last executing test programs: 5.481127643s ago: executing program 1 (id=1426): socket(0x11, 0x80003, 0x300) socket(0x11, 0x80003, 0x300) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000140)={0x0, 0x700, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x48003}, 0x0) 5.399516854s ago: executing program 1 (id=1427): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) socket(0x8, 0x1, 0x33) splice$auto(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xfffffffffffffffe, 0x5, 0x1) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB='&\x00', @ANYBLOB="5de1"], 0x1ac}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) read$auto(r1, &(0x7f0000000080)='MJC802154_HWSIM\x00\xcb\x0fX\xc7\xfdx!\xf7\xb5T\x04\xad\x96\xf4\xbc\xca\xa52UWT1\a\x00\x00\x00\x00\x00\x007\xc9\xa6\x8a', 0x1060) r2 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) ioctl$auto_UI_DEV_SETUP(r2, 0x405c5503, &(0x7f00000000c0)={{0x1009, 0xf2cf, 0x8, 0x80}, "6a034a07c7b82d90b69a39e32576f893fba86c9dd051a0094a3836d61c9100fefbbabea6ef9368c7996e841f3f1561d4992f726b0a6c36b0b2fd1678e816201cf562367fe6596824588a2e3d84ba165f", 0xa}) ioctl$auto_UI_DEV_CREATE(r2, 0x5501, 0x0) writev$auto(r0, &(0x7f00000001c0)={0x0, 0x7}, 0x800009) ioctl$auto_UI_SET_FFBIT(r2, 0x4004556b, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x4) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0x40000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x100000, 0x400008, 0xdf, 0x9b7e, r3, 0x8000) r4 = socket(0x10, 0x2, 0x0) recvmmsg$auto(r4, &(0x7f0000000140)={{0x0, 0x3, &(0x7f0000000100)={0x0, 0x801}, 0x5, 0x0, 0x2, 0x8}, 0x800}, 0x10a, 0x8, 0x0) openat$auto_fops_u16_(0xffffffffffffff9c, &(0x7f0000000600)='/sys/kernel/debug/netdevsim/netdevsim1/psample/out_tc\x00', 0x8800, 0x0) fcntl$auto_F_ADD_SEALS(0xffffffffffffffff, 0x410, 0x0) socket(0x10, 0x2, 0x4) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/lapb3/threaded\x00', 0x8a801, 0x0) 5.084553966s ago: executing program 1 (id=1429): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) socket(0x8, 0x1, 0x33) splice$auto(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xfffffffffffffffe, 0x5, 0x1) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB='&\x00', @ANYBLOB="5de1"], 0x1ac}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) read$auto(r1, &(0x7f0000000080)='MJC802154_HWSIM\x00\xcb\x0fX\xc7\xfdx!\xf7\xb5T\x04\xad\x96\xf4\xbc\xca\xa52UWT1\a\x00\x00\x00\x00\x00\x007\xc9\xa6\x8a', 0x1060) r2 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) ioctl$auto_UI_DEV_SETUP(r2, 0x405c5503, &(0x7f00000000c0)={{0x1009, 0xf2cf, 0x8, 0x80}, "6a034a07c7b82d90b69a39e32576f893fba86c9dd051a0094a3836d61c9100fefbbabea6ef9368c7996e841f3f1561d4992f726b0a6c36b0b2fd1678e816201cf562367fe6596824588a2e3d84ba165f", 0xa}) ioctl$auto_UI_DEV_CREATE(r2, 0x5501, 0x0) writev$auto(r0, &(0x7f00000001c0)={0x0, 0x7}, 0x800009) ioctl$auto_UI_SET_FFBIT(r2, 0x4004556b, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x4) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0x40000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x100000, 0x400008, 0xdf, 0x9b7e, r3, 0x8000) r4 = socket(0x10, 0x2, 0x0) recvmmsg$auto(r4, &(0x7f0000000140)={{0x0, 0x3, &(0x7f0000000100)={0x0, 0x801}, 0x5, 0x0, 0x2, 0x8}, 0x800}, 0x10a, 0x8, 0x0) openat$auto_fops_u16_(0xffffffffffffff9c, &(0x7f0000000600)='/sys/kernel/debug/netdevsim/netdevsim1/psample/out_tc\x00', 0x8800, 0x0) fcntl$auto_F_ADD_SEALS(0xffffffffffffffff, 0x410, 0x0) socket(0x10, 0x2, 0x4) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/lapb3/threaded\x00', 0x8a801, 0x0) 4.952341422s ago: executing program 2 (id=1431): r0 = openat$auto_proc_pid_set_timerslack_ns_operations_base(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) mmap$auto(0x8, 0x4, 0x8000000000000001, 0x16, r0, 0x80000000) r1 = prctl$auto_SECCOMP_MODE_STRICT(0x10001, 0x1, 0xffffffffffffffff, 0x100000001, 0x4) ioctl$auto_XFS_IOC_ERROR_INJECTION(r1, 0x40085874, &(0x7f0000000040)={r0, 0x3}) msgctl$auto_IPC_INFO(0xf45, 0x3, &(0x7f0000000100)={{0xef9, 0xee01, 0xffffffffffffffff, 0x7, 0x5bc1, 0x9, 0x3}, &(0x7f0000000080)=0x3, &(0x7f00000000c0), 0x590c, 0x0, 0x3, 0x8000, 0x1, 0xb, 0x9, 0x7, @inferred, @raw=0x5}) shmctl$auto(0x5, 0x0, &(0x7f00000002c0)={{0x4, 0xee01, 0x0, 0x40, 0x6, 0x0, 0x2ca0}, 0x2, 0x9, 0xfffffffffffffc01, 0x6, @inferred=0x0, @inferred=0x0, 0x1, 0x0, &(0x7f0000000180)="a2793afa3b2d0a20880b009638ad6c33d7fbe574c777404b475bc968281c99d09433b21bca1ec648991af78e6924a75ecf05e54327d47ade17b5985e4a696a9baf8e4e8f5ea4723265fd647807e5d20c8fbf987470beb05f1224f6af397b0ace6e7f759625af0b5ad1b77a2c41ec670ee22d14cb1e7720d5aecd28551c8ebb069e7f2f1a59e3ea16a6dbae29bb2a93de26a77a12750ace6db6b42ae9a62e8d788c4b96618a065faf32eb84e3b6d1d68f8fa6c70293ea85dade9ef9d981f2980869076c3d868245da451d03c70b6464c0a33c07d582b4fe4c505519d1", &(0x7f0000000280)="b2b5147f9fa7bac17bc50cb21c"}) fstat$auto(r2, &(0x7f0000000340)={0x6, 0x1, 0x8000000000000001, 0xa4a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xb, 0x8000000000000000, 0x4c15, 0x8, 0x7, 0x200, 0x80000001, 0xb130, 0xffffffff}) setresuid$auto(r3, r5, r8) r9 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000440), r1) sendmsg$auto_NL80211_CMD_START_AP(r2, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x80, r9, 0x8, 0x70bd2b, 0x25dfdbff, {}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x68, 0xac, "37e925593c61b9b7b43eb70cbbb012c97a5859cabc12e57233d8ff31ae07ef710d2e2376f626f81f5201e4d35d6586347ab5251c4193fcc2a35c2eac04acb46541032d1451ca4026fa47346c59caf13ce121ae014d4ea1923b6730fdfc99dd936215eaa1"}]}, 0x80}}, 0x20000000) shmctl$auto_IPC_SET(0x800, 0x1, &(0x7f0000000640)={{0x3, r8, r4, 0x5, 0xb141, 0x9, 0x5}, 0x4, 0x670d, 0x1, 0xed5, @raw=0x10000, @inferred=r7, 0x0, 0x0, &(0x7f0000000580)="a1c6ae057d50e845834869761f47361f00fe9b1e7f96bc7f435d91388ccedd629a28f98380b8caa9987956c10ba32321cabee3cdf744e17746c475882904bab2c748cacc6ec7b61c2d459ddfc73fd262eec9177a1b250a68e2127a3c7c756fe6a354d28250f7af9a7f43d13a6b48b34946d49c3d1742caeaf878bc68", &(0x7f0000000600)="955b5c11fe67711bd524025fff38f199b6f396b8d0bb0556bd250d5e8a7425282ac49ff00198de2bf3a6063208240f2e1c5207f0"}) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000006c0), 0x2000, 0x0) r10 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000740), r1) sendmsg$auto_NL80211_CMD_REMOVE_LINK_STA(r1, &(0x7f0000000fc0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000f80)={&(0x7f0000000780)={0x7e0, r10, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@NL80211_ATTR_IE_RIC={0x479, 0xb2, "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"}, @NL80211_ATTR_BSS_SELECT={0x337, 0xe3, 0x0, 0x1, [@generic="2a57b988d8f49735e2893b3b377a2c8de181ef541d5751c3501c2981954ace9137afaf4907a462f81df3c54764260f07046fcf8184e44a847b850973bfa4ecd2c8519b0f880fdac270233e539c28d95bc3d55bcd70abbc2588850d1b7e63a695fb956555320c9c67c16562467cca519893d29c9ae2803508a9cafddd37669dc623ba3e2e514f0aecc07c38a11bb0804951d93926ee2cdb7393810146c80fd752972faeb21d34", @typed={0x8, 0xf0, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @generic="519752cf90e02bfe7b3b2998874c2fecf36ff7e35bb0b512e80aade4be05d057606d6c1672fc29209684f38a08210c3180d8aef2f1f2fe5cc481d9cb1a5c6bd45ea5950e9f878149f587cf1355dd360ec54ec49b8c48713f3de2e36a0cdb812e2cd37b9c168b251b90e8b1d57507b202bacb8029916df0a09d559b1db9b45fdfb2cb8c2176490bace9", @typed={0x8, 0x7f, 0x0, 0x0, @uid=r5}, @nested={0x1f4, 0x116, 0x0, 0x1, [@generic="66c0c20fe36ce2123c8c3d6a52bae58e9a0abea0d0a69807c094bc43ca0ab40b5f628d94cc35a3bdb5401251a7c2a8b41168d151d7fddf2e48e5a7038f1d0944f5a3233b1af5079106c17501ea40c1b87a678d4be0539d23911984dfd3b8e99b28ac1a22acd28fd1d434f2d8f52b296c6d481273f7233dacf44d2919ebba2c9c604da5045a7d65ff6c7fac6a", @nested={0x4, 0x95}, @nested={0x4, 0x154}, @nested={0x4, 0xb0}, @typed={0x7, 0x157, 0x0, 0x0, @str='\xa1:\x00'}, @generic="355edb8e8f1c9c7d2eb6d4ec774ae2cbecabeee18e3266171fa5a56b88d243f708b86134136e59defd6705ce048ff086175572e7838fd9d573378b04147c6490f907c8bda5335fdc05f7351b73a88f41575ab1fe19c2ebd5450fb5b303825f5223c7dfad9d768f164028148f309068d54d38b9076c0e504f9b60828418d84fbc6d7ab158a204a4b318ae4c4392c903bf", @generic="8b02266b17a70e86a7831dddad091531ec31f62db4676009c19266258951884999b28c136244270017eae8a5e92e24786d8e852e741845c62dc01d61946e1432d0fc2e1a31c99fb7325938be921b1ed047e1f1918e09e4e7f3b6172844a616b1621b977c309d7648ebedf0fd3380f0541b3d95d9aae44a887dc1c0106e75f364ace6f08a0993a0b2fe0d0eced555f4ccfa120f0a150a1098a4c74c531dc22315cd087114eeec9cee8718fa17c0996d32a9f549de9d71ff7ffc44515f47fb05e2"]}]}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x8}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x4}, @NL80211_ATTR_ADMITTED_TIME={0x6}]}, 0x7e0}, 0x1, 0x0, 0x0, 0x80}, 0x8080) r11 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000001000)='/proc/irq/0/smp_affinity\x00', 0x4080, 0x0) r12 = openat$auto_ipsec_dbg_fops_ipsec(0xffffffffffffff9c, &(0x7f0000001040)='/sys/kernel/debug/netdevsim/netdevsim2/ports/1/ipsec\x00', 0x121400, 0x0) timerfd_gettime$auto(r12, &(0x7f0000001080)={{0x8000, 0x5}, {0x5}}) sendmsg$auto_NL80211_CMD_FLUSH_PMKSA(r2, &(0x7f0000001240)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001200)={&(0x7f0000001100)={0xd0, r10, 0x300, 0x70bd26, 0x25dfdbfb, {}, [@NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x6}, @NL80211_ATTR_REG_RULES={0xb4, 0x22, 0x0, 0x1, [@nested={0xb0, 0xd7, 0x0, 0x1, [@typed={0x8, 0xed, 0x0, 0x0, @ipv4=@private=0xa010102}, @nested={0x4, 0x1a}, @generic="f1d58f24cc73a2ca7c41f17c6596eae5b55ab1e53ffa56ad8b644822e280c785bed412a84bcd7538ad570205e294a6d6947267884f35904c09faa519ce7dec05aef09567ecad11a54205789798e0b4d1108eaee62e3f843c8676ae2ca09e0f72751681008f1dcbce6ea7f211fd95e3205be3972707f23bcc8a43813994e36c530d9b95b364a9e51f14f797a2dfff455e5d4cae3cdcf39a920145a589", @nested={0x4, 0x57}]}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) r13 = prctl$auto(0x695, 0x0, r6, 0x3ff, 0x8) fadvise64$auto_POSIX_FADV_NOREUSE(r1, 0x0, 0xff, 0x5) sendmsg$auto_NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001440)={&(0x7f00000012c0)={0x15c, r10, 0x2, 0x70bd2a, 0x25dfdbfd, {}, [@NL80211_ATTR_PMKR0_NAME={0x75, 0x102, "9f987855455662701ca1fb69eb523018feb66e17137458880a827b62f191e2d5434b160973ef2471b800c1ffa07cf6bda9490952ccb55a03c99e1800c2d51bdc73c49e70c6ec390b421b6b605f9e001d4bcab3f95259f89bc56a46b49e02800ebe27c146117aabb0ceb70e6f231e648062"}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x5}, @NL80211_ATTR_MAC_ADDRS={0xbf, 0xa6, 0x0, 0x1, [@typed={0xc, 0x7a, 0x0, 0x0, @u64=0x2}, @generic="58023956285466c6afd64cd1969fbeb4b02823345f39c6f3bc41b7ac4f1740ab1db8f3716a09ed7ecddc07b49d782e4fe680a355ddfd430aff40614badafbed44ddb09dc57f6e05e9849c82fb371030d8767f09c83db503845c09914344eb46ff5add4945244d994b5f2bdce3c921597240ddb958b65b185521e7f227b833ca61253f2ad58b681069e1cb18628dee8cf8f22937d7d293d4be06e9be1fee516d74f98c8", @typed={0xc, 0x117, 0x0, 0x0, @str='nl80211\x00'}]}, @NL80211_ATTR_HE_BSS_COLOR={0x8, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}]}, 0x15c}, 0x1, 0x0, 0x0, 0x8000}, 0x40004) mmap$auto(0x8, 0x100000000, 0x0, 0x17, r13, 0x6) r14 = syz_clone(0x801a0a00, &(0x7f00000014c0)="4a53be378621936e74d988db8b3ef3a95cc943a6190157d66a11f9fd5fc0144f9551694e4bdc198b44909112c0502b262c1f1ef052999856018ee6744b60356981eb7f6853e23ff42356f8515387693b17bf6716bf2863abdbea7f775720d93c5f0421637deea3ddc47e1964821984f71d820f38eb98aa2dcad6490063869cf0f1cc8b4b251859a3f1860016459cc764d2205153390f36ffce79647a54fe2225035039461ba83654b299a16aaa7f6d445546c4103b888b157f151d2fcb61e02c5217b5b6d061c5801a66db4512ef39bae02d356f0a52ab9ac260e6a9d6182ec240c93a0020b221bdecf2528dd953cbb90ab58b53", 0xf4, &(0x7f00000015c0), &(0x7f0000001600), &(0x7f0000001640)="a6e70d5014cff3275639d69658af") r15 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f00000016c0), r13) r16 = openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000001700), 0xc000, 0x0) r17 = set_tid_address$auto(&(0x7f0000001740)=0x24) sendmsg$auto_TIPC_NL_BEARER_DISABLE(r1, &(0x7f0000002f80)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0xa000}, 0xc, &(0x7f0000002f40)={&(0x7f0000001780)={0x1784, r15, 0x2, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x107, 0x3, 0x0, 0x1, [@generic="2f108ac314ac017baa9e9b50865ad300df10fbf22a2a950f144aa669f29f315af6577a3cac684b03bdd9", @generic="19382cfaf5db79941e4e3f907948e8ace9e36fe0895662890e9eac8d63e8ad708a99f9a84a341c2dd46f01d3b7784829cefb0d65049144af388fb85a03d0baf749625a07ad900252c3411e538d850999bb54ec124ca8f84eabd43483b737096b815078ed8d99a877bef96ee019d68ee6fc63ae430789001114c8c48e51716d55cb0c3f100290ccd2b075282191466d0af8a0ad87c3a90f6a1dc5edeb7fd62ea41b8935c3374be00927af5280db4f4a3e2753321d8523c9b97f3cc76229dd0f85c1305f3698", @nested={0x4, 0x12d}, @typed={0x8, 0x155, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @typed={0x8, 0x7d, 0x0, 0x0, @fd=r16}]}, @TIPC_NLA_MON={0x108e, 0x9, 0x0, 0x1, [@generic="fb84c1eddf7e84a81164c850ffcc236304df4eb4dd9508e7a4224fc42fb2fda58334b39484f5483e33bb99aca6bc9eeb2a83aaa9315213af7885dff3e3e20d88d184da03b54ade0f45591054bfd4ae8f04d3a90f93479c9955d7895da5908678bb06fe23cbbc1b94e4690fd401a59903f5a12b6abb933509e497357d915397548f17", @generic="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", @typed={0x8, 0x82, 0x0, 0x0, @fd=r11}]}, @TIPC_NLA_NAME_TABLE={0xa3, 0x8, 0x0, 0x1, [@generic="b4fea77160d77269fbbbce12ef0b2cde96ae9c4869d202fee6ce4d9f7ecbc987b4d7b9541628", @generic="eb71839885387dfd12bf4370bb8b079fa08b586b79d68712a5f91fefde46ec417104e89d19d59251e57cfd186ef7592667cf00e77e153b0f2d59279edef64108c5865f306e62f290d7a4886ca235e1a2607d35813ee1f2daa5aa06cc5260d47eea05a025ed1a85ac2929f3da7fc74006731e01c99a17a99f59"]}, @TIPC_NLA_MON={0x30, 0x9, 0x0, 0x1, [@nested={0x2c, 0xad, 0x0, 0x1, [@typed={0x8, 0x5e, 0x0, 0x0, @pid=r14}, @typed={0x8, 0x7e, 0x0, 0x0, @fd=r12}, @typed={0xc, 0x10a, 0x0, 0x0, @u64=0xbdc}, @typed={0xc, 0x7, 0x0, 0x0, @u64=0x7fff}]}]}, @TIPC_NLA_SOCK={0xe8, 0x2, 0x0, 0x1, [@generic="a2ba574d5a8d43ab82c24ce943b5306ee8cd56251e476480a3417d2e3c67eb2408fee985ad447707e8991dae467751bb28f5ee6bc4cab4c82761e2227ea1ab0b1ae61a263658587c41ba5d05615e3072f00e09c3ee01b6d31eae15ea492d77eb91a4f078d8716b3d826b7c2a331c55a627addb24191e0037", @nested={0x6a, 0xc4, 0x0, 0x1, [@nested={0x4, 0x129}, @generic="b1c4d7803ee69587e0aa045caa79a4703787b3fbd32b01d79cdaf1afd2cf2d41a54dce602c9c64d0f67c63f864a3a366d8186d09c7efd9af86e9", @nested={0x4, 0xeb}, @nested={0x4, 0x5d}, @typed={0x8, 0x10, 0x0, 0x0, @u32=0x3}, @nested={0x4, 0xe3}, @typed={0xb, 0x108, 0x0, 0x0, @str=']*!(+d\x00'}, @typed={0x8, 0x125, 0x0, 0x0, @pid=r17}]}]}, @TIPC_NLA_MON={0x419, 0x9, 0x0, 0x1, [@generic="35eb50ba20de082deedc608994df781e7416a1e8382563845ad769fa4eca303371d6dd57636ccd805bd286ce3e5f560e9a0b9062fb70f6a3bb7f7e3b6ea4d8e1aec74d677d8497d7bfed425a3d6a8ea2368cf5106cfd6d39e989708b1f0d79310aeb3f4f3ecd139d1bb931b6d2188266788f7981325c6f398f6ac9545a3bcf7787ef2fdd611da3b2e95609a26b70f5c6ac97570f6714c6c90b9563537830d72b4162db530f177516a4863a1654c3f378042fc416", @nested={0x26b, 0xea, 0x0, 0x1, [@typed={0x8, 0x13a, 0x0, 0x0, @pid=0xffffffffffffffff}, @nested={0x4, 0x124}, @typed={0x4, 0xc2}, @typed={0x14, 0x13, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast2}}, @generic="31b2779a1e9b1025884853b068226145287179c8f9e624332d4824f6687f94c0f94500b7afcf38581ad8cc63fc767bd1e547a7c0adaf7e391900c7fcfc9fc7ed70c1d900c23529835e0c84903ea67377df3cd82dc4b3bf6000d69c321232314cbf38a110c1fbe975a88951b32b69c47aaef4478fd1ea50806a4013ae2d51f5a1314b31a37ae34903140b690751f39d99f1a50b95fc71b0e2f724631448fc61557d4f4a748452c7ba414ab81ab763cb6cfe541bb7585eb3e19c02c2a1c1e996f71f1b0130b4bbc4fa7a2c0002ef18273001a7e3d7fd87ead61b39afff6c5cd3df719354c8bc09e5cb30fca78d18b6684eaa257b8dd495efbf3712", @generic="aabce7f9ddd7ce0b47929b4869c6707eece3882dcb88145298d3af6430b4f133537120e73220fd05d8", @generic="00fe69dca55953f4e9628c9821ac96c2cf4c26b088db8f4b80ea9bf4bb091826bb97f12f4b1a0cb5f5e1ce4db3c011056e166a801a5b", @generic="b29516f2557495ec275752f03a5f3b9b982aa4a07307eabf2a39", @generic="48d5865e41dd9c1a83f1401e6b119a1e75fd04d2ffe1da39579e1f9ccb02c2ea415471234704a1499290be72ca91cd9339146a92a4b2eee06af1ce3fc986b5d1045688c4a7d666d8e4eb874111e08ffd3313d84cb703cc3e2b730aa581354c8761c06c7038323857625e0a688d608aff86c9c89cf7342cffab77c754b6f52d7d315a4088ce06046c1a019aee78ed4020d28c8018ed23cf3b0b9f772edcc0121399bb32f9e2bc83663efe3700abf51c49a17c4b4b867df8ef8116fd2adb22a46645a4fc689f1856fb578792aa", @nested={0x4, 0xee}]}, @generic="6d454cbf2d8fff695ed9495a581e7f8ce26083", @generic="ab7c3b2682bdbae38fd7e7b033a53b5348faddf88ee0b72327b06722b2907c470bf05cd53483b93d1a0ad9878e37d70494350a5e986423b0da71763ac97d2d9ee8fbc3014a692df084fcc31a5371b57a539f9c6489f342816b324a2f7ff99d17959127e74225fe366f62d5312e7f447cc79b4cd05337dc11f774d2e67906cb026da9e31b4e87c11fb189c2e07cd5133d2049fce741f630e20b1ac0997c8575f7e12db9e5091cc33bb06184383fed8eb0cca9e8c9b538a07a1ef4e84315409f0af669a75a8177ae366d07c9fcbb34d114089062c3207ebd8b42928af2106b208a3c34"]}]}, 0x1784}, 0x1, 0x0, 0x0, 0x8000}, 0x8840) setsockopt$auto_SO_SNDBUF(r1, 0x6, 0x7, &(0x7f0000002fc0)='/proc/irq/0/smp_affinity\x00', 0x3) kcmp$auto_KCMP_FILE(r7, r6, 0x0, r13, r11) sendmsg$auto_NL80211_CMD_GET_COALESCE(r2, &(0x7f0000003200)={&(0x7f0000003000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000031c0)={&(0x7f0000003040)={0x174, r10, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@NL80211_ATTR_FILS_CACHE_ID={0xae, 0xfd, "d883436a4709814b2f3351445ea1d5a46f72d3a814b95e143aea2a13060ef375ac0df98bb07f1dfbf4e767b8ef0f2966d81035fa69c1ebc5ef04491cce48069ed0905ed41b3f5eb84c183a46b499e8133dbfde21af6a7c4a0381b0d73c2fc109b88ce03c97f8074fc583d0c84835900e3be7d273806f0fbc4d50f4ee9041a12116cd58245c14e7721115cc8169840fb8d4ba3e7966b53390b1a61029fe64fe7b0c747aba406e1b9e7f93"}, @NL80211_ATTR_TDLS_EXTERNAL_SETUP={0x4}, @NL80211_ATTR_STA_FLAGS2={0x9f, 0x43, "76dfa186a7e04265fdfb4d0849c1714b63b3e5db0731d5c0a04b30134ebfdaab71a56912180eb0214076bc25fa19135550d473c5db3ff101d2f55019205b2a266ac8904252dafdeca283066b462dd4deb123814d62d05107df2e92c15d74219110820638e67a69ff6d089222ae1a8af328916889120eca0f3dded9fe7e887399706daa62bb588b73b35a1b91a12db3f16bbe8d1bdfadf52f49c3cf"}, @NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0x2}, @NL80211_ATTR_SUPPORT_MESH_AUTH={0x4}]}, 0x174}}, 0x20004040) 4.758349986s ago: executing program 2 (id=1432): r0 = openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) lseek$auto(r0, 0x0, 0x2) unshare$auto(0x40000080) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r1 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/kcore\x00', 0x28000, 0x0) pread64$auto(r1, 0x0, 0x840003, 0x2e6c) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC2\x00', 0x0, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0xe2202, 0x0) socket(0x11, 0x3, 0x9) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x0, 0x1, 0x948b, 0x9, 0x15f4da07, 0x6, 0x10, 0x64, 0x80000020, 0x1000, 0xb, 0x9, 0x2, 0xd8]}, 0x0) 4.639477503s ago: executing program 1 (id=1434): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) pwrite64$auto(0xc8, 0x0, 0x3, 0x3a) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x4020009, 0x4, 0x18, 0xffffffffffffffff, 0x8001) unshare$auto(0x2) sysfs$auto(0x20002, 0xd, 0x0) r1 = fsopen$auto(0x0, 0x1) fsconfig$auto(r1, 0x8, 0x0, 0x0, 0x0) r2 = fsopen$auto(0x0, 0x1) fsconfig$auto(r2, 0x8, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) unshare$auto(0x40000080) lstat$auto(0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), r3) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/cpu/smt/control\x00', 0x2ab42, 0x0) inotify_init1$auto(0x80000401) sendmsg$auto_NL80211_CMD_VENDOR(r3, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRESDEC=r4, @ANYBLOB="050727567000fbdbdf256700000005002a014000ff0765e62ecb4771db88b32ff0afd393b6f788fba299284df6b4bfa8b4e5b31013bf3380a9ca26913a7726ba730fda008d06777fe5095e111979f721e8d6a9153464c384d9be7ed8969b4e536cee3ebfd0d004945f07000000109ac05d62ab75c0b07e283983b53071f68d3f998d900dfb7363f7c0e973b989"], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000) madvise$auto(0x8, 0x3, 0x19) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000000), 0xffffffffffffffff) r7 = socket(0x1d, 0x2, 0x2) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'macsec0\x00', 0x0}) sendmsg$auto_MACSEC_CMD_UPD_RXSC(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYRES16=r0, @ANYRES16=r1, @ANYBLOB="01022abd7000fedbdf2503000000100002800c0001000a0000000000000008000100", @ANYRES32=r8, @ANYBLOB, @ANYRES64=r6, @ANYRESDEC=r2, @ANYRES64=r4, @ANYRESOCT=r6, @ANYBLOB="ba489fbbb9dcbe4aaf10d77ff36de4375d23b732dea147d31d23ef671f89b6ea2abffb8d70f22d7c8fe655289835b3988843d30881668658faaeae08ac3d68482fa1b608e5202509a056946edac34d5de57a5e8ac8ce9b1570864e5d0a5c6a1fe4664c128eb7bb1bd83b40545cd7d331136af4120d6352ba2d3bbef4e1b43da2feb233b6a418da482f4df492f76dbd5619805a36b2a19115a3a3a5a1b5c4adf982c27c609c539b5823a924cdbb9e4c3db336e28e63087c682208314fc24bfa6d70c273ed3343b57b74a94c2778cd4f2c4e108401a4a8c87297f8edbfda61ef0def597bb3d9252f6528fa2b060b908220d7", @ANYRESOCT=r5, @ANYRES8=r2], 0x2c}, 0x1, 0x0, 0x0, 0x200400d4}, 0x480b0) r9 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000140)='/dev/binderfs/binder0\x00', 0x20100, 0x0) ioctl$auto_BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000000)="fc06c1f730b9d2867a8ba29f242cf38f59f712fcd917fee796") mmap$auto(0x0, 0x400008, 0x1, 0xfffffffffffffffe, r5, 0x2414) close_range$auto(0x2, 0xffffffffffffffff, 0x0) 4.539613575s ago: executing program 3 (id=1435): r0 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dri/card1\x00', 0xa3003, 0x0) ioctl$auto(r0, 0x64c6, 0x1e2) mmap$auto(0x0, 0x20006, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x1f, 0x6, 0x7) r1 = socket(0xa, 0x3, 0xff) shutdown$auto(0x200000003, 0x2) connect$auto(0x3, &(0x7f00000018c0)=@hci={0x1f, 0x3}, 0x1) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0xffffffff, &(0x7f0000000100)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x2}, 0x804}, 0x3, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) r2 = socket(0xa, 0x1, 0x0) socket(0x11, 0x80003, 0x8) r3 = socket(0x1f, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x11}}, 0x6a) sendmmsg$auto(r3, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x3, 0x20000000) r4 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) statx$auto(r4, 0x0, 0x401006, 0x4015, 0x0) setsockopt$auto(0x3, 0x1, 0xc48f, 0x0, 0x8b) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/ram10/queue/max_sectors_kb\x00', 0xe3102, 0x0) sendfile$auto(r5, r1, 0x0, 0x1) close_range$auto(r4, r5, 0xc0000) bpf$auto(0x0, &(0x7f0000000280)=@link_update={0xffffffffffffffff, @new_map_fd=0x2, 0x1000007, @old_prog_fd=0x13b}, 0xa3) bpf$auto(0x1, &(0x7f00000001c0)=@bpf_attr_1={0xffffffffffffffff, 0x7, @value=0x3b41e31a, 0x1}, 0xc) read$auto(0x3, 0x0, 0x8080) mmap$auto(0x0, 0x4020209, 0x7fffffff, 0xeb2, r2, 0x7) madvise$auto(0x110c230000, 0x1, 0x9) getrandom$auto(0x0, 0x3, 0x80000001) openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, 0x0, 0x1541, 0x0) madvise$auto(0x8, 0x6, 0x807fff) 4.11429568s ago: executing program 0 (id=1436): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/dummy_hcd.0/usb1/bDeviceClass\x00', 0x149400, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000240)=""/214, 0xd6) r1 = prctl$auto_PR_SCHED_CORE_GET(0xfffffff8, 0x0, 0xffffffffffffffff, 0xb, 0x4) syz_clone3(&(0x7f00000004c0)={0x2000000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f0026bd7000fcdbdf9907"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="18000000", @ANYBLOB='V'], 0x1ac}}, 0x40000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0xfffffb88, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) socket(0xa, 0x1, 0x84) setreuid$auto(0xee01, 0x0) keyctl$auto(0x4, 0xfffff7ffffffffff, 0x0, 0x0, 0x9) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x2000, 0x0) readv$auto(0x3, &(0x7f00000002c0)={0x0, 0x8}, 0x8) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = socket(0xa, 0x5, 0x0) connect$auto(0x3, &(0x7f0000000180)=@in={0x2, 0x0, @rand_addr=0x64010102}, 0x54) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x4e20, @rand_addr=0x64010102}, 0x55) sysfs$auto(0x2, 0x810000000000003a, 0x0) getsockopt$auto(r2, 0x84, 0x1d, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x400020000000, 0x200204, 0x10000015) close_range$auto(0x2, 0x8, 0x0) r3 = socket(0xa, 0x3, 0x3a) setsockopt$auto(r3, 0x29, 0x14, 0x0, 0x56a) setsockopt$auto(r3, 0x29, 0x15, 0x0, 0x52b) sendmsg$auto_MACSEC_CMD_UPD_TXSA(r3, 0x0, 0x8040) mmap$auto(0x7, 0x20009, 0x4000000000e4, 0x12, r0, 0x2000000008000) socket(0x5, 0x2, 0x7fffc) 3.943008077s ago: executing program 0 (id=1437): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xffffeffe, 0x2) pipe$auto(0x0) writev$auto(0x3, 0x0, 0x8) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/adsp1\x00', 0x20342, 0x0) write$auto(r0, 0x0, 0x2004) mmap$auto(0x0, 0x2020009, 0x8000000000000003, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) write$auto(0x1, 0x0, 0x80000400) r1 = pipe$auto(&(0x7f0000000040)=0xffffffffffffffff) tee$auto(r2, r1, 0x5, 0x8) close_range$auto(0x2, 0x8, 0x0) 3.808566869s ago: executing program 2 (id=1438): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/dummy_hcd.0/usb1/bDeviceClass\x00', 0x149400, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000240)=""/214, 0xd6) r1 = prctl$auto_PR_SCHED_CORE_GET(0xfffffff8, 0x0, 0xffffffffffffffff, 0xb, 0x4) syz_clone3(&(0x7f00000004c0)={0x2000000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f0026bd7000fcdbdf9907"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="18000000", @ANYBLOB='V'], 0x1ac}}, 0x40000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0xfffffb88, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) socket(0xa, 0x1, 0x84) setreuid$auto(0xee01, 0x0) keyctl$auto(0x4, 0xfffff7ffffffffff, 0x0, 0x0, 0x9) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x2000, 0x0) readv$auto(0x3, &(0x7f00000002c0)={0x0, 0x8}, 0x8) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = socket(0xa, 0x5, 0x0) connect$auto(0x3, &(0x7f0000000180)=@in={0x2, 0x0, @rand_addr=0x64010102}, 0x54) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x4e20, @rand_addr=0x64010102}, 0x55) sysfs$auto(0x2, 0x810000000000003a, 0x0) getsockopt$auto(r2, 0x84, 0x1d, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x400020000000, 0x200204, 0x10000015) close_range$auto(0x2, 0x8, 0x0) r3 = socket(0xa, 0x3, 0x3a) setsockopt$auto(r3, 0x29, 0x14, 0x0, 0x56a) setsockopt$auto(r3, 0x29, 0x15, 0x0, 0x52b) sendmsg$auto_MACSEC_CMD_UPD_TXSA(r3, 0x0, 0x8040) mmap$auto(0x7, 0x20009, 0x4000000000e4, 0x12, r0, 0x2000000008000) socket(0x5, 0x2, 0x7fffc) 3.562489757s ago: executing program 3 (id=1439): socket(0x2, 0x3, 0x6) r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/025/001\x00', 0x40001, 0x0) ioctl$auto_USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x80, 0xa, 0x400, 0x1, 0x9, 0x0, &(0x7f0000000040)}) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r1 = prctl$auto(0x1000000001c, 0x2, 0x8, 0x1ff, 0x80001) clock_nanosleep$auto(0x2, 0x3c, &(0x7f0000000080)={0x80800, 0xfffffffffffffff9}, 0xfffffffffffffffe) setfsuid$auto(0xee00) mmap$auto(0x1, 0x6b4, 0xdf, 0xeb1, 0xffffffffffffffff, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x4000008, 0x1, 0x9, 0x3, 0x12, 0x93f, 0x1fee1, 0x3, 0xa, 0xfffffffffffffffe, 0x9, 0x5, 0x8002, 0x7, 0xb0, 0x9, 0x5, 0x3, 0x8, 0x4, 0x1, 0x4, 0x0, 0x0, 0x6, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x1000000000000, 0xfffffffffffffffc, 0x0, 0x7fffffffffff, 0x9, 0x3, 0x0, 0x10, 0x0, 0x0, 0x8000000000000001, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x1fe, 0x100082) socket(0xa, 0x3, 0x3a) setsockopt$auto(0x400000000000003, 0x29, 0xd1, 0x0, 0x567) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x28341, 0x0) ioctl$auto(0x3, 0x541b, 0xfffffffffffff4e0) close_range$auto(0x2, 0x8, 0x0) r2 = socket(0x2, 0x80002, 0x73) setpriority$auto(0x2, 0x8, 0x8) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x200, 0x0) close_range$auto(0x2, 0x8, 0x5) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/kernel/nmi_watchdog\x00', 0xe8002, 0x0) write$auto(0x3, 0x0, 0x7fffffff) ioctl$auto_BTRFS_IOC_SET_FEATURES(r1, 0x40309439, &(0x7f0000000100)=[{0x4, 0x9, 0x4}, {0x4, 0x1, 0x1}]) read$auto_tracing_pipe_fops_trace(r2, &(0x7f00000004c0)=""/110, 0x6e) r3 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0xa901, 0x0) ioctl$auto(r3, 0x5522, 0xf15) ioctl$auto(r3, 0x5523, r3) acct$auto(&(0x7f0000000080)='/dev/bus/usb/015/001\x00') mincore$auto(0x0, 0x10000, 0x0) syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000140), r2) setsockopt$auto(0x3, 0x0, 0x31, 0x0, 0x28) 3.425414245s ago: executing program 1 (id=1440): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x1, 0x8000) r0 = socket(0xa, 0x80000, 0x3) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000280), r0) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f00000049c0)={0x0, 0x0, &(0x7f0000004980)={&(0x7f0000000240)=ANY=[@ANYBLOB="0705000000", @ANYRES16=r1, @ANYBLOB="010026bd7000fedbdf25020000000c000480080008804ffb5eeb"], 0x20}, 0x1, 0x0, 0x0, 0x40040801}, 0x4000) sendmsg$auto_NL80211_CMD_REQ_SET_REG(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="f0000000", @ANYRES16=0x0, @ANYBLOB="01002bbd7000fcdbdf251b000000750021006d6e84a9905f0dffdcf2b0944b698e79da0eba57e5eaf234844de46646d0a3655acf6e14765da0f81c6887c83ceac2288173187445cee40f4face5dddfd46c50c9fd75ecc974000cee3903492cd3a2d436a3c9f4313c92c14837a4408a2e292d8dc193758ecbbc5fb6f1c319e62873bc5d0000000800c400010100000600b5005e00000004000b0008000d000700000005009200040000004000fd29799f51ac5d616222386074694e012ec21a3466b7083ca2749e9ad9ea81a39e82391093e01840efda8b90aaf6254c7721790e1b52aa23000000000000"], 0xf0}, 0x1, 0x0, 0x0, 0xc84}, 0x40040d4) r2 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000007380)='/sys/kernel/tracing/events/vmalloc/filter\x00', 0x109041, 0x0) write$auto(r2, &(0x7f0000008d40)='($}-)#@\x00', 0x40) close_range$auto(0x2, 0x8, 0x0) socket(0x4, 0x5, 0x84) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram11\x00', 0x34ba82, 0x0) mmap$auto(0x4, 0x810004, 0x400000000ffb, 0x8000000008011, 0x3, 0x8000) madvise$auto(0x100000000, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x2, 0x1, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) ioctl$auto(0x3, 0x894b, 0x38) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0xfffffffffffffeff, 0x9c10, 0xeb1, 0x40000000000a5, 0x3) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) preadv2$auto(r3, 0x0, 0x6, 0xffffffffffffffff, 0x4, 0x2e) madvise$auto(0x100000000000000, 0x400053, 0x9) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/devices/virtual/net/nr1/statistics/tx_heartbeat_errors\x00', 0xca080, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000001100)=""/4105, 0x1009) msync$auto(0x80000000000001, 0xe4, 0x3) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x16be82, 0x0) mmap$auto(0x0, 0x810004, 0x6, 0x8000000008011, 0x3, 0x0) 2.961170323s ago: executing program 0 (id=1441): socket(0xa, 0x1, 0x84) ppoll$auto(0x0, 0x2, &(0x7f0000000040)={0x2, 0xfffffffffffffff8}, 0x0, 0x8) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0xe6e43, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x4081, 0x0) io_uring_setup$auto(0x6, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000340)='/dev/v4l-subdev2\x00', 0x80000, 0x0) socket(0x10, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ila(&(0x7f0000000040), r0) sendmsg$auto_ILA_CMD_DEL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000000) r1 = open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x130) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_START_NAN(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r2, 0x8, 0x70bd2b, 0x25dfdbff, {}, [@NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0xc}, @NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x22044004}, 0x24000010) sendmsg$auto_NL80211_CMD_GET_SCAN(r0, &(0x7f0000000640)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000600)={&(0x7f0000000440)={0x1a4, r2, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@NL80211_ATTR_SCAN_SUPP_RATES={0x108, 0x7d, 0x0, 0x1, [@nested={0xfc, 0x141, 0x0, 0x1, [@generic="75f584ba904e65db7c47", @generic="2e0d761176257d396a38f241d45dcbddbcf845ee11cbde2ba028277efdba5aeac1f5f633685a537f9f9252c676ea103610a423736a2855e4a100eeaf93bae91c57296f58054916763786666aa2b2e507fdb726ee062209e435f378d56e14127d0d9b4d23a3c4d0701567391ff045b012683dd05fa483b2742488e68266baa00f61fb8ba8e2aa7d4e92466c95b1cfa7d1ee2347e7339f40266e9fbb3154cd13955e848642e44175cdd9c384b5ee503273f337c5479200164d7419c6ac2b487faa7a078c9a2492ad4615d84a26da3a772a035bdd95996cfc120c5d2c237e0e21ad27f74d4393b747a3f8086d9d946a"]}, @typed={0x8, 0x64, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0xb}}]}, @NL80211_ATTR_MPATH_NEXT_HOP={0x84, 0x1a, "a5bf3e757cb22f7645996fff3fc74a10e3cd85b95bd468470b396a9574529c216040046e3b6ba4ba256ee3ea0cfc7e9d7cfafdbe1736e49de4fe51f1f666fb7bb82a1327ab5984ff978776bfcefb69971e18afea91c02640dbff1552b7975d07fe97a975471f6dffae22c7589bad0549c1cf28c62aeaa0985f3f1a33477e57e6"}, @NL80211_ATTR_MLO_SUPPORT={0x4}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x8000}, 0x400c040) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x0, 0x0) syz_genetlink_get_family_id$auto_gtp(0x0, 0xffffffffffffffff) socket(0xa, 0x2, 0x73) r3 = socket(0xa, 0x3, 0x2f) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYBLOB="5e0027b4839f3015398d3b61", @ANYRES32, @ANYRES32=r3, @ANYRES64], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) openat$auto_dma_buf_debug_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) 2.887030681s ago: executing program 2 (id=1442): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) ioctl$auto_XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) r1 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000380), 0x20000, 0x0) socket(0x28, 0x5, 0x0) r2 = openat$auto_generic(0xffffffffffffff9c, &(0x7f00000032c0)='/proc/kmsg\x00', 0x80002, 0x0) tgkill$auto_SIGCONT(0x0, 0x0, 0x12) poll$auto(&(0x7f0000000040)={r2, 0x1000, 0x1c9}, 0x2, 0x7) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0xb, 0x3, 0x1, 0x9488, 0x9, 0x15f4da07, 0x6, 0x2, 0x64, 0x80000020, 0x1000, 0xb, 0x9, 0x2, 0xd8]}, 0x0) r3 = clone$auto(0x4, 0x72d2, 0x0, 0x0, 0x4) r4 = set_tid_address$auto(0x0) kcmp$auto_KCMP_SYSVSEM(r3, r4, 0x6, 0xfffffffffffffffa, 0x2) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_GOV(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x808000}, 0xc, &(0x7f0000000880)={&(0x7f0000000440)=ANY=[@ANYBLOB="28040020", @ANYRES16=0x0, @ANYBLOB="000425bd7000fedbdf250400000008000300080000008202148008005700", @ANYRES32=r1, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="471362f1e7831d23bea86843a63df7da55cd35ebedf3293a5181f3be1306f6bf3bb8c0822c32e51616cda24dd98146b8a09243f4e9353308c90a5a56e79e528326fd3096afb44964734a4a0ce5451ffbe414fd61380883e8f98bfe4974338bd8b8f4089b39e3764b72060ac16c69b032b9a9f153c155c7ae181608003e8004002080000008000800050000000800070007000000"], 0x428}, 0x1, 0x0, 0x0, 0x24000010}, 0x8040) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x8000000000001fd, 0x20000000007, 0x4, 0x1000000000000bc3, 0x7ff, 0x3, 0xff, 0x10001, 0x400000000003, 0x3, 0x8001, 0xfffffffffffffffe, 0x80000000, 0x335b0eef, 0xffffdfffffffff81, 0x4]}, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f00000018c0)=@in={0x2, 0x300, @loopback=0xac14140a}, 0x55) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x9, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) socket(0x29, 0x2, 0x0) r5 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy0/queues\x00', 0x82, 0x0) read$auto(r5, 0x0, 0x84) 2.683453414s ago: executing program 0 (id=1443): io_uring_setup$auto(0x59, &(0x7f0000000000)={0x83, 0x1000, 0x6, 0x1, 0xffffffff, 0xa, 0xffffffffffffffff, [], {0x8, 0x1, 0x0, 0x8998d60, 0x8000100, 0x7fff, 0x8000105, 0x0, 0x8d6}, {0xbfc7, 0x1, 0x52, 0x8, 0x47304, 0x3d, 0x8, 0x7, 0x8001}}) madvise$auto(0x0, 0x7ffffffffffffffc, 0xc) mmap$auto(0x0, 0x400008, 0x5f, 0x9b72, 0x2, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) r1 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/pcmC1D0c\x00', 0x101001, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_HW_PARAMS2(r1, 0xc2604111, &(0x7f0000000040)={0x3, [{[0x411340e3, 0x1ff, 0x400, 0x9, 0x0, 0x8, 0x3ff, 0x9]}, {[0x3, 0x6, 0x0, 0xae, 0x401, 0xf, 0x0, 0x6]}, {[0x0, 0xfffffffe, 0x40, 0x4, 0x0, 0x10, 0x0, 0x4]}], [{[0x6, 0x6, 0x2, 0x7fff, 0x8000, 0x8, 0x80000001]}, {[0xc8, 0x5, 0x5, 0x1bf, 0x3, 0x698, 0x85, 0xe]}, {[0x7, 0x1cb7, 0x10, 0x7fff, 0x7, 0x0, 0x3dde, 0x80]}, {[0xfffffff7, 0x326635c8, 0x7fff, 0xffffff00, 0x5, 0xfffffff9, 0xffff, 0x8001]}, {[0x1, 0xfffffffd, 0x5, 0x5, 0x8, 0x200, 0x7fff, 0x2]}], [{0x8000, 0xfff}, {0x9619, 0x9}, {0x9, 0x2, 0x1, 0x0, 0x1}, {0xfffffbff, 0x8, 0x0, 0x0, 0x1}, {0xe, 0x8001, 0x0, 0x0, 0x1}, {0x0, 0x9, 0x0, 0x0, 0x0, 0x1}, {0x7, 0x9, 0x1, 0x1, 0x0, 0x1}, {0x6, 0xd55e, 0x1, 0x1, 0x1}, {0x9, 0x4, 0x1, 0x0, 0x1}, {0x9, 0x5, 0x0, 0x0, 0x1, 0x1}, {0x7, 0x1, 0x0, 0x1, 0x0, 0x1}, {0x40, 0x800, 0x1, 0x0, 0x1, 0x1}], [{0x4, 0x5, 0x1, 0x1, 0x1}, {0x4, 0x9, 0x0, 0x1}, {0xfffffabf, 0x6d9, 0x0, 0x1, 0x1}, {0x8, 0x7, 0x0, 0x0, 0x1}, {0x6, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x8, 0x2, 0x0, 0x1, 0x0, 0x1}, {0x9, 0x3, 0x1, 0x0, 0x0, 0x1}, {0x9, 0x3, 0x0, 0x0, 0x1}, {0x3, 0xf, 0x0, 0x1, 0x1}], 0xfffff801, 0x6, 0x8, 0x7, 0x0, 0x5, 0x5, "ec2c9bcbd46405d68a0d8fd9ca099965", "537545b4903410f4a1f06cebed58bb6950fd914fdaeb291fcadeacb75fefdae2beed2167eefcc840cf4fda10b96010b1"}) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, r0, 0x28000) fsconfig$auto_HIDEPID_NOT_PTRACEABLE(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x4) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) socket(0xa, 0x801, 0x100) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r2 = socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e1000000ff00"}, 0x58) openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000380)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x100, 0x0) r3 = gettid() prctl$auto_SECCOMP_MODE_FILTER(0xffff, 0x2, r3, 0x100000000, 0x5) prctl$auto(0x10001, 0x8400000000000000, r3, 0x3, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) sysfs$auto(0x2, 0x4c, 0x0) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000400), r2) sendmsg$auto_NL80211_CMD_UPDATE_CONNECT_PARAMS(r2, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000700)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r4, @ANYBLOB="20002bbd7000fcdbdf257a000000b500f5003a190e77f5660f33468149b72ef127130518dad10225241de7b4faa9bf70ead9838a2837e5a6a51425791ba036b0ea4ffbf35bf529fde221ece5cc0cb1c4b01e0f86146e5a60049193efedda2314620df75d238b3e4c3ff3d26b8e99728f9a7d0123073986254dd34e6b95b20d0400ec891a5c4e254c48666c4fed930fc88fd88cded10ea2feb874ade0451f50d074dccb4f0dd8417276166b38a760777ef0f8e4f14f007b350b932b535f1fd5e5afa76de56b9a433ebb2cba2edcab295a0000000600eb000800000004005f00"], 0xd8}, 0x1, 0x0, 0x0, 0x10}, 0x40000c1) acct$auto(&(0x7f00000005c0)='/dZ(\xa5\xa0nf/seq\x00\xec\xde\xb0H;\x05\xc3\x1a\x8a\xa9\xc1Ob\xeb\xd8\x14X\xbb\bo\x19l\xdc\xc1\xe8\xdf\x81\xba\x8a\x15IL:!\x00\x00y\v\x97s\xee\x01\xa6\x0e|\x8e6\x14Fir\nA\xf1\x0eC=\x04y\xe2\xf8K.\xd0\x91?R\xd1H\xf5u,\x1d\xa0\xe2\xe5\xcb\xa4\x00IuU1\x9e\x8f*\x0e;\xe2\x14;?+\xe6\xd2\xd1\x99\xd2\v\x9df\n\x8dQ\xe7S\xed\x05\xee\xc2\xd9\x80\xbau:\xfd\xdd$\xb1\xc3{D\xa9\x0fZ\xfc\xfa\b^\xd7\xe3I\xfc\xd3\x00\xf6\xf4\xc8]k\x82Rr\x9a\x17\xbb\x19\x91\xba\x1f\xbd\xd89\x82\xabq-\xaf^\x95\xa3\xf2\xdd\xd4V(&\x84\x99n\xf8&u\r\xab\xf3\x99Mz\xee\x7f\xae>:\x93k\x8d\b\x1a1\xf2\xd7\x87\x19A\xf6\b\xe1\xa8D\xed\x03\x15\x95\xf4L\xf4\xbb\x04W\xf5\x98o\xb4\x1aD\x1a|\x1c\x1a\xc3\x97\x81n\x10\xa5\x91\b\xfc\x04:\x1f\xfb\x92\xab\xf4\xf6\xdf!\xf3\nv\x9c#\xc6_\xc8\x1e\xf9Ly1*\x97\xac\xc8{ZH ') fsopen$auto(0x0, 0x1) 2.609034697s ago: executing program 3 (id=1444): sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, 0x0, 0x10) mmap$auto(0x0, 0x5, 0xce, 0x809b72, 0xffffffffffffffff, 0x8000) r0 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) fcntl$auto(0x8000000000000001, 0x1, 0x0) r1 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f00000000c0), 0x302, 0x0) ioctl$auto_VHOST_SET_OWNER(r1, 0xaf01, 0x5) ioctl$auto(r1, 0x4008af13, r0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="00b40000756fb4579bd7090d1dc509a85d4a1c119dced41c896cc83a392e2c2ca4f556915c4a0296ebf55b42d097bc7c56d237ca7f3d2f7c81aba165adc686b75db341587921f684df08be99f8698b233534a2c5d4149f87f134345cc0bd0219ad91167d30c937d344786c9f78d2fa6b77015cddab7535d77d118c88f1c00a3ede8d8e9bb3918d174ca7818080ad9401c1359707a4f012a6cd0f501a"], 0xc4}, 0x1, 0x0, 0x0, 0x10000}, 0x4000000) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) sync_file_range$auto(r2, 0x7, 0x80000000, 0x5) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000680)='/sys/devices/virtual/net/nr14/proto_down\x00', 0x82902, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x189401, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = socketcall$auto(0xa, 0x0) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) ioctl$auto(0x3, 0xae41, r4) r6 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x8ea182, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x2000, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000004680), 0xffffffffffffffff) sendmsg$auto_OVS_VPORT_CMD_DEL(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000004980)={&(0x7f0000000100)=ANY=[@ANYRESDEC], 0x20}, 0x1, 0x0, 0x0, 0x40040801}, 0x200c000) close_range$auto(0x0, 0xfffffffffffff000, 0x6) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x1, 0xb5, 0x10, 0x7, 0x4, 0xffffffffffffffff, 0xa, "2af051a940806ec05be276cfc83ce63f", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0xe5, 0x3}, 0x10) bpf$auto(0x19, &(0x7f0000000380)=@bpf_attr_4={0x1, r3, 0xae, r7}, 0x92) 2.443125527s ago: executing program 3 (id=1445): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x8800, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptywf\x00', 0x0, 0x0) ioctl$auto(0x3, 0x80045439, 0xffffffffffffffff) sendmmsg$auto(r0, 0x0, 0x5, 0x20000000) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x1, 0x1d, 0x0, 0x8) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cuse\x00', 0x20a00, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) r2 = openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000180), 0x40900, 0x0) ioctl$auto_UBI_IOCATT(r2, 0x40186f40, 0x0) ioctl$auto_UBI_IOCDET(r2, 0x40046f41, 0x0) ioctl$auto_UBI_IOCDET(r2, 0x40046f41, 0x0) ioctl$auto_BLKGETNRZONES(0xffffffffffffffff, 0x80041285, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_tipcv2(0x0, r3) ioprio_set$auto(0x3, 0x0, 0x4b34) sendmsg$auto_TIPC_NL_MEDIA_GET(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x67c0}, 0x1, 0x0, 0x0, 0x800}, 0x10) setsockopt$auto(0x3, 0x1, 0x41, 0x0, 0x88) syz_genetlink_get_family_id$auto_nl80211(0x0, r0) syz_clone3(&(0x7f0000000300)={0x2c022000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_clone(0x5004000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) ioctl$auto_USB_RAW_IOCTL_EP_WRITE(r4, 0x40085507, 0x0) 2.190379747s ago: executing program 0 (id=1446): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x8800, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2b, 0x1, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptywf\x00', 0x0, 0x0) sendmmsg$auto(r0, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x5, 0x2}, 0x10001}, 0x5, 0x20000000) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) r1 = openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000180), 0x40900, 0x0) ioctl$auto_UBI_IOCATT(r1, 0x40186f40, 0x0) ioctl$auto_UBI_IOCDET(r1, 0x40046f41, 0x0) ioctl$auto_UBI_IOCDET(r1, 0x40046f41, 0x0) syz_genetlink_get_family_id$auto_tipcv2(0x0, 0xffffffffffffffff) sendmsg$auto_TIPC_NL_MEDIA_GET(0xffffffffffffffff, 0x0, 0x10) syz_clone3(&(0x7f0000000300)={0x2c022000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_clone(0x5004000, 0x0, 0x0, 0x0, 0x0, 0x0) openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) 1.944146362s ago: executing program 2 (id=1447): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x1, 0x8000) r0 = socket(0x1d, 0x3, 0x1) mmap$auto(0x0, 0x8, 0x2, 0x9b72, 0x5, 0x0) socket(0xa, 0x801, 0x106) listen$auto(0x3, 0x83) setsockopt$auto(0x3, 0x1, 0x31, 0x0, 0x9) getsockname$auto(r0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000004680), 0xffffffffffffffff) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f00000049c0)={0x0, 0x0, &(0x7f0000004980)={&(0x7f0000000240)={0x40, r1, 0x1, 0x70bd26, 0x25dfdbff, {}, [@OVS_VPORT_ATTR_OPTIONS={0x2c, 0x4, 0x0, 0x1, [@nested={0x27, 0xa, 0x0, 0x1, [@generic="aa37d9c0ce63ce130c919631c9b66d4ba3aaa04440e4e2185a431c537723c512386ae8"]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40040801}, 0x4000) sendmsg$auto_NL80211_CMD_REQ_SET_REG(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xf0, 0x0, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NL80211_ATTR_REG_ALPHA2={0x75, 0x21, "6d6e84a9905f0dffdcf2b0944b698e79da0eba57e5eaf234844de46646d0a3655acf6e14765da0f81c6887c83ceac2288173187445cee40f4face5dddfd46c50c9fd75ecc974000cee3903492cd3a2d436a3c9f4313c92c14837a4408a2e292d8dc193758ecbbc5fb6f1c319e62873bc5d"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x101}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x4}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x7}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x4}, @NL80211_ATTR_FILS_CACHE_ID={0x40, 0xfd, "231ba520bd29799f51ac5d616222386074694e012ec21a3466b7083ca2749e9ad9ea81a39e82391093e01840efda8b90aaf6254c7721790e1b52aa23"}]}, 0xf0}, 0x1, 0x0, 0x0, 0xc84}, 0x40040d4) r2 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000007380)='/sys/kernel/tracing/events/vmalloc/filter\x00', 0x109041, 0x0) write$auto(r2, &(0x7f0000008d40)='($}-)#@\x00', 0x40) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x5, 0x84) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fa02, 0x0) mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000000008011, 0x3, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x20009, 0x9c10, 0xeb1, 0x40000000000a5, 0x3) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) preadv2$auto(r3, 0x0, 0x6, 0xffffffffffffffff, 0x4, 0x2e) madvise$auto(0x100000000000000, 0x400053, 0x9) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/platform/vivid.0/media8/model\x00', 0xca080, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000001100)=""/4105, 0x1009) msync$auto(0x80000000000001, 0xe4, 0x3) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x16be82, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) 806.034002ms ago: executing program 0 (id=1448): close_range$auto(0x2, 0x8, 0x0) ioctl$auto(0x3, 0xae41, 0xffffffffffffffff) socket(0x2, 0x801, 0x106) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) mremap$auto(0x1ff000, 0xff, 0x843, 0x3, 0xfffff000) ioctl$auto_TUNGETIFF2(0xffffffffffffffff, 0x800454d2, &(0x7f0000000040)=0x8) waitid$auto(0x8, 0xffffffffffffffff, &(0x7f0000000100)={@siginfo_0_0={0xffff, 0x413, 0x0, @_sigsys={0x0, 0x0, 0x3ff}}}, 0x7fff, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) clock_gettime$auto(0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) write$auto(0x3, 0x0, 0x1) recvfrom$auto(0x3, 0x0, 0x800000000e, 0xa00, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0xfffffdef) write$auto(0x1, 0x0, 0x80000000) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mremap$auto(0xfffff000, 0x4, 0x1, 0x7, 0x1ff000) openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000040), 0x481, 0x0) socket(0xa, 0x1, 0x84) 597.694648ms ago: executing program 1 (id=1449): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) ioctl$auto_XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) r1 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000380), 0x20000, 0x0) socket(0x28, 0x5, 0x0) r2 = openat$auto_generic(0xffffffffffffff9c, &(0x7f00000032c0)='/proc/kmsg\x00', 0x80002, 0x0) tgkill$auto_SIGCONT(0x0, 0x0, 0x12) poll$auto(&(0x7f0000000040)={r2, 0x1000, 0x1c9}, 0x2, 0x7) r3 = socket$nl_generic(0x10, 0x3, 0x10) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0xb, 0x3, 0x1, 0x9488, 0x9, 0x15f4da07, 0x6, 0x2, 0x64, 0x80000020, 0x1000, 0xb, 0x9, 0x2, 0xd8]}, 0x0) r4 = set_tid_address$auto(0x0) kcmp$auto_KCMP_SYSVSEM(0x0, r4, 0x6, 0xfffffffffffffffa, 0x2) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_GOV(r3, &(0x7f00000008c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x808000}, 0xc, &(0x7f0000000880)={&(0x7f0000000440)=ANY=[@ANYBLOB="28040020", @ANYRES16=0x0, @ANYBLOB="000425bd7000fedbdf250400000008000300080000008202148008005700", @ANYRES32=r1, @ANYBLOB="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", @ANYRES32, @ANYBLOB="471362f1e7831d23bea86843a63df7da55cd35ebedf3293a5181f3be1306f6bf3bb8c0822c32e51616cda24dd98146b8a09243f4e9353308c90a5a56e79e528326fd3096afb44964734a4a0ce5451ffbe414fd61380883e8f98bfe4974338bd8b8f4089b39e3764b72060ac16c69b032b9a9f153c155c7ae181608003e8004002080000008000800050000000800070007000000"], 0x428}, 0x1, 0x0, 0x0, 0x24000010}, 0x8040) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x8000000000001fd, 0x20000000007, 0x4, 0x1000000000000bc3, 0x7ff, 0x3, 0xff, 0x10001, 0x400000000003, 0x3, 0x8001, 0xfffffffffffffffe, 0x80000000, 0x335b0eef, 0xffffdfffffffff81, 0x4]}, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f00000018c0)=@in={0x2, 0x300, @loopback=0xac14140a}, 0x55) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x9, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) socket(0x29, 0x2, 0x0) r5 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy0/queues\x00', 0x82, 0x0) read$auto(r5, 0x0, 0x84) 451.128754ms ago: executing program 2 (id=1450): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xffffeffe, 0x2) pipe$auto(0x0) writev$auto(0x3, 0x0, 0x8) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20342, 0x0) write$auto(r0, 0x0, 0x2004) mmap$auto(0x0, 0x2020009, 0x8000000000000003, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) write$auto(0x1, 0x0, 0x80000400) r1 = pipe$auto(&(0x7f0000000040)=0xffffffffffffffff) tee$auto(r2, r1, 0x5, 0x8) close_range$auto(0x2, 0x8, 0x0) 418.380698ms ago: executing program 3 (id=1451): socket(0xa, 0x1, 0x84) ppoll$auto(0x0, 0x2, &(0x7f0000000040)={0x2, 0xfffffffffffffff8}, 0x0, 0x8) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0xe6e43, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x4081, 0x0) io_uring_setup$auto(0x6, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000340)='/dev/v4l-subdev2\x00', 0x80000, 0x0) socket(0x10, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ila(&(0x7f0000000040), r0) sendmsg$auto_ILA_CMD_DEL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000000) r1 = open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x130) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_START_NAN(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r2, 0x8, 0x70bd2b, 0x25dfdbff, {}, [@NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0xc}, @NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x22044004}, 0x24000010) sendmsg$auto_NL80211_CMD_GET_SCAN(r0, &(0x7f0000000640)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000600)={&(0x7f0000000440)={0x1a4, r2, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@NL80211_ATTR_SCAN_SUPP_RATES={0x108, 0x7d, 0x0, 0x1, [@nested={0xfc, 0x141, 0x0, 0x1, [@generic="75f584ba904e65db7c47", @generic="2e0d761176257d396a38f241d45dcbddbcf845ee11cbde2ba028277efdba5aeac1f5f633685a537f9f9252c676ea103610a423736a2855e4a100eeaf93bae91c57296f58054916763786666aa2b2e507fdb726ee062209e435f378d56e14127d0d9b4d23a3c4d0701567391ff045b012683dd05fa483b2742488e68266baa00f61fb8ba8e2aa7d4e92466c95b1cfa7d1ee2347e7339f40266e9fbb3154cd13955e848642e44175cdd9c384b5ee503273f337c5479200164d7419c6ac2b487faa7a078c9a2492ad4615d84a26da3a772a035bdd95996cfc120c5d2c237e0e21ad27f74d4393b747a3f8086d9d946a"]}, @typed={0x8, 0x64, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0xb}}]}, @NL80211_ATTR_MPATH_NEXT_HOP={0x84, 0x1a, "a5bf3e757cb22f7645996fff3fc74a10e3cd85b95bd468470b396a9574529c216040046e3b6ba4ba256ee3ea0cfc7e9d7cfafdbe1736e49de4fe51f1f666fb7bb82a1327ab5984ff978776bfcefb69971e18afea91c02640dbff1552b7975d07fe97a975471f6dffae22c7589bad0549c1cf28c62aeaa0985f3f1a33477e57e6"}, @NL80211_ATTR_MLO_SUPPORT={0x4}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x8000}, 0x400c040) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x0, 0x0) syz_genetlink_get_family_id$auto_gtp(0x0, 0xffffffffffffffff) socket(0xa, 0x2, 0x73) r3 = socket(0xa, 0x3, 0x2f) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYBLOB="5e0027b4839f3015398d3b61", @ANYRES32, @ANYRES32=r3, @ANYRES64], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) openat$auto_dma_buf_debug_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) 0s ago: executing program 3 (id=1452): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async, rerun: 32) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) (async, rerun: 32) syz_genetlink_get_family_id$auto_ipvs(0x0, 0xffffffffffffffff) (async, rerun: 32) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty46\x00', 0x0, 0x0) (rerun: 32) ioctl$auto(r0, 0x5608, r0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async) madvise$auto(0x4, 0x2000000080000001, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = socket(0x9, 0x80005, 0x2000) close_range$auto(0x2, 0x8, 0x0) (async) socket(0x2, 0x80002, 0x73) r2 = socket(0x2, 0x1, 0x84) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (async) r3 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) (async) recvmmsg$auto(r3, &(0x7f0000000040)={{0x0, 0x100005, 0x0, 0x5, 0x0, 0x38c8, 0x16}, 0x803}, 0xfffffff9, 0x10, 0x0) (async, rerun: 64) ioctl$auto(r1, 0x8915, 0x24) (rerun: 64) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) (async) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/rpc/auth.unix.ip/content\x00', 0x2000, 0x0) pread64$auto(r4, 0x0, 0xf42c, 0x38) (async, rerun: 64) mmap$auto(0x2000, 0x400008, 0xdf, 0x9b32, r0, 0x8000) (async, rerun: 64) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) r5 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) ioctl$auto_PAGEMAP_SCAN(r5, 0xc0606610, &(0x7f000000c380)={0x60, 0xfffffffffffffffe, 0x100000, 0x7fffffffefff, 0xfffffffffffffffe, 0x1, 0x8, 0xbff, 0x2c, 0x2c, 0x40003, 0x2}) (async) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000080)='/dev/binderfs/binder1\x00', 0x0, 0x0) (async) mmap$auto(0x0, 0x5, 0xfffffffffffffe01, 0x8011, 0x3, 0x8000) (async, rerun: 32) epoll_pwait$auto(r2, &(0x7f00000000c0)={0xfffffff9}, 0x1, 0x101, &(0x7f0000000100), 0x8) (rerun: 32) r6 = openat$auto_stats_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) mbind$auto(0x7fffffffffffffff, 0x2, 0x9, 0x0, 0x100000001, 0x7fff) (async) pread64$auto(r6, 0x0, 0x2, 0x3) kernel console output (not intermixed with test programs): : 0 [ 201.038811][ T7142] ubi0: detaching mtd0 [ 201.045332][ T7153] ubi0: background thread "ubi_bgt0d" started, PID 7153 [ 201.117412][ T7142] ubi0: mtd0 is detached [ 201.529414][ T5636] Bluetooth: hci3: command 0x0406 tx timeout [ 201.535592][ T4944] Bluetooth: hci1: command 0x0406 tx timeout [ 201.543214][ T5636] Bluetooth: hci0: command 0x0406 tx timeout [ 201.549386][ T4944] Bluetooth: hci2: command 0x0406 tx timeout [ 201.756092][ T5632] Bluetooth: hci2: unexpected event 0x1c length: 725 > 5 [ 202.039087][ T7165] ubi0: attaching mtd0 [ 202.166843][ T7165] ubi0: scanning is finished [ 202.562786][ T7165] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 202.587792][ T7165] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 202.657934][ T7165] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 202.696102][ T7165] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 202.753213][ T7165] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 202.784127][ T7165] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 202.818529][ T7165] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2665595854 [ 202.866130][ T7165] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 203.002999][ T7179] ubi0: background thread "ubi_bgt0d" started, PID 7179 [ 203.004348][ T7172] ubi0: detaching mtd0 [ 203.104375][ T7172] ubi0: mtd0 is detached [ 205.563599][ T7209] ubi0: attaching mtd0 [ 205.627028][ T7209] ubi0: scanning is finished [ 205.981857][ T7209] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 205.997930][ T7209] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 206.107636][ T7209] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 206.169099][ T7209] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 206.217191][ T7209] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 206.346799][ T7209] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 206.367935][ T7209] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2665595854 [ 206.415188][ T7209] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 206.427572][ T7215] ubi0: background thread "ubi_bgt0d" started, PID 7215 [ 206.437769][ T7213] ubi0: detaching mtd0 [ 206.502822][ T7213] ubi0: mtd0 is detached [ 206.531670][ T7212] ubi0: attaching mtd0 [ 206.621382][ T7212] ubi0: scanning is finished [ 207.026046][ T7212] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 207.026066][ T7212] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 207.026079][ T7212] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 207.026091][ T7212] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 207.026104][ T7212] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 207.026116][ T7212] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 207.026128][ T7212] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2665595854 [ 207.026142][ T7212] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 207.026228][ T7214] ubi0: detaching mtd0 [ 207.063349][ T7214] ubi0: mtd0 is detached [ 209.466008][ T5632] Bluetooth: hci2: unexpected event 0x1c length: 725 > 5 [ 209.604234][ T7275] ubi0: attaching mtd0 [ 209.741083][ T7275] ubi0: scanning is finished [ 210.030725][ T7275] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 210.137721][ T7275] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 210.198416][ T7275] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 210.228537][ T7275] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 210.257132][ T7275] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 210.377076][ T7275] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 210.429089][ T7275] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2665595854 [ 210.502900][ T7275] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 210.568237][ T7266] ubi0: detaching mtd0 [ 210.601509][ T7285] ubi0: background thread "ubi_bgt0d" started, PID 7285 [ 210.711741][ T7266] ubi0: mtd0 is detached [ 210.820568][ T7294] ubi0: attaching mtd0 [ 210.873604][ T7294] ubi0: scanning is finished [ 211.165625][ T7294] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 211.289974][ T7294] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 211.343583][ T7294] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 211.377781][ T7294] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 211.399033][ T7294] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 211.433566][ T7294] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 211.468263][ T7294] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2665595854 [ 211.495695][ T7294] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 211.546698][ T7280] ubi0: detaching mtd0 [ 211.551179][ T7300] ubi0: background thread "ubi_bgt0d" started, PID 7300 [ 211.599229][ T7280] ubi0: mtd0 is detached [ 211.851966][ T7307] zram: Cannot change disksize for initialized device [ 214.754261][ T7351] ubi0: attaching mtd0 [ 214.832806][ T7351] ubi0: scanning is finished [ 215.272154][ T7351] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 215.323351][ T7351] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 215.352783][ T7351] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 215.360165][ T7351] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 215.367647][ T7351] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 215.377343][ T7351] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 215.395347][ T7351] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2665595854 [ 215.416991][ T7351] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 215.440657][ T7343] ubi0: detaching mtd0 [ 215.444836][ T7368] ubi0: background thread "ubi_bgt0d" started, PID 7368 [ 215.473901][ T7343] ubi0: mtd0 is detached [ 216.001081][ T7387] i2c i2c-0: delete_device: Can't find device in list [ 216.318164][ T7391] netlink: 16 bytes leftover after parsing attributes in process `syz.1.338'. [ 216.799269][ T5632] Bluetooth: hci0: unexpected event 0x1c length: 725 > 5 [ 218.229257][ T7353] kexec: Could not allocate control_code_buffer [ 218.282699][ T5632] Bluetooth: hci1: unexpected event 0x1c length: 725 > 5 [ 218.519475][ T7409] ubi0: attaching mtd0 [ 218.581921][ T7409] ubi0: scanning is finished [ 218.838908][ T7409] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 218.864778][ T7409] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 218.922681][ T7409] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 218.922711][ T7409] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 218.922735][ T7409] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 218.922757][ T7409] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 218.922780][ T7409] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2665595854 [ 218.922807][ T7409] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 218.922868][ T7435] ubi0: background thread "ubi_bgt0d" started, PID 7435 [ 218.922917][ T7421] ubi0: detaching mtd0 [ 218.944682][ T7421] ubi0: mtd0 is detached [ 219.152765][ T7447] i2c i2c-0: delete_device: Can't find device in list [ 220.307111][ T7449] ubi0: attaching mtd0 [ 220.325135][ T7449] ubi0: scanning is finished [ 220.381945][ T7462] i2c i2c-0: delete_device: Can't find device in list [ 220.722926][ T7449] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 220.831586][ T7449] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 220.941247][ T7449] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 221.028922][ T7449] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 221.075676][ T7449] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 221.184325][ T7449] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 221.258865][ T7449] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2665595854 [ 221.298097][ T7449] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 221.336371][ T7463] ubi0: detaching mtd0 [ 221.338309][ T7464] ubi0: background thread "ubi_bgt0d" started, PID 7464 [ 221.404238][ T7463] ubi0: mtd0 is detached [ 221.837235][ T7467] ubi0: attaching mtd0 [ 221.843971][ T7467] ubi0: scanning is finished [ 221.985812][ T7467] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 222.005665][ T7467] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 222.022165][ T7467] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 222.044436][ T7467] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 222.067765][ T7467] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 222.074741][ T7467] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 222.083589][ T7467] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2665595854 [ 222.096387][ T7467] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 222.199566][ T7477] ubi0: background thread "ubi_bgt0d" started, PID 7477 [ 222.199577][ T7474] ubi0: detaching mtd0 [ 222.249441][ T7474] ubi0: mtd0 is detached [ 222.490759][ T7470] ubi0: attaching mtd0 [ 222.530011][ T7470] ubi0: scanning is finished [ 222.703241][ T7470] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 222.739045][ T7470] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 222.746843][ T7470] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 222.755723][ T7470] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 222.763603][ T7470] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 222.812828][ T7470] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 222.891835][ T7470] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2665595854 [ 223.013811][ T7470] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 223.067413][ T7485] ubi0: background thread "ubi_bgt0d" started, PID 7485 [ 223.074841][ T7481] ubi0: detaching mtd0 [ 223.131603][ T7481] ubi0: mtd0 is detached [ 224.375370][ T7497] ubi0: attaching mtd0 [ 224.420726][ T7497] ubi0: scanning is finished [ 224.489552][ T7504] zram: Cannot change disksize for initialized device [ 224.636480][ T7497] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 224.658427][ T7497] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 224.680891][ T7497] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 224.689836][ T7497] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 224.697355][ T7497] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 224.705121][ T7497] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 224.715100][ T7497] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2665595854 [ 224.725506][ T7497] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 224.737334][ T7502] ubi0: detaching mtd0 [ 224.744462][ T7512] ubi0: background thread "ubi_bgt0d" started, PID 7512 [ 224.849302][ T7502] ubi0: mtd0 is detached [ 228.910271][ T7587] ubi0: attaching mtd0 [ 228.945821][ T7587] ubi0: scanning is finished [ 229.304839][ T7587] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 229.377937][ T7587] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 229.419842][ T7587] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 229.431935][ T7568] kexec: Could not allocate control_code_buffer [ 229.654472][ T7587] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 229.737817][ T7587] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 229.744766][ T7587] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 229.753445][ T7587] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2665595854 [ 229.764871][ T7587] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 229.803084][ T7581] ubi0: detaching mtd0 [ 229.809223][ T7598] ubi0: background thread "ubi_bgt0d" started, PID 7598 [ 229.869519][ T7581] ubi0: mtd0 is detached [ 230.673418][ T7612] ubi0: attaching mtd0 [ 230.709058][ T7612] ubi0: scanning is finished [ 230.975005][ T7612] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 231.010802][ T7612] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 231.083037][ T7612] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 231.156282][ T7612] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 231.357340][ T7612] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 231.413277][ T7612] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 231.433567][ T7612] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2665595854 [ 231.463645][ T7612] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 231.498041][ T7603] ubi0: detaching mtd0 [ 231.504143][ T7617] ubi0: background thread "ubi_bgt0d" started, PID 7617 [ 231.534296][ T7603] ubi0: mtd0 is detached [ 231.560089][ T7616] ubi0: attaching mtd0 [ 231.761976][ T7616] ubi0: scanning is finished [ 232.086567][ T7616] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 232.169347][ T7616] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 232.240922][ T7616] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 232.353541][ T7616] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 232.424839][ T7616] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 232.487426][ T7616] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 232.532995][ T7616] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2665595854 [ 232.656326][ T7616] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 232.738987][ T7637] ubi0: background thread "ubi_bgt0d" started, PID 7637 [ 232.744878][ T7626] ubi0: detaching mtd0 [ 232.881641][ T7626] ubi0: mtd0 is detached [ 234.127104][ T7669] netlink: 8 bytes leftover after parsing attributes in process `syz.3.396'. [ 235.775836][ T7697] ubi0: attaching mtd0 [ 235.842475][ T7697] ubi0: scanning is finished [ 236.231223][ T7697] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 236.257072][ T7697] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 236.329048][ T7697] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 236.359560][ T7697] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 236.386712][ T7697] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 236.418687][ T7697] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 236.485479][ T7697] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2665595854 [ 236.556266][ T7697] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 236.653106][ T7689] ubi0: detaching mtd0 [ 236.653111][ T7707] ubi0: background thread "ubi_bgt0d" started, PID 7707 [ 236.733908][ T7689] ubi0: mtd0 is detached [ 236.752923][ T7682] kexec: Could not allocate control_code_buffer [ 239.192526][ T7746] ubi0: attaching mtd0 [ 239.246921][ T7746] ubi0: scanning is finished [ 239.603332][ T7746] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 239.657880][ T7746] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 239.666345][ T7746] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 239.674316][ T7746] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 239.683025][ T7746] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 239.690495][ T7746] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 239.699007][ T7746] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2665595854 [ 239.709479][ T7746] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 239.725195][ T7757] ubi0: background thread "ubi_bgt0d" started, PID 7757 [ 239.747743][ T7751] ubi0: detaching mtd0 [ 239.796064][ T7751] ubi0: mtd0 is detached [ 239.835219][ T7747] ubi0: attaching mtd0 [ 239.924843][ T7747] ubi0: scanning is finished [ 240.272088][ T7747] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 240.347067][ T7747] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 240.469225][ T7747] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 240.520955][ T7747] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 240.587718][ T7747] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 240.643667][ T7747] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 240.659775][ T7777] i2c i2c-0: delete_device: Can't find device in list [ 240.676784][ T7747] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2665595854 [ 240.762691][ T7747] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 240.772910][ T7767] ubi0: background thread "ubi_bgt0d" started, PID 7767 [ 240.772918][ T7736] ubi0: detaching mtd0 [ 241.120991][ T7736] ubi0: mtd0 is detached [ 241.125559][ T7765] ubi0: attaching mtd0 [ 241.132791][ T7765] ubi0: scanning is finished [ 241.513230][ T7765] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 241.612181][ T7765] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 241.697125][ T7765] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 241.738301][ T7765] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 241.796055][ T7765] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 241.796086][ T7765] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 241.796108][ T7765] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2665595854 [ 241.796134][ T7765] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 241.796980][ T7791] ubi0: background thread "ubi_bgt0d" started, PID 7791 [ 241.800495][ T7771] ubi0: detaching mtd0 [ 241.960041][ T7771] ubi0: mtd0 is detached [ 244.221759][ T7823] i2c i2c-0: delete_device: Can't find device in list [ 244.816356][ T7842] i2c i2c-0: delete_device: Can't find device in list [ 245.862044][ T7846] ubi0: attaching mtd0 [ 245.979544][ T7846] ubi0: scanning is finished [ 246.400339][ T7846] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 246.452789][ T7846] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 246.491711][ T7846] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 246.517539][ T7846] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 246.564198][ T7846] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 246.604052][ T7846] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 246.617929][ T7846] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2665595854 [ 246.655572][ T7846] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 246.672896][ T7856] ubi0: background thread "ubi_bgt0d" started, PID 7856 [ 246.691918][ T7841] ubi0: detaching mtd0 [ 246.754789][ T7841] ubi0: mtd0 is detached [ 246.788325][ T7833] ubi0: attaching mtd0 [ 246.838634][ T7833] ubi0: scanning is finished [ 247.100315][ T7869] i2c i2c-0: delete_device: Can't find device in list [ 248.236270][ T7833] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 248.371041][ T7874] cougar: G6 mapped to space [ 250.812576][ T7915] ubi0: attaching mtd0 [ 250.835180][ T7915] ubi0: scanning is finished [ 251.254767][ T7915] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 251.300336][ T7915] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 251.418888][ T7915] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 251.465021][ T7915] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 251.524663][ T7915] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 251.607082][ T7915] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 251.672417][ T7915] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2665595854 [ 251.731865][ T7915] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 251.867879][ T7926] ubi0: background thread "ubi_bgt0d" started, PID 7926 [ 251.874946][ T7919] ubi0: detaching mtd0 [ 251.974600][ T7919] ubi0: mtd0 is detached [ 252.001552][ T7927] ubi0: attaching mtd0 [ 252.035848][ T7927] ubi0: scanning is finished [ 252.289425][ T7927] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 252.328138][ T7927] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 252.368638][ T7927] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 252.422274][ T7927] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 252.466507][ T7945] i2c i2c-0: delete_device: Can't find device in list [ 252.544643][ T7927] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 252.618318][ T7927] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 252.636964][ T7927] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2665595854 [ 252.933183][ T7927] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 252.980807][ T7947] ubi0: background thread "ubi_bgt0d" started, PID 7947 [ 253.041699][ T7917] ubi0: detaching mtd0 [ 253.054198][ T7917] ubi0: mtd0 is detached [ 254.556476][ T7966] ubi0: attaching mtd0 [ 254.598924][ T7966] ubi0: scanning is finished [ 254.871161][ T7966] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 254.917653][ T7966] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 254.960462][ T7966] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 254.998314][ T7966] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 255.010074][ T7966] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 255.016967][ T7966] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 255.026409][ T7966] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2665595854 [ 255.040504][ T7966] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 255.053480][ T7976] ubi0: detaching mtd0 [ 255.057749][ T7985] ubi0: background thread "ubi_bgt0d" started, PID 7985 [ 255.171312][ T7976] ubi0: mtd0 is detached [ 255.461110][ T7988] ubi0: attaching mtd0 [ 255.500636][ T7988] ubi0: scanning is finished [ 255.759645][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.768207][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.778710][ T7988] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 255.798129][ T7988] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 255.805720][ T7988] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 255.813151][ T7988] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 255.820737][ T7988] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 255.827631][ T7988] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 255.836793][ T7988] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2665595854 [ 255.849115][ T7988] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 255.859474][ T7993] ubi0: detaching mtd0 [ 255.862268][ T7994] ubi0: background thread "ubi_bgt0d" started, PID 7994 [ 255.893425][ T7993] ubi0: mtd0 is detached [ 257.001003][ T8008] openvswitch: netlink: Tunnel attr 242 out of range max 16 [ 258.061558][ T8022] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 258.850426][ T8034] ubi0: attaching mtd0 [ 258.900347][ T8034] ubi0: scanning is finished [ 258.973608][ T8013] kexec: Could not allocate control_code_buffer [ 259.313023][ T8034] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 259.321750][ T8034] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 259.352531][ T8034] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 259.382013][ T8034] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 259.424493][ T8034] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 259.503266][ T8034] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 259.565730][ T8034] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2665595854 [ 259.652163][ T8034] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 259.662523][ T8031] ubi0: detaching mtd0 [ 259.692333][ T8031] ubi0: mtd0 is detached [ 259.734917][ T8038] ubi0: attaching mtd0 [ 259.855539][ T8038] ubi0: scanning is finished [ 260.219481][ T8038] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 260.282017][ T8038] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 260.314109][ T8038] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 260.420270][ T8038] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 260.442495][ T8071] FAULT_INJECTION: forcing a failure. [ 260.442495][ T8071] name failslab, interval 1, probability 0, space 0, times 1 [ 260.490216][ T8071] CPU: 0 UID: 0 PID: 8071 Comm: syz.2.471 Not tainted syzkaller #0 PREEMPT(full) [ 260.490249][ T8071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 260.490272][ T8071] Call Trace: [ 260.490281][ T8071] [ 260.490290][ T8071] dump_stack_lvl+0x100/0x190 [ 260.490321][ T8071] should_fail_ex.cold+0x5/0xa [ 260.490341][ T8071] should_failslab+0xc2/0x120 [ 260.490358][ T8071] __kmalloc_cache_noprof+0x7a/0x6f0 [ 260.490378][ T8071] ? alloc_pipe_info+0x10e/0x590 [ 260.490396][ T8071] ? find_held_lock+0x2b/0x80 [ 260.490417][ T8071] alloc_pipe_info+0x10e/0x590 [ 260.490437][ T8071] splice_direct_to_actor+0x78f/0xa30 [ 260.490456][ T8071] ? __lock_acquire+0x4a5/0x2630 [ 260.490468][ T8071] ? __pfx_direct_splice_actor+0x10/0x10 [ 260.490487][ T8071] ? __pfx_aa_file_perm+0x10/0x10 [ 260.490509][ T8071] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 260.490533][ T8071] do_splice_direct+0x174/0x240 [ 260.490559][ T8071] ? __pfx_do_splice_direct+0x10/0x10 [ 260.490587][ T8071] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 260.490606][ T8071] ? rw_verify_area+0xce/0x6d0 [ 260.490622][ T8071] do_sendfile+0xadc/0xe20 [ 260.490640][ T8071] ? __pfx_do_sendfile+0x10/0x10 [ 260.490655][ T8071] ? __fget_files+0x21f/0x3d0 [ 260.490676][ T8071] __x64_sys_sendfile64+0x1d8/0x220 [ 260.490695][ T8071] ? ksys_write+0x1ac/0x250 [ 260.490710][ T8071] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 260.490731][ T8071] ? rcu_is_watching+0x12/0xc0 [ 260.490750][ T8071] do_syscall_64+0x10b/0xf80 [ 260.490769][ T8071] ? clear_bhb_loop+0x40/0x90 [ 260.490787][ T8071] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.490801][ T8071] RIP: 0033:0x7f742fd9cdd9 [ 260.490818][ T8071] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 260.490831][ T8071] RSP: 002b:00007f7430ce6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 260.490845][ T8071] RAX: ffffffffffffffda RBX: 00007f7430015fa0 RCX: 00007f742fd9cdd9 [ 260.490854][ T8071] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 260.490862][ T8071] RBP: 00007f7430ce6090 R08: 0000000000000000 R09: 0000000000000000 [ 260.490873][ T8071] R10: 000000007ffff000 R11: 0000000000000246 R12: 0000000000000001 [ 260.490881][ T8071] R13: 00007f7430016038 R14: 00007f7430015fa0 R15: 00007ffca3aade68 [ 260.490899][ T8071] [ 261.030494][ T8038] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 261.090630][ T8038] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 261.120089][ T8038] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2665595854 [ 261.143691][ T8038] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 261.243758][ T8068] ubi0: background thread "ubi_bgt0d" started, PID 8068 [ 261.258200][ T8045] ubi0: detaching mtd0 [ 261.293258][ T8045] ubi0: mtd0 is detached [ 263.081441][ T8095] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input6 [ 264.339517][ T8092] kexec: Could not allocate control_code_buffer [ 266.133431][ T8164] i2c i2c-0: delete_device: Can't find device in list [ 267.045296][ T8131] kexec: Could not allocate control_code_buffer [ 267.312731][ T8172] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 267.319547][ T8172] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 267.335596][ T8172] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 267.344934][ T8172] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 267.364632][ T8172] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 267.374476][ T8172] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 267.396334][ T8172] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 267.414581][ T8172] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 267.851333][ T8191] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input7 [ 268.254342][ T8198] netlink: 8 bytes leftover after parsing attributes in process `syz.3.498'. [ 268.382950][ T8207] ubi0: attaching mtd0 [ 268.434073][ T8207] ubi0: scanning is finished [ 268.798073][ T5632] Bluetooth: hci0: command 0x0406 tx timeout [ 268.821876][ T8207] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 268.916782][ T8207] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 268.926793][ T8222] i2c i2c-0: delete_device: Can't find device in list [ 268.965426][ T8207] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 269.087852][ T8207] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 269.095464][ T8207] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 269.102453][ T8207] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 269.110698][ T8207] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2665595854 [ 269.121267][ T8207] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 269.131687][ T8185] ubi0: detaching mtd0 [ 269.175013][ T8185] ubi0: mtd0 is detached [ 269.358844][ T5632] Bluetooth: hci1: command 0x0406 tx timeout [ 269.437856][ T5632] Bluetooth: hci3: command 0x0406 tx timeout [ 269.437876][ T5627] Bluetooth: hci2: command 0x0406 tx timeout [ 270.877841][ T5632] Bluetooth: hci0: command 0x0406 tx timeout [ 270.990779][ T8260] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 271.439723][ T5632] Bluetooth: hci1: command 0x0406 tx timeout [ 271.517828][ T5632] Bluetooth: hci2: command 0x0406 tx timeout [ 271.518129][ T5627] Bluetooth: hci3: command 0x0406 tx timeout [ 272.083030][ T8289] i2c i2c-0: delete_device: Can't find device in list [ 272.831016][ T8300] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input8 [ 273.155234][ T8305] ubi0: attaching mtd0 [ 273.191911][ T8305] ubi0: scanning is finished [ 273.607827][ T8305] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 273.651291][ T8305] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 273.680332][ T8305] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 273.719518][ T8305] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 273.778263][ T8305] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 273.871530][ T8305] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 273.912256][ T8305] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2665595854 [ 273.962789][ T8305] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 274.000751][ T8324] ubi0: background thread "ubi_bgt0d" started, PID 8324 [ 274.010042][ T8316] ubi0: detaching mtd0 [ 274.147873][ T8316] ubi0: mtd0 is detached [ 275.140632][ T8310] kexec: Could not allocate control_code_buffer [ 276.049458][ T8352] ubi0: attaching mtd0 [ 276.089528][ T8352] ubi0: scanning is finished [ 276.464769][ T8352] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 276.523821][ T8352] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 276.566280][ T8352] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 276.623773][ T8352] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 276.682333][ T8352] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 276.732521][ T8352] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 276.836145][ T8352] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2665595854 [ 276.954856][ T8352] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 277.033405][ T8355] ubi0: detaching mtd0 [ 277.037579][ T8363] ubi0: background thread "ubi_bgt0d" started, PID 8363 [ 277.071848][ T8355] ubi0: mtd0 is detached [ 277.716582][ T8380] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 277.875783][ T8388] i2c i2c-0: delete_device: Can't find device in list [ 278.189049][ T8375] netlink: 12 bytes leftover after parsing attributes in process `syz.0.535'. [ 279.863554][ T8422] netlink: 8 bytes leftover after parsing attributes in process `syz.2.544'. [ 281.447284][ T8443] FAULT_INJECTION: forcing a failure. [ 281.447284][ T8443] name failslab, interval 1, probability 0, space 0, times 0 [ 281.462001][ T8443] CPU: 0 UID: 0 PID: 8443 Comm: syz.1.547 Not tainted syzkaller #0 PREEMPT(full) [ 281.462037][ T8443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 281.462055][ T8443] Call Trace: [ 281.462065][ T8443] [ 281.462077][ T8443] dump_stack_lvl+0x100/0x190 [ 281.462117][ T8443] should_fail_ex.cold+0x5/0xa [ 281.462161][ T8443] should_failslab+0xc2/0x120 [ 281.462196][ T8443] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 281.462241][ T8443] ? security_inode_alloc+0x3b/0x2c0 [ 281.462287][ T8443] ? lockdep_init_map_type+0x5c/0x250 [ 281.462322][ T8443] security_inode_alloc+0x3b/0x2c0 [ 281.462368][ T8443] inode_init_always_gfp+0xcc0/0x1000 [ 281.462409][ T8443] alloc_inode+0x8e/0x250 [ 281.462452][ T8443] new_inode+0x22/0x1c0 [ 281.462498][ T8443] rpc_new_dir+0x96/0x420 [ 281.462533][ T8443] rpc_populate.constprop.0+0x125/0x1c0 [ 281.462569][ T8443] ? d_instantiate+0x8f/0xb0 [ 281.462607][ T8443] ? __pfx_rpc_fill_super+0x10/0x10 [ 281.462638][ T8443] rpc_fill_super+0x2b9/0x4f0 [ 281.462673][ T8443] ? __pfx_rpc_fill_super+0x10/0x10 [ 281.462706][ T8443] get_tree_keyed+0x10e/0x1d0 [ 281.462739][ T8443] vfs_get_tree+0x92/0x320 [ 281.462784][ T8443] vfs_cmd_create+0xd7/0x2a0 [ 281.462830][ T8443] __do_sys_fsconfig+0x55a/0xcb0 [ 281.462876][ T8443] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 281.462918][ T8443] ? handle_softirqs+0x861/0xa00 [ 281.462964][ T8443] ? rcu_is_watching+0x12/0xc0 [ 281.463003][ T8443] do_syscall_64+0x10b/0xf80 [ 281.463038][ T8443] ? clear_bhb_loop+0x40/0x90 [ 281.463073][ T8443] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.463102][ T8443] RIP: 0033:0x7fc2ebb9cdd9 [ 281.463126][ T8443] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 281.463159][ T8443] RSP: 002b:00007fc2eca7d028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 281.463187][ T8443] RAX: ffffffffffffffda RBX: 00007fc2ebe15fa0 RCX: 00007fc2ebb9cdd9 [ 281.463207][ T8443] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000006 [ 281.463223][ T8443] RBP: 00007fc2ebc32d69 R08: 0000000000000000 R09: 0000000000000000 [ 281.463241][ T8443] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 281.463258][ T8443] R13: 00007fc2ebe16038 R14: 00007fc2ebe15fa0 R15: 00007fff9a1dfc28 [ 281.463298][ T8443] [ 281.463512][ T8443] net/sunrpc/rpc_pipe.c: rpc_populate failed to populate directory / [ 281.616669][ T8445] i2c i2c-0: delete_device: Can't find device in list [ 282.314127][ T8454] i2c i2c-0: delete_device: Can't find device in list [ 284.473557][ T8514] netlink: 8 bytes leftover after parsing attributes in process `syz.2.560'. [ 284.491389][ T30] audit: type=1800 audit(4294967332.750:3): pid=8513 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.561" name="discovery_nqn" dev="configfs" ino=23675 res=0 errno=0 [ 285.095839][ T8521] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input9 [ 286.298270][ T8549] ubi0: attaching mtd0 [ 286.317149][ T8549] ubi0: scanning is finished [ 286.650684][ T8549] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 286.700900][ T8549] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 286.708664][ T8549] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 286.715739][ T8549] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 286.723672][ T8549] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 286.730822][ T8549] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 286.739167][ T8549] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2665595854 [ 286.749568][ T8549] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 286.766806][ T8555] ubi0: detaching mtd0 [ 286.771286][ T8568] ubi0: background thread "ubi_bgt0d" started, PID 8568 [ 286.825690][ T8555] ubi0: mtd0 is detached [ 287.542692][ T8586] netlink: 8 bytes leftover after parsing attributes in process `syz.3.571'. [ 288.046928][ T8594] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input10 [ 288.845566][ T8617] i2c i2c-0: delete_device: Can't find device in list [ 289.270780][ T8623] futex_wake_op: syz.1.578 tries to shift op by -2048; fix this program [ 290.457498][ T8649] ubi0: attaching mtd0 [ 290.495517][ T8649] ubi0: scanning is finished [ 290.670100][ T8652] netlink: 8 bytes leftover after parsing attributes in process `syz.0.581'. [ 290.817328][ T8649] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 290.864332][ T8649] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 290.922830][ T8649] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 290.976238][ T8649] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 291.018126][ T8649] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 291.063704][ T8649] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 291.140629][ T8649] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2665595854 [ 291.269762][ T8649] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 291.377267][ T8640] ubi0: detaching mtd0 [ 291.378623][ T8660] ubi0: background thread "ubi_bgt0d" started, PID 8660 [ 291.429893][ T8640] ubi0: mtd0 is detached [ 293.175633][ T8690] ubi0: attaching mtd0 [ 293.222015][ T8690] ubi0: scanning is finished [ 293.395761][ T8690] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 293.455754][ T8690] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 293.474724][ T8690] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 293.482757][ T8690] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 293.490551][ T8690] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 293.497543][ T8690] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 293.506096][ T8690] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2665595854 [ 293.543625][ T8690] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 293.570952][ T8696] ubi0: detaching mtd0 [ 293.572261][ T8700] ubi0: background thread "ubi_bgt0d" started, PID 8700 [ 293.621365][ T8696] ubi0: mtd0 is detached [ 294.836183][ T8729] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input11 [ 295.236835][ T8718] netlink: 252 bytes leftover after parsing attributes in process `syz.2.601'. [ 295.340856][ T8720] netlink: 252 bytes leftover after parsing attributes in process `syz.2.601'. [ 295.395167][ T8718] cougar: G6 mapped to space [ 296.423045][ T8769] ubi0: attaching mtd0 [ 296.455061][ T8769] ubi0: scanning is finished [ 296.769753][ T8769] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 296.818394][ T8769] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 296.889263][ T8769] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 296.943124][ T8769] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 296.964703][ T8769] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 296.981759][ T8769] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 297.062315][ T8769] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2665595854 [ 297.133564][ T8769] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 297.181409][ T8777] ubi0: background thread "ubi_bgt0d" started, PID 8777 [ 297.181424][ T8759] ubi0: detaching mtd0 [ 297.231218][ T8792] netlink: 330 bytes leftover after parsing attributes in process `syz.0.613'. [ 297.233493][ T8759] ubi0: mtd0 is detached [ 297.391527][ T8798] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input12 [ 298.620384][ T8834] netlink: 8 bytes leftover after parsing attributes in process `syz.3.624'. [ 302.465109][ T8891] ubi0: attaching mtd0 [ 302.509972][ T8891] ubi0: scanning is finished [ 302.736389][ T8891] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 302.783947][ T8891] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 302.815397][ T8891] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 302.875166][ T8891] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 302.939742][ T8891] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 302.984194][ T8891] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 303.048245][ T8891] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2665595854 [ 303.129147][ T8891] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 303.157413][ T8884] ubi0: detaching mtd0 [ 303.163449][ T8905] ubi0: background thread "ubi_bgt0d" started, PID 8905 [ 303.175633][ T8884] ubi0: mtd0 is detached [ 304.376714][ T8942] FAULT_INJECTION: forcing a failure. [ 304.376714][ T8942] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 304.398378][ T8942] CPU: 0 UID: 0 PID: 8942 Comm: syz.2.649 Not tainted syzkaller #0 PREEMPT(full) [ 304.398413][ T8942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 304.398439][ T8942] Call Trace: [ 304.398447][ T8942] [ 304.398457][ T8942] dump_stack_lvl+0x100/0x190 [ 304.398499][ T8942] should_fail_ex.cold+0x5/0xa [ 304.398526][ T8942] ? prepare_alloc_pages+0x16d/0x5f0 [ 304.398561][ T8942] should_fail_alloc_page+0xeb/0x140 [ 304.398593][ T8942] prepare_alloc_pages+0x1f0/0x5f0 [ 304.398630][ T8942] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 304.398673][ T8942] ? __lock_acquire+0x4a5/0x2630 [ 304.398716][ T8942] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 304.398754][ T8942] ? find_held_lock+0x2b/0x80 [ 304.398786][ T8942] ? is_bpf_text_address+0x8a/0x1a0 [ 304.398821][ T8942] ? is_bpf_text_address+0x8a/0x1a0 [ 304.398855][ T8942] ? bpf_ksym_find+0x124/0x1c0 [ 304.398883][ T8942] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 304.398927][ T8942] ? __kernel_text_address+0xd/0x30 [ 304.398955][ T8942] ? unwind_get_return_address+0x59/0xa0 [ 304.398989][ T8942] ? vma_is_special_huge+0x23f/0x2d0 [ 304.399018][ T8942] ? __pfx_vma_is_special_huge+0x10/0x10 [ 304.399047][ T8942] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 304.399085][ T8942] ? policy_nodemask+0xed/0x4f0 [ 304.399117][ T8942] alloc_pages_mpol+0x1fb/0x540 [ 304.399148][ T8942] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 304.399183][ T8942] ? __pfx___thp_vma_allowable_orders+0x10/0x10 [ 304.399222][ T8942] alloc_pages_noprof+0x1a/0x160 [ 304.399255][ T8942] __pmd_alloc+0x3b/0x950 [ 304.399291][ T8942] __handle_mm_fault+0xa9c/0x2a00 [ 304.399332][ T8942] ? mt_find+0x45e/0x8e0 [ 304.399370][ T8942] ? __pfx___handle_mm_fault+0x10/0x10 [ 304.399409][ T8942] ? __pfx_mt_find+0x10/0x10 [ 304.399462][ T8942] ? find_vma+0xbf/0x140 [ 304.399495][ T8942] ? __pfx_find_vma+0x10/0x10 [ 304.399527][ T8942] handle_mm_fault+0x36d/0xa20 [ 304.399573][ T8942] do_user_addr_fault+0x74c/0x12f0 [ 304.399610][ T8942] ? trace_page_fault_kernel+0x7a/0x200 [ 304.399644][ T8942] exc_page_fault+0x6f/0xd0 [ 304.399677][ T8942] asm_exc_page_fault+0x26/0x30 [ 304.399702][ T8942] RIP: 0010:rep_movs_alternative+0x30/0x90 [ 304.399743][ T8942] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 4d 9b 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 [ 304.399768][ T8942] RSP: 0000:ffffc9000702fd88 EFLAGS: 00050212 [ 304.399789][ T8942] RAX: 0000000000000001 RBX: 0000000000000081 RCX: 0000000000000034 [ 304.399805][ T8942] RDX: 0000000000000001 RSI: 0000000000000081 RDI: ffffc9000702fe18 [ 304.399822][ T8942] RBP: 0000000000000034 R08: 0000000000000001 R09: fffff52000e05fc9 [ 304.399837][ T8942] R10: 0000000000000003 R11: 0000000000000000 R12: 0000000000000000 [ 304.399851][ T8942] R13: ffffc9000702fe18 R14: 0000000000000081 R15: 0000000000000000 [ 304.399884][ T8942] _copy_from_user+0x98/0xd0 [ 304.399925][ T8942] adf_ctl_ioctl+0x28c/0x9f0 [ 304.399955][ T8942] ? find_held_lock+0x2b/0x80 [ 304.399986][ T8942] ? __pfx_adf_ctl_ioctl+0x10/0x10 [ 304.400032][ T8942] ? __pfx_adf_ctl_ioctl+0x10/0x10 [ 304.400067][ T8942] __x64_sys_ioctl+0x18e/0x210 [ 304.400095][ T8942] do_syscall_64+0x10b/0xf80 [ 304.400126][ T8942] ? clear_bhb_loop+0x40/0x90 [ 304.400157][ T8942] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.400182][ T8942] RIP: 0033:0x7f742fd9cdd9 [ 304.400202][ T8942] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 304.400224][ T8942] RSP: 002b:00007f7430ce6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 304.400247][ T8942] RAX: ffffffffffffffda RBX: 00007f7430015fa0 RCX: 00007f742fd9cdd9 [ 304.400264][ T8942] RDX: 0000000000000081 RSI: 0000000040046103 RDI: 0000000000000003 [ 304.400278][ T8942] RBP: 00007f7430ce6090 R08: 0000000000000000 R09: 0000000000000000 [ 304.400292][ T8942] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 304.400307][ T8942] R13: 00007f7430016038 R14: 00007f7430015fa0 R15: 00007ffca3aade68 [ 304.400342][ T8942] [ 306.119299][ T8974] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input13 [ 306.893880][ T8994] i2c i2c-0: delete_device: Can't find device in list [ 306.962203][ T8996] netlink: 8 bytes leftover after parsing attributes in process `syz.3.660'. [ 308.434157][ T9024] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input14 [ 309.829321][ T9055] ubi0: attaching mtd0 [ 309.878805][ T9055] ubi0: scanning is finished [ 310.124344][ T9055] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 310.139532][ T9055] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 310.168406][ T9055] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 310.175490][ T9055] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 310.183530][ T9055] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 310.192981][ T9055] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 310.201885][ T9055] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2665595854 [ 310.212348][ T9055] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 310.222732][ T9078] ubi0: background thread "ubi_bgt0d" started, PID 9078 [ 310.239250][ T9043] ubi0: detaching mtd0 [ 310.356313][ T9080] i2c i2c-0: delete_device: Can't find device in list [ 310.372699][ T9043] ubi0: mtd0 is detached [ 311.286273][ T9083] ubi0: attaching mtd0 [ 311.331865][ T9083] ubi0: scanning is finished [ 311.673280][ T9083] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 311.719731][ T9083] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 311.758231][ T9083] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 311.800407][ T9083] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 311.841332][ T9083] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 311.873605][ T9083] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 311.894369][ T9083] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2665595854 [ 311.947866][ T9083] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 312.051697][ T9105] ubi0: background thread "ubi_bgt0d" started, PID 9105 [ 312.071088][ T9091] ubi0: detaching mtd0 [ 312.172804][ T9091] ubi0: mtd0 is detached [ 313.116219][ T9131] ubi0: attaching mtd0 [ 313.214957][ T9131] ubi0: scanning is finished [ 313.514040][ T9145] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input15 [ 313.578254][ T9131] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 313.623283][ T9131] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 313.669939][ T9131] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 313.693400][ T9131] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 313.730449][ T9131] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 313.755693][ T9131] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 313.789343][ T9131] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2665595854 [ 313.830591][ T9131] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 313.886326][ T9121] ubi0: detaching mtd0 [ 313.893378][ T9148] ubi0: background thread "ubi_bgt0d" started, PID 9148 [ 313.973667][ T9121] ubi0: mtd0 is detached [ 316.224480][ T9178] netlink: 8 bytes leftover after parsing attributes in process `syz.0.700'. [ 316.965481][ T9173] ubi0: attaching mtd0 [ 316.991290][ T9173] ubi0: scanning is finished [ 317.201476][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.220545][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.329941][ T9173] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 317.329974][ T9173] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 317.329996][ T9173] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 317.330017][ T9173] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 317.330038][ T9173] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 317.330059][ T9173] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 317.330080][ T9173] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2665595854 [ 317.330105][ T9173] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 317.330154][ T9199] ubi0: background thread "ubi_bgt0d" started, PID 9199 [ 317.354136][ T9186] ubi0: detaching mtd0 [ 317.403821][ T9186] ubi0: mtd0 is detached [ 317.588941][ T9201] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input16 [ 324.763088][ T9319] ubi0: attaching mtd0 [ 324.882599][ T9319] ubi0: scanning is finished [ 325.344813][ T9319] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 325.440672][ T9319] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 325.666044][ T9319] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 325.737822][ T9319] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 325.778726][ T9319] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 325.864260][ T9319] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 326.069978][ T9319] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2665595854 [ 326.089938][ T9319] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 326.167940][ T9339] ubi0: background thread "ubi_bgt0d" started, PID 9339 [ 326.180819][ T9328] ubi0: detaching mtd0 [ 326.273391][ T9328] ubi0: mtd0 is detached [ 326.341452][ T9316] ubi0: attaching mtd0 [ 326.352713][ T9316] ubi0: scanning is finished [ 326.489548][ T9316] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 328.130262][ T9364] ubi0: attaching mtd0 [ 328.142352][ T9364] ubi0: scanning is finished [ 328.442792][ T9364] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 328.483468][ T9364] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 328.519714][ T9364] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 328.534698][ T9364] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 328.552013][ T9364] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 328.589720][ T9364] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 328.649518][ T9364] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2665595854 [ 328.667812][ T9364] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 328.725561][ T9384] ubi0: background thread "ubi_bgt0d" started, PID 9384 [ 328.740885][ T9387] ubi0: detaching mtd0 [ 328.753558][ T9387] ubi0: mtd0 is detached [ 328.779390][ T9373] ubi0: attaching mtd0 [ 328.812741][ T9373] ubi0: scanning is finished [ 329.132173][ T9373] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 329.181416][ T9373] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 329.217834][ T9373] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 329.238658][ T9373] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 329.298383][ T9373] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 329.337277][ T9373] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 329.383552][ T9373] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2665595854 [ 329.416001][ T9373] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 329.448778][ T9377] ubi0: detaching mtd0 [ 329.453056][ T9396] ubi0: background thread "ubi_bgt0d" started, PID 9396 [ 329.475838][ T9377] ubi0: mtd0 is detached [ 330.640328][ T9411] ubi0: attaching mtd0 [ 330.651969][ T9411] ubi0: scanning is finished [ 330.792035][ T9411] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 330.792071][ T9411] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 330.792097][ T9411] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 330.792120][ T9411] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 330.792144][ T9411] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 330.792166][ T9411] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 330.792190][ T9411] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2665595854 [ 330.792218][ T9411] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 330.792283][ T9423] ubi0: background thread "ubi_bgt0d" started, PID 9423 [ 330.802679][ T9415] ubi0: detaching mtd0 [ 330.830717][ T9415] ubi0: mtd0 is detached [ 332.665553][ T9453] ubi0: attaching mtd0 [ 332.785405][ T9453] ubi0: scanning is finished [ 332.925053][ T9453] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 332.936805][ T9453] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 332.944738][ T9453] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 332.952206][ T9453] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 332.966354][ T9453] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 332.980755][ T9453] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 332.998726][ T9453] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2665595854 [ 333.023206][ T9453] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 333.053601][ T9462] ubi0: background thread "ubi_bgt0d" started, PID 9462 [ 333.132797][ T9444] ubi0: detaching mtd0 [ 333.181744][ T9444] ubi0: mtd0 is detached [ 335.906201][ T9509] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input17 [ 343.115365][ T9623] ubi0: attaching mtd0 [ 343.121944][ T9623] ubi0: scanning is finished [ 343.375004][ T9623] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 343.400532][ T9623] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 343.491133][ T9623] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 343.575237][ T9623] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 343.612774][ T9623] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 343.680524][ T9623] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 343.710368][ T9623] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2665595854 [ 343.787021][ T9623] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 343.844166][ T9627] ubi0: detaching mtd0 [ 343.849648][ T9634] ubi0: background thread "ubi_bgt0d" started, PID 9634 [ 343.901710][ T9627] ubi0: mtd0 is detached [ 344.094664][ T9624] ubi0: attaching mtd0 [ 344.129370][ T9624] ubi0: scanning is finished [ 344.426931][ T9624] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 344.508476][ T9624] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 344.583681][ T9624] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 344.652448][ T9624] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 344.716530][ T9624] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 344.781046][ T9624] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 344.862947][ T9624] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2665595854 [ 344.941858][ T9624] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 345.032910][ T9630] ubi0: detaching mtd0 [ 345.033904][ T9659] ubi0: background thread "ubi_bgt0d" started, PID 9659 [ 345.084554][ T9630] ubi0: mtd0 is detached [ 353.696761][ T9825] i2c i2c-0: delete_device: Can't find device in list [ 353.834983][ T9830] i2c i2c-0: delete_device: Can't parse I2C address [ 355.682364][ T9857] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input18 [ 357.506351][ T9886] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input19 [ 358.063777][ T9900] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input20 [ 358.128915][ T9889] ubi0: attaching mtd0 [ 358.149600][ T9889] ubi0: scanning is finished [ 358.420064][ T9889] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 358.475758][ T9889] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 358.526819][ T9889] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 358.563938][ T9889] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 358.605865][ T9889] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 358.664717][ T9889] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 358.743689][ T9889] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2665595854 [ 358.814651][ T9928] i2c i2c-0: delete_device: Can't parse I2C address [ 358.823419][ T9889] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 359.024574][ T9894] ubi0: detaching mtd0 [ 359.045365][ T9913] ubi0: background thread "ubi_bgt0d" started, PID 9913 [ 359.341592][ T9894] ubi0: mtd0 is detached [ 361.201430][ T9952] ubi0: attaching mtd0 [ 361.214931][ T9952] ubi0: scanning is finished [ 361.477915][ T9952] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 361.513748][ T9952] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 361.580211][ T9952] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 361.595949][ T9952] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 361.667156][ T9952] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 361.819678][ T9952] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 361.873004][ T9952] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2665595854 [ 361.963130][ T9952] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 362.076474][ T9955] ubi0: detaching mtd0 [ 362.101118][ T9975] ubi0: background thread "ubi_bgt0d" started, PID 9975 [ 362.210802][ T9955] ubi0: mtd0 is detached [ 365.150451][T10049] i2c i2c-0: delete_device: Can't find device in list [ 366.400783][T10062] ubi0: attaching mtd0 [ 366.421390][T10062] ubi0: scanning is finished [ 366.709404][T10062] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 366.743006][T10062] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 366.773918][T10062] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 366.796392][T10062] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 366.827662][T10062] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 366.876158][T10062] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 366.928510][T10062] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2665595854 [ 366.967811][T10062] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 366.968035][T10063] ubi0: detaching mtd0 [ 366.977886][T10079] ubi0: background thread "ubi_bgt0d" started, PID 10079 [ 367.068929][T10063] ubi0: mtd0 is detached [ 367.105204][T10070] ubi0: attaching mtd0 [ 367.123920][T10070] ubi0: scanning is finished [ 367.356336][T10070] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 367.416326][T10070] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 367.466323][T10094] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input21 [ 367.490929][T10070] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 367.571229][T10070] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 367.651148][T10070] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 367.708838][T10070] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 367.778865][T10070] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2665595854 [ 367.891568][T10070] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 367.953077][T10071] ubi0: detaching mtd0 [ 367.955279][T10091] ubi0: background thread "ubi_bgt0d" started, PID 10091 [ 368.017415][T10071] ubi0: mtd0 is detached [ 369.995012][T10132] ubi0: attaching mtd0 [ 370.009928][T10132] ubi0: scanning is finished [ 370.221713][T10138] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input22 [ 370.264629][T10132] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 370.332242][T10132] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 370.429090][T10132] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 370.467174][T10132] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 370.537757][T10132] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 370.577541][T10132] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 370.620348][T10132] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2665595854 [ 370.695211][T10132] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 370.769701][T10133] ubi0: detaching mtd0 [ 370.773931][T10151] ubi0: background thread "ubi_bgt0d" started, PID 10151 [ 370.809350][T10133] ubi0: mtd0 is detached [ 372.525528][T10182] ubi0: attaching mtd0 [ 372.545871][T10182] ubi0: scanning is finished [ 372.732166][T10182] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 372.749813][T10182] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 372.765903][T10182] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 372.817125][T10182] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 372.877017][T10182] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 372.915890][T10182] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 372.981303][T10182] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2665595854 [ 373.152444][T10182] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 373.253152][T10207] ubi0: background thread "ubi_bgt0d" started, PID 10207 [ 373.265344][T10184] ubi0: detaching mtd0 [ 373.326628][T10184] ubi0: mtd0 is detached [ 373.392377][T10194] ubi0: attaching mtd0 [ 373.438253][T10194] ubi0: scanning is finished [ 373.701680][T10194] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 373.747952][T10194] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 373.803440][T10194] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 373.849211][T10194] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 373.907018][T10194] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 373.959017][T10194] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 374.031274][T10194] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2665595854 [ 374.074412][T10194] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 374.126832][T10197] ubi0: detaching mtd0 [ 374.132252][T10231] ubi0: background thread "ubi_bgt0d" started, PID 10231 [ 374.166477][T10197] ubi0: mtd0 is detached [ 375.871042][T10273] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input23 [ 375.932007][T10263] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 377.368749][T10292] ubi0: attaching mtd0 [ 377.403837][T10292] ubi0: scanning is finished [ 377.690556][T10292] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 377.737908][T10292] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 377.759168][T10292] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 377.796995][T10292] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 377.847875][T10292] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 377.882803][T10292] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 377.910196][T10292] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2665595854 [ 377.950811][T10292] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 377.990980][T10295] ubi0: detaching mtd0 [ 377.992135][T10304] ubi0: background thread "ubi_bgt0d" started, PID 10304 [ 378.070388][T10295] ubi0: mtd0 is detached [ 378.641652][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.651024][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.967170][T10333] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input24 [ 381.076241][T10339] ubi0: attaching mtd0 [ 381.097637][T10339] ubi0: scanning is finished [ 381.296900][T10339] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 381.369647][T10339] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 381.443432][T10339] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 381.504645][T10339] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 381.604763][T10339] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 381.657855][T10339] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 381.677080][T10339] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2665595854 [ 381.692044][T10339] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 381.703966][T10359] ubi0: background thread "ubi_bgt0d" started, PID 10359 [ 381.712083][T10355] ubi0: detaching mtd0 [ 381.778251][T10355] ubi0: mtd0 is detached [ 383.683031][T10386] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input25 [ 384.403146][T10395] ubi0: attaching mtd0 [ 384.420584][T10395] ubi0: scanning is finished [ 384.656123][T10395] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 384.676476][T10395] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 384.696405][T10395] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 384.711850][T10395] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 384.764186][T10395] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 384.794940][T10395] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 384.843619][T10395] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2665595854 [ 384.898084][T10395] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 384.977957][T10406] ubi0: background thread "ubi_bgt0d" started, PID 10406 [ 384.985165][T10396] ubi0: detaching mtd0 [ 385.026259][T10396] ubi0: mtd0 is detached [ 385.806215][T10414] ubi0: attaching mtd0 [ 385.825581][T10414] ubi0: scanning is finished [ 385.949155][T10414] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 385.957869][T10414] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 385.994384][T10414] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 386.033928][T10414] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 386.263243][T10414] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 386.289545][T10414] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 386.336223][T10414] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2665595854 [ 386.427795][T10414] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 386.531058][T10417] ubi0: detaching mtd0 [ 386.531466][T10430] ubi0: background thread "ubi_bgt0d" started, PID 10430 [ 386.609485][T10417] ubi0: mtd0 is detached [ 388.056039][T10466] ubi0: attaching mtd0 [ 388.080928][T10466] ubi0: scanning is finished [ 388.227765][T10466] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 388.255369][T10466] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 388.294436][T10466] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 388.325968][T10466] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 388.350216][T10466] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 388.379318][T10466] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 388.413696][T10466] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2665595854 [ 388.459397][T10466] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 388.496354][T10469] ubi0: detaching mtd0 [ 388.499283][T10473] ubi0: background thread "ubi_bgt0d" started, PID 10473 [ 388.536837][T10469] ubi0: mtd0 is detached [ 388.906073][T10472] ubi0: attaching mtd0 [ 388.919399][T10472] ubi0: scanning is finished [ 389.005393][T10472] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 389.017788][T10472] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 389.030342][T10472] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 389.058140][T10472] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 389.097786][T10472] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 389.114949][T10472] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 389.183109][T10472] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2665595854 [ 389.256746][T10472] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 389.309451][T10485] ubi0: background thread "ubi_bgt0d" started, PID 10485 [ 389.318482][T10477] ubi: mtd0 is already attached to ubi0 [ 389.355086][T10478] ubi0: detaching mtd0 [ 389.384665][T10478] ubi0: mtd0 is detached [ 390.287102][T10499] ubi0: attaching mtd0 [ 390.311563][T10499] ubi0: scanning is finished [ 390.406804][T10499] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 390.427908][T10499] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 390.445089][T10499] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 390.511349][T10499] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 390.555309][T10499] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 390.578173][T10499] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 390.669396][T10499] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2665595854 [ 390.719034][T10499] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 390.793955][T10500] ubi0: detaching mtd0 [ 390.805663][T10511] ubi0: background thread "ubi_bgt0d" started, PID 10511 [ 390.843666][T10500] ubi0: mtd0 is detached [ 396.247218][T10596] ubi0: attaching mtd0 [ 396.264690][T10596] ubi0: scanning is finished [ 396.379144][T10596] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 396.405142][T10596] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 396.437640][T10596] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 396.462129][T10596] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 396.484799][T10596] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 396.510647][T10596] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 396.587815][T10596] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2665595854 [ 396.679989][T10596] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 396.739357][T10605] ubi0: background thread "ubi_bgt0d" started, PID 10605 [ 396.739942][T10600] ubi0: detaching mtd0 [ 396.816953][T10600] ubi0: mtd0 is detached [ 396.858085][T10595] ubi0: attaching mtd0 [ 396.864826][T10611] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input26 [ 396.903425][T10595] ubi0: scanning is finished [ 397.220493][T10595] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 397.292639][T10595] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 397.380921][T10595] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 397.456546][T10595] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 397.498286][T10595] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 397.606587][T10595] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 397.768714][T10595] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2665595854 [ 397.899066][T10595] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 398.030112][T10598] ubi0: detaching mtd0 [ 398.034664][T10627] ubi0: background thread "ubi_bgt0d" started, PID 10627 [ 398.114025][T10598] ubi0: mtd0 is detached [ 398.842683][T10631] ubi0: attaching mtd0 [ 398.850029][T10631] ubi0: scanning is finished [ 398.982506][T10631] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 399.028627][T10631] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 399.054530][T10631] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 399.082134][T10631] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 399.126799][T10631] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 399.194439][T10631] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 399.236254][T10631] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2665595854 [ 399.285217][T10631] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 399.351330][T10637] ubi0: detaching mtd0 [ 399.356444][T10650] ubi0: background thread "ubi_bgt0d" started, PID 10650 [ 399.422097][T10637] ubi0: mtd0 is detached [ 400.593097][T10674] netlink: 28 bytes leftover after parsing attributes in process `syz.0.996'. [ 402.613613][T10695] ubi0: attaching mtd0 [ 402.650182][T10695] ubi0: scanning is finished [ 403.253879][T10695] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 403.376968][T10695] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 403.481785][T10695] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 403.572385][T10695] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 403.659462][T10695] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 403.726803][T10695] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 403.814632][T10695] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2665595854 [ 403.900456][T10695] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 403.970510][T10730] ubi0: background thread "ubi_bgt0d" started, PID 10730 [ 403.971114][T10698] ubi0: detaching mtd0 [ 404.067070][T10698] ubi0: mtd0 is detached [ 404.641225][T10742] ubi0: attaching mtd0 [ 404.660333][T10742] ubi0: scanning is finished [ 404.793639][T10742] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 404.812134][T10742] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 404.840494][T10742] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 404.875923][T10742] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 404.914712][T10742] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 404.928783][T10742] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 404.982316][T10742] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2665595854 [ 405.087805][T10742] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 405.131187][T10743] ubi0: detaching mtd0 [ 405.131700][T10751] ubi0: background thread "ubi_bgt0d" started, PID 10751 [ 405.198019][T10743] ubi0: mtd0 is detached [ 406.161072][T10773] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input27 [ 408.076272][T10787] ubi0: attaching mtd0 [ 408.096477][T10787] ubi0: scanning is finished [ 408.369519][T10787] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 408.396886][T10787] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 408.473227][T10787] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 408.540886][T10787] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 408.580722][T10787] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 408.615768][T10787] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 408.629115][T10787] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2665595854 [ 408.666147][T10787] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 408.698235][T10804] ubi0: detaching mtd0 [ 408.699359][T10809] ubi0: background thread "ubi_bgt0d" started, PID 10809 [ 408.764196][T10804] ubi0: mtd0 is detached [ 408.832752][T10812] ubi0: attaching mtd0 [ 408.855132][T10812] ubi0: scanning is finished [ 409.148451][T10812] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 409.207108][T10812] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 409.225340][T10812] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 409.282318][T10812] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 409.349723][T10812] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 409.391811][T10812] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 409.530621][T10812] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2665595854 [ 409.609177][T10812] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 409.709802][T10824] ubi0: background thread "ubi_bgt0d" started, PID 10824 [ 409.709991][T10814] ubi0: detaching mtd0 [ 409.775513][T10814] ubi0: mtd0 is detached [ 409.815750][T10825] ubi0: attaching mtd0 [ 409.834736][T10825] ubi0: scanning is finished [ 410.081951][T10825] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 410.144788][T10825] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 410.182685][T10825] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 410.216930][T10825] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 410.268825][T10825] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 410.308678][T10825] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 410.348586][T10825] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2665595854 [ 410.369777][T10825] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 410.387567][T10831] ubi0: detaching mtd0 [ 410.391991][T10845] ubi0: background thread "ubi_bgt0d" started, PID 10845 [ 410.412574][T10831] ubi0: mtd0 is detached [ 412.389636][T10876] ubi0: attaching mtd0 [ 412.400050][T10876] ubi0: scanning is finished [ 412.557631][T10876] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 412.592913][T10876] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 412.622089][T10876] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 412.652755][T10876] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 412.676378][T10876] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 412.721078][T10876] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 412.748144][T10876] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2665595854 [ 412.781364][T10876] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 412.823931][T10879] ubi0: detaching mtd0 [ 412.825634][T10889] ubi0: background thread "ubi_bgt0d" started, PID 10889 [ 412.861305][T10879] ubi0: mtd0 is detached [ 416.133434][T10952] ubi0: attaching mtd0 [ 416.163114][T10952] ubi0: scanning is finished [ 416.411941][T10952] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 416.469854][T10952] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 416.510655][T10952] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 416.541568][T10952] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 416.592682][T10952] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 416.623180][T10952] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 416.658565][T10952] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2665595854 [ 416.700094][T10952] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 416.735267][T10953] ubi0: detaching mtd0 [ 416.736659][T10968] ubi0: background thread "ubi_bgt0d" started, PID 10968 [ 416.819472][T10953] ubi0: mtd0 is detached [ 420.060925][T11018] ubi0: attaching mtd0 [ 420.093153][T11018] ubi0: scanning is finished [ 420.334344][T11018] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 420.401779][T11018] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 420.429200][T11018] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 420.469245][T11018] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 420.508263][T11018] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 420.567850][T11018] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 420.590425][T11018] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2665595854 [ 420.619333][T11018] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 420.670451][T11039] ubi0: background thread "ubi_bgt0d" started, PID 11039 [ 420.686577][T11020] ubi0: detaching mtd0 [ 420.769417][T11020] ubi0: mtd0 is detached [ 421.102840][T11046] ubi0: attaching mtd0 [ 421.121529][T11046] ubi0: scanning is finished [ 421.272523][T11046] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 421.291122][T11046] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 421.315656][T11046] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 421.339436][T11046] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 421.382312][T11046] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 421.406529][T11046] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 421.433304][T11046] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2665595854 [ 421.466084][T11046] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 421.514289][T11053] ubi0: background thread "ubi_bgt0d" started, PID 11053 [ 421.523563][T11042] ubi0: detaching mtd0 [ 421.564145][T11042] ubi0: mtd0 is detached [ 421.870867][ T30] audit: type=1804 audit(4294967470.130:4): pid=11051 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1068" name="/newroot/sys/kernel/debug/tracing/events/vmalloc/filter" dev="tracefs" ino=19680823 res=1 errno=0 [ 424.069120][T11104] FAULT_INJECTION: forcing a failure. [ 424.069120][T11104] name failslab, interval 1, probability 0, space 0, times 0 [ 424.088670][T11104] CPU: 0 UID: 0 PID: 11104 Comm: syz.1.1079 Not tainted syzkaller #0 PREEMPT(full) [ 424.088711][T11104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 424.088730][T11104] Call Trace: [ 424.088739][T11104] [ 424.088750][T11104] dump_stack_lvl+0x100/0x190 [ 424.088787][T11104] should_fail_ex.cold+0x5/0xa [ 424.088822][T11104] should_failslab+0xc2/0x120 [ 424.088855][T11104] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 424.088900][T11104] ? mas_preallocate+0x1105/0x14a0 [ 424.088950][T11104] mas_preallocate+0x1105/0x14a0 [ 424.088999][T11104] ? __pfx_mas_preallocate+0x10/0x10 [ 424.089054][T11104] ? vm_area_alloc+0x1f/0x160 [ 424.089097][T11104] ? lockdep_init_map_type+0x5c/0x250 [ 424.089131][T11104] __mmap_region+0x124a/0x2da0 [ 424.089181][T11104] ? __pfx___mmap_region+0x10/0x10 [ 424.089230][T11104] ? find_held_lock+0x2b/0x80 [ 424.089266][T11104] ? process_measurement+0x4c8/0x2350 [ 424.089305][T11104] ? process_measurement+0x4c8/0x2350 [ 424.089358][T11104] ? __lock_acquire+0x4a5/0x2630 [ 424.089393][T11104] ? __lock_acquire+0x4a5/0x2630 [ 424.089431][T11104] ? __pfx_hugetlb_file_mmap_prepare_success+0x10/0x10 [ 424.089487][T11104] ? find_held_lock+0x2b/0x80 [ 424.089539][T11104] ? __kernel_text_address+0xd/0x30 [ 424.089570][T11104] ? unwind_get_return_address+0x59/0xa0 [ 424.089610][T11104] ? arch_stack_walk+0xa6/0xf0 [ 424.089705][T11104] mmap_region+0x35d/0x620 [ 424.089735][T11104] ? __pfx_mmap_region+0x10/0x10 [ 424.089766][T11104] ? cap_mmap_addr+0x4b/0x120 [ 424.089804][T11104] ? bpf_lsm_mmap_addr+0x9/0x30 [ 424.089831][T11104] ? security_mmap_addr+0x71/0x1e0 [ 424.089862][T11104] ? __get_unmapped_area+0x255/0x3e0 [ 424.089902][T11104] do_mmap+0xc63/0x12f0 [ 424.089942][T11104] ? __pfx_do_mmap+0x10/0x10 [ 424.089976][T11104] ? __pfx_down_write_killable+0x10/0x10 [ 424.090026][T11104] vm_mmap_pgoff+0x29e/0x470 [ 424.090068][T11104] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 424.090100][T11104] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 424.090159][T11104] ksys_mmap_pgoff+0x285/0x610 [ 424.090197][T11104] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 424.090229][T11104] ? xfd_validate_state+0x129/0x190 [ 424.090264][T11104] __x64_sys_mmap+0x125/0x190 [ 424.090295][T11104] do_syscall_64+0x10b/0xf80 [ 424.090330][T11104] ? clear_bhb_loop+0x40/0x90 [ 424.090368][T11104] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 424.090397][T11104] RIP: 0033:0x7fc2ebb9cdd9 [ 424.090421][T11104] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 424.090449][T11104] RSP: 002b:00007fc2eca7d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 424.090481][T11104] RAX: ffffffffffffffda RBX: 00007fc2ebe15fa0 RCX: 00007fc2ebb9cdd9 [ 424.090493][T11104] RDX: 00004000000000e3 RSI: 0000000000200004 RDI: 0000000000000000 [ 424.090503][T11104] RBP: 00007fc2ebc32d69 R08: 000000000000000d R09: 0000300000000000 [ 424.090512][T11104] R10: 0000000000040eb2 R11: 0000000000000246 R12: 0000000000000000 [ 424.090522][T11104] R13: 00007fc2ebe16038 R14: 00007fc2ebe15fa0 R15: 00007fff9a1dfc28 [ 424.090542][T11104] [ 433.100764][T11251] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input30 [ 433.333546][T11246] ubi0: attaching mtd0 [ 433.340188][T11246] ubi0: scanning is finished [ 433.396897][T11246] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 433.418038][T11246] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 433.440370][T11246] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 433.477784][T11246] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 433.503783][T11246] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 433.533760][T11246] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 433.569287][T11246] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2665595854 [ 433.649197][T11246] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 433.706240][T11247] ubi0: detaching mtd0 [ 433.707568][T11261] ubi0: background thread "ubi_bgt0d" started, PID 11261 [ 433.763582][T11247] ubi0: mtd0 is detached [ 435.551162][T11318] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input32 [ 436.216883][T11335] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input33 [ 436.712317][T11340] ubi0: attaching mtd0 [ 436.730263][T11340] ubi0: scanning is finished [ 436.800131][T11349] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input34 [ 436.962366][T11340] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 437.017078][T11340] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 437.035745][T11340] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 437.090536][T11340] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 437.144061][T11340] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 437.185398][T11340] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 437.229949][T11340] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2665595854 [ 437.276665][T11340] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 437.326925][T11360] ubi0: background thread "ubi_bgt0d" started, PID 11360 [ 437.334941][T11353] ubi0: detaching mtd0 [ 437.373592][T11353] ubi0: mtd0 is detached [ 437.795834][T11381] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input35 [ 438.448026][T11398] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input36 [ 438.884907][T11406] ubi0: attaching mtd0 [ 438.902303][T11406] ubi0: scanning is finished [ 438.956736][T11406] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 438.969718][T11406] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 438.977219][T11406] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 438.986315][T11406] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 438.994610][T11406] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 439.002593][T11406] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 439.053090][T11406] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2665595854 [ 439.083403][T11406] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 439.142669][T11415] ubi0: detaching mtd0 [ 439.161241][T11419] ubi0: background thread "ubi_bgt0d" started, PID 11419 [ 439.208751][T11415] ubi0: mtd0 is detached [ 439.769726][T11426] ubi0: attaching mtd0 [ 439.783134][T11426] ubi0: scanning is finished [ 440.062270][T11426] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 440.090266][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.097645][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.128222][T11426] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 440.158557][T11426] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 440.193853][T11426] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 440.233481][T11426] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 440.267766][T11426] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 440.304579][T11426] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2665595854 [ 440.377415][T11426] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 440.420737][T11452] ubi0: background thread "ubi_bgt0d" started, PID 11452 [ 440.431818][T11431] ubi0: detaching mtd0 [ 440.488162][T11431] ubi0: mtd0 is detached [ 441.258368][T11463] ubi0: attaching mtd0 [ 441.269237][T11463] ubi0: scanning is finished [ 441.378673][T11463] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 441.402204][T11463] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 441.438611][T11463] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 441.463492][T11463] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 441.483133][T11463] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 441.493529][T11463] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 441.511528][T11463] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2665595854 [ 441.586263][T11463] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 441.650934][T11477] ubi0: background thread "ubi_bgt0d" started, PID 11477 [ 441.664841][T11467] ubi0: detaching mtd0 [ 441.717635][T11467] ubi0: mtd0 is detached [ 442.677948][T11506] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input37 [ 442.978268][T11509] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input38 [ 444.624967][T11534] ubi0: attaching mtd0 [ 444.644164][T11534] ubi0: scanning is finished [ 444.774040][T11534] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 444.792105][T11534] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 444.802876][T11534] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 444.819427][T11534] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 444.847653][T11534] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 444.866801][T11534] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 444.888166][T11534] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2665595854 [ 444.919217][T11534] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 444.995366][T11546] ubi0: background thread "ubi_bgt0d" started, PID 11546 [ 445.002606][T11542] ubi0: detaching mtd0 [ 445.023507][T11542] ubi0: mtd0 is detached [ 446.486548][T11579] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input39 [ 447.439231][T11603] netlink: 'syz.2.1179': attribute type 4 has an invalid length. [ 447.467808][T11603] netlink: 314 bytes leftover after parsing attributes in process `syz.2.1179'. [ 447.684673][T11596] ubi0: attaching mtd0 [ 447.708087][T11596] ubi0: scanning is finished [ 447.849975][T11596] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 447.877022][T11596] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 447.909091][T11596] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 447.927861][T11596] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 447.967547][T11596] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 448.005487][T11596] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 448.060359][T11596] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2665595854 [ 448.117766][T11596] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 448.204426][T11610] ubi0: background thread "ubi_bgt0d" started, PID 11610 [ 448.216923][T11597] ubi0: detaching mtd0 [ 448.336842][T11597] ubi0: mtd0 is detached [ 448.351242][T11620] FAULT_INJECTION: forcing a failure. [ 448.351242][T11620] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 448.489761][T11620] CPU: 1 UID: 0 PID: 11620 Comm: syz.2.1182 Not tainted syzkaller #0 PREEMPT(full) [ 448.489783][T11620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 448.489795][T11620] Call Trace: [ 448.489801][T11620] [ 448.489807][T11620] dump_stack_lvl+0x100/0x190 [ 448.489828][T11620] should_fail_ex.cold+0x5/0xa [ 448.489844][T11620] ? prepare_alloc_pages+0x16d/0x5f0 [ 448.489867][T11620] should_fail_alloc_page+0xeb/0x140 [ 448.489886][T11620] prepare_alloc_pages+0x1f0/0x5f0 [ 448.489907][T11620] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 448.489932][T11620] ? lru_gen_add_folio+0x20f/0x13d0 [ 448.489949][T11620] ? folios_put_refs+0x716/0xa90 [ 448.489965][T11620] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 448.489992][T11620] ? __lock_acquire+0x4a5/0x2630 [ 448.490005][T11620] ? __lock_acquire+0x4a5/0x2630 [ 448.490017][T11620] ? css_rstat_updated+0x1ce/0x5a0 [ 448.490046][T11620] ? lock_acquire+0x1b1/0x370 [ 448.490058][T11620] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 448.490081][T11620] ? policy_nodemask+0xed/0x4f0 [ 448.490099][T11620] alloc_pages_mpol+0x1fb/0x540 [ 448.490122][T11620] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 448.490140][T11620] ? __lock_acquire+0x4a5/0x2630 [ 448.490155][T11620] folio_alloc_mpol_noprof+0x36/0x260 [ 448.490175][T11620] vma_alloc_folio_noprof+0xed/0x1d0 [ 448.490194][T11620] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 448.490218][T11620] do_anonymous_page+0xb46/0x2050 [ 448.490240][T11620] ? rcu_read_unlock+0x2d/0xb0 [ 448.490278][T11620] __handle_mm_fault+0x1d2c/0x2a00 [ 448.490308][T11620] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 448.490327][T11620] ? __pfx___handle_mm_fault+0x10/0x10 [ 448.490349][T11620] ? pte_offset_map_lock+0x174/0x320 [ 448.490365][T11620] ? find_held_lock+0x2b/0x80 [ 448.490389][T11620] ? follow_page_pte+0x4d0/0x13f0 [ 448.490410][T11620] handle_mm_fault+0x36d/0xa20 [ 448.490435][T11620] __get_user_pages+0x1178/0x32a0 [ 448.490460][T11620] ? __pfx___get_user_pages+0x10/0x10 [ 448.490482][T11620] populate_vma_page_range+0x267/0x3f0 [ 448.490502][T11620] ? __pfx_populate_vma_page_range+0x10/0x10 [ 448.490520][T11620] ? __pfx_find_vma_intersection+0x10/0x10 [ 448.490538][T11620] ? do_mmap+0x93f/0x12f0 [ 448.490557][T11620] __mm_populate+0x107/0x3a0 [ 448.490577][T11620] ? __pfx___mm_populate+0x10/0x10 [ 448.490596][T11620] ? up_write+0x28c/0x4f0 [ 448.490614][T11620] vm_mmap_pgoff+0x37f/0x470 [ 448.490634][T11620] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 448.490652][T11620] ? __mutex_unlock_slowpath+0x15d/0x8a0 [ 448.490673][T11620] ? __fget_files+0x215/0x3d0 [ 448.490690][T11620] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 448.490719][T11620] ksys_mmap_pgoff+0xe4/0x610 [ 448.490740][T11620] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 448.490756][T11620] ? fput+0x79/0x100 [ 448.490775][T11620] ? ksys_write+0x1ac/0x250 [ 448.490790][T11620] ? __pfx_ksys_write+0x10/0x10 [ 448.490808][T11620] __x64_sys_mmap+0x125/0x190 [ 448.490827][T11620] do_syscall_64+0x10b/0xf80 [ 448.490845][T11620] ? clear_bhb_loop+0x40/0x90 [ 448.490862][T11620] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.490877][T11620] RIP: 0033:0x7f742fd9cdd9 [ 448.490890][T11620] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 448.490904][T11620] RSP: 002b:00007f7430ce6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 448.490922][T11620] RAX: ffffffffffffffda RBX: 00007f7430015fa0 RCX: 00007f742fd9cdd9 [ 448.490931][T11620] RDX: 00000000000000df RSI: 0000000000040009 RDI: 0000000000000000 [ 448.490940][T11620] RBP: 00007f7430ce6090 R08: 0000000000000007 R09: 0000000000028000 [ 448.490948][T11620] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000002 [ 448.490956][T11620] R13: 00007f7430016038 R14: 00007f7430015fa0 R15: 00007ffca3aade68 [ 448.490975][T11620] [ 449.662680][T11627] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input40 [ 450.228102][T11634] ubi0: attaching mtd0 [ 450.246776][T11634] ubi0: scanning is finished [ 450.463716][T11634] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 450.479801][T11634] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 450.536558][T11634] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 450.637838][T11634] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 450.658469][T11634] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 450.687623][T11634] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 450.718034][T11634] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2665595854 [ 450.767533][T11634] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 450.819586][T11652] ubi0: detaching mtd0 [ 450.822069][T11658] ubi0: background thread "ubi_bgt0d" started, PID 11658 [ 450.880680][T11652] ubi0: mtd0 is detached [ 451.564354][T11685] ksmbd: Unknown IPC event: 14, ignore. [ 454.265711][T11723] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input41 [ 458.620420][T11754] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input42 [ 460.684718][T11796] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input43 [ 462.184435][T11818] zswap: compressor not available [ 462.390054][T11825] ubi0: attaching mtd0 [ 462.410737][T11825] ubi0: scanning is finished [ 462.544285][T11825] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 462.563492][T11825] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 462.583019][T11825] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 462.602587][T11825] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 462.624888][T11825] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 462.647358][T11825] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 462.675241][T11825] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2665595854 [ 462.737480][T11825] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 462.826131][T11817] ubi0: detaching mtd0 [ 462.829125][T11827] ubi0: background thread "ubi_bgt0d" started, PID 11827 [ 462.886741][T11817] ubi0: mtd0 is detached [ 463.409469][T11837] ubi0: attaching mtd0 [ 463.418831][T11837] ubi0: scanning is finished [ 463.652218][T11837] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 463.687221][T11837] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 463.721450][T11837] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 463.777142][T11837] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 463.841183][T11837] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 463.848596][T11849] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input44 [ 463.891068][T11837] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 463.920657][T11837] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2665595854 [ 463.942949][T11837] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 464.031063][T11850] ubi0: background thread "ubi_bgt0d" started, PID 11850 [ 464.044092][T11840] ubi0: detaching mtd0 [ 464.134092][T11840] ubi0: mtd0 is detached [ 464.969309][T11879] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input45 [ 467.451304][T11913] ubi0: attaching mtd0 [ 467.463614][T11913] ubi0: scanning is finished [ 467.645390][T11913] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 467.674277][T11913] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 467.701806][T11913] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 467.736772][T11913] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 467.788298][T11913] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 467.817972][T11913] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 467.888755][T11913] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2665595854 [ 467.978833][T11913] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 468.060782][T11915] ubi0: detaching mtd0 [ 468.064916][T11935] ubi0: background thread "ubi_bgt0d" started, PID 11935 [ 468.116466][T11915] ubi0: mtd0 is detached [ 469.727021][T11977] netlink: 342 bytes leftover after parsing attributes in process `syz.3.1258'. [ 469.766224][T11974] netlink: 342 bytes leftover after parsing attributes in process `syz.3.1258'. [ 469.981186][T11981] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1260'. [ 472.679358][T12019] Invalid ELF header magic: != ELF [ 475.764758][T12066] ubi0: attaching mtd0 [ 475.795777][T12066] ubi0: scanning is finished [ 476.046319][T12066] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 476.081090][T12066] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 476.135804][T12066] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 476.193924][T12066] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 476.277525][T12066] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 476.352385][T12066] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 476.392129][T12066] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2665595854 [ 476.497998][T12066] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 476.632396][T12067] ubi0: detaching mtd0 [ 476.636586][T12076] ubi0: background thread "ubi_bgt0d" started, PID 12076 [ 476.680809][T12067] ubi0: mtd0 is detached [ 477.046595][T12086] nbd: socks must be embedded in a SOCK_ITEM attr [ 477.352899][T12084] ubi0: attaching mtd0 [ 477.366654][T12084] ubi0: scanning is finished [ 477.480494][T12084] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 477.507736][T12084] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 477.537740][T12084] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 477.551635][T12084] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 477.574624][T12084] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 477.594197][T12084] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 477.630184][T12084] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2665595854 [ 477.680973][T12084] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 477.753413][T12094] ubi0: background thread "ubi_bgt0d" started, PID 12094 [ 477.761433][T12092] ubi0: detaching mtd0 [ 477.770665][T12098] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input46 [ 477.849612][T12092] ubi0: mtd0 is detached [ 480.131336][T12143] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1297'. [ 480.162941][T12143] netlink: 'syz.3.1297': attribute type 1 has an invalid length. [ 480.187605][T12143] netlink: 'syz.3.1297': attribute type 6 has an invalid length. [ 480.217800][T12143] netlink: 51465 bytes leftover after parsing attributes in process `syz.3.1297'. [ 480.250629][T12143] netlink: 'syz.3.1297': attribute type 1 has an invalid length. [ 480.260526][T12149] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input48 [ 482.685958][T12197] ubi0: attaching mtd0 [ 482.713674][T12197] ubi0: scanning is finished [ 482.902147][T12197] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 482.924748][T12197] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 482.953591][T12197] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 482.991650][T12197] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 483.042256][T12197] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 483.065355][T12197] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 483.098187][T12197] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2665595854 [ 483.171416][T12197] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 483.213614][T12201] ubi0: detaching mtd0 [ 483.223950][T12211] ubi0: background thread "ubi_bgt0d" started, PID 12211 [ 483.289401][T12201] ubi0: mtd0 is detached [ 484.370082][T12231] ubi0: attaching mtd0 [ 484.384521][T12231] ubi0: scanning is finished [ 484.567299][T12231] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 484.613456][T12231] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 484.642227][T12231] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 484.676053][T12231] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 484.703088][T12231] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 484.733950][T12231] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 484.760719][T12231] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2665595854 [ 484.798848][T12231] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 484.828128][T12232] ubi0: detaching mtd0 [ 484.829523][T12245] ubi0: background thread "ubi_bgt0d" started, PID 12245 [ 484.863966][T12232] ubi0: mtd0 is detached [ 485.043986][T12253] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input49 [ 485.432783][T12263] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input50 [ 487.022244][T12288] ubi0: attaching mtd0 [ 487.031384][T12288] ubi0: scanning is finished [ 487.138807][T12288] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 487.160154][T12288] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 487.193076][T12288] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 487.232294][T12288] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 487.259298][T12288] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 487.290704][T12288] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 487.322517][T12288] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2665595854 [ 487.385864][T12288] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 487.446142][T12290] ubi0: detaching mtd0 [ 487.451245][T12298] ubi0: background thread "ubi_bgt0d" started, PID 12298 [ 487.484185][T12290] ubi0: mtd0 is detached [ 487.762837][T12314] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input51 [ 488.953398][T12342] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input52 [ 489.115347][T12348] netlink: 25 bytes leftover after parsing attributes in process `syz.2.1341'. [ 489.655912][T12354] ubi0: attaching mtd0 [ 489.680230][T12354] ubi0: scanning is finished [ 489.760427][T12364] smpboot: CPU 1 is now offline [ 490.121599][T12354] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 490.180976][T12354] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 490.253377][T12354] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 490.312859][T12354] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 490.411002][T12354] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 490.476688][T12354] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 490.528261][T12354] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2665595854 [ 490.589435][T12354] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 490.640150][T12356] ubi0: detaching mtd0 [ 490.645801][T12375] ubi0: background thread "ubi_bgt0d" started, PID 12375 [ 490.699182][T12356] ubi0: mtd0 is detached [ 490.726392][T12371] ubi0: attaching mtd0 [ 490.747473][T12371] ubi0: scanning is finished [ 490.884797][T12371] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 490.946856][T12371] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 491.034752][T12371] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 491.120604][T12371] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 491.236946][T12371] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 491.319868][T12371] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 491.472810][T12371] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2665595854 [ 491.590262][T12371] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 491.659654][T12374] ubi0: detaching mtd0 [ 491.663817][T12382] ubi0: background thread "ubi_bgt0d" started, PID 12382 [ 491.717264][T12374] ubi0: mtd0 is detached [ 491.784020][T12379] ubi0: attaching mtd0 [ 491.845231][T12379] ubi0: scanning is finished [ 492.183963][T12379] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 492.230486][T12411] kexec: Could not allocate control_code_buffer [ 492.326559][T12379] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 492.467431][T12379] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 492.548778][T12379] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 492.565310][T12422] futex_wake_op: syz.2.1355 tries to shift op by -2048; fix this program [ 492.622043][T12379] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 492.697885][T12379] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 492.764357][T12379] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2665595854 [ 492.818673][T12379] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 492.918512][T12380] ubi0: detaching mtd0 [ 492.924372][T12417] ubi0: background thread "ubi_bgt0d" started, PID 12417 [ 493.007595][T12380] ubi0: mtd0 is detached [ 493.456450][T12432] ubi0: attaching mtd0 [ 493.479695][T12432] ubi0: scanning is finished [ 493.608386][T12432] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 493.660396][T12432] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 493.712085][T12432] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 493.806844][T12432] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 493.892438][T12432] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 493.965960][T12432] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 494.057052][T12432] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2665595854 [ 494.245436][T12432] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 494.390360][T12437] ubi0: detaching mtd0 [ 494.397520][T12453] ubi0: background thread "ubi_bgt0d" started, PID 12453 [ 494.466650][T12437] ubi0: mtd0 is detached [ 494.685178][T12488] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input53 [ 495.112647][T12497] ubi0: attaching mtd0 [ 495.142061][T12497] ubi0: scanning is finished [ 495.295503][T12497] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 495.354789][T12497] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 495.427315][T12497] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 495.469869][T12497] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 495.528462][T12497] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 495.600313][T12497] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 495.673507][T12497] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2665595854 [ 495.778264][T12497] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 495.790053][T12516] nbd: socks must be embedded in a SOCK_ITEM attr [ 495.883363][T12485] ubi0: detaching mtd0 [ 495.887522][T12508] ubi0: background thread "ubi_bgt0d" started, PID 12508 [ 495.967020][T12485] ubi0: mtd0 is detached [ 496.358471][T12530] FAULT_INJECTION: forcing a failure. [ 496.358471][T12530] name fail_futex, interval 1, probability 0, space 0, times 1 [ 496.423430][T12530] CPU: 0 UID: 0 PID: 12530 Comm: syz.3.1377 Not tainted syzkaller #0 PREEMPT(full) [ 496.423453][T12530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 496.423462][T12530] Call Trace: [ 496.423468][T12530] [ 496.423474][T12530] dump_stack_lvl+0x100/0x190 [ 496.423497][T12530] should_fail_ex.cold+0x5/0xa [ 496.423517][T12530] get_futex_key+0x1d2/0x1510 [ 496.423535][T12530] ? __pfx_get_futex_key+0x10/0x10 [ 496.423550][T12530] ? strnlen_user+0x55/0x190 [ 496.423566][T12530] ? futex_hash+0x141/0x370 [ 496.423578][T12530] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 496.423598][T12530] ? ex_handler_uaccess.isra.0+0xfa/0x200 [ 496.423621][T12530] futex_wake+0xea/0x530 [ 496.423642][T12530] ? __pfx_futex_wake+0x10/0x10 [ 496.423661][T12530] ? __bad_area_nosemaphore+0x320/0x3f0 [ 496.423679][T12530] ? rcu_is_watching+0x12/0xc0 [ 496.423698][T12530] ? irqentry_exit+0x246/0x790 [ 496.423716][T12530] ? lockdep_hardirqs_on+0x78/0x100 [ 496.423737][T12530] do_futex+0x32b/0x350 [ 496.423752][T12530] ? __pfx_do_futex+0x10/0x10 [ 496.423774][T12530] __x64_sys_futex+0x34f/0x4d0 [ 496.423793][T12530] ? __pfx___x64_sys_futex+0x10/0x10 [ 496.423810][T12530] ? strndup_user+0x5a/0xe0 [ 496.423828][T12530] ? rcu_is_watching+0x12/0xc0 [ 496.423847][T12530] do_syscall_64+0x10b/0xf80 [ 496.423865][T12530] ? clear_bhb_loop+0x40/0x90 [ 496.423883][T12530] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.423898][T12530] RIP: 0033:0x7f48d6f9cdd9 [ 496.423911][T12530] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 496.423926][T12530] RSP: 002b:00007f48d7f130e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 496.423941][T12530] RAX: ffffffffffffffda RBX: 00007f48d7216098 RCX: 00007f48d6f9cdd9 [ 496.423951][T12530] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f48d721609c [ 496.423960][T12530] RBP: 00007f48d7216090 R08: 0000000000000001 R09: 0000000000000000 [ 496.423969][T12530] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 496.423978][T12530] R13: 00007f48d7216128 R14: 00007ffc985e54c0 R15: 00007ffc985e55a8 [ 496.423997][T12530] [ 497.549110][T12540] usb usb21: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 498.615718][T12563] : Can't lookup blockdev [ 499.285489][T12570] ubi0: attaching mtd0 [ 499.301878][T12570] ubi0: scanning is finished [ 499.415725][T12576] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1389'. [ 499.436521][T12570] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 499.456624][T12576] netlink: 29 bytes leftover after parsing attributes in process `syz.0.1389'. [ 499.478199][T12570] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 499.522331][T12570] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 499.608974][T12570] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 499.734197][T12570] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 499.828378][T12570] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 499.930109][T12570] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2665595854 [ 500.104905][T12570] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 500.239616][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 500.250720][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 500.321140][T12581] ubi0: background thread "ubi_bgt0d" started, PID 12581 [ 500.337751][T12566] ubi0: detaching mtd0 [ 500.427188][T12566] ubi0: mtd0 is detached [ 502.136138][T12630] ubi0: attaching mtd0 [ 502.152782][T12630] ubi0: scanning is finished [ 502.267624][T12630] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 502.302017][T12630] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 502.356446][T12630] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 502.432979][T12630] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 502.528366][T12638] nbd: socks must be embedded in a SOCK_ITEM attr [ 502.542888][T12630] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 502.627350][T12630] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 502.718876][T12630] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2665595854 [ 502.864667][T12630] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 502.951213][T12631] ubi0: detaching mtd0 [ 502.957796][T12633] ubi0: background thread "ubi_bgt0d" started, PID 12633 [ 503.014449][T12631] ubi0: mtd0 is detached [ 503.876114][T12660] FAULT_INJECTION: forcing a failure. [ 503.876114][T12660] name failslab, interval 1, probability 0, space 0, times 0 [ 503.961660][T12660] CPU: 0 UID: 0 PID: 12660 Comm: syz.1.1403 Not tainted syzkaller #0 PREEMPT(full) [ 503.961681][T12660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 503.961690][T12660] Call Trace: [ 503.961695][T12660] [ 503.961701][T12660] dump_stack_lvl+0x100/0x190 [ 503.961722][T12660] should_fail_ex.cold+0x5/0xa [ 503.961740][T12660] ? tomoyo_realpath_from_path+0xb6/0x690 [ 503.961759][T12660] should_failslab+0xc2/0x120 [ 503.961775][T12660] __kmalloc_noprof+0xe0/0x850 [ 503.961797][T12660] ? kfree+0x1dd/0x6c0 [ 503.961820][T12660] tomoyo_realpath_from_path+0xb6/0x690 [ 503.961842][T12660] tomoyo_path_number_perm+0x23c/0x580 [ 503.961855][T12660] ? tomoyo_path_number_perm+0x22e/0x580 [ 503.961871][T12660] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 503.961903][T12660] ? find_held_lock+0x2b/0x80 [ 503.961922][T12660] ? __fget_files+0x215/0x3d0 [ 503.961938][T12660] ? hook_file_ioctl_common+0x149/0x410 [ 503.961952][T12660] ? __fget_files+0x215/0x3d0 [ 503.961971][T12660] ? __fget_files+0x21f/0x3d0 [ 503.961991][T12660] security_file_ioctl+0xd3/0x230 [ 503.962009][T12660] __x64_sys_ioctl+0xb7/0x210 [ 503.962025][T12660] do_syscall_64+0x10b/0xf80 [ 503.962044][T12660] ? clear_bhb_loop+0x40/0x90 [ 503.962078][T12660] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 503.962092][T12660] RIP: 0033:0x7fc2ebb9cdd9 [ 503.962105][T12660] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 503.962118][T12660] RSP: 002b:00007fc2eca3b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 503.962132][T12660] RAX: ffffffffffffffda RBX: 00007fc2ebe16180 RCX: 00007fc2ebb9cdd9 [ 503.962142][T12660] RDX: 0000000000000000 RSI: 0000000000001261 RDI: 000000000000000a [ 503.962150][T12660] RBP: 00007fc2eca3b090 R08: 0000000000000000 R09: 0000000000000000 [ 503.962159][T12660] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 503.962167][T12660] R13: 00007fc2ebe16218 R14: 00007fc2ebe16180 R15: 00007fff9a1dfc28 [ 503.962186][T12660] [ 503.962192][T12660] ERROR: Out of memory at tomoyo_realpath_from_path. [ 505.760636][T12676] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3315741749 (6631483498 ns) > initial count (2961401530 ns). Using initial count to start timer. [ 508.604909][T12741] FAULT_INJECTION: forcing a failure. [ 508.604909][T12741] name failslab, interval 1, probability 0, space 0, times 0 [ 508.687536][T12741] CPU: 0 UID: 0 PID: 12741 Comm: syz.3.1423 Not tainted syzkaller #0 PREEMPT(full) [ 508.687559][T12741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 508.687568][T12741] Call Trace: [ 508.687573][T12741] [ 508.687579][T12741] dump_stack_lvl+0x100/0x190 [ 508.687601][T12741] should_fail_ex.cold+0x5/0xa [ 508.687619][T12741] ? tomoyo_realpath_from_path+0xb6/0x690 [ 508.687637][T12741] should_failslab+0xc2/0x120 [ 508.687655][T12741] __kmalloc_noprof+0xe0/0x850 [ 508.687681][T12741] ? kfree+0x1dd/0x6c0 [ 508.687703][T12741] tomoyo_realpath_from_path+0xb6/0x690 [ 508.687725][T12741] tomoyo_path_number_perm+0x23c/0x580 [ 508.687739][T12741] ? tomoyo_path_number_perm+0x22e/0x580 [ 508.687754][T12741] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 508.687787][T12741] ? find_held_lock+0x2b/0x80 [ 508.687805][T12741] ? __fget_files+0x215/0x3d0 [ 508.687822][T12741] ? hook_file_ioctl_common+0x149/0x410 [ 508.687836][T12741] ? __fget_files+0x215/0x3d0 [ 508.687855][T12741] ? __fget_files+0x21f/0x3d0 [ 508.687874][T12741] security_file_ioctl+0xd3/0x230 [ 508.687895][T12741] __x64_sys_ioctl+0xb7/0x210 [ 508.687912][T12741] do_syscall_64+0x10b/0xf80 [ 508.687930][T12741] ? clear_bhb_loop+0x40/0x90 [ 508.687949][T12741] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 508.687963][T12741] RIP: 0033:0x7f48d6f9cdd9 [ 508.687976][T12741] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 508.687990][T12741] RSP: 002b:00007f48d7f34028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 508.688004][T12741] RAX: ffffffffffffffda RBX: 00007f48d7215fa0 RCX: 00007f48d6f9cdd9 [ 508.688013][T12741] RDX: 0000000000000000 RSI: 0000000000001267 RDI: 0000000000000003 [ 508.688021][T12741] RBP: 00007f48d7f34090 R08: 0000000000000000 R09: 0000000000000000 [ 508.688030][T12741] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 508.688038][T12741] R13: 00007f48d7216038 R14: 00007f48d7215fa0 R15: 00007ffc985e55a8 [ 508.688062][T12741] [ 509.596606][T12755] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input54 [ 509.654467][T12741] ERROR: Out of memory at tomoyo_realpath_from_path. [ 509.946909][T12765] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input55 [ 511.076391][T12789] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 511.119371][T12789] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 511.164639][T12789] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 511.185189][T12789] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 512.637941][ T5627] Bluetooth: hci0: command 0x0406 tx timeout [ 513.024216][T12848] ubi0: attaching mtd0 [ 513.046783][T12848] ubi0: scanning is finished [ 513.117811][ T5627] Bluetooth: hci1: command 0x0406 tx timeout [ 513.196981][T12848] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 513.204969][ T5627] Bluetooth: hci3: command 0x0406 tx timeout [ 513.211225][ T5627] Bluetooth: hci2: command 0x0406 tx timeout [ 513.247751][T12848] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 513.303707][T12848] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 513.353216][T12848] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 513.415035][T12848] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 513.462444][T12848] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 513.606306][T12848] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2665595854 [ 513.733520][T12848] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 513.846071][T12844] ubi: mtd0 is already attached to ubi0 [ 513.852394][T12851] ubi0: background thread "ubi_bgt0d" started, PID 12851 [ 513.876430][T12845] ubi0: detaching mtd0 [ 513.908383][T12845] ubi0: mtd0 is detached [ 515.091774][T12883] ================================================================== [ 515.099865][T12883] BUG: KASAN: slab-out-of-bounds in cache_seq_start_rcu+0x3fe/0x420 [ 515.107868][T12883] Read of size 8 at addr ffff888035d59800 by task syz.3.1452/12883 [ 515.115735][T12883] [ 515.118046][T12883] CPU: 0 UID: 0 PID: 12883 Comm: syz.3.1452 Not tainted syzkaller #0 PREEMPT(full) [ 515.118063][T12883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 515.118072][T12883] Call Trace: [ 515.118078][T12883] [ 515.118084][T12883] dump_stack_lvl+0x100/0x190 [ 515.118101][T12883] print_report+0x13d/0x4b0 [ 515.118122][T12883] ? __virt_addr_valid+0x239/0x430 [ 515.118146][T12883] ? cache_seq_start_rcu+0x3fe/0x420 [ 515.118166][T12883] kasan_report+0xdf/0x1d0 [ 515.118183][T12883] ? cache_seq_start_rcu+0x3fe/0x420 [ 515.118205][T12883] cache_seq_start_rcu+0x3fe/0x420 [ 515.118227][T12883] seq_read_iter+0x2c1/0x1270 [ 515.118246][T12883] seq_read+0x33b/0x4c0 [ 515.118260][T12883] ? __pfx_seq_read+0x10/0x10 [ 515.118279][T12883] ? __pfx_seq_read+0x10/0x10 [ 515.118293][T12883] proc_reg_read+0x240/0x330 [ 515.118309][T12883] ? __pfx_proc_reg_read+0x10/0x10 [ 515.118326][T12883] vfs_read+0x1e4/0xb30 [ 515.118342][T12883] ? __pfx_vfs_read+0x10/0x10 [ 515.118356][T12883] ? find_held_lock+0x2b/0x80 [ 515.118374][T12883] ? __fget_files+0x215/0x3d0 [ 515.118390][T12883] ? __fget_files+0x215/0x3d0 [ 515.118406][T12883] ? __fget_files+0x21f/0x3d0 [ 515.118424][T12883] __x64_sys_pread64+0x1eb/0x250 [ 515.118440][T12883] ? __pfx___x64_sys_pread64+0x10/0x10 [ 515.118463][T12883] ? rcu_is_watching+0x12/0xc0 [ 515.118481][T12883] do_syscall_64+0x10b/0xf80 [ 515.118499][T12883] ? clear_bhb_loop+0x40/0x90 [ 515.118515][T12883] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.118529][T12883] RIP: 0033:0x7f48d6f9cdd9 [ 515.118541][T12883] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 515.118556][T12883] RSP: 002b:00007f48d7f13028 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 515.118570][T12883] RAX: ffffffffffffffda RBX: 00007f48d7216090 RCX: 00007f48d6f9cdd9 [ 515.118580][T12883] RDX: 000000000000f42c RSI: 0000000000000000 RDI: 0000000000000020 [ 515.118588][T12883] RBP: 00007f48d7032d69 R08: 0000000000000000 R09: 0000000000000000 [ 515.118597][T12883] R10: 0000000000000038 R11: 0000000000000246 R12: 0000000000000000 [ 515.118605][T12883] R13: 00007f48d7216128 R14: 00007f48d7216090 R15: 00007ffc985e55a8 [ 515.118619][T12883] [ 515.118623][T12883] [ 515.340652][T12883] Allocated by task 5626: [ 515.344966][T12883] kasan_save_stack+0x30/0x50 [ 515.349626][T12883] kasan_save_track+0x14/0x30 [ 515.354279][T12883] __kasan_kmalloc+0xaa/0xb0 [ 515.358849][T12883] __kmalloc_noprof+0x301/0x850 [ 515.363685][T12883] cache_create_net+0xa2/0x1f0 [ 515.368437][T12883] ip_map_cache_create+0x60/0x130 [ 515.373453][T12883] sunrpc_init_net+0x55/0x190 [ 515.378113][T12883] ops_init+0x1e2/0x5f0 [ 515.382248][T12883] setup_net+0x118/0x3a0 [ 515.386468][T12883] copy_net_ns+0x46f/0x7c0 [ 515.390865][T12883] create_new_namespaces+0x3ea/0xac0 [ 515.396132][T12883] unshare_nsproxy_namespaces+0xf2/0x220 [ 515.401749][T12883] ksys_unshare+0x438/0xab0 [ 515.406238][T12883] __x64_sys_unshare+0x31/0x40 [ 515.410987][T12883] do_syscall_64+0x10b/0xf80 [ 515.415559][T12883] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.421438][T12883] [ 515.423742][T12883] The buggy address belongs to the object at ffff888035d59000 [ 515.423742][T12883] which belongs to the cache kmalloc-2k of size 2048 [ 515.437774][T12883] The buggy address is located 0 bytes to the right of [ 515.437774][T12883] allocated 2048-byte region [ffff888035d59000, ffff888035d59800) [ 515.452328][T12883] [ 515.454638][T12883] The buggy address belongs to the physical page: [ 515.461023][T12883] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x35d58 [ 515.469764][T12883] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 515.478242][T12883] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 515.485772][T12883] page_type: f5(slab) [ 515.489737][T12883] raw: 00fff00000000040 ffff88813fe2f000 dead000000000100 dead000000000122 [ 515.498304][T12883] raw: 0000000000000000 0000000800080008 00000000f5000000 0000000000000000 [ 515.506865][T12883] head: 00fff00000000040 ffff88813fe2f000 dead000000000100 dead000000000122 [ 515.515514][T12883] head: 0000000000000000 0000000800080008 00000000f5000000 0000000000000000 [ 515.524164][T12883] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 515.532814][T12883] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 515.541459][T12883] page dumped because: kasan: bad access detected [ 515.547858][T12883] page_owner tracks the page as allocated [ 515.553548][T12883] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5626, tgid 5626 (syz-executor), ts 75622117545, free_ts 74849868988 [ 515.574885][T12883] post_alloc_hook+0x153/0x170 [ 515.579639][T12883] get_page_from_freelist+0x11a6/0x33b0 [ 515.585177][T12883] __alloc_frozen_pages_noprof+0x27c/0x2bc0 [ 515.591055][T12883] new_slab+0xa6/0x6c0 [ 515.595114][T12883] refill_objects+0x277/0x420 [ 515.599776][T12883] __pcs_replace_empty_main+0x375/0x650 [ 515.605320][T12883] __kmalloc_cache_noprof+0x493/0x6f0 [ 515.610677][T12883] fib_net_init+0x1a4/0x3f0 [ 515.615162][T12883] ops_init+0x1e2/0x5f0 [ 515.619298][T12883] setup_net+0x118/0x3a0 [ 515.623519][T12883] copy_net_ns+0x46f/0x7c0 [ 515.627914][T12883] create_new_namespaces+0x3ea/0xac0 [ 515.633183][T12883] unshare_nsproxy_namespaces+0xf2/0x220 [ 515.638799][T12883] ksys_unshare+0x438/0xab0 [ 515.643296][T12883] __x64_sys_unshare+0x31/0x40 [ 515.648046][T12883] do_syscall_64+0x10b/0xf80 [ 515.652621][T12883] page last free pid 5625 tgid 5625 stack trace: [ 515.658920][T12883] __free_frozen_pages+0x747/0x1040 [ 515.664102][T12883] qlist_free_all+0x47/0xf0 [ 515.668596][T12883] kasan_quarantine_reduce+0x1a0/0x1f0 [ 515.674043][T12883] __kasan_slab_alloc+0x69/0x90 [ 515.678871][T12883] __kmalloc_noprof+0x2b9/0x850 [ 515.683708][T12883] tomoyo_encode2+0xfb/0x3c0 [ 515.688281][T12883] tomoyo_encode+0x29/0x50 [ 515.692678][T12883] tomoyo_mount_acl+0x388/0x8b0 [ 515.697508][T12883] tomoyo_mount_permission+0x214/0x460 [ 515.702945][T12883] security_sb_mount+0xdd/0x270 [ 515.707783][T12883] path_mount+0x158/0x23d0 [ 515.712185][T12883] __x64_sys_mount+0x293/0x310 [ 515.716933][T12883] do_syscall_64+0x10b/0xf80 [ 515.721507][T12883] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.727383][T12883] [ 515.729687][T12883] Memory state around the buggy address: [ 515.735295][T12883] ffff888035d59700: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 515.743334][T12883] ffff888035d59780: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 515.751376][T12883] >ffff888035d59800: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 515.759418][T12883] ^ [ 515.763461][T12883] ffff888035d59880: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 515.771499][T12883] ffff888035d59900: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 515.779536][T12883] ================================================================== [ 516.795430][T12883] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 516.802653][T12883] CPU: 0 UID: 0 PID: 12883 Comm: syz.3.1452 Not tainted syzkaller #0 PREEMPT(full) [ 516.812090][T12883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 516.822122][T12883] Call Trace: [ 516.825380][T12883] [ 516.828291][T12883] dump_stack_lvl+0x100/0x190 [ 516.832953][T12883] vpanic+0x552/0x970 [ 516.836914][T12883] ? __pfx_vpanic+0x10/0x10 [ 516.841397][T12883] ? cache_seq_start_rcu+0x3fe/0x420 [ 516.846669][T12883] panic+0xd1/0xe0 [ 516.850368][T12883] ? __pfx_panic+0x10/0x10 [ 516.854762][T12883] ? cache_seq_start_rcu+0x3fe/0x420 [ 516.860035][T12883] ? preempt_schedule_common+0x42/0xc0 [ 516.865510][T12883] ? check_panic_on_warn+0x1f/0x90 [ 516.870601][T12883] check_panic_on_warn.cold+0x19/0x34 [ 516.875953][T12883] end_report.part.0+0x3a/0x90 [ 516.880701][T12883] kasan_report.cold+0xe/0x18 [ 516.885365][T12883] ? cache_seq_start_rcu+0x3fe/0x420 [ 516.890642][T12883] cache_seq_start_rcu+0x3fe/0x420 [ 516.895744][T12883] seq_read_iter+0x2c1/0x1270 [ 516.900409][T12883] seq_read+0x33b/0x4c0 [ 516.904545][T12883] ? __pfx_seq_read+0x10/0x10 [ 516.909206][T12883] ? __pfx_seq_read+0x10/0x10 [ 516.913862][T12883] proc_reg_read+0x240/0x330 [ 516.918435][T12883] ? __pfx_proc_reg_read+0x10/0x10 [ 516.923527][T12883] vfs_read+0x1e4/0xb30 [ 516.927664][T12883] ? __pfx_vfs_read+0x10/0x10 [ 516.932319][T12883] ? find_held_lock+0x2b/0x80 [ 516.936991][T12883] ? __fget_files+0x215/0x3d0 [ 516.941669][T12883] ? __fget_files+0x215/0x3d0 [ 516.946343][T12883] ? __fget_files+0x21f/0x3d0 [ 516.951023][T12883] __x64_sys_pread64+0x1eb/0x250 [ 516.955955][T12883] ? __pfx___x64_sys_pread64+0x10/0x10 [ 516.961405][T12883] ? rcu_is_watching+0x12/0xc0 [ 516.966164][T12883] do_syscall_64+0x10b/0xf80 [ 516.970739][T12883] ? clear_bhb_loop+0x40/0x90 [ 516.975399][T12883] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.981274][T12883] RIP: 0033:0x7f48d6f9cdd9 [ 516.985670][T12883] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 517.005255][T12883] RSP: 002b:00007f48d7f13028 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 517.013649][T12883] RAX: ffffffffffffffda RBX: 00007f48d7216090 RCX: 00007f48d6f9cdd9 [ 517.021602][T12883] RDX: 000000000000f42c RSI: 0000000000000000 RDI: 0000000000000020 [ 517.029551][T12883] RBP: 00007f48d7032d69 R08: 0000000000000000 R09: 0000000000000000 [ 517.037524][T12883] R10: 0000000000000038 R11: 0000000000000246 R12: 0000000000000000 [ 517.045478][T12883] R13: 00007f48d7216128 R14: 00007f48d7216090 R15: 00007ffc985e55a8 [ 517.053442][T12883] [ 517.056506][T12883] Kernel Offset: disabled [ 517.060817][T12883] Rebooting in 86400 seconds..