2e31f641ae3fa0a7b318941a553f708a5053e8fdf49bf0e905d2bd9304737f63638eb0bb38f5b183c559811cf1e5fcbbcdba3e9fa3b3ad0ee4fb332e889f2ba2065a622d7ff4655305feb375546fbe76634d636535b7a52cc8657f5a52708d00151849572d394bf6c8d9a15a98892527e468bb59f26c64d9764aadd80c3debea72363359a2d2e41cd479202c52e441d7fec8b29fd1d578d9c6fe238ce0c407cd03063f09756411c1dd091bc15d056a86f1765eb7cfc2d1e670394a10983cbbb6062ed838fbf9d1f986095d853f08fc7b458d0c7175edbbe396e3696bd44a5670cae24ad9667b6eb07aeb50d4e470d54a41468725ae4363d5980a80340224196894b4ba3f5489c160d8ddbcac0270a032c9f8e459381b27a024447194d80d44e81d55b45d11c02af80e58e01637275b5ff0c908000e00", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="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"], 0x2c60}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000040) r2 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x8b00, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r2, 0x7a7, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, 0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000010c0), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r3, &(0x7f00000011c0)={0x0, 0x1a, &(0x7f0000000000)={&(0x7f0000001100)=ANY=[@ANYBLOB='\t\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010329bd7000ffdbdf250a00000008000a00070000000b0002005449504376320000"], 0x28}, 0x1, 0x0, 0x0, 0xe0db2389416cc6ce}, 0xc040810) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0xffffffffffff0000, 0x7b00000000000000, 0xeb1, 0x40000000000a5, 0x3e2) close_range$auto(0x0, 0x5, 0x0) openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000080), 0x2003, 0x0) epoll_create$auto(0x3e) mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) fsconfig$auto(r5, 0x2, 0x0, 0x0, 0x0) pidfd_open$auto(0x0, 0xfffffffe) mmap$auto(0x0, 0x4020009, 0xdb, 0x2000000000eb1, 0x401, 0x8000) socket(0x2, 0x2, 0x0) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) 9m51.479993707s ago: executing program 6 (id=1542): r0 = getegid() lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x100000000000001c, 0x280000000000, 0xf, 0x0, r0, 0x0, 0x8, 0x4, 0x80000008040000a, 0x40000406, 0x7, 0x8, 0xffffffff80000000, 0x800000040000b, 0x6, 0x240000100103}) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) r2 = socket(0x2, 0x80805, 0x0) r3 = getsockopt$auto(r2, 0x84, 0x27, 0x0, 0x0) close_range$auto(r2, r3, 0x7) r4 = syz_genetlink_get_family_id$auto_vdpa(&(0x7f00000001c0), r3) sendmsg$auto_VDPA_CMD_DEV_ATTR_SET(r3, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="fc000000", @ANYRES16=r4, @ANYBLOB="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"], 0xfc}, 0x1, 0x0, 0x0, 0x8010}, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/platform/vhci_hcd.1/usb11/11-0:1.0/usb11-port3/quirks\x00', 0x6c6a82, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x1, 0x0) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0xffffffd6) ioctl$auto_KVM_HAS_DEVICE_ATTR(r3, 0x4018aee3, &(0x7f0000001700)={0x9, r1, 0x6, 0x9}) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) r6 = socket(0x10, 0x2, 0x9) setsockopt$auto(r6, 0x104000000000010e, 0x2, 0x0, 0x7fff) mmap$auto(0x0, 0x4, 0x0, 0x40eb2, 0x402, 0x100000000004) tkill$auto(0x1, 0x7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) clock_nanosleep$auto(0xfffffff2, 0x5, 0x0, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f0000000200)='5', 0x1) sendmsg$auto_VDPA_CMD_DEV_CONFIG_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="09012cbd7000fbdbdf250600000006000d000e00000006000c0008000000140002006261746164765f736c6176655f30000052684f8289ad8b76b725e218f06ea48534a976785b5d01ac4585ec104897cee165674ff41f5c1c27623ace9751b7b1d427b0fa5b82a10252aaab88d1f05fcbde4e32dfafc70884271a8b6ad2a61e5dbee907cfe63368fa23c2aea89141a75687c855582ed405c44697ffbcac52d491929f2e0c90d595f8104ea4d65f7abdc0b2d68d9b9676572f58c3000d654b798f4599b9232600d6999e560becf92bde98c055bad928eadde356bf7ed8bfd3cae38e08aa82"], 0x38}, 0x1, 0x0, 0x0, 0x200080c1}, 0x8010) umount2$auto(&(0x7f0000000380)='-),\x00', 0x0) socket(0x10, 0x2, 0x6) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r7, 0x4, 0x8000) ptrace$auto_PTRACE_PEEKSIGINFO(0x4209, r7, 0xb4, 0x5) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) getpid() 9m50.669978503s ago: executing program 6 (id=1544): ioctl$auto(0xc8, 0x800454da, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/mtd/mtd0/bitflip_threshold\x00', 0x2062, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nlbl_mgmt(&(0x7f00000002c0), r0) r4 = socket(0xa, 0x1, 0x100) r5 = socket(0x18, 0x5, 0x1) connect$auto(r5, &(0x7f0000000000)=@in={0x2, 0x100}, 0x3a) r6 = syz_genetlink_get_family_id$auto_smbd_genl(&(0x7f0000000240), r4) prctl$auto(0x59616d61, 0xdaffffffffffffff, 0x1, 0x4, 0xfffffffffffffffb) prctl$auto(0x59616d61, 0x1, 0x1, 0xfffffffffffffffb, 0xffffffffffffffe5) sendmsg$auto_KSMBD_EVENT_LOGIN_RESPONSE(r5, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x14, r6, 0x100, 0x70bd25, 0x25dfdbfc, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x30004850) sendmsg$auto_KSMBD_EVENT_LOGIN_RESPONSE(r3, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r6, 0x400, 0x70bd2a, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x81) r7 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000680)='/dev/v4l-subdev5\x00', 0x20281, 0x0) ioctl$auto(r7, 0x541b, 0xffffffffffffffff) write$auto(r2, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) select$auto(0x1ff, 0x0, &(0x7f0000000080)={[0x209c, 0xe9e, 0x1000000000000005, 0x9, 0x250, 0x100000001, 0x275, 0x4dec, 0x1, 0x3f, 0xd, 0xd59, 0x6, 0x102, 0x21, 0x6]}, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_SMC_NETLINK_DISABLE_SEID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r9, @ANYBLOB="013b"], 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x810) sendmmsg$auto(r8, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080), 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) r10 = prctl$auto_SECCOMP_MODE_STRICT(0x5, 0x1, 0x0, 0x9, 0x3) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)={0x44, r1, 0x1b, 0x70bd26, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_HASH={0xc, 0xb, 0xe00000000000000}, @OVS_PACKET_ATTR_ACTIONS={0x4}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f1779048590828847"}, @OVS_PACKET_ATTR_KEY={0xc, 0x2, 0x0, 0x1, [@typed={0x8, 0x1d, 0x0, 0x0, @u32=0x2d}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004015}, 0xc800) openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/clear_refs\x00', 0x424800, 0x0) 9m50.240422525s ago: executing program 35 (id=1544): ioctl$auto(0xc8, 0x800454da, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/mtd/mtd0/bitflip_threshold\x00', 0x2062, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nlbl_mgmt(&(0x7f00000002c0), r0) r4 = socket(0xa, 0x1, 0x100) r5 = socket(0x18, 0x5, 0x1) connect$auto(r5, &(0x7f0000000000)=@in={0x2, 0x100}, 0x3a) r6 = syz_genetlink_get_family_id$auto_smbd_genl(&(0x7f0000000240), r4) prctl$auto(0x59616d61, 0xdaffffffffffffff, 0x1, 0x4, 0xfffffffffffffffb) prctl$auto(0x59616d61, 0x1, 0x1, 0xfffffffffffffffb, 0xffffffffffffffe5) sendmsg$auto_KSMBD_EVENT_LOGIN_RESPONSE(r5, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x14, r6, 0x100, 0x70bd25, 0x25dfdbfc, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x30004850) sendmsg$auto_KSMBD_EVENT_LOGIN_RESPONSE(r3, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r6, 0x400, 0x70bd2a, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x81) r7 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000680)='/dev/v4l-subdev5\x00', 0x20281, 0x0) ioctl$auto(r7, 0x541b, 0xffffffffffffffff) write$auto(r2, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) select$auto(0x1ff, 0x0, &(0x7f0000000080)={[0x209c, 0xe9e, 0x1000000000000005, 0x9, 0x250, 0x100000001, 0x275, 0x4dec, 0x1, 0x3f, 0xd, 0xd59, 0x6, 0x102, 0x21, 0x6]}, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_SMC_NETLINK_DISABLE_SEID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r9, @ANYBLOB="013b"], 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x810) sendmmsg$auto(r8, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080), 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) r10 = prctl$auto_SECCOMP_MODE_STRICT(0x5, 0x1, 0x0, 0x9, 0x3) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)={0x44, r1, 0x1b, 0x70bd26, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_HASH={0xc, 0xb, 0xe00000000000000}, @OVS_PACKET_ATTR_ACTIONS={0x4}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f1779048590828847"}, @OVS_PACKET_ATTR_KEY={0xc, 0x2, 0x0, 0x1, [@typed={0x8, 0x1d, 0x0, 0x0, @u32=0x2d}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004015}, 0xc800) openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/clear_refs\x00', 0x424800, 0x0) 5m33.208691924s ago: executing program 5 (id=2516): mmap$auto(0x4, 0x2020009, 0xdb6, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/nbd3/removable\x00', 0x900, 0x0) read$auto(r0, 0x0, 0x20) fallocate$auto(r0, 0x6, 0x8, 0x0) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/smaps_rollup\x00', 0x40000, 0x0) madvise$auto(0x0, 0xfffffffffffefffd, 0x16) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/virtual/block/loop0/queue/add_random\x00', 0x68282, 0x0) sendfile$auto(r2, r2, 0x0, 0xcd) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000e3d9) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/slab/kmalloc-64/objects\x00', 0x20000, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/block/ram1/queue/add_random\x00', 0x1a3842, 0x0) write$auto(r3, &(0x7f0000000000)='9\x00d1L\xff\x15\xba\xa17=(\xc1\xf8\xff\xff\v\xb5^\xa1/[', 0x4) mmap$auto(0x0, 0x40000a, 0xdd, 0x9b72, 0x2, 0x0) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x2020009, 0x2, 0xf8, 0xfffffffffffffffa, 0x8000) r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nbd10\x00', 0x1206c2, 0x0) write$auto(r5, &(0x7f0000000180)='@/\xf2\x009`2?#\x9a\x97\xc8\xc2M\x8b\xd1\xde\x17U\x9c\xc7\x8f{\xfa\xb4\x13\xbb\xb3\aB\xda\x97x\xa4W\xe8\x92d\xd6\xba\x903iF:\x81x\xf8L\r\xa3;\x8c\xd0\xb3uF\xe9\xd7\xe9I\xd6\xc1\xb4a\x13\xe3\x11`\xab-s\x920a\xf5Sa\xf6.\xaaL\x9acl\x82\x85\xec\xea;\x85\xca\xc9\xa1\x94\x9b]n\x15\\\xd8@\xe5\xb2\xa14]\xac\xe5\xc4\xceBE\xfd\xa7\x7f\xf1\xb3\xe01\xee\xeeI\xc7\xe9n\x9b', 0x4700000) ioctl$auto_BLKRRPART(r4, 0x125f, 0x0) unshare$auto(0x40000080) mmap$auto(0xfffffffffffffffa, 0xe983, 0xdf, 0xeb1, r1, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x5ab240, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x0, 0x0) 5m31.117524049s ago: executing program 5 (id=2521): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bus/usb/037/001\x00', 0x20882, 0x0) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card1/cable#1\x00', 0x100, 0x0) read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f0000000040)=""/99, 0x63) ioctl$auto_USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000240)={0x23, 0x3, 0x14, 0x5, 0x7fc, 0x7fb, &(0x7f00000002c0)}) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc3\xdd\xa7\xee$\xf5\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xe6\x06g\x1a\xfc\xa8\x02\vw\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r3 = socket(0x10, 0x2, 0x6) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), 0xffffffffffffffff) r4 = semctl$auto_GETPID(0xd, 0x56, 0xb, 0x8) sendmsg$auto_NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000011c0)=ANY=[@ANYBLOB="74010000", @ANYRES16=0x0, @ANYBLOB="01002abd7000ecdbdf251100000060012d802400338014004b00fc01000000000000000000000000000104006380040014800400d9800800aa00", @ANYRES32=r4, @ANYBLOB="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"], 0x174}, 0x1, 0x0, 0x0, 0x20008000}, 0x8044) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv6/conf/netdevsim2/hop_limit\x00', 0x5014c0, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004814}, 0x8800) mmap$auto(0x0, 0x0, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r5 = socket(0x18, 0x2, 0x0) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_INTERFACE(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)={0x14, r6, 0x300, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x48c3}, 0x200c0085) r7 = setfsuid$auto(0x0) setuid$auto(r7) sendmsg$auto_NL80211_CMD_START_SCHED_SCAN(r3, &(0x7f0000000d40)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0xa90, r6, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@NL80211_ATTR_IE_PROBE_RESP={0x56f, 0x7f, "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"}, @NL80211_ATTR_SSID={0x10, 0x34, "b52ccb1ff3d51206a5273bf6"}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x4fb, 0x84, 0x0, 0x1, [@typed={0x8, 0x9b, 0x0, 0x0, @uid=r7}, @generic="548265ac93b67a1c90f58bb50170e583e254198d78b7ca21e5bf4f96b94ae4039efa6cbd0368e972edffbb251e677b81e7e5c6a7c669758da5c668d9709ab87921f5c0bea27abf399b25ea5c", @generic="6919041fb76348ce61fe3a62ea1690030df0ce3b9478688f140a7d0651ffbbccd0aa168a8b51cc5fd7bbb3179d54fd2a34f36fca69d9773aecc4fcdceb3f4495edab180d7cd7be797634d929c45623348c63dc4794ab3dc9aaa68912d7f567044e5c64004647e1efacb18f49d3ad726e577938f29cb06a7877c7bd47e9cedef0d67fd2651b152a856959732f022c75a96cd3537baf2e47ffee31e1ca3fa9b9c78bc4698806b171fa9c88cd4fe63552fdc1", @nested={0x188, 0x24, 0x0, 0x1, [@generic="2a9f4336fd45beabc7e407cfa0d9f6bd1772fae260248483e2af379ea9a411462bba9548ae6dcf4e193028ddf15945dde57e9f13d2733580f50b05aab6c0f4768fdfa267853e2e710befa776062f7951da6f5bfa558c00cd0a3f09d17f4d5bdeb7e44df62d9e2330522138bf3919bf549ea2bee539530eb265fafbbe298a5bacb5c1563b70e5beac3a2eec5addefbaee31353a48ebf58758ff24d7e611f8ab46f1ce18e114e6b749903445cbe024071eea3996cab508e89df13e09c35806d71ade4ef9325e26bca9518e76244ec20c9fe13f79a9965d05b08a7219832603e9ec64ac9f98ca605969a71f91382b4b8809e9d6", @generic="9f1e9e4a3b8fad080598038ce6c22b3c07c03c532b30105ae5ca5af58546a0c9b927ba46c126d6219834c81ff0506f768d99c5fcfe152d4aaca403cfae6ecf3bb8c244e9efe82b7993e9643e15ee3311b174ed991dbdd67933dac35fdb3325cc32d1e4eb27809d02", @typed={0x8, 0xd0, 0x0, 0x0, @ipv4=@remote}, @generic="07a6c2bb834762eba18c1ac50f387a5f3826cf2089a4", @nested={0x4, 0x44}, @typed={0x8, 0xec, 0x0, 0x0, @ipv4=@multicast2}]}, @generic="4f3e68a258cf2761221249fc0f3b49ffbee71da95f20d8a53fc2d23123c3ebbbe3ac55415ab4fdc8f9bddbf65ad545134169fdc8ff34e33e5373013a015135cfeb92b61234c42901a7f3adea5a0d21f0107cdf5f0b963251c61a4b0241ef0e3732e06fafe7ff8ef7ec1ef7dbb30a71e360fb1ed8b82ab5caf2ed5844b4a84bcb051805e5cf5240af1a9a0524c4a9718bc4a4ea26bce0c5ea2ff6f8", @nested={0x18e, 0x3b, 0x0, 0x1, [@typed={0x8, 0x6d, 0x0, 0x0, @u32=0x9}, @generic="9b7ea3b064260563a312316a8bdd98c9f3f72076f979475c3140b2d49866e867d0cacf6e315c3261580331b53139bbbd42a20192c03c1da56f345b18e1620f832c9c56821c788ad60896698929a0932913ead141be8a36c9fb95a5cb6870620f3132a25fa4dac62096f5ec8541dab141116478dc9186c265a9a01d0063f3c0aef987234837a310979b4eb14ebb743a63cf983062bb2833876f17d6873d6b34e801e7b9eb58314cdc3ad2246296a89bcb771ca63f52212b28a402e8e9584dd83d97ba4524cff692586b", @nested={0x4, 0xd5}, @generic="9b760b9559c45933419def10285610248e04438f630057235b4280933f3446cbdb7676e1b36ece3380bb12635521242a8d6d57061c87f9acd9897abf1c8aaa43dcea9246235aefca19b9abc19838aca0b63f6d5e63e67cfd147b13342ce0cf283fe9777622aba56e1b957b247a3393a2450c8ccf", @generic="03168a5ddfd8650a2d639b5b0e8cbaa9b1ed8d72a8c1951baba988d020098e35fa53b8674a9d81a3de58d727cdf476514adfd814b856e2ee4e4bfe1adb1ab34fba"]}, @generic="7ae749e0d6f5e0ae2de1dd6abe16c8ced6ae8079e00d93950b1331b5fa947b4b9a21efcec2b681410a3aeed863160ce70c515829440c4aa13755953c7fa43b"]}]}, 0xa90}, 0x1, 0x0, 0x0, 0x800}, 0x40c0) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000001180)='/dev/input/mice\x00', 0x1a1382, 0x0) 5m29.978727568s ago: executing program 5 (id=2524): r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptys6\x00', 0x240, 0x0) ioctl$auto_TIOCGPGRP(r0, 0x540f, &(0x7f0000000180)) prctl$auto(0x43, 0x17, 0x0, 0x0, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000140), r1) sendmsg$auto_HWSIM_CMD_GET_RADIO(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x20000000) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0x80000010, 0x401, 0x8010) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, 0x0, 0x51b880, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) openat$auto_proc_pid_cmdline_ops_base(0xffffffffffffff9c, 0x0, 0x21a482, 0x0) mkdir$auto(0x0, 0x8001) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_dev_fops_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x62081, 0x0) writev$auto(r3, &(0x7f0000000080)={0x0, 0x3cd}, 0x8) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/fib_trie\x00', 0x0, 0x0) pread64$auto(r4, 0x0, 0x8, 0x7fff) unshare$auto(0x40000080) 5m28.702608657s ago: executing program 5 (id=2529): r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptys6\x00', 0x240, 0x0) ioctl$auto_TIOCGPGRP(r0, 0x540f, &(0x7f0000000180)) prctl$auto(0x43, 0x17, 0x0, 0x0, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_HWSIM_CMD_GET_RADIO(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x20000000) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0x80000010, 0x401, 0x8010) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, 0x0, 0x51b880, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) openat$auto_proc_pid_cmdline_ops_base(0xffffffffffffff9c, 0x0, 0x21a482, 0x0) mkdir$auto(0x0, 0x8001) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_dev_fops_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x62081, 0x0) writev$auto(r2, &(0x7f0000000080)={0x0, 0x3cd}, 0x8) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/fib_trie\x00', 0x0, 0x0) pread64$auto(r3, 0x0, 0x8, 0x7fff) unshare$auto(0x40000080) 5m27.1000912s ago: executing program 5 (id=2534): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl802154(0x0, r0) sendmsg$auto_NL802154_CMD_SET_CCA_MODE(r0, &(0x7f0000001f40)={0x0, 0x0, &(0x7f0000001f00)={&(0x7f0000000180)={0x20, r1, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) prctl$auto(0x34, 0x1, 0x0, 0x0, 0x0) mmap$auto(0x3, 0x4020009, 0xdf, 0x19, 0x401, 0x8000) mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) r2 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/input/event0\x00', 0x8000, 0x0) socket(0x10, 0x2, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x2000, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x1eb343, 0x100) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D3\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f00000000c0)='/dev/audio1\x00', 0x100000a3d9) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x3, 0x0, 0xfffffffffffffffc, 0x696b}, 0xed7138c}, 0x2, 0x9) r4 = socket(0xa, 0x5, 0x84) sendto$auto(r4, 0x0, 0x401, 0x7f, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe80000700"}, 0x1c) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/pcm1p/sub5/hw_params\x00', 0x81000, 0x0) read$auto_proc_reg_file_ops_compat_inode(r5, 0x0, 0xfffffe36) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getrlimit$auto(0x9, 0x0) r6 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) ioctl$auto_BLKZEROOUT(r6, 0x127f, 0x0) ioctl$auto_BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000140)={"2252f65ca1b92f72a92538725b0694521629e8c3e6ba91c62e2e9d42cf4aef15", 0x4, 0x3, 0x8004, 0x6, 0xff}) ioctl$auto_EVIOCGEFFECTS(r2, 0x80044584, 0x0) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000bc0), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) fadvise64$auto(r8, 0x0, 0xffffffff80000001, 0x8) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'batadv0\x00'}) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) 5m25.144454244s ago: executing program 5 (id=2538): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) socketpair$auto(0x2, 0x4, 0x8, 0x0) r2 = timerfd_create$auto(0x4, 0x5) mmap$auto(0x2, 0x7, 0x2, 0x17, r2, 0x6) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, 0x0, 0x20201, 0x0) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x0, 0x0) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_TEMP(r1, &(0x7f0000001140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x2c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@THERMAL_GENL_ATTR_TZ_NAME={0x8, 0xa, '(*\\^'}, @THERMAL_GENL_ATTR_TZ_TRIP_ID={0x8, 0x5, 0x3ff}, @THERMAL_GENL_ATTR_TZ_TRIP_ID={0x8, 0x5, 0x40}]}, 0x2c}}, 0x800) socket(0xa, 0x1, 0x100) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x9, 0x8000) gettid() eventfd2$auto(0x6af3, 0x800) socket(0x1e, 0x1, 0x0) select$auto(0x8000e, 0x0, 0x0, &(0x7f0000000280)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x3, 0x3, 0x2, 0x3a, 0x0, 0x62, 0x80000001, 0x7440, 0x1, 0x9, 0x1, 0xa]}, 0x0) openat$auto_nsim_dev_trap_fa_cookie_fops_dev(0xffffffffffffff9c, 0x0, 0x2302, 0x0) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x8, 0x5) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) socket(0x2, 0x2, 0x0) openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x24, r4, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0xfffffffc}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0xffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x4002000}, 0x40010) open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0) mount$auto(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='cifs\x00', 0x8000, 0x0) 5m10.053439798s ago: executing program 36 (id=2538): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) socketpair$auto(0x2, 0x4, 0x8, 0x0) r2 = timerfd_create$auto(0x4, 0x5) mmap$auto(0x2, 0x7, 0x2, 0x17, r2, 0x6) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, 0x0, 0x20201, 0x0) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x0, 0x0) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_TEMP(r1, &(0x7f0000001140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x2c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@THERMAL_GENL_ATTR_TZ_NAME={0x8, 0xa, '(*\\^'}, @THERMAL_GENL_ATTR_TZ_TRIP_ID={0x8, 0x5, 0x3ff}, @THERMAL_GENL_ATTR_TZ_TRIP_ID={0x8, 0x5, 0x40}]}, 0x2c}}, 0x800) socket(0xa, 0x1, 0x100) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x9, 0x8000) gettid() eventfd2$auto(0x6af3, 0x800) socket(0x1e, 0x1, 0x0) select$auto(0x8000e, 0x0, 0x0, &(0x7f0000000280)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x3, 0x3, 0x2, 0x3a, 0x0, 0x62, 0x80000001, 0x7440, 0x1, 0x9, 0x1, 0xa]}, 0x0) openat$auto_nsim_dev_trap_fa_cookie_fops_dev(0xffffffffffffff9c, 0x0, 0x2302, 0x0) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x8, 0x5) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) socket(0x2, 0x2, 0x0) openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x24, r4, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0xfffffffc}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0xffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x4002000}, 0x40010) open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0) mount$auto(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='cifs\x00', 0x8000, 0x0) 8.010622653s ago: executing program 4 (id=3637): ioctl$auto_SNDRV_PCM_IOCTL_FORWARD(0xffffffffffffffff, 0x40084149, &(0x7f0000000300)=0x5) preadv2$auto(0xffffffffffffffff, 0x0, 0x6, 0xffffffffffffffff, 0x4, 0x2e) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x900, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x40002, 0x300) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/usbcore/parameters/quirks\x00', 0xc0202, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000800)='/sys/devices/virtual/net/rose15/address\x00', 0x0, 0x0) sendfile$auto(r0, r1, &(0x7f0000000000)=0x4, 0x5) socket(0x1d, 0x3, 0x1) r2 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f00000001c0), 0x40100, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000280)={{0x7, 0x80, 0x0, 0xb}, "654c6dbc7a4d30983899a7e1325b6a29ba1e184410ba9f74e82a3fa6c3ccf1bf"}) r3 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(r3, 0xfffffffffffff000, 0x2) landlock_create_ruleset$auto(&(0x7f0000000000)={0x6, 0x400000000000400, 0x9}, 0x9, 0x0) landlock_restrict_self$auto(r3, 0x0) symlink$auto(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') rename$auto(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0/../file0\x00') r4 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/040/001\x00', 0x80040, 0x0) ioctl$auto_USBDEVFS_GETDRIVER(r4, 0x41045508, &(0x7f0000000040)={0x4, "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"}) ioctl$auto_SNDRV_TIMER_IOCTL_START_OLD(r2, 0x5420, 0x0) r5 = socket(0x10, 0x4, 0xffffffc0) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000002c00)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x5}, 0xc000) r6 = syz_genetlink_get_family_id$auto_mac802154_hwsim(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$auto_MAC802154_HWSIM_CMD_DEL_EDGE(r5, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000840)={0x1d5c, r6, 0x8, 0x70bd25, 0x25dfdbfc, {}, [@MAC802154_HWSIM_ATTR_RADIO_EDGE={0xa3, 0x2, 0x0, 0x1, [@generic="effcdbe0abe6c61c4bb674cb679abda754c97d9e33aeec11e39a22b202e024576149ddce94613e19b1db12c3002e64ffac2bf292bb9f2780993a3fd74d2a409d8eedfd03dc66e57d1fd5fb81c41db461c29546353a82c0cf7a7222b2b741a936d2f1933538e9947b80252ade45999781c30aea1baff0575c52fb3f0c3031450c95618ebfc1ce319a1b451a8d793edb3e1709c0aa614c3a04b89d502ab951e8"]}, @MAC802154_HWSIM_ATTR_RADIO_EDGE={0x20d, 0x2, 0x0, 0x1, [@typed={0xc, 0x7, 0x0, 0x0, @u64=0x3}, @typed={0x4, 0xeb, 0x0, 0x0, @binary}, @generic="a9974491e6cf7507feb60618cb8af9d4080fdf3c9223be9431ae567406ae4b74a3eb43f183b0f05be49b2aeb599dfeac5164a11be1675fc3c6d9ebb98b02fa277f2f19b0e7c1abe24a4fb9b1a6fc733f83161c44b606580e9c4aa719b7cb2af102bf78da12b3fe073a6bce01fc13b0", @generic="b7651ac581076abfebe4e9ef6d12e80d83626b4eab38aa00b228f06cf08ebbe4369e0fe2df77cf6f09a55899ab0547140a8f8ff25e7c8f4bf308", @generic="87a392363c86a958f0697475c4a5dc55b232991472a6e9e4d6a949f4e06003eedec51e2bfe34c7dbba9188af7080b0c2bd9de2e883f05aad4d8a3ab99bcdec3f53d7fc513b4f59e62c29d384156a785307d6ccd26047e21db38e27cf16a98b85b0fff2dc25916c52d7ae0ae6d5f84433e34a0af9ec6f98efe207b31289cf6b6da32a8b0ebf475828bcb25eca512d09696460c8fbacd00b3ff1f24a30698e7ad1c78fd985a4ab7311cfb5d0110d570f4b7b9facef025f90cda3b962711b5b8697d7093f203f6b21d3003fc2fc1bdfefff1191f07f7d907929806ef3041935689ccca3385269", @generic="cdd899fc8d099c52b6ab079baa69767c9d1e243887448c4898172aaf2d4192d383d4f194d0d7b97924a0546e49ff87d7bdf0169f6756617c7c33ccd3544af41425733837f2e43d69d45be4f32680f9e48f1b531df6a6bb32838c17540a35a79c56835d2b4dd006d6d3cf58"]}, @MAC802154_HWSIM_ATTR_RADIO_EDGE={0x3fa, 0x2, 0x0, 0x1, [@typed={0x8, 0xbf, 0x0, 0x0, @ipv4=@empty}, @generic="1363c023895ed56b59b64b1a37f7b20aab2e15c614a77f5a916ee802a8491728e9d73857137ee81b33075cd51c97b42e3242d89c455ef791f1a3514f242ddecabde6abbba6c59ab7e97b5ed46a6b73207a0f85bbe9dc9850e4538a7fe881261d24ff520fd777caa6fa3bc24d31a4f05c7db79b6aad55b8dd", @generic="320c61e5ef3df05a5aac8f1c308f1cfcbce83a2a2eb2b51c924aa3897ddbd6cdc74b51b0c28518e8c63ef0526e7d4a578f05c2e03f990eeea2f291e487995a5e57b9880f818f427cdbfa8956c373648ab72f3fa2f52cbe252661285fd4cc25b8918303086070b4ff24f9759052c07a9897a6e4fd94", @nested={0x57, 0xf1, 0x0, 0x1, [@nested={0x4, 0xc}, @generic="86cb9c44789c6efb514ebdadb404ea62c4491ed576196cbe8ec53db6c437955742172e50d08698a4c4767412f2f2e06b276f0b03ad116bf09a5a5c155db2b0d64a99c86f23af6c0ffb7d4c", @nested={0x4, 0x12d}]}, @generic="21cb342e5e836b581915002bb26599a6e3374925c6d00c79fd18182f1665bcda5f2241fc1971dedd6d24e1303a8ac33b09eef71ff5816094ad3cfd68862e9fa2b2d4f87b83bccaabe17e653e7b59e19976ea46878a78cf70e4b340d9d0ebbed180e3992a4bddd54a013801fd3580f530f2f390169cdd20b10f0dc2045722b36bc4b18b772c533ced7984fd8fd837ac3d02d8ead8a447c4e876d017f81d37483d09deda2dcdd4509330fc2f7572908a08e5c703ff6817cce6621076c2f6e5a7e828cb98a503c99c9a65a31de090d4bbdd508ac5a445a4dbbb40401bfad13e3fc3e6", @typed={0xc, 0x10c, 0x0, 0x0, @u64=0x6}, @typed={0x9c, 0xc5, 0x0, 0x0, @binary="d8a7bba9d6b302a632ac0683f40def2e12103bb33a1c3006cd828103ed3883c5e481c2163ea6fbe368c0a7305bf1cc5cc3b36c51c5924c3d9ebda72a0b8cebe14f5df3f26956f360edd4b5284c8223700a37f3972882fb6c3df0c9067db84d52d1ab40712608d4bb1dbfcc616bdb437d4177af1d340e5d583fbb393f285c58e2101161810f8cd385174be0c2c3df97a2c53de8a088583e78"}, @nested={0x30, 0xc, 0x0, 0x1, [@typed={0x2a, 0x5, 0x0, 0x0, @str='/sys/module/usbcore/parameters/quirks\x00'}]}, @nested={0x8, 0x134, 0x0, 0x1, [@nested={0x4, 0x109}]}, @generic="580d06bdf4f1503786cca5fad6571d058a4a4b3011055d3bec88d850646cbd71378fa47a74ba6144f7ce509d853f082bfc77166a95dc3a748ea5316d33e10cf174823b6b05c7ab291b12f03acbc0aad126c36a5253e18aedb69f7247f778002b76a64fa8312242540c4e595a018c714e7f0c9afe051a35b6fcaaaeb825771906bd319f7c5bdad891ed5cc59aac5166edb4522c0327c5870666c45706c932301de7f8b5e38997edd9e1341ad8e5908241ff57a099f01a4d803c36acdf1a6f63e61b1e19ff58a1050e341ac587dd2a4a0d36447812e01c0b150924866b153d183f37b09fe9f207adbb"]}, @MAC802154_HWSIM_ATTR_RADIO_EDGES={0x14ac, 0x3, 0x0, 0x1, [@nested={0x190, 0xd9, 0x0, 0x1, [@generic="5e9816bd742c469d0cd45d6fc86ad64a657c9e9425be9cc3d2b8496b1ea37373462af7663055b2c74c231ae9aaa4ffd5ffa9685d8af4b974998254a28836948bfe4dccfbb199b6055dde6d94445140750842e4f6d7f1995dab0604aaca74c6b5789458ac517f8d0414f517f7272fc872dfb362f1493e6b398c91a46f86677e374f3d720ad7651a62d6daf4020c6cec188fd21762e7b1df65ed49530edd7ec49a63488eba409500c58edf3d44f68dd4e9465bf302b5f50268bbcc213092d041a1db4a33d65dde05b3c4f25f83678b1ff9dd", @generic="5a443579110c69af9565fb08cfeed35f4eba186d370f3b63177753f9ed8de9cd8b6b11e3f01110fbdc69d8f7e84ec4442d2b33d19066446d2adc56160b9ec17215573d57fe8ee3e9434e82222a28407e2bc784d9ab7240a2aa9648602245c7ddbc477db174cc475d5154aea4fd0f876ef999bde63a3cbb8e271093f4a0bd8c784c1eb397d1b60afb4adca8af51971080de30fe9f1b9ff854e251406bb04fec75b2dbc9d83425fa", @generic="b8a1c24420206281ce10b3004c05b47e35ced4d4"]}, @generic="cc6bb62e779b121e86c3b323545b341ad0f211fe37f890b4d52f08398c67586b17e1c1c731ac2c46303dd3f42e2b9b5211", @generic="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", @typed={0x4, 0x19}, @generic="0ad7a6ceb8e71b4cb0fde20fa75a8f60c4d693bffba3a95ba09fb380c20e99dd7dd8ad4264ddfb8befc9b21c9949c46bb52e84a585faca803a71aa94c45f5081a25201d99180a10ce987148373a8ddb5477e4610f0139ee358712c774466e1c7dfbf85fc06dade5ee6e0afa8111c2c68a3d05a82f21096b6ad5db4fdf146496cbf552109cfb1692229750c6daa384510988b160d4caaecd9339f98dbb5c6bd191810b9ba106ea5dd77a20d5a1e897349b487972581301086bc81ebbcf14cee00a158be5724d5e54d29c711bdf68e0db0d88b53cd7006e4ee4290dbafbc0466898b27fe8d22e106b0684451e09f35c10d5723a793f35dd8", @generic="e9e0821cec10256747837f0891aed8767d167f0a7ecad82b1bf067e1200fbfbe4791edf4259ff9e85416301a9395b5f94062b3252f7c450a1124bbe44e96f991cc5b38b5ba098034d926c5d58ac03efe81b29c90e4116f73ce34858d847a9144cebcc83e583b553cdbce93db267598da23039175951292722231bcba70522d2f7d165f93514c0041eced8525c46d25f0f44ac2539988e69e38459254a7d807a6a9988e2d784e0ef187bc25573b2418044f1bd585da0b13992c855a86d48de90ca938cb48bcbad45954933b5eb2f761", @generic="3a32b399fde836867daa62ee07a6b52e963a2cae898e670b4dd605c43bf5ce10b95caa25613dc870fdf109407c6a9eb48a0ccfec224348101ef607b00a1db5fb2355e682a380506e29b0beaa7a6d3d2c8a", @nested={0xcc, 0x14b, 0x0, 0x1, [@typed={0x8, 0x106, 0x0, 0x0, @ipv4=@broadcast}, @generic="3329ccc2ba90933b1763163c19adfb67b73016b3ab8dc6fabe8b3f40ea122e394c50ea707ce7921787efe91641861ba0d9347874547517589e1c11e9fcd7713c37c6154b5be5112a5213ea40b5870eb8465f1bdf4c175f24ff067b85e671e750a5ffded085b9a912d53bdae878c9c5336091601c2a1c406be3bfcc550178cfc43a9495447c9381b74cbacb9996336039e4bb6e98b5ba55f7b0608b2edc47a3d2146055156c0d98849e72ef1ff10638e6cd8c6314", @typed={0x8, 0x93, 0x0, 0x0, @ipv4=@rand_addr=0x64010100}, @nested={0x4, 0xbb}]}]}, @MAC802154_HWSIM_ATTR_RADIO_ID={0x8, 0x1, 0x4}, @MAC802154_HWSIM_ATTR_RADIO_EDGE={0x1e4, 0x2, 0x0, 0x1, [@typed={0x8, 0x10d, 0x0, 0x0, @fd=r0}, @typed={0xb2, 0x12a, 0x0, 0x0, @binary="3929d22a96453095280a3b7ecbc511f67f0964c1bc1096649b6e1da359c654486e86becf0d0ad3fb58ff00932eaab20ae3f287c46a1abfe824c76887fcf111e2601a0406a9683caf98f3bf05416a3df7970465ff2df205d2edc055ad0e0b41a6971efc64716b5d4e40f1e83a85cc192e7f3b55abac477210e4fd608221498d2345afa91dfe574aaef2d52ed8f35a99a739fca8239554f639d26eb8470d0817c9df2dedca52edd08b11eaebaf144e"}, @typed={0x4d, 0x141, 0x0, 0x0, @binary="5f2e61310d85112765835ae0bfd4330daca18de02959b6c15cc10af25ec73cb3eea609b181895d62a1525fb431b88d8cc29005fab92addc94da428f326de324e4714dafaac536f11e8"}, @typed={0x4, 0xd9}, @generic="1ed94b3728703658bdd2d5bfad19d7e1060cd22e6696416bb1ceceee0312840676b5fbb7849135ad6442f5ed1ad9696392049512fa52af61bd414352504eb610670381afae5e1f5dcb9e958fe1252f9eb07be6414a22a4bdd337a960d8228d65f39c76007f8aa56dbf2668d9e693c3fb557a471538d17d0c5bf12f399e307f266629a4f04bf8b6b922f98095d28bbd4f1ec99e59385b2ab41fe275d90a3430a7f037030f394dadbf3688e903b111671e0ad6030840366de86d8af12ab7bb711ff05d29ed0d71a0f6afb7392b854586f4"]}]}, 0x1d5c}, 0x1, 0x0, 0x0, 0x4040010}, 0x800) 7.206966113s ago: executing program 4 (id=3638): r0 = socket(0x2a, 0x2, 0x1) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = socket(0xa, 0x2, 0x3a) setsockopt$auto(r1, 0x29, 0x48, &(0x7f0000000040)='\x15\xbe\x9f)\xe3\x98\x8eB\xb5\x8b,\xfc\xa5!\xa8^./\xddCx4!\x00\xd3\x8f\x1e\x1b\xc3 \xe2\xa8\xd6\xfe\xdaN2\xfc\x89G\x85\xa7\x81\xe4\xe6zD\x96I\x18\xc8@\x91_\vBj\x0eQ\xce\x16\'C\x8c\x01\x80\x92u\xd5\xb8\\\x92,\xe2=y\x9bR\xbcf\xa0c\x16~\x86_\r\x05\xe1G\x111\xe8\x8e\xcb\xed\x8f\xdf\xeeDX\xccm\xc6Mne=\x18\'\x97\x00\xc2\x01VQ\xb86\x03\xff\x88\x03\xd7\bX\xd4>\x91\x1eV-\x92\xa7\xb2\x1b(q\v\xd2\x1f\x9a\x14O\xf6\x18\x84\xe9Z\x80\xf3\x05\x12-\x8c\x8b;%Z\xdaX$K\xb6\xa6\xda\xa1B\xe0\x85\x15\xf0\xa7T\x01[\x8d\xc6\xcc\xb4\x16\xb3\x0eG\xa2\xa5\xa3\x1f\x0e\x89\x871O:c\xd9\x8d\x7f\x86\x9b\xfd@\x959\xbd\x18\xb9\xe7;\xb7\xa9P\x15\xdc\x9b\xce6\xb6\x16\x117\n\x95\xb2f\x10\x14e\xba2M\x8a^\x10\xee*\xbf\xac\x99\x9d\x12\x86\xcc\xb8\x8d\xc2\x06?\xc6\xc7\xad\x10\x97P:\xbf\x1c\xd7]\xfd\xf8\xeeb\xf2\xa0\xf1\xb1\x03\x10\xe3\xb6\xc3ASU\xa4*G;8\xfa\xd3\xaf\x99\xda4\xf7', 0x10000110) ioctl$auto(0x3, 0x541b, 0x38) connect$auto(r0, &(0x7f00000000c0)=@qipcrtr={0x2a, 0xffffffff, 0xfffffffe}, 0x55) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x5, 0x0) bind$auto(0x3, 0x0, 0x6a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$auto_ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000b40)={&(0x7f0000006040)={0x50, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x4}, @ETHTOOL_A_DEBUG_HEADER={0x4}, @ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x96}]}, @ETHTOOL_A_DEBUG_HEADER={0x4}, @ETHTOOL_A_DEBUG_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x50}, 0x1, 0x0, 0x0, 0xd4}, 0x20000014) io_uring_setup$auto(0x1, 0x0) setsockopt$auto(0x3, 0x0, 0x2, 0x0, 0x3) openat$auto_fault_around_bytes_fops_(0xffffffffffffff9c, &(0x7f0000000100), 0x2282, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x40000000c07) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r2, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004040}, 0x4800) fcntl$auto(0x3, 0x4, 0xa553) close_range$auto(0x2, 0x8, 0x0) 7.017081032s ago: executing program 8 (id=3639): mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) r0 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/input/event0\x00', 0x8000, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14f682, 0x0) socket(0x10, 0x2, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x2000, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D3\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/dev/audio1\x00', 0x100000a3d9) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x3, 0x0, 0xfffffffffffffffc, 0x696b}, 0xed7138c}, 0x2, 0x9) r3 = socket(0xa, 0x5, 0x84) sendto$auto(r3, 0x0, 0x401, 0x7f, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe80000700"}, 0x1c) read$auto_proc_reg_file_ops_compat_inode(0xffffffffffffffff, 0x0, 0xfffffe36) read$auto_proc_reg_file_ops_compat_inode(0xffffffffffffffff, &(0x7f0000000040)=""/9, 0x9) ioctl$auto_BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000140)={"2252f65ca1b92f72a92538725b0694521629e8c3e6ba91c62e2e9d42cf4aef15", 0x4, 0x3, 0x8004, 0x6, 0xff}) ioctl$auto_EVIOCGEFFECTS(r0, 0x80044584, 0x0) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000bc0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'batadv0\x00'}) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) clone$auto(0x7fff, 0xad3, 0x0, 0x0, 0x8000004) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000004680), 0xffffffffffffffff) sendmsg$auto_OVS_VPORT_CMD_DEL(r5, &(0x7f00000049c0)={0x0, 0x0, &(0x7f0000004980)={&(0x7f00000046c0)={0x20, r6, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@OVS_VPORT_ATTR_OPTIONS={0xc, 0x4, 0x0, 0x1, [@nested={0x8, 0x8, 0x0, 0x1, [@generic="4ffb5eeb"]}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40040801}, 0x4000) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/platform/dummy_hcd.1/usb2/2-0:1.0/usb2-port1/disable\x00', 0x102, 0x0) sendfile$auto(r7, r7, 0x0, 0x7) 7.01368531s ago: executing program 2 (id=3640): openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x101c82, 0x0) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="f2000000", @ANYBLOB='.\x00', @ANYRES16], 0x1ac}, 0x1, 0x0, 0x0, 0x24040840}, 0x94) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x2004000, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) 6.58006686s ago: executing program 2 (id=3641): r0 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000140), 0x70c301, 0x0) mmap$auto(0x1, 0x400000, 0x3, 0x12, 0x2, 0x0) r1 = socket(0x0, 0xa, 0xa) mmap$auto(0xb1, 0xe983, 0x6, 0xeb4, 0xffffffffffffffff, 0x8000) sendmmsg$auto(r0, 0x0, 0xc, 0x2) mmap$auto(0x2, 0x5, 0x4000000000df, 0xebf, r1, 0x8040) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r2, 0x0, 0x7) setresgid$auto(0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) ioctl$auto_TUNGETVNETLE2(0xffffffffffffffff, 0x800454dd, &(0x7f0000000180)=0xfffffffc) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) epoll_wait$auto(0xffffffffffffffff, 0x0, 0xe007, 0x1) close_range$auto(0x2, 0x8, 0x0) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) madvise$auto(0x0, 0xffffffffffff0005, 0x19) pwrite64$auto(0xffffffffffffffff, 0x0, 0xfdef, 0x1ff) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$auto(0xffffffffffffffff, 0x2, 0xffffffffffffffff) madvise$auto(0x0, 0x400053, 0x9) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x2000, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x80800, 0x0) sysfs$auto(0x2, 0x1a, 0x0) r4 = epoll_create$auto(0x57af) epoll_ctl$auto(r4, 0x1, 0x8000000000000000, 0x0) mmap$auto(0x20000000000, 0x400008, 0xdf, 0x9b71, 0x2, 0xc602) 6.473462761s ago: executing program 4 (id=3642): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x742, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) fallocate$auto(0x8000000000000003, 0x0, 0xd, 0xcbd5d) memfd_secret$auto(0x0) pipe2$auto(0x0, 0x80) sendfile$auto(0x6, 0x3, 0x0, 0xc01) socket(0x2, 0x801, 0x106) r0 = socket$nl_generic(0x10, 0x3, 0x10) fcntl$auto_F_GETOWNER_UIDS(r0, 0x11, 0x8) 6.18093249s ago: executing program 7 (id=3643): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) socketpair$auto(0x2, 0x4, 0x8, 0x0) r1 = timerfd_create$auto(0x4, 0x5) mmap$auto(0x2, 0x7, 0x2, 0x17, r1, 0x6) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0x7, 0x19, 0x401, 0x1) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/trace\x00', 0x1a6b75d638a2a513, 0x0) mmap$auto(0x0, 0x2000c, 0xe3, 0x100000eb1, 0xffffffffffffffff, 0x8003) unshare$auto(0x40000080) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/mpls/platform_labels\x00', 0x202, 0x0) pwrite64$auto(r2, 0x0, 0x7, 0x7) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001540)={'netdevsim0\x00', 0x0}) sendmsg$auto_NET_SHAPER_CMD_GROUP(0xffffffffffffffff, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f00000010c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="010029bd7000fedbdf25040000000c000180080001000300000010000a800c000180080001000200000008000800", @ANYRES32=r3, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x44000}, 0x14) sendmsg$auto_NET_SHAPER_CMD_DELETE(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000011}, 0x10) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r4 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) 5.420760524s ago: executing program 8 (id=3644): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x28, 0x0, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@ETHTOOL_A_COALESCE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x3, 0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x44845}, 0x0) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="1100"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) r0 = socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf251c"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a0027"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x1f00, &(0x7f0000000100)={0x0, 0xfdef}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) 5.104723157s ago: executing program 4 (id=3645): r0 = openat$auto_drm_crtc_crc_control_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f0000000040), 0x88300, 0x0) mmap$auto(0x0, 0x802020009, 0x3, 0xeb1, r0, 0x8000) r1 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card0\x00', 0x40, 0x0) ioctl$auto(r1, 0x90006442, r1) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptyr6\x00', 0x345242, 0x0) r3 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_REGISTER(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x90000040}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x170, r3, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@HWSIM_ATTR_DESTROY_RADIO_ON_CLOSE={0x4}, @HWSIM_ATTR_TX_INFO_FLAGS={0x88, 0x15, "de72c945022ffd8b4dd948264cc6b2df6c26514e9cc130bd1821e268d8e749d940eec02d6263acfbec1e3b3878f282914308a83f14077b17045e0ee8a135016e9805fa58f28317873743d1f5132ae09b5d2b4b15abe90312fdc7697b15a957e3d1567b9bdcdc35fa649d79a69784f7a68c3a0f874d9bf9d505733718ad04c62bb947261b"}, @HWSIM_ATTR_ADDR_TRANSMITTER={0x47, 0x2, "47b51f4ea02b2e7202f51a4a84e755b9ae613e60164e13e5663295c3cbe04f8bc101a5960498ad1ed3077c124cefb2303270659c4c79a9ae1292ec52d98539cc262802"}, @HWSIM_ATTR_CIPHER_SUPPORT={0x6f, 0x18, "050c75763f871310348aadf20f64c5fbe5788747868b4330f87dac2962a83d4605ade17c48da1599c69a9c828d258364bd7b365a1a793c03740d155e32ded23ce41e260753a3eab073256366e85a1fc4a7b54bdd87fe0078df5fd2dd6afbf3d17338decb10d216d27eb2ab"}, @HWSIM_ATTR_USE_CHANCTX={0x4}, @HWSIM_ATTR_TX_INFO={0xc, 0x7, [{0x3}, {0x0, 0x3a}, {0x9, 0x10}, {0x5, 0x6}]}, @HWSIM_ATTR_NO_VIF={0x4}, @HWSIM_ATTR_MULTI_RADIO={0x4}]}, 0x170}, 0x1, 0x0, 0x0, 0x20000000}, 0x801) ioctl$auto(r2, 0x4b40, 0x1) 4.990898357s ago: executing program 8 (id=3646): mincore$auto(0x1ff, 0x2, &(0x7f0000000000)='\x00') r0 = socket(0x10, 0x2, 0xa) bind$auto(0x3, &(0x7f0000000000)=@generic={0x10, "a500acb75c9cedd1b5e9a0d76293"}, 0x68) r1 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x0, 0x0) ioctl$auto(r1, 0x64c6, 0x1e2) close_range$auto(r1, r1, 0x0) close_range$auto(0x2, 0x8, 0x0) pidfd_send_signal$auto_SIGCONT(r1, 0x12, &(0x7f0000000040)={@_si_pad}, 0x3ff) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) getpgrp(0xffffffffffffffff) mmap$auto(0x0, 0x20009, 0x7, 0x12, 0xffffffffffffffff, 0xf4e) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x381083, 0x0) mmap$auto(0x1, 0x40009, 0xaa8a, 0x1b75, 0x7, 0x28000) r3 = socket(0x15, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @rand_addr=0x64010100}, 0x6a) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) sendmsg$auto(r3, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), r0) sendmsg$auto_ETHTOOL_MSG_LINKSTATE_GET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002dbd7000ffdbdf250600000018000180140002006c6f000000000000c000000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20004001}, 0x20c84) madvise$auto(0x0, 0xffffffffffff0001, 0x15) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) ioctl$auto(0xffffffffffffffff, 0x901064aa, 0xffeffffffffffdff) 4.977511919s ago: executing program 7 (id=3647): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x742, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) fallocate$auto(0x8000000000000003, 0x0, 0xd, 0xcbd5d) memfd_secret$auto(0x0) pipe2$auto(0x0, 0x80) sendfile$auto(0x6, 0x3, 0x0, 0xc01) socket(0x2, 0x801, 0x106) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) r0 = socket$nl_generic(0x10, 0x3, 0x10) fcntl$auto_F_GETOWNER_UIDS(r0, 0x11, 0x8) 4.904855391s ago: executing program 2 (id=3648): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) socketpair$auto(0x2, 0x4, 0x8, 0x0) r1 = timerfd_create$auto(0x4, 0x5) mmap$auto(0x2, 0x7, 0x2, 0x17, r1, 0x6) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r2 = socket(0x8, 0x4, 0x0) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/trace\x00', 0x1a6b75d638a2a513, 0x0) mmap$auto(0x0, 0x2000c, 0xe3, 0x100000eb1, r2, 0x8003) unshare$auto(0x40000080) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/mpls/platform_labels\x00', 0x202, 0x0) pwrite64$auto(r3, 0x0, 0x7, 0x7) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001540)={'netdevsim0\x00', 0x0}) sendmsg$auto_NET_SHAPER_CMD_GROUP(0xffffffffffffffff, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f00000010c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="010029bd7000fedbdf25040000000c000180080001000300000010000a800c000180080001000200000008000800", @ANYRES32=r4, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x44000}, 0x14) sendmsg$auto_NET_SHAPER_CMD_DELETE(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000011}, 0x10) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r5 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r5, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) 4.576763678s ago: executing program 4 (id=3649): mmap$auto(0x0, 0x402000b, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22040, 0x75) socket(0xa, 0x3, 0x87) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "00800000ffefffffff0200000001"}, 0x55) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x1f4) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/fib_multipath_hash_seed\x00', 0x2202, 0x0) mmap$auto(0x0, 0xede8, 0xdf, 0x9b72, 0x5, 0x28000) r0 = socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000080)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, 0x0, 0x0, 0x0) nanosleep$auto(0x0, 0x0) mmap$auto(0x1000, 0x4020009, 0xdc, 0xeb1, 0x401, 0x8000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/\xfaf\x00\x00\x00\x00\x00', 0x100000a3d7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)) fchdir$auto(r1) r2 = open(&(0x7f0000000100)='.\x00', 0x0, 0x110) getdents64$auto(r2, 0x0, 0x400) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000240)='/dev/usbmon32\x00', 0x640, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x2, 0x0) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x7fffffffefff}, 0x7) 4.369937911s ago: executing program 7 (id=3650): r0 = socket(0x2, 0x3, 0xe3) unshare$auto(0x40000080) mmap$auto(0x0, 0x2000d, 0xdf, 0xfffffffffffffff8, r0, 0x8000) settimeofday$auto(0x0, &(0x7f0000000100)={0xa0d, 0x4}) mmap$auto(0x0, 0xfb8b, 0x2, 0xeb4, 0xffffffffffffffff, 0xa000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x1, 0x0) r1 = socket(0x2, 0x5, 0x0) bind$auto(r0, &(0x7f0000000040)=@qipcrtr={0x2a, 0x0, 0x3ffe}, 0xf) listen$auto(0x3, 0x81) sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1fff8}, 0x7, 0x0, 0x2, 0xe}, 0x8}, 0x5, 0x9) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x185002, 0x0) mmap$auto(0x0, 0xf4, 0xdf, 0x91, 0x69a5, 0xa800000000000000) sysfs$auto(0x7, 0x6, 0x1) r2 = fsopen$auto(0x0, 0x1) fsconfig$auto_SHMEM_HUGE_NEVER(r2, 0x3, &(0x7f0000001640)='+\x00', 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_tap_fops_tap(0xffffffffffffff9c, 0x0, 0x109b80, 0x0) socket(0x1a, 0x1, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) write$auto(0xffffffffffffffff, 0x0, 0xfdef) r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x4) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000200), r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000080), r5) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'vlan1\x00'}) 3.860721786s ago: executing program 2 (id=3651): mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) r0 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/input/event0\x00', 0x8000, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14f682, 0x0) socket(0x10, 0x2, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x2000, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D3\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/dev/audio1\x00', 0x100000a3d9) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x3, 0x0, 0xfffffffffffffffc, 0x696b}, 0xed7138c}, 0x2, 0x9) r3 = socket(0xa, 0x5, 0x84) sendto$auto(r3, 0x0, 0x401, 0x7f, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe80000700"}, 0x1c) read$auto_proc_reg_file_ops_compat_inode(0xffffffffffffffff, 0x0, 0xfffffe36) read$auto_proc_reg_file_ops_compat_inode(0xffffffffffffffff, &(0x7f0000000040)=""/9, 0x9) ioctl$auto_BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000140)={"2252f65ca1b92f72a92538725b0694521629e8c3e6ba91c62e2e9d42cf4aef15", 0x4, 0x3, 0x8004, 0x6, 0xff}) ioctl$auto_EVIOCGEFFECTS(r0, 0x80044584, 0x0) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000bc0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'batadv0\x00'}) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) clone$auto(0x7fff, 0xad3, 0x0, 0x0, 0x8000004) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000004680), 0xffffffffffffffff) sendmsg$auto_OVS_VPORT_CMD_DEL(r5, &(0x7f00000049c0)={0x0, 0x0, &(0x7f0000004980)={&(0x7f00000046c0)={0x20, r6, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@OVS_VPORT_ATTR_OPTIONS={0xc, 0x4, 0x0, 0x1, [@nested={0x8, 0x8, 0x0, 0x1, [@generic="4ffb5eeb"]}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40040801}, 0x4000) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/platform/dummy_hcd.1/usb2/2-0:1.0/usb2-port1/disable\x00', 0x102, 0x0) sendfile$auto(r7, r7, 0x0, 0x7) 3.276001213s ago: executing program 8 (id=3652): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) socketpair$auto(0x2, 0x4, 0x8, 0x0) mmap$auto(0x2, 0x7, 0x2, 0x17, 0xffffffffffffffff, 0x6) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0x7, 0x19, 0x401, 0x1) r1 = socket(0x8, 0x4, 0x0) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/trace\x00', 0x1a6b75d638a2a513, 0x0) mmap$auto(0x0, 0x2000c, 0xe3, 0x100000eb1, r1, 0x8003) unshare$auto(0x40000080) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/mpls/platform_labels\x00', 0x202, 0x0) pwrite64$auto(r2, 0x0, 0x7, 0x7) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001540)={'netdevsim0\x00', 0x0}) sendmsg$auto_NET_SHAPER_CMD_GROUP(0xffffffffffffffff, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f00000010c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="010029bd7000fedbdf25040000000c000180080001000300000010000a800c000180080001000200000008000800", @ANYRES32=r3, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x44000}, 0x14) sendmsg$auto_NET_SHAPER_CMD_DELETE(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000011}, 0x10) ioctl$auto_MEMWRITE(0xffffffffffffffff, 0xc0304d18, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x401bf, 0x7352, 0x33, 0x65f, 0x7fffffff, 0x7, 0x3, 0x20000002, 0x9, 0x3, 0x6, 0x4, 0xb4, 0x9, 0x6, 0x10003, 0x80, 0x4, 0x0, 0x7, 0x2000, 0x203, 0x8, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc]}, 0x101fe, 0xd) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r4 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) futex$auto(0x0, 0x6, 0x80000001, 0x0, 0x0, 0x0) r5 = socket(0x1d, 0x3, 0x1) getsockopt$auto(r5, 0x65, 0x1, 0x0, 0x0) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, 0x0, 0x20201, 0x0) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x0, 0x0) 3.069653136s ago: executing program 4 (id=3653): modify_ldt$auto(0x1, 0x0, 0x10) r0 = socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) sendmmsg$auto(0x3, 0x0, 0x9a5, 0x47ffff7a) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x8000003, 0x7) setreuid$auto(0x9, 0x1) getpriority$auto(0x2, 0x9) utime$auto(0x0, 0xfffffffffffffffc) connect$auto(r0, &(0x7f00000018c0)=@vsock={0x28, 0x0, 0x0, @local}, 0x55) close_range$auto(0x2, 0x8, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x801, 0x0) connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2711}, 0x51) socket(0xf, 0x3, 0x2) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket(0x1e, 0x1, 0x0) write$auto(r1, &(0x7f0000000040)='!#%%]}-\x80(##\x00', 0x1c) select$auto(0x6, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x6, 0x3ff, 0xed, 0x7, 0x3, 0x95f4da2d, 0x2, 0x6, 0x4, 0x7, 0x7, 0x6d3f, 0x2, 0x0, 0x5]}, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x40, 0x0) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_ID(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, 0x0, 0x4, 0x70bd26, 0x25dfdbfc}, 0x14}}, 0x20000000) pread64$auto(0xffffffffffffffff, 0x0, 0x7ff, 0x400) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121900, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000180)={[0x1f9, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x4, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) 3.003326013s ago: executing program 7 (id=3654): io_uring_setup$auto(0x7, &(0x7f00000001c0)={0x5, 0x5, 0xffffffff, 0xfffffffd, 0x53, 0x2, 0xffffffffffffffff, [0x40009574, 0x7, 0x1], {0x9, 0x2, 0x201, 0x4, 0x3d, 0x8000001, 0x5530, 0x400, 0x100}, {0x3, 0x23, 0x5, 0x6, 0x400, 0x58, 0x5, 0x27, 0x40}}) ioctl$auto_SNDRV_PCM_IOCTL_SW_PARAMS(0xffffffffffffffff, 0xc0884113, &(0x7f0000000000)={0x3, 0xfc0, 0x1d7b, 0x7, 0xf1, 0x4, 0x0, 0x7, 0x2, 0x2, 0x1, 0x10, "ab1b5ea54fdfba0671938af672a210483092d72b2c673dfc0c6603ca145eeedd6cf91f50702d6fdd90928c1b892859f3cde111607d44ceb5"}) r0 = openat$auto_ftrace_set_event_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/set_event_pid\x00', 0xa0241, 0x0) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x4020009, 0xe1, 0xeb1, r0, 0x8000) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="f8ffffffc8f1d724cac891325a3e010128b013b8d955057905", @ANYRES16=0x0, @ANYBLOB="00042cbd7080fbdfdf250200000008000300fdff0000"], 0x1c}, 0x1, 0x0, 0x0, 0x24008054}, 0x854) sendmsg$auto_TCP_METRICS_CMD_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB='Z'], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) clock_nanosleep$auto(0x2, 0x6, &(0x7f0000000840)={0x0, 0xc025}, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r2 = socket(0x18, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x40047459, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) r3 = socket(0x10, 0x2, 0x0) socket(0xa, 0x801, 0x84) close_range$auto(r3, r3, 0x0) socketpair$auto(0x3, 0x5, 0x7, 0x0) connect$auto(0x3, 0x0, 0x55) listen$auto(0x3, 0x81) accept$auto(0x3, 0x0, 0x0) ioctl$auto(0x3, 0x541b, 0x10000000000402) mmap$auto(0xc, 0x2000a, 0x5, 0x14, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/maps\x00', 0x40302, 0x0) 1.802718927s ago: executing program 7 (id=3655): modify_ldt$auto(0x1, 0x0, 0x10) r0 = socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) sendmmsg$auto(0x3, 0x0, 0x9a5, 0x47ffff7a) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x8000003, 0x7) setreuid$auto(0x9, 0x1) getpriority$auto(0x2, 0x9) utime$auto(0x0, 0xfffffffffffffffc) connect$auto(r0, &(0x7f00000018c0)=@vsock={0x28, 0x0, 0x0, @local}, 0x55) close_range$auto(0x2, 0x8, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x801, 0x0) connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2711}, 0x51) socket(0xf, 0x3, 0x2) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket(0x1e, 0x1, 0x0) write$auto(r1, &(0x7f0000000040)='!#%%]}-\x80(##\x00', 0x1c) select$auto(0x6, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x6, 0x3ff, 0xed, 0x7, 0x3, 0x95f4da2d, 0x2, 0x6, 0x4, 0x7, 0x7, 0x6d3f, 0x2, 0x0, 0x5]}, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x40, 0x0) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_ID(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, 0x0, 0x4, 0x70bd26, 0x25dfdbfc}, 0x14}}, 0x20000000) pread64$auto(0xffffffffffffffff, 0x0, 0x7ff, 0x400) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000180)={[0x1f9, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x4, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) 1.757687624s ago: executing program 2 (id=3656): mincore$auto(0x1ff, 0x2, &(0x7f0000000000)='\x00') r0 = socket(0x10, 0x2, 0xa) bind$auto(0x3, &(0x7f0000000000)=@generic={0x10, "a500acb75c9cedd1b5e9a0d76293"}, 0x68) r1 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x0, 0x0) ioctl$auto(r1, 0x64c6, 0x1e2) close_range$auto(r1, r1, 0x0) close_range$auto(0x2, 0x8, 0x0) pidfd_send_signal$auto_SIGCONT(r1, 0x12, &(0x7f0000000040)={@_si_pad}, 0x3ff) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x20009, 0x7, 0x12, 0xffffffffffffffff, 0xf4e) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f00000000c0), r0) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x381083, 0x0) mmap$auto(0x1, 0x40009, 0xaa8a, 0x1b75, 0x7, 0x28000) r3 = socket(0x15, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @rand_addr=0x64010100}, 0x6a) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) sendmsg$auto(r3, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), r0) sendmsg$auto_ETHTOOL_MSG_LINKSTATE_GET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002dbd7000ffdbdf250600000018000180140002006c6f000000000000c000000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20004001}, 0x20c84) madvise$auto(0x0, 0xffffffffffff0001, 0x15) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) ioctl$auto(0xffffffffffffffff, 0x901064aa, 0xffeffffffffffdff) 1.691904202s ago: executing program 8 (id=3657): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000980)='/proc/self/pagemap\x00', 0x2, 0x0) readv$auto(0xca, 0x0, 0x10) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) r1 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x40080, 0x0) ioctl$auto_UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000400)={{0xc, 0x23, 0xa6, 0x83}, "66ac010005000000000068d590eb0d4a4cada7272464294b9183349eef4c1f028fdcc8ecc66fdd02316f064ebd893007abb4c0bbc3b822f66eb624ad63110d61771552c03de65800", 0x2}) ioctl$auto_UI_DEV_CREATE(r1, 0x5501, 0x0) io_uring_setup$auto(0xa, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x3d55, 0x0) mmap$auto(0x0, 0x400008, 0x3, 0x9b72, 0x2, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd12/queue/nr_requests\x00', 0x129102, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/md_mod/parameters/new_array\x00', 0xa001, 0x0) mmap$auto(0x0, 0x2000d, 0x4000000000df, 0xeb1, 0x404, 0x8000) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth0/accept_ra_pinfo\x00', 0x2000, 0x0) read$auto(r3, 0x0, 0x1ff) write$auto(0x3, 0x0, 0xfdef) write$auto(r2, 0x0, 0xfdef) read$auto(r0, 0x0, 0x39b8) 954.453334ms ago: executing program 7 (id=3659): socket(0x2, 0x3, 0xa) r0 = openat$auto_lowpan_enable_fops_(0xffffffffffffff9c, &(0x7f00000000c0), 0x400042, 0x0) write$auto_lowpan_enable_fops_(r0, &(0x7f0000000100)="c3402185b0252d4b997da3c75e3859ba4676c8f757a20da8f8505044d25e62d86fc909f6aaed3e68f3b5650c158ea5837222bde168806b3109ca227b8d95f2aadb6a65e0924c382d0fc47693f876d5bb09b46434d0cdf0a292d7", 0x5a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0xa901, 0x0) ioctl$auto(r1, 0x4004550c, r1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mlock$auto(0xfbea, 0x7fffffffffffffff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) madvise$auto(0x0, 0x22, 0xa) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) madvise$auto(0x0, 0x2003f0, 0x11) madvise$auto(0x1, 0x1000, 0x10000) personality$auto(0xfffffffc) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) fsconfig$auto_SHMEM_HUGE_WITHIN_SIZE(r1, 0x2000009, &(0x7f0000000000)=')\x0f!\x80\x11\xac\rv\x89\x8b\x1bZ\xd4\x18\xd3\xfe\x01\xb8\xe6u\xd8\x11\xf3\xf74o\x80*\xa3h', &(0x7f0000000180)="8966082d0c793917ffe17fb7426575f89c9ced51b2ab2a1c58b2f4ca4a4972774916ce26f42b9b81cb8310af58f220f515518d0cfda20f22538e2a648acfd376658423dae3e200bad0638a53a63d1c07331c200614625d45cd4bb7e29c89d4bf5752269645ed5cd2f1853574ca5ba4ae37c652f4ecd1559a1eb805f2fa13967be085904752d30351d8acdf3ccbb79d2b591b1302be06e8c98ff1582d7f7bf8dad6227bdac514d10b1e58688da6", 0x2) prctl$auto(0x16, 0x2, 0x2, 0x4000000d, 0x100) socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_SNDCTL_DSP_GETODELAY(0xffffffffffffffff, 0x80045017, &(0x7f0000000280)="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") openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0x2000, 0x0) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/fs/jfs/loglevel\x00', 0x40080, 0x0) pread64$auto(r2, 0x0, 0x10001, 0x5) 204.711903ms ago: executing program 2 (id=3660): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/workqueue/scsi_tmf_0/power/autosuspend_delay_ms\x00', 0x8000, 0x0) openat$auto_force_wakeup_fops_hci_vhci(0xffffffffffffff9c, 0x0, 0x20000, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/ib_srp/parameters/reconnect_delay\x00', 0x20681, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f00000000c0)='-7', 0x2) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d7) write$auto(0xffffffffffffffff, 0x0, 0x5) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x85, 0x0) r2 = openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000140), 0x382, 0x0) openat2$auto(0xffffffffffffff9c, 0x0, 0x0, 0xf6) write$auto_rfkill_fops_core(r2, 0x0, 0x700) ptrace$auto_PTRACE_SET_THREAD_AREA(0x1a, 0x0, 0x4, 0x8) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/timers\x00', 0x109500, 0x0) pread64$auto(r3, 0x0, 0x8, 0xffff) openat$auto_tracing_free_buffer_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/free_buffer\x00', 0x20103, 0x0) 0s ago: executing program 8 (id=3661): io_uring_setup$auto(0x7, &(0x7f00000001c0)={0x5, 0x5, 0xffffffff, 0xfffffffd, 0x53, 0x2, 0xffffffffffffffff, [0x40009574, 0x7, 0x1], {0x9, 0x2, 0x201, 0x4, 0x3d, 0x8000001, 0x5530, 0x400, 0x100}, {0x3, 0x23, 0x5, 0x6, 0x400, 0x58, 0x5, 0x27, 0x40}}) ioctl$auto_SNDRV_PCM_IOCTL_SW_PARAMS(0xffffffffffffffff, 0xc0884113, &(0x7f0000000000)={0x3, 0xfc0, 0x1d7b, 0x7, 0xf1, 0x4, 0x0, 0x7, 0x2, 0x2, 0x1, 0x10, "ab1b5ea54fdfba0671938af672a210483092d72b2c673dfc0c6603ca145eeedd6cf91f50702d6fdd90928c1b892859f3cde111607d44ceb5"}) write$auto_ftrace_set_event_pid_fops_trace_events(0xffffffffffffffff, &(0x7f0000000040)="2f5407e72503b817a2e95c30af636c319419b38516ea4c42e7da394939bc1de7e648ab30f02f438341f3b858b8c65b914d33ceb57c3680c8615cb45a17a8b61ae24f81b66884051f3d50ca49a19bd65e28e050bfeaeb3d0ec11b537bb630bee989ae48cdb5a8e23f2ddd1abebce5a1a6dd14b5aab3fe3977a9f42a39d2aa", 0x7e) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x4020009, 0xe1, 0xeb1, 0xffffffffffffffff, 0x8000) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="f8ffffffc8f1d724cac891325a3e010128b013b8d955057905", @ANYRES16=0x0, @ANYBLOB="00042cbd7080fbdfdf250200000008000300fdff0000"], 0x1c}, 0x1, 0x0, 0x0, 0x24008054}, 0x854) sendmsg$auto_TCP_METRICS_CMD_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB='Z'], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) clock_nanosleep$auto(0x2, 0x6, &(0x7f0000000840)={0x0, 0xc025}, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r1 = socket(0x18, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x40047459, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) r2 = socket(0x10, 0x2, 0x0) socket(0xa, 0x801, 0x84) close_range$auto(r2, r2, 0x0) socketpair$auto(0x3, 0x5, 0x7, 0x0) connect$auto(0x3, 0x0, 0x55) listen$auto(0x3, 0x81) accept$auto(0x3, 0x0, 0x0) ioctl$auto(0x3, 0x541b, 0x10000000000402) mmap$auto(0xc, 0x2000a, 0x5, 0x14, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/maps\x00', 0x40302, 0x0) kernel console output (not intermixed with test programs): T17077] ? do_futex+0x122/0x350 [ 746.699047][T17077] ? import_ubuf+0x1b6/0x220 [ 746.699081][T17077] __x64_sys_getrandom+0x183/0x290 [ 746.699105][T17077] ? __pfx___x64_sys_getrandom+0x10/0x10 [ 746.699149][T17077] do_syscall_64+0xcd/0x4b0 [ 746.699185][T17077] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 746.699211][T17077] RIP: 0033:0x7f2ffb38eec9 [ 746.699232][T17077] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 746.699259][T17077] RSP: 002b:00007f2ffc20f038 EFLAGS: 00000246 ORIG_RAX: 000000000000013e [ 746.699285][T17077] RAX: ffffffffffffffda RBX: 00007f2ffb5e5fa0 RCX: 00007f2ffb38eec9 [ 746.699304][T17077] RDX: 0000000000000003 RSI: 0000000006000000 RDI: 0000000000000000 [ 746.699321][T17077] RBP: 00007f2ffb411f91 R08: 0000000000000000 R09: 0000000000000000 [ 746.699337][T17077] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 746.699352][T17077] R13: 00007f2ffb5e6038 R14: 00007f2ffb5e5fa0 R15: 00007fff91da7948 [ 746.699387][T17077] [ 748.160781][T17109] ubi0: attaching mtd0 [ 748.168276][T17109] ubi0: scanning is finished [ 748.596748][T17109] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 748.609903][T17109] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 748.618258][T17109] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 748.625590][T17109] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 748.633118][T17109] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 748.643261][T17109] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 748.699846][T17109] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 0 [ 748.738019][T17109] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 748.881406][T17116] ubi0: detaching mtd0 [ 749.010503][T17116] ubi0: mtd0 is detached [ 752.154647][ T5846] Bluetooth: hci0: Malformed Event: 0x02 [ 752.330381][T17170] vhci_hcd: SetHubDepth req not supported for USB 2.0 roothub [ 752.877206][T17176] ubi0: attaching mtd0 [ 752.993388][T17176] ubi0: scanning is finished [ 753.031215][T17171] tipc: Started in network mode [ 753.067138][T17171] tipc: Node identity 45e5412, cluster identity 4711 [ 753.085603][T17171] tipc: Node number set to 73290770 [ 753.497668][T17176] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 753.727255][T17176] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 753.894081][T17176] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 753.933039][T17176] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 754.015019][T17176] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 754.022883][T17176] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 754.134008][T17176] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 0 [ 754.224136][T17176] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 754.278086][T17180] ubi0: detaching mtd0 [ 754.288115][T17188] ubi0: background thread "ubi_bgt0d" started, PID 17188 [ 754.310199][T17180] ubi0: mtd0 is detached [ 755.719427][T17221] random: crng reseeded on system resumption [ 756.764425][T17229] netlink: 350 bytes leftover after parsing attributes in process `syz.7.2539'. [ 756.803425][T17229] random: crng reseeded on system resumption [ 756.815921][T17229] ubi0: attaching mtd0 [ 756.824129][T17229] ubi0 error: validate_ec_hdr: bad VID header offset 64, expected 514 [ 756.852668][T17229] ubi0 error: validate_ec_hdr: bad EC header [ 756.862021][T17229] Erase counter header dump: [ 756.879550][T17229] magic 0x55424923 [ 756.895325][T17229] version 1 [ 756.899163][T17229] ec 1 [ 756.903480][T17229] vid_hdr_offset 64 [ 756.956191][T17229] data_offset 128 [ 756.991110][T17229] image_seq 0 [ 756.996447][T17229] hdr_crc 0xd4c49b88 [ 757.001809][T17229] erase counter header hexdump: [ 757.023439][T17229] CPU: 1 UID: 0 PID: 17229 Comm: syz.7.2539 Not tainted syzkaller #0 PREEMPT(full) [ 757.023468][T17229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 757.023478][T17229] Call Trace: [ 757.023484][T17229] [ 757.023489][T17229] dump_stack_lvl+0x16c/0x1f0 [ 757.023512][T17229] validate_ec_hdr+0x28c/0x330 [ 757.023532][T17229] ubi_io_read_ec_hdr+0x63b/0x6c0 [ 757.023552][T17229] ubi_attach+0x5e7/0x4bd0 [ 757.023579][T17229] ? __pfx_ubi_msg+0x10/0x10 [ 757.023603][T17229] ? __pfx_ubi_attach+0x10/0x10 [ 757.023624][T17229] ? ubi_attach_mtd_dev+0x155b/0x35d0 [ 757.023636][T17229] ? __vmalloc_node_noprof+0xad/0xf0 [ 757.023652][T17229] ? ubi_attach_mtd_dev+0x155b/0x35d0 [ 757.023666][T17229] ubi_attach_mtd_dev+0x15a7/0x35d0 [ 757.023688][T17229] ? __pfx_ubi_attach_mtd_dev+0x10/0x10 [ 757.023700][T17229] ? __pfx_get_mtd_device+0x10/0x10 [ 757.023722][T17229] ctrl_cdev_ioctl+0x337/0x3d0 [ 757.023736][T17229] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 757.023754][T17229] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 757.023768][T17229] __x64_sys_ioctl+0x18b/0x210 [ 757.023785][T17229] do_syscall_64+0xcd/0x4b0 [ 757.023806][T17229] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 757.023820][T17229] RIP: 0033:0x7fe4d0d8eec9 [ 757.023831][T17229] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 757.023844][T17229] RSP: 002b:00007fe4ceff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 757.023857][T17229] RAX: ffffffffffffffda RBX: 00007fe4d0fe6090 RCX: 00007fe4d0d8eec9 [ 757.023866][T17229] RDX: 0000200000000080 RSI: 0000000040186f40 RDI: 0000000000000003 [ 757.023875][T17229] RBP: 00007fe4d0e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 757.023882][T17229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 757.023890][T17229] R13: 00007fe4d0fe6128 R14: 00007fe4d0fe6090 R15: 00007ffeeef56598 [ 757.023908][T17229] [ 757.024526][T17229] ubi0 error: ubi_io_read_ec_hdr: validation failed for PEB 0 [ 757.322544][T17234] CIFS mount error: No usable UNC path provided in device string! [ 757.322544][T17234] [ 757.332800][T17234] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 757.528282][T17229] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 757.540820][T17227] svc: failed to register nfsdv3 RPC service (errno 512). [ 757.586469][T17227] svc: failed to register nfsaclv3 RPC service (errno 512). [ 758.744941][ T5846] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 758.890727][T17253] __vm_enough_memory: pid: 17253, comm: syz.7.2543, bytes: 4398046511104 not enough memory for the allocation [ 762.215203][T17285] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2549'. [ 765.223696][T17319] ubi0: attaching mtd0 [ 765.257099][T17319] ubi0: scanning is finished [ 765.516707][T17319] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 765.587221][T17319] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 765.625151][T17319] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 765.641466][T17319] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 765.716900][T17319] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 765.754987][T17319] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 765.865925][T17319] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 0 [ 765.935365][T17319] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 765.952490][T17321] ubi0: detaching mtd0 [ 765.956876][T17326] ubi0: background thread "ubi_bgt0d" started, PID 17326 [ 766.051322][T17321] ubi0: mtd0 is detached [ 766.568041][T17343] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2560'. [ 766.615292][T17343] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2560'. [ 767.806319][ T5846] Bluetooth: hci0: SCO packet too small [ 769.158168][T17370] ubi0: attaching mtd0 [ 769.175566][T17370] ubi0: scanning is finished [ 769.322326][T17370] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 769.338191][T17370] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 769.355221][T17370] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 769.382185][T17370] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 769.404978][T17370] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 769.465312][T17370] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 769.525255][T17370] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 0 [ 769.535556][T17370] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 769.546936][T17375] ubi0: background thread "ubi_bgt0d" started, PID 17375 [ 769.554137][T17373] ubi0: detaching mtd0 [ 769.859293][T17373] ubi0: mtd0 is detached [ 770.569659][ T5846] Bluetooth: hci0: unexpected subevent 0x05 length: 123 > 12 [ 771.009843][T17399] random: crng reseeded on system resumption [ 772.594972][ T5846] Bluetooth: hci0: command 0x0406 tx timeout [ 772.851917][T17422] ubi0: attaching mtd0 [ 772.864111][T17422] ubi0: scanning is finished [ 772.916167][ T5159] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 772.928055][ T5159] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 772.936798][ T5159] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 772.948900][ T5159] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 772.957256][ T5159] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 773.104062][T17422] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 773.200081][T17422] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 773.207528][T17422] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 773.214620][T17422] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 773.222342][T17422] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 773.229383][T17422] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 773.306017][T17422] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 0 [ 773.447505][T17422] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 773.502299][T17431] ubi0: background thread "ubi_bgt0d" started, PID 17431 [ 773.516656][T17426] ubi0: detaching mtd0 [ 773.577215][T17426] ubi0: mtd0 is detached [ 774.258089][T17424] chnl_net:caif_netlink_parms(): no params data found [ 774.359205][T17438] sd 0:0:1:0: PR command failed: 1026 [ 774.364783][T17438] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 774.371663][T17438] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 774.596638][T17424] bridge0: port 1(bridge_slave_0) entered blocking state [ 774.638756][T17424] bridge0: port 1(bridge_slave_0) entered disabled state [ 774.656958][T17424] bridge_slave_0: entered allmulticast mode [ 774.704312][T17424] bridge_slave_0: entered promiscuous mode [ 774.722472][T17424] bridge0: port 2(bridge_slave_1) entered blocking state [ 774.730168][T17424] bridge0: port 2(bridge_slave_1) entered disabled state [ 774.737829][T17424] bridge_slave_1: entered allmulticast mode [ 774.744821][T17424] bridge_slave_1: entered promiscuous mode [ 774.914093][T17424] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 774.958787][T17424] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 774.985736][ T5159] Bluetooth: hci1: command tx timeout [ 775.243245][T17424] team0: Port device team_slave_0 added [ 775.289819][T17424] team0: Port device team_slave_1 added [ 775.319937][T17448] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(3) [ 775.475539][T17424] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 775.482777][T17424] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 775.512092][T17424] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 775.576430][T17424] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 775.583382][T17424] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 775.672438][T17424] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 776.110541][T17485] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2584'. [ 776.187111][T17424] hsr_slave_0: entered promiscuous mode [ 776.226434][T17424] hsr_slave_1: entered promiscuous mode [ 777.065080][ T5159] Bluetooth: hci1: command tx timeout [ 777.815244][T17424] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 777.901173][T17424] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 777.992484][T17424] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 778.068659][T17424] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 778.184219][T17501] FAULT_INJECTION: forcing a failure. [ 778.184219][T17501] name failslab, interval 1, probability 0, space 0, times 0 [ 778.198854][T17501] CPU: 1 UID: 0 PID: 17501 Comm: syz.2.2587 Not tainted syzkaller #0 PREEMPT(full) [ 778.198888][T17501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 778.198904][T17501] Call Trace: [ 778.198912][T17501] [ 778.198922][T17501] dump_stack_lvl+0x16c/0x1f0 [ 778.198972][T17501] should_fail_ex+0x512/0x640 [ 778.199005][T17501] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 778.199044][T17501] should_failslab+0xc2/0x120 [ 778.199083][T17501] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 778.199121][T17501] ? do_epoll_ctl+0x1170/0x3790 [ 778.199162][T17501] do_epoll_ctl+0x1170/0x3790 [ 778.199211][T17501] ? __pfx_do_epoll_ctl+0x10/0x10 [ 778.199244][T17501] ? find_held_lock+0x2b/0x80 [ 778.199271][T17501] ? __might_fault+0xe3/0x190 [ 778.199305][T17501] ? __might_fault+0xe3/0x190 [ 778.199353][T17501] ? __x64_sys_epoll_ctl+0x15c/0x1e0 [ 778.199387][T17501] __x64_sys_epoll_ctl+0x15c/0x1e0 [ 778.199422][T17501] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 778.199469][T17501] do_syscall_64+0xcd/0x4b0 [ 778.199505][T17501] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 778.199532][T17501] RIP: 0033:0x7f2ffb38eec9 [ 778.199554][T17501] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 778.199580][T17501] RSP: 002b:00007f2ffc1cd038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 778.199605][T17501] RAX: ffffffffffffffda RBX: 00007f2ffb5e6180 RCX: 00007f2ffb38eec9 [ 778.199624][T17501] RDX: 8000000000000000 RSI: 0000000000000001 RDI: 000000000000000a [ 778.199641][T17501] RBP: 00007f2ffb411f91 R08: 0000000000000000 R09: 0000000000000000 [ 778.199658][T17501] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 778.199675][T17501] R13: 00007f2ffb5e6218 R14: 00007f2ffb5e6180 R15: 00007fff91da7948 [ 778.199711][T17501] [ 778.465699][T17424] 8021q: adding VLAN 0 to HW filter on device bond0 [ 778.502437][T17424] 8021q: adding VLAN 0 to HW filter on device team0 [ 778.575764][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 778.582994][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 778.688482][ T9754] bridge0: port 2(bridge_slave_1) entered blocking state [ 778.695627][ T9754] bridge0: port 2(bridge_slave_1) entered forwarding state [ 778.729063][T17511] ubi0: attaching mtd0 [ 778.771281][T17511] ubi0: scanning is finished [ 778.792490][T17424] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 778.809236][T17424] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 778.960563][T17511] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 779.025154][T17511] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 779.032411][T17511] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 779.104532][T17511] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 779.112537][T17511] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 779.125131][T17511] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 779.133163][T17511] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 0 [ 779.145342][ T5159] Bluetooth: hci1: command tx timeout [ 779.186292][T17511] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 779.207290][T17424] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 779.230002][T17515] ubi0: background thread "ubi_bgt0d" started, PID 17515 [ 779.230025][T17514] ubi0: detaching mtd0 [ 779.346285][T17514] ubi0: mtd0 is detached [ 779.844142][T17534] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2595'. [ 780.800516][T11153] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 781.007179][T11153] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 781.120671][T11153] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 781.225080][ T5159] Bluetooth: hci1: command tx timeout [ 781.316462][T11153] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 781.412312][T17424] veth0_vlan: entered promiscuous mode [ 781.454467][T17424] veth1_vlan: entered promiscuous mode [ 781.733760][T17424] veth0_macvtap: entered promiscuous mode [ 781.841143][T17424] veth1_macvtap: entered promiscuous mode [ 781.952383][T11153] bridge_slave_1: left allmulticast mode [ 782.018363][T11153] bridge_slave_1: left promiscuous mode [ 782.029081][T11153] bridge0: port 2(bridge_slave_1) entered disabled state [ 782.078796][T11153] bridge_slave_0: left allmulticast mode [ 782.100499][T11153] bridge_slave_0: left promiscuous mode [ 782.132216][T11153] bridge0: port 1(bridge_slave_0) entered disabled state [ 782.818833][T11153] erspan0 (unregistering): left allmulticast mode [ 783.369132][T11153] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 783.382046][T11153] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 783.407925][T11153] bond0 (unregistering): Released all slaves [ 783.512037][T17571] FAULT_INJECTION: forcing a failure. [ 783.512037][T17571] name failslab, interval 1, probability 0, space 0, times 0 [ 783.525405][T17571] CPU: 0 UID: 0 PID: 17571 Comm: syz.7.2602 Not tainted syzkaller #0 PREEMPT(full) [ 783.525442][T17571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 783.525459][T17571] Call Trace: [ 783.525469][T17571] [ 783.525479][T17571] dump_stack_lvl+0x16c/0x1f0 [ 783.525520][T17571] should_fail_ex+0x512/0x640 [ 783.525554][T17571] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 783.525596][T17571] should_failslab+0xc2/0x120 [ 783.525635][T17571] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 783.525673][T17571] ? do_epoll_ctl+0x1170/0x3790 [ 783.525713][T17571] do_epoll_ctl+0x1170/0x3790 [ 783.525765][T17571] ? __pfx_do_epoll_ctl+0x10/0x10 [ 783.525797][T17571] ? find_held_lock+0x2b/0x80 [ 783.525826][T17571] ? __might_fault+0xe3/0x190 [ 783.525865][T17571] ? __might_fault+0xe3/0x190 [ 783.525919][T17571] ? __x64_sys_epoll_ctl+0x15c/0x1e0 [ 783.525953][T17571] __x64_sys_epoll_ctl+0x15c/0x1e0 [ 783.525992][T17571] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 783.526041][T17571] do_syscall_64+0xcd/0x4b0 [ 783.526077][T17571] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 783.526104][T17571] RIP: 0033:0x7fe4d0d8eec9 [ 783.526127][T17571] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 783.526152][T17571] RSP: 002b:00007fe4cefd5038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 783.526177][T17571] RAX: ffffffffffffffda RBX: 00007fe4d0fe6180 RCX: 00007fe4d0d8eec9 [ 783.526196][T17571] RDX: 8000000000000000 RSI: 0000000000000001 RDI: 000000000000000a [ 783.526214][T17571] RBP: 00007fe4d0e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 783.526233][T17571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 783.526251][T17571] R13: 00007fe4d0fe6218 R14: 00007fe4d0fe6180 R15: 00007ffeeef56598 [ 783.526289][T17571] [ 783.912264][T17424] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 783.993267][T17424] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 784.039096][T17240] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 784.238508][T17240] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 784.287092][T17240] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 784.376002][T17240] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 784.912499][T11155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 784.989946][T11155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 785.350212][ T9742] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 785.382154][ T9742] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 785.885941][T11153] hsr_slave_0: left promiscuous mode [ 785.946670][T11153] hsr_slave_1: left promiscuous mode [ 786.000537][T11153] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 786.057334][T11153] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 786.156640][T11153] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 786.166256][T11153] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 786.257941][T11153] veth1_macvtap: left promiscuous mode [ 786.263538][T11153] veth1_vlan: left promiscuous mode [ 786.290468][T11153] veth0_vlan: left promiscuous mode [ 787.943121][T11153] team0 (unregistering): Port device team_slave_1 removed [ 788.053677][T11153] team0 (unregistering): Port device team_slave_0 removed [ 789.884726][T17644] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 789.974404][T17644] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 790.185199][T17644] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 790.216196][T17644] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 790.232684][T17644] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 790.255223][T17644] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 790.433760][T17644] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 791.240916][T17659] [U] ^] [ 791.945758][ T5159] Bluetooth: hci0: command 0x0406 tx timeout [ 792.189078][ T5159] Bluetooth: hci2: command 0x0c1a tx timeout [ 792.265241][ T5159] Bluetooth: hci1: command 0x0c1a tx timeout [ 792.271347][ T5846] Bluetooth: hci4: command 0x0c1a tx timeout [ 793.838271][T17717] ubi0: attaching mtd0 [ 793.932692][T17717] ubi0 error: validate_ec_hdr: bad VID header offset 64, expected 514 [ 794.025647][ T5846] Bluetooth: hci0: command 0x0406 tx timeout [ 794.035007][T17717] ubi0 error: validate_ec_hdr: bad EC header [ 794.129068][T17717] Erase counter header dump: [ 794.135400][T17717] magic 0x55424923 [ 794.168996][T17717] version 1 [ 794.183452][T17717] ec 1 [ 794.232071][T17717] vid_hdr_offset 64 [ 794.287300][T17717] data_offset 128 [ 794.334564][T17717] image_seq 0 [ 794.352676][T17717] hdr_crc 0xd4c49b88 [ 794.357952][ T5846] Bluetooth: hci1: command 0x0c1a tx timeout [ 794.425148][T17717] erase counter header hexdump: [ 794.430131][T17717] CPU: 1 UID: 0 PID: 17717 Comm: syz.7.2620 Not tainted syzkaller #0 PREEMPT(full) [ 794.430164][T17717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 794.430181][T17717] Call Trace: [ 794.430191][T17717] [ 794.430203][T17717] dump_stack_lvl+0x16c/0x1f0 [ 794.430256][T17717] validate_ec_hdr+0x28c/0x330 [ 794.430296][T17717] ubi_io_read_ec_hdr+0x63b/0x6c0 [ 794.430335][T17717] ubi_attach+0x5e7/0x4bd0 [ 794.430390][T17717] ? __pfx_ubi_msg+0x10/0x10 [ 794.430433][T17717] ? __pfx_ubi_attach+0x10/0x10 [ 794.430473][T17717] ? ubi_attach_mtd_dev+0x155b/0x35d0 [ 794.430497][T17717] ? __vmalloc_node_noprof+0xad/0xf0 [ 794.430528][T17717] ? ubi_attach_mtd_dev+0x155b/0x35d0 [ 794.430557][T17717] ubi_attach_mtd_dev+0x15a7/0x35d0 [ 794.430602][T17717] ? __pfx_ubi_attach_mtd_dev+0x10/0x10 [ 794.430626][T17717] ? __pfx_get_mtd_device+0x10/0x10 [ 794.430668][T17717] ctrl_cdev_ioctl+0x337/0x3d0 [ 794.430696][T17717] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 794.430741][T17717] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 794.430770][T17717] __x64_sys_ioctl+0x18b/0x210 [ 794.430803][T17717] do_syscall_64+0xcd/0x4b0 [ 794.430841][T17717] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 794.430870][T17717] RIP: 0033:0x7fe4d0d8eec9 [ 794.430892][T17717] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 794.430919][T17717] RSP: 002b:00007fe4d1b5a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 794.430946][T17717] RAX: ffffffffffffffda RBX: 00007fe4d0fe5fa0 RCX: 00007fe4d0d8eec9 [ 794.430966][T17717] RDX: 0000200000000080 RSI: 0000000040186f40 RDI: 0000000000000003 [ 794.430984][T17717] RBP: 00007fe4d0e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 794.431002][T17717] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 794.431019][T17717] R13: 00007fe4d0fe6038 R14: 00007fe4d0fe5fa0 R15: 00007ffeeef56598 [ 794.431056][T17717] [ 794.431068][T17717] ubi0 error: ubi_io_read_ec_hdr: validation failed for PEB 0 [ 794.776687][T17717] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 796.425929][ T5846] Bluetooth: hci1: command 0x0c1a tx timeout [ 796.636471][T17759] ubi0: attaching mtd0 [ 796.698230][T17759] ubi0: scanning is finished [ 796.894085][T17768] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2628'. [ 797.126355][T17759] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 797.185370][T17759] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 797.203117][T17759] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 797.279472][T17759] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 797.350272][T17759] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 797.377595][T17759] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 797.523992][T17759] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 0 [ 797.561385][T17759] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 797.649637][T17772] ubi0: background thread "ubi_bgt0d" started, PID 17772 [ 797.659729][T17767] ubi0: detaching mtd0 [ 797.729426][T17767] ubi0: mtd0 is detached [ 798.015047][T17783] ubi0: attaching mtd0 [ 798.020482][T17783] ubi0: scanning is finished [ 798.193129][T17793] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2633'. [ 798.249918][T17781] kexec: Could not allocate control_code_buffer [ 798.284402][T17783] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 798.327477][T17783] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 798.392210][T17783] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 798.422585][T17783] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 798.482010][T17783] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 798.498793][T17783] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 798.515806][T17783] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 0 [ 798.525921][T17783] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 798.537199][T17790] ubi0: detaching mtd0 [ 798.642034][T17790] ubi0: mtd0 is detached [ 801.558200][T17851] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 803.427478][T17874] random: crng reseeded on system resumption [ 804.124040][T17885] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2651'. [ 807.155154][T17930] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2661'. [ 809.659717][T17983] ubi0: attaching mtd0 [ 809.675959][T17983] ubi0: scanning is finished [ 809.909794][T17983] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 809.935607][T17983] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 810.017644][T17983] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 810.067056][T17983] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 810.074622][T17983] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 810.136016][T17983] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 810.148331][T17983] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 0 [ 810.159802][T17983] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 810.179866][T17988] ubi0: detaching mtd0 [ 810.184203][T17995] ubi0: background thread "ubi_bgt0d" started, PID 17995 [ 810.236106][T17988] ubi0: mtd0 is detached [ 810.286838][T17991] ubi0: attaching mtd0 [ 810.317557][T17991] ubi0: scanning is finished [ 810.670252][T17991] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 810.711171][T17991] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 810.796648][T18011] random: crng reseeded on system resumption [ 810.855726][T17991] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 810.923077][T17991] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 810.975004][T17991] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 811.025661][T17991] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 811.033770][T17991] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 0 [ 811.147540][T17991] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 811.233223][T18007] ubi0: background thread "ubi_bgt0d" started, PID 18007 [ 811.244953][T17996] ubi0: detaching mtd0 [ 811.268471][T17996] ubi0: mtd0 is detached [ 812.209356][T18040] random: crng reseeded on system resumption [ 814.385941][T18084] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2685'. [ 814.582307][T18090] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2686'. [ 817.216225][T18123] ubi0: attaching mtd0 [ 817.233236][T18123] ubi0: scanning is finished [ 817.730501][T18123] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 817.739921][T18123] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 817.774951][T18123] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 817.810302][T18123] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 817.870351][T18123] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 817.881099][T18123] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 817.894190][T18123] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 0 [ 817.914286][T18123] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 817.939047][T18129] ubi0: background thread "ubi_bgt0d" started, PID 18129 [ 817.947046][T18124] ubi0: detaching mtd0 [ 817.965498][T18124] ubi0: mtd0 is detached [ 818.071322][T18135] ubi0: attaching mtd0 [ 818.087007][T18135] ubi0: scanning is finished [ 818.415632][T18135] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 818.426278][T18135] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 818.434436][T18135] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 818.483071][T18135] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 818.589884][T18135] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 818.620420][T18135] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 818.630841][T18135] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 0 [ 818.689307][T18135] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 818.775229][T18145] ubi0: background thread "ubi_bgt0d" started, PID 18145 [ 818.775243][T18136] ubi0: detaching mtd0 [ 818.843575][T18136] ubi0: mtd0 is detached [ 820.634385][T18176] ubi0: attaching mtd0 [ 820.646934][T18176] ubi0: scanning is finished [ 821.037962][T18176] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 821.060814][T18176] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 821.086703][T18176] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 821.114494][T18176] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 821.166468][T18176] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 821.183476][T18176] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 821.203948][T18176] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 0 [ 821.253464][T18176] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 821.334121][T18187] ubi0: background thread "ubi_bgt0d" started, PID 18187 [ 821.334143][T18179] ubi0: detaching mtd0 [ 821.363027][T18179] ubi0: mtd0 is detached [ 822.085416][T18198] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2707'. [ 822.754120][T18220] ubi0: attaching mtd0 [ 822.796013][T18220] ubi0: scanning is finished [ 823.019069][T18220] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 823.178273][T18220] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 823.214999][T18220] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 823.221996][T18220] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 823.275078][T18220] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 823.293528][T18220] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 823.335232][T18220] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 0 [ 823.361173][T18220] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 823.372686][T18229] random: crng reseeded on system resumption [ 823.394475][T18224] ubi0: background thread "ubi_bgt0d" started, PID 18224 [ 823.418555][T18222] ubi0: detaching mtd0 [ 823.485035][T18222] ubi0: mtd0 is detached [ 823.508867][T18232] ubi0: attaching mtd0 [ 823.520146][T18232] ubi0: scanning is finished [ 823.686554][T18232] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 823.715599][T18232] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 823.735757][T18232] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 823.777606][T18232] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 823.798354][T18232] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 823.816320][T18232] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 823.826473][T18232] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 0 [ 823.836883][T18232] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 823.847403][T18239] ubi0: background thread "ubi_bgt0d" started, PID 18239 [ 823.854483][T18234] ubi0: detaching mtd0 [ 823.863259][T18234] ubi0: mtd0 is detached [ 823.867683][T18236] ubi0: attaching mtd0 [ 823.874267][T18236] ubi0: scanning is finished [ 824.057837][T18236] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 824.096155][T18236] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 824.103665][T18236] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 824.158337][T18236] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 824.179444][T18236] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 824.203495][T18250] FAULT_INJECTION: forcing a failure. [ 824.203495][T18250] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 824.217031][T18236] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 824.226360][T18250] CPU: 0 UID: 0 PID: 18250 Comm: syz.8.2721 Not tainted syzkaller #0 PREEMPT(full) [ 824.226397][T18250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 824.226414][T18250] Call Trace: [ 824.226425][T18250] [ 824.226436][T18250] dump_stack_lvl+0x16c/0x1f0 [ 824.226476][T18250] should_fail_ex+0x512/0x640 [ 824.226517][T18250] should_fail_alloc_page+0xe7/0x130 [ 824.226562][T18250] prepare_alloc_pages+0x3c2/0x610 [ 824.226598][T18250] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 824.226635][T18250] ? arch_stack_walk+0xa6/0x100 [ 824.226682][T18250] ? stack_trace_save+0x8e/0xc0 [ 824.226715][T18250] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 824.226753][T18250] ? rcu_is_watching+0x12/0xc0 [ 824.226806][T18250] ? kasan_save_track+0x14/0x30 [ 824.226841][T18250] ? __kasan_slab_alloc+0x89/0x90 [ 824.226877][T18250] ? kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 824.226913][T18250] ? __pmd_alloc+0xbf/0x930 [ 824.226939][T18250] ? __handle_mm_fault+0xa06/0x2a50 [ 824.226970][T18250] ? handle_mm_fault+0x589/0xd10 [ 824.227001][T18250] ? __get_user_pages+0x550/0x34a0 [ 824.227027][T18250] ? populate_vma_page_range+0x267/0x3f0 [ 824.227065][T18250] ? __mm_populate+0x1d8/0x380 [ 824.227090][T18250] ? vm_mmap_pgoff+0x37f/0x470 [ 824.227114][T18250] ? ksys_mmap_pgoff+0x7d/0x5c0 [ 824.227138][T18250] ? __x64_sys_mmap+0x125/0x190 [ 824.227162][T18250] ? do_syscall_64+0xcd/0x4b0 [ 824.227194][T18250] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 824.227225][T18250] ? policy_nodemask+0xea/0x4e0 [ 824.227269][T18250] alloc_pages_mpol+0x1fb/0x550 [ 824.227311][T18250] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 824.227363][T18250] alloc_pages_noprof+0x131/0x390 [ 824.227404][T18250] pte_alloc_one+0x1c/0x3a0 [ 824.227438][T18250] __pte_alloc+0x6d/0x3c0 [ 824.227463][T18250] ? __pfx___pte_alloc+0x10/0x10 [ 824.227491][T18250] ? do_raw_spin_lock+0x12c/0x2b0 [ 824.227522][T18250] do_pte_missing+0x285a/0x3ba0 [ 824.227557][T18250] ? do_raw_spin_unlock+0x172/0x230 [ 824.227585][T18250] ? _raw_spin_unlock+0x28/0x50 [ 824.227613][T18250] ? __pmd_alloc+0x3fb/0x930 [ 824.227645][T18250] __handle_mm_fault+0x152a/0x2a50 [ 824.227690][T18250] ? __pfx___handle_mm_fault+0x10/0x10 [ 824.227757][T18250] handle_mm_fault+0x589/0xd10 [ 824.227799][T18250] __get_user_pages+0x550/0x34a0 [ 824.227844][T18250] ? __pfx___get_user_pages+0x10/0x10 [ 824.227884][T18250] populate_vma_page_range+0x267/0x3f0 [ 824.227918][T18250] ? __pfx_populate_vma_page_range+0x10/0x10 [ 824.227948][T18250] ? __pfx_find_vma_intersection+0x10/0x10 [ 824.227978][T18250] ? do_mmap+0x69c/0x1210 [ 824.228009][T18250] __mm_populate+0x1d8/0x380 [ 824.228047][T18250] ? __pfx___mm_populate+0x10/0x10 [ 824.228080][T18250] ? up_write+0x1b2/0x520 [ 824.228110][T18250] vm_mmap_pgoff+0x37f/0x470 [ 824.228142][T18250] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 824.228179][T18250] ? __x64_sys_futex+0x1e0/0x4c0 [ 824.228215][T18250] ? __x64_sys_futex+0x1e9/0x4c0 [ 824.228257][T18250] ksys_mmap_pgoff+0x7d/0x5c0 [ 824.228283][T18250] ? xfd_validate_state+0x61/0x180 [ 824.228321][T18250] ? __pfx_ksys_write+0x10/0x10 [ 824.228362][T18250] __x64_sys_mmap+0x125/0x190 [ 824.228393][T18250] do_syscall_64+0xcd/0x4b0 [ 824.228430][T18250] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 824.228458][T18250] RIP: 0033:0x7f68dc78eec9 [ 824.228481][T18250] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 824.228508][T18250] RSP: 002b:00007f68dd6d4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 824.228535][T18250] RAX: ffffffffffffffda RBX: 00007f68dc9e5fa0 RCX: 00007f68dc78eec9 [ 824.228556][T18250] RDX: 00000000000000df RSI: 0000000000400005 RDI: 0000000000000000 [ 824.228574][T18250] RBP: 00007f68dc811f91 R08: 0000000000000002 R09: 0000000000008000 [ 824.228591][T18250] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 824.228609][T18250] R13: 00007f68dc9e6038 R14: 00007f68dc9e5fa0 R15: 00007fffaab68718 [ 824.228647][T18250] [ 824.803956][T18236] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 0 [ 825.020120][T18236] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 825.035006][T18238] ubi0: detaching mtd0 [ 825.072593][T18238] ubi0: mtd0 is detached [ 825.724021][T18259] RDS: rds_bind could not find a transport for ::ffff:100.1.1.0, load rds_tcp or rds_rdma? [ 829.311311][T18295] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 829.337626][T18295] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 829.385278][T18295] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 829.412013][T18295] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 829.448598][T18315] ubi0: attaching mtd0 [ 829.462693][T18315] ubi0: scanning is finished [ 829.779179][T18328] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2741'. [ 829.810639][T18315] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 829.825086][T18315] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 829.832329][T18315] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 829.897209][T18315] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 829.960448][T18315] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 830.048086][T18315] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 830.134987][T18315] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 0 [ 830.170407][T18315] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 830.255107][T18330] ubi0: background thread "ubi_bgt0d" started, PID 18330 [ 830.285106][T18320] ubi0: detaching mtd0 [ 830.311033][T18320] ubi0: mtd0 is detached [ 831.065352][ T5846] Bluetooth: hci0: command 0x0406 tx timeout [ 831.384929][ T5846] Bluetooth: hci2: command 0x0c1a tx timeout [ 831.475688][ T5846] Bluetooth: hci1: command 0x0c1a tx timeout [ 831.481866][ T5159] Bluetooth: hci4: command 0x0c1a tx timeout [ 831.831315][T18345] FAULT_INJECTION: forcing a failure. [ 831.831315][T18345] name failslab, interval 1, probability 0, space 0, times 0 [ 831.857352][T18345] CPU: 0 UID: 0 PID: 18345 Comm: syz.8.2738 Not tainted syzkaller #0 PREEMPT(full) [ 831.857392][T18345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 831.857409][T18345] Call Trace: [ 831.857419][T18345] [ 831.857431][T18345] dump_stack_lvl+0x16c/0x1f0 [ 831.857472][T18345] should_fail_ex+0x512/0x640 [ 831.857506][T18345] ? __kmalloc_noprof+0xbf/0x510 [ 831.857547][T18345] ? __register_sysctl_table+0xea2/0x1900 [ 831.857576][T18345] should_failslab+0xc2/0x120 [ 831.857619][T18345] __kmalloc_noprof+0xd2/0x510 [ 831.857655][T18345] ? __register_sysctl_table+0xe8e/0x1900 [ 831.857693][T18345] __register_sysctl_table+0xea2/0x1900 [ 831.857732][T18345] ? __pfx___register_sysctl_table+0x10/0x10 [ 831.857765][T18345] ? is_module_address+0x69/0xf0 [ 831.857805][T18345] ? register_net_sysctl_sz+0x228/0x3e0 [ 831.857852][T18345] __devinet_sysctl_register+0x1b9/0x360 [ 831.857895][T18345] ? __pfx___devinet_sysctl_register+0x10/0x10 [ 831.857933][T18345] ? devinet_init_net+0xeb/0x910 [ 831.857968][T18345] ? __asan_memcpy+0x3c/0x60 [ 831.857997][T18345] devinet_init_net+0x347/0x910 [ 831.858034][T18345] ? __pfx_devinet_init_net+0x10/0x10 [ 831.858069][T18345] ops_init+0x1e2/0x5f0 [ 831.858106][T18345] setup_net+0x100/0x390 [ 831.858148][T18345] ? __pfx_setup_net+0x10/0x10 [ 831.858185][T18345] ? debug_mutex_init+0x37/0x70 [ 831.858217][T18345] copy_net_ns+0x2f8/0x690 [ 831.858257][T18345] create_new_namespaces+0x3ea/0xa90 [ 831.858299][T18345] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 831.858332][T18345] ksys_unshare+0x45b/0xa40 [ 831.858367][T18345] ? __pfx_ksys_unshare+0x10/0x10 [ 831.858416][T18345] __x64_sys_unshare+0x31/0x40 [ 831.858451][T18345] do_syscall_64+0xcd/0x4b0 [ 831.858488][T18345] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 831.858513][T18345] RIP: 0033:0x7f68dc78eec9 [ 831.858534][T18345] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 831.858560][T18345] RSP: 002b:00007f68dd6d4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 831.858585][T18345] RAX: ffffffffffffffda RBX: 00007f68dc9e5fa0 RCX: 00007f68dc78eec9 [ 831.858603][T18345] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 831.858619][T18345] RBP: 00007f68dc811f91 R08: 0000000000000000 R09: 0000000000000000 [ 831.858635][T18345] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 831.858651][T18345] R13: 00007f68dc9e6038 R14: 00007f68dc9e5fa0 R15: 00007fffaab68718 [ 831.858687][T18345] [ 831.859406][T18345] sysctl could not get directory: /net/ipv4/conf/default -12 [ 832.724086][T18367] serio: Serial port pty6 [ 833.033552][T18373] ubi0: attaching mtd0 [ 833.078643][T18373] ubi0: scanning is finished [ 833.322165][T18373] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 833.343497][T18373] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 833.373730][T18373] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 833.404997][T18373] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 833.461961][T18373] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 833.522058][T18373] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 833.545125][T18373] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 0 [ 833.554446][T18373] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 833.575785][T18377] ubi0: background thread "ubi_bgt0d" started, PID 18377 [ 833.582917][T18375] ubi0: detaching mtd0 [ 833.880117][T18375] ubi0: mtd0 is detached [ 834.118912][T18388] ubi0: attaching mtd0 [ 834.132673][T18388] ubi0: scanning is finished [ 834.341356][T18388] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 834.355258][T18388] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 834.362512][T18388] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 834.516612][T18388] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 834.524170][T18388] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 834.531213][T18388] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 834.539401][T18388] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 0 [ 834.548859][T18388] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 834.559398][T18394] ubi0: detaching mtd0 [ 834.574920][T18395] ubi0: background thread "ubi_bgt0d" started, PID 18395 [ 834.633538][T18394] ubi0: mtd0 is detached [ 836.077469][T18423] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2755'. [ 836.535686][T18436] ubi0: attaching mtd0 [ 836.544569][T18436] ubi0: scanning is finished [ 836.691516][T18436] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 836.705126][T18436] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 836.714941][T18436] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 836.800619][T18436] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 836.810823][T18436] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 836.817796][T18436] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 836.826359][T18436] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 0 [ 836.835917][T18436] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 836.846882][T18439] ubi0: background thread "ubi_bgt0d" started, PID 18439 [ 836.887501][T18437] ubi0: detaching mtd0 [ 836.953284][T18437] ubi0: mtd0 is detached [ 837.318219][T18449] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2759'. [ 837.902437][T18459] serio: Serial port pty6 [ 837.949993][T18460] random: crng reseeded on system resumption [ 838.582468][T18468] workqueue: max_active 8000 requested for writeback is out of range, clamping between 1 and 2048 [ 839.939883][ T5846] Bluetooth: hci1: Malformed Event: 0x02 [ 841.738430][T18538] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2777'. [ 842.788335][T18540] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2778'. [ 845.129884][T18572] ubi0: attaching mtd0 [ 845.165164][T18572] ubi0: scanning is finished [ 845.299363][T18572] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 845.311524][T18572] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 845.371677][T18572] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 845.466419][T18572] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 845.500048][T18572] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 845.508804][T18572] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 845.517060][T18572] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 0 [ 845.556037][T18572] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 845.605975][T18580] ubi0: background thread "ubi_bgt0d" started, PID 18580 [ 845.613435][T18579] ubi0: detaching mtd0 [ 845.748389][T18579] ubi0: mtd0 is detached [ 845.771704][T18587] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2788'. [ 846.500121][T18602] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2790'. [ 847.092840][T18612] random: crng reseeded on system resumption [ 848.898741][T18645] random: crng reseeded on system resumption [ 849.963707][T18663] ubi0: attaching mtd0 [ 849.977143][T18663] ubi0: scanning is finished [ 850.159967][T18668] HfR: entered promiscuous mode [ 850.248782][T18663] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 850.331416][T18663] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 850.362873][T18663] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 850.408628][T18663] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 850.620220][T18663] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 850.627579][T18663] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 850.635822][T18663] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 0 [ 850.645155][T18663] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 850.657781][T18667] ubi0: detaching mtd0 [ 850.690087][T18667] ubi0: mtd0 is detached [ 851.326936][T18687] Per memcg swappiness does not exist in cgroup v2. See memory.reclaim or memory.swap.max there [ 851.326936][T18687] [ 851.823820][T18694] ubi0: attaching mtd0 [ 851.981693][T18694] ubi0: scanning is finished [ 852.375007][T18694] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 852.382569][T18694] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 852.428510][T18694] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 852.475070][T18694] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 852.520479][T18694] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 852.629866][T18694] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 852.692435][T18694] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 0 [ 852.748156][T18694] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 852.758556][T18703] ubi0: background thread "ubi_bgt0d" started, PID 18703 [ 852.765722][T18699] ubi0: detaching mtd0 [ 852.858618][T18699] ubi0: mtd0 is detached [ 854.328440][T18701] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2814'. [ 854.946803][T18742] netlink: 330 bytes leftover after parsing attributes in process `syz.7.2825'. [ 854.975996][T18742] : renamed from bond0 (while UP) [ 855.404160][T18755] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2827'. [ 857.306677][T18794] random: crng reseeded on system resumption [ 857.401820][T18797] random: crng reseeded on system resumption [ 859.197317][T18824] ubi0: attaching mtd0 [ 859.207049][T18824] ubi0: scanning is finished [ 859.440189][T18824] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 859.462871][T18824] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 859.506087][T18824] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 859.531686][T18824] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 859.557113][T18824] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 859.574173][T18824] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 859.600999][T18824] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 0 [ 859.661912][T18824] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 859.711601][T18842] ubi0: background thread "ubi_bgt0d" started, PID 18842 [ 859.711673][T18836] ubi0: detaching mtd0 [ 859.755726][T18836] ubi0: mtd0 is detached [ 861.184019][T18867] netlink: 206 bytes leftover after parsing attributes in process `syz.8.2854'. [ 861.247489][T18870] FAULT_INJECTION: forcing a failure. [ 861.247489][T18870] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 861.317375][T18870] CPU: 0 UID: 0 PID: 18870 Comm: syz.2.2855 Not tainted syzkaller #0 PREEMPT(full) [ 861.317414][T18870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 861.317430][T18870] Call Trace: [ 861.317440][T18870] [ 861.317451][T18870] dump_stack_lvl+0x16c/0x1f0 [ 861.317489][T18870] should_fail_ex+0x512/0x640 [ 861.317539][T18870] should_fail_alloc_page+0xe7/0x130 [ 861.317581][T18870] prepare_alloc_pages+0x3c2/0x610 [ 861.317617][T18870] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 861.317654][T18870] ? stack_trace_save+0x8e/0xc0 [ 861.317685][T18870] ? __pfx_stack_trace_save+0x10/0x10 [ 861.317713][T18870] ? rcu_is_watching+0x12/0xc0 [ 861.317742][T18870] ? stack_depot_save_flags+0x29/0x9c0 [ 861.317782][T18870] ? kasan_save_stack+0x42/0x60 [ 861.317815][T18870] ? kasan_save_stack+0x33/0x60 [ 861.317848][T18870] ? kasan_save_track+0x14/0x30 [ 861.317882][T18870] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 861.317924][T18870] ? walk_pgd_range+0x88b/0x1f50 [ 861.317960][T18870] ? walk_page_range_mm+0x461/0xb40 [ 861.317997][T18870] ? madvise_walk_vmas+0x31f/0x9c0 [ 861.318021][T18870] ? madvise_do_behavior+0x1e2/0x530 [ 861.318045][T18870] ? do_madvise+0x176/0x240 [ 861.318068][T18870] ? __x64_sys_madvise+0xa9/0x110 [ 861.318092][T18870] ? do_syscall_64+0xcd/0x4b0 [ 861.318123][T18870] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 861.318167][T18870] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 861.318197][T18870] ? policy_nodemask+0xea/0x4e0 [ 861.318240][T18870] alloc_pages_mpol+0x1fb/0x550 [ 861.318282][T18870] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 861.318327][T18870] alloc_pages_noprof+0x131/0x390 [ 861.318365][T18870] pte_alloc_one+0x1c/0x3a0 [ 861.318398][T18870] __pte_alloc+0x6d/0x3c0 [ 861.318423][T18870] ? __pfx___pte_alloc+0x10/0x10 [ 861.318447][T18870] ? _raw_spin_unlock+0x28/0x50 [ 861.318474][T18870] ? __pmd_alloc+0x3fb/0x930 [ 861.318514][T18870] walk_pgd_range+0xb84/0x1f50 [ 861.318559][T18870] ? __pfx_guard_install_set_pte+0x10/0x10 [ 861.318599][T18870] ? __pfx_guard_install_pte_entry+0x10/0x10 [ 861.318641][T18870] ? __pfx_guard_install_set_pte+0x10/0x10 [ 861.318686][T18870] ? __pfx_guard_install_set_pte+0x10/0x10 [ 861.318728][T18870] ? __pfx_guard_install_set_pte+0x10/0x10 [ 861.318769][T18870] ? __pfx_walk_pgd_range+0x10/0x10 [ 861.318818][T18870] __walk_page_range+0x163/0x820 [ 861.318859][T18870] ? find_vma+0xbf/0x140 [ 861.318882][T18870] ? __pfx_find_vma+0x10/0x10 [ 861.318910][T18870] ? walk_page_test+0x9b/0x180 [ 861.318948][T18870] walk_page_range_mm+0x461/0xb40 [ 861.318992][T18870] ? __pfx_walk_page_range_mm+0x10/0x10 [ 861.319041][T18870] ? __anon_vma_prepare+0x2e2/0x5e0 [ 861.319079][T18870] madvise_vma_behavior+0xa62/0x2d60 [ 861.319110][T18870] ? mas_prev_setup.constprop.0+0xb6/0x9d0 [ 861.319142][T18870] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 861.319173][T18870] ? __pfx_mas_prev+0x10/0x10 [ 861.319215][T18870] ? find_vma_prev+0xda/0x160 [ 861.319237][T18870] ? find_held_lock+0x2b/0x80 [ 861.319265][T18870] ? __pfx_find_vma_prev+0x10/0x10 [ 861.319290][T18870] ? futex_unqueue+0x133/0x2c0 [ 861.319333][T18870] ? __futex_wait+0x24b/0x2f0 [ 861.319361][T18870] madvise_walk_vmas+0x31f/0x9c0 [ 861.319394][T18870] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 861.319432][T18870] madvise_do_behavior+0x1e2/0x530 [ 861.319457][T18870] ? futex_private_hash_put+0x18a/0x300 [ 861.319490][T18870] ? __pfx_madvise_do_behavior+0x10/0x10 [ 861.319528][T18870] ? down_read+0x13d/0x480 [ 861.319583][T18870] do_madvise+0x176/0x240 [ 861.319614][T18870] ? __pfx_do_madvise+0x10/0x10 [ 861.319640][T18870] ? do_futex+0x122/0x350 [ 861.319702][T18870] ? xfd_validate_state+0x61/0x180 [ 861.319739][T18870] ? __pfx_ksys_write+0x10/0x10 [ 861.319781][T18870] __x64_sys_madvise+0xa9/0x110 [ 861.319807][T18870] ? lockdep_hardirqs_on+0x7c/0x110 [ 861.319840][T18870] do_syscall_64+0xcd/0x4b0 [ 861.319876][T18870] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 861.319903][T18870] RIP: 0033:0x7f2ffb38eec9 [ 861.319925][T18870] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 861.319951][T18870] RSP: 002b:00007f2ffc20f038 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 861.319977][T18870] RAX: ffffffffffffffda RBX: 00007f2ffb5e5fa0 RCX: 00007f2ffb38eec9 [ 861.319994][T18870] RDX: 0000000000000066 RSI: 0000000002021000 RDI: 0000000000000000 [ 861.320010][T18870] RBP: 00007f2ffb411f91 R08: 0000000000000000 R09: 0000000000000000 [ 861.320025][T18870] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 861.320040][T18870] R13: 00007f2ffb5e6038 R14: 00007f2ffb5e5fa0 R15: 00007fff91da7948 [ 861.320082][T18870] [ 861.775418][ C0] vkms_vblank_simulate: vblank timer overrun [ 862.001149][ T30] audit: type=1800 audit(4294967556.750:16): pid=18883 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2855" name="features" dev="configfs" ino=68264 res=0 errno=0 [ 862.593217][T18900] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2862'. [ 863.138736][T18904] HfR: entered promiscuous mode [ 863.509863][T18915] random: crng reseeded on system resumption [ 863.762461][T18921] FAULT_INJECTION: forcing a failure. [ 863.762461][T18921] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 863.777304][T18921] CPU: 0 UID: 0 PID: 18921 Comm: syz.7.2867 Not tainted syzkaller #0 PREEMPT(full) [ 863.777341][T18921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 863.777367][T18921] Call Trace: [ 863.777376][T18921] [ 863.777385][T18921] dump_stack_lvl+0x16c/0x1f0 [ 863.777427][T18921] should_fail_ex+0x512/0x640 [ 863.777468][T18921] should_fail_alloc_page+0xe7/0x130 [ 863.777513][T18921] prepare_alloc_pages+0x3c2/0x610 [ 863.777549][T18921] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 863.777586][T18921] ? stack_trace_save+0x8e/0xc0 [ 863.777619][T18921] ? __pfx_stack_trace_save+0x10/0x10 [ 863.777652][T18921] ? rcu_is_watching+0x12/0xc0 [ 863.777684][T18921] ? stack_depot_save_flags+0x29/0x9c0 [ 863.777728][T18921] ? kasan_save_stack+0x42/0x60 [ 863.777763][T18921] ? kasan_save_stack+0x33/0x60 [ 863.777796][T18921] ? kasan_save_track+0x14/0x30 [ 863.777831][T18921] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 863.777868][T18921] ? walk_pgd_range+0x88b/0x1f50 [ 863.777904][T18921] ? walk_page_range_mm+0x461/0xb40 [ 863.777941][T18921] ? madvise_walk_vmas+0x31f/0x9c0 [ 863.777965][T18921] ? madvise_do_behavior+0x1e2/0x530 [ 863.777991][T18921] ? do_madvise+0x176/0x240 [ 863.778014][T18921] ? __x64_sys_madvise+0xa9/0x110 [ 863.778039][T18921] ? do_syscall_64+0xcd/0x4b0 [ 863.778072][T18921] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 863.778116][T18921] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 863.778146][T18921] ? policy_nodemask+0xea/0x4e0 [ 863.778185][T18921] alloc_pages_mpol+0x1fb/0x550 [ 863.778209][T18921] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 863.778234][T18921] alloc_pages_noprof+0x131/0x390 [ 863.778259][T18921] pte_alloc_one+0x1c/0x3a0 [ 863.778277][T18921] __pte_alloc+0x6d/0x3c0 [ 863.778291][T18921] ? __pfx___pte_alloc+0x10/0x10 [ 863.778304][T18921] ? _raw_spin_unlock+0x28/0x50 [ 863.778319][T18921] ? __pmd_alloc+0x3fb/0x930 [ 863.778335][T18921] walk_pgd_range+0xb84/0x1f50 [ 863.778381][T18921] ? __pfx_guard_install_set_pte+0x10/0x10 [ 863.778419][T18921] ? __pfx_guard_install_pte_entry+0x10/0x10 [ 863.778460][T18921] ? __pfx_guard_install_set_pte+0x10/0x10 [ 863.778496][T18921] ? __pfx_guard_install_set_pte+0x10/0x10 [ 863.778517][T18921] ? __pfx_guard_install_set_pte+0x10/0x10 [ 863.778539][T18921] ? __pfx_walk_pgd_range+0x10/0x10 [ 863.778564][T18921] __walk_page_range+0x163/0x820 [ 863.778585][T18921] ? find_vma+0xbf/0x140 [ 863.778597][T18921] ? __pfx_find_vma+0x10/0x10 [ 863.778613][T18921] ? walk_page_test+0x9b/0x180 [ 863.778633][T18921] walk_page_range_mm+0x461/0xb40 [ 863.778655][T18921] ? __pfx_walk_page_range_mm+0x10/0x10 [ 863.778680][T18921] ? __anon_vma_prepare+0x2e2/0x5e0 [ 863.778700][T18921] madvise_vma_behavior+0xa62/0x2d60 [ 863.778716][T18921] ? mas_prev_setup.constprop.0+0xb6/0x9d0 [ 863.778734][T18921] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 863.778750][T18921] ? __pfx_mas_prev+0x10/0x10 [ 863.778771][T18921] ? find_vma_prev+0xda/0x160 [ 863.778784][T18921] ? find_held_lock+0x2b/0x80 [ 863.778799][T18921] ? __pfx_find_vma_prev+0x10/0x10 [ 863.778812][T18921] ? futex_unqueue+0x133/0x2c0 [ 863.778835][T18921] ? __futex_wait+0x24b/0x2f0 [ 863.778850][T18921] madvise_walk_vmas+0x31f/0x9c0 [ 863.778867][T18921] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 863.778886][T18921] madvise_do_behavior+0x1e2/0x530 [ 863.778899][T18921] ? futex_private_hash_put+0x18a/0x300 [ 863.778917][T18921] ? __pfx_madvise_do_behavior+0x10/0x10 [ 863.778932][T18921] ? down_read+0x13d/0x480 [ 863.778960][T18921] do_madvise+0x176/0x240 [ 863.778973][T18921] ? __pfx_do_madvise+0x10/0x10 [ 863.778985][T18921] ? do_futex+0x122/0x350 [ 863.779017][T18921] ? __pfx_ksys_write+0x10/0x10 [ 863.779039][T18921] __x64_sys_madvise+0xa9/0x110 [ 863.779052][T18921] ? lockdep_hardirqs_on+0x7c/0x110 [ 863.779068][T18921] do_syscall_64+0xcd/0x4b0 [ 863.779087][T18921] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 863.779101][T18921] RIP: 0033:0x7fe4d0d8eec9 [ 863.779114][T18921] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 863.779127][T18921] RSP: 002b:00007fe4d1b5a038 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 863.779141][T18921] RAX: ffffffffffffffda RBX: 00007fe4d0fe5fa0 RCX: 00007fe4d0d8eec9 [ 863.779151][T18921] RDX: 0000000000000066 RSI: 0000000002021000 RDI: 0000000000000000 [ 863.779160][T18921] RBP: 00007fe4d0e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 863.779169][T18921] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 863.779177][T18921] R13: 00007fe4d0fe6038 R14: 00007fe4d0fe5fa0 R15: 00007ffeeef56598 [ 863.779197][T18921] [ 864.230849][ C0] vkms_vblank_simulate: vblank timer overrun [ 864.585012][ T30] audit: type=1800 audit(4294967559.330:17): pid=18931 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.2867" name="features" dev="configfs" ino=68460 res=0 errno=0 [ 865.024078][T18940] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2871'. [ 865.159341][T18926] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 865.166226][T18926] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 865.206681][T18926] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 865.248032][T18926] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 865.895813][T18956] ubi0: attaching mtd0 [ 865.915492][T18956] ubi0: scanning is finished [ 866.099078][T18956] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 866.152248][T18956] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 866.185126][T18956] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 866.232704][T18956] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 866.255694][T18956] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 866.321410][T18956] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 866.392967][T18956] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 0 [ 866.427233][ T5846] Bluetooth: hci0: command 0x0406 tx timeout [ 866.463223][T18956] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 866.505850][T18964] ubi0: background thread "ubi_bgt0d" started, PID 18964 [ 866.513120][T18959] ubi0: detaching mtd0 [ 866.531909][T18959] ubi0: mtd0 is detached [ 867.100545][T18983] random: crng reseeded on system resumption [ 867.228521][ T5846] Bluetooth: hci4: command 0x0c1a tx timeout [ 867.234757][ T5159] Bluetooth: hci2: command 0x0c1a tx timeout [ 867.305475][ T5846] Bluetooth: hci1: command 0x0c1a tx timeout [ 868.321348][T19009] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2886'. [ 868.757988][T19018] sg_write: data in/out 3292/1 bytes for SCSI command 0xa3-- guessing data in; [ 868.757988][T19018] program syz.8.2889 not setting count and/or reply_len properly [ 871.435328][T19071] RDS: rds_bind could not find a transport for ::ffff:100.1.1.0, load rds_tcp or rds_rdma? [ 872.753219][T19101] ubi0: attaching mtd0 [ 872.758394][T19101] ubi0: scanning is finished [ 872.966564][T19101] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 872.995052][T19101] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 873.020019][T19101] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 873.085085][T19101] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 873.114551][T19101] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 873.232097][T19101] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 873.246946][T19101] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 0 [ 873.294975][T19101] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 873.325799][T19106] ubi0: background thread "ubi_bgt0d" started, PID 19106 [ 873.332876][T19103] ubi0: detaching mtd0 [ 873.429909][T19103] ubi0: mtd0 is detached [ 875.303365][T19139] RDS: rds_bind could not find a transport for ::ffff:100.1.1.0, load rds_tcp or rds_rdma? [ 876.021123][T19161] input: jJ-9%vlQ J86 as /devices/virtual/input/input24 [ 877.144190][T19180] random: crng reseeded on system resumption [ 880.355948][T19243] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2939'. [ 883.328158][ T5846] Bluetooth: hci4: unexpected subevent 0x01 length: 123 > 18 [ 883.379575][T19284] FAULT_INJECTION: forcing a failure. [ 883.379575][T19284] name failslab, interval 1, probability 0, space 0, times 0 [ 883.464136][T19284] CPU: 0 UID: 0 PID: 19284 Comm: syz.2.2949 Not tainted syzkaller #0 PREEMPT(full) [ 883.464157][T19284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 883.464166][T19284] Call Trace: [ 883.464172][T19284] [ 883.464178][T19284] dump_stack_lvl+0x16c/0x1f0 [ 883.464201][T19284] should_fail_ex+0x512/0x640 [ 883.464219][T19284] ? fs_reclaim_acquire+0xae/0x150 [ 883.464236][T19284] should_failslab+0xc2/0x120 [ 883.464257][T19284] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 883.464277][T19284] ? security_inode_alloc+0x3b/0x2b0 [ 883.464301][T19284] security_inode_alloc+0x3b/0x2b0 [ 883.464320][T19284] inode_init_always_gfp+0xce4/0x1030 [ 883.464342][T19284] alloc_inode+0x86/0x240 [ 883.464356][T19284] new_inode+0x22/0x1c0 [ 883.464368][T19284] ? trace_cap_capable+0x18d/0x200 [ 883.464388][T19284] shmem_get_inode+0x19a/0xfb0 [ 883.464404][T19284] ? __vm_enough_memory+0x184/0x3f0 [ 883.464420][T19284] __shmem_file_setup+0x279/0x330 [ 883.464439][T19284] shmem_zero_setup+0x93/0x1a0 [ 883.464460][T19284] __mmap_region+0x2081/0x27b0 [ 883.464480][T19284] ? finish_task_switch.isra.0+0x21c/0xc10 [ 883.464496][T19284] ? __pfx___mmap_region+0x10/0x10 [ 883.464515][T19284] ? rcu_is_watching+0x12/0xc0 [ 883.464534][T19284] ? rcu_is_watching+0x12/0xc0 [ 883.464557][T19284] ? trace_sched_exit_tp+0xd1/0x120 [ 883.464571][T19284] ? __schedule+0x11a3/0x5de0 [ 883.464585][T19284] ? __lock_acquire+0x62e/0x1ce0 [ 883.464616][T19284] ? __pfx___schedule+0x10/0x10 [ 883.464654][T19284] ? rcu_is_watching+0x12/0xc0 [ 883.464674][T19284] mmap_region+0x1ab/0x3f0 [ 883.464697][T19284] do_mmap+0xa3e/0x1210 [ 883.464715][T19284] ? __pfx_do_mmap+0x10/0x10 [ 883.464729][T19284] ? __pfx_down_write_killable+0x10/0x10 [ 883.464752][T19284] ? vfs_write+0xa38/0x11d0 [ 883.464774][T19284] vm_mmap_pgoff+0x29e/0x470 [ 883.464791][T19284] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 883.464807][T19284] ? preempt_schedule_common+0x44/0xc0 [ 883.464834][T19284] ? __x64_sys_futex+0x1e0/0x4c0 [ 883.464863][T19284] ? __x64_sys_futex+0x1e9/0x4c0 [ 883.464899][T19284] ksys_mmap_pgoff+0x7d/0x5c0 [ 883.464922][T19284] ? xfd_validate_state+0x61/0x180 [ 883.464953][T19284] ? __pfx_ksys_write+0x10/0x10 [ 883.464988][T19284] __x64_sys_mmap+0x125/0x190 [ 883.465022][T19284] do_syscall_64+0xcd/0x4b0 [ 883.465053][T19284] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 883.465076][T19284] RIP: 0033:0x7f2ffb38eec9 [ 883.465095][T19284] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 883.465118][T19284] RSP: 002b:00007f2ffc1ee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 883.465142][T19284] RAX: ffffffffffffffda RBX: 00007f2ffb5e6090 RCX: 00007f2ffb38eec9 [ 883.465160][T19284] RDX: 00000000000000df RSI: 0000000000020009 RDI: 0000000000000000 [ 883.465173][T19284] RBP: 00007f2ffb411f91 R08: 00040000000000a5 R09: 0000000000008000 [ 883.465189][T19284] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 883.465205][T19284] R13: 00007f2ffb5e6128 R14: 00007f2ffb5e6090 R15: 00007fff91da7948 [ 883.465235][T19284] [ 885.385470][ T5846] Bluetooth: hci4: command 0x0c1a tx timeout [ 885.766871][T19312] ubi0: attaching mtd0 [ 885.781764][T19312] ubi0: scanning is finished [ 885.991448][T19312] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 886.018969][T19312] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 886.055186][T19312] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 886.136789][T19312] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 886.312467][T19312] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 886.333909][T19312] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 886.394594][T19312] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 0 [ 886.444977][T19312] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 886.499395][T19315] ubi0: detaching mtd0 [ 886.508062][T19318] ubi0: background thread "ubi_bgt0d" started, PID 19318 [ 886.573414][T19315] ubi0: mtd0 is detached [ 886.873443][T19326] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2957'. [ 889.403161][T19373] ubi0: attaching mtd0 [ 889.418319][T19373] ubi0: scanning is finished [ 889.520187][T19375] RDS: rds_bind could not find a transport for ::ffff:100.1.1.0, load rds_tcp or rds_rdma? [ 889.624221][T19373] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 889.639658][T19373] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 889.649806][T19373] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 889.661330][T19373] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 889.669075][T19373] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 889.680586][T19373] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 889.689495][T19373] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 0 [ 889.700480][T19373] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 889.730072][T19376] ubi0: background thread "ubi_bgt0d" started, PID 19376 [ 889.766019][T19374] ubi0: detaching mtd0 [ 889.834103][T19374] ubi0: mtd0 is detached [ 892.292998][T19414] input: jJ-9%vlQ J86 as /devices/virtual/input/input25 [ 892.470258][T19417] ubi0: attaching mtd0 [ 892.526895][T19417] ubi0: scanning is finished [ 892.797606][T19417] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 892.818890][T19425] random: crng reseeded on system resumption [ 892.852891][T19417] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 892.894184][T19417] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 893.015057][T19417] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 893.057634][T19417] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 893.085012][T19417] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 893.141771][T19417] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 0 [ 893.172680][T19417] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 893.305847][T19426] ubi0: background thread "ubi_bgt0d" started, PID 19426 [ 893.329629][T19419] ubi0: detaching mtd0 [ 893.384564][T19419] ubi0: mtd0 is detached [ 895.104283][T19466] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 896.399367][T19479] FAULT_INJECTION: forcing a failure. [ 896.399367][T19479] name failslab, interval 1, probability 0, space 0, times 0 [ 896.439327][T19479] CPU: 0 UID: 0 PID: 19479 Comm: syz.7.2992 Not tainted syzkaller #0 PREEMPT(full) [ 896.439364][T19479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 896.439380][T19479] Call Trace: [ 896.439390][T19479] [ 896.439400][T19479] dump_stack_lvl+0x16c/0x1f0 [ 896.439440][T19479] should_fail_ex+0x512/0x640 [ 896.439482][T19479] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 896.439525][T19479] should_failslab+0xc2/0x120 [ 896.439566][T19479] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 896.439603][T19479] ? __d_alloc+0x32/0xae0 [ 896.439645][T19479] __d_alloc+0x32/0xae0 [ 896.439685][T19479] d_alloc_pseudo+0x1c/0xc0 [ 896.439713][T19479] alloc_file_pseudo+0xcf/0x230 [ 896.439738][T19479] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 896.439755][T19479] ? alloc_fd+0x471/0x7d0 [ 896.439776][T19479] sock_alloc_file+0x50/0x210 [ 896.439796][T19479] __sys_socket+0x1c0/0x260 [ 896.439810][T19479] ? __pfx___sys_socket+0x10/0x10 [ 896.439823][T19479] ? xfd_validate_state+0x61/0x180 [ 896.439843][T19479] ? __pfx_ksys_write+0x10/0x10 [ 896.439866][T19479] __x64_sys_socket+0x72/0xb0 [ 896.439878][T19479] ? lockdep_hardirqs_on+0x7c/0x110 [ 896.439894][T19479] do_syscall_64+0xcd/0x4b0 [ 896.439918][T19479] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 896.439945][T19479] RIP: 0033:0x7fe4d0d8eec9 [ 896.439967][T19479] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 896.439993][T19479] RSP: 002b:00007fe4ceff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 896.440017][T19479] RAX: ffffffffffffffda RBX: 00007fe4d0fe6090 RCX: 00007fe4d0d8eec9 [ 896.440036][T19479] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 896.440052][T19479] RBP: 00007fe4d0e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 896.440067][T19479] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 896.440082][T19479] R13: 00007fe4d0fe6128 R14: 00007fe4d0fe6090 R15: 00007ffeeef56598 [ 896.440116][T19479] [ 896.993040][T19486] netlink: 186 bytes leftover after parsing attributes in process `syz.8.2993'. [ 897.005804][T19486] netlink: 186 bytes leftover after parsing attributes in process `syz.8.2993'. [ 897.416770][T19493] netlink: 334 bytes leftover after parsing attributes in process `syz.7.2994'. [ 897.845476][T19504] RDS: rds_bind could not find a transport for ::ffff:100.1.1.0, load rds_tcp or rds_rdma? [ 899.593390][T19532] FAULT_INJECTION: forcing a failure. [ 899.593390][T19532] name fail_futex, interval 1, probability 0, space 0, times 0 [ 899.613370][T19532] CPU: 1 UID: 0 PID: 19532 Comm: syz.7.3004 Not tainted syzkaller #0 PREEMPT(full) [ 899.613406][T19532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 899.613421][T19532] Call Trace: [ 899.613431][T19532] [ 899.613441][T19532] dump_stack_lvl+0x16c/0x1f0 [ 899.613483][T19532] should_fail_ex+0x512/0x640 [ 899.613522][T19532] should_fail_futex+0x4c/0x60 [ 899.613555][T19532] __x64_sys_futex+0x25e/0x4c0 [ 899.613595][T19532] ? __pfx___x64_sys_futex+0x10/0x10 [ 899.613630][T19532] ? xfd_validate_state+0x61/0x180 [ 899.613679][T19532] do_syscall_64+0xcd/0x4b0 [ 899.613714][T19532] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 899.613741][T19532] RIP: 0033:0x7fe4d0d8eec9 [ 899.613761][T19532] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 899.613786][T19532] RSP: 002b:00007ffeeef566f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 899.613810][T19532] RAX: ffffffffffffffda RBX: 00000000000db9e6 RCX: 00007fe4d0d8eec9 [ 899.613828][T19532] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fe4d0fe5fac [ 899.613845][T19532] RBP: 0000000000000032 R08: 00007fe4d1b5b000 R09: 0000001deef569ef [ 899.613861][T19532] R10: 00007ffeeef567f0 R11: 0000000000000246 R12: 00007fe4d0fe5fac [ 899.613878][T19532] R13: 00007ffeeef567f0 R14: 00000000000dba18 R15: 00007ffeeef56810 [ 899.613913][T19532] [ 899.755251][ C1] vkms_vblank_simulate: vblank timer overrun [ 900.126303][T19549] RDS: rds_bind could not find a transport for ::ffff:100.1.1.0, load rds_tcp or rds_rdma? [ 901.681380][T19568] RDS: rds_bind could not find a transport for ::ffff:100.1.1.0, load rds_tcp or rds_rdma? [ 901.970048][T19581] netlink: 186 bytes leftover after parsing attributes in process `syz.7.3013'. [ 904.205431][T19622] __vm_enough_memory: pid: 19622, comm: syz.4.3024, bytes: 4398046511104 not enough memory for the allocation [ 904.384498][T19627] netlink: 138 bytes leftover after parsing attributes in process `syz.2.3026'. [ 905.402820][T19650] svc: failed to register nfsdv3 RPC service (errno 111). [ 905.450139][T19650] svc: failed to register nfsaclv3 RPC service (errno 111). [ 905.743581][T19652] svc: failed to register nfsdv3 RPC service (errno 111). [ 905.831879][T19652] svc: failed to register nfsaclv3 RPC service (errno 111). [ 906.479002][T19666] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3036'. [ 906.529615][T19668] synth uevent: /devices/platform/dummy_hcd.3/usb4/ep_00: unknown uevent action string [ 906.539434][T19668] ep_00: uevent: failed to send synthetic uevent: -22 [ 906.821335][T19666] team0: Port device team_slave_1 removed [ 906.991813][T19681] RDS: rds_bind could not find a transport for ::ffff:100.1.1.0, load rds_tcp or rds_rdma? [ 910.531732][T19743] RDS: rds_bind could not find a transport for ::ffff:100.1.1.0, load rds_tcp or rds_rdma? [ 910.671100][T19748] FAULT_INJECTION: forcing a failure. [ 910.671100][T19748] name failslab, interval 1, probability 0, space 0, times 0 [ 910.700703][T19748] CPU: 0 UID: 0 PID: 19748 Comm: syz.8.3057 Not tainted syzkaller #0 PREEMPT(full) [ 910.700741][T19748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 910.700758][T19748] Call Trace: [ 910.700768][T19748] [ 910.700780][T19748] dump_stack_lvl+0x16c/0x1f0 [ 910.700825][T19748] should_fail_ex+0x512/0x640 [ 910.700861][T19748] ? __kmalloc_noprof+0xbf/0x510 [ 910.700902][T19748] ? lsm_blob_alloc+0x68/0x90 [ 910.700932][T19748] should_failslab+0xc2/0x120 [ 910.700974][T19748] __kmalloc_noprof+0xd2/0x510 [ 910.701019][T19748] lsm_blob_alloc+0x68/0x90 [ 910.701051][T19748] security_prepare_creds+0x30/0x270 [ 910.701083][T19748] prepare_creds+0x56f/0x7d0 [ 910.701112][T19748] __sys_setreuid+0x101/0xaf0 [ 910.701144][T19748] ? rcu_is_watching+0x12/0xc0 [ 910.701178][T19748] do_syscall_64+0xcd/0x4b0 [ 910.701214][T19748] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 910.701242][T19748] RIP: 0033:0x7f68dc78eec9 [ 910.701263][T19748] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 910.701290][T19748] RSP: 002b:00007f68dd6d4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000071 [ 910.701316][T19748] RAX: ffffffffffffffda RBX: 00007f68dc9e5fa0 RCX: 00007f68dc78eec9 [ 910.701335][T19748] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffffffffffff [ 910.701352][T19748] RBP: 00007f68dc811f91 R08: 0000000000000000 R09: 0000000000000000 [ 910.701369][T19748] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 910.701386][T19748] R13: 00007f68dc9e6038 R14: 00007f68dc9e5fa0 R15: 00007fffaab68718 [ 910.701423][T19748] [ 910.868322][ C0] vkms_vblank_simulate: vblank timer overrun [ 913.437519][T19791] vhci_hcd: SetHubDepth req not supported for USB 2.0 roothub [ 914.382314][T19809] RDS: rds_bind could not find a transport for ::ffff:100.1.1.0, load rds_tcp or rds_rdma? [ 914.445144][T19805] __vm_enough_memory: pid: 19805, comm: syz.7.3072, bytes: 4398046511104 not enough memory for the allocation [ 915.596841][T19838] random: crng reseeded on system resumption [ 916.552590][T19853] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3082'. [ 917.057312][T19864] RDS: rds_bind could not find a transport for ::ffff:100.1.1.0, load rds_tcp or rds_rdma? [ 917.989202][T19878] FAULT_INJECTION: forcing a failure. [ 917.989202][T19878] name failslab, interval 1, probability 0, space 0, times 0 [ 918.003530][T19878] CPU: 1 UID: 0 PID: 19878 Comm: syz.7.3089 Not tainted syzkaller #0 PREEMPT(full) [ 918.003568][T19878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 918.003585][T19878] Call Trace: [ 918.003594][T19878] [ 918.003606][T19878] dump_stack_lvl+0x16c/0x1f0 [ 918.003646][T19878] should_fail_ex+0x512/0x640 [ 918.003680][T19878] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 918.003722][T19878] should_failslab+0xc2/0x120 [ 918.003770][T19878] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 918.003809][T19878] ? security_file_alloc+0x34/0x2b0 [ 918.003842][T19878] security_file_alloc+0x34/0x2b0 [ 918.003868][T19878] init_file+0x93/0x4c0 [ 918.003896][T19878] alloc_empty_file+0x73/0x1e0 [ 918.003925][T19878] alloc_file_pseudo+0x13a/0x230 [ 918.003956][T19878] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 918.003985][T19878] ? alloc_fd+0x471/0x7d0 [ 918.004025][T19878] sock_alloc_file+0x50/0x210 [ 918.004064][T19878] __sys_socket+0x1c0/0x260 [ 918.004091][T19878] ? __pfx___sys_socket+0x10/0x10 [ 918.004117][T19878] ? xfd_validate_state+0x61/0x180 [ 918.004156][T19878] ? __pfx_do_writev+0x10/0x10 [ 918.004197][T19878] __x64_sys_socket+0x72/0xb0 [ 918.004222][T19878] ? lockdep_hardirqs_on+0x7c/0x110 [ 918.004255][T19878] do_syscall_64+0xcd/0x4b0 [ 918.004291][T19878] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 918.004319][T19878] RIP: 0033:0x7fe4d0d90de7 [ 918.004341][T19878] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 918.004368][T19878] RSP: 002b:00007fe4d1b58fa8 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 918.004394][T19878] RAX: ffffffffffffffda RBX: 00007fe4d0fe5fa0 RCX: 00007fe4d0d90de7 [ 918.004412][T19878] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 918.004429][T19878] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 918.004446][T19878] R10: 0000200000001940 R11: 0000000000000286 R12: 0000000000000000 [ 918.004464][T19878] R13: 00007fe4d0fe6038 R14: 00007fe4d0fe5fa0 R15: 00007ffeeef56598 [ 918.004498][T19878] [ 918.026256][T19872] __vm_enough_memory: pid: 19872, comm: syz.2.3088, bytes: 4398046511104 not enough memory for the allocation [ 919.455966][T19906] FAULT_INJECTION: forcing a failure. [ 919.455966][T19906] name failslab, interval 1, probability 0, space 0, times 0 [ 919.468989][T19906] CPU: 1 UID: 0 PID: 19906 Comm: syz.7.3095 Not tainted syzkaller #0 PREEMPT(full) [ 919.469028][T19906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 919.469045][T19906] Call Trace: [ 919.469054][T19906] [ 919.469065][T19906] dump_stack_lvl+0x16c/0x1f0 [ 919.469106][T19906] should_fail_ex+0x512/0x640 [ 919.469139][T19906] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 919.469180][T19906] should_failslab+0xc2/0x120 [ 919.469221][T19906] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 919.469255][T19906] ? d_instantiate+0x77/0x90 [ 919.469289][T19906] ? alloc_empty_file+0x55/0x1e0 [ 919.469321][T19906] alloc_empty_file+0x55/0x1e0 [ 919.469349][T19906] alloc_file_pseudo+0x13a/0x230 [ 919.469380][T19906] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 919.469409][T19906] ? alloc_fd+0x471/0x7d0 [ 919.469458][T19906] sock_alloc_file+0x50/0x210 [ 919.469497][T19906] __sys_socket+0x1c0/0x260 [ 919.469524][T19906] ? __pfx___sys_socket+0x10/0x10 [ 919.469551][T19906] ? xfd_validate_state+0x61/0x180 [ 919.469588][T19906] ? __pfx_do_writev+0x10/0x10 [ 919.469629][T19906] __x64_sys_socket+0x72/0xb0 [ 919.469654][T19906] ? lockdep_hardirqs_on+0x7c/0x110 [ 919.469685][T19906] do_syscall_64+0xcd/0x4b0 [ 919.469721][T19906] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 919.469748][T19906] RIP: 0033:0x7fe4d0d90de7 [ 919.469770][T19906] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 919.469796][T19906] RSP: 002b:00007fe4d1b58fa8 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 919.469822][T19906] RAX: ffffffffffffffda RBX: 00007fe4d0fe5fa0 RCX: 00007fe4d0d90de7 [ 919.469841][T19906] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 919.469857][T19906] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 919.469873][T19906] R10: 0000200000001940 R11: 0000000000000286 R12: 0000000000000000 [ 919.469891][T19906] R13: 00007fe4d0fe6038 R14: 00007fe4d0fe5fa0 R15: 00007ffeeef56598 [ 919.469928][T19906] [ 919.828941][ C0] vkms_vblank_simulate: vblank timer overrun [ 920.534263][T19921] RDS: rds_bind could not find a transport for ::ffff:100.1.1.0, load rds_tcp or rds_rdma? [ 920.729786][T19928] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3099'. [ 923.842663][T19969] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3104'. [ 924.837681][T19982] FAULT_INJECTION: forcing a failure. [ 924.837681][T19982] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 924.865014][T19982] CPU: 1 UID: 0 PID: 19982 Comm: syz.2.3111 Not tainted syzkaller #0 PREEMPT(full) [ 924.865053][T19982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 924.865070][T19982] Call Trace: [ 924.865079][T19982] [ 924.865090][T19982] dump_stack_lvl+0x16c/0x1f0 [ 924.865129][T19982] should_fail_ex+0x512/0x640 [ 924.865169][T19982] _copy_from_user+0x2e/0xd0 [ 924.865205][T19982] copy_msghdr_from_user+0x98/0x160 [ 924.865237][T19982] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 924.865274][T19982] ? kfree+0x24f/0x4d0 [ 924.865307][T19982] ? trace_ignore_this_task+0xc3/0x100 [ 924.865339][T19982] ___sys_sendmsg+0xfe/0x1d0 [ 924.865372][T19982] ? __pfx____sys_sendmsg+0x10/0x10 [ 924.865433][T19982] ? __pfx___might_resched+0x10/0x10 [ 924.865470][T19982] __sys_sendmmsg+0x200/0x420 [ 924.865509][T19982] ? __pfx___sys_sendmmsg+0x10/0x10 [ 924.865553][T19982] ? __pfx_do_futex+0x10/0x10 [ 924.865604][T19982] ? __sys_socket+0xac/0x260 [ 924.865632][T19982] ? xfd_validate_state+0x61/0x180 [ 924.865679][T19982] __x64_sys_sendmmsg+0x9c/0x100 [ 924.865712][T19982] ? lockdep_hardirqs_on+0x7c/0x110 [ 924.865745][T19982] do_syscall_64+0xcd/0x4b0 [ 924.865781][T19982] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 924.865808][T19982] RIP: 0033:0x7f2ffb38eec9 [ 924.865830][T19982] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 924.865856][T19982] RSP: 002b:00007f2ffc20f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 924.865882][T19982] RAX: ffffffffffffffda RBX: 00007f2ffb5e5fa0 RCX: 00007f2ffb38eec9 [ 924.865901][T19982] RDX: 0000000000000400 RSI: 0000000000000000 RDI: 0000000000000004 [ 924.865917][T19982] RBP: 00007f2ffb411f91 R08: 0000000000000000 R09: 0000000000000000 [ 924.865934][T19982] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000000 [ 924.865960][T19982] R13: 00007f2ffb5e6038 R14: 00007f2ffb5e5fa0 R15: 00007fff91da7948 [ 924.866001][T19982] [ 925.972516][ T5846] Bluetooth: hci0: Malformed Event: 0x02 [ 926.629652][T20023] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3119'. [ 928.974591][T20063] input: jJǸ-9%v as /devices/virtual/input/input26 [ 931.483232][T20082] delete_channel: no stack [ 931.818188][ T5846] Bluetooth: hci2: Malformed Event: 0x02 [ 932.936793][T20115] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3140'. [ 934.449191][T20138] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3143'. [ 934.784649][ T5846] Bluetooth: hci4: unexpected event 0x02 length: 726 > 260 [ 935.577599][T20162] random: crng reseeded on system resumption [ 935.985825][T20163] RDS: rds_bind could not find a transport for ::ffff:100.1.1.0, load rds_tcp or rds_rdma? [ 937.017968][T20186] input: jJǸ-9%v as /devices/virtual/input/input27 [ 937.347642][T20186] usb usb37: usbfs: process 20186 (syz.4.3153) did not claim interface 0 before use [ 938.289248][T20210] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3158'. [ 939.060244][T20215] RDS: rds_bind could not find a transport for ::ffff:100.1.1.0, load rds_tcp or rds_rdma? [ 940.299122][T20235] RDS: rds_bind could not find a transport for ::ffff:100.1.1.0, load rds_tcp or rds_rdma? [ 941.754074][T20258] RDS: rds_bind could not find a transport for ::ffff:100.1.1.0, load rds_tcp or rds_rdma? [ 944.409184][T20308] random: crng reseeded on system resumption [ 944.756968][T20313] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3181'. [ 945.104749][T20321] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3184'. [ 945.680584][T20346] input: jJǸ-9%v as /devices/virtual/input/input28 [ 946.271369][T20346] usb usb37: usbfs: process 20346 (syz.7.3187) did not claim interface 0 before use [ 947.413140][T20369] RDS: rds_bind could not find a transport for ::ffff:100.1.1.0, load rds_tcp or rds_rdma? [ 948.670872][T20390] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3195'. [ 949.031799][T20401] netlink: 'syz.2.3197': attribute type 15 has an invalid length. [ 949.372348][T20408] random: crng reseeded on system resumption [ 952.202325][T20448] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3208'. [ 953.209709][T20459] RDS: rds_bind could not find a transport for ::ffff:100.1.1.0, load rds_tcp or rds_rdma? [ 954.771147][T20485] random: crng reseeded on system resumption [ 955.083259][T20498] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3221'. [ 956.094011][T20510] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3222'. [ 957.130047][T20524] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input29 [ 957.153233][T20525] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3223'. [ 957.783675][T20527] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input30 [ 959.353406][T20566] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3232'. [ 959.650751][T20573] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3233'. [ 963.776617][T20635] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3243'. [ 964.594153][T20651] random: crng reseeded on system resumption [ 965.922833][ C1] vcan0: j1939_tp_rxtimer: 0xffff888033050800: rx timeout, send abort [ 965.931667][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888033050800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 970.968572][ T5846] Bluetooth: hci2: unexpected event 0x3e length: 726 > 260 [ 970.968599][ T5846] Bluetooth: hci2: unexpected subevent 0x0d length: 725 > 260 [ 970.983369][ T5846] Bluetooth: hci2: Unknown advertising packet type: 0x7f [ 970.983421][ T5846] Bluetooth: hci2: Malformed LE Event: 0x0d [ 971.018996][T20739] QAT: Device 250 not found [ 971.193015][T20747] zero sized request [ 971.225326][T20747] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3271'. [ 971.738065][T20760] RDS: rds_bind could not find a transport for ::ffff:100.1.1.0, load rds_tcp or rds_rdma? [ 973.467418][T20789] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3280'. [ 974.517368][ T5846] Bluetooth: hci4: unexpected event 0x3e length: 726 > 260 [ 974.517407][ T5846] Bluetooth: hci4: unexpected subevent 0x0d length: 725 > 260 [ 974.532611][ T5846] Bluetooth: hci4: Unknown advertising packet type: 0x7f [ 974.532667][ T5846] Bluetooth: hci4: Malformed LE Event: 0x0d [ 974.585124][T20799] QAT: Device 250 not found [ 974.601166][T20799] ptrace attach of ""[20801] was attempted by "./syz-executor exec"[20799] [ 975.763463][T20812] RDS: rds_bind could not find a transport for ::ffff:100.1.1.0, load rds_tcp or rds_rdma? [ 976.168770][T20819] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3288'. [ 976.852176][T20826] usb usb37: usbfs: process 20826 (syz.8.3285) did not claim interface 0 before use [ 976.946039][T20826] usb usb37: usbfs: process 20826 (syz.8.3285) did not claim interface 0 before use [ 977.020065][T20826] usb usb37: usbfs: process 20826 (syz.8.3285) did not claim interface 0 before use [ 977.123321][T20826] usb usb37: usbfs: process 20826 (syz.8.3285) did not claim interface 0 before use [ 977.174067][T20826] usb usb37: usbfs: process 20826 (syz.8.3285) did not claim interface 0 before use [ 977.205981][T20826] usb usb37: usbfs: process 20826 (syz.8.3285) did not claim interface 0 before use [ 977.218099][T20826] usb usb37: usbfs: process 20826 (syz.8.3285) did not claim interface 0 before use [ 977.232231][T20826] usb usb37: usbfs: process 20826 (syz.8.3285) did not claim interface 0 before use [ 977.296395][T20832] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888000000000 pfn:0x78002 [ 977.327713][T20826] usb usb37: usbfs: process 20826 (syz.8.3285) did not claim interface 0 before use [ 977.403054][T20826] usb usb37: usbfs: process 20826 (syz.8.3285) did not claim interface 0 before use [ 977.435018][T20832] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 977.442869][T20826] usb usb37: usbfs: process 20826 (syz.8.3285) did not claim interface 0 before use [ 977.471404][T20832] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 977.494030][T20826] usb usb37: usbfs: process 20826 (syz.8.3285) did not claim interface 0 before use [ 977.513908][T20832] raw: ffff888000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 977.533263][T20826] usb usb37: usbfs: process 20826 (syz.8.3285) did not claim interface 0 before use [ 977.556779][T20832] page dumped because: unmovable page [ 977.592448][T20832] page_owner tracks the page as allocated [ 977.603742][T20832] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xcc0(GFP_KERNEL), pid 14723, tgid 14723 (syz-executor), ts 607075300521, free_ts 606487702588 [ 977.710426][T20832] post_alloc_hook+0x1c0/0x230 [ 977.761424][T20832] get_page_from_freelist+0x132b/0x38e0 [ 977.780707][T20832] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 977.821900][T20832] alloc_pages_bulk_noprof+0x71c/0x1410 [ 977.827818][T20832] kasan_populate_vmalloc+0x112/0x2d0 [ 977.844949][T20832] alloc_vmap_area+0x960/0x29c0 [ 977.854986][T20832] __get_vm_area_node+0x1ca/0x330 [ 977.860497][T20832] __vmalloc_node_range_noprof+0x271/0x14b0 [ 977.874674][T20832] vmalloc_user_noprof+0x9e/0xe0 [ 977.881256][T20832] kcov_ioctl+0x4c/0x730 [ 977.890802][T20832] __x64_sys_ioctl+0x18b/0x210 [ 977.896876][T20832] do_syscall_64+0xcd/0x4b0 [ 977.948578][T20832] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 977.958247][T20841] dlm: non-version read from control device 8 [ 977.985001][T20832] page last free pid 23 tgid 23 stack trace: [ 977.991224][T20832] __free_frozen_pages+0x7d5/0x10f0 [ 978.038032][T20832] rcu_core+0x799/0x1530 [ 978.043311][T20832] handle_softirqs+0x216/0x8e0 [ 978.048618][T20832] run_ksoftirqd+0x3a/0x60 [ 978.054691][T20832] smpboot_thread_fn+0x3f7/0xae0 [ 978.066700][T20832] kthread+0x3c5/0x780 [ 978.071052][T20832] ret_from_fork+0x56d/0x730 [ 978.077264][T20832] ret_from_fork_asm+0x1a/0x30 [ 978.165214][T20846] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3291'. [ 980.237305][T20872] RDS: rds_bind could not find a transport for ::ffff:100.1.1.0, load rds_tcp or rds_rdma? [ 980.920651][T20883] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888000000000 pfn:0x78002 [ 980.988957][T20883] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 981.005117][T20883] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 981.036543][T20883] raw: ffff888000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 981.083958][T20883] page dumped because: unmovable page [ 981.094956][T20883] page_owner tracks the page as allocated [ 981.175019][T20883] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xcc0(GFP_KERNEL), pid 14723, tgid 14723 (syz-executor), ts 607075300521, free_ts 606487702588 [ 981.202128][ T30] audit: type=1326 audit(4294967675.950:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20892 comm="syz.8.3304" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f68dc78eec9 code=0x0 [ 981.244013][T20883] post_alloc_hook+0x1c0/0x230 [ 981.273322][T20883] get_page_from_freelist+0x132b/0x38e0 [ 981.310030][T20883] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 981.316272][T20883] alloc_pages_bulk_noprof+0x71c/0x1410 [ 981.323581][T20883] kasan_populate_vmalloc+0x112/0x2d0 [ 981.329199][T20883] alloc_vmap_area+0x960/0x29c0 [ 981.336886][T20883] __get_vm_area_node+0x1ca/0x330 [ 981.342059][T20883] __vmalloc_node_range_noprof+0x271/0x14b0 [ 981.354945][T20883] vmalloc_user_noprof+0x9e/0xe0 [ 981.362104][T20883] kcov_ioctl+0x4c/0x730 [ 981.366613][T20883] __x64_sys_ioctl+0x18b/0x210 [ 981.371414][T20883] do_syscall_64+0xcd/0x4b0 [ 981.376019][T20883] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 981.382676][T20883] page last free pid 23 tgid 23 stack trace: [ 981.389116][T20883] __free_frozen_pages+0x7d5/0x10f0 [ 981.395009][T20883] rcu_core+0x799/0x1530 [ 981.399285][T20883] handle_softirqs+0x216/0x8e0 [ 981.404589][T20883] run_ksoftirqd+0x3a/0x60 [ 981.409203][T20883] smpboot_thread_fn+0x3f7/0xae0 [ 981.414198][T20883] kthread+0x3c5/0x780 [ 981.418385][T20883] ret_from_fork+0x56d/0x730 [ 981.423054][T20883] ret_from_fork_asm+0x1a/0x30 [ 983.676089][T20934] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3313'. [ 984.150466][T20942] RDS: rds_bind could not find a transport for ::ffff:100.1.1.0, load rds_tcp or rds_rdma? [ 984.921573][T20961] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3320'. [ 985.617904][T20975] netlink: 25 bytes leftover after parsing attributes in process `syz.7.3325'. [ 985.744465][T20979] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3324'. [ 987.221713][T21017] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3333'. [ 987.401055][T21023] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3334'. [ 987.414323][T21025] random: crng reseeded on system resumption [ 990.007666][T21077] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3346'. [ 990.839663][T21100] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3351'. [ 991.375247][T21106] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 992.320821][T21119] netlink: 354 bytes leftover after parsing attributes in process `syz.4.3357'. [ 992.506229][T21126] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3356'. [ 994.464613][T21155] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3366'. [ 994.568363][T21150] RDS: rds_bind could not find a transport for ::ffff:100.1.1.0, load rds_tcp or rds_rdma? [ 994.699123][T21162] synth uevent: /devices/platform/dummy_hcd.3/usb4/ep_00: unknown uevent action string [ 994.708945][T21162] ep_00: uevent: failed to send synthetic uevent: -22 [ 995.210082][ T5846] Bluetooth: hci4: unexpected event 0x3e length: 726 > 260 [ 995.210111][ T5846] Bluetooth: hci4: unexpected subevent 0x0d length: 725 > 260 [ 995.225098][ T5846] Bluetooth: hci4: Unknown advertising packet type: 0x7f [ 995.225126][ T5846] Bluetooth: hci4: adv larger than maximum supported [ 995.232462][ T5846] Bluetooth: hci4: Malformed LE Event: 0x0d [ 996.397323][T21187] RDS: rds_bind could not find a transport for ::ffff:100.1.1.0, load rds_tcp or rds_rdma? [ 996.952677][T21199] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3374'. [ 999.556141][T21237] FAULT_INJECTION: forcing a failure. [ 999.556141][T21237] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 999.595261][T21237] CPU: 1 UID: 0 PID: 21237 Comm: syz.8.3384 Not tainted syzkaller #0 PREEMPT(full) [ 999.595299][T21237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 999.595323][T21237] Call Trace: [ 999.595333][T21237] [ 999.595344][T21237] dump_stack_lvl+0x16c/0x1f0 [ 999.595385][T21237] should_fail_ex+0x512/0x640 [ 999.595424][T21237] should_fail_alloc_page+0xe7/0x130 [ 999.595468][T21237] prepare_alloc_pages+0x3c2/0x610 [ 999.595498][T21237] ? rcu_is_watching+0x12/0xc0 [ 999.595533][T21237] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 999.595579][T21237] ? __lock_acquire+0x62e/0x1ce0 [ 999.595619][T21237] ? css_rstat_updated+0x1c2/0x510 [ 999.595653][T21237] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 999.595698][T21237] ? rcu_is_watching+0x12/0xc0 [ 999.595738][T21237] ? __lock_acquire+0x62e/0x1ce0 [ 999.595782][T21237] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 999.595813][T21237] ? policy_nodemask+0xea/0x4e0 [ 999.595857][T21237] alloc_pages_mpol+0x1fb/0x550 [ 999.595898][T21237] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 999.595941][T21237] ? filemap_get_entry+0x1a7/0x3b0 [ 999.595986][T21237] folio_alloc_noprof+0x20/0x2d0 [ 999.596015][T21237] filemap_alloc_folio_noprof+0x3a1/0x470 [ 999.596051][T21237] ? __pfx_filemap_alloc_folio_noprof+0x10/0x10 [ 999.596094][T21237] __filemap_get_folio+0x5e1/0xc30 [ 999.596147][T21237] ioctx_alloc+0x761/0x2120 [ 999.596213][T21237] ? __pfx_ioctx_alloc+0x10/0x10 [ 999.596254][T21237] ? __x64_sys_io_setup+0x6b/0x210 [ 999.596295][T21237] __x64_sys_io_setup+0xc9/0x210 [ 999.596345][T21237] do_syscall_64+0xcd/0x4b0 [ 999.596385][T21237] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 999.596413][T21237] RIP: 0033:0x7f68dc78eec9 [ 999.596436][T21237] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 999.596465][T21237] RSP: 002b:00007f68dd6d4038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 999.596494][T21237] RAX: ffffffffffffffda RBX: 00007f68dc9e5fa0 RCX: 00007f68dc78eec9 [ 999.596513][T21237] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000007f1f [ 999.596531][T21237] RBP: 00007f68dc811f91 R08: 0000000000000000 R09: 0000000000000000 [ 999.596547][T21237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 999.596564][T21237] R13: 00007f68dc9e6038 R14: 00007f68dc9e5fa0 R15: 00007fffaab68718 [ 999.596602][T21237] [ 1001.849931][T21256] FAULT_INJECTION: forcing a failure. [ 1001.849931][T21256] name failslab, interval 1, probability 0, space 0, times 0 [ 1001.862666][T21256] CPU: 1 UID: 0 PID: 21256 Comm: syz.8.3388 Not tainted syzkaller #0 PREEMPT(full) [ 1001.862707][T21256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1001.862726][T21256] Call Trace: [ 1001.862736][T21256] [ 1001.862748][T21256] dump_stack_lvl+0x16c/0x1f0 [ 1001.862788][T21256] should_fail_ex+0x512/0x640 [ 1001.862823][T21256] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 1001.862863][T21256] should_failslab+0xc2/0x120 [ 1001.862905][T21256] __kmalloc_cache_noprof+0x6a/0x3e0 [ 1001.862941][T21256] ? percpu_ref_init+0xec/0x410 [ 1001.862972][T21256] ? __pfx_free_ioctx_users+0x10/0x10 [ 1001.863009][T21256] percpu_ref_init+0xec/0x410 [ 1001.863036][T21256] ? __init_waitqueue_head+0xca/0x150 [ 1001.863068][T21256] ioctx_alloc+0x2db/0x2120 [ 1001.863119][T21256] ? rcu_is_watching+0x12/0xc0 [ 1001.863150][T21256] ? irqentry_exit+0x3b/0x90 [ 1001.863192][T21256] ? __pfx_ioctx_alloc+0x10/0x10 [ 1001.863232][T21256] ? __x64_sys_io_setup+0x6b/0x210 [ 1001.863274][T21256] __x64_sys_io_setup+0xc9/0x210 [ 1001.863313][T21256] do_syscall_64+0xcd/0x4b0 [ 1001.863349][T21256] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1001.863377][T21256] RIP: 0033:0x7f68dc78eec9 [ 1001.863400][T21256] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1001.863427][T21256] RSP: 002b:00007f68dd6d4038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 1001.863453][T21256] RAX: ffffffffffffffda RBX: 00007f68dc9e5fa0 RCX: 00007f68dc78eec9 [ 1001.863472][T21256] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000007ffe [ 1001.863490][T21256] RBP: 00007f68dc811f91 R08: 0000000000000000 R09: 0000000000000000 [ 1001.863507][T21256] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1001.863525][T21256] R13: 00007f68dc9e6038 R14: 00007f68dc9e5fa0 R15: 00007fffaab68718 [ 1001.863562][T21256] [ 1002.381872][T21269] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input32 [ 1002.505444][T21273] Process accounting resumed [ 1003.106106][T21279] RDS: rds_bind could not find a transport for ::ffff:100.1.1.0, load rds_tcp or rds_rdma? [ 1005.088060][T21316] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3403'. [ 1005.703179][T21327] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3404'. [ 1008.588479][T21379] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input33 [ 1011.555384][T21415] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3424'. [ 1011.770642][T21424] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3425'. [ 1011.893613][T21428] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3426'. [ 1013.879277][T21454] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input34 [ 1014.428103][T21460] FAULT_INJECTION: forcing a failure. [ 1014.428103][T21460] name failslab, interval 1, probability 0, space 0, times 0 [ 1014.518974][T21460] CPU: 0 UID: 0 PID: 21460 Comm: syz.8.3430 Not tainted syzkaller #0 PREEMPT(full) [ 1014.519014][T21460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1014.519031][T21460] Call Trace: [ 1014.519041][T21460] [ 1014.519052][T21460] dump_stack_lvl+0x16c/0x1f0 [ 1014.519091][T21460] should_fail_ex+0x512/0x640 [ 1014.519127][T21460] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 1014.519166][T21460] should_failslab+0xc2/0x120 [ 1014.519205][T21460] __kmalloc_cache_noprof+0x6a/0x3e0 [ 1014.519237][T21460] ? nl80211_dump_station+0x26f/0xa80 [ 1014.519273][T21460] nl80211_dump_station+0x26f/0xa80 [ 1014.519316][T21460] ? __pfx_nl80211_dump_station+0x10/0x10 [ 1014.519398][T21460] ? __alloc_skb+0x200/0x380 [ 1014.519442][T21460] genl_dumpit+0x122/0x230 [ 1014.519483][T21460] netlink_dump+0x539/0xd30 [ 1014.519520][T21460] ? __pfx_netlink_dump+0x10/0x10 [ 1014.519566][T21460] ? __asan_memset+0x23/0x50 [ 1014.519596][T21460] ? genl_start+0x67f/0x980 [ 1014.519636][T21460] __netlink_dump_start+0x6d6/0x990 [ 1014.519676][T21460] genl_family_rcv_msg_dumpit+0x1e2/0x2e0 [ 1014.519719][T21460] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 1014.519755][T21460] ? genl_op_from_small+0x25/0x440 [ 1014.519799][T21460] ? __pfx_genl_get_cmd+0x10/0x10 [ 1014.519831][T21460] ? __pfx_genl_start+0x10/0x10 [ 1014.519865][T21460] ? __pfx_genl_dumpit+0x10/0x10 [ 1014.519900][T21460] ? __pfx_genl_done+0x10/0x10 [ 1014.519942][T21460] ? __radix_tree_lookup+0x21f/0x2c0 [ 1014.519992][T21460] genl_rcv_msg+0x46e/0x800 [ 1014.520037][T21460] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1014.520074][T21460] ? __pfx_nl80211_dump_station+0x10/0x10 [ 1014.520117][T21460] netlink_rcv_skb+0x158/0x420 [ 1014.520154][T21460] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1014.520190][T21460] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1014.520233][T21460] ? netlink_deliver_tap+0x1ae/0xd30 [ 1014.520272][T21460] genl_rcv+0x28/0x40 [ 1014.520304][T21460] netlink_unicast+0x5a7/0x870 [ 1014.520344][T21460] ? __pfx_netlink_unicast+0x10/0x10 [ 1014.520380][T21460] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 1014.520410][T21460] ? __lock_acquire+0xb97/0x1ce0 [ 1014.520457][T21460] netlink_sendmsg+0x8d1/0xdd0 [ 1014.520496][T21460] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1014.520531][T21460] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 1014.520569][T21460] ____sys_sendmsg+0xa95/0xc70 [ 1014.520608][T21460] ? copy_msghdr_from_user+0x10a/0x160 [ 1014.520641][T21460] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1014.520697][T21460] ___sys_sendmsg+0x134/0x1d0 [ 1014.520733][T21460] ? __pfx____sys_sendmsg+0x10/0x10 [ 1014.520809][T21460] __sys_sendmsg+0x16d/0x220 [ 1014.520843][T21460] ? __pfx___sys_sendmsg+0x10/0x10 [ 1014.520877][T21460] ? __x64_sys_futex+0x1e0/0x4c0 [ 1014.520935][T21460] do_syscall_64+0xcd/0x4b0 [ 1014.520980][T21460] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1014.521009][T21460] RIP: 0033:0x7f68dc78eec9 [ 1014.521033][T21460] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1014.521059][T21460] RSP: 002b:00007f68dd6d4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1014.521085][T21460] RAX: ffffffffffffffda RBX: 00007f68dc9e5fa0 RCX: 00007f68dc78eec9 [ 1014.521103][T21460] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005 [ 1014.521120][T21460] RBP: 00007f68dc811f91 R08: 0000000000000000 R09: 0000000000000000 [ 1014.521135][T21460] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1014.521152][T21460] R13: 00007f68dc9e6038 R14: 00007f68dc9e5fa0 R15: 00007fffaab68718 [ 1014.521185][T21460] [ 1014.871690][ C0] vkms_vblank_simulate: vblank timer overrun [ 1016.228035][T21502] netlink: 338 bytes leftover after parsing attributes in process `syz.2.3436'. [ 1016.328027][T21502] netlink: 338 bytes leftover after parsing attributes in process `syz.2.3436'. [ 1016.340236][T21502] netlink: 290 bytes leftover after parsing attributes in process `syz.2.3436'. [ 1016.350799][T21502] veth0_macvtap: left promiscuous mode [ 1017.250478][T21520] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3438'. [ 1020.273603][T21547] RDS: rds_bind could not find a transport for ::ffff:100.1.1.0, load rds_tcp or rds_rdma? [ 1020.372560][T21561] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3449'. [ 1021.000542][T21570] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3450'. [ 1021.974417][T21578] nvme_fabrics: missing parameter 'transport=%s' [ 1022.065610][T21578] nvme_fabrics: missing parameter 'nqn=%s' [ 1022.212171][T21582] nvme_fabrics: unknown parameter or missing value '}&:' in ctrl creation request [ 1024.134321][T21615] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3459'. [ 1024.274281][T21613] RDS: rds_bind could not find a transport for ::ffff:100.1.1.0, load rds_tcp or rds_rdma? [ 1024.609640][T21625] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3462'. [ 1025.385641][T21632] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3463'. [ 1025.692508][T21638] mkiss: ax0: crc mode is auto. [ 1025.723800][T21638] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3465'. [ 1026.045485][T21650] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input35 [ 1026.132862][T21656] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3467'. [ 1028.134145][T21677] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3471'. [ 1030.022379][T21709] Invalid ELF header magic: != ELF [ 1030.212973][T21718] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3480'. [ 1033.020188][T21763] RDS: rds_bind could not find a transport for ::ffff:100.1.1.0, load rds_tcp or rds_rdma? [ 1033.103681][T21769] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3492'. [ 1034.152516][T21779] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3494'. [ 1034.292134][T21784] netlink: 93 bytes leftover after parsing attributes in process `syz.7.3496'. [ 1034.334514][T21788] ima: policy update failed [ 1034.347132][ T30] audit: type=1802 audit(4294967729.100:19): pid=21788 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.4.3497" res=0 errno=0 [ 1035.805962][T21823] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3504'. [ 1036.058217][T21830] random: crng reseeded on system resumption [ 1036.210689][T21832] netlink: 'syz.8.3505': attribute type 1 has an invalid length. [ 1036.903163][T21850] random: crng reseeded on system resumption [ 1038.093482][T21876] FAULT_INJECTION: forcing a failure. [ 1038.093482][T21876] name failslab, interval 1, probability 0, space 0, times 0 [ 1038.121048][T21873] can: request_module (can-proto-0) failed. [ 1038.141640][T21876] CPU: 0 UID: 0 PID: 21876 Comm: syz.4.3515 Not tainted syzkaller #0 PREEMPT(full) [ 1038.141677][T21876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1038.141693][T21876] Call Trace: [ 1038.141702][T21876] [ 1038.141712][T21876] dump_stack_lvl+0x16c/0x1f0 [ 1038.141749][T21876] should_fail_ex+0x512/0x640 [ 1038.141777][T21876] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 1038.141819][T21876] should_failslab+0xc2/0x120 [ 1038.141854][T21876] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1038.141891][T21876] ? vma_merge_new_range+0x3ae/0xa50 [ 1038.141922][T21876] ? vm_area_alloc+0x1f/0x160 [ 1038.141960][T21876] vm_area_alloc+0x1f/0x160 [ 1038.141991][T21876] __mmap_region+0xf90/0x27b0 [ 1038.142031][T21876] ? finish_task_switch.isra.0+0x21c/0xc10 [ 1038.142064][T21876] ? __pfx___mmap_region+0x10/0x10 [ 1038.142100][T21876] ? rcu_is_watching+0x12/0xc0 [ 1038.142137][T21876] ? rcu_is_watching+0x12/0xc0 [ 1038.142167][T21876] ? trace_sched_exit_tp+0xd1/0x120 [ 1038.142198][T21876] ? __schedule+0x11a3/0x5de0 [ 1038.142236][T21876] ? __lock_acquire+0x62e/0x1ce0 [ 1038.142296][T21876] ? __pfx___schedule+0x10/0x10 [ 1038.142375][T21876] ? trace_cap_capable+0x18d/0x200 [ 1038.142424][T21876] mmap_region+0x1ab/0x3f0 [ 1038.142460][T21876] ? __get_unmapped_area+0x267/0x440 [ 1038.142492][T21876] do_mmap+0xa3e/0x1210 [ 1038.142526][T21876] ? __pfx_do_mmap+0x10/0x10 [ 1038.142553][T21876] ? __pfx_down_write_killable+0x10/0x10 [ 1038.142598][T21876] vm_mmap_pgoff+0x29e/0x470 [ 1038.142633][T21876] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1038.142669][T21876] ? __x64_sys_futex+0x1e0/0x4c0 [ 1038.142703][T21876] ? __x64_sys_futex+0x1e9/0x4c0 [ 1038.142744][T21876] ksys_mmap_pgoff+0x7d/0x5c0 [ 1038.142769][T21876] ? xfd_validate_state+0x61/0x180 [ 1038.142814][T21876] __x64_sys_mmap+0x125/0x190 [ 1038.142847][T21876] do_syscall_64+0xcd/0x4b0 [ 1038.142885][T21876] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1038.142915][T21876] RIP: 0033:0x7fb8d338eec9 [ 1038.142935][T21876] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1038.142962][T21876] RSP: 002b:00007fb8d4191038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1038.142989][T21876] RAX: ffffffffffffffda RBX: 00007fb8d35e5fa0 RCX: 00007fb8d338eec9 [ 1038.143006][T21876] RDX: 00004000000000df RSI: 0000000000020009 RDI: 0000000000000000 [ 1038.143021][T21876] RBP: 00007fb8d3411f91 R08: 0000000000000401 R09: 0000000000008000 [ 1038.143038][T21876] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 1038.143053][T21876] R13: 00007fb8d35e6038 R14: 00007fb8d35e5fa0 R15: 00007ffe49b0c448 [ 1038.143088][T21876] [ 1038.881152][T21885] random: crng reseeded on system resumption [ 1039.167874][T21889] bond0: Unable to set peer notification delay as MII monitoring is disabled [ 1040.001049][T21911] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3522'. [ 1040.208612][T21914] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3523'. [ 1041.184383][T21925] can: request_module (can-proto-0) failed. [ 1041.805315][T21943] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3528'. [ 1044.578399][T21989] serio: Serial port pty6 [ 1045.203639][T22001] RDS: rds_bind could not find a transport for ::ffff:100.1.1.0, load rds_tcp or rds_rdma? [ 1047.260427][T22035] netlink: 186 bytes leftover after parsing attributes in process `syz.4.3552'. [ 1047.884327][T22050] random: crng reseeded on system resumption [ 1048.167545][T22054] RDS: rds_bind could not find a transport for ::ffff:100.1.1.0, load rds_tcp or rds_rdma? [ 1048.880226][T22065] random: crng reseeded on system resumption [ 1049.932439][T22085] RDS: rds_bind could not find a transport for ::ffff:100.1.1.0, load rds_tcp or rds_rdma? [ 1050.129068][T22090] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3561'. [ 1051.117111][T22108] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3566'. [ 1051.947987][T22117] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3564'. [ 1053.317822][T22136] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3570'. [ 1053.432906][T22138] random: crng reseeded on system resumption [ 1053.927327][T22142] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz.2.3571: bg 2: bad block bitmap checksum [ 1053.951975][T22142] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 918 with max blocks 10 with error 74 [ 1053.989155][T22142] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1053.989155][T22142] [ 1054.092597][T22149] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3572'. [ 1055.393082][T22164] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3575'. [ 1055.987628][T22172] RDS: rds_bind could not find a transport for ::ffff:100.1.1.0, load rds_tcp or rds_rdma? [ 1057.951252][T22206] RDS: rds_bind could not find a transport for ::ffff:100.1.1.0, load rds_tcp or rds_rdma? [ 1058.060581][T22208] RDS: rds_bind could not find a transport for ::ffff:100.1.1.0, load rds_tcp or rds_rdma? [ 1059.154521][T22205] Invalid ELF header magic: != ELF [ 1059.348866][T22228] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3588'. [ 1060.459026][T22241] RDS: rds_bind could not find a transport for ::ffff:100.1.1.0, load rds_tcp or rds_rdma? [ 1061.706593][T22260] random: crng reseeded on system resumption [ 1062.607940][T22271] RDS: rds_bind could not find a transport for ::ffff:100.1.1.0, load rds_tcp or rds_rdma? [ 1064.157055][T22305] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3604'. [ 1064.192784][T22281] Invalid ELF header magic: != ELF [ 1065.013079][ T30] audit: type=1326 audit(4294967759.760:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22318 comm="syz.2.3609" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2ffb38eec9 code=0x0 [ 1065.034746][ C0] vkms_vblank_simulate: vblank timer overrun [ 1066.176257][T22338] RDS: rds_bind could not find a transport for ::ffff:100.1.1.0, load rds_tcp or rds_rdma? [ 1066.737089][T22349] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3615'. [ 1067.549546][T22367] [ 1068.799897][T22384] sg_write: data in/out 3292/1 bytes for SCSI command 0xa3-- guessing data in; [ 1068.799897][T22384] program syz.8.3624 not setting count and/or reply_len properly [ 1070.771463][T22407] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3629'. [ 1071.407452][T22410] FAULT_INJECTION: forcing a failure. [ 1071.407452][T22410] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1071.422345][T22410] CPU: 1 UID: 0 PID: 22410 Comm: syz.4.3622 Not tainted syzkaller #0 PREEMPT(full) [ 1071.422378][T22410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1071.422393][T22410] Call Trace: [ 1071.422402][T22410] [ 1071.422411][T22410] dump_stack_lvl+0x16c/0x1f0 [ 1071.422452][T22410] should_fail_ex+0x512/0x640 [ 1071.422492][T22410] should_fail_alloc_page+0xe7/0x130 [ 1071.422536][T22410] prepare_alloc_pages+0x3c2/0x610 [ 1071.422571][T22410] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 1071.422605][T22410] ? finish_task_switch.isra.0+0x21c/0xc10 [ 1071.422635][T22410] ? rcu_is_watching+0x12/0xc0 [ 1071.422663][T22410] ? finish_task_switch.isra.0+0x221/0xc10 [ 1071.422690][T22410] ? lockdep_hardirqs_on+0x7c/0x110 [ 1071.422720][T22410] ? finish_task_switch.isra.0+0x221/0xc10 [ 1071.422751][T22410] ? rcu_is_watching+0x12/0xc0 [ 1071.422781][T22410] ? trace_sched_exit_tp+0xd1/0x120 [ 1071.422806][T22410] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1071.422859][T22410] ? __lock_acquire+0x62e/0x1ce0 [ 1071.422901][T22410] ? __pfx___schedule+0x10/0x10 [ 1071.422928][T22410] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1071.422958][T22410] ? policy_nodemask+0xea/0x4e0 [ 1071.423001][T22410] alloc_pages_mpol+0x1fb/0x550 [ 1071.423054][T22410] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1071.423099][T22410] ? __lock_acquire+0x62e/0x1ce0 [ 1071.423140][T22410] folio_alloc_mpol_noprof+0x36/0x2f0 [ 1071.423172][T22410] vma_alloc_folio_noprof+0xed/0x1e0 [ 1071.423201][T22410] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 1071.423241][T22410] do_pte_missing+0x2230/0x3ba0 [ 1071.423274][T22410] ? find_held_lock+0x2b/0x80 [ 1071.423313][T22410] __handle_mm_fault+0x152a/0x2a50 [ 1071.423357][T22410] ? __pfx___handle_mm_fault+0x10/0x10 [ 1071.423396][T22410] ? lock_vma_under_rcu+0x1eb/0x530 [ 1071.423440][T22410] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 1071.423483][T22410] handle_mm_fault+0x589/0xd10 [ 1071.423518][T22410] ? __pkru_allows_pkey+0x31/0xb0 [ 1071.423547][T22410] do_user_addr_fault+0x60c/0x1370 [ 1071.423580][T22410] ? rcu_is_watching+0x12/0xc0 [ 1071.423614][T22410] exc_page_fault+0x5c/0xb0 [ 1071.423646][T22410] asm_exc_page_fault+0x26/0x30 [ 1071.423672][T22410] RIP: 0033:0x7fb8d325a75b [ 1071.423696][T22410] Code: 00 00 00 48 8d 3d dd 39 19 00 48 89 c1 31 c0 e8 fb 3a ff ff eb d2 66 0f 1f 84 00 00 00 00 00 55 31 c0 53 48 81 ec 68 10 00 00 <48> 89 7c 24 08 48 8d 3d 11 3a 19 00 48 89 34 24 48 8b 14 24 48 8b [ 1071.423722][T22410] RSP: 002b:00007fb8d414dfb0 EFLAGS: 00010202 [ 1071.423745][T22410] RAX: 0000000000000000 RBX: 00007fb8d35e6180 RCX: 0000000000000000 [ 1071.423762][T22410] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000000 [ 1071.423780][T22410] RBP: 00007fb8d3411f91 R08: 0000000000000000 R09: 0000000000000000 [ 1071.423798][T22410] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1071.423814][T22410] R13: 00007fb8d35e6218 R14: 00007fb8d35e6180 R15: 00007ffe49b0c448 [ 1071.423852][T22410] [ 1071.424146][T22410] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 1071.877427][T22413] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3628'. [ 1073.291497][T22431] netlink: 342 bytes leftover after parsing attributes in process `syz.7.3633'. [ 1073.336897][T22429] RDS: rds_bind could not find a transport for ::ffff:100.1.1.0, load rds_tcp or rds_rdma? [ 1073.687670][T22436] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3635'. [ 1073.757835][T22439] delete_channel: no stack [ 1074.139129][T22434] RDS: rds_bind could not find a transport for ::ffff:100.1.1.0, load rds_tcp or rds_rdma? [ 1074.890537][T22451] netlink: 206 bytes leftover after parsing attributes in process `syz.2.3640'. [ 1075.845407][T22466] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3643'. [ 1076.408418][T22469] netlink: 342 bytes leftover after parsing attributes in process `syz.8.3644'. [ 1076.999798][T22479] RDS: rds_bind could not find a transport for ::ffff:100.1.1.0, load rds_tcp or rds_rdma? [ 1077.057544][T22481] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3648'. [ 1078.688584][T22506] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3652'. [ 1080.106305][T22519] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:104: comm syz-executor: Corrupt inode bitmap - block_group = 1, inode_bitmap = 138 [ 1080.378307][T22522] RDS: rds_bind could not find a transport for ::ffff:100.1.1.0, load rds_tcp or rds_rdma? [ 1080.498152][T22520] input: f as /devices/virtual/input/input36 [ 1080.708545][ T5159] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1080.719137][ T5159] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1080.735867][ T5159] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1080.766332][ T5159] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1080.790842][ T5159] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1081.361430][T22525] chnl_net:caif_netlink_parms(): no params data found [ 1081.567496][T20933] ------------[ cut here ]------------ [ 1081.573041][T20933] ODEBUG: free active (active state 0) object: ffff88807c995360 object type: timer_list hint: hci_devcd_timeout+0x0/0x2e0 [ 1081.844617][T20933] WARNING: CPU: 1 PID: 20933 at lib/debugobjects.c:612 debug_print_object+0x1a2/0x2b0 [ 1081.854545][T20933] Modules linked in: [ 1081.858556][T20933] CPU: 1 UID: 0 PID: 20933 Comm: syz.4.3310 Not tainted syzkaller #0 PREEMPT(full) [ 1081.868872][T20933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1081.879021][T20933] RIP: 0010:debug_print_object+0x1a2/0x2b0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1081.885136][T20933] Code: fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 54 41 56 48 8b 14 dd 20 13 d0 8b 4c 89 e6 48 c7 c7 a0 07 d0 8b e8 2f 37 d6 fc 90 <0f> 0b 90 90 58 83 05 a6 8c bc 0b 01 48 83 c4 18 5b 5d 41 5c 41 5d [ 1081.904784][ C1] vkms_vblank_simulate: vblank timer overrun [ 1081.911577][T20933] RSP: 0018:ffffc9000bd0f758 EFLAGS: 00010282 [ 1081.918292][T20933] RAX: 0000000000000000 RBX: 0000000000000003 RCX: ffffffff81796158 [ 1081.926381][T20933] RDX: ffff888033a21e40 RSI: ffffffff81796165 RDI: 0000000000000001 [ 1081.934373][T20933] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 1081.942421][T20933] R10: 0000000000000001 R11: fffffffffffdcb00 R12: ffffffff8bd00e40 [ 1081.950585][T20933] R13: ffffffff8b6ff8c0 R14: ffffffff8a567f50 R15: ffffc9000bd0f858 [ 1081.958655][T20933] FS: 0000000000000000(0000) GS:ffff888124f7e000(0000) knlGS:0000000000000000 [ 1081.967644][T20933] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1081.974927][T20933] CR2: 00007f2ffc20ef98 CR3: 000000006aac6000 CR4: 00000000003526f0 [ 1081.983026][T20933] Call Trace: [ 1081.986383][T20933] [ 1081.989577][T20933] ? __pfx_hci_devcd_timeout+0x10/0x10 [ 1081.995455][T20933] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1082.001403][T20933] debug_check_no_obj_freed+0x4b7/0x600 [ 1082.007373][T20933] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 1082.013821][T20933] ? rcu_is_watching+0x12/0xc0 [ 1082.018938][T20933] ? kmem_cache_free+0x2d1/0x4d0 [ 1082.023956][T20933] kfree+0x28f/0x4d0 [ 1082.027937][T20933] ? hci_release_dev+0x4ef/0x610 [ 1082.032902][T20933] hci_release_dev+0x4ef/0x610 [ 1082.037758][T20933] ? __pfx_hci_release_dev+0x10/0x10 [ 1082.043058][T20933] ? rcu_is_watching+0x12/0xc0 [ 1082.047918][T20933] ? kfree+0x24f/0x4d0 [ 1082.051998][T20933] bt_host_release+0x6a/0xb0 [ 1082.056750][T20933] ? __pfx_bt_host_release+0x10/0x10 [ 1082.062064][T20933] device_release+0xa1/0x240 [ 1082.066689][T20933] kobject_put+0x1e7/0x5a0 [ 1082.071124][T20933] put_device+0x1f/0x30 [ 1082.075341][T20933] vhci_release+0x185/0x230 [ 1082.079840][T20933] ? __pfx_vhci_release+0x10/0x10 [ 1082.084911][T20933] __fput+0x3ff/0xb70 [ 1082.088949][T20933] task_work_run+0x14d/0x240 [ 1082.094084][T20933] ? __pfx_task_work_run+0x10/0x10 [ 1082.099531][T20933] do_exit+0x86f/0x2bf0 [ 1082.103766][T20933] ? __pfx_do_exit+0x10/0x10 [ 1082.108506][T20933] ? do_raw_spin_lock+0x12c/0x2b0 [ 1082.113706][T20933] ? find_held_lock+0x2b/0x80 [ 1082.118549][T20933] do_group_exit+0xd3/0x2a0 [ 1082.123185][T20933] get_signal+0x2671/0x26d0 [ 1082.127738][T20933] ? __pfx_get_signal+0x10/0x10 [ 1082.133688][T20933] ? do_futex+0x122/0x350 [ 1082.138131][T20933] ? __pfx_do_futex+0x10/0x10 [ 1082.142913][T20933] arch_do_signal_or_restart+0x8f/0x790 [ 1082.148485][T20933] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1082.154656][T20933] ? xfd_validate_state+0x61/0x180 [ 1082.159790][T20933] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1082.165549][T20933] exit_to_user_mode_loop+0x7a/0x100 [ 1082.170954][T20933] do_syscall_64+0x419/0x4b0 [ 1082.175729][T20933] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1082.181643][T20933] RIP: 0033:0x7fb8d338eec9 [ 1082.186169][T20933] Code: Unable to access opcode bytes at 0x7fb8d338ee9f. [ 1082.193284][T20933] RSP: 002b:00007fb8d41700e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1082.202029][T20933] RAX: fffffffffffffe00 RBX: 00007fb8d35e6098 RCX: 00007fb8d338eec9 [ 1082.210374][T20933] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fb8d35e6098 [ 1082.219548][T20933] RBP: 00007fb8d35e6090 R08: 0000000000000000 R09: 0000000000000000 [ 1082.227908][T20933] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1082.236092][T20933] R13: 00007fb8d35e6128 R14: 00007ffe49b0c360 R15: 00007ffe49b0c448 [ 1082.244220][T20933] [ 1082.247325][T20933] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1082.254707][T20933] CPU: 1 UID: 0 PID: 20933 Comm: syz.4.3310 Not tainted syzkaller #0 PREEMPT(full) [ 1082.264103][T20933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1082.274193][T20933] Call Trace: [ 1082.277492][T20933] [ 1082.280527][T20933] dump_stack_lvl+0x3d/0x1f0 [ 1082.285151][T20933] vpanic+0x6e8/0x7a0 [ 1082.289166][T20933] ? __pfx_vpanic+0x10/0x10 [ 1082.293711][T20933] ? debug_print_object+0x1a2/0x2b0 [ 1082.298992][T20933] panic+0xca/0xd0 [ 1082.302848][T20933] ? __pfx_panic+0x10/0x10 [ 1082.307348][T20933] ? check_panic_on_warn+0x1f/0xb0 [ 1082.312494][T20933] check_panic_on_warn+0xab/0xb0 [ 1082.317487][T20933] __warn+0xf6/0x3c0 [ 1082.321752][T20933] ? debug_print_object+0x1a2/0x2b0 [ 1082.326977][T20933] report_bug+0x3c3/0x580 [ 1082.331305][T20933] ? debug_print_object+0x1a2/0x2b0 [ 1082.336525][T20933] handle_bug+0x184/0x210 [ 1082.340853][T20933] exc_invalid_op+0x17/0x50 [ 1082.345345][T20933] asm_exc_invalid_op+0x1a/0x20 [ 1082.350179][T20933] RIP: 0010:debug_print_object+0x1a2/0x2b0 [ 1082.356070][T20933] Code: fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 54 41 56 48 8b 14 dd 20 13 d0 8b 4c 89 e6 48 c7 c7 a0 07 d0 8b e8 2f 37 d6 fc 90 <0f> 0b 90 90 58 83 05 a6 8c bc 0b 01 48 83 c4 18 5b 5d 41 5c 41 5d [ 1082.375663][T20933] RSP: 0018:ffffc9000bd0f758 EFLAGS: 00010282 [ 1082.381716][T20933] RAX: 0000000000000000 RBX: 0000000000000003 RCX: ffffffff81796158 [ 1082.389681][T20933] RDX: ffff888033a21e40 RSI: ffffffff81796165 RDI: 0000000000000001 [ 1082.397649][T20933] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 1082.405609][T20933] R10: 0000000000000001 R11: fffffffffffdcb00 R12: ffffffff8bd00e40 [ 1082.413564][T20933] R13: ffffffff8b6ff8c0 R14: ffffffff8a567f50 R15: ffffc9000bd0f858 [ 1082.421558][T20933] ? __pfx_hci_devcd_timeout+0x10/0x10 [ 1082.427029][T20933] ? __warn_printk+0x198/0x350 [ 1082.431797][T20933] ? __warn_printk+0x1a5/0x350 [ 1082.436730][T20933] ? debug_print_object+0x1a1/0x2b0 [ 1082.441921][T20933] ? __pfx_hci_devcd_timeout+0x10/0x10 [ 1082.447388][T20933] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1082.453199][T20933] debug_check_no_obj_freed+0x4b7/0x600 [ 1082.459200][T20933] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 1082.465260][T20933] ? rcu_is_watching+0x12/0xc0 [ 1082.470035][T20933] ? kmem_cache_free+0x2d1/0x4d0 [ 1082.474980][T20933] kfree+0x28f/0x4d0 [ 1082.478958][T20933] ? hci_release_dev+0x4ef/0x610 [ 1082.483881][T20933] hci_release_dev+0x4ef/0x610 [ 1082.488805][T20933] ? __pfx_hci_release_dev+0x10/0x10 [ 1082.494248][T20933] ? rcu_is_watching+0x12/0xc0 [ 1082.499089][T20933] ? kfree+0x24f/0x4d0 [ 1082.503157][T20933] bt_host_release+0x6a/0xb0 [ 1082.507750][T20933] ? __pfx_bt_host_release+0x10/0x10 [ 1082.513024][T20933] device_release+0xa1/0x240 [ 1082.517605][T20933] kobject_put+0x1e7/0x5a0 [ 1082.522017][T20933] put_device+0x1f/0x30 [ 1082.526164][T20933] vhci_release+0x185/0x230 [ 1082.530662][T20933] ? __pfx_vhci_release+0x10/0x10 [ 1082.535673][T20933] __fput+0x3ff/0xb70 [ 1082.539661][T20933] task_work_run+0x14d/0x240 [ 1082.544237][T20933] ? __pfx_task_work_run+0x10/0x10 [ 1082.549343][T20933] do_exit+0x86f/0x2bf0 [ 1082.553493][T20933] ? __pfx_do_exit+0x10/0x10 [ 1082.558073][T20933] ? do_raw_spin_lock+0x12c/0x2b0 [ 1082.563085][T20933] ? find_held_lock+0x2b/0x80 [ 1082.567749][T20933] do_group_exit+0xd3/0x2a0 [ 1082.572370][T20933] get_signal+0x2671/0x26d0 [ 1082.576868][T20933] ? __pfx_get_signal+0x10/0x10 [ 1082.581704][T20933] ? do_futex+0x122/0x350 [ 1082.586134][T20933] ? __pfx_do_futex+0x10/0x10 [ 1082.590823][T20933] arch_do_signal_or_restart+0x8f/0x790 [ 1082.596362][T20933] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1082.602516][T20933] ? xfd_validate_state+0x61/0x180 [ 1082.607625][T20933] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1082.613445][T20933] exit_to_user_mode_loop+0x7a/0x100 [ 1082.618804][T20933] do_syscall_64+0x419/0x4b0 [ 1082.623391][T20933] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1082.629319][T20933] RIP: 0033:0x7fb8d338eec9 [ 1082.633731][T20933] Code: Unable to access opcode bytes at 0x7fb8d338ee9f. [ 1082.640740][T20933] RSP: 002b:00007fb8d41700e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1082.649164][T20933] RAX: fffffffffffffe00 RBX: 00007fb8d35e6098 RCX: 00007fb8d338eec9 [ 1082.657145][T20933] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fb8d35e6098 [ 1082.665376][T20933] RBP: 00007fb8d35e6090 R08: 0000000000000000 R09: 0000000000000000 [ 1082.673364][T20933] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1082.681323][T20933] R13: 00007fb8d35e6128 R14: 00007ffe49b0c360 R15: 00007ffe49b0c448 [ 1082.689302][T20933] [ 1082.692634][T20933] Kernel Offset: disabled [ 1082.696953][T20933] Rebooting in 86400 seconds..